$ rpki-client -vvf rpki-repo.registro.br/repo/Bi57bpt2KLcrKhwYFofUJbqgi26q2DqdjuJVRWfXdZP7/0/A0DAE8CDD320603218B6BE37D484CD0B492A9E94.mft File: A0DAE8CDD320603218B6BE37D484CD0B492A9E94.mft (raw, json) Hash identifier: I17a0ruRUTcNlb7TR9+Y5i3eJdJMxiHgyyp9UPPYVg0= Subject key identifier: 89:D4:71:3F:40:00:E6:15:1B:73:FA:A6:1C:AA:10:96:29:22:91:DD Authority key identifier: A0:DA:E8:CD:D3:20:60:32:18:B6:BE:37:D4:84:CD:0B:49:2A:9E:94 Certificate issuer: /CN=A0DAE8CDD320603218B6BE37D484CD0B492A9E94 Certificate serial: 29EB92F18C755C52447F06E2A0E4BDEA9C336A75 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0DAE8CDD320603218B6BE37D484CD0B492A9E94.cer Subject info access: rsync://rpki-repo.registro.br/repo/Bi57bpt2KLcrKhwYFofUJbqgi26q2DqdjuJVRWfXdZP7/0/A0DAE8CDD320603218B6BE37D484CD0B492A9E94.mft Manifest number: 01AA Signing time: Mon 20 Oct 2025 22:58:53 +0000 Manifest this update: Mon 20 Oct 2025 22:53:53 +0000 Manifest next update: Wed 22 Oct 2025 01:55:53 +0000 Files and hashes: 1: 3137302e3234342e33322e302f32322d3234203d3e20323636343937.roa (hash: aXlm/iLG5GKfZ+VJkmMbaW8vhq/1dZvX0D+lNdMkytY=) 2: A0DAE8CDD320603218B6BE37D484CD0B492A9E94.crl (hash: 93jiJuHohPt8rl52AH/dGMICcs9ediv/rDZwyGt2S6c=) 3: 323830343a333862383a3a2f33322d3430203d3e20323636343937.roa (hash: mq6S/JPt1+hw5Ings39eywRIy1YWZvgcNkhzCec0iKo=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Bi57bpt2KLcrKhwYFofUJbqgi26q2DqdjuJVRWfXdZP7/0/A0DAE8CDD320603218B6BE37D484CD0B492A9E94.crl rsync://rpki-repo.registro.br/repo/Bi57bpt2KLcrKhwYFofUJbqgi26q2DqdjuJVRWfXdZP7/0/A0DAE8CDD320603218B6BE37D484CD0B492A9E94.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0DAE8CDD320603218B6BE37D484CD0B492A9E94.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 22 Oct 2025 01:55:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:eb:92:f1:8c:75:5c:52:44:7f:06:e2:a0:e4:bd:ea:9c:33:6a:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A0DAE8CDD320603218B6BE37D484CD0B492A9E94 Validity Not Before: Oct 20 22:53:53 2025 GMT Not After : Oct 22 01:55:53 2025 GMT Subject: CN=89D4713F4000E6151B73FAA61CAA1096292291DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:4c:f7:07:26:a1:a9:78:00:1d:8f:4f:d1:83: 57:ae:01:03:a3:b6:92:6c:3d:ff:7c:95:c3:1c:3c: 06:7e:9d:ab:8e:b1:8e:92:1b:f8:de:ff:5c:a4:d9: 8d:ac:56:c4:16:ba:5f:e8:59:97:02:8e:e6:64:39: 5c:40:59:a9:3b:62:df:8c:35:82:e1:19:b3:f2:33: 5e:e3:3c:05:c9:78:a0:2a:59:72:21:59:bd:02:41: 77:52:32:e4:d8:e7:d2:c7:6b:56:65:6b:5b:dc:ae: bb:55:a1:e0:5f:b4:3f:26:3a:7d:8e:e6:c5:43:66: de:5e:d7:fc:89:d6:39:94:3f:12:ce:f0:74:29:fe: 08:f5:42:c8:5e:ee:cc:ca:83:87:67:67:45:b7:dd: e5:fc:2c:53:39:f9:db:e5:8d:21:65:a7:1b:93:a2: 03:f2:ed:9f:42:e5:7c:09:f6:48:db:56:54:9f:4f: 75:ba:7f:55:79:68:da:f1:53:95:4d:89:b1:cb:09: a6:06:1d:be:a3:90:ba:16:35:65:58:fa:b9:39:92: 6e:59:9c:3d:2c:87:a9:a7:b3:7b:0e:d4:af:a8:47: d9:54:a8:1b:90:3e:04:d4:f9:7f:d3:7b:e4:b1:e9: 21:96:71:a5:3a:fd:1b:6e:ab:51:14:bc:8e:c5:1c: f3:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:D4:71:3F:40:00:E6:15:1B:73:FA:A6:1C:AA:10:96:29:22:91:DD X509v3 Authority Key Identifier: keyid:A0:DA:E8:CD:D3:20:60:32:18:B6:BE:37:D4:84:CD:0B:49:2A:9E:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Bi57bpt2KLcrKhwYFofUJbqgi26q2DqdjuJVRWfXdZP7/0/A0DAE8CDD320603218B6BE37D484CD0B492A9E94.