$ rpki-client -vvf rpki-repo.registro.br/repo/2uYSSDn2V2TM4qegQMVAyVC9MkvCBYoyHhbaQrxmH587/0/AFB37E8982591B18DBDE9E8217274DFABCEAA945.mft File: AFB37E8982591B18DBDE9E8217274DFABCEAA945.mft (raw, json) Hash identifier: l7sjdWj2Z6qQMiOlwPjZ3r2PPQ9/mb9oUlYPQX263hw= Subject key identifier: 60:5B:3B:5A:97:F6:26:A5:A4:B5:92:01:31:82:5D:C6:62:6A:8A:CF Authority key identifier: AF:B3:7E:89:82:59:1B:18:DB:DE:9E:82:17:27:4D:FA:BC:EA:A9:45 Certificate issuer: /CN=AFB37E8982591B18DBDE9E8217274DFABCEAA945 Certificate serial: C9EF580A109B72DE4D54245D5181F1CA2855E6 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFB37E8982591B18DBDE9E8217274DFABCEAA945.cer Subject info access: rsync://rpki-repo.registro.br/repo/2uYSSDn2V2TM4qegQMVAyVC9MkvCBYoyHhbaQrxmH587/0/AFB37E8982591B18DBDE9E8217274DFABCEAA945.mft Manifest number: 01A5 Signing time: Mon 03 Nov 2025 03:31:50 +0000 Manifest this update: Mon 03 Nov 2025 03:26:50 +0000 Manifest next update: Tue 04 Nov 2025 05:00:50 +0000 Files and hashes: 1: 323830343a333163303a3a2f33322d3438203d3e20323632343338.roa (hash: Nqck8WgvQAKrcOZojIIg8caQwhZaHsLYU74VYSjovik=) 2: 3137372e35322e36342e302f32312d3234203d3e20323632343338.roa (hash: K8PQUgh01LzhRhJHkugvECyuCRfTqjC9/MVn46/IUms=) 3: AFB37E8982591B18DBDE9E8217274DFABCEAA945.crl (hash: UOamWqeUtjjqPk4YO79NP/nola8jtvCWbTPnpIyZ5Ps=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2uYSSDn2V2TM4qegQMVAyVC9MkvCBYoyHhbaQrxmH587/0/AFB37E8982591B18DBDE9E8217274DFABCEAA945.crl rsync://rpki-repo.registro.br/repo/2uYSSDn2V2TM4qegQMVAyVC9MkvCBYoyHhbaQrxmH587/0/AFB37E8982591B18DBDE9E8217274DFABCEAA945.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFB37E8982591B18DBDE9E8217274DFABCEAA945.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 05:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: c9:ef:58:0a:10:9b:72:de:4d:54:24:5d:51:81:f1:ca:28:55:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFB37E8982591B18DBDE9E8217274DFABCEAA945 Validity Not Before: Nov 3 03:26:50 2025 GMT Not After : Nov 4 05:00:50 2025 GMT Subject: CN=605B3B5A97F626A5A4B5920131825DC6626A8ACF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:01:13:c0:6e:b3:2d:c2:76:9f:8c:65:7b:5e: 86:b9:14:b0:10:76:60:77:78:b5:22:cf:4b:96:0e: ea:32:60:dc:8c:a1:68:51:27:2a:07:ce:ca:a5:04: 8e:01:ed:6a:e0:19:97:9a:8e:30:92:84:8c:90:22: 60:19:d4:6e:31:b7:84:09:c1:d8:5c:9a:2c:ec:a1: 47:c2:19:65:99:18:fa:ce:0f:f6:7f:c8:2a:2a:b7: df:83:42:36:6d:54:d6:4c:59:51:d3:dc:73:2d:7f: 0e:d3:06:bf:4e:93:72:53:cf:20:dd:56:c4:d2:c8: c4:96:16:2a:cc:9c:d6:ae:2a:dc:8d:c6:f8:a5:af: dc:99:8a:f2:2b:37:cf:25:7c:5d:94:06:c9:a1:a1: 08:89:b2:12:8c:3c:2f:d5:ff:39:1d:d5:d9:e3:f9: de:cc:f2:5d:5f:25:4a:3b:d9:90:83:35:21:93:b7: 26:30:a0:b0:21:8a:ce:8d:8c:dd:be:bd:c1:d4:a7: 3c:02:d3:b7:d3:e1:8a:05:8a:33:2e:a2:ad:c3:37: 78:95:ed:21:a4:70:56:36:5b:95:a6:52:24:80:67: 15:2e:e4:e8:6b:b0:7a:f6:cf:71:1b:59:20:53:3c: 58:dc:6c:66:6c:5f:16:e8:94:d9:29:45:7c:21:4e: e7:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:5B:3B:5A:97:F6:26:A5:A4:B5:92:01:31:82:5D:C6:62:6A:8A:CF X509v3 Authority Key Identifier: keyid:AF:B3:7E:89:82:59:1B:18:DB:DE:9E:82:17:27:4D:FA:BC:EA:A9:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2uYSSDn2V2TM4qegQMVAyVC9MkvCBYoyHhbaQrxmH587/0/AFB37E8982591B18DBDE9E8217274DFABCEAA945.