$ rpki-client -vvf rpki-repo.registro.br/repo/GATePCB2SVHpMveRtRxP2QRkw3Wvu1sX4woG5BvzELKS/1/AA29BAE54F39868638C50A1BB95E23A7763C38A4.mft File: AA29BAE54F39868638C50A1BB95E23A7763C38A4.mft (raw, json) Hash identifier: KvYrERZG6XPj6nZwmcsvMErlTADZjIzLGx2JowQZnwQ= Subject key identifier: 1B:C7:A0:A4:CA:A2:8A:41:27:80:F6:CA:F1:C4:52:3C:56:EC:05:34 Authority key identifier: AA:29:BA:E5:4F:39:86:86:38:C5:0A:1B:B9:5E:23:A7:76:3C:38:A4 Certificate issuer: /CN=AA29BAE54F39868638C50A1BB95E23A7763C38A4 Certificate serial: 18CE13BE0871E8D3EBDA31A228EF86C1AC8DE6CB Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA29BAE54F39868638C50A1BB95E23A7763C38A4.cer Subject info access: rsync://rpki-repo.registro.br/repo/GATePCB2SVHpMveRtRxP2QRkw3Wvu1sX4woG5BvzELKS/1/AA29BAE54F39868638C50A1BB95E23A7763C38A4.mft Manifest number: 028F Signing time: Fri 08 Aug 2025 23:30:33 +0000 Manifest this update: Fri 08 Aug 2025 23:25:33 +0000 Manifest next update: Sat 09 Aug 2025 23:45:33 +0000 Files and hashes: 1: AA29BAE54F39868638C50A1BB95E23A7763C38A4.crl (hash: R75c+THXL83wVaQh9BJvs4PD8AVcfJrd7dsvyTmAVHo=) 2: 323830343a313532383a3a2f33322d3438203d3e20323633333734.roa (hash: ve9csxsYtvbttCUtJ6k2byKVef+aNPiHNUI7M+ZsbD4=) 3: 3139312e33372e3232342e302f32312d3234203d3e20323633333734.roa (hash: XA3CDHGQzJtVy7KlXD+Ti8xltUzX609QLMhF05gs+Cg=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GATePCB2SVHpMveRtRxP2QRkw3Wvu1sX4woG5BvzELKS/1/AA29BAE54F39868638C50A1BB95E23A7763C38A4.crl rsync://rpki-repo.registro.br/repo/GATePCB2SVHpMveRtRxP2QRkw3Wvu1sX4woG5BvzELKS/1/AA29BAE54F39868638C50A1BB95E23A7763C38A4.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA29BAE54F39868638C50A1BB95E23A7763C38A4.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 09 Aug 2025 23:45:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:ce:13:be:08:71:e8:d3:eb:da:31:a2:28:ef:86:c1:ac:8d:e6:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA29BAE54F39868638C50A1BB95E23A7763C38A4 Validity Not Before: Aug 8 23:25:33 2025 GMT Not After : Aug 9 23:45:33 2025 GMT Subject: CN=1BC7A0A4CAA28A412780F6CAF1C4523C56EC0534 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:2f:c4:22:20:8a:40:9f:61:eb:84:82:75:b2: 2c:33:ae:b8:97:b6:7d:b1:ff:41:2f:7f:5e:a8:bb: e8:35:0d:ed:79:e3:19:23:43:e4:fd:9e:2e:9d:fe: 54:d2:aa:f1:57:38:16:69:91:29:a8:d0:6c:8b:14: 34:02:70:d6:bf:ac:65:3f:8d:b9:64:60:92:f5:7e: fc:a0:65:25:8d:05:cc:03:c7:97:f3:fe:24:a2:2d: bf:00:d4:ed:1d:2c:a9:f6:42:54:80:fd:1e:20:2f: 6f:d0:60:9e:f3:5b:33:a3:75:35:77:fc:4b:89:be: 33:51:23:40:a9:9c:35:21:23:66:8b:cd:68:81:6f: 6f:30:62:bc:3e:77:60:8a:5e:0d:50:cc:5d:3c:2a: 3e:09:8a:19:1c:ce:c2:23:64:5a:ea:5f:3a:b2:d1: d7:78:e1:7c:32:fc:d6:dc:7b:0b:dd:c6:de:7c:b0: eb:7a:cf:6a:9a:4c:7c:0b:08:e1:6c:d9:5e:20:5b: d0:47:4d:41:9e:7a:0e:c1:fc:b1:8a:38:50:b9:53: c1:17:4b:78:8a:1a:97:32:c9:15:b2:9a:64:20:03: ef:cb:06:24:b6:74:20:cd:fd:dc:a3:7f:42:01:24: 32:73:5c:d6:a3:4d:00:90:c9:b4:4b:00:c2:66:7e: 30:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:C7:A0:A4:CA:A2:8A:41:27:80:F6:CA:F1:C4:52:3C:56:EC:05:34 X509v3 Authority Key Identifier: keyid:AA:29:BA:E5:4F:39:86:86:38:C5:0A:1B:B9:5E:23:A7:76:3C:38:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GATePCB2SVHpMveRtRxP2QRkw3Wvu1sX4woG5BvzELKS/1/AA29BAE54F39868638C50A1BB95E23A7763C38A4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA29BAE54F39868638C50A1BB95E23A7763C38A4.