$ rpki-client -vvf rpki-repo.registro.br/repo/4pvH4MHZJZas4zHEgK2hMoy5gE5iQjdPTDp4EF96vecg/0/AA72ED85A93B5AABE6C7DF844AD99D16A90E14C8.mft File: AA72ED85A93B5AABE6C7DF844AD99D16A90E14C8.mft (raw, json) Hash identifier: DFoknMgGIGKSE88xk55k0PTATewdzf8URTTTYfzpXiQ= Subject key identifier: 04:94:8A:36:C2:65:58:0F:BD:59:4D:8E:6C:86:E3:E2:85:F6:3C:C8 Authority key identifier: AA:72:ED:85:A9:3B:5A:AB:E6:C7:DF:84:4A:D9:9D:16:A9:0E:14:C8 Certificate issuer: /CN=AA72ED85A93B5AABE6C7DF844AD99D16A90E14C8 Certificate serial: 1269B79D0FCC9113859AD0AB0BC2600D5D9C4E70 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA72ED85A93B5AABE6C7DF844AD99D16A90E14C8.cer Subject info access: rsync://rpki-repo.registro.br/repo/4pvH4MHZJZas4zHEgK2hMoy5gE5iQjdPTDp4EF96vecg/0/AA72ED85A93B5AABE6C7DF844AD99D16A90E14C8.mft Manifest number: 3B Signing time: Mon 20 Oct 2025 13:29:52 +0000 Manifest this update: Mon 20 Oct 2025 13:24:52 +0000 Manifest next update: Tue 21 Oct 2025 14:26:52 +0000 Files and hashes: 1: AA72ED85A93B5AABE6C7DF844AD99D16A90E14C8.crl (hash: TSn7vN7L+VpUXFhPV0/b1PcS3CocaOXJXvvRxsWPtGE=) 2: 323830343a393539303a3a2f33322d3332203d3e20323632323837.roa (hash: cJEyc9GyTP/W9tTA5SfKcOBqQXJyoAW8IVefVuwCDF0=) 3: 323830343a393539303a3a2f33322d3332203d3e20323734353330.roa (hash: ud8H+LPpJrRZjxw5rTInN+2D3gurLBaqifOfHqRbUko=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4pvH4MHZJZas4zHEgK2hMoy5gE5iQjdPTDp4EF96vecg/0/AA72ED85A93B5AABE6C7DF844AD99D16A90E14C8.crl rsync://rpki-repo.registro.br/repo/4pvH4MHZJZas4zHEgK2hMoy5gE5iQjdPTDp4EF96vecg/0/AA72ED85A93B5AABE6C7DF844AD99D16A90E14C8.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA72ED85A93B5AABE6C7DF844AD99D16A90E14C8.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 14:26:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:69:b7:9d:0f:cc:91:13:85:9a:d0:ab:0b:c2:60:0d:5d:9c:4e:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA72ED85A93B5AABE6C7DF844AD99D16A90E14C8 Validity Not Before: Oct 20 13:24:52 2025 GMT Not After : Oct 21 14:26:52 2025 GMT Subject: CN=04948A36C265580FBD594D8E6C86E3E285F63CC8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:4d:31:de:ac:a3:23:ca:7a:b2:e2:3f:83:03: 8a:ac:f8:5a:ea:48:8c:35:ad:a7:2d:22:1b:c1:df: 9a:bd:13:78:7c:d4:44:a7:06:f4:c3:32:11:d8:73: ad:6d:70:bb:ce:81:e4:81:ac:45:e3:95:ca:dc:29: 9e:9d:a1:08:89:a2:00:61:ed:30:90:7e:47:35:49: 9c:21:04:ec:d4:eb:5e:5f:b1:6c:53:37:de:0f:a3: 0b:56:51:a0:28:e1:c5:4a:a1:0a:f9:3c:e7:bc:d2: de:28:7f:db:aa:38:96:37:bb:0b:6a:e9:79:94:85: 2d:2c:47:69:4a:f1:d9:3c:68:8b:ba:c5:e7:d5:9d: 23:e1:df:9b:c1:c6:ef:82:40:7c:85:2e:ff:0f:32: 54:e7:a3:62:1e:1d:5a:1a:58:8b:11:2c:47:4c:90: ba:a8:1a:a1:ec:59:39:38:ae:eb:bc:c4:ca:09:06: 4a:b5:b3:16:19:f7:ae:56:81:81:b9:20:e6:d2:d3: a3:ed:93:29:3a:ac:d9:79:64:43:77:08:15:c9:5d: 38:07:4b:ee:46:a9:26:61:33:96:01:64:82:44:9b: 89:88:cb:45:14:3a:1a:b8:13:ff:d7:e0:9d:f5:bb: 95:e3:5a:80:ae:0e:1a:2b:ad:4b:12:17:4d:ce:3f: e9:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:94:8A:36:C2:65:58:0F:BD:59:4D:8E:6C:86:E3:E2:85:F6:3C:C8 X509v3 Authority