$ rpki-client -vvf rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.mft File: AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.mft (raw, json) Hash identifier: 1LAxMvINZOXyyuB8TEis7ERpGm7zGoO3TjFs2/CACF0= Subject key identifier: 12:76:52:65:25:8B:4D:55:38:D0:7C:9D:E2:28:AB:71:D5:74:66:7B Authority key identifier: AA:2B:D3:35:20:EC:0C:79:CF:C9:9C:40:27:FF:2E:AF:60:62:5F:FA Certificate issuer: /CN=AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA Certificate serial: 78456BB3F125FF95D74CA48EE8CEDF1339DE8EA7 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.cer Subject info access: rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.mft Manifest number: E9 Signing time: Tue 10 Jun 2025 15:13:40 +0000 Manifest this update: Tue 10 Jun 2025 15:08:40 +0000 Manifest next update: Wed 11 Jun 2025 16:08:40 +0000 Files and hashes: 1: AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.crl (hash: CrWQ8txYXAvzK+pe5zua5TDbxvFXIGHnfA1FDfEJZ8I=) 2: 323830343a353763303a3a2f33322d3438203d3e20323638303834.roa (hash: KBArWlV5vwMsvaplxezo5vYP7odX82xOazE7IspsFqE=) 3: 34352e3136382e3234342e302f32322d3234203d3e20323638303834.roa (hash: MUps5dYJYbgZlLgJ9zMzZggPufSzKqjyIWh5+12TXKE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.crl rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 11 Jun 2025 16:08:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:45:6b:b3:f1:25:ff:95:d7:4c:a4:8e:e8:ce:df:13:39:de:8e:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA Validity Not Before: Jun 10 15:08:40 2025 GMT Not After : Jun 11 16:08:40 2025 GMT Subject: CN=12765265258B4D5538D07C9DE228AB71D574667B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e9:ab:66:01:7b:a5:1b:ff:48:5e:25:74:1b: 63:80:24:e4:4a:da:5e:98:16:1e:82:51:94:fb:ff: 92:6c:6f:f6:33:0c:eb:9a:e5:b5:b3:f6:7c:78:4f: 69:ef:21:ce:1d:08:dd:9f:5d:ce:d8:a5:17:a8:f0: 81:d0:dc:b8:e7:5c:88:b9:06:34:4b:ae:6a:9b:63: 3b:84:c8:21:38:82:c6:2e:e9:3a:81:dd:66:21:50: a8:79:6a:44:f7:1c:e9:1e:f5:c1:a8:65:dd:09:cc: c0:72:8c:7d:40:6f:f1:0d:72:1a:a9:c7:87:fc:48: 20:58:fb:a5:4f:b5:d5:af:64:2c:76:6b:ad:9f:21: 02:e7:34:c3:62:07:db:4f:d1:ce:8f:d6:24:96:d4: 73:43:39:29:7f:8e:42:31:9b:50:43:2d:1b:a6:38: bb:7a:c0:7c:aa:6b:c7:cc:db:f1:c5:54:22:bb:a1: 1c:a2:85:47:e1:7f:25:a1:b3:a2:82:b5:65:23:71: aa:d1:f4:fd:bb:b3:3a:b1:9e:aa:3d:c8:54:80:c0: e2:db:3c:b0:98:d5:71:4d:07:89:a8:55:06:a6:de: 7b:f0:7f:27:7e:67:b8:73:b3:b3:2c:fc:79:f2:bf: 7e:fd:4a:b9:08:bb:c6:ad:79:a9:07:e4:5d:08:50: 4f:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:76:52:65:25:8B:4D:55:38:D0:7C:9D:E2:28:AB:71:D5:74:66:7B X509v3 Authority Key Identifier: keyid:AA:2B:D3:35:20:EC:0C:79:CF:C9:9C:40:27:FF:2E:AF:60:62:5F:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:32:92:cf:23:7b:d5:3a:1a:a2:64:48:54:a0:7b:14:0d:e7: 77:b6:74:11:b0:32:75:cf:c3:9a:ea:1f:75:96:0c:85:bd:c9: b8:75:3d:0b:b7:11:5b:bf:40:56:f7:3e:91:d7:24:7b:41:73: e9:6c:9c:bc:ab:d8:fe:c0:ff:a2:6a:5c:b9:34:9f:79:62:7c: 38:2f:0a:32:9f:71:e0:57:9c:fd:80:df:e1:87:ac:d2:6f:7f: 68:25:9f:bf:d6:d5:15:bf:ce:26:96:a7:71:57:9a:82:1d:fc: c7:54:ca:8a:b2:05:05:fa:b6:ed:7b:9e:d6:58:0b:c3:be:ea: ec:94:31:30:2f:1a:42:79:2e:b7:cb:43:47:57:27:80:47:ed: d2:99:17:76:38:fd:53:a9:f4:4e:f4:8c:c9:3d:fd:aa:a2:51: 95:ea:78:a1:b9:0f:a6:2c:52:1c:ce:66:eb:76:f3:32:a8:59: ea:54:dd:82:cb:ab:52:5d:21:f7:74:77:1c:cc:7b:a5:2d:ea: c0:fa:45:dd:dd:15:bb:cd:48:fb:f1:1c:0a:b7:c3:59:13:62: d0:95:fc:c2:5a:80:1a:75:df:7f:e5:ef:47:2c:c9:af:13:d7: 97:36:91:e9:b9:1d:7b:c2:ee:fd:75:73:ef:01:ab:fc:36:df: 86:2a:ff:ee -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUeEVrs/El/5XXTKSO6M7fEznejqcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUEyQkQzMzUyMEVDMEM3OUNGQzk5QzQwMjdGRjJFQUY2 MDYyNUZGQTAeFw0yNTA2MTAxNTA4NDBaFw0yNTA2MTExNjA4NDBaMDMxMTAvBgNV BAMTKDEyNzY1MjY1MjU4QjRENTUzOEQwN0M5REUyMjhBQjcxRDU3NDY2N0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu6atmAXulG/9IXiV0G2OAJORK 2l6YFh6CUZT7/5Jsb/YzDOua5bWz9nx4T2nvIc4dCN2fXc7YpReo8IHQ3LjnXIi5 BjRLrmqbYzuEyCE4gsYu6TqB3WYhUKh5akT3HOke9cGoZd0JzMByjH1Ab/ENchqp x4f8SCBY+6VPtdWvZCx2a62fIQLnNMNiB9tP0c6P1iSW1HNDOSl/jkIxm1BDLRum OLt6wHyqa8fM2/HFVCK7oRyihUfhfyWhs6KCtWUjcarR9P27szqxnqo9yFSAwOLb PLCY1XFNB4moVQam3nvwfyd+Z7hzs7Ms/Hnyv379SrkIu8ateakH5F0IUE/PAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUEnZSZSWLTVU40Hyd4iircdV0ZnswHwYDVR0j BBgwFoAUqivTNSDsDHnPyZxAJ/8ur2BiX/owDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRzV3WG1UYmpHWGRDc2pQZzU4ZXphQ2k3Wk5XZ05aOTdpZzg5SHpERXBm VFYvMC9BQTJCRDMzNTIwRUMwQzc5Q0ZDOTlDNDAyN0ZGMkVBRjYwNjI1RkZBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FBMkJEMzM1MjBFQzBDNzlD RkM5OUM0MDI3RkYyRUFGNjA2MjVGRkEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RzV3WG1UYmpHWGRDc2pQZzU4ZXphQ2k3Wk5XZ05aOTdpZzg5SHpERXBmVFYvMC9B QTJCRDMzNTIwRUMwQzc5Q0ZDOTlDNDAyN0ZGMkVBRjYwNjI1RkZBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEANjKSzyN71ToaomRIVKB7FA3nd7Z0EbAydc/DmuofdZYMhb3JuHU9C7cRW79A Vvc+kdcke0Fz6WycvKvY/sD/ompcuTSfeWJ8OC8KMp9x4Fec/YDf4Yes0m9/aCWf v9bVFb/OJpancVeagh38x1TKirIFBfq27Xue1lgLw77q7JQxMC8aQnkut8tDR1cn gEft0pkXdjj9U6n0TvSMyT39qqJRlep4obkPpixSHM5m63bzMqhZ6lTdgsurUl0h 93R3HMx7pS3qwPpF3d0Vu81I+/EcCrfDWRNi0JX8wlqAGnXff+XvRyzJrxPXlzaR 6bkde8Lu/XVz7wGr/Dbfhir/7g== -----END CERTIFICATE-----Generated at Wed Jun 11 05:40:41 2025 by rpki-client