$ rpki-client -vvf rpki-repo.registro.br/repo/3CJhZ4xjJMisAy9peWEGcrwwV3KPakfshLDsJaGdq61Q/0/AEA213503913E7D94BB483BA7B3A98B14D40C67D.mft File: AEA213503913E7D94BB483BA7B3A98B14D40C67D.mft (raw, json) Hash identifier: 4M6juEmRg25W98xCq+BpbTWpztVDpl2/iM2Jfmlb8PA= Subject key identifier: 84:9F:65:A8:A8:69:2A:97:24:7D:B8:EA:13:FD:13:98:64:01:69:90 Authority key identifier: AE:A2:13:50:39:13:E7:D9:4B:B4:83:BA:7B:3A:98:B1:4D:40:C6:7D Certificate issuer: /CN=AEA213503913E7D94BB483BA7B3A98B14D40C67D Certificate serial: 44A7F6750C7209E94A849AC798F857576336D24D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEA213503913E7D94BB483BA7B3A98B14D40C67D.cer Subject info access: rsync://rpki-repo.registro.br/repo/3CJhZ4xjJMisAy9peWEGcrwwV3KPakfshLDsJaGdq61Q/0/AEA213503913E7D94BB483BA7B3A98B14D40C67D.mft Manifest number: 0136 Signing time: Mon 20 Oct 2025 04:25:05 +0000 Manifest this update: Mon 20 Oct 2025 04:20:05 +0000 Manifest next update: Tue 21 Oct 2025 06:11:05 +0000 Files and hashes: 1: AEA213503913E7D94BB483BA7B3A98B14D40C67D.crl (hash: UO6ck9SNW9MEiHk4Jpusz20Ol6FEG9beFp6Q17mbspE=) 2: 3230312e37372e3130302e302f32322d3332203d3e20323730323934.roa (hash: 3T1d/cTDzxczVMlj8StrY+SRfiGkFzbw2CCqJrtn8DE=) 3: 323830343a363964343a3a2f33322d313238203d3e20323730323934.roa (hash: WS5Te1IwLS+Y6MtkZQws3QYNT2v+ie5YPdd9CMaVNW4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3CJhZ4xjJMisAy9peWEGcrwwV3KPakfshLDsJaGdq61Q/0/AEA213503913E7D94BB483BA7B3A98B14D40C67D.crl rsync://rpki-repo.registro.br/repo/3CJhZ4xjJMisAy9peWEGcrwwV3KPakfshLDsJaGdq61Q/0/AEA213503913E7D94BB483BA7B3A98B14D40C67D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEA213503913E7D94BB483BA7B3A98B14D40C67D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 06:11:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:a7:f6:75:0c:72:09:e9:4a:84:9a:c7:98:f8:57:57:63:36:d2:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEA213503913E7D94BB483BA7B3A98B14D40C67D Validity Not Before: Oct 20 04:20:05 2025 GMT Not After : Oct 21 06:11:05 2025 GMT Subject: CN=849F65A8A8692A97247DB8EA13FD139864016990 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:87:af:1e:51:9f:0c:8e:6e:02:36:d1:70:37: 34:63:4c:e9:2d:51:d7:ed:2d:c0:48:76:5e:e6:b9: d2:0e:81:89:dc:40:7e:e8:0f:95:88:b8:0d:3b:03: b3:19:d3:ec:41:3a:03:9c:34:63:af:b5:5e:cf:f0: a8:d3:5d:97:9c:66:ec:b3:a5:d9:7d:dd:fb:09:ef: 31:eb:e3:16:19:13:ed:51:2e:47:98:93:42:4c:ee: f1:c5:d6:ab:ce:51:fa:c8:18:cf:82:15:a8:f8:75: 92:c6:0e:8a:d4:5c:52:a7:e2:94:10:e6:2b:18:d9: d5:02:a0:c2:e6:68:80:bb:ef:0a:ba:6d:e6:9d:fd: c8:90:a3:56:83:f7:56:f3:d5:50:4a:4f:f1:27:c0: 81:dc:65:95:46:b2:bf:92:da:53:67:6e:ca:52:c7: e4:4b:90:53:6b:bb:e0:89:c7:a9:ff:01:af:44:10: 84:79:a0:9c:9a:32:3f:0e:d5:be:23:cc:32:da:05: 4d:53:7c:d8:f8:72:82:0b:51:48:82:75:4b:ef:28: e2:fd:d9:51:c6:5c:4b:86:21:81:22:24:60:ae:c2: 97:4e:1f:76:2a:18:8d:aa:e9:2c:a4:37:5f:d9:bd: fe:29:fc:4b:4c:d2:d9:32:19:57:06:d0:fa:51:49: 4b:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:9F:65:A8:A8:69:2A:97:24:7D:B8:EA:13:FD:13:98:64:01:69:90 X509v3 Authority