$ rpki-client -vvf rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/0/A2A3F34AD377DD8B185FB62F294479A4953EA29F.mft File: A2A3F34AD377DD8B185FB62F294479A4953EA29F.mft (raw, json) Hash identifier: oOUk2zY8LfcG4v9MYg1Yt54bsf/drn8IDlwPFvPhmYU= Subject key identifier: BD:22:67:A8:20:CA:D1:3A:6A:2D:36:80:AC:42:F2:4E:E6:39:FD:D6 Authority key identifier: A2:A3:F3:4A:D3:77:DD:8B:18:5F:B6:2F:29:44:79:A4:95:3E:A2:9F Certificate issuer: /CN=A2A3F34AD377DD8B185FB62F294479A4953EA29F Certificate serial: 47197DAE46C6CAB0389E9F286C9436A797862BF1 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2A3F34AD377DD8B185FB62F294479A4953EA29F.cer Subject info access: rsync://rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/0/A2A3F34AD377DD8B185FB62F294479A4953EA29F.mft Manifest number: 9C Signing time: Mon 03 Nov 2025 14:19:47 +0000 Manifest this update: Mon 03 Nov 2025 14:14:47 +0000 Manifest next update: Tue 04 Nov 2025 15:24:47 +0000 Files and hashes: 1: 34352e3233322e3136302e302f32322d3234203d3e20323634323933.roa (hash: CPvT3p3XAZFfu3gOfh4/owWrLpHzeZEHAOI08mcgjF4=) 2: A2A3F34AD377DD8B185FB62F294479A4953EA29F.crl (hash: UCVwy7GKMKzeiIkprO9rzA6B6p76qVmENpze8eSxy/M=) 3: 323830343a323561383a3a2f33322d3334203d3e20323634323933.roa (hash: ZoB1LT2ZH9Vj6IVaBBhWrsP4cnsjosijPidmwDlg3SQ=) 4: 3133382e3132312e3132302e302f32322d3234203d3e20323634323933.roa (hash: rTjYayeyuMTgmvyXTSthMVbnAtKwGqrwy6zYd+iMfAc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/0/A2A3F34AD377DD8B185FB62F294479A4953EA29F.crl rsync://rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/0/A2A3F34AD377DD8B185FB62F294479A4953EA29F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2A3F34AD377DD8B185FB62F294479A4953EA29F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 15:24:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:19:7d:ae:46:c6:ca:b0:38:9e:9f:28:6c:94:36:a7:97:86:2b:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A2A3F34AD377DD8B185FB62F294479A4953EA29F Validity Not Before: Nov 3 14:14:47 2025 GMT Not After : Nov 4 15:24:47 2025 GMT Subject: CN=BD2267A820CAD13A6A2D3680AC42F24EE639FDD6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:1d:f4:d0:61:33:69:79:9d:4e:c8:cd:89:ce: 7e:6f:b6:b3:34:99:8f:62:a3:1b:03:bd:b3:0e:8a: 1f:3d:af:fb:c8:db:80:1c:62:b3:94:04:19:61:43: 44:52:72:22:19:bd:47:87:72:79:8b:19:a7:f4:17: a1:13:d6:b9:4c:e4:c4:d4:ea:04:e7:10:b2:1b:fa: b0:99:c9:53:4b:db:ce:28:1f:a3:66:ec:a0:b5:9e: 2a:45:1b:76:02:dc:38:f7:bd:40:7f:75:08:a3:95: 53:cb:98:61:3b:f9:87:7c:44:3f:1d:04:ac:53:c6: b2:22:08:c1:75:39:06:f9:55:43:9b:e6:bc:7b:6d: 80:b7:e7:cd:9d:47:2f:57:e3:81:1e:ba:b3:01:e6: 25:39:13:c5:8c:79:45:aa:32:f4:3b:17:ec:44:67: 5a:eb:80:cc:fb:8b:7a:32:78:93:1c:a2:44:8e:68: 49:77:08:60:fe:fb:06:86:73:a8:d6:1c:17:47:95: bc:09:dc:63:ef:8c:ca:a4:10:36:5e:07:2a:a4:60: 8a:27:83:25:16:e0:e9:95:29:f8:a9:9f:88:17:94: 12:1e:b6:cd:9a:ad:a1:bd:e4:27:c1:71:95:08:14: f9:32:07:37:65:91:fe:25:ad:1b:68:08:4b:a9:2b: 8b:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:22:67:A8:20:CA:D1:3A:6A:2D:36:80:AC:42:F2:4E:E6:39:FD:D6 