$ rpki-client -vvf rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/00AA5B8577C0697C844375D4EF4400A37FA7FA18.mft File: 00AA5B8577C0697C844375D4EF4400A37FA7FA18.mft (raw, json) Hash identifier: xE92UxHuaz2qbqDeuxw1srGqpDg9+FerFuWvsKDPHHw= Subject key identifier: D9:85:D2:C0:58:40:9C:17:12:F9:D8:01:F0:6A:E0:1E:9A:AC:35:E2 Authority key identifier: 00:AA:5B:85:77:C0:69:7C:84:43:75:D4:EF:44:00:A3:7F:A7:FA:18 Certificate issuer: /CN=00AA5B8577C0697C844375D4EF4400A37FA7FA18 Certificate serial: 21870FD3B31033EB62E1BD92AAFB03BDF6921756 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00AA5B8577C0697C844375D4EF4400A37FA7FA18.cer Subject info access: rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/00AA5B8577C0697C844375D4EF4400A37FA7FA18.mft Manifest number: 37 Signing time: Mon 20 Oct 2025 04:37:02 +0000 Manifest this update: Mon 20 Oct 2025 04:32:02 +0000 Manifest next update: Tue 21 Oct 2025 06:16:02 +0000 Files and hashes: 1: 3137372e382e302e302f31392d3332203d3e203238333630.roa (hash: q2MM6gW+szcX2JkOtewWGLVXtIPye4Uedtw9vSocUTw=) 2: 3137392e3132342e3232342e302f32302d3332203d3e203238333630.roa (hash: BMY+x9x6EPiDqvs4O5YjGOp4Ob0vxL21fEmA76rw7CE=) 3: 323830343a31343a3a2f33322d313238203d3e203238333630.roa (hash: Y6yxr1t2ucquhWthqdIZlHIrK+C1q9ZqzNpWy5p7+84=) 4: 3133382e39342e382e302f32322d3332203d3e203238333630.roa (hash: qVFu16WURJiIjC5/CAUBfP8XkesupOfzx1EfYvhtmoU=) 5: 00AA5B8577C0697C844375D4EF4400A37FA7FA18.crl (hash: nOvgBUf2Bit9E6YV/t24U+UjAaqcE8qAPePU2DVymwM=) 6: 3138392e37362e3230382e302f32302d3332203d3e203238333630.roa (hash: EcLvYJ5xXNXY5gIzb1pkz+/2vmLJCwdKtVpNSXjcukQ=) 7: 3138392e37362e3232342e302f32302d3332203d3e203238333630.roa (hash: R1Zal9MMCa3HpUf3nNLECiokSOkKFmvMggF0dTHKrfU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/00AA5B8577C0697C844375D4EF4400A37FA7FA18.crl rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/00AA5B8577C0697C844375D4EF4400A37FA7FA18.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00AA5B8577C0697C844375D4EF4400A37FA7FA18.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 06:16:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:87:0f:d3:b3:10:33:eb:62:e1:bd:92:aa:fb:03:bd:f6:92:17:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00AA5B8577C0697C844375D4EF4400A37FA7FA18 Validity Not Before: Oct 20 04:32:02 2025 GMT Not After : Oct 21 06:16:02 2025 GMT Subject: CN=D985D2C058409C1712F9D801F06AE01E9AAC35E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:28:2c:ad:db:27:08:9e:f4:2a:0d:60:cc:85: c8:84:80:3e:56:91:bf:ab:1e:81:48:ed:a0:b3:ba: d8:c8:58:5e:35:2c:0e:d4:08:15:4d:ee:33:85:24: 00:a9:49:5e:3e:fc:ba:68:3c:30:df:16:cc:be:d4: cc:f0:b5:e8:8c:2e:00:e8:58:27:b0:3d:ac:f3:fc: 9a:9a:0f:cf:65:f9:e0:70:e5:f4:f0:3d:cc:fe:23: e0:be:8e:69:06:17:3a:db:e7:50:01:83:26:00:3f: ed:e2:e3:17:f8:37:fe:fa:c3:1b:fc:37:f8:7b:7a: 4d:8b:a4:b4:25:86:12:4d:59:b1:01:af:b2:22:56: d4:06:82:e2:9f:f0:7f:72:d3:71:7d:8c:b9:42:d9: 17:79:51:70:5d:3d:51:2c:56:30:05:99:35:17:9d: 0c:6a:71:20:58:f3:c2:7f:b2:f4:08:fd:e5:e6:e9: a7:05:5c:23:45:0a:e1:b0:33:0f:89:c2:8a:94:0d: 5d:95:25:88:47:6a:eb:a2:4a:0d:23:4a:7c:b4:0c: dc:95:bc:0a:ed:4d:f9:70:69:b5:06:ff:87:1e:10: af:82:07:8a:16:88:96:d7:b7:f2:eb:33:48:65:68: 03:9f:c0:b4:69:88:3f:b3:de:3d:98:e9:7a:61:45: d6:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:85:D2:C0:58:40:9C:17:12:F9:D8:01:F0:6A:E0:1E:9A:AC:35:E2 X509v3 Authority Key Identifier: keyid:00:AA:5B:85:77:C0:69:7C:84:43:75:D4:EF:44:00:A3:7F:A7:FA:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/00AA5B8577C0697C844375D4EF4400A37FA7FA18.