$ rpki-client -vvf rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/0/A2A3F34AD377DD8B185FB62F294479A4953EA29F.mft File: A2A3F34AD377DD8B185FB62F294479A4953EA29F.mft (raw, json) Hash identifier: WipkIhaVingukdvdlXolKkeBZL+57f+5PqPyxx2uuMs= Subject key identifier: 43:AA:03:77:B4:E7:46:78:40:89:33:B9:06:BE:83:CB:49:78:E4:9D Authority key identifier: A2:A3:F3:4A:D3:77:DD:8B:18:5F:B6:2F:29:44:79:A4:95:3E:A2:9F Certificate issuer: /CN=A2A3F34AD377DD8B185FB62F294479A4953EA29F Certificate serial: 6E1CECF19C1620E4DE8EF5D191703DD443D040FA Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2A3F34AD377DD8B185FB62F294479A4953EA29F.cer Subject info access: rsync://rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/0/A2A3F34AD377DD8B185FB62F294479A4953EA29F.mft Manifest number: 3B Signing time: Fri 22 Aug 2025 17:09:39 +0000 Manifest this update: Fri 22 Aug 2025 17:04:39 +0000 Manifest next update: Sat 23 Aug 2025 18:18:39 +0000 Files and hashes: 1: 3133382e3132312e3132302e302f32322d3234203d3e20323634323933.roa (hash: rTjYayeyuMTgmvyXTSthMVbnAtKwGqrwy6zYd+iMfAc=) 2: A2A3F34AD377DD8B185FB62F294479A4953EA29F.crl (hash: 2tYMrfd0ZiNxdIJyTYTn4ROa8tYpFDK24eZEKdI+SPI=) 3: 34352e3233322e3136302e302f32322d3234203d3e20323634323933.roa (hash: CPvT3p3XAZFfu3gOfh4/owWrLpHzeZEHAOI08mcgjF4=) 4: 323830343a323561383a3a2f33322d3334203d3e20323634323933.roa (hash: ZoB1LT2ZH9Vj6IVaBBhWrsP4cnsjosijPidmwDlg3SQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/0/A2A3F34AD377DD8B185FB62F294479A4953EA29F.crl rsync://rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/0/A2A3F34AD377DD8B185FB62F294479A4953EA29F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2A3F34AD377DD8B185FB62F294479A4953EA29F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 23 Aug 2025 18:18:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:1c:ec:f1:9c:16:20:e4:de:8e:f5:d1:91:70:3d:d4:43:d0:40:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A2A3F34AD377DD8B185FB62F294479A4953EA29F Validity Not Before: Aug 22 17:04:39 2025 GMT Not After : Aug 23 18:18:39 2025 GMT Subject: CN=43AA0377B4E74678408933B906BE83CB4978E49D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:81:fe:d4:90:1c:d1:01:99:a2:da:14:92:a9: 2f:b7:91:d6:c1:51:e2:a7:25:05:ff:38:9f:f4:bf: 0c:23:58:15:31:6c:3b:3d:6e:2e:f6:41:3e:dd:4b: 1d:f7:44:e7:71:b6:63:78:38:bb:4d:e7:bf:0b:38: 68:f4:c1:1f:73:3e:8b:e1:95:92:1e:dc:b8:62:90: aa:1f:e3:f0:e4:27:51:95:cc:60:78:c1:de:ac:7a: c5:fe:1b:9a:f3:82:b5:6e:0e:9b:e7:4e:78:d4:44: 03:5a:89:f9:55:ea:e5:94:b9:a6:71:d1:b4:3d:8d: 62:55:8c:1f:65:f8:c6:32:dd:a5:05:cb:a9:b9:65: b0:01:a7:91:2c:a8:c3:b8:fe:7c:db:54:5b:79:f8: 15:0d:1b:40:c0:f0:29:b3:a1:87:a9:d4:73:5b:83: e1:08:e0:53:70:4a:96:f8:ba:1c:99:0a:63:b2:a7: 01:c3:40:0c:cc:41:af:2e:95:0f:57:00:81:48:1b: b3:ff:87:9b:25:e1:71:3e:8c:96:56:13:89:07:29: 57:0f:1d:61:5e:01:9f:6c:b1:ee:fd:80:f4:74:d6: 48:ad:e6:a2:a2:72:23:bc:98:c7:f1:af:e6:19:69: 81:38:1d:08:c3:8c:b2:c6:3e:fa:2f:4e:eb:c4:22: 80:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:AA:03:77:B4:E7:46:78:40:89:33:B9:06:BE:83:CB:49:78:E4:9D