$ rpki-client -vvf rpki-repo.registro.br/repo/D1MhRwpZ6QeoFtx6ZrsCsUR3hhi4K8vViDLrtVFneEtJ/0/AA3B5DBF298ABAA4F809A6FD7352BEF91FC78585.mft File: AA3B5DBF298ABAA4F809A6FD7352BEF91FC78585.mft (raw, json) Hash identifier: 0sBB10jXMk6/DImf1DVJkyOqZYxkqJ10x7nCse+poQ8= Subject key identifier: D5:E5:8E:C9:56:65:C7:45:D1:C6:81:F2:39:60:1F:4E:D5:62:95:85 Authority key identifier: AA:3B:5D:BF:29:8A:BA:A4:F8:09:A6:FD:73:52:BE:F9:1F:C7:85:85 Certificate issuer: /CN=AA3B5DBF298ABAA4F809A6FD7352BEF91FC78585 Certificate serial: 66FCBCFDF57C64DB0F5CF4A00DCB5A99BF2B9992 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA3B5DBF298ABAA4F809A6FD7352BEF91FC78585.cer Subject info access: rsync://rpki-repo.registro.br/repo/D1MhRwpZ6QeoFtx6ZrsCsUR3hhi4K8vViDLrtVFneEtJ/0/AA3B5DBF298ABAA4F809A6FD7352BEF91FC78585.mft Manifest number: 27 Signing time: Mon 03 Nov 2025 07:43:16 +0000 Manifest this update: Mon 03 Nov 2025 07:38:16 +0000 Manifest next update: Tue 04 Nov 2025 09:55:16 +0000 Files and hashes: 1: AA3B5DBF298ABAA4F809A6FD7352BEF91FC78585.crl (hash: qDj+YjxePHMEqNZ36OrM1XvB4IlQ+V7fzZiluJ/44mI=) 2: 323830343a336262383a3a2f33322d313238203d3e20323636313637.roa (hash: PCBJ5STCzw9+/GFdGErJzANC+sl1s1q/clzXkR0Vk08=) 3: 3136302e31392e3234302e302f32322d3332203d3e20323636313637.roa (hash: JNmyrnJWmOL269NQjAHg0Etu8oD933ZzlQ4sBwx3LWA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/D1MhRwpZ6QeoFtx6ZrsCsUR3hhi4K8vViDLrtVFneEtJ/0/AA3B5DBF298ABAA4F809A6FD7352BEF91FC78585.crl rsync://rpki-repo.registro.br/repo/D1MhRwpZ6QeoFtx6ZrsCsUR3hhi4K8vViDLrtVFneEtJ/0/AA3B5DBF298ABAA4F809A6FD7352BEF91FC78585.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA3B5DBF298ABAA4F809A6FD7352BEF91FC78585.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 09:55:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:fc:bc:fd:f5:7c:64:db:0f:5c:f4:a0:0d:cb:5a:99:bf:2b:99:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA3B5DBF298ABAA4F809A6FD7352BEF91FC78585 Validity Not Before: Nov 3 07:38:16 2025 GMT Not After : Nov 4 09:55:16 2025 GMT Subject: CN=D5E58EC95665C745D1C681F239601F4ED5629585 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:dd:a5:02:cb:5b:51:ed:de:66:18:7b:f2:e6: 14:be:a0:74:93:49:2c:d9:0f:c6:0c:43:36:3b:78: 2e:c1:a8:fc:73:1f:f1:bf:0b:cd:cd:e7:d4:e3:d3: 63:dc:35:af:2b:7d:cb:e7:dd:d5:41:db:d6:93:c8: 37:f7:29:a6:94:c8:a9:76:bb:3c:f3:e3:e2:19:67: ae:33:99:fe:da:eb:c5:2c:ea:74:97:4e:ee:60:c9: f9:ef:4c:be:3d:54:07:07:50:9e:a6:94:17:30:1e: bc:fa:ca:b5:64:8c:ca:d0:4f:e1:3b:39:3c:76:33: 18:8c:2e:6d:2e:80:ef:a9:fb:2f:81:72:e2:8b:5e: 49:56:96:06:98:db:51:5f:4a:30:e8:8b:48:42:fc: c0:5b:ef:43:d8:84:0d:03:12:23:ff:66:9b:0b:fe: 4b:47:5e:73:64:f1:cc:ee:67:e1:a8:f7:75:42:a7: 53:15:3e:06:03:b2:93:08:d4:6d:ba:1a:ec:32:c5: 1e:61:c2:ac:5f:f4:8e:a2:c7:c5:15:d7:a7:39:aa: f9:26:0e:60:d6:31:4c:62:bb:1a:56:ee:c8:68:dc: 0c:50:9e:66:47:91:25:0a:82:d2:0b:ed:53:9b:0b: cb:a0:54:78:45:c1:75:c1:0c:dc:1a:33:b7:ee:ed: 1a:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:E5:8E:C9:56:65:C7:45:D1:C6:81:F2:39:60:1F:4E:D5:62:95:85 X509v3 Authority Key Identifier: keyid:AA:3B:5D:BF:29:8A:BA:A4:F8:09:A6:FD:73:52:BE:F9:1F:C7:85:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/D1MhRwpZ6QeoFtx6ZrsCsUR3hhi4K8vViDLrtVFneEtJ/0/AA3B5DBF298ABAA4F809A6FD7352BEF91FC78585.