$ rpki-client -vvf rpki-repo.registro.br/repo/GATePCB2SVHpMveRtRxP2QRkw3Wvu1sX4woG5BvzELKS/1/AA29BAE54F39868638C50A1BB95E23A7763C38A4.mft File: AA29BAE54F39868638C50A1BB95E23A7763C38A4.mft (raw, json) Hash identifier: 1lgmGpyfoxosVSfU6xFBtavth4aFZYYjOvDr/+PsVj4= Subject key identifier: F0:2E:43:1A:DD:09:FB:78:CB:68:AE:39:BA:73:6E:72:23:0E:0B:0C Authority key identifier: AA:29:BA:E5:4F:39:86:86:38:C5:0A:1B:B9:5E:23:A7:76:3C:38:A4 Certificate issuer: /CN=AA29BAE54F39868638C50A1BB95E23A7763C38A4 Certificate serial: 272BFF3ECEF2628A8C7EC5A61EFBA0E59FDB1DDF Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA29BAE54F39868638C50A1BB95E23A7763C38A4.cer Subject info access: rsync://rpki-repo.registro.br/repo/GATePCB2SVHpMveRtRxP2QRkw3Wvu1sX4woG5BvzELKS/1/AA29BAE54F39868638C50A1BB95E23A7763C38A4.mft Manifest number: 024A Signing time: Wed 18 Jun 2025 06:18:07 +0000 Manifest this update: Wed 18 Jun 2025 06:13:07 +0000 Manifest next update: Thu 19 Jun 2025 07:42:07 +0000 Files and hashes: 1: AA29BAE54F39868638C50A1BB95E23A7763C38A4.crl (hash: 5AEx1oqKhKscvNMKXLZ+tF19nAks0WDuZ9pHEdXDikE=) 2: 323830343a313532383a3a2f33322d3438203d3e20323633333734.roa (hash: ve9csxsYtvbttCUtJ6k2byKVef+aNPiHNUI7M+ZsbD4=) 3: 3139312e33372e3232342e302f32312d3234203d3e20323633333734.roa (hash: XA3CDHGQzJtVy7KlXD+Ti8xltUzX609QLMhF05gs+Cg=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GATePCB2SVHpMveRtRxP2QRkw3Wvu1sX4woG5BvzELKS/1/AA29BAE54F39868638C50A1BB95E23A7763C38A4.crl rsync://rpki-repo.registro.br/repo/GATePCB2SVHpMveRtRxP2QRkw3Wvu1sX4woG5BvzELKS/1/AA29BAE54F39868638C50A1BB95E23A7763C38A4.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA29BAE54F39868638C50A1BB95E23A7763C38A4.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 19 Jun 2025 07:42:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:2b:ff:3e:ce:f2:62:8a:8c:7e:c5:a6:1e:fb:a0:e5:9f:db:1d:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA29BAE54F39868638C50A1BB95E23A7763C38A4 Validity Not Before: Jun 18 06:13:07 2025 GMT Not After : Jun 19 07:42:07 2025 GMT Subject: CN=F02E431ADD09FB78CB68AE39BA736E72230E0B0C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:b0:42:f3:53:3e:70:9d:b3:c9:ef:8d:37:73: 99:51:c9:bf:db:87:ca:a3:2f:35:bd:e1:be:70:75: bc:92:ce:fb:20:3f:cb:78:70:57:e8:af:c2:03:09: 18:84:99:86:1c:ae:4e:c9:64:6b:13:17:33:f2:03: be:7f:19:45:15:9c:db:ce:c6:35:63:57:c3:92:59: 05:c8:fc:56:34:91:af:92:8e:a7:07:7b:cb:da:33: 13:4f:cf:b0:7f:e7:ea:b2:f4:02:67:d4:30:c7:4c: bf:da:e9:ea:63:ad:8f:bf:91:0b:2d:8d:98:0d:90: 7a:6b:77:b5:35:18:e4:d2:07:b9:9a:c4:58:f4:45: 96:06:d7:68:c8:75:99:21:c1:92:40:05:47:be:97: 1b:f1:51:12:4d:c5:c2:93:b4:01:71:2f:29:e6:39: 34:f4:f8:ab:70:53:88:2e:52:79:f5:ed:f1:32:ab: 59:ac:02:b3:2b:df:74:c6:3d:38:cd:6b:3a:e8:85: 3c:4c:df:40:31:67:23:c7:89:ee:fd:ec:31:3e:d9: d3:3a:da:ba:d5:2b:64:5d:8f:7d:95:f1:f6:8f:43: 53:08:2c:c6:a2:b4:cc:4e:50:05:ef:c6:f2:c4:6e: 56:80:02:30:03:11:05:db:fd:03:ee:8f:c1:9d:e2: bd:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:2E:43:1A:DD:09:FB:78:CB:68:AE:39:BA:73:6E:72:23:0E:0B:0C X509v3 Authority Key Identifier: keyid:AA:29:BA:E5:4F:39:86:86:38:C5:0A:1B:B9:5E:23:A7:76:3C:38:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GATePCB2SVHpMveRtRxP2QRkw3Wvu1sX4woG5BvzELKS/1/AA29BAE54F39868638C50A1BB95E23A7763C38A4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA29BAE54F39868638C50A1BB95E23A7763C38A4.