$ rpki-client -vvf rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/1/2AADFACED9C75E320914697A02E254A3D463839A.mft File: 2AADFACED9C75E320914697A02E254A3D463839A.mft (raw, json) Hash identifier: WSaHKAxjUwLkwS5g6N25RUUx/ooaF5Z2swyq/qLU3fA= Subject key identifier: F1:2D:E2:AA:2B:9A:FD:BF:A8:43:8D:37:57:9E:9C:23:D5:97:A2:1D Authority key identifier: 2A:AD:FA:CE:D9:C7:5E:32:09:14:69:7A:02:E2:54:A3:D4:63:83:9A Certificate issuer: /CN=2AADFACED9C75E320914697A02E254A3D463839A Certificate serial: 459DC84B0359BCB1A0BDB0BD9EE538E2453D5E01 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AADFACED9C75E320914697A02E254A3D463839A.cer Subject info access: rsync://rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/1/2AADFACED9C75E320914697A02E254A3D463839A.mft Manifest number: 027A Signing time: Sat 26 Jul 2025 19:18:07 +0000 Manifest this update: Sat 26 Jul 2025 19:13:07 +0000 Manifest next update: Sun 27 Jul 2025 21:18:07 +0000 Files and hashes: 1: 3138372e3131312e31362e302f32302d3234203d3e203533313230.roa (hash: olPEUYzQeXbpm2M5qdX3HUxqCDHC3YBr2Etr9x7gT/w=) 2: 3134312e3139332e3135312e302f32342d3234203d3e203533313230.roa (hash: DuI4Mug1p6teJxzujuasFd0ujWIU2EvbfZhNpCjPypI=) 3: 2AADFACED9C75E320914697A02E254A3D463839A.crl (hash: Zr4IXIsxDXF5bxGxubpgF/jUDllnQBocPYtRMm6EAOI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/1/2AADFACED9C75E320914697A02E254A3D463839A.crl rsync://rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/1/2AADFACED9C75E320914697A02E254A3D463839A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AADFACED9C75E320914697A02E254A3D463839A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 27 Jul 2025 21:18:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:9d:c8:4b:03:59:bc:b1:a0:bd:b0:bd:9e:e5:38:e2:45:3d:5e:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2AADFACED9C75E320914697A02E254A3D463839A Validity Not Before: Jul 26 19:13:07 2025 GMT Not After : Jul 27 21:18:07 2025 GMT Subject: CN=F12DE2AA2B9AFDBFA8438D37579E9C23D597A21D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:8f:0e:a2:bb:8e:a0:0c:67:f0:a0:30:1c:9d: 31:e8:60:3d:3b:97:1e:be:1d:9b:4b:f7:00:3f:cc: 46:28:03:58:46:c7:56:6f:21:a9:34:17:f8:51:ec: f4:61:0f:78:b8:e2:23:f9:ba:9c:21:96:5b:14:de: 8c:d8:ee:4f:d9:9d:85:88:ea:b6:85:81:0c:95:93: 84:54:0c:7c:88:14:93:9e:3e:cf:a9:54:b2:39:c8: 40:a0:1c:f6:f1:5f:3e:da:bf:4a:11:68:0e:8a:46: 96:df:af:14:91:2f:d8:66:5c:98:f6:6b:ca:6c:a5: 11:5c:48:8d:25:54:75:c8:f2:a5:2e:ba:31:af:fc: 91:81:27:d2:13:3b:71:f1:7c:d4:21:45:fb:f7:49: 1f:e5:06:a6:a0:6e:0a:b3:86:07:2d:bd:e3:15:f9: b3:fe:b1:fe:51:57:e8:ce:b8:fb:22:2f:15:ce:7c: f1:ee:f4:4a:3a:82:50:96:05:df:5f:32:91:cf:92: 46:73:bf:85:ff:69:fe:b9:26:de:dd:04:d2:31:1d: 05:a3:b1:d6:cf:14:9e:4b:1a:7d:45:96:96:e7:79: aa:19:fe:5c:33:ae:54:77:9c:2b:e2:a7:a8:ce:54: 66:1b:ff:57:95:7a:df:0d:ae:ac:4e:d7:0a:55:95: ab:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:2D:E2:AA:2B:9A:FD:BF:A8:43:8D:37:57:9E:9C:23:D5:97:A2:1D X509v3 Authority