$ rpki-client -vvf rpki-repo.registro.br/repo/9mKYFUHPsUTWGkxPhYRWHSyPE3z5LbYboGc9SZab7eeV/0/2AA4E148A0C4D80D80758F9F85B1DC15E463B010.mft File: 2AA4E148A0C4D80D80758F9F85B1DC15E463B010.mft (raw, json) Hash identifier: s8VF6fQT12McqU6Amltu+581ftByBRILtvwKQmFuvPE= Subject key identifier: AA:16:38:AD:8C:E3:BE:07:45:D3:A9:EC:4F:EC:1B:20:C7:8C:56:34 Authority key identifier: 2A:A4:E1:48:A0:C4:D8:0D:80:75:8F:9F:85:B1:DC:15:E4:63:B0:10 Certificate issuer: /CN=2AA4E148A0C4D80D80758F9F85B1DC15E463B010 Certificate serial: 46AFC16AF6701825EBE2CBECA1A6A8E0FFA50399 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AA4E148A0C4D80D80758F9F85B1DC15E463B010.cer Subject info access: rsync://rpki-repo.registro.br/repo/9mKYFUHPsUTWGkxPhYRWHSyPE3z5LbYboGc9SZab7eeV/0/2AA4E148A0C4D80D80758F9F85B1DC15E463B010.mft Manifest number: 3C Signing time: Sun 10 Aug 2025 02:38:02 +0000 Manifest this update: Sun 10 Aug 2025 02:33:02 +0000 Manifest next update: Mon 11 Aug 2025 06:16:02 +0000 Files and hashes: 1: 2AA4E148A0C4D80D80758F9F85B1DC15E463B010.crl (hash: tKKY3q0J+fxDLCkDLSOW3tj8n9ogfeaAddHkMADmq4s=) 2: 323830343a336366383a3a2f33322d3438203d3e20323636323435.roa (hash: zctiIbJlKMNQWtw8iJzprqUtGc9d4+VnBs2L8H20Jdc=) 3: 34352e362e3230302e302f32322d3234203d3e20323636323435.roa (hash: I60wsRdlvNtGjVm0HpAc3h3c3v/AqEtm+20DIOok/kM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9mKYFUHPsUTWGkxPhYRWHSyPE3z5LbYboGc9SZab7eeV/0/2AA4E148A0C4D80D80758F9F85B1DC15E463B010.crl rsync://rpki-repo.registro.br/repo/9mKYFUHPsUTWGkxPhYRWHSyPE3z5LbYboGc9SZab7eeV/0/2AA4E148A0C4D80D80758F9F85B1DC15E463B010.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AA4E148A0C4D80D80758F9F85B1DC15E463B010.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 10 Aug 2025 14:15:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:af:c1:6a:f6:70:18:25:eb:e2:cb:ec:a1:a6:a8:e0:ff:a5:03:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2AA4E148A0C4D80D80758F9F85B1DC15E463B010 Validity Not Before: Aug 10 02:33:02 2025 GMT Not After : Aug 11 06:16:02 2025 GMT Subject: CN=AA1638AD8CE3BE0745D3A9EC4FEC1B20C78C5634 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f5:a1:17:e3:ce:bd:ad:fa:f5:da:ab:5e:c4: 04:69:09:a7:84:8b:6e:c3:33:ab:17:89:a2:68:9b: f0:5d:e4:2d:9e:10:38:b9:84:05:62:1b:ee:6d:29: 1c:09:2b:a8:a5:d1:6c:69:0b:cf:8a:f6:93:3e:e4: dc:71:84:34:72:6a:50:58:c9:d7:28:4b:f4:2e:bd: 7c:a9:22:5a:57:4f:bf:15:21:7d:47:e8:14:53:d4: e7:78:e2:82:6c:83:32:30:e6:64:1c:67:13:93:a4: 15:79:67:69:de:cd:b5:f5:27:d1:27:8b:95:d8:2e: 51:48:9f:9f:ab:53:a8:b1:54:c4:9a:ff:a5:12:ac: 6e:43:78:d9:01:09:4a:a3:f2:de:64:36:91:91:3d: dc:72:5a:5e:12:68:1e:75:a6:cb:b7:64:9b:68:bf: bb:63:bd:cc:97:7f:e0:b0:01:6c:a2:bb:88:2e:8a: ab:af:1b:e7:93:9e:11:b1:60:b7:4e:1c:66:9d:8f: a2:08:f6:d1:84:73:ca:2a:df:6a:ab:ab:0f:a2:63: 01:dd:33:12:5b:4a:e0:7b:7c:81:a7:50:e6:e0:09: 5a:58:36:01:24:fa:fd:3e:f3:91:7e:b1:24:f3:32: aa:7f:90:3e:7b:68:8e:a5:6d:9d:69:fa:19:2f:8f: e7:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:16:38:AD:8C:E3:BE:07:45:D3:A9:EC:4F:EC:1B:20:C7:8C:56:34 X509v3 Authority Key Identifier: keyid:2A:A4:E1:48:A0:C4:D8:0D:80:75:8F:9F:85:B1:DC:15:E4:63:B0:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9mKYFUHPsUTWGkxPhYRWHSyPE3z5LbYboGc9SZab7eeV/0/2AA4E148A0C4D80D80758F9F85B1DC15E463B010.