$ rpki-client -vvf rpki-repo.registro.br/repo/4pvH4MHZJZas4zHEgK2hMoy5gE5iQjdPTDp4EF96vecg/0/AA72ED85A93B5AABE6C7DF844AD99D16A90E14C8.mft File: AA72ED85A93B5AABE6C7DF844AD99D16A90E14C8.mft (raw, json) Hash identifier: 8k1Sg+St8BoTIVJ608CHQ8IJFt8TH04tWQtI30crlNs= Subject key identifier: E3:DF:C0:15:44:87:38:3C:5D:AC:39:80:A1:32:62:8B:F1:D4:79:8E Authority key identifier: AA:72:ED:85:A9:3B:5A:AB:E6:C7:DF:84:4A:D9:9D:16:A9:0E:14:C8 Certificate issuer: /CN=AA72ED85A93B5AABE6C7DF844AD99D16A90E14C8 Certificate serial: 524B192594BF286400FBA39877283F2EDDD1C4E7 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA72ED85A93B5AABE6C7DF844AD99D16A90E14C8.cer Subject info access: rsync://rpki-repo.registro.br/repo/4pvH4MHZJZas4zHEgK2hMoy5gE5iQjdPTDp4EF96vecg/0/AA72ED85A93B5AABE6C7DF844AD99D16A90E14C8.mft Manifest number: 50 Signing time: Wed 05 Nov 2025 14:04:53 +0000 Manifest this update: Wed 05 Nov 2025 13:59:53 +0000 Manifest next update: Thu 06 Nov 2025 16:04:53 +0000 Files and hashes: 1: 323830343a393539303a3a2f33322d3332203d3e20323734353330.roa (hash: ud8H+LPpJrRZjxw5rTInN+2D3gurLBaqifOfHqRbUko=) 2: AA72ED85A93B5AABE6C7DF844AD99D16A90E14C8.crl (hash: wn3s+C++xfTu2XT3JrJkH0PCEsfHxmN014LzIZuIYrY=) 3: 323830343a393539303a3a2f33322d3332203d3e20323632323837.roa (hash: cJEyc9GyTP/W9tTA5SfKcOBqQXJyoAW8IVefVuwCDF0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4pvH4MHZJZas4zHEgK2hMoy5gE5iQjdPTDp4EF96vecg/0/AA72ED85A93B5AABE6C7DF844AD99D16A90E14C8.crl rsync://rpki-repo.registro.br/repo/4pvH4MHZJZas4zHEgK2hMoy5gE5iQjdPTDp4EF96vecg/0/AA72ED85A93B5AABE6C7DF844AD99D16A90E14C8.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA72ED85A93B5AABE6C7DF844AD99D16A90E14C8.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 16:04:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:4b:19:25:94:bf:28:64:00:fb:a3:98:77:28:3f:2e:dd:d1:c4:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA72ED85A93B5AABE6C7DF844AD99D16A90E14C8 Validity Not Before: Nov 5 13:59:53 2025 GMT Not After : Nov 6 16:04:53 2025 GMT Subject: CN=E3DFC0154487383C5DAC3980A132628BF1D4798E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:f0:d9:6b:d9:71:58:cd:d9:31:3e:5c:11:d0: 10:71:10:2c:56:6e:5c:7a:76:e0:05:ed:7a:14:06: 6f:8a:b1:95:8b:be:a1:cb:9f:01:78:f3:20:e7:a1: 5e:a3:78:14:5d:2a:a8:89:1a:b7:27:f7:10:25:17: a8:81:98:7a:f5:12:4b:5a:ab:8f:67:d6:b8:7e:b5: 1f:60:93:d2:26:d1:1f:c5:60:b3:e3:03:3c:c7:79: 8c:4d:18:ab:54:7a:5d:e6:ab:12:ef:49:75:70:25: db:90:9d:0b:de:8e:30:d9:f6:8c:71:70:f4:57:47: dc:31:74:ce:73:53:a8:25:5b:ee:05:16:bc:1d:f8: 8c:50:21:10:fa:cb:39:8a:6c:7c:e8:f4:f9:b4:7a: 24:82:7b:d4:73:48:45:38:71:76:18:b4:61:d2:d8: 2b:7d:f0:0e:b0:35:d0:6c:49:b0:c7:07:f8:dd:2c: 4f:72:44:66:70:95:fe:5a:a0:fc:f1:c5:aa:e6:2b: 14:06:45:86:97:a7:89:29:e6:40:a2:29:1a:63:fc: f1:db:dc:14:01:12:ce:64:98:f9:97:96:7c:54:a5: 96:bd:5f:f9:be:2c:28:0d:b4:f3:c7:07:6e:68:72: 5e:d8:1d:90:b8:31:c2:27:19:12:79:69:2b:3e:4c: e9:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:DF:C0:15:44:87:38:3C:5D:AC:39:80:A1:32:62:8B:F1:D4:79:8E X509v3 Authority