$ rpki-client -vvf rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/0/A2A3F34AD377DD8B185FB62F294479A4953EA29F.mft File: A2A3F34AD377DD8B185FB62F294479A4953EA29F.mft (raw, json) Hash identifier: CMVBtjlkj4BZ15uv5GjH97P4GxoIEhq0q38HldgVNns= Subject key identifier: BB:F6:14:A0:09:BF:79:4B:7C:6E:C4:16:F9:81:33:FF:36:D1:F4:67 Authority key identifier: A2:A3:F3:4A:D3:77:DD:8B:18:5F:B6:2F:29:44:79:A4:95:3E:A2:9F Certificate issuer: /CN=A2A3F34AD377DD8B185FB62F294479A4953EA29F Certificate serial: 16FB1F48C6AF6D42F58F9073F819D2E865E41B7A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2A3F34AD377DD8B185FB62F294479A4953EA29F.cer Subject info access: rsync://rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/0/A2A3F34AD377DD8B185FB62F294479A4953EA29F.mft Manifest number: 89 Signing time: Mon 20 Oct 2025 10:37:42 +0000 Manifest this update: Mon 20 Oct 2025 10:32:42 +0000 Manifest next update: Tue 21 Oct 2025 14:34:42 +0000 Files and hashes: 1: 3133382e3132312e3132302e302f32322d3234203d3e20323634323933.roa (hash: rTjYayeyuMTgmvyXTSthMVbnAtKwGqrwy6zYd+iMfAc=) 2: 34352e3233322e3136302e302f32322d3234203d3e20323634323933.roa (hash: CPvT3p3XAZFfu3gOfh4/owWrLpHzeZEHAOI08mcgjF4=) 3: 323830343a323561383a3a2f33322d3334203d3e20323634323933.roa (hash: ZoB1LT2ZH9Vj6IVaBBhWrsP4cnsjosijPidmwDlg3SQ=) 4: A2A3F34AD377DD8B185FB62F294479A4953EA29F.crl (hash: vUFVrlbF5OljRNVVH2MhYmEZdab0w8rAALZTmykH4R0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/0/A2A3F34AD377DD8B185FB62F294479A4953EA29F.crl rsync://rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/0/A2A3F34AD377DD8B185FB62F294479A4953EA29F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2A3F34AD377DD8B185FB62F294479A4953EA29F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 14:34:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:fb:1f:48:c6:af:6d:42:f5:8f:90:73:f8:19:d2:e8:65:e4:1b:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A2A3F34AD377DD8B185FB62F294479A4953EA29F Validity Not Before: Oct 20 10:32:42 2025 GMT Not After : Oct 21 14:34:42 2025 GMT Subject: CN=BBF614A009BF794B7C6EC416F98133FF36D1F467 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:2f:2c:3e:0c:d0:bf:c3:10:b2:a9:6c:19:13: ee:8c:69:0d:eb:03:99:92:23:6c:a0:6e:c3:dd:79: 8b:fc:64:66:6b:c8:1c:20:86:2d:f2:44:01:2a:4f: d8:a1:f4:e2:e0:cf:79:ac:8b:1d:9a:90:b3:16:bc: a8:4d:36:b6:59:be:10:7a:34:3f:f3:e3:6f:21:14: e1:d7:ed:69:c8:4a:1b:ce:45:98:3c:c6:8d:df:05: 2f:00:1d:50:e3:48:05:12:76:ba:e0:4c:2c:93:81: 26:7f:72:ea:7d:c3:82:12:f3:a4:c4:9c:87:9c:b1: 63:ed:6d:ca:0f:16:38:b2:d8:bc:7a:7f:78:1b:28: a9:13:45:10:c4:b1:63:26:70:db:f3:a4:02:07:28: 51:f7:12:7b:33:97:85:e3:47:1e:fe:94:a5:14:f2: 35:63:7a:4c:25:69:e4:03:4e:63:f9:1a:88:ae:3c: bb:90:ed:cd:47:b4:f0:7b:55:d2:74:ff:72:a8:db: cd:d4:d1:e3:da:74:4c:83:99:72:50:f1:8f:70:31: 49:70:3d:28:f3:1f:81:a7:d6:24:bb:42:17:f7:f5: 68:bf:1f:3c:e0:67:0a:d8:0c:76:28:2c:f2:e3:f4: f7:66:99:6f:dc:48:ca:c9:dc:0f:d0:a7:8f:ef:51: c2:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:F6:14:A0:09:BF:79:4B:7C:6E:C4:16:F9:81:33:FF:36:D1:F4:67 