$ rpki-client -vvf rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.mft File: AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.mft (raw, json) Hash identifier: SnADwIjOtpaKe2naOjIn5i/Fi5QyU+oMxZ0CWOJBCC0= Subject key identifier: 1E:F0:4B:86:89:AD:B7:7F:13:97:45:76:C3:08:46:CF:36:13:5A:09 Authority key identifier: AA:2B:D3:35:20:EC:0C:79:CF:C9:9C:40:27:FF:2E:AF:60:62:5F:FA Certificate issuer: /CN=AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA Certificate serial: 5EC35989C9803957FADA745B54C7C97A8B57968E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.cer Subject info access: rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.mft Manifest number: 01AB Signing time: Mon 03 Nov 2025 17:47:02 +0000 Manifest this update: Mon 03 Nov 2025 17:42:02 +0000 Manifest next update: Tue 04 Nov 2025 20:20:02 +0000 Files and hashes: 1: 34352e3136382e3234342e302f32322d3234203d3e20323638303834.roa (hash: MUps5dYJYbgZlLgJ9zMzZggPufSzKqjyIWh5+12TXKE=) 2: 323830343a353763303a3a2f33322d3438203d3e20323638303834.roa (hash: KBArWlV5vwMsvaplxezo5vYP7odX82xOazE7IspsFqE=) 3: AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.crl (hash: dVFGB4zqnkLMXShMyD9QoenMQojuagA/+GLlUST2UqA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.crl rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 20:20:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:c3:59:89:c9:80:39:57:fa:da:74:5b:54:c7:c9:7a:8b:57:96:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA Validity Not Before: Nov 3 17:42:02 2025 GMT Not After : Nov 4 20:20:02 2025 GMT Subject: CN=1EF04B8689ADB77F13974576C30846CF36135A09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c8:d4:2f:55:fe:22:5c:b8:42:44:a6:c2:44: ed:74:b6:01:cd:df:ae:04:3b:40:d0:df:63:53:44: ef:fd:af:db:a0:57:7a:cc:7f:7c:a8:97:35:d2:8b: c7:6a:45:75:8a:0d:39:d2:e7:8e:ce:ae:e4:ce:57: 7a:4a:13:b7:9f:42:5c:9b:d2:2a:35:a2:24:b0:d5: 06:2b:d5:d6:0e:ea:14:d8:c9:96:09:17:3b:0f:19: c0:48:b3:f4:d7:e1:c5:44:15:7f:12:79:b3:66:38: 92:19:d3:0e:0c:35:8a:09:5d:9a:06:b8:eb:c0:90: a4:bc:72:e1:23:2f:e0:6d:60:04:37:a5:5d:47:9f: b1:77:e1:de:06:82:45:3e:76:d0:d1:f0:44:bb:42: fb:71:2f:01:db:72:2e:b0:df:0e:d3:4f:0b:0a:1a: be:ea:69:fb:57:fb:47:ba:39:08:c1:1e:53:43:ee: 59:a7:52:02:fe:0b:54:ef:7b:10:99:20:cb:a6:ea: 8f:f1:9e:4d:bd:41:d1:42:ad:c2:c3:c4:59:35:7d: 09:b2:85:9b:c1:2f:13:59:6a:20:4c:a0:20:49:55: ac:5c:21:3c:ad:26:e6:43:37:8d:22:0b:43:60:87: 13:42:f5:a4:87:95:16:62:2d:a2:71:de:fc:d9:f8: ac:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:F0:4B:86:89:AD:B7:7F:13:97:45:76:C3:08:46:CF:36:13:5A:09 X509v3 Authority Key Identifier: keyid:AA:2B:D3:35:20:EC:0C:79:CF:C9:9C:40:27:FF:2E:AF:60:62:5F:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d6:ce:da:7a:bb:64:71:96:82:76:94:b8:f9:00:3f:29:ea:88: 81:0b:f8:95:56:48:32:d9:a7:dc:b3:e4:5b:7c:82:08:fc:3f: e5:9d:a5:8f:53:aa:7c:12:3d:23:4c:50:af:a3:a8:b4:00:38: 1c:20:7f:ea:81:83:a1:d8:43:30:44:fd:79:2e:5a:74:02:6c: e8:b3:1b:f4:86:ef:dc:eb:25:a5:44:1c:a3:95:3d:4c:f5:01: 1d:4f:6c:11:d5:43:eb:99:09:8c:f9:d5:79:f6:e1:01:35:03: 75:47:ad:07:dc:9e:41:ec:fd:07:84:24:47:60:57:59:1f:34: 87:54:d4:d8:c0:bb:95:54:6b:78:dc:8c:81:09:9f:64:91:aa: 6f:bf:1d:b4:6e:c0:cb:e1:b9:07:99:43:8f:04:eb:44:b0:00: e5:67:e9:28:a2:22:d7:83:9b:fd:dc:ba:73:8b:5c:a9:6b:24: 69:18:75:6d:ef:20:70:36:0b:64:55:5a:13:64:ac:9a:88:54: 83:f7:d1:d4:4e:f4:2b:35:ff:21:fc:65:53:68:6f:21:a2:7a: 35:9c:12:50:b6:6a:8c:11:74:4e:d3:60:a5:cd:c8:0c:f6:04: d9:dd:5c:7d:b2:dc:a1:13:76:c2:14:b6:f0:62:43:d7:00:12: 11:97:cd:c7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUXsNZicmAOVf62nRbVMfJeotXlo4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUEyQkQzMzUyMEVDMEM3OUNGQzk5QzQwMjdGRjJFQUY2 MDYyNUZGQTAeFw0yNTExMDMxNzQyMDJaFw0yNTExMDQyMDIwMDJaMDMxMTAvBgNV BAMTKDFFRjA0Qjg2ODlBREI3N0YxMzk3NDU3NkMzMDg0NkNGMzYxMzVBMDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJyNQvVf4iXLhCRKbCRO10tgHN 364EO0DQ32NTRO/9r9ugV3rMf3yolzXSi8dqRXWKDTnS547OruTOV3pKE7efQlyb 0io1oiSw1QYr1dYO6hTYyZYJFzsPGcBIs/TX4cVEFX8SebNmOJIZ0w4MNYoJXZoG uOvAkKS8cuEjL+BtYAQ3pV1Hn7F34d4GgkU+dtDR8ES7QvtxLwHbci6w3w7TTwsK Gr7qaftX+0e6OQjBHlND7lmnUgL+C1TvexCZIMum6o/xnk29QdFCrcLDxFk1fQmy hZvBLxNZaiBMoCBJVaxcITytJuZDN40iC0NghxNC9aSHlRZiLaJx3vzZ+KxXAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUHvBLhomtt38Tl0V2wwhGzzYTWgkwHwYDVR0j BBgwFoAUqivTNSDsDHnPyZxAJ/8ur2BiX/owDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRzV3WG1UYmpHWGRDc2pQZzU4ZXphQ2k3Wk5XZ05aOTdpZzg5SHpERXBm VFYvMC9BQTJCRDMzNTIwRUMwQzc5Q0ZDOTlDNDAyN0ZGMkVBRjYwNjI1RkZBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FBMkJEMzM1MjBFQzBDNzlD RkM5OUM0MDI3RkYyRUFGNjA2MjVGRkEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RzV3WG1UYmpHWGRDc2pQZzU4ZXphQ2k3Wk5XZ05aOTdpZzg5SHpERXBmVFYvMC9B QTJCRDMzNTIwRUMwQzc5Q0ZDOTlDNDAyN0ZGMkVBRjYwNjI1RkZBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEA1s7aertkcZaCdpS4+QA/KeqIgQv4lVZIMtmn3LPkW3yCCPw/5Z2lj1OqfBI9 I0xQr6OotAA4HCB/6oGDodhDMET9eS5adAJs6LMb9Ibv3OslpUQco5U9TPUBHU9s EdVD65kJjPnVefbhATUDdUetB9yeQez9B4QkR2BXWR80h1TU2MC7lVRreNyMgQmf ZJGqb78dtG7Ay+G5B5lDjwTrRLAA5WfpKKIi14Ob/dy6c4tcqWskaRh1be8gcDYL ZFVaE2SsmohUg/fR1E70KzX/IfxlU2hvIaJ6NZwSULZqjBF0TtNgpc3IDPYE2d1c fbLcoRN2whS28GJD1wASEZfNxw== -----END CERTIFICATE-----Generated at Tue Nov 4 00:29:40 2025 by rpki-client