$ rpki-client -vvf rpki-repo.registro.br/repo/H88UdHUTsB7UbUmDVvyHJtPX593irterXzDJkSEgg45D/1/AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.mft File: AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.mft (raw, json) Hash identifier: a0zVRSym7TiYutSx3A8DJk/CB7mc1uKZNr+jXh/CfT4= Subject key identifier: 86:A1:B5:BB:1B:F1:F4:AC:72:00:7E:F9:65:4F:6D:45:C6:22:FE:AC Authority key identifier: AA:6F:86:A0:5F:D9:F7:D9:AB:E9:E8:E9:5B:24:6A:4C:FE:2C:9E:1A Certificate issuer: /CN=AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A Certificate serial: 5C873FC2D8954BAF3805DB8DEFE7B0534B33A91B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.cer Subject info access: rsync://rpki-repo.registro.br/repo/H88UdHUTsB7UbUmDVvyHJtPX593irterXzDJkSEgg45D/1/AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.mft Manifest number: 0303 Signing time: Mon 03 Nov 2025 07:52:29 +0000 Manifest this update: Mon 03 Nov 2025 07:47:29 +0000 Manifest next update: Tue 04 Nov 2025 11:39:29 +0000 Files and hashes: 1: 34352e3233372e3134302e302f32322d3234203d3e20323638323831.roa (hash: 741FE6q+LhbUbEXCT3YEJH9sL+8gSKDI67qh5Q3QkQ4=) 2: AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.crl (hash: WNnrqaurQbLK2ujWuHHiOUXZIs/c5p2SmCd+IkZeCks=) 3: 323830343a346563343a3a2f33322d3438203d3e20323638323831.roa (hash: ee5l23fWTv1/lWAMo2GfCZn3RRz28vPRce7gjAH3vSM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/H88UdHUTsB7UbUmDVvyHJtPX593irterXzDJkSEgg45D/1/AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.crl rsync://rpki-repo.registro.br/repo/H88UdHUTsB7UbUmDVvyHJtPX593irterXzDJkSEgg45D/1/AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 11:39:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:87:3f:c2:d8:95:4b:af:38:05:db:8d:ef:e7:b0:53:4b:33:a9:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A Validity Not Before: Nov 3 07:47:29 2025 GMT Not After : Nov 4 11:39:29 2025 GMT Subject: CN=86A1B5BB1BF1F4AC72007EF9654F6D45C622FEAC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:a1:9a:c1:5d:18:bc:67:77:d2:15:06:49:1b: e1:56:58:fc:4d:88:96:20:7f:b7:23:89:57:a2:28: b1:03:dd:a6:16:12:83:8c:58:12:17:fb:9c:08:41: 78:78:75:bf:e3:73:2a:f3:22:a8:ed:64:46:bf:3e: f5:ce:0d:98:43:51:32:c5:8c:31:64:5b:4b:5d:96: 36:d5:75:63:25:8b:b5:90:21:3e:96:6e:b9:88:a3: 36:39:fe:fe:45:05:c6:60:42:b5:55:9b:13:e2:21: cc:79:42:70:b4:89:0b:cc:23:2d:00:3c:e7:d1:ce: 8f:18:75:31:fd:06:4b:b7:5f:64:e4:53:f3:73:5a: 4f:0e:32:a3:43:a7:b0:99:f5:e0:a2:20:d4:0b:6a: 92:ba:2a:fe:29:80:bb:32:da:37:eb:9e:33:fb:2d: d2:55:62:1b:65:a1:ae:a9:c8:57:b1:39:0a:a7:8d: 02:4b:13:f4:8f:bf:54:71:00:6b:75:e0:14:17:0b: 1d:45:d4:f3:d9:8f:8f:4d:dd:4d:e8:3c:a6:bc:4c: ce:f2:26:1c:f7:c1:ac:36:62:68:88:c4:90:8c:42: 75:b9:fd:52:14:12:a8:48:47:bd:71:48:e4:aa:94: 9f:01:04:45:45:e5:c8:bb:cb:f1:d6:15:49:6f:62: 8f:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:A1:B5:BB:1B:F1:F4:AC:72:00:7E:F9:65:4F:6D:45:C6:22:FE:AC