$ rpki-client -vvf rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/1/2AADFACED9C75E320914697A02E254A3D463839A.mft File: 2AADFACED9C75E320914697A02E254A3D463839A.mft (raw, json) Hash identifier: JDF2lnF8o7W8r30t7tFmECFt2XDCWaRia96w/SqHJhg= Subject key identifier: 4D:D8:C9:9B:04:92:04:C4:83:69:DF:DC:65:2F:A2:CD:02:65:CF:E7 Authority key identifier: 2A:AD:FA:CE:D9:C7:5E:32:09:14:69:7A:02:E2:54:A3:D4:63:83:9A Certificate issuer: /CN=2AADFACED9C75E320914697A02E254A3D463839A Certificate serial: 7494C9BEA44DE38A0FE5BFF8F6A742984A49DFAB Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AADFACED9C75E320914697A02E254A3D463839A.cer Subject info access: rsync://rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/1/2AADFACED9C75E320914697A02E254A3D463839A.mft Manifest number: 02EC Signing time: Mon 20 Oct 2025 03:16:25 +0000 Manifest this update: Mon 20 Oct 2025 03:11:25 +0000 Manifest next update: Tue 21 Oct 2025 04:01:25 +0000 Files and hashes: 1: 3138372e3131312e31362e302f32302d3234203d3e203533313230.roa (hash: olPEUYzQeXbpm2M5qdX3HUxqCDHC3YBr2Etr9x7gT/w=) 2: 2AADFACED9C75E320914697A02E254A3D463839A.crl (hash: UwgJU/Gl6y5cTnw8Q+XQP0EofRo6+UGO3f9Q8m5a25w=) 3: 3134312e3139332e3135312e302f32342d3234203d3e203533313230.roa (hash: DuI4Mug1p6teJxzujuasFd0ujWIU2EvbfZhNpCjPypI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/1/2AADFACED9C75E320914697A02E254A3D463839A.crl rsync://rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/1/2AADFACED9C75E320914697A02E254A3D463839A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AADFACED9C75E320914697A02E254A3D463839A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 04:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:94:c9:be:a4:4d:e3:8a:0f:e5:bf:f8:f6:a7:42:98:4a:49:df:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2AADFACED9C75E320914697A02E254A3D463839A Validity Not Before: Oct 20 03:11:25 2025 GMT Not After : Oct 21 04:01:25 2025 GMT Subject: CN=4DD8C99B049204C48369DFDC652FA2CD0265CFE7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:d9:bd:dd:c2:20:c5:62:32:8a:7d:f0:ce:67: cf:d1:48:78:c2:9b:bc:99:00:ea:16:11:f3:e3:c8: 8e:7e:f0:e1:98:59:94:9f:80:31:3d:11:ea:4a:70: f6:2d:8f:1d:2d:b4:f6:10:0f:96:89:51:8f:4a:e7: 80:70:d0:f1:47:b0:24:3d:9c:7c:01:02:ce:68:b6: 23:6d:c2:16:7f:76:87:79:7d:d2:6d:8d:05:7c:d5: 9a:85:b0:2d:fd:8a:3a:21:86:bf:a0:61:77:2c:22: 1c:d3:1e:0b:b9:8a:22:08:60:c4:a7:d9:59:19:29: ef:80:a8:69:61:0d:d3:a8:3a:8b:ea:02:91:18:63: d4:61:0b:aa:a4:89:c8:fd:16:89:a5:4b:42:2e:25: 1e:9a:ed:c2:7d:d8:16:c4:d7:a0:85:32:06:73:dc: e2:47:8a:96:3f:3a:eb:16:e9:35:06:e9:3a:99:9c: 50:8b:dd:53:cc:3f:35:a4:4c:bb:e1:bb:7e:19:13: b7:eb:bf:e5:b0:74:37:4d:15:76:e0:c7:02:ea:a8: 86:70:74:bb:a4:95:ff:04:86:e7:73:3b:1f:e2:ae: 32:2b:de:2b:f6:30:63:d6:64:28:1e:98:6c:42:47: 46:68:bd:15:c2:9c:68:3a:3c:9b:b0:0e:82:6b:40: 19:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:D8:C9:9B:04:92:04:C4:83:69:DF:DC:65:2F:A2:CD:02:65:CF:E7 X509v3 Authority Key