X509v3 Authority Key Identifier: keyid:A2:A3:F3:4A:D3:77:DD:8B:18:5F:B6:2F:29:44:79:A4:95:3E:A2:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/0/A2A3F34AD377DD8B185FB62F294479A4953EA29F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2A3F34AD377DD8B185FB62F294479A4953EA29F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/0/A2A3F34AD377DD8B185FB62F294479A4953EA29F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:17:ac:0a:6d:99:2c:ae:cf:99:e7:2d:16:24:f8:df:db:b7: 98:e1:88:3e:47:fb:dc:84:80:27:55:cc:71:10:82:bd:5b:d5: d5:7c:1d:09:f9:1d:4c:56:3b:c0:36:7d:22:2a:3d:8b:2b:9e: 52:bb:e5:e8:e7:2a:dd:1a:dd:01:8d:fe:0e:df:2c:4b:b8:d0: f0:d2:30:ab:04:b3:3c:de:d0:0c:c0:56:b1:ad:ce:ae:73:1a: 70:6c:d5:e6:61:e6:22:99:31:3b:ef:f3:f5:40:e7:ea:53:ee: 1c:1d:a2:3b:23:a1:39:a0:25:b8:eb:e9:4c:f6:04:3c:4a:96: e3:b1:78:ed:47:25:13:ad:4c:4e:38:d8:43:29:88:d7:a4:ab: 69:aa:8c:97:bb:4a:3c:33:77:16:ff:cf:c5:a8:9c:3f:f5:b4: 8d:7a:d6:66:65:2f:2f:05:7e:cc:f1:3d:29:d1:5c:0e:56:4d: 18:08:ed:e7:fa:4e:6e:a3:b1:1a:14:66:35:be:53:1e:b7:1e: bd:ab:39:18:1e:07:d6:a3:f3:33:af:d7:51:f6:dd:0f:05:d4: eb:51:2c:98:5d:85:7f:52:05:c3:dc:20:29:d0:64:0a:ac:52: 27:86:18:55:bb:b5:28:13:74:c8:ca:98:5c:d0:dc:f4:0b:50: af:71:08:42 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUFvsfSMavbUL1j5Bz+BnS6GXkG3owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTJBM0YzNEFEMzc3REQ4QjE4NUZCNjJGMjk0NDc5QTQ5 NTNFQTI5RjAeFw0yNTEwMjAxMDMyNDJaFw0yNTEwMjExNDM0NDJaMDMxMTAvBgNV BAMTKEJCRjYxNEEwMDlCRjc5NEI3QzZFQzQxNkY5ODEzM0ZGMzZEMUY0NjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtLyw+DNC/wxCyqWwZE+6MaQ3r A5mSI2ygbsPdeYv8ZGZryBwghi3yRAEqT9ih9OLgz3msix2akLMWvKhNNrZZvhB6 ND/z428hFOHX7WnIShvORZg8xo3fBS8AHVDjSAUSdrrgTCyTgSZ/cup9w4IS86TE nIecsWPtbcoPFjiy2Lx6f3gbKKkTRRDEsWMmcNvzpAIHKFH3Enszl4XjRx7+lKUU 8jVjekwlaeQDTmP5GoiuPLuQ7c1HtPB7VdJ0/3Ko283U0ePadEyDmXJQ8Y9wMUlw PSjzH4Gn1iS7Qhf39Wi/HzzgZwrYDHYoLPLj9PdmmW/cSMrJ3A/Qp4/vUcLtAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUu/YUoAm/eUt8bsQW+YEz/zbR9GcwHwYDVR0j BBgwFoAUoqPzStN33YsYX7YvKUR5pJU+op8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR2FrdHRDazJqS0MyeXFTZ3ppenJKcnJZNWFnenNaMnc3QlFxdmtYRlhW RmgvMC9BMkEzRjM0QUQzNzdERDhCMTg1RkI2MkYyOTQ0NzlBNDk1M0VBMjlGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0EyQTNGMzRBRDM3N0REOEIx ODVGQjYyRjI5NDQ3OUE0OTUzRUEyOUYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R2FrdHRDazJqS0MyeXFTZ3ppenJKcnJZNWFnenNaMnc3QlFxdmtYRlhWRmgvMC9B MkEzRjM0QUQzNzdERDhCMTg1RkI2MkYyOTQ0NzlBNDk1M0VBMjlGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAexesCm2ZLK7PmectFiT439u3mOGIPkf73ISAJ1XMcRCCvVvV1XwdCfkdTFY7 wDZ9Iio9iyueUrvl6Ocq3RrdAY3+Dt8sS7jQ8NIwqwSzPN7QDMBWsa3OrnMacGzV 5mHmIpkxO+/z9UDn6lPuHB2iOyOhOaAluOvpTPYEPEqW47F47UclE61MTjjYQymI 16SraaqMl7tKPDN3Fv/PxaicP/W0jXrWZmUvLwV+zPE9KdFcDlZNGAjt5/pObqOx GhRmNb5THrcevas5GB4H1qPzM6/XUfbdDwXU61EsmF2Ff1IFw9wgKdBkCqxSJ4YY Vbu1KBN0yMqYXNDc9AtQr3EIQg== -----END CERTIFICATE-----Generated at Tue Oct 21 00:43:40 2025 by rpki-client