$ rpki-client -vvf rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.mft File: AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.mft (raw, json) Hash identifier: fltQFLU/nA2SWXzaTW5kWS0tNJ88b+ke6rkCLDybTUc= Subject key identifier: 08:DD:95:39:B5:D1:34:C1:84:35:37:88:8C:38:5A:F1:83:82:E8:52 Authority key identifier: AA:2B:D3:35:20:EC:0C:79:CF:C9:9C:40:27:FF:2E:AF:60:62:5F:FA Certificate issuer: /CN=AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA Certificate serial: 369F3ED4F67346BBE0591472235F43BEE632156C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.cer Subject info access: rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.mft Manifest number: 02D2 Signing time: Sat 13 Jun 2026 17:16:03 +0000 Manifest this update: Sat 13 Jun 2026 17:11:03 +0000 Manifest next update: Sun 14 Jun 2026 20:08:03 +0000 Files and hashes: 1: 323830343a353763303a3a2f33322d3438203d3e20323638303834.roa (hash: S0AjGowjHrQskxnZK2sx1BKijCXDSHemCEaKFJOGAlE=) 2: AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.crl (hash: 7vSj5Zget9Y041verrqFEoX4trEsDJbq2MQdDz/yWsw=) 3: 34352e3136382e3234342e302f32322d3234203d3e20323638303834.roa (hash: taywcaeihyQubshZ3X5BpeKVWmoaHFB3BPWtzBe0iZs=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.crl rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 14 Jun 2026 20:08:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:9f:3e:d4:f6:73:46:bb:e0:59:14:72:23:5f:43:be:e6:32:15:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA Validity Not Before: Jun 13 17:11:03 2026 GMT Not After : Jun 14 20:08:03 2026 GMT Subject: CN=08DD9539B5D134C1843537888C385AF18382E852 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:19:57:2e:5e:2e:ff:c0:29:a8:d2:94:5f:fd: e1:8e:33:ff:84:51:f4:f6:f2:c8:dd:f7:f4:be:bd: 20:e3:bf:02:36:65:9f:b4:a4:7a:3f:5e:fd:a0:dd: 00:58:e9:55:6f:38:29:49:e6:bf:a1:78:70:1f:a4: f2:10:cc:52:55:0b:5e:6f:f6:d5:ee:da:f2:f3:a1: 4c:43:96:a2:5b:8a:c3:53:2d:ed:ac:cb:96:a7:79: e7:b3:23:04:7a:e0:87:9d:66:68:11:66:e4:c3:06: 43:57:3c:ec:14:fd:3d:ab:1d:9b:a5:0f:b3:84:d0: f7:eb:07:ed:7e:1d:aa:b6:c6:98:1c:e4:91:1e:5c: b4:0c:78:3c:ae:a8:3b:1f:5f:b4:e3:0d:b0:cb:a3: 93:49:54:6b:f9:eb:46:3c:b7:30:a9:15:5f:3c:f4: 1f:33:24:46:70:d4:93:d8:53:f2:3e:06:68:df:6f: c9:28:1e:43:1a:0c:ea:54:7b:13:af:5a:51:a2:e6: 71:e5:60:d6:ae:e5:02:40:5f:38:2e:b0:1e:2c:fd: bd:a3:ca:af:6a:66:c2:3f:94:e5:04:7f:c3:09:41: 89:a0:ee:46:cf:9c:7f:f3:9c:27:d6:30:62:54:32: 4c:37:a3:7c:ad:b9:22:e2:a5:7d:30:6e:44:76:a4: a5:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:DD:95:39:B5:D1:34:C1:84:35:37:88:8C:38:5A:F1:83:82:E8:52 X509v3 Authority Key Identifier: keyid:AA:2B:D3:35:20:EC:0C:79:CF:C9:9C:40:27:FF:2E:AF:60:62:5F:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:a7:1c:b1:1c:41:1d:a3:eb:9d:bd:f7:49:2c:0a:94:87:0f: 7e:57:10:13:9d:35:3b:73:6f:67:b5:23:94:a4:d0:d7:f6:dc: 41:90:f9:87:f1:70:05:a9:85:3c:62:7e:d9:4b:1d:51:6a:3c: e4:d6:99:7a:6b:25:69:0d:41:82:27:f3:8c:21:03:90:9d:9c: 6f:3f:43:ce:ff:3b:87:ed:b6:66:ec:ca:cf:a8:d4:50:ed:bc: 59:c4:75:e8:83:8d:fa:b1:35:e9:e5:c5:c4:ec:dc:1b:24:fe: c8:5d:1a:14:09:47:ad:23:e9:bf:8a:c6:73:14:e7:60:46:6f: a4:b5:1f:e6:4b:d2:f9:01:6b:a6:30:41:df:58:c5:e5:6d:86: dd:bd:3b:10:fd:48:34:9f:1c:5b:d6:8a:cb:82:76:63:67:26: 47:23:e6:8b:37:06:97:44:7a:42:96:74:c0:3c:06:fe:3e:ae: 24:3c:03:ce:07:57:ce:cf:0d:9e:22:40:c1:d8:8d:6c:e4:20: 91:1a:c3:a9:98:c4:ea:ec:4b:f7:e2:87:30:62:37:d8:56:b7: fa:5f:51:59:51:aa:b6:22:1a:f8:5a:79:dd:15:fb:39:10:e5: bd:c9:71:64:cb:f8:f8:e0:4f:0d:b2:46:92:ed:50:d6:93:64: cb:75:ed:7d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUNp8+1PZzRrvgWRRyI19DvuYyFWwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUEyQkQzMzUyMEVDMEM3OUNGQzk5QzQwMjdGRjJFQUY2 MDYyNUZGQTAeFw0yNjA2MTMxNzExMDNaFw0yNjA2MTQyMDA4MDNaMDMxMTAvBgNV BAMTKDA4REQ5NTM5QjVEMTM0QzE4NDM1Mzc4ODhDMzg1QUYxODM4MkU4NTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqGVcuXi7/wCmo0pRf/eGOM/+E UfT28sjd9/S+vSDjvwI2ZZ+0pHo/Xv2g3QBY6VVvOClJ5r+heHAfpPIQzFJVC15v 9tXu2vLzoUxDlqJbisNTLe2sy5aneeezIwR64IedZmgRZuTDBkNXPOwU/T2rHZul D7OE0PfrB+1+Haq2xpgc5JEeXLQMeDyuqDsfX7TjDbDLo5NJVGv560Y8tzCpFV88 9B8zJEZw1JPYU/I+Bmjfb8koHkMaDOpUexOvWlGi5nHlYNau5QJAXzgusB4s/b2j yq9qZsI/lOUEf8MJQYmg7kbPnH/znCfWMGJUMkw3o3ytuSLipX0wbkR2pKVZAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUCN2VObXRNMGENTeIjDha8YOC6FIwHwYDVR0j BBgwFoAUqivTNSDsDHnPyZxAJ/8ur2BiX/owDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRzV3WG1UYmpHWGRDc2pQZzU4ZXphQ2k3Wk5XZ05aOTdpZzg5SHpERXBm VFYvMC9BQTJCRDMzNTIwRUMwQzc5Q0ZDOTlDNDAyN0ZGMkVBRjYwNjI1RkZBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FBMkJEMzM1MjBFQzBDNzlD RkM5OUM0MDI3RkYyRUFGNjA2MjVGRkEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RzV3WG1UYmpHWGRDc2pQZzU4ZXphQ2k3Wk5XZ05aOTdpZzg5SHpERXBmVFYvMC9B QTJCRDMzNTIwRUMwQzc5Q0ZDOTlDNDAyN0ZGMkVBRjYwNjI1RkZBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAg6ccsRxBHaPrnb33SSwKlIcPflcQE501O3NvZ7UjlKTQ1/bcQZD5h/FwBamF PGJ+2UsdUWo85NaZemslaQ1BgifzjCEDkJ2cbz9Dzv87h+22ZuzKz6jUUO28WcR1 6ION+rE16eXFxOzcGyT+yF0aFAlHrSPpv4rGcxTnYEZvpLUf5kvS+QFrpjBB31jF 5W2G3b07EP1INJ8cW9aKy4J2Y2cmRyPmizcGl0R6QpZ0wDwG/j6uJDwDzgdXzs8N niJAwdiNbOQgkRrDqZjE6uxL9+KHMGI32Fa3+l9RWVGqtiIa+Fp53RX7ORDlvclx ZMv4+OBPDbJGku1Q1pNky3XtfQ== -----END CERTIFICATE-----Generated at Sun Jun 14 04:35:42 2026 by rpki-client