$ rpki-client -vvf rpki-repo.registro.br/repo/D1duEuF8eLBtiWqeB6zFnvGjJs7NvtBnu37borKVzjdH/0/AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.mft File: AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.mft (raw, json) Hash identifier: f1p9nI9RI7rQqY+sbmE4kf0pqZmrZcnV6k+93NQrdlo= Subject key identifier: 21:E0:BB:7D:0B:60:4C:A7:66:71:A3:45:46:7F:B3:48:FA:EB:F6:59 Authority key identifier: AA:07:8E:8F:5E:A4:EF:EF:8E:70:03:E0:A9:B2:11:65:B5:AB:81:D4 Certificate issuer: /CN=AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4 Certificate serial: 30F70E9EAD06BFE26EC0B736BFEA12820D553540 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.cer Subject info access: rsync://rpki-repo.registro.br/repo/D1duEuF8eLBtiWqeB6zFnvGjJs7NvtBnu37borKVzjdH/0/AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.mft Manifest number: 028B Signing time: Wed 05 Nov 2025 13:11:05 +0000 Manifest this update: Wed 05 Nov 2025 13:06:05 +0000 Manifest next update: Thu 06 Nov 2025 15:43:05 +0000 Files and hashes: 1: 323830343a343131383a3a2f33322d3634203d3e20323636303033.roa (hash: 77PgPUhXMiY+0pD6ukxK9PeS+HQTTgL9ZfKKPVRrA3Y=) 2: 3138312e3139312e39362e302f32322d3332203d3e20323636303033.roa (hash: d8gu9ptBCMqS7eW9x/zK+JYDxuuJS0KDEGnCGJEMVwg=) 3: 34352e3137332e36342e302f32322d3330203d3e20323636303033.roa (hash: UvOi/ZT1aicBgWtPWrJpXA3ochSvMg4rQ0JcREvXNQU=) 4: AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.crl (hash: EF2oA7RAe/dgCL7Z+nopVD1BPF6jIKy8aMdnmgyFr2A=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/D1duEuF8eLBtiWqeB6zFnvGjJs7NvtBnu37borKVzjdH/0/AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.crl rsync://rpki-repo.registro.br/repo/D1duEuF8eLBtiWqeB6zFnvGjJs7NvtBnu37borKVzjdH/0/AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 15:43:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:f7:0e:9e:ad:06:bf:e2:6e:c0:b7:36:bf:ea:12:82:0d:55:35:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4 Validity Not Before: Nov 5 13:06:05 2025 GMT Not After : Nov 6 15:43:05 2025 GMT Subject: CN=21E0BB7D0B604CA76671A345467FB348FAEBF659 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:b6:f7:aa:12:bb:08:37:15:89:ef:ad:17:1a: 00:df:1a:42:4c:f5:b5:59:1a:76:9f:cb:d4:bd:67: 5a:b7:c6:9a:c5:6e:05:be:a4:df:87:65:35:33:db: ce:07:27:3c:9d:24:01:39:7d:dc:3d:95:e1:1d:95: ad:d9:67:45:02:44:29:49:e9:f6:52:8d:16:82:dd: 4d:65:34:a8:f0:7b:7f:5d:c2:31:df:6a:58:0a:7b: 0b:ff:0c:6b:ec:b7:73:40:9c:9a:b9:59:34:18:bf: f1:11:85:8a:81:a3:38:d3:49:3a:4e:d7:08:15:93: 34:f6:89:0d:35:8b:cf:51:0d:e1:f7:c1:f9:8f:de: df:b4:35:b2:c9:74:a8:ae:bb:af:bf:01:fe:90:d7: 0b:71:63:e0:97:16:d4:34:a8:0f:1b:5b:f0:62:a1: 03:9d:32:83:d6:93:ed:b5:5c:34:e0:33:85:27:69: e2:5b:76:2e:39:0a:12:fe:cb:58:bd:43:88:98:3f: 9c:69:1d:5d:7d:c0:80:d3:97:cc:ac:c1:60:50:5e: b7:b1:39:90:4f:61:d3:e4:a1:b5:3e:84:b7:b8:9f: 65:3e:54:13:86:93:9d:e4:f5:df:c7:50:81:de:14: 24:2c:bc:b3:13:8b:1f:62:95:8c:33:8c:33:86:84: 