$ rpki-client -vvf rpki-repo.registro.br/repo/GATePCB2SVHpMveRtRxP2QRkw3Wvu1sX4woG5BvzELKS/1/AA29BAE54F39868638C50A1BB95E23A7763C38A4.mft File: AA29BAE54F39868638C50A1BB95E23A7763C38A4.mft (raw, json) Hash identifier: QQlUQlPIiL6X5oAArkAwuMc8DXxiHiWQLtMSWBrN5hg= Subject key identifier: A4:90:AE:5E:30:A1:46:50:CD:F6:31:F5:FF:31:B9:B4:4B:59:2B:29 Authority key identifier: AA:29:BA:E5:4F:39:86:86:38:C5:0A:1B:B9:5E:23:A7:76:3C:38:A4 Certificate issuer: /CN=AA29BAE54F39868638C50A1BB95E23A7763C38A4 Certificate serial: 4A12A3715B6F2BFE797E2379523D7624F4FD6252 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA29BAE54F39868638C50A1BB95E23A7763C38A4.cer Subject info access: rsync://rpki-repo.registro.br/repo/GATePCB2SVHpMveRtRxP2QRkw3Wvu1sX4woG5BvzELKS/1/AA29BAE54F39868638C50A1BB95E23A7763C38A4.mft Manifest number: 027D Signing time: Sat 26 Jul 2025 16:02:22 +0000 Manifest this update: Sat 26 Jul 2025 15:57:22 +0000 Manifest next update: Sun 27 Jul 2025 17:54:22 +0000 Files and hashes: 1: 3139312e33372e3232342e302f32312d3234203d3e20323633333734.roa (hash: XA3CDHGQzJtVy7KlXD+Ti8xltUzX609QLMhF05gs+Cg=) 2: 323830343a313532383a3a2f33322d3438203d3e20323633333734.roa (hash: ve9csxsYtvbttCUtJ6k2byKVef+aNPiHNUI7M+ZsbD4=) 3: AA29BAE54F39868638C50A1BB95E23A7763C38A4.crl (hash: QIjRlbNRwXJa70dbUyf+RhIfH4dOBO0eRysf6LDBYj4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GATePCB2SVHpMveRtRxP2QRkw3Wvu1sX4woG5BvzELKS/1/AA29BAE54F39868638C50A1BB95E23A7763C38A4.crl rsync://rpki-repo.registro.br/repo/GATePCB2SVHpMveRtRxP2QRkw3Wvu1sX4woG5BvzELKS/1/AA29BAE54F39868638C50A1BB95E23A7763C38A4.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA29BAE54F39868638C50A1BB95E23A7763C38A4.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 27 Jul 2025 17:54:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:12:a3:71:5b:6f:2b:fe:79:7e:23:79:52:3d:76:24:f4:fd:62:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA29BAE54F39868638C50A1BB95E23A7763C38A4 Validity Not Before: Jul 26 15:57:22 2025 GMT Not After : Jul 27 17:54:22 2025 GMT Subject: CN=A490AE5E30A14650CDF631F5FF31B9B44B592B29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:84:34:6e:3e:1a:03:85:c0:c8:3a:2d:53:22: 38:fd:bf:ab:57:38:95:0c:3a:97:2f:3d:1d:c6:7d: 83:ea:f5:d6:99:28:b1:19:d9:36:76:f9:26:4f:87: 52:bf:f6:4b:78:2d:5c:b3:8b:96:ba:3f:be:fd:51: 7d:0b:d6:17:01:60:b1:d8:eb:bd:ba:0f:de:a3:78: 51:89:fa:4c:d9:28:f7:bb:38:5f:11:0e:b1:00:63: 9d:74:b9:05:c9:b2:9e:88:94:41:3d:ed:8c:35:3b: 6c:d9:06:12:1f:e3:2b:75:ba:a8:31:15:fe:cf:96: ba:a2:4d:f8:d1:e5:ee:bd:34:10:4c:d3:6d:a1:c6: b4:f5:66:1d:c1:7b:f1:5a:e5:7a:8e:cc:57:c7:55: 54:31:d6:f8:c2:ab:d7:e8:07:58:d1:ac:13:ae:89: b9:58:fc:27:3f:7f:82:2b:58:db:36:1f:d8:37:21: c2:5f:b5:00:26:9c:81:25:67:ab:8c:d6:33:ab:87: a8:c2:68:7b:9e:c5:3f:44:ec:c7:61:2e:e1:d6:f4: 44:63:28:42:3d:7e:50:7b:22:1f:f7:74:23:19:b1: 0b:93:d6:d4:68:0f:ed:9d:35:38:de:a4:b0:3b:c7: 7f:4f:f4:56:38:87:39:f0:51:82:ed:58:96:a6:8c: f5:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:90:AE:5E:30:A1:46:50:CD:F6:31:F5:FF:31:B9:B4:4B:59:2B:29 X509v3 Authority Key Identifier: keyid:AA:29:BA:E5:4F:39:86:86:38:C5:0A:1B:B9:5E:23:A7:76:3C:38:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GATePCB2SVHpMveRtRxP2QRkw3Wvu1sX4woG5BvzELKS/1/AA29BAE54F39868638C50A1BB95E23A7763C38A4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA29BAE54F39868638C50A1BB95E23A7763C38A4.