Key Identifier: keyid:AA:72:ED:85:A9:3B:5A:AB:E6:C7:DF:84:4A:D9:9D:16:A9:0E:14:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4pvH4MHZJZas4zHEgK2hMoy5gE5iQjdPTDp4EF96vecg/0/AA72ED85A93B5AABE6C7DF844AD99D16A90E14C8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA72ED85A93B5AABE6C7DF844AD99D16A90E14C8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4pvH4MHZJZas4zHEgK2hMoy5gE5iQjdPTDp4EF96vecg/0/AA72ED85A93B5AABE6C7DF844AD99D16A90E14C8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:d3:49:ca:aa:27:45:00:a7:be:85:19:e8:a1:bf:11:de:18: 88:2e:07:12:39:70:32:28:33:ab:72:c1:4a:53:cd:c4:1e:16: 8b:18:ae:34:11:73:17:bb:e1:d0:8a:66:c2:c5:f5:bc:94:fe: 07:a4:0c:d1:87:01:67:95:24:3d:cb:45:f3:47:33:dd:eb:ac: 34:2a:91:02:86:96:c9:96:9f:7a:61:13:b8:79:1d:88:4f:e9: e6:f8:83:28:01:a7:78:ea:94:13:bf:54:ec:56:92:8c:c3:9c: 35:77:f1:b3:19:5e:84:c4:e3:d8:83:05:84:c7:0c:4b:42:dd: e0:48:43:c8:44:65:84:97:13:98:22:41:c6:33:35:11:b3:d1: 08:ae:3f:e1:08:74:a5:95:87:98:73:0c:c5:13:fc:ff:e5:30: 36:a9:f3:87:68:05:7d:74:ff:67:14:9f:e6:04:0c:de:96:26: 6f:78:85:5e:bb:ee:fb:48:09:4a:11:4e:6a:c8:cc:b4:30:d5: 6c:a2:d6:08:ff:b9:1e:af:ee:c0:f7:c3:16:43:3b:66:1c:a6: d6:3c:61:d8:56:b4:38:71:c2:9f:d3:2f:4c:70:a7:3e:69:01: 5e:75:c9:63:42:e5:9f:f8:bc:ee:7a:cc:fa:89:43:32:d8:9d: c5:0c:e5:6b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUUksZJZS/KGQA+6OYdyg/Lt3RxOcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUE3MkVEODVBOTNCNUFBQkU2QzdERjg0NEFEOTlEMTZB OTBFMTRDODAeFw0yNTExMDUxMzU5NTNaFw0yNTExMDYxNjA0NTNaMDMxMTAvBgNV BAMTKEUzREZDMDE1NDQ4NzM4M0M1REFDMzk4MEExMzI2MjhCRjFENDc5OEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQ8Nlr2XFYzdkxPlwR0BBxECxW blx6duAF7XoUBm+KsZWLvqHLnwF48yDnoV6jeBRdKqiJGrcn9xAlF6iBmHr1Ekta q49n1rh+tR9gk9Im0R/FYLPjAzzHeYxNGKtUel3mqxLvSXVwJduQnQvejjDZ9oxx cPRXR9wxdM5zU6glW+4FFrwd+IxQIRD6yzmKbHzo9Pm0eiSCe9RzSEU4cXYYtGHS 2Ct98A6wNdBsSbDHB/jdLE9yRGZwlf5aoPzxxarmKxQGRYaXp4kp5kCiKRpj/PHb 3BQBEs5kmPmXlnxUpZa9X/m+LCgNtPPHB25ocl7YHZC4McInGRJ5aSs+TOmzAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU49/AFUSHODxdrDmAoTJii/HUeY4wHwYDVR0j BBgwFoAUqnLthak7Wqvmx9+EStmdFqkOFMgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNHB2SDRNSFpKWmFzNHpIRWdLMmhNb3k1Z0U1aVFqZFBURHA0RUY5NnZl Y2cvMC9BQTcyRUQ4NUE5M0I1QUFCRTZDN0RGODQ0QUQ5OUQxNkE5MEUxNEM4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FBNzJFRDg1QTkzQjVBQUJF NkM3REY4NDRBRDk5RDE2QTkwRTE0QzguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NHB2SDRNSFpKWmFzNHpIRWdLMmhNb3k1Z0U1aVFqZFBURHA0RUY5NnZlY2cvMC9B QTcyRUQ4NUE5M0I1QUFCRTZDN0RGODQ0QUQ5OUQxNkE5MEUxNEM4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEtNJyqonRQCnvoUZ6KG/Ed4YiC4HEjlwMigzq3LBSlPNxB4WixiuNBFzF7vh 0IpmwsX1vJT+B6QM0YcBZ5UkPctF80cz3eusNCqRAoaWyZafemETuHkdiE/p5viD KAGneOqUE79U7FaSjMOcNXfxsxlehMTj2IMFhMcMS0Ld4EhDyERlhJcTmCJBxjM1 EbPRCK4/4Qh0pZWHmHMMxRP8/+UwNqnzh2gFfXT/ZxSf5gQM3pYmb3iFXrvu+0gJ ShFOasjMtDDVbKLWCP+5Hq/uwPfDFkM7Zhym1jxh2Fa0OHHCn9MvTHCnPmkBXnXJ Y0Lln/i87nrM+olDMtidxQzlaw== -----END CERTIFICATE-----Generated at Wed Nov 5 22:43:37 2025 by rpki-client