$ rpki-client -vvf rpki-repo.registro.br/repo/3W2cSkQQyqsAfuR6694VZF2EBd7WPhkDMcveD3tdyzfb/0/AF4A2DB89E34555B8683D2189961132177B11C81.mft File: AF4A2DB89E34555B8683D2189961132177B11C81.mft (raw, json) Hash identifier: 22GC9KCFz3CC9Uu2xDOjZfDyg1FvaUY8vrj/oTGNlLE= Subject key identifier: AE:2A:3B:DE:4B:F4:F7:1C:25:1E:9A:9A:56:2F:17:17:6D:54:DA:AD Authority key identifier: AF:4A:2D:B8:9E:34:55:5B:86:83:D2:18:99:61:13:21:77:B1:1C:81 Certificate issuer: /CN=AF4A2DB89E34555B8683D2189961132177B11C81 Certificate serial: 1D25A2B5696F9B653D26C4AA7A6E09A7E2C4E992 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF4A2DB89E34555B8683D2189961132177B11C81.cer Subject info access: rsync://rpki-repo.registro.br/repo/3W2cSkQQyqsAfuR6694VZF2EBd7WPhkDMcveD3tdyzfb/0/AF4A2DB89E34555B8683D2189961132177B11C81.mft Manifest number: 8C Signing time: Wed 20 Aug 2025 01:07:45 +0000 Manifest this update: Wed 20 Aug 2025 01:02:45 +0000 Manifest next update: Thu 21 Aug 2025 04:17:45 +0000 Files and hashes: 1: AF4A2DB89E34555B8683D2189961132177B11C81.crl (hash: TFReyLuhx1ZXJx/FIeTqyHKtu+B3WJmQpw0aJU2Mj6w=) 2: 3133382e33362e3131362e302f32322d3332203d3e20323634353737.roa (hash: Db8sToV5ujds5q1beOvfPPCXTGcHwubMfh/VEsxLVhg=) 3: 323830343a323164383a3a2f33322d313238203d3e20323634353737.roa (hash: QNBOlmI1R5nTlUtL4Q8+avShqQstAd9Eh6Nq2rgyZcc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3W2cSkQQyqsAfuR6694VZF2EBd7WPhkDMcveD3tdyzfb/0/AF4A2DB89E34555B8683D2189961132177B11C81.crl rsync://rpki-repo.registro.br/repo/3W2cSkQQyqsAfuR6694VZF2EBd7WPhkDMcveD3tdyzfb/0/AF4A2DB89E34555B8683D2189961132177B11C81.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF4A2DB89E34555B8683D2189961132177B11C81.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 21 Aug 2025 04:17:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:25:a2:b5:69:6f:9b:65:3d:26:c4:aa:7a:6e:09:a7:e2:c4:e9:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF4A2DB89E34555B8683D2189961132177B11C81 Validity Not Before: Aug 20 01:02:45 2025 GMT Not After : Aug 21 04:17:45 2025 GMT Subject: CN=AE2A3BDE4BF4F71C251E9A9A562F17176D54DAAD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:48:5c:69:c6:ae:22:8c:38:65:80:37:e9:ad: e0:78:40:9c:86:37:b1:22:fc:5b:f9:b8:66:8e:a0: 14:8f:8a:38:14:24:b5:ce:2f:f4:21:1e:8d:32:05: e3:19:7d:90:d6:f6:a5:bf:88:6a:a7:64:25:46:82: ed:6e:90:47:4c:e0:cc:92:1e:09:bf:c7:07:27:66: a1:3e:c8:4d:c2:ee:60:ba:c3:eb:7e:f9:90:2e:2c: 44:fd:ed:70:dd:4d:fd:c3:cc:8e:5b:36:b6:20:22: 66:4a:f9:c6:ae:0b:ce:5f:ea:a6:26:05:f8:5f:60: d5:a4:ea:8b:99:48:c4:88:65:44:84:82:e2:c8:38: f3:02:80:3c:55:99:b5:a2:c3:2a:68:20:02:18:6d: 52:28:0f:32:fa:2f:c9:80:3b:4f:37:ed:a8:52:c3: 51:19:8f:c2:5e:53:6a:d6:94:53:35:e1:77:76:26: 92:f3:54:6e:65:14:0f:cf:d9:e7:ac:c1:c6:56:7c: 63:34:92:59:26:a3:9c:ab:a3:bd:1b:6b:5e:e0:ec: a2:cd:0a:29:d3:0a:5c:64:a6:0e:f1:90:01:c2:fa: 58:47:3c:ef:c8:03:0b:93:c3:cf:5b:4f:be:31:bd: 6b:c4:a9:f2:d3:a9:4c:33:e3:77:3f:ac:80:b6:ce: 5a:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:2A:3B:DE:4B:F4:F7:1C:25:1E:9A:9A:56:2F:17:17:6D:54:DA:AD X509v3 Authority Key Identifier: keyid:AF:4A:2D:B8:9E:34:55:5B:86:83:D2:18:99:61:13:21:77:B1:1C:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3W2cSkQQyqsAfuR6694VZF2EBd7WPhkDMcveD3tdyzfb/0/AF4A2DB89E34555B8683D2189961132177B11C81.