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFB37E8982591B18DBDE9E8217274DFABCEAA945.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2uYSSDn2V2TM4qegQMVAyVC9MkvCBYoyHhbaQrxmH587/0/AFB37E8982591B18DBDE9E8217274DFABCEAA945.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:98:53:fd:9b:f9:3b:d1:de:b3:92:db:49:a6:c5:34:58:d8: 71:4a:15:f4:e1:fe:89:99:02:41:62:1c:ac:e9:6c:f2:de:e4: fc:54:7a:9b:9b:aa:60:51:64:88:3a:96:c2:f4:d6:e5:2f:35: 53:27:d9:1e:0d:bd:89:e0:3e:93:c8:c5:bd:f9:8a:4d:32:6c: 0b:e9:d9:2e:85:1d:07:93:af:6e:45:a7:bc:47:02:b0:53:b9: 40:0a:f9:34:b9:0d:18:ec:e9:4a:4b:77:45:d1:49:99:6d:72: 0d:79:dd:2e:2c:b5:ec:26:48:00:8a:a3:f9:dc:52:72:bd:ce: 7b:a0:12:0a:e7:4f:4b:70:16:1b:47:db:d6:bd:ac:26:ee:a8: 5a:60:fc:b8:4f:a5:cb:4a:c5:68:79:dd:44:8a:61:ef:ce:2a: 03:b1:31:fc:c6:94:43:67:14:fd:32:51:9f:a9:53:af:93:81: 8b:eb:f4:26:6c:75:ae:ee:a3:c4:32:1f:33:c5:d4:ac:34:43: ee:5d:10:62:a1:ea:4b:7b:75:90:14:f0:80:59:71:0c:b2:c0: 86:4d:64:b8:ce:fd:63:16:8c:8a:a2:88:86:bd:03:e9:fc:e3: c5:a0:b6:d4:95:75:9c:c5:e5:15:85:68:0b:32:12:1f:3d:fb: f4:7a:87:37 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUAMnvWAoQm3LeTVQkXVGB8cooVeYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZCMzdFODk4MjU5MUIxOERCREU5RTgyMTcyNzRERkFC Q0VBQTk0NTAeFw0yNTExMDMwMzI2NTBaFw0yNTExMDQwNTAwNTBaMDMxMTAvBgNV BAMTKDYwNUIzQjVBOTdGNjI2QTVBNEI1OTIwMTMxODI1REM2NjI2QThBQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXARPAbrMtwnafjGV7Xoa5FLAQ dmB3eLUiz0uWDuoyYNyMoWhRJyoHzsqlBI4B7WrgGZeajjCShIyQImAZ1G4xt4QJ wdhcmizsoUfCGWWZGPrOD/Z/yCoqt9+DQjZtVNZMWVHT3HMtfw7TBr9Ok3JTzyDd VsTSyMSWFirMnNauKtyNxvilr9yZivIrN88lfF2UBsmhoQiJshKMPC/V/zkd1dnj +d7M8l1fJUo72ZCDNSGTtyYwoLAhis6NjN2+vcHUpzwC07fT4YoFijMuoq3DN3iV 7SGkcFY2W5WmUiSAZxUu5OhrsHr2z3EbWSBTPFjcbGZsXxbolNkpRXwhTud1AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUYFs7Wpf2JqWktZIBMYJdxmJqis8wHwYDVR0j BBgwFoAUr7N+iYJZGxjb3p6CFydN+rzqqUUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMnVZU1NEbjJWMlRNNHFlZ1FNVkF5VkM5TWt2Q0JZb3lIaGJhUXJ4bUg1 ODcvMC9BRkIzN0U4OTgyNTkxQjE4REJERTlFODIxNzI3NERGQUJDRUFBOTQ1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FGQjM3RTg5ODI1OTFCMThE QkRFOUU4MjE3Mjc0REZBQkNFQUE5NDUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MnVZU1NEbjJWMlRNNHFlZ1FNVkF5VkM5TWt2Q0JZb3lIaGJhUXJ4bUg1ODcvMC9B RkIzN0U4OTgyNTkxQjE4REJERTlFODIxNzI3NERGQUJDRUFBOTQ1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEALJhT/Zv5O9Hes5LbSabFNFjYcUoV9OH+iZkCQWIcrOls8t7k/FR6m5uqYFFk iDqWwvTW5S81UyfZHg29ieA+k8jFvfmKTTJsC+nZLoUdB5OvbkWnvEcCsFO5QAr5 NLkNGOzpSkt3RdFJmW1yDXndLiy17CZIAIqj+dxScr3Oe6ASCudPS3AWG0fb1r2s Ju6oWmD8uE+ly0rFaHndRIph784qA7Ex/MaUQ2cU/TJRn6lTr5OBi+v0Jmx1ru6j xDIfM8XUrDRD7l0QYqHqS3t1kBTwgFlxDLLAhk1kuM79YxaMiqKIhr0D6fzjxaC2 1JV1nMXlFYVoCzISHz379HqHNw== -----END CERTIFICATE-----Generated at Mon Nov 3 05:41:19 2025 by rpki-client