Key Identifier: keyid:AE:A2:13:50:39:13:E7:D9:4B:B4:83:BA:7B:3A:98:B1:4D:40:C6:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3CJhZ4xjJMisAy9peWEGcrwwV3KPakfshLDsJaGdq61Q/0/AEA213503913E7D94BB483BA7B3A98B14D40C67D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEA213503913E7D94BB483BA7B3A98B14D40C67D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3CJhZ4xjJMisAy9peWEGcrwwV3KPakfshLDsJaGdq61Q/0/AEA213503913E7D94BB483BA7B3A98B14D40C67D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:36:b5:e6:13:dc:82:04:4f:8f:a2:d5:e3:93:85:41:3f:ec: 02:ce:a3:b8:a8:aa:7f:01:1c:04:b7:be:d5:9c:58:e8:a2:1a: 7b:d2:cc:cb:71:89:d2:50:e5:99:07:e4:02:9f:c4:1a:f1:a4: 1e:a5:c4:76:27:75:24:45:2e:ac:92:53:4b:95:1b:7f:ff:59: be:d8:b1:50:dc:e1:13:11:ed:52:5e:e0:5c:bd:03:d3:dd:fc: 4b:d9:d1:dd:1f:a9:fd:1a:e9:3f:1e:fe:e5:e4:dd:69:e4:c3: f0:d1:01:fe:e8:d7:61:e7:3c:1a:9f:1d:11:47:78:2b:3e:bf: 3d:1a:f5:01:9a:ce:fd:07:a8:8c:81:30:b7:4f:d4:65:89:c3: 2e:c4:4a:6c:d1:1c:4c:77:3d:e8:50:c6:cf:b1:c9:d9:97:3b: 28:ab:99:60:f6:f0:46:a3:3e:7f:1c:8e:0a:f5:9f:17:46:30: 0f:c9:ea:6b:98:14:22:f2:82:b7:24:8a:94:09:a7:c6:09:ea: 1b:6c:8b:a4:d5:db:7e:1a:3f:10:24:3d:2b:64:ca:0d:b2:23: 6e:44:d9:84:05:9d:4c:e3:56:08:39:ca:ee:b5:2a:bd:77:f4: 4a:2c:03:40:8d:da:a3:b3:62:82:5a:ca:f8:53:83:e4:1d:4b: fa:c8:cd:91 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIURKf2dQxyCelKhJrHmPhXV2M20k0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVBMjEzNTAzOTEzRTdEOTRCQjQ4M0JBN0IzQTk4QjE0 RDQwQzY3RDAeFw0yNTEwMjAwNDIwMDVaFw0yNTEwMjEwNjExMDVaMDMxMTAvBgNV BAMTKDg0OUY2NUE4QTg2OTJBOTcyNDdEQjhFQTEzRkQxMzk4NjQwMTY5OTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAh68eUZ8Mjm4CNtFwNzRjTOkt UdftLcBIdl7mudIOgYncQH7oD5WIuA07A7MZ0+xBOgOcNGOvtV7P8KjTXZecZuyz pdl93fsJ7zHr4xYZE+1RLkeYk0JM7vHF1qvOUfrIGM+CFaj4dZLGDorUXFKn4pQQ 5isY2dUCoMLmaIC77wq6bead/ciQo1aD91bz1VBKT/EnwIHcZZVGsr+S2lNnbspS x+RLkFNru+CJx6n/Aa9EEIR5oJyaMj8O1b4jzDLaBU1TfNj4coILUUiCdUvvKOL9 2VHGXEuGIYEiJGCuwpdOH3YqGI2q6SykN1/Zvf4p/EtM0tkyGVcG0PpRSUspAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUhJ9lqKhpKpckfbjqE/0TmGQBaZAwHwYDVR0j BBgwFoAUrqITUDkT59lLtIO6ezqYsU1Axn0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM0NKaFo0eGpKTWlzQXk5cGVXRUdjcnd3VjNLUGFrZnNoTERzSmFHZHE2 MVEvMC9BRUEyMTM1MDM5MTNFN0Q5NEJCNDgzQkE3QjNBOThCMTRENDBDNjdELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FFQTIxMzUwMzkxM0U3RDk0 QkI0ODNCQTdCM0E5OEIxNEQ0MEM2N0QuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M0NKaFo0eGpKTWlzQXk5cGVXRUdjcnd3VjNLUGFrZnNoTERzSmFHZHE2MVEvMC9B RUEyMTM1MDM5MTNFN0Q5NEJCNDgzQkE3QjNBOThCMTRENDBDNjdELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQDa15hPcggRPj6LV45OFQT/sAs6juKiqfwEcBLe+1ZxY6KIae9LMy3GJ0lDl mQfkAp/EGvGkHqXEdid1JEUurJJTS5Ubf/9ZvtixUNzhExHtUl7gXL0D0938S9nR 3R+p/RrpPx7+5eTdaeTD8NEB/ujXYec8Gp8dEUd4Kz6/PRr1AZrO/QeojIEwt0/U ZYnDLsRKbNEcTHc96FDGz7HJ2Zc7KKuZYPbwRqM+fxyOCvWfF0YwD8nqa5gUIvKC tySKlAmnxgnqG2yLpNXbfho/ECQ9K2TKDbIjbkTZhAWdTONWCDnK7rUqvXf0SiwD QI3ao7NiglrK+FOD5B1L+sjNkQ== -----END CERTIFICATE-----Generated at Mon Oct 20 16:13:20 2025 by rpki-client