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA3B5DBF298ABAA4F809A6FD7352BEF91FC78585.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/D1MhRwpZ6QeoFtx6ZrsCsUR3hhi4K8vViDLrtVFneEtJ/0/AA3B5DBF298ABAA4F809A6FD7352BEF91FC78585.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:36:c7:94:ae:2b:d9:a3:72:11:72:77:19:cb:31:71:bb:9b: c6:34:c3:0c:9f:7e:4d:e6:ba:30:13:57:91:9c:85:0c:4b:c8: b8:7f:23:fb:16:d7:7e:0d:0e:9f:4d:43:3f:bf:8c:84:4b:c3: 52:df:4b:2b:d5:c1:63:11:4e:e8:3a:c3:db:e2:bc:60:c4:7c: 77:32:c6:14:2a:f8:ea:23:47:69:d0:ff:76:cd:33:d0:0b:9a: 57:48:2f:b1:42:b2:76:06:16:bc:b5:f7:ed:08:6a:07:98:7d: ff:62:11:ed:52:f6:39:2d:b0:1e:43:a7:b5:f9:d5:24:37:1c: 2f:0d:06:e3:aa:64:d7:08:a3:19:10:8e:93:5d:0f:d3:82:70: 17:56:59:8e:03:f7:c8:92:a6:d2:4d:34:c4:49:6f:a4:11:56: fe:1b:91:0d:fd:c8:44:c6:94:fe:03:25:5e:a4:ce:9c:95:ce: bf:26:91:27:9b:12:2a:f9:4b:5c:b1:8c:d3:ba:b9:5f:dd:33: 8c:a2:15:f3:df:df:a0:db:4b:c8:58:53:4c:46:ba:a6:68:72: 63:77:c1:fd:92:3c:27:0d:d8:bb:a5:26:67:b5:57:f6:09:35: e3:44:0b:b4:56:d3:bd:d1:aa:2a:14:b4:45:30:8e:0f:76:e8: b1:67:23:d9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUZvy8/fV8ZNsPXPSgDctamb8rmZIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUEzQjVEQkYyOThBQkFBNEY4MDlBNkZENzM1MkJFRjkx RkM3ODU4NTAeFw0yNTExMDMwNzM4MTZaFw0yNTExMDQwOTU1MTZaMDMxMTAvBgNV BAMTKEQ1RTU4RUM5NTY2NUM3NDVEMUM2ODFGMjM5NjAxRjRFRDU2Mjk1ODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDt3aUCy1tR7d5mGHvy5hS+oHST SSzZD8YMQzY7eC7BqPxzH/G/C83N59Tj02PcNa8rfcvn3dVB29aTyDf3KaaUyKl2 uzzz4+IZZ64zmf7a68Us6nSXTu5gyfnvTL49VAcHUJ6mlBcwHrz6yrVkjMrQT+E7 OTx2MxiMLm0ugO+p+y+BcuKLXklWlgaY21FfSjDoi0hC/MBb70PYhA0DEiP/ZpsL /ktHXnNk8czuZ+Go93VCp1MVPgYDspMI1G26GuwyxR5hwqxf9I6ix8UV16c5qvkm DmDWMUxiuxpW7sho3AxQnmZHkSUKgtIL7VObC8ugVHhFwXXBDNwaM7fu7RpbAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU1eWOyVZlx0XRxoHyOWAfTtVilYUwHwYDVR0j BBgwFoAUqjtdvymKuqT4Cab9c1K++R/HhYUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRDFNaFJ3cFo2UWVvRnR4Nlpyc0NzVVIzaGhpNEs4dlZpRExydFZGbmVF dEovMC9BQTNCNURCRjI5OEFCQUE0RjgwOUE2RkQ3MzUyQkVGOTFGQzc4NTg1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FBM0I1REJGMjk4QUJBQTRG ODA5QTZGRDczNTJCRUY5MUZDNzg1ODUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RDFNaFJ3cFo2UWVvRnR4Nlpyc0NzVVIzaGhpNEs4dlZpRExydFZGbmVFdEovMC9B QTNCNURCRjI5OEFCQUE0RjgwOUE2RkQ3MzUyQkVGOTFGQzc4NTg1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEDbHlK4r2aNyEXJ3GcsxcbubxjTDDJ9+Tea6MBNXkZyFDEvIuH8j+xbXfg0O n01DP7+MhEvDUt9LK9XBYxFO6DrD2+K8YMR8dzLGFCr46iNHadD/ds0z0AuaV0gv sUKydgYWvLX37QhqB5h9/2IR7VL2OS2wHkOntfnVJDccLw0G46pk1wijGRCOk10P 04JwF1ZZjgP3yJKm0k00xElvpBFW/huRDf3IRMaU/gMlXqTOnJXOvyaRJ5sSKvlL XLGM07q5X90zjKIV89/foNtLyFhTTEa6pmhyY3fB/ZI8Jw3Yu6UmZ7VX9gk140QL tFbTvdGqKhS0RTCOD3bosWcj2Q== -----END CERTIFICATE-----Generated at Mon Nov 3 18:52:59 2025 by rpki-client