$ rpki-client -vvf rpki-repo.registro.br/repo/BpjQzn4bNuBgo3eE9SkWBzednzdwKTmkETuaz2GDjks6/0/AAE5DEB28FB1B77C5621A48D330349DB07D1D3F8.mft File: AAE5DEB28FB1B77C5621A48D330349DB07D1D3F8.mft (raw, json) Hash identifier: 9yJIBCd7ONDH/bViT1eyIhVEQfz4wkGZ7Talrj0TneE= Subject key identifier: 96:A4:13:67:B5:06:0C:F7:84:61:84:52:08:EB:89:84:07:65:E3:1A Authority key identifier: AA:E5:DE:B2:8F:B1:B7:7C:56:21:A4:8D:33:03:49:DB:07:D1:D3:F8 Certificate issuer: /CN=AAE5DEB28FB1B77C5621A48D330349DB07D1D3F8 Certificate serial: 738C8BF35C32504E172642B2431A227D2680C89F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AAE5DEB28FB1B77C5621A48D330349DB07D1D3F8.cer Subject info access: rsync://rpki-repo.registro.br/repo/BpjQzn4bNuBgo3eE9SkWBzednzdwKTmkETuaz2GDjks6/0/AAE5DEB28FB1B77C5621A48D330349DB07D1D3F8.mft Manifest number: 2A Signing time: Wed 05 Nov 2025 01:00:37 +0000 Manifest this update: Wed 05 Nov 2025 00:55:37 +0000 Manifest next update: Thu 06 Nov 2025 02:14:37 +0000 Files and hashes: 1: 323830343a343737383a3a2f33322d3438203d3e20323637303536.roa (hash: uSx2QInVU7dPUD1XpC3zsr9iVyxnTwdzolsbn7DZuBw=) 2: 34352e3136302e3231352e302f32342d3234203d3e20323637303536.roa (hash: Q8bMNmO9lA2D1lHozYjMiSECVwJwap0hkmNp1A0df2U=) 3: AAE5DEB28FB1B77C5621A48D330349DB07D1D3F8.crl (hash: OKtg8vbiKWTjfATw8bDi5QzSuYovvZPBNDWz0kXEaKI=) 4: 34352e3232362e3230382e302f32322d3234203d3e20323637303536.roa (hash: KQXI2qaY/0J5AROdpd404puiKa5sk3dJIp7GXWxIelQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BpjQzn4bNuBgo3eE9SkWBzednzdwKTmkETuaz2GDjks6/0/AAE5DEB28FB1B77C5621A48D330349DB07D1D3F8.crl rsync://rpki-repo.registro.br/repo/BpjQzn4bNuBgo3eE9SkWBzednzdwKTmkETuaz2GDjks6/0/AAE5DEB28FB1B77C5621A48D330349DB07D1D3F8.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AAE5DEB28FB1B77C5621A48D330349DB07D1D3F8.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 02:14:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:8c:8b:f3:5c:32:50:4e:17:26:42:b2:43:1a:22:7d:26:80:c8:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AAE5DEB28FB1B77C5621A48D330349DB07D1D3F8 Validity Not Before: Nov 5 00:55:37 2025 GMT Not After : Nov 6 02:14:37 2025 GMT Subject: CN=96A41367B5060CF78461845208EB89840765E31A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d8:78:9f:52:22:bd:b2:bc:ca:0b:ee:5f:61: 4b:6f:0c:00:e7:a6:33:76:f1:1a:ee:04:cb:18:2e: e9:fa:d4:0c:d9:a5:95:cf:bd:38:07:89:91:b5:e6: 21:8b:2a:45:b2:06:df:96:88:7c:39:9f:49:df:90: cd:5f:27:c5:74:57:b3:e2:e3:02:98:1c:a2:8d:6a: af:ab:b3:01:59:bb:ea:1d:b6:4e:a5:a9:f4:b4:04: 4a:36:f0:d0:71:30:58:4c:78:dd:32:0c:96:fb:dc: 62:68:df:b4:4f:ad:4d:ae:e0:45:fd:1e:37:6e:f2: fc:e4:f1:3a:9d:4e:5b:32:30:57:cc:43:ec:e7:46: c5:bb:4d:ca:58:b5:9e:09:13:c2:26:1f:c6:b4:73: 74:b4:ec:a3:db:10:55:e6:2c:ea:ec:d3:0c:a6:44: c6:d5:a1:4d:e9:27:f8:38:87:31:fb:28:29:85:3a: 62:a0:73:df:87:66:00:77:7c:a3:c0:e2:af:bb:0b: 3e:e2:a1:ac:64:27:70:1a:47:7c:f3:e3:1f:41:d5: bc:c9:94:35:7a:5a:09:64:ce:43:c1:29:64:de:09: 79:06:4f:06:df:59:cf:76:c2:6f:16:2b:93:e9:d3: 33:d2:ec:3d:b0:62:d8:60:ee:0e:a4:21:84:08:a1: bb:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:A4:13:67:B5:06:0C:F7:84:61:84:52:08:EB:89:84:07:65:E3:1A