$ rpki-client -vvf rpki-repo.registro.br/repo/vLH8KDuaNSxHUvzcskqyjyEpripEDeGuVeRbGPRdGp6/0/BA0000290CCA847B173A7D196F03889806E7091A.mft File: BA0000290CCA847B173A7D196F03889806E7091A.mft (raw, json) Hash identifier: zKs+jHvAIbCzTO8BiWpgRUU+Bm5xdi0NH1SHNSpJAPE= Subject key identifier: C6:55:82:E5:56:BE:0A:CA:29:F6:6F:E6:EA:FC:41:A3:87:E2:CB:BF Authority key identifier: BA:00:00:29:0C:CA:84:7B:17:3A:7D:19:6F:03:88:98:06:E7:09:1A Certificate issuer: /CN=BA0000290CCA847B173A7D196F03889806E7091A Certificate serial: 71443AE948BF1D9FF8E23EAD8FA0D1F13D5D9EAB Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA0000290CCA847B173A7D196F03889806E7091A.cer Subject info access: rsync://rpki-repo.registro.br/repo/vLH8KDuaNSxHUvzcskqyjyEpripEDeGuVeRbGPRdGp6/0/BA0000290CCA847B173A7D196F03889806E7091A.mft Manifest number: 0204 Signing time: Sun 10 Aug 2025 12:18:12 +0000 Manifest this update: Sun 10 Aug 2025 12:13:12 +0000 Manifest next update: Mon 11 Aug 2025 12:29:12 +0000 Files and hashes: 1: BA0000290CCA847B173A7D196F03889806E7091A.crl (hash: nlWpJ9faVsm6vOkapwEW/LXZCB0W0vcXz1NnlxYKt5o=) 2: 3138362e3232342e3234302e302f32302d3234203d3e20323632373538.roa (hash: GlYV7CMqkMEAod4viUcwiHDE80QdyRhHaF4PZVAn6P4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/vLH8KDuaNSxHUvzcskqyjyEpripEDeGuVeRbGPRdGp6/0/BA0000290CCA847B173A7D196F03889806E7091A.crl rsync://rpki-repo.registro.br/repo/vLH8KDuaNSxHUvzcskqyjyEpripEDeGuVeRbGPRdGp6/0/BA0000290CCA847B173A7D196F03889806E7091A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA0000290CCA847B173A7D196F03889806E7091A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 11 Aug 2025 12:29:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:44:3a:e9:48:bf:1d:9f:f8:e2:3e:ad:8f:a0:d1:f1:3d:5d:9e:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA0000290CCA847B173A7D196F03889806E7091A Validity Not Before: Aug 10 12:13:12 2025 GMT Not After : Aug 11 12:29:12 2025 GMT Subject: CN=C65582E556BE0ACA29F66FE6EAFC41A387E2CBBF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:1a:4b:41:c4:0d:be:17:76:af:3b:a4:f9:15: 04:cb:f1:e1:03:cd:fd:3d:1f:3c:53:94:ef:b5:a3: b0:0d:0c:c6:9d:b9:71:82:0a:dd:90:08:d5:f7:a9: 4d:a0:ec:f7:14:b5:4b:32:d6:ff:0f:a7:a8:fa:21: 1f:8a:d3:a8:4a:e4:fd:0b:17:05:10:91:03:1a:d1: bf:71:4d:f3:2e:49:e8:05:40:fc:81:db:c6:10:27: 63:b4:79:fc:32:8d:ed:59:88:52:ce:2d:0a:31:16: 3d:d6:37:29:80:89:c5:fa:4b:6c:70:88:28:8f:fd: 34:bc:1b:df:6c:3f:47:35:c1:8f:bf:07:15:07:b5: 6d:fb:1c:96:eb:53:44:3d:d8:fa:c6:ea:f7:d6:bb: b7:14:f0:6e:00:d5:3f:1f:76:f6:dc:51:3d:5a:07: 5e:92:70:3f:fb:e2:12:14:21:3c:50:8d:a5:c4:78: 78:e7:41:1a:15:a7:d0:1c:18:ba:51:3f:a9:99:d9: f1:f3:c2:fc:46:b0:c3:17:68:ab:24:dd:f9:b4:02: b0:d9:97:22:93:df:95:15:df:2e:bf:c4:80:39:4e: b6:a3:00:79:15:d8:54:97:97:25:43:4a:9f:e3:67: 48:8a:cd:61:77:6c:6f:3e:2c:16:4b:1f:1a:d5:b3: 15:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:55:82:E5:56:BE:0A:CA:29:F6:6F:E6:EA:FC:41:A3:87:E2:CB:BF X509v3 Authority Key Identifier: keyid:BA:00:00:29:0C:CA:84:7B:17:3A:7D:19:6F:03:88:98:06:E7:09:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/vLH8KDuaNSxHUvzcskqyjyEpripEDeGuVeRbGPRdGp6/0/BA0000290CCA847B173A7D196F03889806E7091A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA0000290CCA847B173A7D196F03889806E7091A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/vLH8KDuaNSxHUvzcskqyjyEpripEDeGuVeRbGPRdGp6/0/BA0000290CCA847B173A7D196F03889806E7091A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:98:55:cc:3f:ec:ed:f4:a2:59:fa:79:e7:6b:c9:89:56:3e: 13:72:e8:fe:6a:e1:27:63:30:c7:a6:02:ab:23:47:18:e9:00: d4:18:b9:da:ad:6a:e2:f6:5e:06:52:6c:54:1f:d6:19:60:58: 52:d4:a2:92:5e:e1:8d:33:8b:94:75:cd:19:59:aa:60:4c:22: 87:6c:83:a4:c4:57:60:9b:c0:9a:9c:18:12:59:30:f5:49:95: 30:bf:97:95:76:a3:41:d7:6e:8a:c1:a6:24:86:07:47:a2:74: cc:a2:6f:8e:5e:01:fa:19:57:bb:5b:0e:10:01:7d:74:41:b5: 91:32:b7:2c:ac:8e:2e:47:8a:46:0b:e7:2d:eb:35:9b:28:21: 9e:45:58:46:86:c5:69:3b:66:3e:6f:7b:66:e5:4d:d3:61:1d: b3:86:ef:b8:b0:4f:44:0c:0b:bb:09:36:11:24:c7:6e:82:7e: bc:59:52:cd:8d:f7:cf:73:c9:1f:5e:7d:0a:ba:c8:54:38:5d: 39:6f:2d:f0:d2:63:ea:aa:d3:34:f1:3a:9f:ad:29:16:6c:21: d6:2a:2e:ef:ea:d0:a6:41:97:8b:96:d8:1b:0d:05:65:15:63: 73:a7:db:56:0d:73:ca:9f:ff:81:00:33:37:67:dc:b9:55:b8: 07:aa:d1:4f -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUcUQ66Ui/HZ/44j6tj6DR8T1dnqswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkEwMDAwMjkwQ0NBODQ3QjE3M0E3RDE5NkYwMzg4OTgw NkU3MDkxQTAeFw0yNTA4MTAxMjEzMTJaFw0yNTA4MTExMjI5MTJaMDMxMTAvBgNV BAMTKEM2NTU4MkU1NTZCRTBBQ0EyOUY2NkZFNkVBRkM0MUEzODdFMkNCQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgGktBxA2+F3avO6T5FQTL8eED zf09HzxTlO+1o7ANDMaduXGCCt2QCNX3qU2g7PcUtUsy1v8Pp6j6IR+K06hK5P0L FwUQkQMa0b9xTfMuSegFQPyB28YQJ2O0efwyje1ZiFLOLQoxFj3WNymAicX6S2xw iCiP/TS8G99sP0c1wY+/BxUHtW37HJbrU0Q92PrG6vfWu7cU8G4A1T8fdvbcUT1a B16ScD/74hIUITxQjaXEeHjnQRoVp9AcGLpRP6mZ2fHzwvxGsMMXaKsk3fm0ArDZ lyKT35UV3y6/xIA5TrajAHkV2FSXlyVDSp/jZ0iKzWF3bG8+LBZLHxrVsxVPAgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUxlWC5Va+Csop9m/m6vxBo4fiy78wHwYDVR0j BBgwFoAUugAAKQzKhHsXOn0ZbwOImAbnCRowDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby92TEg4S0R1YU5TeEhVdnpjc2txeWp5RXByaXBFRGVHdVZlUmJHUFJkR3A2 LzAvQkEwMDAwMjkwQ0NBODQ3QjE3M0E3RDE5NkYwMzg4OTgwNkU3MDkxQS5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9CQTAwMDAyOTBDQ0E4NDdCMTcz QTdEMTk2RjAzODg5ODA2RTcwOTFBLmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL3ZM SDhLRHVhTlN4SFV2emNza3F5anlFcHJpcEVEZUd1VmVSYkdQUmRHcDYvMC9CQTAw MDAyOTBDQ0E4NDdCMTczQTdEMTk2RjAzODg5ODA2RTcwOTFBLm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA sphVzD/s7fSiWfp552vJiVY+E3Lo/mrhJ2Mwx6YCqyNHGOkA1Bi52q1q4vZeBlJs VB/WGWBYUtSikl7hjTOLlHXNGVmqYEwih2yDpMRXYJvAmpwYElkw9UmVML+XlXaj QdduisGmJIYHR6J0zKJvjl4B+hlXu1sOEAF9dEG1kTK3LKyOLkeKRgvnLes1mygh nkVYRobFaTtmPm97ZuVN02Eds4bvuLBPRAwLuwk2ESTHboJ+vFlSzY33z3PJH159 CrrIVDhdOW8t8NJj6qrTNPE6n60pFmwh1iou7+rQpkGXi5bYGw0FZRVjc6fbVg1z yp//gQAzN2fcuVW4B6rRTw== -----END CERTIFICATE-----Generated at Sun Aug 10 16:00:33 2025 by rpki-client