$ rpki-client -vvf rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.mft File: AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.mft (raw, json) Hash identifier: uRxWloCbKL7iKghqmhWWcVrm1FXEG0nynrD01Rx/4Js= Subject key identifier: A3:B9:98:70:23:B9:F9:2A:00:77:29:46:0F:50:F7:D8:FB:BE:00:8B Authority key identifier: AA:2B:D3:35:20:EC:0C:79:CF:C9:9C:40:27:FF:2E:AF:60:62:5F:FA Certificate issuer: /CN=AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA Certificate serial: 2AD2817D7C564644031A06F11B4B2035B43A8752 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.cer Subject info access: rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.mft Manifest number: 0198 Signing time: Mon 20 Oct 2025 09:48:18 +0000 Manifest this update: Mon 20 Oct 2025 09:43:18 +0000 Manifest next update: Tue 21 Oct 2025 11:52:18 +0000 Files and hashes: 1: 323830343a353763303a3a2f33322d3438203d3e20323638303834.roa (hash: KBArWlV5vwMsvaplxezo5vYP7odX82xOazE7IspsFqE=) 2: 34352e3136382e3234342e302f32322d3234203d3e20323638303834.roa (hash: MUps5dYJYbgZlLgJ9zMzZggPufSzKqjyIWh5+12TXKE=) 3: AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.crl (hash: 2HwcSbVjTfrWc5toXE3SGF4pQy/cWYhSppa00JJ4Wo8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.crl rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 11:52:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:d2:81:7d:7c:56:46:44:03:1a:06:f1:1b:4b:20:35:b4:3a:87:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA Validity Not Before: Oct 20 09:43:18 2025 GMT Not After : Oct 21 11:52:18 2025 GMT Subject: CN=A3B9987023B9F92A007729460F50F7D8FBBE008B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:14:ae:02:ff:b1:97:36:2f:1f:3e:31:c7:f1: 97:f8:26:55:9f:c2:72:31:0e:99:9b:e4:c6:cd:b2: af:60:6e:9f:16:da:cc:b4:ca:32:41:8e:7e:48:22: 89:29:43:26:db:7d:02:5f:33:1a:a6:fa:94:e8:53: f2:06:cb:36:f7:7a:2b:3b:04:5e:c2:52:5a:67:fd: 0d:57:a4:be:17:56:5e:e4:a1:2f:f4:df:1e:7a:bb: 66:9d:c3:94:e9:dd:3a:09:2f:90:68:06:9b:a4:e4: 8a:81:6d:18:2c:df:9b:e0:08:f6:20:cb:bc:7b:30: c1:c9:73:96:a2:ee:0b:23:90:cc:d1:fe:50:f3:f0: d6:cd:a2:22:b8:4e:33:76:84:56:e8:24:67:90:f0: 0b:ec:cc:8f:2c:70:68:0b:71:c8:42:8a:66:5d:47: 30:b1:73:a5:1e:98:5a:a3:95:25:b4:5c:a7:f7:6e: c6:bb:80:cc:ba:e9:ec:c8:ee:8f:59:39:92:65:a7: 3f:47:25:f3:d2:38:0c:54:39:49:70:77:42:49:79: dd:ef:ac:fc:88:a0:10:85:ea:d4:7b:8f:c1:96:1b: 7c:02:f3:8a:db:1f:75:5f:d5:13:71:63:31:42:2d: be:6d:42:81:5b:03:63:22:96:79:ed:23:55:3a:e6: ad:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:B9:98:70:23:B9:F9:2A:00:77:29:46:0F:50:F7:D8:FB:BE:00:8B X509v3 Authority Key Identifier: keyid:AA:2B:D3:35:20:EC:0C:79:CF:C9:9C:40:27:FF:2E:AF:60:62:5F:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:0f:c5:0d:0b:f9:21:a9:09:ac:6a:7e:07:73:80:3b:88:66: 05:b6:5e:da:af:1b:e1:c1:1a:dd:a2:c0:8d:f7:52:04:23:93: d1:84:f5:ad:9f:35:99:53:93:d5:37:35:79:45:3c:26:df:10: 3d:e6:2a:9a:b7:6d:fa:7c:66:d3:52:9e:5f:d9:0c:99:a4:a7: 99:fe:53:75:e8:64:26:bf:81:50:b1:76:16:47:0e:48:9d:f5: af:a1:57:d2:64:d3:5a:58:cb:6d:0a:69:5e:3b:b6:a6:02:79: d4:90:73:54:ef:dd:35:ed:21:03:8f:39:dd:a5:5d:55:cf:8f: 0e:01:66:0c:e7:07:06:5c:95:57:f5:5e:e5:13:2f:3b:2a:69: 12:34:fa:e0:a3:d1:0c:69:2b:6c:2c:01:d1:7d:c2:f5:36:6f: e0:aa:c6:bd:11:89:d0:de:b8:8f:60:35:39:ba:c4:31:29:fc: 1e:4b:b4:57:a4:c8:6b:6c:d3:6f:8a:df:c4:88:a4:11:29:5f: 0c:fa:a5:e7:18:6f:c7:6e:e8:8a:f4:98:c1:b9:e3:50:52:fa: 7d:aa:fa:69:8e:83:4a:7a:0e:74:13:10:28:c4:89:73:80:c6: e7:06:a9:2a:e5:f2:95:a0:3a:c4:71:13:86:ac:23:97:ad:04: 71:ab:b2:5f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUKtKBfXxWRkQDGgbxG0sgNbQ6h1IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUEyQkQzMzUyMEVDMEM3OUNGQzk5QzQwMjdGRjJFQUY2 MDYyNUZGQTAeFw0yNTEwMjAwOTQzMThaFw0yNTEwMjExMTUyMThaMDMxMTAvBgNV BAMTKEEzQjk5ODcwMjNCOUY5MkEwMDc3Mjk0NjBGNTBGN0Q4RkJCRTAwOEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9FK4C/7GXNi8fPjHH8Zf4JlWf wnIxDpmb5MbNsq9gbp8W2sy0yjJBjn5IIokpQybbfQJfMxqm+pToU/IGyzb3eis7 BF7CUlpn/Q1XpL4XVl7koS/03x56u2adw5Tp3ToJL5BoBpuk5IqBbRgs35vgCPYg y7x7MMHJc5ai7gsjkMzR/lDz8NbNoiK4TjN2hFboJGeQ8AvszI8scGgLcchCimZd RzCxc6UemFqjlSW0XKf3bsa7gMy66ezI7o9ZOZJlpz9HJfPSOAxUOUlwd0JJed3v rPyIoBCF6tR7j8GWG3wC84rbH3Vf1RNxYzFCLb5tQoFbA2MilnntI1U65q3RAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUo7mYcCO5+SoAdylGD1D32Pu+AIswHwYDVR0j BBgwFoAUqivTNSDsDHnPyZxAJ/8ur2BiX/owDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRzV3WG1UYmpHWGRDc2pQZzU4ZXphQ2k3Wk5XZ05aOTdpZzg5SHpERXBm VFYvMC9BQTJCRDMzNTIwRUMwQzc5Q0ZDOTlDNDAyN0ZGMkVBRjYwNjI1RkZBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FBMkJEMzM1MjBFQzBDNzlD RkM5OUM0MDI3RkYyRUFGNjA2MjVGRkEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RzV3WG1UYmpHWGRDc2pQZzU4ZXphQ2k3Wk5XZ05aOTdpZzg5SHpERXBmVFYvMC9B QTJCRDMzNTIwRUMwQzc5Q0ZDOTlDNDAyN0ZGMkVBRjYwNjI1RkZBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgg/FDQv5IakJrGp+B3OAO4hmBbZe2q8b4cEa3aLAjfdSBCOT0YT1rZ81mVOT 1Tc1eUU8Jt8QPeYqmrdt+nxm01KeX9kMmaSnmf5TdehkJr+BULF2FkcOSJ31r6FX 0mTTWljLbQppXju2pgJ51JBzVO/dNe0hA4853aVdVc+PDgFmDOcHBlyVV/Ve5RMv OyppEjT64KPRDGkrbCwB0X3C9TZv4KrGvRGJ0N64j2A1ObrEMSn8Hku0V6TIa2zT b4rfxIikESlfDPql5xhvx27oivSYwbnjUFL6far6aY6DSnoOdBMQKMSJc4DG5wap KuXylaA6xHEThqwjl60EcauyXw== -----END CERTIFICATE-----Generated at Mon Oct 20 19:11:51 2025 by rpki-client