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GATePCB2SVHpMveRtRxP2QRkw3Wvu1sX4woG5BvzELKS/1/AA29BAE54F39868638C50A1BB95E23A7763C38A4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:44:71:bb:6f:12:73:c0:69:c5:c6:73:f3:3e:32:70:0c:0b: 22:aa:23:51:88:c0:eb:d7:b9:e2:7a:48:5b:0a:e2:41:55:46: e0:5c:35:2e:26:31:ef:72:c0:5d:7a:4c:b4:84:70:6b:30:5a: 75:48:3a:12:68:55:e4:78:52:51:68:89:bb:d7:64:7b:64:f5: bc:b9:23:47:28:e6:dd:51:8d:64:85:b9:54:7d:1b:83:89:eb: 73:08:e5:b9:88:e2:5f:37:db:6d:34:f6:99:ed:45:6b:3a:9c: 74:57:56:81:8f:33:16:6e:79:5b:0d:c5:34:fb:e9:f4:e0:25: 53:5a:19:d0:5f:e0:c8:59:92:25:72:24:40:7c:54:d2:3a:c1: 7c:bd:02:d0:ce:d5:7f:e0:81:7b:e8:ec:df:8c:c0:51:e5:f9: 31:d9:12:11:58:4f:bc:a6:0f:9d:3d:44:74:f0:20:ff:9d:2a: 85:9f:f0:ac:20:fa:ea:23:bf:d4:f0:dd:b5:da:75:88:fa:56: 7f:69:83:a0:ae:6b:90:fb:8e:8b:f5:f4:aa:f3:35:25:b9:08: e3:9d:db:18:ac:93:52:de:63:1e:4b:fd:a0:85:9d:b4:3c:be: 3a:fc:1e:31:e3:02:a2:f4:7d:b8:d6:4c:e6:09:2d:51:4e:91: 21:36:66:f2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUShKjcVtvK/55fiN5Uj12JPT9YlIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUEyOUJBRTU0RjM5ODY4NjM4QzUwQTFCQjk1RTIzQTc3 NjNDMzhBNDAeFw0yNTA3MjYxNTU3MjJaFw0yNTA3MjcxNzU0MjJaMDMxMTAvBgNV BAMTKEE0OTBBRTVFMzBBMTQ2NTBDREY2MzFGNUZGMzFCOUI0NEI1OTJCMjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCthDRuPhoDhcDIOi1TIjj9v6tX OJUMOpcvPR3GfYPq9daZKLEZ2TZ2+SZPh1K/9kt4LVyzi5a6P779UX0L1hcBYLHY 6726D96jeFGJ+kzZKPe7OF8RDrEAY510uQXJsp6IlEE97Yw1O2zZBhIf4yt1uqgx Ff7PlrqiTfjR5e69NBBM022hxrT1Zh3Be/Fa5XqOzFfHVVQx1vjCq9foB1jRrBOu iblY/Cc/f4IrWNs2H9g3IcJftQAmnIElZ6uM1jOrh6jCaHuexT9E7MdhLuHW9ERj KEI9flB7Ih/3dCMZsQuT1tRoD+2dNTjepLA7x39P9FY4hznwUYLtWJamjPVfAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUpJCuXjChRlDN9jH1/zG5tEtZKykwHwYDVR0j BBgwFoAUqim65U85hoY4xQobuV4jp3Y8OKQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR0FUZVBDQjJTVkhwTXZlUnRSeFAyUVJrdzNXdnUxc1g0d29HNUJ2ekVM S1MvMS9BQTI5QkFFNTRGMzk4Njg2MzhDNTBBMUJCOTVFMjNBNzc2M0MzOEE0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FBMjlCQUU1NEYzOTg2ODYz OEM1MEExQkI5NUUyM0E3NzYzQzM4QTQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R0FUZVBDQjJTVkhwTXZlUnRSeFAyUVJrdzNXdnUxc1g0d29HNUJ2ekVMS1MvMS9B QTI5QkFFNTRGMzk4Njg2MzhDNTBBMUJCOTVFMjNBNzc2M0MzOEE0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEATERxu28Sc8BpxcZz8z4ycAwLIqojUYjA69e54npIWwriQVVG4Fw1LiYx73LA XXpMtIRwazBadUg6EmhV5HhSUWiJu9dke2T1vLkjRyjm3VGNZIW5VH0bg4nrcwjl uYjiXzfbbTT2me1FazqcdFdWgY8zFm55Ww3FNPvp9OAlU1oZ0F/gyFmSJXIkQHxU 0jrBfL0C0M7Vf+CBe+js34zAUeX5MdkSEVhPvKYPnT1EdPAg/50qhZ/wrCD66iO/ 1PDdtdp1iPpWf2mDoK5rkPuOi/X0qvM1JbkI453bGKyTUt5jHkv9oIWdtDy+Ovwe MeMCovR9uNZM5gktUU6RITZm8g== -----END CERTIFICATE-----Generated at Sun Jul 27 05:54:10 2025 by rpki-client