$ rpki-client -vvf rpki-repo.registro.br/repo/BpjQzn4bNuBgo3eE9SkWBzednzdwKTmkETuaz2GDjks6/0/AAE5DEB28FB1B77C5621A48D330349DB07D1D3F8.mft File: AAE5DEB28FB1B77C5621A48D330349DB07D1D3F8.mft (raw, json) Hash identifier: 19bWWIJsa6a/hImoYkylI107HaCNiKWfBCmQCGEXfvM= Subject key identifier: 1A:BA:64:A1:28:0B:38:A5:E7:AE:11:A5:F6:DB:76:00:F8:E7:FB:5D Authority key identifier: AA:E5:DE:B2:8F:B1:B7:7C:56:21:A4:8D:33:03:49:DB:07:D1:D3:F8 Certificate issuer: /CN=AAE5DEB28FB1B77C5621A48D330349DB07D1D3F8 Certificate serial: 0161884024B7FC202F5E92527BF3CA246ABC67B2 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AAE5DEB28FB1B77C5621A48D330349DB07D1D3F8.cer Subject info access: rsync://rpki-repo.registro.br/repo/BpjQzn4bNuBgo3eE9SkWBzednzdwKTmkETuaz2GDjks6/0/AAE5DEB28FB1B77C5621A48D330349DB07D1D3F8.mft Manifest number: 27 Signing time: Sun 02 Nov 2025 17:45:37 +0000 Manifest this update: Sun 02 Nov 2025 17:40:37 +0000 Manifest next update: Mon 03 Nov 2025 20:25:37 +0000 Files and hashes: 1: 34352e3232362e3230382e302f32322d3234203d3e20323637303536.roa (hash: KQXI2qaY/0J5AROdpd404puiKa5sk3dJIp7GXWxIelQ=) 2: 323830343a343737383a3a2f33322d3438203d3e20323637303536.roa (hash: uSx2QInVU7dPUD1XpC3zsr9iVyxnTwdzolsbn7DZuBw=) 3: 34352e3136302e3231352e302f32342d3234203d3e20323637303536.roa (hash: Q8bMNmO9lA2D1lHozYjMiSECVwJwap0hkmNp1A0df2U=) 4: AAE5DEB28FB1B77C5621A48D330349DB07D1D3F8.crl (hash: Ox+A7BZIbYL5wKVLId0hOrH2Ysm2a/CUpbW2VsMVF0U=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BpjQzn4bNuBgo3eE9SkWBzednzdwKTmkETuaz2GDjks6/0/AAE5DEB28FB1B77C5621A48D330349DB07D1D3F8.crl rsync://rpki-repo.registro.br/repo/BpjQzn4bNuBgo3eE9SkWBzednzdwKTmkETuaz2GDjks6/0/AAE5DEB28FB1B77C5621A48D330349DB07D1D3F8.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AAE5DEB28FB1B77C5621A48D330349DB07D1D3F8.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 03 Nov 2025 20:25:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:61:88:40:24:b7:fc:20:2f:5e:92:52:7b:f3:ca:24:6a:bc:67:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AAE5DEB28FB1B77C5621A48D330349DB07D1D3F8 Validity Not Before: Nov 2 17:40:37 2025 GMT Not After : Nov 3 20:25:37 2025 GMT Subject: CN=1ABA64A1280B38A5E7AE11A5F6DB7600F8E7FB5D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:83:44:b0:8f:06:e5:cc:4b:bc:e3:8f:e1:f6: 92:44:dc:7c:f8:6d:42:81:88:36:f0:2a:47:1d:95: ea:af:37:37:33:0f:47:8f:d6:e6:f0:57:c3:e7:33: 99:80:b5:3e:5f:4b:25:bf:43:8f:6a:4a:0e:89:a5: bd:9a:b3:ad:4f:7f:19:61:1c:8e:ba:09:01:19:b4: 65:0c:0a:a4:e2:4b:62:04:7a:51:d7:d2:cc:59:d7: 51:b9:ac:f6:a4:e4:f8:b4:0b:65:37:69:bd:0e:e1: 9f:33:1a:9c:91:93:4b:54:b6:86:fb:14:d9:f1:70: 09:21:8e:90:92:69:fa:ec:b1:93:82:e2:56:e8:5f: 4d:61:e9:ab:16:b0:82:ae:98:09:a9:77:af:be:a7: 11:74:7d:2a:8a:23:de:97:1c:11:31:2e:12:48:17: 3a:7f:c0:fe:89:0b:78:43:6e:d5:66:62:17:9a:d8: 16:b2:58:c3:23:84:09:a0:ac:43:b1:75:f0:45:24: 32:4f:ef:80:2c:56:08:c6:63:eb:70:d9:ac:11:2d: 2c:79:84:19:e3:ca:bd:2f:5d:c5:4e:f0:91:4c:0d: 2c:f0:d5:b5:49:ba:9a:4b:a3:0e:2a:46:83:9d:1c: 6d:bf:e2:ea:8b:61:0b:5f:f1:57:1d:ab:82:d8:0c: b2:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:BA:64:A1:28:0B:38:A5:E7:AE:11:A5:F6:DB:76:00:F8:E7:FB:5D