$ rpki-client -vvf rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.mft File: AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.mft (raw, json) Hash identifier: kfJiCQbbF87no/TSSpkVkVBRbAEVfQsXN6HmCiC01GI= Subject key identifier: 03:5F:8D:9D:6C:2A:57:B9:57:93:F0:D2:66:E5:AE:9D:41:C7:34:D2 Authority key identifier: AA:2B:D3:35:20:EC:0C:79:CF:C9:9C:40:27:FF:2E:AF:60:62:5F:FA Certificate issuer: /CN=AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA Certificate serial: 605A1A1F799BADA8833D30B008AED5527EF564A9 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.cer Subject info access: rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.mft Manifest number: 0107 Signing time: Wed 02 Jul 2025 23:58:01 +0000 Manifest this update: Wed 02 Jul 2025 23:53:01 +0000 Manifest next update: Fri 04 Jul 2025 00:38:01 +0000 Files and hashes: 1: 323830343a353763303a3a2f33322d3438203d3e20323638303834.roa (hash: KBArWlV5vwMsvaplxezo5vYP7odX82xOazE7IspsFqE=) 2: 34352e3136382e3234342e302f32322d3234203d3e20323638303834.roa (hash: MUps5dYJYbgZlLgJ9zMzZggPufSzKqjyIWh5+12TXKE=) 3: AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.crl (hash: hxe+VEWNvMiwCJKGwHv2yZ/kYsXI0Eis/L2Md0D32rI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.crl rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 04 Jul 2025 00:38:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:5a:1a:1f:79:9b:ad:a8:83:3d:30:b0:08:ae:d5:52:7e:f5:64:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA Validity Not Before: Jul 2 23:53:01 2025 GMT Not After : Jul 4 00:38:01 2025 GMT Subject: CN=035F8D9D6C2A57B95793F0D266E5AE9D41C734D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e5:67:dd:d6:20:58:b5:5b:e4:6f:35:c1:1e: 4f:a4:bb:cc:87:2d:72:f7:09:eb:e3:aa:f4:2b:39: 53:4f:de:a0:a4:e1:96:aa:4c:c5:06:bd:46:e7:f1: f1:4c:74:ad:4d:83:30:be:6f:81:c7:28:48:ab:08: c2:59:26:8b:4a:72:b1:9f:85:e2:fc:09:27:16:2e: e8:01:16:93:ed:d7:e9:0a:df:37:0f:08:de:20:d6: 87:e3:7d:93:fb:4e:5c:93:58:c9:ea:4c:26:6f:a8: f4:1f:c7:68:50:6c:60:f8:33:84:41:be:ed:7d:c9: f7:57:5a:af:e9:1c:ae:79:e9:12:1c:48:89:0b:cd: e7:21:87:64:02:58:b9:6c:f4:9f:66:00:b4:4c:a0: dd:88:e8:df:e6:75:88:a1:17:92:27:6c:46:60:cb: f3:ed:ec:a0:ac:69:9c:01:35:86:63:e5:af:22:6f: 63:46:ea:e4:48:d4:29:d9:ee:34:1a:23:ef:b0:1d: 80:a1:2f:44:1b:a3:9c:a9:c8:e8:63:4e:f9:61:c8: 1d:0b:64:6f:7d:9e:d6:69:31:72:a0:d8:b0:24:21: 66:7c:fa:6a:ed:4e:c7:af:a3:0a:d9:70:70:f6:08: c9:05:93:6d:58:c8:c1:a9:c1:f9:2f:6c:cd:b6:6e: f6:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:5F:8D:9D:6C:2A:57:B9:57:93:F0:D2:66:E5:AE:9D:41:C7:34:D2 X509v3 Authority Key Identifier: keyid:AA:2B:D3:35:20:EC:0C:79:CF:C9:9C:40:27:FF:2E:AF:60:62:5F:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/G5wXmTbjGXdCsjPg58ezaCi7ZNWgNZ97ig89HzDEpfTV/0/AA2BD33520EC0C79CFC99C4027FF2EAF60625FFA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:2c:d2:77:68:8d:0f:c1:21:90:60:2a:3c:db:65:da:49:df: 70:f8:39:00:19:87:3e:a6:f1:a6:7a:10:17:5a:95:c3:6a:af: 2b:1d:b7:69:84:d1:83:4d:f8:10:a2:da:05:8b:ed:bd:95:a3: 38:3f:ea:eb:0e:94:32:34:5f:31:8a:51:62:de:ad:4b:79:bb: 95:10:c2:be:9f:bb:06:59:a7:77:7c:cc:fa:79:4e:78:e6:c4: 81:24:42:69:eb:9a:27:c7:dd:25:10:95:dc:f9:47:22:e6:ff: 54:d4:33:a6:24:1c:d4:59:58:0e:15:19:4f:f6:e3:40:6a:e8: 3d:a3:c6:ff:69:de:e9:f3:62:c4:d0:97:6b:d6:3f:4d:04:0f: 1f:a1:68:98:a9:cf:4e:20:9a:59:6b:b0:f4:88:20:fd:16:31: 7e:d9:50:be:ea:60:2c:ee:1a:7f:9b:c6:f7:3b:fd:7b:46:c4: 86:37:a3:92:61:d4:b0:aa:cb:c2:fa:c5:49:ff:94:0a:76:38: fc:a6:94:df:99:73:54:47:0b:e6:b4:90:98:51:6a:67:79:ac: 8d:1a:60:61:5b:a0:1a:95:79:a2:d2:dd:ee:d6:58:9d:7b:c1: d7:f8:13:7b:65:cf:b9:7c:ef:14:59:0f:f0:8e:8b:f9:32:5b: bb:6b:06:ec -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUYFoaH3mbraiDPTCwCK7VUn71ZKkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUEyQkQzMzUyMEVDMEM3OUNGQzk5QzQwMjdGRjJFQUY2 MDYyNUZGQTAeFw0yNTA3MDIyMzUzMDFaFw0yNTA3MDQwMDM4MDFaMDMxMTAvBgNV BAMTKDAzNUY4RDlENkMyQTU3Qjk1NzkzRjBEMjY2RTVBRTlENDFDNzM0RDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp5Wfd1iBYtVvkbzXBHk+ku8yH LXL3CevjqvQrOVNP3qCk4ZaqTMUGvUbn8fFMdK1NgzC+b4HHKEirCMJZJotKcrGf heL8CScWLugBFpPt1+kK3zcPCN4g1ofjfZP7TlyTWMnqTCZvqPQfx2hQbGD4M4RB vu19yfdXWq/pHK556RIcSIkLzechh2QCWLls9J9mALRMoN2I6N/mdYihF5InbEZg y/Pt7KCsaZwBNYZj5a8ib2NG6uRI1CnZ7jQaI++wHYChL0Qbo5ypyOhjTvlhyB0L ZG99ntZpMXKg2LAkIWZ8+mrtTsevowrZcHD2CMkFk21YyMGpwfkvbM22bvZNAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUA1+NnWwqV7lXk/DSZuWunUHHNNIwHwYDVR0j BBgwFoAUqivTNSDsDHnPyZxAJ/8ur2BiX/owDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRzV3WG1UYmpHWGRDc2pQZzU4ZXphQ2k3Wk5XZ05aOTdpZzg5SHpERXBm VFYvMC9BQTJCRDMzNTIwRUMwQzc5Q0ZDOTlDNDAyN0ZGMkVBRjYwNjI1RkZBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FBMkJEMzM1MjBFQzBDNzlD RkM5OUM0MDI3RkYyRUFGNjA2MjVGRkEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RzV3WG1UYmpHWGRDc2pQZzU4ZXphQ2k3Wk5XZ05aOTdpZzg5SHpERXBmVFYvMC9B QTJCRDMzNTIwRUMwQzc5Q0ZDOTlDNDAyN0ZGMkVBRjYwNjI1RkZBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvSzSd2iND8EhkGAqPNtl2knfcPg5ABmHPqbxpnoQF1qVw2qvKx23aYTRg034 EKLaBYvtvZWjOD/q6w6UMjRfMYpRYt6tS3m7lRDCvp+7Blmnd3zM+nlOeObEgSRC aeuaJ8fdJRCV3PlHIub/VNQzpiQc1FlYDhUZT/bjQGroPaPG/2ne6fNixNCXa9Y/ TQQPH6FomKnPTiCaWWuw9Igg/RYxftlQvupgLO4af5vG9zv9e0bEhjejkmHUsKrL wvrFSf+UCnY4/KaU35lzVEcL5rSQmFFqZ3msjRpgYVugGpV5otLd7tZYnXvB1/gT e2XPuXzvFFkP8I6L+TJbu2sG7A== -----END CERTIFICATE-----Generated at Thu Jul 3 14:16:33 2025 by rpki-client