$ rpki-client -vvf rpki-repo.registro.br/repo/D1MhRwpZ6QeoFtx6ZrsCsUR3hhi4K8vViDLrtVFneEtJ/0/AA3B5DBF298ABAA4F809A6FD7352BEF91FC78585.mft File: AA3B5DBF298ABAA4F809A6FD7352BEF91FC78585.mft (raw, json) Hash identifier: Z6yqihnR9H8mKFSzBkeyhnwZUNHHEXKYci9+tjuhfNc= Subject key identifier: CD:9B:7B:B8:0A:16:CB:07:5F:D0:8E:2D:D7:96:6A:1B:FD:B0:9D:36 Authority key identifier: AA:3B:5D:BF:29:8A:BA:A4:F8:09:A6:FD:73:52:BE:F9:1F:C7:85:85 Certificate issuer: /CN=AA3B5DBF298ABAA4F809A6FD7352BEF91FC78585 Certificate serial: 1C957CE9954EC484E18C8B5065C2FD5552ED8479 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA3B5DBF298ABAA4F809A6FD7352BEF91FC78585.cer Subject info access: rsync://rpki-repo.registro.br/repo/D1MhRwpZ6QeoFtx6ZrsCsUR3hhi4K8vViDLrtVFneEtJ/0/AA3B5DBF298ABAA4F809A6FD7352BEF91FC78585.mft Manifest number: 2A Signing time: Wed 05 Nov 2025 16:38:16 +0000 Manifest this update: Wed 05 Nov 2025 16:33:16 +0000 Manifest next update: Thu 06 Nov 2025 17:53:16 +0000 Files and hashes: 1: 3136302e31392e3234302e302f32322d3332203d3e20323636313637.roa (hash: JNmyrnJWmOL269NQjAHg0Etu8oD933ZzlQ4sBwx3LWA=) 2: 323830343a336262383a3a2f33322d313238203d3e20323636313637.roa (hash: PCBJ5STCzw9+/GFdGErJzANC+sl1s1q/clzXkR0Vk08=) 3: AA3B5DBF298ABAA4F809A6FD7352BEF91FC78585.crl (hash: vG2+SnMf8B9cP3hCoaWivftCjS10su/HVkBqkgSJWM4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/D1MhRwpZ6QeoFtx6ZrsCsUR3hhi4K8vViDLrtVFneEtJ/0/AA3B5DBF298ABAA4F809A6FD7352BEF91FC78585.crl rsync://rpki-repo.registro.br/repo/D1MhRwpZ6QeoFtx6ZrsCsUR3hhi4K8vViDLrtVFneEtJ/0/AA3B5DBF298ABAA4F809A6FD7352BEF91FC78585.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA3B5DBF298ABAA4F809A6FD7352BEF91FC78585.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 17:53:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:95:7c:e9:95:4e:c4:84:e1:8c:8b:50:65:c2:fd:55:52:ed:84:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA3B5DBF298ABAA4F809A6FD7352BEF91FC78585 Validity Not Before: Nov 5 16:33:16 2025 GMT Not After : Nov 6 17:53:16 2025 GMT Subject: CN=CD9B7BB80A16CB075FD08E2DD7966A1BFDB09D36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:33:5a:65:fd:5f:7a:37:ef:95:08:6f:25:9e: f1:5f:0d:44:b4:ba:31:ca:ab:aa:2e:69:63:f7:07: ca:ed:a8:2d:36:91:ba:45:dd:64:ae:ca:35:3c:39: 90:4f:8d:fd:a2:70:f2:6d:12:20:86:55:88:66:cb: 61:2d:d9:97:ce:e8:41:5b:8f:fb:4d:c8:52:32:17: bd:c9:05:44:ae:ee:e8:ec:41:17:40:f7:cb:7c:d4: f3:6f:2e:7b:7a:2c:80:e6:77:21:88:b8:95:33:b9: 45:05:e5:0e:1a:85:80:97:06:ff:89:d3:84:a2:38: ac:8e:7c:86:97:98:fb:5e:ff:d0:31:4f:30:36:98: 98:81:2f:10:a9:f7:e4:1e:91:f2:ec:f4:f4:c4:79: d1:70:a8:a0:07:27:e6:3f:cb:17:e5:68:59:66:67: 8f:0f:d2:d8:8d:9f:d1:20:03:f9:25:b2:da:5d:f1: f3:95:d1:74:15:a3:ec:f2:71:b1:4d:61:92:58:4e: f9:f2:51:c0:37:f5:6e:ae:08:94:c6:4a:f2:41:31: e5:e6:5d:cf:dc:d5:fd:2d:07:60:08:79:7d:da:09: 96:1c:64:f6:65:d8:68:5b:59:1c:a1:fd:fa:8e:1c: 50:10:05:a3:e3:9c:52:5a:c7:4d:20:ab:8f:2a:98: 95:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:9B:7B:B8:0A:16:CB:07:5F:D0:8E:2D:D7:96:6A:1B:FD:B0:9D:36 X509v3 Authority Key Identifier: keyid:AA:3B:5D:BF:29:8A:BA:A4:F8:09:A6:FD:73:52:BE:F9:1F:C7:85:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/D1MhRwpZ6QeoFtx6ZrsCsUR3hhi4K8vViDLrtVFneEtJ/0/AA3B5DBF298ABAA4F809A6FD7352BEF91FC78585.