X509v3 Authority Key Identifier: keyid:A2:A3:F3:4A:D3:77:DD:8B:18:5F:B6:2F:29:44:79:A4:95:3E:A2:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/0/A2A3F34AD377DD8B185FB62F294479A4953EA29F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2A3F34AD377DD8B185FB62F294479A4953EA29F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/0/A2A3F34AD377DD8B185FB62F294479A4953EA29F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:a5:e9:ef:d7:94:ac:b4:c7:49:09:8f:0c:04:5c:22:29:d6: 30:1c:47:f2:cb:df:52:29:12:87:94:9b:ea:f4:f6:33:e1:38: c7:d1:23:3b:ea:25:5f:1b:f8:cb:d7:39:05:b5:37:71:64:e2: 3d:a5:d1:39:27:59:33:17:6d:20:50:4c:da:79:89:58:cf:32: 8a:b8:37:ec:9f:36:a0:a8:65:1a:3d:5f:5f:6d:70:af:2d:59: 81:77:c4:d2:1f:a2:32:fc:34:80:d3:58:45:b0:b4:c4:29:18: 1e:47:04:b6:4e:ab:0a:69:3f:b2:f2:3e:e6:f1:0d:18:b0:e2: bd:74:e5:90:13:0c:2d:46:4e:da:9f:ed:45:f7:40:b4:d5:bd: 96:5f:76:0d:98:cf:ac:e1:8d:e3:fd:f5:e9:4a:8c:af:9c:08: cf:d4:b5:d9:0c:f5:83:b9:dc:54:6f:3a:1b:91:2c:44:20:21: 39:8a:f8:52:a8:d5:dd:3d:62:27:14:e5:db:f6:2e:2d:2e:0d: 23:4e:90:7d:ac:c7:7b:92:60:43:0b:d3:36:45:d9:28:07:96: d0:60:1c:61:7e:2f:d3:2f:96:81:8b:9d:5a:61:90:60:91:c7: 03:ec:02:b5:f3:e3:fc:b6:09:bd:78:fb:fc:9c:5a:6a:43:3f: 11:09:fc:c4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIURxl9rkbGyrA4np8obJQ2p5eGK/EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTJBM0YzNEFEMzc3REQ4QjE4NUZCNjJGMjk0NDc5QTQ5 NTNFQTI5RjAeFw0yNTExMDMxNDE0NDdaFw0yNTExMDQxNTI0NDdaMDMxMTAvBgNV BAMTKEJEMjI2N0E4MjBDQUQxM0E2QTJEMzY4MEFDNDJGMjRFRTYzOUZERDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzHfTQYTNpeZ1OyM2Jzn5vtrM0 mY9ioxsDvbMOih89r/vI24AcYrOUBBlhQ0RSciIZvUeHcnmLGaf0F6ET1rlM5MTU 6gTnELIb+rCZyVNL284oH6Nm7KC1nipFG3YC3Dj3vUB/dQijlVPLmGE7+Yd8RD8d BKxTxrIiCMF1OQb5VUOb5rx7bYC3582dRy9X44EeurMB5iU5E8WMeUWqMvQ7F+xE Z1rrgMz7i3oyeJMcokSOaEl3CGD++waGc6jWHBdHlbwJ3GPvjMqkEDZeByqkYIon gyUW4OmVKfipn4gXlBIets2araG95CfBcZUIFPkyBzdlkf4lrRtoCEupK4uHAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUvSJnqCDK0TpqLTaArELyTuY5/dYwHwYDVR0j BBgwFoAUoqPzStN33YsYX7YvKUR5pJU+op8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR2FrdHRDazJqS0MyeXFTZ3ppenJKcnJZNWFnenNaMnc3QlFxdmtYRlhW RmgvMC9BMkEzRjM0QUQzNzdERDhCMTg1RkI2MkYyOTQ0NzlBNDk1M0VBMjlGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0EyQTNGMzRBRDM3N0REOEIx ODVGQjYyRjI5NDQ3OUE0OTUzRUEyOUYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R2FrdHRDazJqS0MyeXFTZ3ppenJKcnJZNWFnenNaMnc3QlFxdmtYRlhWRmgvMC9B MkEzRjM0QUQzNzdERDhCMTg1RkI2MkYyOTQ0NzlBNDk1M0VBMjlGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFKXp79eUrLTHSQmPDARcIinWMBxH8svfUikSh5Sb6vT2M+E4x9EjO+olXxv4 y9c5BbU3cWTiPaXROSdZMxdtIFBM2nmJWM8yirg37J82oKhlGj1fX21wry1ZgXfE 0h+iMvw0gNNYRbC0xCkYHkcEtk6rCmk/svI+5vENGLDivXTlkBMMLUZO2p/tRfdA tNW9ll92DZjPrOGN4/316UqMr5wIz9S12Qz1g7ncVG86G5EsRCAhOYr4UqjV3T1i JxTl2/YuLS4NI06QfazHe5JgQwvTNkXZKAeW0GAcYX4v0y+WgYudWmGQYJHHA+wC tfPj/LYJvXj7/JxaakM/EQn8xA== -----END CERTIFICATE-----Generated at Mon Nov 3 19:25:33 2025 by rpki-client