X509v3 Authority Key Identifier: keyid:AA:6F:86:A0:5F:D9:F7:D9:AB:E9:E8:E9:5B:24:6A:4C:FE:2C:9E:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/H88UdHUTsB7UbUmDVvyHJtPX593irterXzDJkSEgg45D/1/AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/H88UdHUTsB7UbUmDVvyHJtPX593irterXzDJkSEgg45D/1/AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:02:11:b6:41:30:ff:68:c9:8b:f3:5a:85:63:76:f6:4e:96: 1c:4b:48:2b:42:d6:99:46:0a:1c:ad:9b:96:da:eb:0b:e0:b3: 8b:86:0d:39:1a:45:3b:c5:8c:80:b7:66:6a:10:c1:c9:db:c4: 86:ed:4c:d1:06:d0:28:2e:6f:37:70:f8:a1:cd:95:9e:78:22: b7:9a:7c:51:91:20:11:99:d2:55:04:0b:80:b3:41:f5:58:0b: e8:5c:b0:89:f0:cc:14:4e:f0:6e:f9:41:e5:66:8d:4b:a9:c1: 0c:d7:ae:ce:7b:9f:ea:9c:c3:86:a1:84:b4:e2:b4:17:2b:52: 95:3b:57:31:c1:ae:aa:53:21:7f:0e:74:4c:fd:78:eb:40:a6: bf:5d:07:76:61:b5:7a:5c:b4:3b:ba:34:db:2f:0f:b8:6e:c0: eb:4c:3b:ec:a4:9d:a3:39:cf:e3:32:4f:c7:12:6d:12:d2:2f: e2:4a:da:a9:c9:a4:05:d5:89:3a:4e:71:b7:23:d1:2f:1b:54: 9c:59:8b:34:fb:4a:8a:77:fa:2b:2b:86:f9:fc:c3:29:64:23: e9:3b:f1:1b:d7:a8:a8:fc:2f:48:67:08:23:23:0f:64:ec:fc: 90:21:3e:ba:5e:d9:b8:c7:fb:04:d7:12:4c:65:c4:c3:b5:10: 0b:9c:f5:37 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUXIc/wtiVS684BduN7+ewU0szqRswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUE2Rjg2QTA1RkQ5RjdEOUFCRTlFOEU5NUIyNDZBNENG RTJDOUUxQTAeFw0yNTExMDMwNzQ3MjlaFw0yNTExMDQxMTM5MjlaMDMxMTAvBgNV BAMTKDg2QTFCNUJCMUJGMUY0QUM3MjAwN0VGOTY1NEY2RDQ1QzYyMkZFQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxoZrBXRi8Z3fSFQZJG+FWWPxN iJYgf7cjiVeiKLED3aYWEoOMWBIX+5wIQXh4db/jcyrzIqjtZEa/PvXODZhDUTLF jDFkW0tdljbVdWMli7WQIT6WbrmIozY5/v5FBcZgQrVVmxPiIcx5QnC0iQvMIy0A POfRzo8YdTH9Bku3X2TkU/NzWk8OMqNDp7CZ9eCiINQLapK6Kv4pgLsy2jfrnjP7 LdJVYhtloa6pyFexOQqnjQJLE/SPv1RxAGt14BQXCx1F1PPZj49N3U3oPKa8TM7y Jhz3waw2YmiIxJCMQnW5/VIUEqhIR71xSOSqlJ8BBEVF5ci7y/HWFUlvYo/VAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUhqG1uxvx9KxyAH75ZU9tRcYi/qwwHwYDVR0j BBgwFoAUqm+GoF/Z99mr6ejpWyRqTP4snhowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSDg4VWRIVVRzQjdVYlVtRFZ2eUhKdFBYNTkzaXJ0ZXJYekRKa1NFZ2c0 NUQvMS9BQTZGODZBMDVGRDlGN0Q5QUJFOUU4RTk1QjI0NkE0Q0ZFMkM5RTFBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FBNkY4NkEwNUZEOUY3RDlB QkU5RThFOTVCMjQ2QTRDRkUyQzlFMUEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SDg4VWRIVVRzQjdVYlVtRFZ2eUhKdFBYNTkzaXJ0ZXJYekRKa1NFZ2c0NUQvMS9B QTZGODZBMDVGRDlGN0Q5QUJFOUU4RTk1QjI0NkE0Q0ZFMkM5RTFBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEwIRtkEw/2jJi/NahWN29k6WHEtIK0LWmUYKHK2bltrrC+Czi4YNORpFO8WM gLdmahDBydvEhu1M0QbQKC5vN3D4oc2Vnngit5p8UZEgEZnSVQQLgLNB9VgL6Fyw ifDMFE7wbvlB5WaNS6nBDNeuznuf6pzDhqGEtOK0FytSlTtXMcGuqlMhfw50TP14 60Cmv10HdmG1ely0O7o02y8PuG7A60w77KSdoznP4zJPxxJtEtIv4kraqcmkBdWJ Ok5xtyPRLxtUnFmLNPtKinf6KyuG+fzDKWQj6TvxG9eoqPwvSGcIIyMPZOz8kCE+ ul7ZuMf7BNcSTGXEw7UQC5z1Nw== -----END CERTIFICATE-----Generated at Mon Nov 3 19:40:04 2025 by rpki-client