$ rpki-client -vvf rpki-repo.registro.br/repo/D1duEuF8eLBtiWqeB6zFnvGjJs7NvtBnu37borKVzjdH/0/AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.mft File: AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.mft (raw, json) Hash identifier: PvOg2DbBo4e9Ovei2AmdePOr/aTwPiLEmwFNCdTO4tU= Subject key identifier: B2:18:61:F7:34:91:B5:CD:28:A5:F5:F1:C1:4F:A7:0C:9D:7B:78:E4 Authority key identifier: AA:07:8E:8F:5E:A4:EF:EF:8E:70:03:E0:A9:B2:11:65:B5:AB:81:D4 Certificate issuer: /CN=AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4 Certificate serial: 65F9082C8AB0409759AB5D9A260583D8AF510A2B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.cer Subject info access: rsync://rpki-repo.registro.br/repo/D1duEuF8eLBtiWqeB6zFnvGjJs7NvtBnu37borKVzjdH/0/AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.mft Manifest number: 0228 Signing time: Sat 23 Aug 2025 05:30:54 +0000 Manifest this update: Sat 23 Aug 2025 05:25:54 +0000 Manifest next update: Sun 24 Aug 2025 05:51:54 +0000 Files and hashes: 1: 323830343a343131383a3a2f33322d3634203d3e20323636303033.roa (hash: 77PgPUhXMiY+0pD6ukxK9PeS+HQTTgL9ZfKKPVRrA3Y=) 2: 3138312e3139312e39362e302f32322d3332203d3e20323636303033.roa (hash: d8gu9ptBCMqS7eW9x/zK+JYDxuuJS0KDEGnCGJEMVwg=) 3: AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.crl (hash: I4cy5r/RgP+u7+SEaDfX/ML+TaZYsG/xpqQYcVJ8M2E=) 4: 34352e3137332e36342e302f32322d3330203d3e20323636303033.roa (hash: UvOi/ZT1aicBgWtPWrJpXA3ochSvMg4rQ0JcREvXNQU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/D1duEuF8eLBtiWqeB6zFnvGjJs7NvtBnu37borKVzjdH/0/AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.crl rsync://rpki-repo.registro.br/repo/D1duEuF8eLBtiWqeB6zFnvGjJs7NvtBnu37borKVzjdH/0/AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Aug 2025 05:51:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:f9:08:2c:8a:b0:40:97:59:ab:5d:9a:26:05:83:d8:af:51:0a:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4 Validity Not Before: Aug 23 05:25:54 2025 GMT Not After : Aug 24 05:51:54 2025 GMT Subject: CN=B21861F73491B5CD28A5F5F1C14FA70C9D7B78E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:48:65:22:85:f1:bd:3d:61:94:b2:f0:f3:a7: 6a:6d:54:35:70:c5:cd:59:26:02:9f:4e:21:e0:10: 58:c1:b0:b7:da:8b:80:25:8f:a4:ae:96:2a:1b:78: 2d:6d:57:71:81:9e:7b:fe:61:08:d0:a2:f5:93:39: 32:c8:79:4b:63:09:56:2c:af:08:5a:7d:78:ae:c1: 75:3d:40:26:9e:85:19:4a:47:86:02:6e:9b:55:15: d1:20:0d:2a:9e:a4:5a:ab:40:cd:ab:c1:83:83:54: bc:88:df:b7:36:e6:8e:e0:98:cb:3b:7f:7d:15:d9: dc:63:39:3e:0a:7a:28:de:99:27:7a:dc:d3:c9:26: 87:fe:37:d6:16:04:61:12:d3:d7:00:4a:c4:2d:4d: 5e:87:91:2b:51:8e:97:f7:db:41:1c:14:10:f4:82: 1f:e4:3f:12:63:fd:5b:df:48:1e:b3:9c:e0:34:f2: 9d:a9:c7:16:6b:be:c5:f9:72:21:b7:85:8a:5a:f0: 69:20:42:31:56:fa:6e:5c:96:61:c8:93:bf:39:55: 00:27:08:bd:11:1b:22:ed:7f:15:9e:10:b6:5b:b0: 91:3b:ee:2f:18:d3:05:c8:58:89:e9:07:ca:ea:33: 2c:de:f4:9f:ea:06:89:a1:a3:0b:1e:78:91:31:b2: 27:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:18:61:F7:34:91:B5:CD:28:A5:F5:F1:C1:4F:A7:0C:9D:7B:78:E4 X509v3 Authority Key Identifier: keyid:AA:07:8E:8F:5E:A4:EF:EF:8E:70:03:E0:A9:B2:11:65:B5:AB:81:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/D1duEuF8eLBtiWqeB6zFnvGjJs7NvtBnu37borKVzjdH/0/AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/D1duEuF8eLBtiWqeB6zFnvGjJs7NvtBnu37borKVzjdH/0/AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:e9:f2:e1:ad:ed:96:30:7e:86:f1:f4:94:9a:6c:a4:60:67: c0:27:6b:58:61:ff:73:e2:f3:10:2f:3a:79:81:a6:b3:7c:bd: e7:4f:13:45:5f:db:e4:d1:a7:74:0a:07:42:ca:6e:e5:70:ca: 83:82:07:b1:e8:14:54:0c:6d:57:5b:5a:91:ca:0f:d3:6c:5b: 45:f7:13:64:f7:37:b9:02:54:f3:eb:00:e7:14:19:0a:f6:43: 4d:8c:eb:8d:81:a3:8c:1f:19:6e:e0:5a:e1:eb:60:7e:09:fa: 0d:82:db:16:94:12:5a:d7:6e:5a:1f:d9:05:0a:a3:c7:26:61: f6:90:08:20:5e:d0:d4:16:92:43:bb:29:bb:83:00:61:08:d1: 4a:4f:d9:33:18:01:b2:50:e2:ef:c9:78:2d:7f:cf:96:01:c1: 98:c6:d5:01:5d:4a:f8:75:2d:c3:27:e9:75:0a:aa:63:31:93: 87:0e:49:99:83:25:9d:09:ae:1c:ee:0e:77:b2:7c:0b:3c:67: 1e:92:be:8a:5c:e2:65:db:b1:19:7e:4a:50:0b:a7:ee:b9:98: d4:64:b9:d4:b8:71:fa:8a:f6:0f:cc:e5:b2:35:06:46:b7:61: 2f:d5:8b:7a:73:f0:70:e7:e1:44:db:17:9a:0f:7e:90:2f:76: 4f:cd:42:f0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUZfkILIqwQJdZq12aJgWD2K9RCiswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUEwNzhFOEY1RUE0RUZFRjhFNzAwM0UwQTlCMjExNjVC NUFCODFENDAeFw0yNTA4MjMwNTI1NTRaFw0yNTA4MjQwNTUxNTRaMDMxMTAvBgNV BAMTKEIyMTg2MUY3MzQ5MUI1Q0QyOEE1RjVGMUMxNEZBNzBDOUQ3Qjc4RTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdSGUihfG9PWGUsvDzp2ptVDVw xc1ZJgKfTiHgEFjBsLfai4Alj6SuliobeC1tV3GBnnv+YQjQovWTOTLIeUtjCVYs rwhafXiuwXU9QCaehRlKR4YCbptVFdEgDSqepFqrQM2rwYODVLyI37c25o7gmMs7 f30V2dxjOT4KeijemSd63NPJJof+N9YWBGES09cASsQtTV6HkStRjpf320EcFBD0 gh/kPxJj/VvfSB6znOA08p2pxxZrvsX5ciG3hYpa8GkgQjFW+m5clmHIk785VQAn CL0RGyLtfxWeELZbsJE77i8Y0wXIWInpB8rqMyze9J/qBomhowseeJExsicvAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUshhh9zSRtc0opfXxwU+nDJ17eOQwHwYDVR0j BBgwFoAUqgeOj16k7++OcAPgqbIRZbWrgdQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRDFkdUV1RjhlTEJ0aVdxZUI2ekZudkdqSnM3TnZ0Qm51Mzdib3JLVnpq ZEgvMC9BQTA3OEU4RjVFQTRFRkVGOEU3MDAzRTBBOUIyMTE2NUI1QUI4MUQ0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FBMDc4RThGNUVBNEVGRUY4 RTcwMDNFMEE5QjIxMTY1QjVBQjgxRDQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RDFkdUV1RjhlTEJ0aVdxZUI2ekZudkdqSnM3TnZ0Qm51Mzdib3JLVnpqZEgvMC9B QTA3OEU4RjVFQTRFRkVGOEU3MDAzRTBBOUIyMTE2NUI1QUI4MUQ0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsuny4a3tljB+hvH0lJpspGBnwCdrWGH/c+LzEC86eYGms3y9508TRV/b5NGn dAoHQspu5XDKg4IHsegUVAxtV1takcoP02xbRfcTZPc3uQJU8+sA5xQZCvZDTYzr jYGjjB8ZbuBa4etgfgn6DYLbFpQSWtduWh/ZBQqjxyZh9pAIIF7Q1BaSQ7spu4MA YQjRSk/ZMxgBslDi78l4LX/PlgHBmMbVAV1K+HUtwyfpdQqqYzGThw5JmYMlnQmu HO4Od7J8CzxnHpK+ilziZduxGX5KUAun7rmY1GS51Lhx+or2D8zlsjUGRrdhL9WL enPwcOfhRNsXmg9+kC92T81C8A== -----END CERTIFICATE-----Generated at Sat Aug 23 20:27:41 2025 by rpki-client