Key Identifier: keyid:2A:AD:FA:CE:D9:C7:5E:32:09:14:69:7A:02:E2:54:A3:D4:63:83:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/1/2AADFACED9C75E320914697A02E254A3D463839A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AADFACED9C75E320914697A02E254A3D463839A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/1/2AADFACED9C75E320914697A02E254A3D463839A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:d2:d8:e3:1a:a0:9a:7b:c8:3c:3c:04:a6:aa:bd:29:23:3e: 64:8b:9e:86:5f:57:41:91:e2:bb:24:8f:8d:1f:4c:ee:af:ef: e1:21:7e:ae:a4:54:f5:dc:a9:d3:79:24:de:a7:04:ad:1e:18: b3:2a:1f:68:6f:66:5a:b6:cc:b5:e9:05:80:af:71:79:5d:09: 9f:59:84:fa:56:c7:bf:70:53:3b:85:d2:1b:92:fa:71:85:a4: bd:79:15:e3:d6:ff:dc:6e:43:f6:a0:65:65:38:7c:f6:db:c1: d7:62:b8:1a:c8:1d:fe:a6:86:ec:e3:fd:67:f0:42:2c:ea:e2: f5:02:7a:51:bb:28:cf:d9:ad:04:58:71:d1:90:b0:5a:c6:46: 53:e5:6e:fb:e2:ab:89:bf:1f:aa:02:fc:ec:11:01:cf:d6:b8: 19:f3:37:91:a2:94:de:1d:5a:4f:a0:1f:56:69:91:51:9a:75: b4:28:58:1f:78:28:32:f2:5e:f5:30:4b:6c:88:a9:c8:d7:75: 89:c3:9e:d0:0b:29:18:22:9a:77:86:f8:2a:a0:c4:4f:3e:b3: ab:6b:3c:ab:4f:82:bf:c5:27:36:89:cc:25:10:ca:9b:d2:8e: aa:36:15:dd:76:53:da:99:f2:45:68:fa:8e:c6:26:3f:2e:b2: 5c:08:50:8c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIURZ3ISwNZvLGgvbC9nuU44kU9XgEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFBREZBQ0VEOUM3NUUzMjA5MTQ2OTdBMDJFMjU0QTNE NDYzODM5QTAeFw0yNTA3MjYxOTEzMDdaFw0yNTA3MjcyMTE4MDdaMDMxMTAvBgNV BAMTKEYxMkRFMkFBMkI5QUZEQkZBODQzOEQzNzU3OUU5QzIzRDU5N0EyMUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCujw6iu46gDGfwoDAcnTHoYD07 lx6+HZtL9wA/zEYoA1hGx1ZvIak0F/hR7PRhD3i44iP5upwhllsU3ozY7k/ZnYWI 6raFgQyVk4RUDHyIFJOePs+pVLI5yECgHPbxXz7av0oRaA6KRpbfrxSRL9hmXJj2 a8pspRFcSI0lVHXI8qUuujGv/JGBJ9ITO3HxfNQhRfv3SR/lBqagbgqzhgctveMV +bP+sf5RV+jOuPsiLxXOfPHu9Eo6glCWBd9fMpHPkkZzv4X/af65Jt7dBNIxHQWj sdbPFJ5LGn1FlpbneaoZ/lwzrlR3nCvip6jOVGYb/1eVet8NrqxO1wpVlavPAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU8S3iqiua/b+oQ403V56cI9WXoh0wHwYDVR0j BBgwFoAUKq36ztnHXjIJFGl6AuJUo9Rjg5owDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSHVyY0FKek1GTEY4ZTRncEg2SmVqUkRxM2p2UEpqYmttMW05bVJCU0Ru eW8vMS8yQUFERkFDRUQ5Qzc1RTMyMDkxNDY5N0EwMkUyNTRBM0Q0NjM4MzlBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJBQURGQUNFRDlDNzVFMzIw OTE0Njk3QTAyRTI1NEEzRDQ2MzgzOUEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SHVyY0FKek1GTEY4ZTRncEg2SmVqUkRxM2p2UEpqYmttMW05bVJCU0RueW8vMS8y QUFERkFDRUQ5Qzc1RTMyMDkxNDY5N0EwMkUyNTRBM0Q0NjM4MzlBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmtLY4xqgmnvIPDwEpqq9KSM+ZIuehl9XQZHiuySPjR9M7q/v4SF+rqRU9dyp 03kk3qcErR4YsyofaG9mWrbMtekFgK9xeV0Jn1mE+lbHv3BTO4XSG5L6cYWkvXkV 49b/3G5D9qBlZTh89tvB12K4Gsgd/qaG7OP9Z/BCLOri9QJ6Ubsoz9mtBFhx0ZCw WsZGU+Vu++Krib8fqgL87BEBz9a4GfM3kaKU3h1aT6AfVmmRUZp1tChYH3goMvJe 9TBLbIipyNd1icOe0AspGCKad4b4KqDETz6zq2s8q0+Cv8UnNonMJRDKm9KOqjYV 3XZT2pnyRWj6jsYmPy6yXAhQjA== -----END CERTIFICATE-----Generated at Sun Jul 27 12:23:48 2025 by rpki-client