Key Identifier: keyid:AA:72:ED:85:A9:3B:5A:AB:E6:C7:DF:84:4A:D9:9D:16:A9:0E:14:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4pvH4MHZJZas4zHEgK2hMoy5gE5iQjdPTDp4EF96vecg/0/AA72ED85A93B5AABE6C7DF844AD99D16A90E14C8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA72ED85A93B5AABE6C7DF844AD99D16A90E14C8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4pvH4MHZJZas4zHEgK2hMoy5gE5iQjdPTDp4EF96vecg/0/AA72ED85A93B5AABE6C7DF844AD99D16A90E14C8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:be:28:7b:da:b3:df:db:8b:d2:e3:a7:5c:4c:13:5b:f3:ec: 9f:fc:9d:5d:c9:e0:bb:d8:1e:f2:90:46:9a:8e:29:f1:e6:29: 57:e0:f5:90:a8:b6:c9:57:31:52:ec:3a:d0:63:09:36:d4:47: 60:30:41:b5:b1:54:44:9d:4d:b4:ff:16:5e:bd:ca:b0:7a:21: 86:a8:49:6b:41:5e:3a:c9:d2:6f:98:9b:18:fa:24:f5:be:5f: 28:23:5f:35:7f:62:ec:84:a7:57:4d:f9:3a:f0:ed:4f:b7:fd: d7:23:bb:58:fe:e3:66:31:50:47:ee:a7:0d:a5:86:18:63:9e: 7a:5b:a4:11:8d:09:24:c7:f8:d6:aa:ba:9c:57:08:89:82:c8: e4:44:41:b6:98:b6:09:3c:47:41:d7:b8:34:a3:aa:26:5a:d7: dd:43:f2:f5:2c:09:3b:64:77:14:15:1c:b2:b5:ae:b8:bd:60: 64:bb:cc:ad:90:c3:01:20:9a:6a:7b:dd:3b:43:bf:03:0b:86: 70:ba:6f:04:e7:31:9f:3e:dd:c7:d0:57:52:58:a0:69:8f:6e: 31:d3:e1:a1:9e:cc:da:36:02:0b:37:f5:3b:bc:e2:18:d3:8b: 06:3e:ff:c2:70:26:e2:90:21:06:b9:6c:8b:67:e4:87:2d:4d: 82:d7:44:63 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUEmm3nQ/MkROFmtCrC8JgDV2cTnAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUE3MkVEODVBOTNCNUFBQkU2QzdERjg0NEFEOTlEMTZB OTBFMTRDODAeFw0yNTEwMjAxMzI0NTJaFw0yNTEwMjExNDI2NTJaMDMxMTAvBgNV BAMTKDA0OTQ4QTM2QzI2NTU4MEZCRDU5NEQ4RTZDODZFM0UyODVGNjNDQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRTTHerKMjynqy4j+DA4qs+Frq SIw1ractIhvB35q9E3h81ESnBvTDMhHYc61tcLvOgeSBrEXjlcrcKZ6doQiJogBh 7TCQfkc1SZwhBOzU615fsWxTN94PowtWUaAo4cVKoQr5POe80t4of9uqOJY3uwtq 6XmUhS0sR2lK8dk8aIu6xefVnSPh35vBxu+CQHyFLv8PMlTno2IeHVoaWIsRLEdM kLqoGqHsWTk4ruu8xMoJBkq1sxYZ965WgYG5IObS06Ptkyk6rNl5ZEN3CBXJXTgH S+5GqSZhM5YBZIJEm4mIy0UUOhq4E//X4J31u5XjWoCuDhorrUsSF03OP+kFAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUBJSKNsJlWA+9WU2ObIbj4oX2PMgwHwYDVR0j BBgwFoAUqnLthak7Wqvmx9+EStmdFqkOFMgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNHB2SDRNSFpKWmFzNHpIRWdLMmhNb3k1Z0U1aVFqZFBURHA0RUY5NnZl Y2cvMC9BQTcyRUQ4NUE5M0I1QUFCRTZDN0RGODQ0QUQ5OUQxNkE5MEUxNEM4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FBNzJFRDg1QTkzQjVBQUJF NkM3REY4NDRBRDk5RDE2QTkwRTE0QzguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NHB2SDRNSFpKWmFzNHpIRWdLMmhNb3k1Z0U1aVFqZFBURHA0RUY5NnZlY2cvMC9B QTcyRUQ4NUE5M0I1QUFCRTZDN0RGODQ0QUQ5OUQxNkE5MEUxNEM4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQb4oe9qz39uL0uOnXEwTW/Psn/ydXcngu9ge8pBGmo4p8eYpV+D1kKi2yVcx Uuw60GMJNtRHYDBBtbFURJ1NtP8WXr3KsHohhqhJa0FeOsnSb5ibGPok9b5fKCNf NX9i7ISnV035OvDtT7f91yO7WP7jZjFQR+6nDaWGGGOeelukEY0JJMf41qq6nFcI iYLI5ERBtpi2CTxHQde4NKOqJlrX3UPy9SwJO2R3FBUcsrWuuL1gZLvMrZDDASCa anvdO0O/AwuGcLpvBOcxnz7dx9BXUligaY9uMdPhoZ7M2jYCCzf1O7ziGNOLBj7/ wnAm4pAhBrlsi2fkhy1NgtdEYw== -----END CERTIFICATE-----Generated at Mon Oct 20 20:26:03 2025 by rpki-client