$ rpki-client -vvf rpki-repo.registro.br/repo/7KpwKJjGy6R95EFPa7iQd6PJJyvpQQC9hxS2rZti1Bxg/1/AFCA87E4AD035B5E4CA0EDA1C4C042C69BFE91EC.mft File: AFCA87E4AD035B5E4CA0EDA1C4C042C69BFE91EC.mft (raw, json) Hash identifier: iYYtDJFTZcIo0ucA94IK3RiFTmCuWCbLUK2TmiV9jjc= Subject key identifier: D4:AD:0A:75:4F:AA:7B:2B:9D:39:93:DB:89:A6:1E:D3:E6:06:E4:C5 Authority key identifier: AF:CA:87:E4:AD:03:5B:5E:4C:A0:ED:A1:C4:C0:42:C6:9B:FE:91:EC Certificate issuer: /CN=AFCA87E4AD035B5E4CA0EDA1C4C042C69BFE91EC Certificate serial: 3973B468F695BE91BE96E3080C3EBF1484E79E35 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFCA87E4AD035B5E4CA0EDA1C4C042C69BFE91EC.cer Subject info access: rsync://rpki-repo.registro.br/repo/7KpwKJjGy6R95EFPa7iQd6PJJyvpQQC9hxS2rZti1Bxg/1/AFCA87E4AD035B5E4CA0EDA1C4C042C69BFE91EC.mft Manifest number: 0315 Signing time: Mon 03 Nov 2025 08:03:51 +0000 Manifest this update: Mon 03 Nov 2025 07:58:51 +0000 Manifest next update: Tue 04 Nov 2025 09:09:51 +0000 Files and hashes: 1: AFCA87E4AD035B5E4CA0EDA1C4C042C69BFE91EC.crl (hash: CtJN1DlgvoexQZhZcgX+sqKHvHONiRlYstegoV2z23A=) 2: 323830343a343363383a3a2f33322d3336203d3e20323637353839.roa (hash: 8Gs+UV6nO+bLlDoxgdD+eVl74rMk1Zi2fSdRQ1UAf1M=) 3: 34352e37302e3134382e302f32322d3234203d3e20323637353839.roa (hash: 2p6uFFtOxrFLgwvk+5zkCXG63pr08f9yEGYoLV1hAJY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7KpwKJjGy6R95EFPa7iQd6PJJyvpQQC9hxS2rZti1Bxg/1/AFCA87E4AD035B5E4CA0EDA1C4C042C69BFE91EC.crl rsync://rpki-repo.registro.br/repo/7KpwKJjGy6R95EFPa7iQd6PJJyvpQQC9hxS2rZti1Bxg/1/AFCA87E4AD035B5E4CA0EDA1C4C042C69BFE91EC.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFCA87E4AD035B5E4CA0EDA1C4C042C69BFE91EC.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 09:09:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:73:b4:68:f6:95:be:91:be:96:e3:08:0c:3e:bf:14:84:e7:9e:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFCA87E4AD035B5E4CA0EDA1C4C042C69BFE91EC Validity Not Before: Nov 3 07:58:51 2025 GMT Not After : Nov 4 09:09:51 2025 GMT Subject: CN=D4AD0A754FAA7B2B9D3993DB89A61ED3E606E4C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:2f:5a:3c:aa:bd:c3:3d:56:fc:2f:4f:7f:c4: 40:a0:25:45:80:06:d0:64:5f:95:d3:74:80:6a:1c: f8:bf:be:69:f9:6b:8d:99:8d:62:fb:bd:7b:6b:1d: da:58:6c:c6:0f:bf:b6:e3:af:13:8a:93:a8:29:41: b8:5c:d0:05:5d:5d:0a:7b:61:75:2b:9c:c2:55:46: bc:a4:33:36:e7:77:6f:14:99:d7:53:93:2a:08:38: de:19:be:ae:b8:0e:4a:c8:0b:cc:b9:f5:3e:53:d4: c1:0b:c7:c0:6c:93:a8:08:38:78:d9:82:70:8a:f8: 58:7f:17:92:d8:84:5f:0b:f8:a0:17:32:69:92:f8: 86:a7:aa:14:d7:50:b2:c6:5c:ca:49:5b:bc:86:d8: 7c:a6:d4:f3:9a:74:71:1c:b1:03:86:83:79:73:78: f2:b3:d9:78:dc:ed:e4:c0:f6:f7:5c:86:ba:e9:48: cc:c0:a7:19:32:a6:f4:f1:e4:42:63:6c:cd:36:11: 01:46:de:58:15:69:83:6d:a4:0b:e9:4b:bf:53:e0: 60:3d:c6:e4:52:76:a9:87:95:3a:a7:0f:f0:b8:a3: 7b:06:7e:c8:f2:d6:1d:37:ff:56:05:6b:9a:66:4e: 61:a8:e5:6c:d4:96:50:b8:29:88:1e:f0:b0:31:d3: d4:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:AD:0A:75:4F:AA:7B:2B:9D:39:93:DB:89:A6:1E:D3:E6:06:E4:C5 X509v3 Authority Key Identifier: keyid:AF:CA:87:E4:AD:03:5B:5E:4C:A0:ED:A1:C4:C0:42:C6:9B:FE:91:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7KpwKJjGy6R95EFPa7iQd6PJJyvpQQC9hxS2rZti1Bxg/1/AFCA87E4AD035B5E4CA0EDA1C4C042C69BFE91EC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFCA87E4AD035B5E4CA0EDA1C4C042C69BFE91EC.