$ rpki-client -vvf rpki-repo.registro.br/repo/D1duEuF8eLBtiWqeB6zFnvGjJs7NvtBnu37borKVzjdH/0/AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.mft File: AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.mft (raw, json) Hash identifier: GBVHMtIM/DaNxCXXF9jitqEo9kR8loWvL1tUO6Qh9zw= Subject key identifier: AC:02:0D:DD:64:89:7C:1B:46:56:33:37:61:43:1E:BB:7A:20:21:1C Authority key identifier: AA:07:8E:8F:5E:A4:EF:EF:8E:70:03:E0:A9:B2:11:65:B5:AB:81:D4 Certificate issuer: /CN=AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4 Certificate serial: 3F6C670B67F91716866B71D1C816F57B42504DE8 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.cer Subject info access: rsync://rpki-repo.registro.br/repo/D1duEuF8eLBtiWqeB6zFnvGjJs7NvtBnu37borKVzjdH/0/AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.mft Manifest number: 0201 Signing time: Thu 24 Jul 2025 19:59:25 +0000 Manifest this update: Thu 24 Jul 2025 19:54:25 +0000 Manifest next update: Fri 25 Jul 2025 20:11:25 +0000 Files and hashes: 1: 3138312e3139312e39362e302f32322d3332203d3e20323636303033.roa (hash: d8gu9ptBCMqS7eW9x/zK+JYDxuuJS0KDEGnCGJEMVwg=) 2: 34352e3137332e36342e302f32322d3330203d3e20323636303033.roa (hash: UvOi/ZT1aicBgWtPWrJpXA3ochSvMg4rQ0JcREvXNQU=) 3: 323830343a343131383a3a2f33322d3634203d3e20323636303033.roa (hash: 77PgPUhXMiY+0pD6ukxK9PeS+HQTTgL9ZfKKPVRrA3Y=) 4: AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.crl (hash: Qs7n6XbYaXabwtAWrsNTgyqdH0ROwlfuCEro7KwOdqQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/D1duEuF8eLBtiWqeB6zFnvGjJs7NvtBnu37borKVzjdH/0/AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.crl rsync://rpki-repo.registro.br/repo/D1duEuF8eLBtiWqeB6zFnvGjJs7NvtBnu37borKVzjdH/0/AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Jul 2025 20:11:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:6c:67:0b:67:f9:17:16:86:6b:71:d1:c8:16:f5:7b:42:50:4d:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4 Validity Not Before: Jul 24 19:54:25 2025 GMT Not After : Jul 25 20:11:25 2025 GMT Subject: CN=AC020DDD64897C1B4656333761431EBB7A20211C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:43:57:52:0e:83:dc:6a:6e:1c:14:86:e7:f6: f9:56:89:bf:55:2d:77:e2:44:8b:a5:43:f4:92:df: 68:1c:d8:0d:35:52:7e:48:0b:46:c0:8a:2d:44:94: 1c:05:0f:e7:5c:29:ea:8d:9f:e3:41:f1:82:7c:85: 97:4b:ca:fc:90:5d:df:41:a0:0c:40:ef:4e:85:e3: 83:74:5e:e4:73:b2:19:fb:6f:dc:6b:3c:82:f5:64: 7b:01:28:65:7f:a8:66:d8:be:29:05:31:4d:9d:ee: 13:c1:bd:7c:56:9f:b9:39:55:6e:b8:ad:70:b1:ed: 09:8c:1b:d0:8a:bd:7d:b4:61:6d:21:fb:18:e6:d1: 0e:ef:ac:06:53:58:60:c0:e2:9b:f6:47:c7:6d:c1: 3f:df:77:17:b9:b7:78:ea:85:ce:e9:64:b7:3e:95: aa:00:b7:e6:24:d9:fc:0e:00:3c:26:9f:19:3a:b6: d9:a8:57:c3:38:92:80:12:06:3b:d7:dd:c5:90:48: 82:10:f4:18:3e:d0:d1:3b:59:4a:8f:d4:7d:c6:68: 6c:3e:d8:38:4d:19:a8:6a:88:30:e7:d3:12:f3:ca: 06:6e:82:35:d8:68:27:b9:10:94:87:f6:72:cd:bf: 15:94:c7:6a:6d:14:aa:e2:0e:ef:44:44:ef:ca:1f: a9:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:02:0D:DD:64:89:7C:1B:46:56:33:37:61:43:1E:BB:7A:20:21:1C X509v3 Authority Key Identifier: keyid:AA:07:8E:8F:5E:A4:EF:EF:8E:70:03:E0:A9:B2:11:65:B5:AB:81:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/D1duEuF8eLBtiWqeB6zFnvGjJs7NvtBnu37borKVzjdH/0/AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/D1duEuF8eLBtiWqeB6zFnvGjJs7NvtBnu37borKVzjdH/0/AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:12:d4:b4:dd:f3:75:50:e9:2b:99:e0:bd:74:fc:72:9d:61: 2d:c1:a6:cb:33:aa:18:b2:2f:76:67:6c:e7:19:63:02:9f:06: 57:a5:65:d0:f0:c0:b9:ff:46:10:6b:a0:b5:3f:21:2f:b1:f2: a7:42:59:b9:09:b2:e2:5c:60:0d:99:1e:d5:01:72:19:45:d7: b2:08:81:a3:9b:a7:7b:4f:1c:1a:8e:2f:8d:8a:0b:34:cb:32: 56:f0:3d:49:54:a0:9b:71:f1:cf:34:ad:ee:19:97:2b:53:c2: 3f:c8:74:5c:19:16:a7:84:0d:58:80:ba:d3:af:f7:1d:de:67: fc:d6:34:3f:64:56:9a:df:1f:e5:95:a7:18:a0:35:18:23:59: f2:96:d8:47:58:50:44:bc:64:a6:66:2b:c1:a3:a2:05:26:a4: 4e:28:60:6f:57:20:72:a6:93:c3:04:62:b5:a2:da:c8:03:9c: 33:28:9f:6d:92:e4:e8:fc:8b:09:46:25:32:af:3b:60:b5:10: c3:b8:d1:01:cb:26:8d:3c:be:0e:6c:08:75:ec:32:56:0d:5b: cd:83:d4:de:6b:48:0e:45:c8:4f:fa:c7:d1:e1:20:da:bd:ff: ac:9c:61:f3:9a:6d:49:3a:f5:3d:28:cf:a9:d3:73:08:35:82: 65:f3:56:69 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUP2xnC2f5FxaGa3HRyBb1e0JQTegwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUEwNzhFOEY1RUE0RUZFRjhFNzAwM0UwQTlCMjExNjVC NUFCODFENDAeFw0yNTA3MjQxOTU0MjVaFw0yNTA3MjUyMDExMjVaMDMxMTAvBgNV BAMTKEFDMDIwRERENjQ4OTdDMUI0NjU2MzMzNzYxNDMxRUJCN0EyMDIxMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcQ1dSDoPcam4cFIbn9vlWib9V LXfiRIulQ/SS32gc2A01Un5IC0bAii1ElBwFD+dcKeqNn+NB8YJ8hZdLyvyQXd9B oAxA706F44N0XuRzshn7b9xrPIL1ZHsBKGV/qGbYvikFMU2d7hPBvXxWn7k5VW64 rXCx7QmMG9CKvX20YW0h+xjm0Q7vrAZTWGDA4pv2R8dtwT/fdxe5t3jqhc7pZLc+ laoAt+Yk2fwOADwmnxk6ttmoV8M4koASBjvX3cWQSIIQ9Bg+0NE7WUqP1H3GaGw+ 2DhNGahqiDDn0xLzygZugjXYaCe5EJSH9nLNvxWUx2ptFKriDu9ERO/KH6khAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUrAIN3WSJfBtGVjM3YUMeu3ogIRwwHwYDVR0j BBgwFoAUqgeOj16k7++OcAPgqbIRZbWrgdQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRDFkdUV1RjhlTEJ0aVdxZUI2ekZudkdqSnM3TnZ0Qm51Mzdib3JLVnpq ZEgvMC9BQTA3OEU4RjVFQTRFRkVGOEU3MDAzRTBBOUIyMTE2NUI1QUI4MUQ0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FBMDc4RThGNUVBNEVGRUY4 RTcwMDNFMEE5QjIxMTY1QjVBQjgxRDQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RDFkdUV1RjhlTEJ0aVdxZUI2ekZudkdqSnM3TnZ0Qm51Mzdib3JLVnpqZEgvMC9B QTA3OEU4RjVFQTRFRkVGOEU3MDAzRTBBOUIyMTE2NUI1QUI4MUQ0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcBLUtN3zdVDpK5ngvXT8cp1hLcGmyzOqGLIvdmds5xljAp8GV6Vl0PDAuf9G EGugtT8hL7Hyp0JZuQmy4lxgDZke1QFyGUXXsgiBo5une08cGo4vjYoLNMsyVvA9 SVSgm3HxzzSt7hmXK1PCP8h0XBkWp4QNWIC606/3Hd5n/NY0P2RWmt8f5ZWnGKA1 GCNZ8pbYR1hQRLxkpmYrwaOiBSakTihgb1cgcqaTwwRitaLayAOcMyifbZLk6PyL CUYlMq87YLUQw7jRAcsmjTy+DmwIdewyVg1bzYPU3mtIDkXIT/rH0eEg2r3/rJxh 85ptSTr1PSjPqdNzCDWCZfNWaQ== -----END CERTIFICATE-----Generated at Fri Jul 25 12:55:23 2025 by rpki-client