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GATePCB2SVHpMveRtRxP2QRkw3Wvu1sX4woG5BvzELKS/1/AA29BAE54F39868638C50A1BB95E23A7763C38A4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:47:cb:87:72:ae:56:4a:0d:ed:ab:ac:3f:56:ab:37:25:cf: 05:f5:cc:f5:33:7a:2c:73:d1:fa:6f:f1:fc:80:5e:8d:cd:56: 0a:97:12:7a:32:a3:91:09:5d:1d:79:6d:e0:1f:7d:4b:78:0e: 74:f6:42:b6:58:36:a7:f0:03:89:3a:fd:43:10:f9:4a:87:9a: a7:af:fc:e7:c1:ad:ba:0a:87:95:b2:7d:d4:76:dd:f6:3f:58: 7e:2d:24:97:7a:8a:82:a6:63:a6:8f:45:7d:dc:24:6e:0e:26: 01:13:cf:07:6a:14:b0:45:a6:9f:57:f2:d5:6d:5e:cb:5f:11: c4:35:0e:46:71:47:e4:ab:36:d8:8d:18:f3:7b:ab:a7:95:03: e8:75:22:e5:55:90:0c:c1:48:c7:32:76:9c:dc:13:e2:f4:e1: 06:42:dc:1c:20:0b:a1:65:38:3c:18:e8:21:fe:0a:df:bd:45: 0d:1a:eb:05:8a:c4:48:2e:40:f1:eb:e0:58:ed:d2:f2:52:81: 0c:79:2b:cc:d5:b8:8c:51:a2:01:25:f6:7f:e2:6e:e7:26:47: 11:63:89:26:1e:01:41:d3:b0:69:b4:d4:b1:35:bb:50:2f:3a: 1b:ef:db:a7:56:35:84:58:23:a8:7c:b0:2a:28:bc:ff:19:9d: 57:6f:fb:4d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUJyv/Ps7yYoqMfsWmHvug5Z/bHd8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUEyOUJBRTU0RjM5ODY4NjM4QzUwQTFCQjk1RTIzQTc3 NjNDMzhBNDAeFw0yNTA2MTgwNjEzMDdaFw0yNTA2MTkwNzQyMDdaMDMxMTAvBgNV BAMTKEYwMkU0MzFBREQwOUZCNzhDQjY4QUUzOUJBNzM2RTcyMjMwRTBCMEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1sELzUz5wnbPJ7403c5lRyb/b h8qjLzW94b5wdbySzvsgP8t4cFfor8IDCRiEmYYcrk7JZGsTFzPyA75/GUUVnNvO xjVjV8OSWQXI/FY0ka+SjqcHe8vaMxNPz7B/5+qy9AJn1DDHTL/a6epjrY+/kQst jZgNkHprd7U1GOTSB7maxFj0RZYG12jIdZkhwZJABUe+lxvxURJNxcKTtAFxLynm OTT0+KtwU4guUnn17fEyq1msArMr33TGPTjNazrohTxM30AxZyPHie797DE+2dM6 2rrVK2Rdj32V8faPQ1MILMaitMxOUAXvxvLEblaAAjADEQXb/QPuj8Gd4r1hAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU8C5DGt0J+3jLaK45unNuciMOCwwwHwYDVR0j BBgwFoAUqim65U85hoY4xQobuV4jp3Y8OKQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR0FUZVBDQjJTVkhwTXZlUnRSeFAyUVJrdzNXdnUxc1g0d29HNUJ2ekVM S1MvMS9BQTI5QkFFNTRGMzk4Njg2MzhDNTBBMUJCOTVFMjNBNzc2M0MzOEE0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FBMjlCQUU1NEYzOTg2ODYz OEM1MEExQkI5NUUyM0E3NzYzQzM4QTQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R0FUZVBDQjJTVkhwTXZlUnRSeFAyUVJrdzNXdnUxc1g0d29HNUJ2ekVMS1MvMS9B QTI5QkFFNTRGMzk4Njg2MzhDNTBBMUJCOTVFMjNBNzc2M0MzOEE0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAF0fLh3KuVkoN7ausP1arNyXPBfXM9TN6LHPR+m/x/IBejc1WCpcSejKjkQld HXlt4B99S3gOdPZCtlg2p/ADiTr9QxD5Soeap6/858GtugqHlbJ91Hbd9j9Yfi0k l3qKgqZjpo9Ffdwkbg4mARPPB2oUsEWmn1fy1W1ey18RxDUORnFH5Ks22I0Y83ur p5UD6HUi5VWQDMFIxzJ2nNwT4vThBkLcHCALoWU4PBjoIf4K371FDRrrBYrESC5A 8evgWO3S8lKBDHkrzNW4jFGiASX2f+Ju5yZHEWOJJh4BQdOwabTUsTW7UC86G+/b p1Y1hFgjqHywKii8/xmdV2/7TQ== -----END CERTIFICATE-----Generated at Wed Jun 18 08:39:54 2025 by rpki-client