8c:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:E0:BB:7D:0B:60:4C:A7:66:71:A3:45:46:7F:B3:48:FA:EB:F6:59 X509v3 Authority Key Identifier: keyid:AA:07:8E:8F:5E:A4:EF:EF:8E:70:03:E0:A9:B2:11:65:B5:AB:81:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/D1duEuF8eLBtiWqeB6zFnvGjJs7NvtBnu37borKVzjdH/0/AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/D1duEuF8eLBtiWqeB6zFnvGjJs7NvtBnu37borKVzjdH/0/AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:cc:d1:e7:1d:b7:5e:13:d3:53:2e:27:66:3e:7a:e5:d5:9d: 52:24:3b:5a:7b:d5:9a:5a:63:38:78:de:ec:c7:4f:ab:86:95: 51:bd:c4:c6:77:09:d2:b0:eb:9c:ae:f4:73:a4:c1:93:83:9f: 2e:b2:86:80:f5:de:09:da:42:eb:62:e0:15:bb:d0:6c:d9:c6: c5:33:a0:b9:bb:3e:49:e2:68:30:64:9b:84:df:26:8d:14:b5: 61:27:18:ab:4e:d5:09:ec:98:e2:89:c1:ea:95:7b:04:3e:56: 0d:f6:16:34:1f:e7:f8:7a:72:64:e3:b7:bc:30:30:03:0a:49: ab:07:63:b5:de:1a:51:51:09:a5:38:0a:72:cd:a5:04:2e:21: 9a:1f:40:fa:4d:9a:0a:76:df:33:2e:55:97:06:bb:1a:d1:9c: a9:f9:d2:e0:10:e4:c1:74:47:c4:61:e5:29:98:bc:1e:2f:42: 47:07:b6:aa:2b:36:d1:38:89:66:2d:fd:39:c7:cc:0b:54:6e: ac:0a:fc:52:08:66:89:2c:2b:bd:e4:5b:9f:a6:2d:f0:07:3c: 70:98:a0:f8:c5:07:c6:70:46:50:30:38:3e:5b:97:59:07:24: 8c:86:96:9c:c8:cb:ff:19:5e:ac:04:87:06:8b:e4:52:e6:0c: b9:79:fc:3d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUMPcOnq0Gv+JuwLc2v+oSgg1VNUAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUEwNzhFOEY1RUE0RUZFRjhFNzAwM0UwQTlCMjExNjVC NUFCODFENDAeFw0yNTExMDUxMzA2MDVaFw0yNTExMDYxNTQzMDVaMDMxMTAvBgNV BAMTKDIxRTBCQjdEMEI2MDRDQTc2NjcxQTM0NTQ2N0ZCMzQ4RkFFQkY2NTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmtveqErsINxWJ760XGgDfGkJM 9bVZGnafy9S9Z1q3xprFbgW+pN+HZTUz284HJzydJAE5fdw9leEdla3ZZ0UCRClJ 6fZSjRaC3U1lNKjwe39dwjHfalgKewv/DGvst3NAnJq5WTQYv/ERhYqBozjTSTpO 1wgVkzT2iQ01i89RDeH3wfmP3t+0NbLJdKiuu6+/Af6Q1wtxY+CXFtQ0qA8bW/Bi oQOdMoPWk+21XDTgM4UnaeJbdi45ChL+y1i9Q4iYP5xpHV19wIDTl8yswWBQXrex OZBPYdPkobU+hLe4n2U+VBOGk53k9d/HUIHeFCQsvLMTix9ilYwzjDOGhIxxAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUIeC7fQtgTKdmcaNFRn+zSPrr9lkwHwYDVR0j BBgwFoAUqgeOj16k7++OcAPgqbIRZbWrgdQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRDFkdUV1RjhlTEJ0aVdxZUI2ekZudkdqSnM3TnZ0Qm51Mzdib3JLVnpq ZEgvMC9BQTA3OEU4RjVFQTRFRkVGOEU3MDAzRTBBOUIyMTE2NUI1QUI4MUQ0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FBMDc4RThGNUVBNEVGRUY4 RTcwMDNFMEE5QjIxMTY1QjVBQjgxRDQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RDFkdUV1RjhlTEJ0aVdxZUI2ekZudkdqSnM3TnZ0Qm51Mzdib3JLVnpqZEgvMC9B QTA3OEU4RjVFQTRFRkVGOEU3MDAzRTBBOUIyMTE2NUI1QUI4MUQ0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvMzR5x23XhPTUy4nZj565dWdUiQ7WnvVmlpjOHje7MdPq4aVUb3ExncJ0rDr nK70c6TBk4OfLrKGgPXeCdpC62LgFbvQbNnGxTOgubs+SeJoMGSbhN8mjRS1YScY q07VCeyY4onB6pV7BD5WDfYWNB/n+HpyZOO3vDAwAwpJqwdjtd4aUVEJpTgKcs2l BC4hmh9A+k2aCnbfMy5Vlwa7GtGcqfnS4BDkwXRHxGHlKZi8Hi9CRwe2qis20TiJ Zi39OcfMC1RurAr8UghmiSwrveRbn6Yt8Ac8cJig+MUHxnBGUDA4PluXWQckjIaW nMjL/xlerASHBovkUuYMuXn8PQ== -----END CERTIFICATE-----Generated at Thu Nov 6 01:14:40 2025 by rpki-client