$ rpki-client -vvf rpki-repo.registro.br/repo/4oKDjTtuVfRxybQECZfMRov5Z6DpryF7MyQN17v2sZKk/0/AF709D487025EB90C014C7186CC0AEA341A27C3B.mft File: AF709D487025EB90C014C7186CC0AEA341A27C3B.mft (raw, json) Hash identifier: kuGJdWGU75SQ5Qap2eb959HgpKcGTb67H/Hwu4I3ino= Subject key identifier: 0B:EF:6F:21:50:A0:12:E3:44:15:02:E9:A6:C2:C1:93:BD:23:CE:D0 Authority key identifier: AF:70:9D:48:70:25:EB:90:C0:14:C7:18:6C:C0:AE:A3:41:A2:7C:3B Certificate issuer: /CN=AF709D487025EB90C014C7186CC0AEA341A27C3B Certificate serial: 3469F3B19830E453BEA4CE1D8E7E3FD7A6FEB986 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF709D487025EB90C014C7186CC0AEA341A27C3B.cer Subject info access: rsync://rpki-repo.registro.br/repo/4oKDjTtuVfRxybQECZfMRov5Z6DpryF7MyQN17v2sZKk/0/AF709D487025EB90C014C7186CC0AEA341A27C3B.mft Manifest number: 3E Signing time: Tue 04 Nov 2025 06:54:42 +0000 Manifest this update: Tue 04 Nov 2025 06:49:42 +0000 Manifest next update: Wed 05 Nov 2025 10:13:42 +0000 Files and hashes: 1: 3137372e3232312e3133362e302f32322d3234203d3e20323730373337.roa (hash: DlhDw1dzTc6ndQvekwKDgY9PvHeoaodotFzkhX2390Y=) 2: 323830343a373039633a3a2f33322d3438203d3e20323730373337.roa (hash: z3+jy+kvN0ec/CwA1jDFeo1POc5HGxkNptEzu9VsNXs=) 3: AF709D487025EB90C014C7186CC0AEA341A27C3B.crl (hash: cP02BA5vsOgrJZ2Xnb12ffxfMjXr88hjFufhOzzdc7Q=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4oKDjTtuVfRxybQECZfMRov5Z6DpryF7MyQN17v2sZKk/0/AF709D487025EB90C014C7186CC0AEA341A27C3B.crl rsync://rpki-repo.registro.br/repo/4oKDjTtuVfRxybQECZfMRov5Z6DpryF7MyQN17v2sZKk/0/AF709D487025EB90C014C7186CC0AEA341A27C3B.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF709D487025EB90C014C7186CC0AEA341A27C3B.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 10:13:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:69:f3:b1:98:30:e4:53:be:a4:ce:1d:8e:7e:3f:d7:a6:fe:b9:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF709D487025EB90C014C7186CC0AEA341A27C3B Validity Not Before: Nov 4 06:49:42 2025 GMT Not After : Nov 5 10:13:42 2025 GMT Subject: CN=0BEF6F2150A012E3441502E9A6C2C193BD23CED0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:dd:65:0e:e4:00:cf:db:17:06:0e:b8:df:9d: 50:74:7e:d0:1e:da:d0:52:b7:1e:de:14:cf:2b:ff: 08:07:61:bb:7a:e3:af:86:8b:6e:b4:84:1c:82:c0: 0a:75:26:31:02:8a:cf:fa:c8:f7:03:f2:5a:e8:37: 4a:f0:94:cc:5b:84:e8:b2:cd:0e:70:1e:a3:27:38: c9:8a:bd:b5:c4:21:50:5f:52:0c:9e:12:e4:7c:2c: 41:49:05:16:47:e3:8c:ba:ee:3c:64:b1:0b:5e:54: 16:2d:0a:4d:ce:87:cd:6a:59:1e:08:1b:45:bd:7f: 50:00:38:38:7f:27:a7:ce:6a:34:ad:39:2e:56:1d: 39:15:0a:c8:9e:b8:89:3e:8b:db:7c:8f:62:d9:d5: c3:23:27:88:93:20:fb:0a:bb:f4:01:df:c4:6d:7a: 89:fc:93:b7:35:53:04:bd:e8:93:85:9c:66:08:1e: f2:3b:4a:e7:2a:86:e9:d8:96:5e:df:f8:6f:d0:a9: 0a:b4:3f:e8:64:e5:a3:49:60:0d:7a:dd:e5:3a:78: 4a:7d:6a:9e:7a:fe:42:8a:ac:cf:33:3b:7e:a2:b7: c8:b4:02:fa:4c:e9:54:0f:dc:a1:99:e2:cc:c1:7e: 85:34:69:fe:7f:9d:1d:6c:5b:5e:06:77:ad:71:47: fe:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:EF:6F:21:50:A0:12:E3:44:15:02:E9:A6:C2:C1:93:BD:23:CE:D0 X509v3 Authority Key Identifier: keyid:AF:70:9D:48:70:25:EB:90:C0:14:C7:18:6C:C0:AE:A3:41:A2:7C:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4oKDjTtuVfRxybQECZfMRov5Z6DpryF7MyQN17v2sZKk/0/AF709D487025EB90C014C7186CC0AEA341A27C3B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF709D487025EB90C014C7186CC0AEA341A27C3B.