$ rpki-client -vvf rpki-repo.registro.br/repo/H88UdHUTsB7UbUmDVvyHJtPX593irterXzDJkSEgg45D/1/AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.mft File: AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.mft (raw, json) Hash identifier: mGMuWIihI69JCup9vzmIRe6ddXpb5+uG4FtS4+VMMak= Subject key identifier: 0C:37:89:F5:09:9C:1C:0F:2B:C6:14:44:23:F1:6E:EE:D4:31:C8:56 Authority key identifier: AA:6F:86:A0:5F:D9:F7:D9:AB:E9:E8:E9:5B:24:6A:4C:FE:2C:9E:1A Certificate issuer: /CN=AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A Certificate serial: 03718087975985A2920C7AF9B6D1774C68420C06 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.cer Subject info access: rsync://rpki-repo.registro.br/repo/H88UdHUTsB7UbUmDVvyHJtPX593irterXzDJkSEgg45D/1/AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.mft Manifest number: 02A1 Signing time: Wed 20 Aug 2025 16:06:57 +0000 Manifest this update: Wed 20 Aug 2025 16:01:57 +0000 Manifest next update: Thu 21 Aug 2025 18:17:57 +0000 Files and hashes: 1: 323830343a346563343a3a2f33322d3438203d3e20323638323831.roa (hash: ee5l23fWTv1/lWAMo2GfCZn3RRz28vPRce7gjAH3vSM=) 2: AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.crl (hash: QPKJ5N3zljAKB4uSqSTyrssgz1iqX3kPS7PboQNZjas=) 3: 34352e3233372e3134302e302f32322d3234203d3e20323638323831.roa (hash: 741FE6q+LhbUbEXCT3YEJH9sL+8gSKDI67qh5Q3QkQ4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/H88UdHUTsB7UbUmDVvyHJtPX593irterXzDJkSEgg45D/1/AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.crl rsync://rpki-repo.registro.br/repo/H88UdHUTsB7UbUmDVvyHJtPX593irterXzDJkSEgg45D/1/AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 21 Aug 2025 18:17:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:71:80:87:97:59:85:a2:92:0c:7a:f9:b6:d1:77:4c:68:42:0c:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A Validity Not Before: Aug 20 16:01:57 2025 GMT Not After : Aug 21 18:17:57 2025 GMT Subject: CN=0C3789F5099C1C0F2BC6144423F16EEED431C856 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:19:ae:17:e5:57:04:8f:92:50:f9:c3:12:c2: 81:59:89:55:81:2a:84:f3:ad:29:d0:44:de:03:d1: 0f:96:38:d3:0f:eb:1f:9c:b8:55:42:ea:a9:bf:b9: 2b:69:01:98:6b:4d:71:99:e6:9e:8d:f0:fb:41:42: f0:0b:67:02:0a:d5:57:43:b5:c7:2e:a4:81:e0:a9: 34:23:d6:69:d4:6a:3b:33:b2:24:eb:33:db:d1:f3: 1c:ce:11:4d:84:27:8c:60:c4:cf:00:0c:48:31:f4: 3a:9f:5d:16:dd:34:4f:36:a0:d4:31:58:35:32:6d: cb:ff:0f:97:e9:e2:16:de:85:06:5e:23:90:40:b0: e0:4a:4f:95:b8:bf:93:bd:4b:ab:1f:cf:81:b6:0c: 5b:e5:ad:e0:53:12:b4:b5:e3:22:4d:98:9a:8e:68: f6:45:e2:93:7b:61:f1:ef:41:06:25:ed:dc:34:3f: 8d:d8:3e:6a:0d:1c:6c:65:3b:f0:71:a7:c6:ba:db: a5:0a:6c:4d:f4:3e:c8:c4:45:e5:c8:1c:2f:be:54: f4:b5:af:95:c3:ef:7f:82:8a:94:51:1c:4f:fc:d0: f1:ef:83:37:52:4a:34:1f:fc:b5:71:a4:08:17:11: 62:92:78:7d:dd:ac:b7:d5:15:77:52:db:65:50:30: cf:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:37:89:F5:09:9C:1C:0F:2B:C6:14:44:23:F1:6E:EE:D4:31:C8:56 