$ rpki-client -vvf rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.mft File: AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.mft (raw, json) Hash identifier: 4VUV/6fnEtEhYEnS9MNrzMOX96iuJFsC7SF2PJH3BM8= Subject key identifier: F0:57:5F:D3:B5:95:F7:7B:43:F3:A1:6C:35:B7:00:54:44:00:39:0F Authority key identifier: AA:2B:D3:35:20:EC:0C:79:CF:C9:9C:40:27:FF:2E:AF:60:62:5F:FA Certificate issuer: /CN=AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA Certificate serial: 7804E15F38C4D0639A87A5AAEB5F40AB6EF1095C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.cer Subject info access: rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.mft Manifest number: 01AD Signing time: Wed 05 Nov 2025 07:47:15 +0000 Manifest this update: Wed 05 Nov 2025 07:42:15 +0000 Manifest next update: Thu 06 Nov 2025 09:33:15 +0000 Files and hashes: 1: AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.crl (hash: E6Yi07QJWx9T7pChYvsEFAVg7Act0lST2Mf6ds9rVkg=) 2: 34352e3136382e3234342e302f32322d3234203d3e20323638303834.roa (hash: MUps5dYJYbgZlLgJ9zMzZggPufSzKqjyIWh5+12TXKE=) 3: 323830343a353763303a3a2f33322d3438203d3e20323638303834.roa (hash: KBArWlV5vwMsvaplxezo5vYP7odX82xOazE7IspsFqE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.crl rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 09:33:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:04:e1:5f:38:c4:d0:63:9a:87:a5:aa:eb:5f:40:ab:6e:f1:09:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA Validity Not Before: Nov 5 07:42:15 2025 GMT Not After : Nov 6 09:33:15 2025 GMT Subject: CN=F0575FD3B595F77B43F3A16C35B700544400390F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:53:5a:11:28:6a:19:d9:1b:41:92:15:83:85: cc:46:3b:53:50:d8:4f:9f:6a:0b:f8:f9:87:cd:c0: 9d:07:24:12:55:8e:f1:ba:48:d6:d2:03:da:a4:e6: 3c:4c:ff:92:40:f5:fc:89:10:42:39:2b:e4:00:9f: 0b:b4:c1:f2:b2:40:64:fc:24:d2:15:61:b4:b2:c5: 67:4c:58:03:e7:60:75:ec:92:66:fb:29:04:ad:a6: dd:9f:31:b9:c4:3a:37:3e:38:a4:87:51:10:f3:5b: 31:bc:47:5a:f1:63:cc:5b:21:1c:29:3a:d2:12:26: 24:1b:78:9b:a8:2d:9a:57:a1:32:b7:a9:fd:7a:af: 60:df:7f:6a:13:28:88:ac:8a:63:70:c9:96:bc:54: b1:42:9f:3e:1b:49:93:aa:6f:7e:dc:46:0e:51:80: ef:59:c3:3e:83:49:f2:82:db:63:5a:8b:4f:2d:3d: 9c:7f:5a:c0:ec:7d:c1:ae:e4:2e:7a:e5:e7:aa:e2: 4d:03:68:60:3a:93:01:4d:ac:a8:4f:d5:d8:d8:a8: 13:ae:ef:b8:17:5f:9f:99:0e:70:5c:e2:c2:bf:a5: 08:74:72:c8:eb:a0:f6:9c:2a:e9:fb:e5:9c:db:2f: a5:23:49:e0:87:66:98:7b:91:a2:71:3f:c4:52:22: df:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:57:5F:D3:B5:95:F7:7B:43:F3:A1:6C:35:B7:00:54:44:00:39:0F X509v3 Authority Key Identifier: keyid:AA:2B:D3:35:20:EC:0C:79:CF:C9:9C:40:27:FF:2E:AF:60:62:5F:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d0:93:43:05:ca:a7:de:7c:fd:fd:8d:2f:fb:ba:bb:5a:65:10: 77:98:d2:cf:4d:6c:f2:aa:99:23:1e:05:41:ee:57:10:14:75: 68:de:7f:ba:ce:e2:bc:1a:92:66:9c:88:c7:c0:31:af:7c:b2: 20:9b:12:6a:6a:84:38:31:46:89:d4:c1:6b:a1:c0:53:f2:92: 56:b5:e9:11:52:57:cd:5a:2e:aa:00:90:e0:57:f8:bb:f5:21: 70:2f:a5:86:b3:53:4c:4a:47:85:c8:c6:24:01:42:b2:0a:6f: a2:21:ac:93:f6:34:5d:86:48:1a:25:2f:3e:f2:94:02:54:6c: ed:15:23:e0:de:c9:ae:98:dd:dd:b0:f5:e3:25:85:20:ae:f2: 1d:2c:fb:3d:04:e2:d7:83:01:fa:c8:ba:bb:85:59:26:52:2b: e0:44:bf:86:15:25:e6:0b:b0:f2:73:ae:86:08:cd:7b:33:be: 92:f1:ee:bb:ab:35:50:5f:c7:e6:7e:b6:fd:77:05:c3:b5:de: 7d:af:30:26:7a:23:2f:1b:d3:8b:31:7f:a9:a1:6f:1f:e1:87: 6f:59:18:71:b3:5d:b1:b8:7c:7d:db:25:4d:c4:4e:6a:21:69: 97:d4:b8:e0:38:44:cf:8c:f2:d4:64:26:7e:0e:08:50:f3:8f: bb:d0:d7:02 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUeAThXzjE0GOah6Wq619Aq27xCVwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUEyQkQzMzUyMEVDMEM3OUNGQzk5QzQwMjdGRjJFQUY2 MDYyNUZGQTAeFw0yNTExMDUwNzQyMTVaFw0yNTExMDYwOTMzMTVaMDMxMTAvBgNV BAMTKEYwNTc1RkQzQjU5NUY3N0I0M0YzQTE2QzM1QjcwMDU0NDQwMDM5MEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9U1oRKGoZ2RtBkhWDhcxGO1NQ 2E+fagv4+YfNwJ0HJBJVjvG6SNbSA9qk5jxM/5JA9fyJEEI5K+QAnwu0wfKyQGT8 JNIVYbSyxWdMWAPnYHXskmb7KQStpt2fMbnEOjc+OKSHURDzWzG8R1rxY8xbIRwp OtISJiQbeJuoLZpXoTK3qf16r2Dff2oTKIisimNwyZa8VLFCnz4bSZOqb37cRg5R gO9Zwz6DSfKC22Nai08tPZx/WsDsfcGu5C565eeq4k0DaGA6kwFNrKhP1djYqBOu 77gXX5+ZDnBc4sK/pQh0csjroPacKun75ZzbL6UjSeCHZph7kaJxP8RSIt/lAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU8Fdf07WV93tD86FsNbcAVEQAOQ8wHwYDVR0j BBgwFoAUqivTNSDsDHnPyZxAJ/8ur2BiX/owDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRzV3WG1UYmpHWGRDc2pQZzU4ZXphQ2k3Wk5XZ05aOTdpZzg5SHpERXBm VFYvMC9BQTJCRDMzNTIwRUMwQzc5Q0ZDOTlDNDAyN0ZGMkVBRjYwNjI1RkZBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FBMkJEMzM1MjBFQzBDNzlD RkM5OUM0MDI3RkYyRUFGNjA2MjVGRkEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RzV3WG1UYmpHWGRDc2pQZzU4ZXphQ2k3Wk5XZ05aOTdpZzg5SHpERXBmVFYvMC9B QTJCRDMzNTIwRUMwQzc5Q0ZDOTlDNDAyN0ZGMkVBRjYwNjI1RkZBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEA0JNDBcqn3nz9/Y0v+7q7WmUQd5jSz01s8qqZIx4FQe5XEBR1aN5/us7ivBqS ZpyIx8Axr3yyIJsSamqEODFGidTBa6HAU/KSVrXpEVJXzVouqgCQ4Ff4u/UhcC+l hrNTTEpHhcjGJAFCsgpvoiGsk/Y0XYZIGiUvPvKUAlRs7RUj4N7Jrpjd3bD14yWF IK7yHSz7PQTi14MB+si6u4VZJlIr4ES/hhUl5guw8nOuhgjNezO+kvHuu6s1UF/H 5n62/XcFw7Xefa8wJnojLxvTizF/qaFvH+GHb1kYcbNdsbh8fdslTcROaiFpl9S4 4DhEz4zy1GQmfg4IUPOPu9DXAg== -----END CERTIFICATE-----Generated at Wed Nov 5 16:43:51 2025 by rpki-client