$ rpki-client -vvf rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/0/A2A3F34AD377DD8B185FB62F294479A4953EA29F.mft File: A2A3F34AD377DD8B185FB62F294479A4953EA29F.mft (raw, json) Hash identifier: AfFnxrnW6lTgXPtcby8eUMcs5lfFLCRGka2FifOXr44= Subject key identifier: 21:77:BE:89:AF:91:AC:7A:2C:22:A5:C0:DC:4A:F6:F6:C0:5B:46:B4 Authority key identifier: A2:A3:F3:4A:D3:77:DD:8B:18:5F:B6:2F:29:44:79:A4:95:3E:A2:9F Certificate issuer: /CN=A2A3F34AD377DD8B185FB62F294479A4953EA29F Certificate serial: 38D329C0390C0671924EFE050FFAD9E609B232F9 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2A3F34AD377DD8B185FB62F294479A4953EA29F.cer Subject info access: rsync://rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/0/A2A3F34AD377DD8B185FB62F294479A4953EA29F.mft Manifest number: 2B Signing time: Sun 10 Aug 2025 21:53:30 +0000 Manifest this update: Sun 10 Aug 2025 21:48:30 +0000 Manifest next update: Tue 12 Aug 2025 01:17:30 +0000 Files and hashes: 1: 3133382e3132312e3132302e302f32322d3234203d3e20323634323933.roa (hash: rTjYayeyuMTgmvyXTSthMVbnAtKwGqrwy6zYd+iMfAc=) 2: A2A3F34AD377DD8B185FB62F294479A4953EA29F.crl (hash: 5AyHwqf2oBvjpz0rYp5vyTOkevPHHf0Q9yRq8hwtVxE=) 3: 34352e3233322e3136302e302f32322d3234203d3e20323634323933.roa (hash: CPvT3p3XAZFfu3gOfh4/owWrLpHzeZEHAOI08mcgjF4=) 4: 323830343a323561383a3a2f33322d3334203d3e20323634323933.roa (hash: ZoB1LT2ZH9Vj6IVaBBhWrsP4cnsjosijPidmwDlg3SQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/0/A2A3F34AD377DD8B185FB62F294479A4953EA29F.crl rsync://rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/0/A2A3F34AD377DD8B185FB62F294479A4953EA29F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2A3F34AD377DD8B185FB62F294479A4953EA29F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 12 Aug 2025 01:17:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:d3:29:c0:39:0c:06:71:92:4e:fe:05:0f:fa:d9:e6:09:b2:32:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A2A3F34AD377DD8B185FB62F294479A4953EA29F Validity Not Before: Aug 10 21:48:30 2025 GMT Not After : Aug 12 01:17:30 2025 GMT Subject: CN=2177BE89AF91AC7A2C22A5C0DC4AF6F6C05B46B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:4d:40:94:f3:f8:2a:4e:b2:82:61:a7:0d:d5: fb:4d:82:f4:fb:1c:b4:0d:a9:ce:ed:db:f3:0d:71: 0c:95:8d:71:34:05:90:ea:68:9e:2d:aa:d2:81:f1: 2d:dc:bd:00:63:ef:76:13:9f:03:d8:55:1c:46:53: a9:53:02:17:b4:b4:d4:4d:ca:f4:87:f7:34:19:e2: c6:da:fa:9b:b1:88:4f:d3:98:91:29:f0:1f:98:3d: 21:bd:1f:f5:ed:36:d6:56:12:99:1a:6b:1b:92:87: 37:a4:38:41:16:e7:97:3c:b9:7c:94:0c:73:df:ec: 6a:db:35:a8:fd:ea:19:39:6c:e9:0c:e2:e3:7e:8f: 02:da:2a:5c:10:67:e6:34:0c:14:8e:27:f9:36:8c: 3c:ee:6d:ae:eb:3e:76:5d:4f:26:31:e0:6e:11:3e: 7f:1f:95:42:01:92:3e:48:b8:d6:71:18:63:13:ca: 94:44:43:24:74:2a:81:bf:4d:7b:ad:af:d3:f5:15: 84:3c:08:c8:35:f6:51:9a:c1:d2:db:79:80:2d:cc: 44:a6:8b:52:00:b0:88:e2:76:d0:6e:d9:19:7a:53: c0:e0:a1:c1:ba:2a:f4:9e:2b:0e:4b:49:2b:99:f7: da:2f:0c:c6:2d:fe:06:36:95:3b:05:3f:86:b1:09: 9a:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:77:BE:89:AF:91:AC:7A:2C:22:A5:C0:DC:4A:F6:F6:C0:5B:46:B4 