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7KpwKJjGy6R95EFPa7iQd6PJJyvpQQC9hxS2rZti1Bxg/1/AFCA87E4AD035B5E4CA0EDA1C4C042C69BFE91EC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:b4:7f:d0:83:c3:c9:8f:d5:81:bc:c1:61:75:26:dc:ac:ea: be:6d:26:e5:15:88:7a:10:e7:ac:da:c7:fd:7d:7a:28:29:05: 6e:d2:5f:35:d2:01:3c:4a:77:9c:fe:6c:05:bd:f1:86:14:60: b4:1d:ae:4d:85:28:6d:6e:db:31:9d:14:5a:69:4e:3f:6c:21: 06:a0:44:7d:71:fb:b0:b4:54:51:7e:51:20:5f:47:44:ac:20: 29:49:76:cb:20:43:99:6c:d3:78:b6:a4:69:88:bf:a1:71:76: fa:b9:ef:fd:04:f3:9d:e5:ef:4e:a9:90:c6:a1:8f:5a:57:30: f8:18:a5:21:12:2d:12:f2:fa:e9:df:24:38:df:74:e5:54:4d: 83:6f:2e:9f:b9:ad:6f:01:62:6e:31:30:b8:70:9f:6b:d0:0b: 9c:27:22:51:a8:27:78:9e:40:f9:0f:fc:58:8b:c6:71:eb:af: 5f:a6:cc:0c:94:d9:98:4a:51:1b:15:c0:c4:d7:51:10:18:e8: 80:dd:76:01:91:3d:86:b8:b2:69:de:b0:5a:69:b3:7e:2f:1e: 9e:0d:d3:0d:47:3a:43:51:a1:e7:b5:14:59:f9:d5:4d:9f:c6: 9e:17:2a:e4:9a:25:50:2b:6f:e0:4e:42:d3:ca:8b:a0:10:ff: 26:8c:34:81 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUOXO0aPaVvpG+luMIDD6/FITnnjUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZDQTg3RTRBRDAzNUI1RTRDQTBFREExQzRDMDQyQzY5 QkZFOTFFQzAeFw0yNTExMDMwNzU4NTFaFw0yNTExMDQwOTA5NTFaMDMxMTAvBgNV BAMTKEQ0QUQwQTc1NEZBQTdCMkI5RDM5OTNEQjg5QTYxRUQzRTYwNkU0QzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvL1o8qr3DPVb8L09/xECgJUWA BtBkX5XTdIBqHPi/vmn5a42ZjWL7vXtrHdpYbMYPv7bjrxOKk6gpQbhc0AVdXQp7 YXUrnMJVRrykMzbnd28UmddTkyoION4Zvq64DkrIC8y59T5T1MELx8Bsk6gIOHjZ gnCK+Fh/F5LYhF8L+KAXMmmS+IanqhTXULLGXMpJW7yG2Hym1POadHEcsQOGg3lz ePKz2Xjc7eTA9vdchrrpSMzApxkypvTx5EJjbM02EQFG3lgVaYNtpAvpS79T4GA9 xuRSdqmHlTqnD/C4o3sGfsjy1h03/1YFa5pmTmGo5WzUllC4KYge8LAx09RTAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU1K0KdU+qeyudOZPbiaYe0+YG5MUwHwYDVR0j BBgwFoAUr8qH5K0DW15MoO2hxMBCxpv+kewwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN0twd0tKakd5NlI5NUVGUGE3aVFkNlBKSnl2cFFRQzloeFMyclp0aTFC eGcvMS9BRkNBODdFNEFEMDM1QjVFNENBMEVEQTFDNEMwNDJDNjlCRkU5MUVDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FGQ0E4N0U0QUQwMzVCNUU0 Q0EwRURBMUM0QzA0MkM2OUJGRTkxRUMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v N0twd0tKakd5NlI5NUVGUGE3aVFkNlBKSnl2cFFRQzloeFMyclp0aTFCeGcvMS9B RkNBODdFNEFEMDM1QjVFNENBMEVEQTFDNEMwNDJDNjlCRkU5MUVDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlrR/0IPDyY/VgbzBYXUm3Kzqvm0m5RWIehDnrNrH/X16KCkFbtJfNdIBPEp3 nP5sBb3xhhRgtB2uTYUobW7bMZ0UWmlOP2whBqBEfXH7sLRUUX5RIF9HRKwgKUl2 yyBDmWzTeLakaYi/oXF2+rnv/QTzneXvTqmQxqGPWlcw+BilIRItEvL66d8kON90 5VRNg28un7mtbwFibjEwuHCfa9ALnCciUagneJ5A+Q/8WIvGceuvX6bMDJTZmEpR GxXAxNdREBjogN12AZE9hriyad6wWmmzfi8eng3TDUc6Q1Gh57UUWfnVTZ/Gnhcq 5JolUCtv4E5C08qLoBD/Jow0gQ== -----END CERTIFICATE-----Generated at Mon Nov 3 12:13:25 2025 by rpki-client