$ rpki-client -vvf rpki-repo.registro.br/repo/Bd8gwAan3LfKUhLBNpaAxDkGFGeWrxUdLctnJweVHPfp/0/AA704690C0BE55D2FE25A9C58E4C5266F585493B.mft File: AA704690C0BE55D2FE25A9C58E4C5266F585493B.mft (raw, json) Hash identifier: I7QIeTT+xCireE5ExaWYAz5LFRtAc8bnNCahoatuoU0= Subject key identifier: 0B:77:EF:3E:FD:2D:E3:89:94:A0:73:A3:71:5A:34:50:54:10:A8:EE Authority key identifier: AA:70:46:90:C0:BE:55:D2:FE:25:A9:C5:8E:4C:52:66:F5:85:49:3B Certificate issuer: /CN=AA704690C0BE55D2FE25A9C58E4C5266F585493B Certificate serial: 280ACABC9D5D00CD78F43C40D7FAB531F686F093 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA704690C0BE55D2FE25A9C58E4C5266F585493B.cer Subject info access: rsync://rpki-repo.registro.br/repo/Bd8gwAan3LfKUhLBNpaAxDkGFGeWrxUdLctnJweVHPfp/0/AA704690C0BE55D2FE25A9C58E4C5266F585493B.mft Manifest number: 66 Signing time: Tue 04 Nov 2025 10:06:21 +0000 Manifest this update: Tue 04 Nov 2025 10:01:21 +0000 Manifest next update: Wed 05 Nov 2025 10:58:21 +0000 Files and hashes: 1: 323830343a383433303a633030303a3a2f33342d3334203d3e20323732323435.roa (hash: UCPwSbHoE5MB0hubg7c/rUiLjxzjnLvOewgUFA6bHDU=) 2: 323830343a383433303a383030303a3a2f33342d3334203d3e20323732323435.roa (hash: 1x1jgi3yf/13UdXnHUklF1C98T3/Pz+Ro8lZJGwGFfA=) 3: 323830343a383433303a3a2f33342d3334203d3e20323732323435.roa (hash: JVYor4dxgpMPel4FGhjagp0WiyiRhSVtPjnVrTbK3FE=) 4: AA704690C0BE55D2FE25A9C58E4C5266F585493B.crl (hash: Tt8mFv9c4EY/GFvYRiEYClfNy9WBr8H1GzpKTgq0jMY=) 5: 323830343a383433303a3a2f33322d3332203d3e20323732323435.roa (hash: Jdv2eMirlHbOqBOaOu22SpZnl8aAOenTTRxKwYddASI=) 6: 323830343a383433303a343030303a3a2f33342d3334203d3e20323732323435.roa (hash: q2PGSO3hZcdmOuVbZ+1bI6UNd2isAnoQ+lJNmyxlzPA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Bd8gwAan3LfKUhLBNpaAxDkGFGeWrxUdLctnJweVHPfp/0/AA704690C0BE55D2FE25A9C58E4C5266F585493B.crl rsync://rpki-repo.registro.br/repo/Bd8gwAan3LfKUhLBNpaAxDkGFGeWrxUdLctnJweVHPfp/0/AA704690C0BE55D2FE25A9C58E4C5266F585493B.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA704690C0BE55D2FE25A9C58E4C5266F585493B.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 10:58:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:0a:ca:bc:9d:5d:00:cd:78:f4:3c:40:d7:fa:b5:31:f6:86:f0:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA704690C0BE55D2FE25A9C58E4C5266F585493B Validity Not Before: Nov 4 10:01:21 2025 GMT Not After : Nov 5 10:58:21 2025 GMT Subject: CN=0B77EF3EFD2DE38994A073A3715A34505410A8EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a2:3c:c8:b3:ba:39:7e:fb:ed:eb:c6:dd:5a: b5:de:5c:52:a6:ef:0b:9a:af:41:94:45:45:c8:17: 2c:d0:9b:52:2a:63:fe:a6:a0:6a:1f:7b:ac:d0:2b: 5e:8c:52:23:d9:83:6c:aa:64:2d:05:10:50:92:bf: 14:e9:d2:7c:f0:c7:9e:f3:99:2a:c7:fb:a3:4d:75: e8:f2:19:5f:83:17:ca:81:35:50:e7:78:23:70:8c: 6b:b2:b8:9c:9d:0d:81:f1:6d:06:f6:40:6d:da:12: fa:04:10:10:2f:1b:64:d2:7b:69:b0:0d:48:96:b2: b4:b4:92:03:8a:f0:36:7c:3a:b9:ea:60:24:66:c7: 62:84:d4:64:99:26:6d:5e:a7:7c:dd:fb:10:c1:ed: 14:fe:66:2f:c9:d0:43:28:03:87:43:5a:8e:87:43: de:79:bd:06:73:0c:cb:e0:a0:27:a9:4b:56:f3:8b: 03:5b:aa:4c:d8:99:db:85:1a:5f:c3:5f:75:b2:d1: ad:bb:51:76:06:d1:05:cb:2b:0d:42:ad:c7:df:87: b8:1d:ca:c8:82:08:9b:d8:36:07:dd:9f:37:9b:8b: 2d:36:d1:1b:a1:72:8e:cf:6d:30:cf:c1:2b:21:0b: 