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00AA5B8577C0697C844375D4EF4400A37FA7FA18.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/00AA5B8577C0697C844375D4EF4400A37FA7FA18.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:27:ea:01:62:17:13:7d:d8:dd:c3:1a:e4:cf:d4:b6:c8:41: b3:d1:09:d3:95:be:b1:2f:19:a9:43:d8:52:12:09:c5:45:b5: b6:0a:d7:db:74:c7:2d:69:76:35:f8:f5:8d:75:5a:f2:a3:86: 0b:9e:99:41:0f:50:01:79:68:fe:5f:54:02:58:e7:4f:af:18: fc:49:4d:67:1e:95:2c:4a:99:b5:bc:48:d3:aa:82:14:3c:92: ae:c0:cf:63:79:bb:9a:85:e0:0a:0f:1f:a3:94:4c:90:89:e7: 03:c8:d8:86:31:8e:79:fe:a1:94:69:b0:3e:da:39:da:bf:7c: 58:60:ff:99:f9:be:b2:b7:f3:0c:47:fe:b8:54:20:18:e9:7f: 4a:55:78:5b:14:c9:b3:be:42:32:26:03:01:6c:0b:14:bb:61: d0:11:fc:98:26:c3:7f:aa:a9:f1:d0:77:0c:03:1c:fc:50:95: e8:f8:30:1c:55:c9:ce:8e:f3:74:dd:c0:a0:0e:72:cc:11:46: 79:24:48:5b:4f:ff:ff:a4:f9:9f:99:c3:24:37:6d:a9:91:23: 7c:56:ad:f5:00:b0:58:cb:2c:3a:5b:7d:58:2a:a4:d6:a0:21: 1f:6b:e0:d2:e6:25:f0:40:6d:5c:81:87:22:d7:8b:e9:ed:51: d8:bd:2c:d6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUIYcP07MQM+ti4b2SqvsDvfaSF1YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDBBQTVCODU3N0MwNjk3Qzg0NDM3NUQ0RUY0NDAwQTM3 RkE3RkExODAeFw0yNTEwMjAwNDMyMDJaFw0yNTEwMjEwNjE2MDJaMDMxMTAvBgNV BAMTKEQ5ODVEMkMwNTg0MDlDMTcxMkY5RDgwMUYwNkFFMDFFOUFBQzM1RTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwKCyt2ycInvQqDWDMhciEgD5W kb+rHoFI7aCzutjIWF41LA7UCBVN7jOFJACpSV4+/LpoPDDfFsy+1MzwteiMLgDo WCewPazz/JqaD89l+eBw5fTwPcz+I+C+jmkGFzrb51ABgyYAP+3i4xf4N/76wxv8 N/h7ek2LpLQlhhJNWbEBr7IiVtQGguKf8H9y03F9jLlC2Rd5UXBdPVEsVjAFmTUX nQxqcSBY88J/svQI/eXm6acFXCNFCuGwMw+JwoqUDV2VJYhHauuiSg0jSny0DNyV vArtTflwabUG/4ceEK+CB4oWiJbXt/LrM0hlaAOfwLRpiD+z3j2Y6XphRdZ3AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU2YXSwFhAnBcS+dgB8GrgHpqsNeIwHwYDVR0j BBgwFoAUAKpbhXfAaXyEQ3XU70QAo3+n+hgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNEJoYXpqOGJGeHZwN1A2UGNaZ1lGcW0zYlB4RXJ5YXgzUTlSYURRTkoz UDIvMC8wMEFBNUI4NTc3QzA2OTdDODQ0Mzc1RDRFRjQ0MDBBMzdGQTdGQTE4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAwQUE1Qjg1NzdDMDY5N0M4 NDQzNzVENEVGNDQwMEEzN0ZBN0ZBMTguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NEJoYXpqOGJGeHZwN1A2UGNaZ1lGcW0zYlB4RXJ5YXgzUTlSYURRTkozUDIvMC8w MEFBNUI4NTc3QzA2OTdDODQ0Mzc1RDRFRjQ0MDBBMzdGQTdGQTE4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcCfqAWIXE33Y3cMa5M/UtshBs9EJ05W+sS8ZqUPYUhIJxUW1tgrX23THLWl2 Nfj1jXVa8qOGC56ZQQ9QAXlo/l9UAljnT68Y/ElNZx6VLEqZtbxI06qCFDySrsDP Y3m7moXgCg8fo5RMkInnA8jYhjGOef6hlGmwPto52r98WGD/mfm+srfzDEf+uFQg GOl/SlV4WxTJs75CMiYDAWwLFLth0BH8mCbDf6qp8dB3DAMc/FCV6PgwHFXJzo7z dN3AoA5yzBFGeSRIW0///6T5n5nDJDdtqZEjfFat9QCwWMssOlt9WCqk1qAhH2vg 0uYl8EBtXIGHIteL6e1R2L0s1g== -----END CERTIFICATE-----Generated at Mon Oct 20 14:27:01 2025 by rpki-client