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4oKDjTtuVfRxybQECZfMRov5Z6DpryF7MyQN17v2sZKk/0/AF709D487025EB90C014C7186CC0AEA341A27C3B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:51:53:74:ab:ca:ae:8a:fd:62:37:b8:83:a0:15:98:b3:a7: 09:2f:87:25:53:72:05:93:4e:5a:0c:dd:42:3d:24:92:b7:7e: 07:bd:96:92:1d:2c:e5:8d:fa:91:d9:4a:a6:b6:db:13:78:b3: 2c:ab:1d:89:5a:25:7b:4e:2f:b3:bb:98:bc:f9:6c:9b:32:4b: 26:1e:94:a5:0f:be:9a:7d:0c:96:8d:93:a6:9d:84:f2:99:01: a4:f6:1e:8b:68:a9:9b:e8:7e:63:10:25:d8:50:8c:09:57:60: fc:20:40:7d:c5:8f:b8:49:a9:bc:29:3f:57:c7:9d:9f:a6:16: 14:45:d5:76:eb:6c:a2:cd:f4:ac:b5:87:34:54:21:bc:d6:04: 3c:69:ba:17:07:80:c1:21:a0:e5:fe:d1:7e:4e:97:ed:a7:a7: c2:f9:e9:81:8b:b3:b2:3f:c9:21:0f:dc:08:94:08:f1:7b:e6: b6:87:27:22:2b:a9:a9:b9:aa:4a:15:57:2a:76:a3:0f:8d:a2: 4d:e0:ad:c3:ac:67:b4:4f:05:6c:58:cf:cc:26:17:4b:0e:11: cb:2f:d4:76:14:5f:cf:da:2a:b3:7b:fc:90:08:62:ae:03:8b: 2a:81:af:24:1d:04:81:1a:a7:8d:53:42:b3:ef:a4:aa:fb:c8: e6:cf:c1:d8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUNGnzsZgw5FO+pM4djn4/16b+uYYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY3MDlENDg3MDI1RUI5MEMwMTRDNzE4NkNDMEFFQTM0 MUEyN0MzQjAeFw0yNTExMDQwNjQ5NDJaFw0yNTExMDUxMDEzNDJaMDMxMTAvBgNV BAMTKDBCRUY2RjIxNTBBMDEyRTM0NDE1MDJFOUE2QzJDMTkzQkQyM0NFRDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+3WUO5ADP2xcGDrjfnVB0ftAe 2tBStx7eFM8r/wgHYbt646+Gi260hByCwAp1JjECis/6yPcD8lroN0rwlMxbhOiy zQ5wHqMnOMmKvbXEIVBfUgyeEuR8LEFJBRZH44y67jxksQteVBYtCk3Oh81qWR4I G0W9f1AAODh/J6fOajStOS5WHTkVCsieuIk+i9t8j2LZ1cMjJ4iTIPsKu/QB38Rt eon8k7c1UwS96JOFnGYIHvI7SucqhunYll7f+G/QqQq0P+hk5aNJYA163eU6eEp9 ap56/kKKrM8zO36it8i0AvpM6VQP3KGZ4szBfoU0af5/nR1sW14Gd61xR/4FAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUC+9vIVCgEuNEFQLppsLBk70jztAwHwYDVR0j BBgwFoAUr3CdSHAl65DAFMcYbMCuo0GifDswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNG9LRGpUdHVWZlJ4eWJRRUNaZk1Sb3Y1WjZEcHJ5RjdNeVFOMTd2MnNa S2svMC9BRjcwOUQ0ODcwMjVFQjkwQzAxNEM3MTg2Q0MwQUVBMzQxQTI3QzNCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FGNzA5RDQ4NzAyNUVCOTBD MDE0QzcxODZDQzBBRUEzNDFBMjdDM0IuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NG9LRGpUdHVWZlJ4eWJRRUNaZk1Sb3Y1WjZEcHJ5RjdNeVFOMTd2MnNaS2svMC9B RjcwOUQ0ODcwMjVFQjkwQzAxNEM3MTg2Q0MwQUVBMzQxQTI3QzNCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdlFTdKvKror9Yje4g6AVmLOnCS+HJVNyBZNOWgzdQj0kkrd+B72Wkh0s5Y36 kdlKprbbE3izLKsdiVole04vs7uYvPlsmzJLJh6UpQ++mn0Mlo2Tpp2E8pkBpPYe i2ipm+h+YxAl2FCMCVdg/CBAfcWPuEmpvCk/V8edn6YWFEXVdutsos30rLWHNFQh vNYEPGm6FweAwSGg5f7Rfk6X7aenwvnpgYuzsj/JIQ/cCJQI8XvmtocnIiupqbmq ShVXKnajD42iTeCtw6xntE8FbFjPzCYXSw4Ryy/UdhRfz9oqs3v8kAhirgOLKoGv JB0EgRqnjVNCs++kqvvI5s/B2A== -----END CERTIFICATE-----Generated at Tue Nov 4 10:05:45 2025 by rpki-client