$ rpki-client -vvf rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.mft File: AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.mft (raw, json) Hash identifier: CUYcuFQfLX2yn17AK/nNg8aR8kpctf5moS40TkZJ2T0= Subject key identifier: 5B:93:5B:77:C6:B5:B1:C2:DE:5E:40:31:B1:CC:0F:0D:44:68:29:79 Authority key identifier: AA:2B:D3:35:20:EC:0C:79:CF:C9:9C:40:27:FF:2E:AF:60:62:5F:FA Certificate issuer: /CN=AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA Certificate serial: 13CBA914E767014F7265B09CB5D1BF6D2DCAF0BD Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.cer Subject info access: rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.mft Manifest number: 0148 Signing time: Wed 20 Aug 2025 13:59:55 +0000 Manifest this update: Wed 20 Aug 2025 13:54:55 +0000 Manifest next update: Thu 21 Aug 2025 16:28:55 +0000 Files and hashes: 1: AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.crl (hash: O4eu/Iay4x6u8gDgmBIL+qGDgUC6iNj63SAy8lCpf9k=) 2: 323830343a353763303a3a2f33322d3438203d3e20323638303834.roa (hash: KBArWlV5vwMsvaplxezo5vYP7odX82xOazE7IspsFqE=) 3: 34352e3136382e3234342e302f32322d3234203d3e20323638303834.roa (hash: MUps5dYJYbgZlLgJ9zMzZggPufSzKqjyIWh5+12TXKE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.crl rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 21 Aug 2025 16:28:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:cb:a9:14:e7:67:01:4f:72:65:b0:9c:b5:d1:bf:6d:2d:ca:f0:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA Validity Not Before: Aug 20 13:54:55 2025 GMT Not After : Aug 21 16:28:55 2025 GMT Subject: CN=5B935B77C6B5B1C2DE5E4031B1CC0F0D44682979 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:c1:5a:d7:6c:5d:62:21:d0:0b:97:2e:82:58: 53:08:e7:be:5b:37:7b:e3:86:11:cd:e8:5a:fe:b0: 93:a5:19:b1:3c:74:40:e3:c8:3a:52:60:09:b4:13: ed:c5:2a:2c:15:57:02:97:b2:02:36:bd:d7:bd:2d: 58:23:26:5d:ed:6f:24:7f:9a:2c:35:f0:c7:02:59: 12:50:59:1b:2f:b9:7b:b0:af:b6:48:63:08:f7:73: e1:1d:6d:37:4c:30:58:4c:ad:10:c6:bd:75:f1:89: 71:1d:d4:3e:9f:3a:43:bb:c6:5a:e3:a5:b7:6b:54: e7:e5:05:02:6b:89:6f:76:a4:04:c3:d6:27:db:f2: b1:39:6b:16:6c:39:51:7d:67:40:02:9d:73:0b:3a: 8a:30:55:48:f2:ec:90:57:ba:4e:75:fb:13:71:61: 76:66:ea:be:ed:75:2f:44:b9:a3:56:be:ed:0a:6e: 6f:20:e4:b6:03:23:88:30:74:5b:c3:5d:36:99:c0: ce:cf:80:aa:0b:f9:03:86:cd:f5:df:1a:da:6d:60: e0:77:1e:d3:7b:93:ee:22:75:9c:64:29:58:04:8e: 44:9c:b3:f5:ca:0e:a9:3b:c8:03:5e:d3:fc:ef:7c: 4d:4c:f4:83:16:35:19:b0:a2:7d:05:c2:87:ce:3d: bf:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:93:5B:77:C6:B5:B1:C2:DE:5E:40:31:B1:CC:0F:0D:44:68:29:79 X509v3 Authority Key Identifier: keyid:AA:2B:D3:35:20:EC:0C:79:CF:C9:9C:40:27:FF:2E:AF:60:62:5F:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e2:19:e4:87:40:bd:96:0f:3b:dd:8b:93:db:2a:f1:bf:96:75: ac:24:d0:28:94:b1:04:f1:14:ec:a5:24:12:d2:c5:d0:c8:fe: 2e:46:d3:9e:ab:7a:10:2d:70:5a:a1:7c:fb:25:f7:07:26:8b: 0a:ab:3c:5a:a0:a4:a4:f3:8e:e7:b6:43:7a:6e:5d:f9:f4:f5: 3c:73:24:0c:75:ee:42:8b:5f:58:aa:42:52:41:a3:a4:65:42: f9:e8:42:f4:ea:23:7f:94:96:f5:4b:14:90:68:cd:16:6a:2a: 0d:42:32:4b:bc:42:f1:93:d5:c0:08:df:58:35:e6:3c:ab:ef: a5:b7:c9:9f:ae:a3:f1:62:42:d3:84:31:64:49:12:86:c7:4f: 05:8d:d1:ac:7b:b4:80:af:cf:9d:df:bb:c4:10:bd:6c:f1:ed: 19:b6:fb:d1:ec:c4:9b:a9:3e:61:93:2c:4c:b7:f9:9a:d0:64: 24:8c:36:46:c9:3a:f8:51:a2:d8:1a:4d:0e:2e:ff:91:29:7d: d3:f7:be:7f:bf:bf:8b:06:8f:32:04:17:f7:14:b5:2a:d0:02: ae:4f:c1:c8:45:2b:a7:50:a7:1d:c7:bc:83:f9:4c:a4:c3:97: 87:15:ee:d3:c7:75:a3:3e:00:14:d9:97:77:52:7f:d8:87:75: c9:ce:d9:e7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUE8upFOdnAU9yZbCctdG/bS3K8L0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUEyQkQzMzUyMEVDMEM3OUNGQzk5QzQwMjdGRjJFQUY2 MDYyNUZGQTAeFw0yNTA4MjAxMzU0NTVaFw0yNTA4MjExNjI4NTVaMDMxMTAvBgNV BAMTKDVCOTM1Qjc3QzZCNUIxQzJERTVFNDAzMUIxQ0MwRjBENDQ2ODI5NzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDowVrXbF1iIdALly6CWFMI575b N3vjhhHN6Fr+sJOlGbE8dEDjyDpSYAm0E+3FKiwVVwKXsgI2vde9LVgjJl3tbyR/ miw18McCWRJQWRsvuXuwr7ZIYwj3c+EdbTdMMFhMrRDGvXXxiXEd1D6fOkO7xlrj pbdrVOflBQJriW92pATD1ifb8rE5axZsOVF9Z0ACnXMLOoowVUjy7JBXuk51+xNx YXZm6r7tdS9EuaNWvu0Kbm8g5LYDI4gwdFvDXTaZwM7PgKoL+QOGzfXfGtptYOB3 HtN7k+4idZxkKVgEjkScs/XKDqk7yANe0/zvfE1M9IMWNRmwon0FwofOPb/tAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUW5Nbd8a1scLeXkAxscwPDURoKXkwHwYDVR0j BBgwFoAUqivTNSDsDHnPyZxAJ/8ur2BiX/owDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRzV3WG1UYmpHWGRDc2pQZzU4ZXphQ2k3Wk5XZ05aOTdpZzg5SHpERXBm VFYvMC9BQTJCRDMzNTIwRUMwQzc5Q0ZDOTlDNDAyN0ZGMkVBRjYwNjI1RkZBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FBMkJEMzM1MjBFQzBDNzlD RkM5OUM0MDI3RkYyRUFGNjA2MjVGRkEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RzV3WG1UYmpHWGRDc2pQZzU4ZXphQ2k3Wk5XZ05aOTdpZzg5SHpERXBmVFYvMC9B QTJCRDMzNTIwRUMwQzc5Q0ZDOTlDNDAyN0ZGMkVBRjYwNjI1RkZBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEA4hnkh0C9lg873YuT2yrxv5Z1rCTQKJSxBPEU7KUkEtLF0Mj+LkbTnqt6EC1w WqF8+yX3ByaLCqs8WqCkpPOO57ZDem5d+fT1PHMkDHXuQotfWKpCUkGjpGVC+ehC 9Oojf5SW9UsUkGjNFmoqDUIyS7xC8ZPVwAjfWDXmPKvvpbfJn66j8WJC04QxZEkS hsdPBY3RrHu0gK/Pnd+7xBC9bPHtGbb70ezEm6k+YZMsTLf5mtBkJIw2Rsk6+FGi 2BpNDi7/kSl90/e+f7+/iwaPMgQX9xS1KtACrk/ByEUrp1CnHce8g/lMpMOXhxXu 08d1oz4AFNmXd1J/2Id1yc7Z5w== -----END CERTIFICATE-----Generated at Wed Aug 20 18:32:02 2025 by rpki-client