$ rpki-client -vvf rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.mft File: 2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.mft (raw, json) Hash identifier: U5KUmZRA2n+no5D2/fmb+gbLMazVJROthaMpbQ4PDyU= Subject key identifier: EA:EC:38:E4:16:FF:5B:7A:14:56:04:C2:64:2E:5F:12:62:BC:1F:1C Authority key identifier: 2A:9C:B9:9D:98:C1:1F:7A:F1:A4:05:B5:D0:50:75:06:E6:F8:08:A7 Certificate issuer: /CN=2A9CB99D98C11F7AF1A405B5D0507506E6F808A7 Certificate serial: 320B1A761DA749C24CB4BB5DC3E634A417127902 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.cer Subject info access: rsync://rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.mft Manifest number: 027E Signing time: Mon 28 Jul 2025 09:22:11 +0000 Manifest this update: Mon 28 Jul 2025 09:17:11 +0000 Manifest next update: Tue 29 Jul 2025 12:48:11 +0000 Files and hashes: 1: 34352e3138312e3133342e302f32332d3233203d3e20323639313834.roa (hash: QRux96G/lfgz7O4EjHPAERqDHHHWAhFqgGE1GI68Qng=) 2: 2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.crl (hash: 2owur2k49ACcEVuVpJknhD/3k0/U9nRxJWc/o5Ks1mk=) 3: 34352e3138312e3133342e302f32342d3234203d3e20323639313834.roa (hash: vPCwI7osU5XVMd4zwaC+hIHow7PaLve2zweqHvxoEMY=) 4: 34352e3138312e3133322e302f32332d3233203d3e20323639313834.roa (hash: BY4SD16BwCLGiQCdlfmYRFg3wdhGuI3NPnN3QyHza1M=) 5: 323830343a363062303a3a2f33322d3430203d3e20323639313834.roa (hash: /rhTp7cAUkfwcSsOM4bufZ4hzfY9DaqMVKYmLOYscFo=) 6: 34352e3138312e3133322e302f32342d3234203d3e20323639313834.roa (hash: hhWP0ZOFP9QkXD1TLCXf2DK00yVyWv88kwhVjqWeg9Y=) 7: 34352e3138312e3133332e302f32342d3234203d3e20323639313834.roa (hash: mky3eE3bx2kcV4ZGcqdlXI9kN6ITAw5dtUdmNnbM04A=) 8: 34352e3138312e3133322e302f32322d3232203d3e20323639313834.roa (hash: PoDROXq7zNqNwPpg4bHVhkKOrPE3a92QWBQs0sLrW1g=) 9: 34352e3138312e3133352e302f32342d3234203d3e20323639313834.roa (hash: hEdsYPpEYPD/H7JxaI1qlIgBP5CxC1rxiVbomFZxPTA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.crl rsync://rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 29 Jul 2025 12:48:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:0b:1a:76:1d:a7:49:c2:4c:b4:bb:5d:c3:e6:34:a4:17:12:79:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A9CB99D98C11F7AF1A405B5D0507506E6F808A7 Validity Not Before: Jul 28 09:17:11 2025 GMT Not After : Jul 29 12:48:11 2025 GMT Subject: CN=EAEC38E416FF5B7A145604C2642E5F1262BC1F1C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:f3:7c:03:f5:dd:24:bc:1e:d7:3b:9f:d9:bc: 39:a2:65:e9:19:a6:b7:d2:ef:4a:a8:45:cb:ed:2a: b6:71:32:53:00:80:85:8f:8d:7a:4a:79:6a:12:38: 4d:63:b7:47:f8:0e:3b:ae:ce:0d:29:7e:c8:11:86: a0:46:20:62:a5:88:61:2b:9a:0b:70:6e:fa:ac:c8: eb:44:d6:a9:ff:84:6b:8e:fa:9b:c3:66:e1:a8:b1: 61:8a:cf:bf:6f:7a:4c:17:58:22:e2:c7:d1:f1:d4: 2f:4e:e1:65:f9:39:f8:7f:9f:60:f0:49:2d:13:d7: 9a:e9:0c:b3:25:1d:90:83:dc:91:9d:6e:eb:28:b0: 02:c7:53:d5:eb:bf:35:98:be:3c:03:20:0e:dc:5f: e2:1f:c1:2e:46:b0:21:01:6e:03:02:0c:bb:40:c1: be:ae:31:5e:4b:7c:6b:f9:85:c3:98:2b:6e:ed:dd: ed:55:71:bd:cc:76:8c:4e:06:87:1c:d2:51:38:43: 