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF4A2DB89E34555B8683D2189961132177B11C81.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3W2cSkQQyqsAfuR6694VZF2EBd7WPhkDMcveD3tdyzfb/0/AF4A2DB89E34555B8683D2189961132177B11C81.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e8:10:5c:03:61:b1:b2:65:23:85:38:35:0d:9a:43:13:42:ca: 44:4c:31:a7:9f:1f:cc:a6:7c:31:49:3a:b4:ab:9a:88:40:57: 30:23:57:cd:23:01:45:7b:fa:aa:15:31:8d:2d:1b:68:a1:aa: 20:b7:0e:31:7a:2a:04:41:da:14:6a:80:ee:49:08:2d:95:93: 3a:8a:33:13:d1:0e:3f:f5:81:b3:9b:03:69:14:90:c3:e0:80: f0:d6:75:59:8a:0b:29:67:6b:cd:5d:77:6e:bb:e5:0a:88:d8: c7:f1:d4:97:68:32:be:94:03:cd:25:d1:95:52:b8:08:51:e0: a6:e9:e2:57:00:82:50:0f:ae:ed:02:84:17:3c:c0:05:b4:e5: 91:af:7b:f5:86:02:a0:3f:1f:65:e5:c1:cf:1e:fc:67:72:61: 70:13:b1:7a:67:fe:fd:58:de:9d:aa:3b:7f:0d:ee:b1:35:57: e3:38:7f:ed:52:2b:c9:4f:0e:7b:9f:c7:3a:f6:8e:41:05:11: 12:f4:12:aa:d2:d8:33:db:81:e0:98:7f:13:ab:f7:38:13:74: d2:80:bd:03:85:04:16:da:17:88:d8:65:f8:4f:55:8f:b9:3f: 93:6f:76:07:81:01:ab:2b:77:23:23:91:47:ae:97:a0:96:fd: ee:da:8b:18 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUHSWitWlvm2U9JsSqem4Jp+LE6ZIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY0QTJEQjg5RTM0NTU1Qjg2ODNEMjE4OTk2MTEzMjE3 N0IxMUM4MTAeFw0yNTA4MjAwMTAyNDVaFw0yNTA4MjEwNDE3NDVaMDMxMTAvBgNV BAMTKEFFMkEzQkRFNEJGNEY3MUMyNTFFOUE5QTU2MkYxNzE3NkQ1NERBQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaSFxpxq4ijDhlgDfpreB4QJyG N7Ei/Fv5uGaOoBSPijgUJLXOL/QhHo0yBeMZfZDW9qW/iGqnZCVGgu1ukEdM4MyS Hgm/xwcnZqE+yE3C7mC6w+t++ZAuLET97XDdTf3DzI5bNrYgImZK+cauC85f6qYm BfhfYNWk6ouZSMSIZUSEguLIOPMCgDxVmbWiwypoIAIYbVIoDzL6L8mAO0837ahS w1EZj8JeU2rWlFM14Xd2JpLzVG5lFA/P2eeswcZWfGM0klkmo5yro70ba17g7KLN CinTClxkpg7xkAHC+lhHPO/IAwuTw89bT74xvWvEqfLTqUwz43c/rIC2zlrHAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUrio73kv09xwlHpqaVi8XF21U2q0wHwYDVR0j BBgwFoAUr0otuJ40VVuGg9IYmWETIXexHIEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM1cyY1NrUVF5cXNBZnVSNjY5NFZaRjJFQmQ3V1Boa0RNY3ZlRDN0ZHl6 ZmIvMC9BRjRBMkRCODlFMzQ1NTVCODY4M0QyMTg5OTYxMTMyMTc3QjExQzgxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FGNEEyREI4OUUzNDU1NUI4 NjgzRDIxODk5NjExMzIxNzdCMTFDODEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M1cyY1NrUVF5cXNBZnVSNjY5NFZaRjJFQmQ3V1Boa0RNY3ZlRDN0ZHl6ZmIvMC9B RjRBMkRCODlFMzQ1NTVCODY4M0QyMTg5OTYxMTMyMTc3QjExQzgxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEA6BBcA2GxsmUjhTg1DZpDE0LKREwxp58fzKZ8MUk6tKuaiEBXMCNXzSMBRXv6 qhUxjS0baKGqILcOMXoqBEHaFGqA7kkILZWTOoozE9EOP/WBs5sDaRSQw+CA8NZ1 WYoLKWdrzV13brvlCojYx/HUl2gyvpQDzSXRlVK4CFHgpuniVwCCUA+u7QKEFzzA BbTlka979YYCoD8fZeXBzx78Z3JhcBOxemf+/Vjenao7fw3usTVX4zh/7VIryU8O e5/HOvaOQQUREvQSqtLYM9uB4Jh/E6v3OBN00oC9A4UEFtoXiNhl+E9Vj7k/k292 B4EBqyt3IyORR66XoJb97tqLGA== -----END CERTIFICATE-----Generated at Wed Aug 20 18:29:22 2025 by rpki-client