$ rpki-client -vvf rpki-repo.registro.br/repo/vLH8KDuaNSxHUvzcskqyjyEpripEDeGuVeRbGPRdGp6/0/BA0000290CCA847B173A7D196F03889806E7091A.mft File: BA0000290CCA847B173A7D196F03889806E7091A.mft (raw, json) Hash identifier: 4R8sue304HFqjOkfG1aVxBZ5p0fh5jWOvBU9k9Rt6nM= Subject key identifier: 49:E2:F9:A2:B9:7C:7B:76:66:03:64:50:5E:9E:E7:19:6C:19:32:78 Authority key identifier: BA:00:00:29:0C:CA:84:7B:17:3A:7D:19:6F:03:88:98:06:E7:09:1A Certificate issuer: /CN=BA0000290CCA847B173A7D196F03889806E7091A Certificate serial: 6868282C7A45AED1631FD8269BE7D8A815C04A59 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA0000290CCA847B173A7D196F03889806E7091A.cer Subject info access: rsync://rpki-repo.registro.br/repo/vLH8KDuaNSxHUvzcskqyjyEpripEDeGuVeRbGPRdGp6/0/BA0000290CCA847B173A7D196F03889806E7091A.mft Manifest number: 0276 Signing time: Wed 05 Nov 2025 03:29:16 +0000 Manifest this update: Wed 05 Nov 2025 03:24:16 +0000 Manifest next update: Thu 06 Nov 2025 04:17:16 +0000 Files and hashes: 1: BA0000290CCA847B173A7D196F03889806E7091A.crl (hash: lB+VJnxfKNDQq+TwoQYZqOC0NPtt+cMZ/RrbcbyGPNk=) 2: 3138362e3232342e3234302e302f32302d3234203d3e20323632373538.roa (hash: GlYV7CMqkMEAod4viUcwiHDE80QdyRhHaF4PZVAn6P4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/vLH8KDuaNSxHUvzcskqyjyEpripEDeGuVeRbGPRdGp6/0/BA0000290CCA847B173A7D196F03889806E7091A.crl rsync://rpki-repo.registro.br/repo/vLH8KDuaNSxHUvzcskqyjyEpripEDeGuVeRbGPRdGp6/0/BA0000290CCA847B173A7D196F03889806E7091A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA0000290CCA847B173A7D196F03889806E7091A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 04:17:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:68:28:2c:7a:45:ae:d1:63:1f:d8:26:9b:e7:d8:a8:15:c0:4a:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA0000290CCA847B173A7D196F03889806E7091A Validity Not Before: Nov 5 03:24:16 2025 GMT Not After : Nov 6 04:17:16 2025 GMT Subject: CN=49E2F9A2B97C7B76660364505E9EE7196C193278 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:11:f8:be:d4:a5:60:e1:af:cc:4e:5e:df:68: af:4a:b9:eb:40:61:1c:44:89:ee:07:00:ae:78:39: 28:a4:a1:ff:b1:53:e9:32:40:0f:48:4c:db:f4:bf: 3a:91:cf:0e:1c:a3:c7:a2:48:e3:bc:ec:fb:9f:12: ac:e1:bf:8f:1b:7c:f4:78:99:05:47:0f:c6:97:6f: 58:c0:40:7d:d3:48:4e:0c:dd:db:f0:fa:89:06:c0: 89:79:3b:b4:50:d7:45:75:05:01:3a:8a:c4:ed:b7: 94:a2:93:ba:74:86:52:52:28:72:39:36:6c:f3:08: 86:00:96:ff:90:d1:cf:05:84:83:ab:d9:e7:df:de: c8:45:5d:d6:f0:23:a0:e4:61:27:22:94:ad:39:62: e7:8b:07:a0:c2:ff:b8:25:61:fe:2e:7e:e9:af:b5: 95:d8:1c:bb:ea:72:2d:35:05:bc:8c:b6:d2:fe:27: 71:23:ed:57:ee:4f:c5:76:69:87:8e:3f:41:e8:58: 50:2f:92:64:56:b6:ab:ab:9d:d8:9c:81:48:6c:b9: 73:dc:c7:d3:d0:b8:22:cb:c2:bf:36:09:c9:31:2d: 1d:3d:07:ce:4d:9c:15:90:02:28:de:6b:78:cf:71: 8d:b2:22:bd:03:64:2a:9a:ff:61:10:97:13:3b:53: 7f:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:E2:F9:A2:B9:7C:7B:76:66:03:64:50:5E:9E:E7:19:6C:19:32:78 X509v3 Authority Key Identifier: keyid:BA:00:00:29:0C:CA:84:7B:17:3A:7D:19:6F:03:88:98:06:E7:09:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/vLH8KDuaNSxHUvzcskqyjyEpripEDeGuVeRbGPRdGp6/0/BA0000290CCA847B173A7D196F03889806E7091A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA0000290CCA847B173A7D196F03889806E7091A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/vLH8KDuaNSxHUvzcskqyjyEpripEDeGuVeRbGPRdGp6/0/BA0000290CCA847B173A7D196F03889806E7091A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:82:b2:ff:6e:4f:ec:0d:ee:27:67:3c:98:5c:61:b7:8a:a9: 74:5a:54:f2:94:ac:64:3a:12:0e:35:0c:79:7d:af:82:9d:be: 2d:14:48:0a:3a:45:e9:ec:25:35:14:4b:3c:34:76:7e:15:a1: 17:81:69:09:17:83:78:23:48:9e:c8:08:b0:7c:fc:84:56:49: df:c5:b6:d4:84:1e:68:e1:34:5a:fe:e0:d5:a0:14:05:7c:72: 76:68:44:8e:84:03:0f:cd:4b:b6:d1:fb:54:15:31:5c:bb:06: 1f:6f:73:d1:7d:91:bf:3b:41:d3:b8:04:b9:c1:6e:f8:01:6e: 60:f8:ad:20:4f:06:ac:96:0e:d7:59:90:1a:e6:37:33:67:ce: 52:11:de:0d:ea:91:79:15:42:33:9d:68:35:1c:1f:e9:2c:36: 28:38:27:6f:0f:2d:07:ec:f7:8a:d2:32:15:a0:7a:28:39:d4: 61:59:cf:9f:c6:a8:d2:00:bb:aa:78:07:d0:a7:d2:fe:b4:37: 0d:b3:9a:77:bb:0d:0a:49:a4:23:5a:60:2a:e4:d5:03:f2:81: 81:49:26:51:fc:8d:fc:29:11:9a:0e:12:1f:ce:d6:34:0c:19: d2:0c:4d:4b:c4:dc:f0:5e:6b:da:e8:84:56:74:00:6e:69:3f: 4d:d7:c1:32 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUaGgoLHpFrtFjH9gmm+fYqBXASlkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkEwMDAwMjkwQ0NBODQ3QjE3M0E3RDE5NkYwMzg4OTgw NkU3MDkxQTAeFw0yNTExMDUwMzI0MTZaFw0yNTExMDYwNDE3MTZaMDMxMTAvBgNV BAMTKDQ5RTJGOUEyQjk3QzdCNzY2NjAzNjQ1MDVFOUVFNzE5NkMxOTMyNzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsEfi+1KVg4a/MTl7faK9KuetA YRxEie4HAK54OSikof+xU+kyQA9ITNv0vzqRzw4co8eiSOO87PufEqzhv48bfPR4 mQVHD8aXb1jAQH3TSE4M3dvw+okGwIl5O7RQ10V1BQE6isTtt5Sik7p0hlJSKHI5 NmzzCIYAlv+Q0c8FhIOr2eff3shFXdbwI6DkYScilK05YueLB6DC/7glYf4ufumv tZXYHLvqci01BbyMttL+J3Ej7VfuT8V2aYeOP0HoWFAvkmRWtqurndicgUhsuXPc x9PQuCLLwr82CckxLR09B85NnBWQAijea3jPcY2yIr0DZCqa/2EQlxM7U38hAgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUSeL5orl8e3ZmA2RQXp7nGWwZMngwHwYDVR0j BBgwFoAUugAAKQzKhHsXOn0ZbwOImAbnCRowDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby92TEg4S0R1YU5TeEhVdnpjc2txeWp5RXByaXBFRGVHdVZlUmJHUFJkR3A2 LzAvQkEwMDAwMjkwQ0NBODQ3QjE3M0E3RDE5NkYwMzg4OTgwNkU3MDkxQS5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9CQTAwMDAyOTBDQ0E4NDdCMTcz QTdEMTk2RjAzODg5ODA2RTcwOTFBLmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL3ZM SDhLRHVhTlN4SFV2emNza3F5anlFcHJpcEVEZUd1VmVSYkdQUmRHcDYvMC9CQTAw MDAyOTBDQ0E4NDdCMTczQTdEMTk2RjAzODg5ODA2RTcwOTFBLm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA IIKy/25P7A3uJ2c8mFxht4qpdFpU8pSsZDoSDjUMeX2vgp2+LRRICjpF6ewlNRRL PDR2fhWhF4FpCReDeCNInsgIsHz8hFZJ38W21IQeaOE0Wv7g1aAUBXxydmhEjoQD D81LttH7VBUxXLsGH29z0X2RvztB07gEucFu+AFuYPitIE8GrJYO11mQGuY3M2fO UhHeDeqReRVCM51oNRwf6Sw2KDgnbw8tB+z3itIyFaB6KDnUYVnPn8ao0gC7qngH 0KfS/rQ3DbOad7sNCkmkI1pgKuTVA/KBgUkmUfyN/CkRmg4SH87WNAwZ0gxNS8Tc 8F5r2uiEVnQAbmk/TdfBMg== -----END CERTIFICATE-----Generated at Wed Nov 5 17:03:04 2025 by rpki-client