$ rpki-client -vvf rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.mft File: AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.mft (raw, json) Hash identifier: 992gQRabHxNJ96Je/IpmIMS5VqnrELVpKrhpy3uthWI= Subject key identifier: DB:C3:E4:48:31:6A:67:44:AE:A9:44:E7:CC:CF:30:25:EA:6F:73:3F Authority key identifier: AA:2B:D3:35:20:EC:0C:79:CF:C9:9C:40:27:FF:2E:AF:60:62:5F:FA Certificate issuer: /CN=AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA Certificate serial: 50E0CA40CF32EA8542A081D820B63A6E94A378C0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.cer Subject info access: rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.mft Manifest number: 013A Signing time: Sun 10 Aug 2025 09:50:21 +0000 Manifest this update: Sun 10 Aug 2025 09:45:21 +0000 Manifest next update: Mon 11 Aug 2025 10:40:21 +0000 Files and hashes: 1: 323830343a353763303a3a2f33322d3438203d3e20323638303834.roa (hash: KBArWlV5vwMsvaplxezo5vYP7odX82xOazE7IspsFqE=) 2: 34352e3136382e3234342e302f32322d3234203d3e20323638303834.roa (hash: MUps5dYJYbgZlLgJ9zMzZggPufSzKqjyIWh5+12TXKE=) 3: AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.crl (hash: 0r6AwwKvj0GB+v54+6pvr+pScPS2lHNplX0SPzj2Dh0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.crl rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 11 Aug 2025 10:40:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:e0:ca:40:cf:32:ea:85:42:a0:81:d8:20:b6:3a:6e:94:a3:78:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA Validity Not Before: Aug 10 09:45:21 2025 GMT Not After : Aug 11 10:40:21 2025 GMT Subject: CN=DBC3E448316A6744AEA944E7CCCF3025EA6F733F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:31:ed:65:ac:b2:c5:d6:f0:f6:48:b6:47:0d: 2b:f2:48:7e:78:e8:1f:2a:81:30:38:9f:5f:62:1f: 29:2f:35:cf:1c:1c:10:cd:e6:c4:4d:67:fd:19:d6: 90:79:c3:a9:91:e0:aa:3f:82:2c:3b:42:c9:5c:7e: 99:b1:ec:1f:26:f4:57:32:c9:ec:f8:c9:87:70:39: ee:c7:29:8c:ad:d1:ed:f7:d6:65:48:a1:a1:14:b6: f5:84:0e:c8:64:8d:bb:e7:ac:05:75:d4:54:50:c2: bc:23:7b:11:70:1e:a7:36:ef:f6:d8:5e:c2:b4:e0: 94:0b:c1:f5:cb:98:5b:0e:92:77:d8:31:39:ea:11: c2:8d:99:83:36:01:33:13:c7:13:8a:1d:7b:b8:66: 77:0f:89:f1:e7:bf:84:e4:76:7e:b9:22:e7:64:40: b7:6e:c6:99:43:6f:c1:d7:5a:48:53:7d:93:1a:e6: 36:8d:a8:a6:0c:64:2d:e9:2d:32:0d:aa:16:8d:43: 96:50:df:4b:95:35:0e:b6:6f:9b:85:31:a9:86:72: df:29:81:ed:3c:fe:9d:7a:d9:48:57:e8:ec:7d:73: 0f:98:75:09:21:93:f7:4c:3c:7e:a8:ad:17:15:f6: 90:4c:d3:01:d7:fd:9c:40:37:ea:c2:64:8b:89:7e: 14:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:C3:E4:48:31:6A:67:44:AE:A9:44:E7:CC:CF:30:25:EA:6F:73:3F X509v3 Authority Key Identifier: keyid:AA:2B:D3:35:20:EC:0C:79:CF:C9:9C:40:27:FF:2E:AF:60:62:5F:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:7f:ec:51:13:9d:26:c8:a5:9c:78:61:96:b4:ef:67:2b:c1: dd:c1:5b:a6:d5:28:c8:77:78:ef:ce:ba:ca:47:84:03:3b:b9: e9:8c:a6:c8:a8:4b:27:0a:30:73:37:2b:54:ee:45:ae:2e:a8: 5c:4d:05:40:24:a0:25:30:7b:da:1c:97:36:61:09:8f:f7:3b: ca:45:83:a1:fd:c8:90:19:68:53:36:84:b8:f3:92:88:1f:53: 95:2a:eb:b7:b1:6d:3b:47:fd:fc:95:78:06:32:18:d6:94:2a: 11:29:46:f8:2d:69:a0:97:6b:9e:ed:f4:5b:b1:a2:df:dd:bb: f6:17:0b:d3:c7:da:02:a7:b6:a7:79:2d:d3:3a:b3:62:93:26: da:30:f6:e0:e0:d7:d8:55:b5:57:12:2a:f3:d9:26:17:fa:c2: 78:1c:a0:17:24:f9:c4:0c:68:1e:71:4f:6d:70:14:bb:1a:1d: 6c:30:e4:85:fb:af:94:ef:fb:81:67:7d:f2:f8:09:d6:a0:d1: 4d:16:ff:a4:51:fc:9c:3d:f2:f6:9c:53:cc:98:88:d0:79:f5: 9a:bc:89:19:09:62:56:f9:87:3e:a3:74:44:c0:63:a8:a0:27: 2a:88:26:df:ab:dd:2b:95:5a:3a:5b:e8:97:4a:99:34:c1:df: e9:f8:a8:ab -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUUODKQM8y6oVCoIHYILY6bpSjeMAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUEyQkQzMzUyMEVDMEM3OUNGQzk5QzQwMjdGRjJFQUY2 MDYyNUZGQTAeFw0yNTA4MTAwOTQ1MjFaFw0yNTA4MTExMDQwMjFaMDMxMTAvBgNV BAMTKERCQzNFNDQ4MzE2QTY3NDRBRUE5NDRFN0NDQ0YzMDI1RUE2RjczM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkMe1lrLLF1vD2SLZHDSvySH54 6B8qgTA4n19iHykvNc8cHBDN5sRNZ/0Z1pB5w6mR4Ko/giw7Qslcfpmx7B8m9Fcy yez4yYdwOe7HKYyt0e331mVIoaEUtvWEDshkjbvnrAV11FRQwrwjexFwHqc27/bY XsK04JQLwfXLmFsOknfYMTnqEcKNmYM2ATMTxxOKHXu4ZncPifHnv4Tkdn65Iudk QLduxplDb8HXWkhTfZMa5jaNqKYMZC3pLTINqhaNQ5ZQ30uVNQ62b5uFMamGct8p ge08/p162UhX6Ox9cw+YdQkhk/dMPH6orRcV9pBM0wHX/ZxAN+rCZIuJfhSHAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU28PkSDFqZ0SuqUTnzM8wJepvcz8wHwYDVR0j BBgwFoAUqivTNSDsDHnPyZxAJ/8ur2BiX/owDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRzV3WG1UYmpHWGRDc2pQZzU4ZXphQ2k3Wk5XZ05aOTdpZzg5SHpERXBm VFYvMC9BQTJCRDMzNTIwRUMwQzc5Q0ZDOTlDNDAyN0ZGMkVBRjYwNjI1RkZBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FBMkJEMzM1MjBFQzBDNzlD RkM5OUM0MDI3RkYyRUFGNjA2MjVGRkEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RzV3WG1UYmpHWGRDc2pQZzU4ZXphQ2k3Wk5XZ05aOTdpZzg5SHpERXBmVFYvMC9B QTJCRDMzNTIwRUMwQzc5Q0ZDOTlDNDAyN0ZGMkVBRjYwNjI1RkZBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZ3/sUROdJsilnHhhlrTvZyvB3cFbptUoyHd47866ykeEAzu56YymyKhLJwow czcrVO5Fri6oXE0FQCSgJTB72hyXNmEJj/c7ykWDof3IkBloUzaEuPOSiB9TlSrr t7FtO0f9/JV4BjIY1pQqESlG+C1poJdrnu30W7Gi39279hcL08faAqe2p3kt0zqz YpMm2jD24ODX2FW1VxIq89kmF/rCeBygFyT5xAxoHnFPbXAUuxodbDDkhfuvlO/7 gWd98vgJ1qDRTRb/pFH8nD3y9pxTzJiI0Hn1mryJGQliVvmHPqN0RMBjqKAnKogm 36vdK5VaOlvol0qZNMHf6fioqw== -----END CERTIFICATE-----Generated at Sun Aug 10 18:29:51 2025 by rpki-client