Identifier: keyid:2A:AD:FA:CE:D9:C7:5E:32:09:14:69:7A:02:E2:54:A3:D4:63:83:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/1/2AADFACED9C75E320914697A02E254A3D463839A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AADFACED9C75E320914697A02E254A3D463839A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/1/2AADFACED9C75E320914697A02E254A3D463839A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:e5:84:19:37:9f:a9:f3:b7:9f:2e:ae:ba:7e:c1:eb:f1:b8: 12:52:39:12:66:0b:5d:bc:b0:9a:74:22:76:17:1c:9e:50:45: 76:89:16:3b:09:96:d5:2e:7b:b1:89:a8:3b:d6:9a:59:d4:81: b8:0a:70:32:be:01:49:a5:d0:48:fc:82:45:31:d9:ab:bf:99: a4:6c:f7:e0:db:50:95:f4:d5:cf:e8:b0:3c:e6:d5:15:35:48: b1:2f:be:ca:30:b3:e4:36:14:9b:6a:ae:82:a9:41:ca:c1:cd: a3:9d:b8:7f:99:34:7b:3d:63:94:27:fb:c2:cf:71:a5:58:8d: d9:92:fc:88:8b:46:d4:9d:57:6f:3a:4c:f6:92:20:d2:8e:ff: 38:87:1a:ee:a1:71:bc:62:c3:43:d3:cd:c2:1d:38:a0:54:d2: d1:d5:f7:fc:8c:3f:b1:45:e4:e0:e5:bb:36:84:78:a8:e1:ca: 2c:a5:28:26:af:b7:5f:ab:42:22:6a:8b:ab:8c:8d:80:e5:15: 84:39:36:90:a8:fb:2d:76:4f:40:ff:66:60:68:2f:9d:97:6e: 7b:bd:b0:79:93:bb:38:b4:fa:cc:44:ee:8c:a0:b2:12:f9:95: 85:02:a2:15:e3:53:21:e5:1e:30:83:93:17:95:b1:b9:5b:fa: 5d:2b:19:80 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUdJTJvqRN44oP5b/49qdCmEpJ36swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFBREZBQ0VEOUM3NUUzMjA5MTQ2OTdBMDJFMjU0QTNE NDYzODM5QTAeFw0yNTEwMjAwMzExMjVaFw0yNTEwMjEwNDAxMjVaMDMxMTAvBgNV BAMTKDRERDhDOTlCMDQ5MjA0QzQ4MzY5REZEQzY1MkZBMkNEMDI2NUNGRTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCH2b3dwiDFYjKKffDOZ8/RSHjC m7yZAOoWEfPjyI5+8OGYWZSfgDE9EepKcPYtjx0ttPYQD5aJUY9K54Bw0PFHsCQ9 nHwBAs5otiNtwhZ/dod5fdJtjQV81ZqFsC39ijohhr+gYXcsIhzTHgu5iiIIYMSn 2VkZKe+AqGlhDdOoOovqApEYY9RhC6qkicj9FomlS0IuJR6a7cJ92BbE16CFMgZz 3OJHipY/OusW6TUG6TqZnFCL3VPMPzWkTLvhu34ZE7frv+WwdDdNFXbgxwLqqIZw dLuklf8EhudzOx/irjIr3iv2MGPWZCgemGxCR0ZovRXCnGg6PJuwDoJrQBkJAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUTdjJmwSSBMSDad/cZS+izQJlz+cwHwYDVR0j BBgwFoAUKq36ztnHXjIJFGl6AuJUo9Rjg5owDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSHVyY0FKek1GTEY4ZTRncEg2SmVqUkRxM2p2UEpqYmttMW05bVJCU0Ru eW8vMS8yQUFERkFDRUQ5Qzc1RTMyMDkxNDY5N0EwMkUyNTRBM0Q0NjM4MzlBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJBQURGQUNFRDlDNzVFMzIw OTE0Njk3QTAyRTI1NEEzRDQ2MzgzOUEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SHVyY0FKek1GTEY4ZTRncEg2SmVqUkRxM2p2UEpqYmttMW05bVJCU0RueW8vMS8y QUFERkFDRUQ5Qzc1RTMyMDkxNDY5N0EwMkUyNTRBM0Q0NjM4MzlBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQ+WEGTefqfO3ny6uun7B6/G4ElI5EmYLXbywmnQidhccnlBFdokWOwmW1S57 sYmoO9aaWdSBuApwMr4BSaXQSPyCRTHZq7+ZpGz34NtQlfTVz+iwPObVFTVIsS++ yjCz5DYUm2qugqlBysHNo524f5k0ez1jlCf7ws9xpViN2ZL8iItG1J1XbzpM9pIg 0o7/OIca7qFxvGLDQ9PNwh04oFTS0dX3/Iw/sUXk4OW7NoR4qOHKLKUoJq+3X6tC ImqLq4yNgOUVhDk2kKj7LXZPQP9mYGgvnZdue72weZO7OLT6zETujKCyEvmVhQKi FeNTIeUeMIOTF5WxuVv6XSsZgA== -----END CERTIFICATE-----Generated at Mon Oct 20 21:37:38 2025 by rpki-client