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AA4E148A0C4D80D80758F9F85B1DC15E463B010.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9mKYFUHPsUTWGkxPhYRWHSyPE3z5LbYboGc9SZab7eeV/0/2AA4E148A0C4D80D80758F9F85B1DC15E463B010.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:b9:d2:6f:38:2e:1f:c5:e3:9d:33:1c:9e:e9:aa:df:14:e9: a3:24:f9:6f:da:26:88:bc:8b:21:1e:62:82:8e:c2:60:26:89: 52:3c:ea:24:f7:ff:c7:20:61:51:47:dd:ad:ba:c2:ca:2e:81: 52:a5:62:68:8b:ef:28:c7:db:9e:f7:d8:e2:7a:0d:f4:b7:67: ed:49:d3:fc:4f:24:51:1b:21:23:ac:fe:d6:5a:34:4e:61:56: 2e:47:5c:04:d2:20:b2:99:49:7c:fb:ad:71:be:44:13:ec:55: 94:0c:23:68:bd:58:f3:33:81:b9:04:3c:67:9c:f0:59:08:21: d0:45:53:eb:52:9a:44:34:38:a0:57:73:ce:99:d2:27:d9:fa: b9:63:45:21:49:77:3c:34:01:9b:a0:b5:0d:1d:d8:d3:2b:34: b4:fe:0c:bc:72:b1:be:a8:6e:8c:98:eb:73:61:8c:17:91:df: 01:5d:7e:d4:91:0f:be:fb:b7:a6:fa:bd:3f:fb:2d:85:89:43: b5:19:c7:0b:5a:09:b2:30:c1:ed:37:57:8b:20:bb:8b:25:91: ea:36:cb:dc:48:f6:b2:cf:5e:ff:42:14:7f:b3:d7:7e:fc:37: b0:f8:34:1d:92:83:7c:18:6c:20:46:45:2c:2a:8d:f5:69:31: a1:09:76:e2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIURq/BavZwGCXr4svsoaao4P+lA5kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFBNEUxNDhBMEM0RDgwRDgwNzU4RjlGODVCMURDMTVF NDYzQjAxMDAeFw0yNTA4MTAwMjMzMDJaFw0yNTA4MTEwNjE2MDJaMDMxMTAvBgNV BAMTKEFBMTYzOEFEOENFM0JFMDc0NUQzQTlFQzRGRUMxQjIwQzc4QzU2MzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC69aEX4869rfr12qtexARpCaeE i27DM6sXiaJom/Bd5C2eEDi5hAViG+5tKRwJK6il0WxpC8+K9pM+5NxxhDRyalBY ydcoS/QuvXypIlpXT78VIX1H6BRT1Od44oJsgzIw5mQcZxOTpBV5Z2nezbX1J9En i5XYLlFIn5+rU6ixVMSa/6USrG5DeNkBCUqj8t5kNpGRPdxyWl4SaB51psu3ZJto v7tjvcyXf+CwAWyiu4guiquvG+eTnhGxYLdOHGadj6II9tGEc8oq32qrqw+iYwHd MxJbSuB7fIGnUObgCVpYNgEk+v0+85F+sSTzMqp/kD57aI6lbZ1p+hkvj+c7AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUqhY4rYzjvgdF06nsT+wbIMeMVjQwHwYDVR0j BBgwFoAUKqThSKDE2A2AdY+fhbHcFeRjsBAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOW1LWUZVSFBzVVRXR2t4UGhZUldIU3lQRTN6NUxiWWJvR2M5U1phYjdl ZVYvMC8yQUE0RTE0OEEwQzREODBEODA3NThGOUY4NUIxREMxNUU0NjNCMDEwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJBQTRFMTQ4QTBDNEQ4MEQ4 MDc1OEY5Rjg1QjFEQzE1RTQ2M0IwMTAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OW1LWUZVSFBzVVRXR2t4UGhZUldIU3lQRTN6NUxiWWJvR2M5U1phYjdlZVYvMC8y QUE0RTE0OEEwQzREODBEODA3NThGOUY4NUIxREMxNUU0NjNCMDEwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAE7nSbzguH8XjnTMcnumq3xTpoyT5b9omiLyLIR5igo7CYCaJUjzqJPf/xyBh UUfdrbrCyi6BUqViaIvvKMfbnvfY4noN9Ldn7UnT/E8kURshI6z+1lo0TmFWLkdc BNIgsplJfPutcb5EE+xVlAwjaL1Y8zOBuQQ8Z5zwWQgh0EVT61KaRDQ4oFdzzpnS J9n6uWNFIUl3PDQBm6C1DR3Y0ys0tP4MvHKxvqhujJjrc2GMF5HfAV1+1JEPvvu3 pvq9P/sthYlDtRnHC1oJsjDB7TdXiyC7iyWR6jbL3Ej2ss9e/0IUf7PXfvw3sPg0 HZKDfBhsIEZFLCqN9WkxoQl24g== -----END CERTIFICATE-----Generated at Sun Aug 10 04:28:31 2025 by rpki-client