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0DAE8CDD320603218B6BE37D484CD0B492A9E94.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bi57bpt2KLcrKhwYFofUJbqgi26q2DqdjuJVRWfXdZP7/0/A0DAE8CDD320603218B6BE37D484CD0B492A9E94.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:4b:51:da:39:52:f1:be:87:d5:fc:64:69:9a:8b:b6:27:99: 01:a9:c6:57:16:a7:18:4d:ef:a0:47:a0:57:7a:98:a9:92:f8: 07:3e:8e:0e:6d:63:d1:a9:56:36:be:86:c5:54:6e:a4:71:17: 2a:e0:4f:db:c6:71:29:84:5c:a7:9c:d6:2c:25:d5:b0:47:2c: f0:3a:fc:87:ee:67:06:e0:4d:2c:f6:c1:47:ed:24:ff:d2:1e: 10:93:a0:ec:cf:8b:4e:84:78:98:78:b3:be:b4:e4:8f:05:9a: b1:ef:f0:a1:63:9a:2d:f1:66:fa:86:61:3b:e4:84:4c:ef:86: e7:cb:c2:3d:53:c5:a5:1a:bd:13:16:a1:2e:6b:cf:67:d6:d2: dc:17:d1:a2:fb:94:2e:e4:d4:a7:27:b8:05:91:3d:10:e2:7f: 6f:8a:61:c3:33:18:c3:78:d1:50:d3:8c:9e:b8:de:77:6e:58: 87:a6:b3:e7:bc:5c:5a:10:8a:a9:58:d6:3d:b7:2f:98:51:36: 96:00:84:1f:75:86:35:39:f8:bb:72:61:4a:d9:4f:77:e1:f0: 6f:57:02:5b:52:b8:66:c2:98:00:e3:ad:30:24:4d:84:18:35: 09:b6:b4:68:b9:7b:19:d0:34:86:a1:04:94:e1:ff:a7:1e:3a: ff:4e:7d:7c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUKeuS8Yx1XFJEfwbioOS96pwzanUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTBEQUU4Q0REMzIwNjAzMjE4QjZCRTM3RDQ4NENEMEI0 OTJBOUU5NDAeFw0yNTEwMjAyMjUzNTNaFw0yNTEwMjIwMTU1NTNaMDMxMTAvBgNV BAMTKDg5RDQ3MTNGNDAwMEU2MTUxQjczRkFBNjFDQUExMDk2MjkyMjkxREQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSTPcHJqGpeAAdj0/Rg1euAQOj tpJsPf98lcMcPAZ+nauOsY6SG/je/1yk2Y2sVsQWul/oWZcCjuZkOVxAWak7Yt+M NYLhGbPyM17jPAXJeKAqWXIhWb0CQXdSMuTY59LHa1Zla1vcrrtVoeBftD8mOn2O 5sVDZt5e1/yJ1jmUPxLO8HQp/gj1Qshe7szKg4dnZ0W33eX8LFM5+dvljSFlpxuT ogPy7Z9C5XwJ9kjbVlSfT3W6f1V5aNrxU5VNibHLCaYGHb6jkLoWNWVY+rk5km5Z nD0sh6mns3sO1K+oR9lUqBuQPgTU+X/Te+Sx6SGWcaU6/Rtuq1EUvI7FHPMnAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUidRxP0AA5hUbc/qmHKoQlikikd0wHwYDVR0j BBgwFoAUoNrozdMgYDIYtr431ITNC0kqnpQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQmk1N2JwdDJLTGNyS2h3WUZvZlVKYnFnaTI2cTJEcWRqdUpWUldmWGRa UDcvMC9BMERBRThDREQzMjA2MDMyMThCNkJFMzdENDg0Q0QwQjQ5MkE5RTk0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0EwREFFOENERDMyMDYwMzIx OEI2QkUzN0Q0ODRDRDBCNDkyQTlFOTQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Qmk1N2JwdDJLTGNyS2h3WUZvZlVKYnFnaTI2cTJEcWRqdUpWUldmWGRaUDcvMC9B MERBRThDREQzMjA2MDMyMThCNkJFMzdENDg0Q0QwQjQ5MkE5RTk0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEASEtR2jlS8b6H1fxkaZqLtieZAanGVxanGE3voEegV3qYqZL4Bz6ODm1j0alW Nr6GxVRupHEXKuBP28ZxKYRcp5zWLCXVsEcs8Dr8h+5nBuBNLPbBR+0k/9IeEJOg 7M+LToR4mHizvrTkjwWase/woWOaLfFm+oZhO+SETO+G58vCPVPFpRq9ExahLmvP Z9bS3BfRovuULuTUpye4BZE9EOJ/b4phwzMYw3jRUNOMnrjed25Yh6az57xcWhCK qVjWPbcvmFE2lgCEH3WGNTn4u3JhStlPd+Hwb1cCW1K4ZsKYAOOtMCRNhBg1Cba0 aLl7GdA0hqEElOH/px46/059fA== -----END CERTIFICATE-----Generated at Tue Oct 21 04:53:27 2025 by rpki-client