X509v3 Authority Key Identifier: keyid:AA:6F:86:A0:5F:D9:F7:D9:AB:E9:E8:E9:5B:24:6A:4C:FE:2C:9E:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/H88UdHUTsB7UbUmDVvyHJtPX593irterXzDJkSEgg45D/1/AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/H88UdHUTsB7UbUmDVvyHJtPX593irterXzDJkSEgg45D/1/AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:2c:4f:ba:bd:8d:b0:ba:67:c8:3c:b0:87:f6:59:e4:76:d1: 06:5d:0c:8e:c7:cc:4b:ac:bd:58:af:70:29:91:d2:08:8c:e8: 19:9e:86:4c:1d:f3:53:b0:e9:2d:e4:9d:2b:b3:8a:b4:ee:e8: 44:8b:3e:60:f2:90:f1:9b:a0:7a:e7:f0:d3:af:cd:4d:8c:93: b4:8b:80:da:f4:4b:4e:b4:00:4c:2a:1f:4f:cd:b8:de:af:2b: 22:4c:a4:6a:b9:f6:ae:1f:94:9f:87:01:89:f1:9b:9f:27:78: 7b:10:7b:85:1c:f7:69:72:7d:ab:e2:ee:cf:8c:3c:87:82:dd: 10:d5:18:13:70:ba:20:2f:5b:ee:ea:26:5c:25:72:61:2b:01: 15:39:58:27:92:01:ef:7a:6d:6b:90:fd:76:c1:66:ea:24:78: ca:07:ce:b5:13:cf:28:bc:af:1c:68:3d:a3:39:b6:e1:26:67: aa:b3:e4:81:af:f2:90:6d:12:34:d6:b8:79:a8:38:bd:c3:09: 6b:bc:37:4e:df:2f:cb:69:f2:d9:71:11:48:d3:b4:9e:1b:d7: e6:06:0d:59:af:3f:e8:ba:88:47:2a:ab:4e:05:28:e2:66:f3: 3c:c0:ac:c2:2f:71:bf:b1:5e:bb:8f:fb:b6:cf:fc:1e:fa:56: c4:5f:93:8d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUA3GAh5dZhaKSDHr5ttF3TGhCDAYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUE2Rjg2QTA1RkQ5RjdEOUFCRTlFOEU5NUIyNDZBNENG RTJDOUUxQTAeFw0yNTA4MjAxNjAxNTdaFw0yNTA4MjExODE3NTdaMDMxMTAvBgNV BAMTKDBDMzc4OUY1MDk5QzFDMEYyQkM2MTQ0NDIzRjE2RUVFRDQzMUM4NTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuGa4X5VcEj5JQ+cMSwoFZiVWB KoTzrSnQRN4D0Q+WONMP6x+cuFVC6qm/uStpAZhrTXGZ5p6N8PtBQvALZwIK1VdD tccupIHgqTQj1mnUajszsiTrM9vR8xzOEU2EJ4xgxM8ADEgx9DqfXRbdNE82oNQx WDUybcv/D5fp4hbehQZeI5BAsOBKT5W4v5O9S6sfz4G2DFvlreBTErS14yJNmJqO aPZF4pN7YfHvQQYl7dw0P43YPmoNHGxlO/Bxp8a626UKbE30PsjEReXIHC++VPS1 r5XD73+CipRRHE/80PHvgzdSSjQf/LVxpAgXEWKSeH3drLfVFXdS22VQMM/zAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUDDeJ9QmcHA8rxhREI/Fu7tQxyFYwHwYDVR0j BBgwFoAUqm+GoF/Z99mr6ejpWyRqTP4snhowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSDg4VWRIVVRzQjdVYlVtRFZ2eUhKdFBYNTkzaXJ0ZXJYekRKa1NFZ2c0 NUQvMS9BQTZGODZBMDVGRDlGN0Q5QUJFOUU4RTk1QjI0NkE0Q0ZFMkM5RTFBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FBNkY4NkEwNUZEOUY3RDlB QkU5RThFOTVCMjQ2QTRDRkUyQzlFMUEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SDg4VWRIVVRzQjdVYlVtRFZ2eUhKdFBYNTkzaXJ0ZXJYekRKa1NFZ2c0NUQvMS9B QTZGODZBMDVGRDlGN0Q5QUJFOUU4RTk1QjI0NkE0Q0ZFMkM5RTFBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtyxPur2NsLpnyDywh/ZZ5HbRBl0MjsfMS6y9WK9wKZHSCIzoGZ6GTB3zU7Dp LeSdK7OKtO7oRIs+YPKQ8Zugeufw06/NTYyTtIuA2vRLTrQATCofT8243q8rIkyk arn2rh+Un4cBifGbnyd4exB7hRz3aXJ9q+Luz4w8h4LdENUYE3C6IC9b7uomXCVy YSsBFTlYJ5IB73pta5D9dsFm6iR4ygfOtRPPKLyvHGg9ozm24SZnqrPkga/ykG0S NNa4eag4vcMJa7w3Tt8vy2ny2XERSNO0nhvX5gYNWa8/6LqIRyqrTgUo4mbzPMCs wi9xv7Feu4/7ts/8HvpWxF+TjQ== -----END CERTIFICATE-----Generated at Wed Aug 20 18:37:37 2025 by rpki-client