X509v3 Authority Key Identifier: keyid:A2:A3:F3:4A:D3:77:DD:8B:18:5F:B6:2F:29:44:79:A4:95:3E:A2:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/0/A2A3F34AD377DD8B185FB62F294479A4953EA29F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2A3F34AD377DD8B185FB62F294479A4953EA29F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/0/A2A3F34AD377DD8B185FB62F294479A4953EA29F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:6e:13:1d:8e:7c:43:11:2e:2d:82:89:4c:e3:bd:df:db:04: 4c:01:23:74:13:38:c2:46:80:d8:cd:67:82:fb:47:42:b3:3e: 95:09:ff:f3:11:87:76:36:06:17:00:ae:bb:46:c1:88:0f:a9: f9:21:8d:92:41:bf:df:96:94:52:04:81:49:73:3d:b6:c5:98: 61:c3:fa:c9:9c:49:3b:ce:54:73:7f:18:d8:13:a1:31:21:69: 5e:99:7f:e2:7b:62:fb:4c:45:a3:06:4f:6c:9f:5e:01:fb:f5: 46:c8:01:aa:f9:c9:d6:14:27:1c:26:f7:99:c8:3b:ad:fc:bc: be:f8:93:47:e5:5e:9f:67:cc:f4:2b:08:17:a9:5b:98:67:58: dd:90:07:c4:ab:0a:88:43:7f:11:e0:c4:8c:2b:85:b7:12:39: ef:f3:b0:10:22:51:92:c4:6a:53:8d:54:5a:46:dd:85:ce:ec: 5e:a9:a6:85:16:d6:c6:be:23:40:0e:6e:74:46:8c:17:8c:e4: d3:44:3f:b1:a1:ef:e2:96:ad:18:ad:b9:b2:66:2e:83:c0:cb: 82:b7:5a:d2:70:59:06:46:12:c8:39:8f:25:44:33:95:f5:21: b2:7b:5f:f2:66:b9:a2:34:10:87:ac:1f:da:03:26:c3:40:d6: e0:95:20:50 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUbhzs8ZwWIOTejvXRkXA91EPQQPowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTJBM0YzNEFEMzc3REQ4QjE4NUZCNjJGMjk0NDc5QTQ5 NTNFQTI5RjAeFw0yNTA4MjIxNzA0MzlaFw0yNTA4MjMxODE4MzlaMDMxMTAvBgNV BAMTKDQzQUEwMzc3QjRFNzQ2Nzg0MDg5MzNCOTA2QkU4M0NCNDk3OEU0OUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdgf7UkBzRAZmi2hSSqS+3kdbB UeKnJQX/OJ/0vwwjWBUxbDs9bi72QT7dSx33ROdxtmN4OLtN578LOGj0wR9zPovh lZIe3LhikKof4/DkJ1GVzGB4wd6sesX+G5rzgrVuDpvnTnjURANaiflV6uWUuaZx 0bQ9jWJVjB9l+MYy3aUFy6m5ZbABp5EsqMO4/nzbVFt5+BUNG0DA8CmzoYep1HNb g+EI4FNwSpb4uhyZCmOypwHDQAzMQa8ulQ9XAIFIG7P/h5sl4XE+jJZWE4kHKVcP HWFeAZ9sse79gPR01kit5qKiciO8mMfxr+YZaYE4HQjDjLLGPvovTuvEIoC9AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUQ6oDd7TnRnhAiTO5Br6Dy0l45J0wHwYDVR0j BBgwFoAUoqPzStN33YsYX7YvKUR5pJU+op8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR2FrdHRDazJqS0MyeXFTZ3ppenJKcnJZNWFnenNaMnc3QlFxdmtYRlhW RmgvMC9BMkEzRjM0QUQzNzdERDhCMTg1RkI2MkYyOTQ0NzlBNDk1M0VBMjlGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0EyQTNGMzRBRDM3N0REOEIx ODVGQjYyRjI5NDQ3OUE0OTUzRUEyOUYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R2FrdHRDazJqS0MyeXFTZ3ppenJKcnJZNWFnenNaMnc3QlFxdmtYRlhWRmgvMC9B MkEzRjM0QUQzNzdERDhCMTg1RkI2MkYyOTQ0NzlBNDk1M0VBMjlGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHG4THY58QxEuLYKJTOO939sETAEjdBM4wkaA2M1ngvtHQrM+lQn/8xGHdjYG FwCuu0bBiA+p+SGNkkG/35aUUgSBSXM9tsWYYcP6yZxJO85Uc38Y2BOhMSFpXpl/ 4nti+0xFowZPbJ9eAfv1RsgBqvnJ1hQnHCb3mcg7rfy8vviTR+Ven2fM9CsIF6lb mGdY3ZAHxKsKiEN/EeDEjCuFtxI57/OwECJRksRqU41UWkbdhc7sXqmmhRbWxr4j QA5udEaMF4zk00Q/saHv4patGK25smYug8DLgrda0nBZBkYSyDmPJUQzlfUhsntf 8ma5ojQQh6wf2gMmw0DW4JUgUA== -----END CERTIFICATE-----Generated at Sat Aug 23 10:58:01 2025 by rpki-client