X509v3 Authority Key Identifier: keyid:A2:A3:F3:4A:D3:77:DD:8B:18:5F:B6:2F:29:44:79:A4:95:3E:A2:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/0/A2A3F34AD377DD8B185FB62F294479A4953EA29F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2A3F34AD377DD8B185FB62F294479A4953EA29F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/0/A2A3F34AD377DD8B185FB62F294479A4953EA29F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:b8:f2:b9:04:16:24:82:59:79:04:bf:d7:08:5c:27:20:9e: 9f:a9:50:a0:24:8d:6f:68:20:8c:a1:08:06:6c:bf:f2:fd:33: 26:e9:3c:0d:f7:d4:6c:22:07:c4:3e:07:f8:0b:9a:b2:72:36: 83:90:30:d1:21:f4:66:d7:87:38:c8:af:6d:42:35:68:7e:e3: 98:01:ac:86:e0:08:8d:3c:9f:99:b1:8b:0a:38:08:2c:d9:7f: 91:c7:c2:d6:14:27:a1:92:55:16:45:82:0f:98:19:e9:c4:34: e1:8b:29:87:44:46:9d:aa:37:7d:9f:ee:cc:fd:9d:54:25:49: 37:86:cf:9b:62:b9:a5:a7:66:31:f8:e8:77:df:c2:7e:6a:32: ce:c2:10:0f:ae:81:57:ae:a1:72:85:fd:62:0c:db:ca:79:e2: 0c:7b:9e:bb:fc:c0:30:12:01:a3:84:2d:a0:18:1a:ac:00:0f: f3:24:f4:af:17:7b:64:f3:22:c1:68:8e:9e:9e:20:ad:ee:f0: 66:5f:c6:47:ce:73:8c:af:04:45:5e:a0:b2:95:78:3c:52:a4: 13:f1:a9:7f:a3:4a:fb:90:be:96:a1:1b:8b:f6:4d:87:da:c2: 71:90:68:5f:63:22:33:97:0a:67:cd:29:5d:d5:e3:b8:f8:ea: e1:e8:94:46 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUONMpwDkMBnGSTv4FD/rZ5gmyMvkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTJBM0YzNEFEMzc3REQ4QjE4NUZCNjJGMjk0NDc5QTQ5 NTNFQTI5RjAeFw0yNTA4MTAyMTQ4MzBaFw0yNTA4MTIwMTE3MzBaMDMxMTAvBgNV BAMTKDIxNzdCRTg5QUY5MUFDN0EyQzIyQTVDMERDNEFGNkY2QzA1QjQ2QjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDETUCU8/gqTrKCYacN1ftNgvT7 HLQNqc7t2/MNcQyVjXE0BZDqaJ4tqtKB8S3cvQBj73YTnwPYVRxGU6lTAhe0tNRN yvSH9zQZ4sba+puxiE/TmJEp8B+YPSG9H/XtNtZWEpkaaxuShzekOEEW55c8uXyU DHPf7GrbNaj96hk5bOkM4uN+jwLaKlwQZ+Y0DBSOJ/k2jDzuba7rPnZdTyYx4G4R Pn8flUIBkj5IuNZxGGMTypREQyR0KoG/TXutr9P1FYQ8CMg19lGawdLbeYAtzESm i1IAsIjidtBu2Rl6U8DgocG6KvSeKw5LSSuZ99ovDMYt/gY2lTsFP4axCZoLAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUIXe+ia+RrHosIqXA3Er29sBbRrQwHwYDVR0j BBgwFoAUoqPzStN33YsYX7YvKUR5pJU+op8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR2FrdHRDazJqS0MyeXFTZ3ppenJKcnJZNWFnenNaMnc3QlFxdmtYRlhW RmgvMC9BMkEzRjM0QUQzNzdERDhCMTg1RkI2MkYyOTQ0NzlBNDk1M0VBMjlGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0EyQTNGMzRBRDM3N0REOEIx ODVGQjYyRjI5NDQ3OUE0OTUzRUEyOUYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R2FrdHRDazJqS0MyeXFTZ3ppenJKcnJZNWFnenNaMnc3QlFxdmtYRlhWRmgvMC9B MkEzRjM0QUQzNzdERDhCMTg1RkI2MkYyOTQ0NzlBNDk1M0VBMjlGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFrjyuQQWJIJZeQS/1whcJyCen6lQoCSNb2ggjKEIBmy/8v0zJuk8DffUbCIH xD4H+AuasnI2g5Aw0SH0ZteHOMivbUI1aH7jmAGshuAIjTyfmbGLCjgILNl/kcfC 1hQnoZJVFkWCD5gZ6cQ04Ysph0RGnao3fZ/uzP2dVCVJN4bPm2K5padmMfjod9/C fmoyzsIQD66BV66hcoX9YgzbynniDHueu/zAMBIBo4QtoBgarAAP8yT0rxd7ZPMi wWiOnp4gre7wZl/GR85zjK8ERV6gspV4PFKkE/Gpf6NK+5C+lqEbi/ZNh9rCcZBo X2MiM5cKZ80pXdXjuPjq4eiURg== -----END CERTIFICATE-----Generated at Mon Aug 11 04:34:11 2025 by rpki-client