X509v3 Authority Key Identifier: keyid:AA:E5:DE:B2:8F:B1:B7:7C:56:21:A4:8D:33:03:49:DB:07:D1:D3:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BpjQzn4bNuBgo3eE9SkWBzednzdwKTmkETuaz2GDjks6/0/AAE5DEB28FB1B77C5621A48D330349DB07D1D3F8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AAE5DEB28FB1B77C5621A48D330349DB07D1D3F8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BpjQzn4bNuBgo3eE9SkWBzednzdwKTmkETuaz2GDjks6/0/AAE5DEB28FB1B77C5621A48D330349DB07D1D3F8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:20:ed:2f:46:df:45:58:96:c1:23:e7:3b:fd:81:84:36:6f: c1:e7:f8:fb:84:75:06:7d:28:42:15:b9:b5:64:a7:00:c8:8e: 0b:71:2c:04:81:c2:d4:ce:13:9d:41:1d:66:23:85:0b:3e:a0: 2b:65:ac:1f:88:d4:03:3b:dd:22:b7:9a:38:1f:3e:0f:9a:55: a0:70:8e:55:93:c4:07:f0:d5:6f:65:0b:c3:7e:84:bd:61:6d: 45:37:6c:9d:43:35:95:54:ff:a1:3d:01:bf:03:a4:5b:c7:51: 04:07:2b:61:4d:fe:67:1d:99:11:50:b2:3b:e5:e7:15:e4:9d: f7:f6:e0:54:7d:68:6e:ae:50:40:5a:d2:64:54:25:cf:c7:9b: e2:1b:91:fd:95:e0:cd:f5:1d:e6:b5:09:ad:12:ef:4c:cc:89: f4:be:fc:62:4f:6c:56:21:c9:95:90:52:fd:18:cd:e5:a5:4a: 8b:38:08:45:e8:0a:bd:7b:58:f8:7e:c0:b4:23:79:87:c8:92: 48:c1:af:15:94:f3:b4:74:83:2b:9d:2a:f1:e6:33:60:16:c2: 27:39:83:29:41:df:37:8b:64:13:98:96:72:91:05:19:0f:f8: a3:84:9b:ca:b2:2e:65:4f:3a:88:2a:24:c7:3d:82:e1:be:90: 61:c7:ee:e9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUc4yL81wyUE4XJkKyQxoifSaAyJ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUFFNURFQjI4RkIxQjc3QzU2MjFBNDhEMzMwMzQ5REIw N0QxRDNGODAeFw0yNTExMDUwMDU1MzdaFw0yNTExMDYwMjE0MzdaMDMxMTAvBgNV BAMTKDk2QTQxMzY3QjUwNjBDRjc4NDYxODQ1MjA4RUI4OTg0MDc2NUUzMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC32HifUiK9srzKC+5fYUtvDADn pjN28RruBMsYLun61AzZpZXPvTgHiZG15iGLKkWyBt+WiHw5n0nfkM1fJ8V0V7Pi 4wKYHKKNaq+rswFZu+odtk6lqfS0BEo28NBxMFhMeN0yDJb73GJo37RPrU2u4EX9 Hjdu8vzk8TqdTlsyMFfMQ+znRsW7TcpYtZ4JE8ImH8a0c3S07KPbEFXmLOrs0wym RMbVoU3pJ/g4hzH7KCmFOmKgc9+HZgB3fKPA4q+7Cz7ioaxkJ3AaR3zz4x9B1bzJ lDV6WglkzkPBKWTeCXkGTwbfWc92wm8WK5Pp0zPS7D2wYthg7g6kIYQIobslAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUlqQTZ7UGDPeEYYRSCOuJhAdl4xowHwYDVR0j BBgwFoAUquXeso+xt3xWIaSNMwNJ2wfR0/gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQnBqUXpuNGJOdUJnbzNlRTlTa1dCemVkbnpkd0tUbWtFVHVhejJHRGpr czYvMC9BQUU1REVCMjhGQjFCNzdDNTYyMUE0OEQzMzAzNDlEQjA3RDFEM0Y4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FBRTVERUIyOEZCMUI3N0M1 NjIxQTQ4RDMzMDM0OURCMDdEMUQzRjguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QnBqUXpuNGJOdUJnbzNlRTlTa1dCemVkbnpkd0tUbWtFVHVhejJHRGprczYvMC9B QUU1REVCMjhGQjFCNzdDNTYyMUE0OEQzMzAzNDlEQjA3RDFEM0Y4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjiDtL0bfRViWwSPnO/2BhDZvwef4+4R1Bn0oQhW5tWSnAMiOC3EsBIHC1M4T nUEdZiOFCz6gK2WsH4jUAzvdIreaOB8+D5pVoHCOVZPEB/DVb2ULw36EvWFtRTds nUM1lVT/oT0BvwOkW8dRBAcrYU3+Zx2ZEVCyO+XnFeSd9/bgVH1obq5QQFrSZFQl z8eb4huR/ZXgzfUd5rUJrRLvTMyJ9L78Yk9sViHJlZBS/RjN5aVKizgIRegKvXtY +H7AtCN5h8iSSMGvFZTztHSDK50q8eYzYBbCJzmDKUHfN4tkE5iWcpEFGQ/4o4Sb yrIuZU86iCokxz2C4b6QYcfu6Q== -----END CERTIFICATE-----Generated at Wed Nov 5 06:58:34 2025 by rpki-client