9b:9a:13:55:35:2c:e3:00:64:68:c7:c0:4e:18:88: 00:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:77:EF:3E:FD:2D:E3:89:94:A0:73:A3:71:5A:34:50:54:10:A8:EE X509v3 Authority Key Identifier: keyid:AA:70:46:90:C0:BE:55:D2:FE:25:A9:C5:8E:4C:52:66:F5:85:49:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Bd8gwAan3LfKUhLBNpaAxDkGFGeWrxUdLctnJweVHPfp/0/AA704690C0BE55D2FE25A9C58E4C5266F585493B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA704690C0BE55D2FE25A9C58E4C5266F585493B.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bd8gwAan3LfKUhLBNpaAxDkGFGeWrxUdLctnJweVHPfp/0/AA704690C0BE55D2FE25A9C58E4C5266F585493B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:11:a1:03:95:7e:96:7e:22:d4:cf:49:a9:53:7d:f4:47:a4: ae:bb:59:ef:37:9f:6b:64:cc:3e:a1:9b:d8:68:29:76:3f:64: ad:0e:f8:48:0b:d4:93:60:5e:c9:ed:cc:1f:b2:de:b9:b8:12: 65:00:1f:42:57:ce:63:e2:18:d0:18:f2:55:d4:f5:66:81:b0: 74:1d:1f:3c:18:fb:37:da:ce:fb:41:6d:ac:81:43:52:0c:16: e2:ae:9d:ec:4b:9f:59:b9:fe:43:30:90:19:aa:a0:b2:75:28: a7:af:ca:00:00:18:49:72:77:cf:8a:fe:ff:f7:ae:8d:87:5c: da:ed:f2:f0:73:0f:24:2b:4c:fe:b7:20:11:af:39:9a:a9:41: 23:d5:5a:44:81:16:b8:2b:29:7e:85:9d:be:c1:04:ad:16:66: 9d:8f:13:d4:32:cd:8d:84:83:27:e7:ff:af:6a:db:7f:05:68: 82:05:16:a2:4a:14:e5:2c:94:1d:6b:28:b1:ff:62:c7:20:cb: ed:42:21:8c:1a:fd:be:7a:5c:9c:f0:ca:00:9f:44:10:ed:c2: 2c:a7:d1:1d:9b:03:ca:a8:11:30:df:56:e1:42:48:23:30:b0: ce:5a:07:7a:4b:b9:7a:fa:38:da:57:53:43:9f:2c:64:37:91: 79:fa:90:c0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUKArKvJ1dAM149DxA1/q1MfaG8JMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUE3MDQ2OTBDMEJFNTVEMkZFMjVBOUM1OEU0QzUyNjZG NTg1NDkzQjAeFw0yNTExMDQxMDAxMjFaFw0yNTExMDUxMDU4MjFaMDMxMTAvBgNV BAMTKDBCNzdFRjNFRkQyREUzODk5NEEwNzNBMzcxNUEzNDUwNTQxMEE4RUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBojzIs7o5fvvt68bdWrXeXFKm 7wuar0GURUXIFyzQm1IqY/6moGofe6zQK16MUiPZg2yqZC0FEFCSvxTp0nzwx57z mSrH+6NNdejyGV+DF8qBNVDneCNwjGuyuJydDYHxbQb2QG3aEvoEEBAvG2TSe2mw DUiWsrS0kgOK8DZ8OrnqYCRmx2KE1GSZJm1ep3zd+xDB7RT+Zi/J0EMoA4dDWo6H Q955vQZzDMvgoCepS1bziwNbqkzYmduFGl/DX3Wy0a27UXYG0QXLKw1Crcffh7gd ysiCCJvYNgfdnzebiy020Ruhco7PbTDPwSshC5uaE1U1LOMAZGjHwE4YiAAdAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUC3fvPv0t44mUoHOjcVo0UFQQqO4wHwYDVR0j BBgwFoAUqnBGkMC+VdL+JanFjkxSZvWFSTswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQmQ4Z3dBYW4zTGZLVWhMQk5wYUF4RGtHRkdlV3J4VWRMY3RuSndlVkhQ ZnAvMC9BQTcwNDY5MEMwQkU1NUQyRkUyNUE5QzU4RTRDNTI2NkY1ODU0OTNCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FBNzA0NjkwQzBCRTU1RDJG RTI1QTlDNThFNEM1MjY2RjU4NTQ5M0IuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QmQ4Z3dBYW4zTGZLVWhMQk5wYUF4RGtHRkdlV3J4VWRMY3RuSndlVkhQZnAvMC9B QTcwNDY5MEMwQkU1NUQyRkUyNUE5QzU4RTRDNTI2NkY1ODU0OTNCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIBGhA5V+ln4i1M9JqVN99EekrrtZ7zefa2TMPqGb2Ggpdj9krQ74SAvUk2Be ye3MH7LeubgSZQAfQlfOY+IY0BjyVdT1ZoGwdB0fPBj7N9rO+0FtrIFDUgwW4q6d 7EufWbn+QzCQGaqgsnUop6/KAAAYSXJ3z4r+//eujYdc2u3y8HMPJCtM/rcgEa85 mqlBI9VaRIEWuCspfoWdvsEErRZmnY8T1DLNjYSDJ+f/r2rbfwVoggUWokoU5SyU HWsosf9ixyDL7UIhjBr9vnpcnPDKAJ9EEO3CLKfRHZsDyqgRMN9W4UJIIzCwzloH eku5evo42ldTQ58sZDeRefqQwA== -----END CERTIFICATE-----Generated at Wed Nov 5 02:36:38 2025 by rpki-client