X509v3 Authority Key Identifier: keyid:AA:E5:DE:B2:8F:B1:B7:7C:56:21:A4:8D:33:03:49:DB:07:D1:D3:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BpjQzn4bNuBgo3eE9SkWBzednzdwKTmkETuaz2GDjks6/0/AAE5DEB28FB1B77C5621A48D330349DB07D1D3F8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AAE5DEB28FB1B77C5621A48D330349DB07D1D3F8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BpjQzn4bNuBgo3eE9SkWBzednzdwKTmkETuaz2GDjks6/0/AAE5DEB28FB1B77C5621A48D330349DB07D1D3F8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:58:a6:ed:86:b8:4d:d1:52:f2:02:ca:12:de:54:a6:70:e9: b7:10:bb:0d:90:53:62:e6:87:1e:03:4d:8f:f1:8f:24:12:25: 8f:a0:33:37:19:96:6b:f4:d8:48:0d:44:43:1a:1b:c5:e6:74: 3e:a0:84:a3:07:21:af:d5:5b:e4:ae:37:f6:60:04:f1:9e:71: 79:fe:f0:d0:b1:e2:d8:d7:b1:90:1b:77:ed:fe:08:4b:2a:a4: 0a:5d:f8:92:f0:49:b8:af:d6:f2:70:8a:98:f0:2b:65:a0:fc: 1c:c4:a4:83:97:f6:6a:12:43:86:21:b6:2a:56:ea:23:28:a9: 40:bd:4d:b5:1d:f5:3a:cd:e4:91:dc:fe:7c:1d:7a:67:5e:1d: 4b:5b:fb:33:ef:f5:fe:37:dd:62:ce:15:52:9a:64:20:59:25: 82:d0:26:6a:d6:c2:f5:25:88:95:69:ec:7e:14:b0:c5:43:d3: 34:b6:cc:8d:8f:0e:2d:34:36:6d:e2:2a:5c:8d:10:22:6d:ae: 6a:cd:08:d2:6c:e3:5a:d9:5c:50:c3:f2:b6:50:56:b6:2f:b7: e6:b3:6e:ba:1c:1c:43:aa:c1:01:b8:af:a4:45:cc:ea:f7:cc: a4:b7:33:fb:d6:40:3b:ee:27:05:8a:59:57:b5:bf:84:ad:a3: c8:64:98:16 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUAWGIQCS3/CAvXpJSe/PKJGq8Z7IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUFFNURFQjI4RkIxQjc3QzU2MjFBNDhEMzMwMzQ5REIw N0QxRDNGODAeFw0yNTExMDIxNzQwMzdaFw0yNTExMDMyMDI1MzdaMDMxMTAvBgNV BAMTKDFBQkE2NEExMjgwQjM4QTVFN0FFMTFBNUY2REI3NjAwRjhFN0ZCNUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRg0SwjwblzEu844/h9pJE3Hz4 bUKBiDbwKkcdleqvNzczD0eP1ubwV8PnM5mAtT5fSyW/Q49qSg6Jpb2as61Pfxlh HI66CQEZtGUMCqTiS2IEelHX0sxZ11G5rPak5Pi0C2U3ab0O4Z8zGpyRk0tUtob7 FNnxcAkhjpCSafrssZOC4lboX01h6asWsIKumAmpd6++pxF0fSqKI96XHBExLhJI Fzp/wP6JC3hDbtVmYhea2BayWMMjhAmgrEOxdfBFJDJP74AsVgjGY+tw2awRLSx5 hBnjyr0vXcVO8JFMDSzw1bVJuppLow4qRoOdHG2/4uqLYQtf8Vcdq4LYDLJXAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUGrpkoSgLOKXnrhGl9tt2APjn+10wHwYDVR0j BBgwFoAUquXeso+xt3xWIaSNMwNJ2wfR0/gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQnBqUXpuNGJOdUJnbzNlRTlTa1dCemVkbnpkd0tUbWtFVHVhejJHRGpr czYvMC9BQUU1REVCMjhGQjFCNzdDNTYyMUE0OEQzMzAzNDlEQjA3RDFEM0Y4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FBRTVERUIyOEZCMUI3N0M1 NjIxQTQ4RDMzMDM0OURCMDdEMUQzRjguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QnBqUXpuNGJOdUJnbzNlRTlTa1dCemVkbnpkd0tUbWtFVHVhejJHRGprczYvMC9B QUU1REVCMjhGQjFCNzdDNTYyMUE0OEQzMzAzNDlEQjA3RDFEM0Y4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgFim7Ya4TdFS8gLKEt5UpnDptxC7DZBTYuaHHgNNj/GPJBIlj6AzNxmWa/TY SA1EQxobxeZ0PqCEowchr9Vb5K439mAE8Z5xef7w0LHi2NexkBt37f4ISyqkCl34 kvBJuK/W8nCKmPArZaD8HMSkg5f2ahJDhiG2KlbqIyipQL1NtR31Os3kkdz+fB16 Z14dS1v7M+/1/jfdYs4VUppkIFklgtAmatbC9SWIlWnsfhSwxUPTNLbMjY8OLTQ2 beIqXI0QIm2uas0I0mzjWtlcUMPytlBWti+35rNuuhwcQ6rBAbivpEXM6vfMpLcz +9ZAO+4nBYpZV7W/hK2jyGSYFg== -----END CERTIFICATE-----Generated at Mon Nov 3 12:16:42 2025 by rpki-client