49:9e:6b:e5:9c:37:84:65:ee:6d:cc:75:7a:62:73: 7f:3d:e4:25:44:e3:5c:8b:50:8d:a8:dc:30:c5:ef: 87:68:c2:bf:0f:5f:78:c3:3a:27:39:86:c4:d7:f4: 8c:5a:0a:4a:89:da:1a:d5:0c:bc:53:83:d6:5a:67: 85:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:EC:38:E4:16:FF:5B:7A:14:56:04:C2:64:2E:5F:12:62:BC:1F:1C X509v3 Authority Key Identifier: keyid:2A:9C:B9:9D:98:C1:1F:7A:F1:A4:05:B5:D0:50:75:06:E6:F8:08:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ca:8f:7c:12:11:f5:69:26:27:4b:d0:03:65:c8:01:e9:c2:a1: cb:2f:f6:a4:52:c5:83:ac:c5:06:40:9d:da:ea:c5:99:1e:c4: 25:05:4a:ef:5a:50:da:cc:24:13:1d:7a:0d:cf:a9:91:ca:fe: f5:62:81:de:2e:80:96:2a:34:03:c7:bf:ce:96:8b:b5:b8:95: 43:dd:8d:28:b4:09:1b:b9:ce:26:41:fb:fe:93:c2:16:90:54: f5:81:71:3b:15:cf:b7:6b:19:3d:9f:08:3a:ea:7e:f7:1c:6d: a5:a5:63:1d:af:f1:64:b1:ca:30:10:eb:13:ba:72:25:87:48: dc:34:fe:ca:c8:d5:17:8e:b7:1f:24:f2:4d:e1:25:02:e2:4e: e7:ce:cf:80:08:f6:98:92:88:3c:7c:73:4c:82:74:fb:5d:38: 2e:43:bf:58:ab:73:c0:c4:ac:96:8f:f3:3c:12:bd:c6:93:a8: 06:9d:2d:6c:c9:10:5f:7f:56:e0:e3:94:f0:ef:1c:e6:98:df: ee:38:df:e0:9d:11:70:78:bb:cb:d9:07:f9:eb:37:a8:3f:d4: b3:c1:72:c3:94:df:dc:9e:4e:ec:4b:9d:2d:37:eb:66:02:da: 93:a7:1c:43:c2:92:2c:de:5b:30:ca:55:b9:4e:2f:f5:7b:4b: 29:d6:9e:3b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUMgsadh2nScJMtLtdw+Y0pBcSeQIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkE5Q0I5OUQ5OEMxMUY3QUYxQTQwNUI1RDA1MDc1MDZF NkY4MDhBNzAeFw0yNTA3MjgwOTE3MTFaFw0yNTA3MjkxMjQ4MTFaMDMxMTAvBgNV BAMTKEVBRUMzOEU0MTZGRjVCN0ExNDU2MDRDMjY0MkU1RjEyNjJCQzFGMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDc83wD9d0kvB7XO5/ZvDmiZekZ prfS70qoRcvtKrZxMlMAgIWPjXpKeWoSOE1jt0f4Djuuzg0pfsgRhqBGIGKliGEr mgtwbvqsyOtE1qn/hGuO+pvDZuGosWGKz79vekwXWCLix9Hx1C9O4WX5Ofh/n2Dw SS0T15rpDLMlHZCD3JGdbusosALHU9XrvzWYvjwDIA7cX+IfwS5GsCEBbgMCDLtA wb6uMV5LfGv5hcOYK27t3e1Vcb3MdoxOBocc0lE4Q0mea+WcN4Rl7m3MdXpic389 5CVE41yLUI2o3DDF74dowr8PX3jDOic5hsTX9IxaCkqJ2hrVDLxTg9ZaZ4W7AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU6uw45Bb/W3oUVgTCZC5fEmK8HxwwHwYDVR0j BBgwFoAUKpy5nZjBH3rxpAW10FB1Bub4CKcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR0ZZSmkxMlVaZ2pRaUV1dFF3V0s3dUgzWVBIbjkxRng2S3B4MmNBWGRH ZjQvMS8yQTlDQjk5RDk4QzExRjdBRjFBNDA1QjVEMDUwNzUwNkU2RjgwOEE3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJBOUNCOTlEOThDMTFGN0FG MUE0MDVCNUQwNTA3NTA2RTZGODA4QTcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R0ZZSmkxMlVaZ2pRaUV1dFF3V0s3dUgzWVBIbjkxRng2S3B4MmNBWGRHZjQvMS8y QTlDQjk5RDk4QzExRjdBRjFBNDA1QjVEMDUwNzUwNkU2RjgwOEE3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAyo98EhH1aSYnS9ADZcgB6cKhyy/2pFLFg6zFBkCd2urFmR7EJQVK71pQ2swk Ex16Dc+pkcr+9WKB3i6Alio0A8e/zpaLtbiVQ92NKLQJG7nOJkH7/pPCFpBU9YFx OxXPt2sZPZ8IOup+9xxtpaVjHa/xZLHKMBDrE7pyJYdI3DT+ysjVF463HyTyTeEl AuJO587PgAj2mJKIPHxzTIJ0+104LkO/WKtzwMSslo/zPBK9xpOoBp0tbMkQX39W 4OOU8O8c5pjf7jjf4J0RcHi7y9kH+es3qD/Us8Fyw5Tf3J5O7EudLTfrZgLak6cc Q8KSLN5bMMpVuU4v9XtLKdaeOw== -----END CERTIFICATE-----Generated at Tue Jul 29 02:25:34 2025 by rpki-client