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GATePCB2SVHpMveRtRxP2QRkw3Wvu1sX4woG5BvzELKS/1/AA29BAE54F39868638C50A1BB95E23A7763C38A4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:38:c1:8a:a4:25:e1:23:f7:b6:bc:9a:ec:a2:ca:bb:75:a1: ab:7f:5e:db:11:97:3e:ae:30:7a:f5:ac:d2:2b:56:b3:95:f2: 70:c3:9f:3f:61:8b:5d:82:7f:6f:d6:43:8d:4e:b5:bc:fd:d2: 5d:20:f2:df:a4:e9:65:a9:e1:43:9c:69:88:a2:16:f0:2f:2a: 84:bd:20:ab:64:5a:3f:41:2a:92:88:32:24:97:ca:14:6b:b1: 57:ff:63:d5:d9:72:2a:9a:9b:e1:da:dd:31:44:9b:78:32:7a: 85:6d:49:bd:6a:a4:36:ce:62:34:f2:e7:bf:a8:84:33:35:c9: b7:1c:a5:68:78:8a:b5:1a:c1:7e:b9:13:3c:f7:39:fa:6b:1e: 97:e4:bf:2b:da:6a:ad:4f:c9:e0:38:aa:bf:b8:53:8e:67:dc: de:c9:ba:c6:35:59:c3:e9:9a:c1:1c:68:20:2b:6c:f9:bb:1d: 1f:3f:2c:f7:e7:40:ae:8f:56:c5:2a:73:b2:ac:ee:66:a8:3e: 8c:3c:b6:9a:31:37:b4:17:aa:6f:ce:68:48:79:f6:b3:5d:4e: 9b:e6:5c:4f:34:6d:ec:2a:ca:bf:88:2f:5c:c6:52:23:1c:ec: 78:d8:55:e5:3d:62:e7:e2:9a:8c:64:0d:8b:41:4a:17:7b:3d: 79:03:0c:f3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUGM4Tvghx6NPr2jGiKO+GwayN5sswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUEyOUJBRTU0RjM5ODY4NjM4QzUwQTFCQjk1RTIzQTc3 NjNDMzhBNDAeFw0yNTA4MDgyMzI1MzNaFw0yNTA4MDkyMzQ1MzNaMDMxMTAvBgNV BAMTKDFCQzdBMEE0Q0FBMjhBNDEyNzgwRjZDQUYxQzQ1MjNDNTZFQzA1MzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9L8QiIIpAn2HrhIJ1siwzrriX tn2x/0Evf16ou+g1De154xkjQ+T9ni6d/lTSqvFXOBZpkSmo0GyLFDQCcNa/rGU/ jblkYJL1fvygZSWNBcwDx5fz/iSiLb8A1O0dLKn2QlSA/R4gL2/QYJ7zWzOjdTV3 /EuJvjNRI0CpnDUhI2aLzWiBb28wYrw+d2CKXg1QzF08Kj4JihkczsIjZFrqXzqy 0dd44Xwy/Nbcewvdxt58sOt6z2qaTHwLCOFs2V4gW9BHTUGeeg7B/LGKOFC5U8EX S3iKGpcyyRWymmQgA+/LBiS2dCDN/dyjf0IBJDJzXNajTQCQybRLAMJmfjCxAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUG8egpMqiikEngPbK8cRSPFbsBTQwHwYDVR0j BBgwFoAUqim65U85hoY4xQobuV4jp3Y8OKQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR0FUZVBDQjJTVkhwTXZlUnRSeFAyUVJrdzNXdnUxc1g0d29HNUJ2ekVM S1MvMS9BQTI5QkFFNTRGMzk4Njg2MzhDNTBBMUJCOTVFMjNBNzc2M0MzOEE0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FBMjlCQUU1NEYzOTg2ODYz OEM1MEExQkI5NUUyM0E3NzYzQzM4QTQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R0FUZVBDQjJTVkhwTXZlUnRSeFAyUVJrdzNXdnUxc1g0d29HNUJ2ekVMS1MvMS9B QTI5QkFFNTRGMzk4Njg2MzhDNTBBMUJCOTVFMjNBNzc2M0MzOEE0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVzjBiqQl4SP3trya7KLKu3Whq39e2xGXPq4wevWs0itWs5XycMOfP2GLXYJ/ b9ZDjU61vP3SXSDy36TpZanhQ5xpiKIW8C8qhL0gq2RaP0EqkogyJJfKFGuxV/9j 1dlyKpqb4drdMUSbeDJ6hW1JvWqkNs5iNPLnv6iEMzXJtxylaHiKtRrBfrkTPPc5 +msel+S/K9pqrU/J4Diqv7hTjmfc3sm6xjVZw+mawRxoICts+bsdHz8s9+dAro9W xSpzsqzuZqg+jDy2mjE3tBeqb85oSHn2s11Om+ZcTzRt7CrKv4gvXMZSIxzseNhV 5T1i5+KajGQNi0FKF3s9eQMM8w== -----END CERTIFICATE-----Generated at Sat Aug 9 03:01:16 2025 by rpki-client