$ rpki-client -vvf rpki-repo.registro.br/repo/GATePCB2SVHpMveRtRxP2QRkw3Wvu1sX4woG5BvzELKS/1/AA29BAE54F39868638C50A1BB95E23A7763C38A4.mft File: AA29BAE54F39868638C50A1BB95E23A7763C38A4.mft (raw, json) Hash identifier: bi/8K9s1c5k1h/vOKfhCwk2YiJfeyqmbkGwDael/tXg= Subject key identifier: 34:75:22:87:73:35:B0:09:F6:2E:D5:74:54:80:81:5D:06:26:21:FD Authority key identifier: AA:29:BA:E5:4F:39:86:86:38:C5:0A:1B:B9:5E:23:A7:76:3C:38:A4 Certificate issuer: /CN=AA29BAE54F39868638C50A1BB95E23A7763C38A4 Certificate serial: 75332A979B711DB471662F38D71A2483F4501726 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA29BAE54F39868638C50A1BB95E23A7763C38A4.cer Subject info access: rsync://rpki-repo.registro.br/repo/GATePCB2SVHpMveRtRxP2QRkw3Wvu1sX4woG5BvzELKS/1/AA29BAE54F39868638C50A1BB95E23A7763C38A4.mft Manifest number: 02A2 Signing time: Sat 23 Aug 2025 09:13:22 +0000 Manifest this update: Sat 23 Aug 2025 09:08:22 +0000 Manifest next update: Sun 24 Aug 2025 09:47:22 +0000 Files and hashes: 1: AA29BAE54F39868638C50A1BB95E23A7763C38A4.crl (hash: aKmwUYvXXL7pYTzDnK76EDmpAIAyoF0fJK+GA9wzxMU=) 2: 3139312e33372e3232342e302f32312d3234203d3e20323633333734.roa (hash: XA3CDHGQzJtVy7KlXD+Ti8xltUzX609QLMhF05gs+Cg=) 3: 323830343a313532383a3a2f33322d3438203d3e20323633333734.roa (hash: ve9csxsYtvbttCUtJ6k2byKVef+aNPiHNUI7M+ZsbD4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GATePCB2SVHpMveRtRxP2QRkw3Wvu1sX4woG5BvzELKS/1/AA29BAE54F39868638C50A1BB95E23A7763C38A4.crl rsync://rpki-repo.registro.br/repo/GATePCB2SVHpMveRtRxP2QRkw3Wvu1sX4woG5BvzELKS/1/AA29BAE54F39868638C50A1BB95E23A7763C38A4.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA29BAE54F39868638C50A1BB95E23A7763C38A4.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Aug 2025 09:47:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:33:2a:97:9b:71:1d:b4:71:66:2f:38:d7:1a:24:83:f4:50:17:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA29BAE54F39868638C50A1BB95E23A7763C38A4 Validity Not Before: Aug 23 09:08:22 2025 GMT Not After : Aug 24 09:47:22 2025 GMT Subject: CN=347522877335B009F62ED5745480815D062621FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:02:eb:5f:eb:34:76:65:3f:34:73:08:d0:fa: 81:4b:72:dc:0f:19:00:46:c5:39:be:e2:25:1b:f6: a7:36:02:08:bb:32:ae:48:00:1d:5c:d5:11:83:36: 3c:d1:23:82:cb:b5:c6:47:ab:3a:d1:c8:dd:40:45: 75:e7:14:a2:89:7e:a8:5f:88:a5:ef:ff:4d:57:f6: 1d:33:73:04:f3:b4:92:c6:11:58:40:e1:2e:2c:b2: 75:ea:fe:b5:10:1f:4d:3f:bb:4e:36:ca:0e:c3:26: 17:dd:de:3a:25:51:9c:e8:68:95:4c:13:49:86:de: bc:d8:21:45:55:62:85:b5:f6:f0:b3:ca:0f:ff:85: d3:a7:9e:e6:3c:43:1d:d2:ea:dc:b7:f4:d1:ec:e1: a7:ec:46:13:ff:b6:13:15:00:e8:be:20:eb:37:00: 46:63:fe:73:0d:df:f2:0f:4d:3e:96:9e:2c:15:9b: 67:c1:d1:35:b4:13:12:f8:86:78:76:27:0d:d3:10: 06:e9:83:87:df:bb:17:56:26:ef:fd:2c:81:8a:02: 62:b5:5f:98:b1:d4:53:a1:d9:e2:98:d1:b6:a2:f9: 05:78:21:c8:4e:36:f8:79:ec:29:9f:7b:de:d2:00: c4:4d:b4:0e:55:ee:20:88:da:e6:5f:68:66:67:04: 8e:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:75:22:87:73:35:B0:09:F6:2E:D5:74:54:80:81:5D:06:26:21:FD X509v3 Authority Key Identifier: keyid:AA:29:BA:E5:4F:39:86:86:38:C5:0A:1B:B9:5E:23:A7:76:3C:38:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GATePCB2SVHpMveRtRxP2QRkw3Wvu1sX4woG5BvzELKS/1/AA29BAE54F39868638C50A1BB95E23A7763C38A4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA29BAE54F39868638C50A1BB95E23A7763C38A4.