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA3B5DBF298ABAA4F809A6FD7352BEF91FC78585.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/D1MhRwpZ6QeoFtx6ZrsCsUR3hhi4K8vViDLrtVFneEtJ/0/AA3B5DBF298ABAA4F809A6FD7352BEF91FC78585.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:b4:71:9f:20:8b:56:c7:0c:16:98:83:8f:cf:53:d3:90:b9: 5a:04:bd:0b:64:83:70:13:c0:ff:d0:81:db:d2:70:02:34:a4: a1:db:ac:3f:12:db:f6:23:21:5f:0e:f2:c0:ef:8d:d3:3d:87: 48:26:b2:5f:33:0c:df:b2:09:22:b0:a6:c5:ef:53:e8:98:8a: e6:b3:7c:71:34:8c:34:eb:7b:a6:7e:89:f0:26:79:3a:4c:dc: 90:a2:bd:be:44:1b:0b:21:6b:2a:71:18:16:f7:40:7c:ab:fc: 06:63:61:30:14:ff:09:77:62:07:67:fa:15:5e:96:65:d2:84: bb:7b:a9:03:c7:6c:83:a8:40:5d:c1:e9:73:7a:75:2c:79:e5: e7:a1:23:ec:1b:88:b7:76:62:56:17:b5:85:d0:f2:22:20:66: b1:64:26:93:56:96:1f:96:16:be:a1:f8:00:9a:b9:32:49:ac: dc:aa:f8:5b:00:6b:4f:b2:8f:8d:b3:40:f3:64:eb:52:3d:12: dd:f5:ab:98:86:63:94:c0:36:ef:a2:0b:51:d9:03:87:76:72: 7a:61:9b:01:c8:29:b1:49:ef:b7:68:25:2e:78:ed:26:83:ad: 29:bf:3a:ce:b6:ff:10:0d:4c:4a:4b:0f:76:9f:38:1a:59:0b: 7a:cb:b4:b6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUHJV86ZVOxIThjItQZcL9VVLthHkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUEzQjVEQkYyOThBQkFBNEY4MDlBNkZENzM1MkJFRjkx RkM3ODU4NTAeFw0yNTExMDUxNjMzMTZaFw0yNTExMDYxNzUzMTZaMDMxMTAvBgNV BAMTKENEOUI3QkI4MEExNkNCMDc1RkQwOEUyREQ3OTY2QTFCRkRCMDlEMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKM1pl/V96N++VCG8lnvFfDUS0 ujHKq6ouaWP3B8rtqC02kbpF3WSuyjU8OZBPjf2icPJtEiCGVYhmy2Et2ZfO6EFb j/tNyFIyF73JBUSu7ujsQRdA98t81PNvLnt6LIDmdyGIuJUzuUUF5Q4ahYCXBv+J 04SiOKyOfIaXmPte/9AxTzA2mJiBLxCp9+QekfLs9PTEedFwqKAHJ+Y/yxflaFlm Z48P0tiNn9EgA/klstpd8fOV0XQVo+zycbFNYZJYTvnyUcA39W6uCJTGSvJBMeXm Xc/c1f0tB2AIeX3aCZYcZPZl2GhbWRyh/fqOHFAQBaPjnFJax00gq48qmJV9AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUzZt7uAoWywdf0I4t15ZqG/2wnTYwHwYDVR0j BBgwFoAUqjtdvymKuqT4Cab9c1K++R/HhYUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRDFNaFJ3cFo2UWVvRnR4Nlpyc0NzVVIzaGhpNEs4dlZpRExydFZGbmVF dEovMC9BQTNCNURCRjI5OEFCQUE0RjgwOUE2RkQ3MzUyQkVGOTFGQzc4NTg1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FBM0I1REJGMjk4QUJBQTRG ODA5QTZGRDczNTJCRUY5MUZDNzg1ODUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RDFNaFJ3cFo2UWVvRnR4Nlpyc0NzVVIzaGhpNEs4dlZpRExydFZGbmVFdEovMC9B QTNCNURCRjI5OEFCQUE0RjgwOUE2RkQ3MzUyQkVGOTFGQzc4NTg1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkLRxnyCLVscMFpiDj89T05C5WgS9C2SDcBPA/9CB29JwAjSkodusPxLb9iMh Xw7ywO+N0z2HSCayXzMM37IJIrCmxe9T6JiK5rN8cTSMNOt7pn6J8CZ5OkzckKK9 vkQbCyFrKnEYFvdAfKv8BmNhMBT/CXdiB2f6FV6WZdKEu3upA8dsg6hAXcHpc3p1 LHnl56Ej7BuIt3ZiVhe1hdDyIiBmsWQmk1aWH5YWvqH4AJq5Mkms3Kr4WwBrT7KP jbNA82TrUj0S3fWrmIZjlMA276ILUdkDh3ZyemGbAcgpsUnvt2glLnjtJoOtKb86 zrb/EA1MSksPdp84GlkLesu0tg== -----END CERTIFICATE-----Generated at Wed Nov 5 23:44:00 2025 by rpki-client