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GATePCB2SVHpMveRtRxP2QRkw3Wvu1sX4woG5BvzELKS/1/AA29BAE54F39868638C50A1BB95E23A7763C38A4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:c3:c2:c5:a7:dd:31:85:2d:88:d6:2e:98:d1:6d:52:d5:5f: 44:f9:0e:84:d7:2e:ef:c2:25:da:9e:97:a6:8d:58:1a:52:46: e9:6d:83:a5:1c:1e:a9:55:67:11:36:d7:c6:8d:81:8f:33:ea: 89:d8:07:b0:e3:af:7a:db:99:61:3d:a4:1b:63:d3:6d:1f:f2: 27:1b:7d:b4:fd:8a:bf:c0:cd:bd:4b:51:d5:b0:06:6a:c3:60: 23:8d:5a:1d:ef:0d:c0:b7:53:a2:bc:31:28:ae:fe:40:25:d5: c4:9e:e7:cc:7e:9f:12:f7:55:05:0a:e3:20:38:01:11:5c:4c: 35:6d:a8:02:cd:f7:4c:1d:9c:30:b3:7a:30:b4:9e:91:14:36: 23:a2:6d:23:1d:02:ff:3a:c6:c5:3f:7d:81:fb:90:93:ff:0d: c6:9e:9d:16:2f:96:01:93:b7:23:92:c4:6f:a2:94:15:34:be: 4a:0a:a9:f6:b0:cf:64:b2:a0:a0:0a:38:17:49:16:2c:98:b5: 8b:9c:03:63:56:e5:97:3a:14:56:01:c4:25:8f:b1:21:0f:1c: 3e:5b:8f:8a:42:b4:a3:74:06:56:ee:39:53:16:aa:15:42:95: 2e:b8:43:67:f9:c0:59:58:d2:08:a4:ca:e3:ce:8f:02:5a:df: 4c:92:b6:29 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUdTMql5txHbRxZi841xokg/RQFyYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUEyOUJBRTU0RjM5ODY4NjM4QzUwQTFCQjk1RTIzQTc3 NjNDMzhBNDAeFw0yNTA4MjMwOTA4MjJaFw0yNTA4MjQwOTQ3MjJaMDMxMTAvBgNV BAMTKDM0NzUyMjg3NzMzNUIwMDlGNjJFRDU3NDU0ODA4MTVEMDYyNjIxRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPAutf6zR2ZT80cwjQ+oFLctwP GQBGxTm+4iUb9qc2Agi7Mq5IAB1c1RGDNjzRI4LLtcZHqzrRyN1ARXXnFKKJfqhf iKXv/01X9h0zcwTztJLGEVhA4S4ssnXq/rUQH00/u042yg7DJhfd3jolUZzoaJVM E0mG3rzYIUVVYoW19vCzyg//hdOnnuY8Qx3S6ty39NHs4afsRhP/thMVAOi+IOs3 AEZj/nMN3/IPTT6WniwVm2fB0TW0ExL4hnh2Jw3TEAbpg4ffuxdWJu/9LIGKAmK1 X5ix1FOh2eKY0bai+QV4IchONvh57Cmfe97SAMRNtA5V7iCI2uZfaGZnBI6NAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUNHUih3M1sAn2LtV0VICBXQYmIf0wHwYDVR0j BBgwFoAUqim65U85hoY4xQobuV4jp3Y8OKQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR0FUZVBDQjJTVkhwTXZlUnRSeFAyUVJrdzNXdnUxc1g0d29HNUJ2ekVM S1MvMS9BQTI5QkFFNTRGMzk4Njg2MzhDNTBBMUJCOTVFMjNBNzc2M0MzOEE0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FBMjlCQUU1NEYzOTg2ODYz OEM1MEExQkI5NUUyM0E3NzYzQzM4QTQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R0FUZVBDQjJTVkhwTXZlUnRSeFAyUVJrdzNXdnUxc1g0d29HNUJ2ekVMS1MvMS9B QTI5QkFFNTRGMzk4Njg2MzhDNTBBMUJCOTVFMjNBNzc2M0MzOEE0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAusPCxafdMYUtiNYumNFtUtVfRPkOhNcu78Il2p6Xpo1YGlJG6W2DpRweqVVn ETbXxo2BjzPqidgHsOOvetuZYT2kG2PTbR/yJxt9tP2Kv8DNvUtR1bAGasNgI41a He8NwLdTorwxKK7+QCXVxJ7nzH6fEvdVBQrjIDgBEVxMNW2oAs33TB2cMLN6MLSe kRQ2I6JtIx0C/zrGxT99gfuQk/8Nxp6dFi+WAZO3I5LEb6KUFTS+Sgqp9rDPZLKg oAo4F0kWLJi1i5wDY1bllzoUVgHEJY+xIQ8cPluPikK0o3QGVu45UxaqFUKVLrhD Z/nAWVjSCKTK486PAlrfTJK2KQ== -----END CERTIFICATE-----Generated at Sat Aug 23 23:57:47 2025 by rpki-client