$ rpki-client -vvf rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.mft File: AFC529FB243B7780A20B27A2C4E73DAF65C25021.mft (raw, json) Hash identifier: 7/2h//gDGCvy1l8XBEzDlM5isuqeavRa+9b3NCA0Ew0= Subject key identifier: C6:3D:21:65:D3:56:28:F3:8F:1B:E8:52:85:8E:B9:1E:45:B6:63:99 Authority key identifier: AF:C5:29:FB:24:3B:77:80:A2:0B:27:A2:C4:E7:3D:AF:65:C2:50:21 Certificate issuer: /CN=AFC529FB243B7780A20B27A2C4E73DAF65C25021 Certificate serial: 72A3E7A2EAB876C393A280FA09FC5AEEC8A5C574 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.cer Subject info access: rsync://rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.mft Manifest number: 0302 Signing time: Mon 03 Nov 2025 00:00:03 +0000 Manifest this update: Sun 02 Nov 2025 23:55:03 +0000 Manifest next update: Tue 04 Nov 2025 03:59:03 +0000 Files and hashes: 1: 34352e3233362e3135362e302f32322d3232203d3e20323638323534.roa (hash: XrgPqt2d+yXrgA5qVsA3hVOyOYJP6pNSPVOYcSw37As=) 2: 34352e3233362e3135362e302f32342d3234203d3e20323638323534.roa (hash: g+h7ZeJQoiwltb4pTrWxNjM0uMiKUgQuoMSR90spDQE=) 3: AFC529FB243B7780A20B27A2C4E73DAF65C25021.crl (hash: bQ4OvEANeUukoO9i+OfcJZ8OWhTPI4CWd7FoQFdGbjs=) 4: 34352e3233362e3135382e302f32342d3234203d3e20323638323534.roa (hash: JHU7hFLVcz7KCri5GGmgpJSrExwyJApMd1LcVi/3ahc=) 5: 34352e3233362e3135372e302f32342d3234203d3e20323638323534.roa (hash: G+9fnKDKYzXcNVDiQbyVgNQLvfSyrAWnEylFjOb1cKM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.crl rsync://rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 03:59:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:a3:e7:a2:ea:b8:76:c3:93:a2:80:fa:09:fc:5a:ee:c8:a5:c5:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFC529FB243B7780A20B27A2C4E73DAF65C25021 Validity Not Before: Nov 2 23:55:03 2025 GMT Not After : Nov 4 03:59:03 2025 GMT Subject: CN=C63D2165D35628F38F1BE852858EB91E45B66399 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:01:66:c0:59:e5:f3:85:fa:b4:6c:44:8a:bc: 53:0f:8d:4e:ca:af:ad:18:ba:ae:6d:15:0a:4e:0a: fd:b5:70:c9:da:b5:12:b2:a6:97:65:aa:2a:67:99: 5d:01:f4:83:c5:99:15:c7:c1:12:82:15:75:88:d8: 62:f6:45:ec:dd:05:cb:21:18:ba:84:d9:65:b1:f6: 8f:c6:a6:fa:ca:d4:ca:18:7d:56:be:72:2a:67:08: 5c:3d:78:3a:56:33:bf:17:95:0f:b8:40:b8:27:12: cb:c5:58:51:e1:cf:28:ef:f0:ee:87:a5:00:c4:8e: 8b:01:3f:89:2d:c1:ce:db:b1:78:38:d5:93:c3:11: 37:c5:d6:b1:4d:5b:be:2b:d8:10:67:56:72:23:1d: d2:d8:14:c3:57:77:68:2d:b3:47:37:c3:f6:c1:db: 71:24:d6:70:c0:83:61:ff:91:47:e0:05:60:14:f4: a8:34:4e:f7:f9:ae:97:e1:b5:b7:e9:0f:f7:00:b0: eb:d5:00:74:ea:26:59:26:39:7d:23:4c:61:bc:0a: 9e:ae:2d:65:98:a2:14:e5:78:37:55:2e:24:4c:33: 99:a0:4e:43:95:d4:9b:fb:b8:6f:74:78:a7:75:7c: 61:ad:f9:ac:66:06:9c:3c:9d:0a:d1:6b:d4:dd:d2: 1d:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:3D:21:65:D3:56:28:F3:8F:1B:E8:52:85:8E:B9:1E:45:B6:63:99 X509v3 Authority Key Identifier: keyid:AF:C5:29:FB:24:3B:77:80:A2:0B:27:A2:C4:E7:3D:AF:65:C2:50:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:53:75:2a:45:53:89:cb:2d:83:49:0e:38:f3:fb:c4:9e:2a: 2e:c4:6b:8b:ff:7e:06:08:94:b5:5f:de:5c:02:80:fc:77:aa: 42:01:39:dc:f4:a2:89:e2:8b:2b:e4:7f:b2:56:97:50:85:ca: 93:13:d0:fc:d0:b2:b2:42:67:0d:3f:91:94:83:2e:36:ab:b7: 75:a3:e6:a4:6b:83:d5:bf:25:3b:7b:09:39:33:b1:8e:4a:15: 33:a6:3a:71:b9:93:07:ea:03:06:a7:6e:cf:b5:a7:ed:0a:bf: 36:28:98:7e:24:f9:75:80:4e:3a:ed:d2:ea:12:8a:75:4c:ed: e2:71:86:fe:55:a5:5e:d6:7a:a7:ba:6a:6c:4a:7c:a0:9e:7b: 1a:cf:9a:9d:70:67:03:c4:f2:cc:ad:4f:68:0e:db:19:48:bc: f3:d8:39:1a:71:77:a9:79:24:91:d9:a9:25:60:b3:77:c7:e7: f6:b0:9d:8b:8b:13:ab:bb:58:07:bb:61:85:70:44:55:8f:66: 1c:e6:04:c6:3e:8d:f7:52:19:dd:81:10:b4:1e:ca:b8:5d:12: 00:b2:d6:06:db:2f:4c:aa:b9:d5:96:ac:c4:0a:8d:7c:30:d7: 21:dc:47:36:25:7b:11:38:5a:5f:44:44:e4:e2:93:f4:54:75: 81:81:95:7e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUcqPnouq4dsOTooD6Cfxa7silxXQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZDNTI5RkIyNDNCNzc4MEEyMEIyN0EyQzRFNzNEQUY2 NUMyNTAyMTAeFw0yNTExMDIyMzU1MDNaFw0yNTExMDQwMzU5MDNaMDMxMTAvBgNV BAMTKEM2M0QyMTY1RDM1NjI4RjM4RjFCRTg1Mjg1OEVCOTFFNDVCNjYzOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdAWbAWeXzhfq0bESKvFMPjU7K r60Yuq5tFQpOCv21cMnatRKyppdlqipnmV0B9IPFmRXHwRKCFXWI2GL2RezdBcsh GLqE2WWx9o/GpvrK1MoYfVa+cipnCFw9eDpWM78XlQ+4QLgnEsvFWFHhzyjv8O6H pQDEjosBP4ktwc7bsXg41ZPDETfF1rFNW74r2BBnVnIjHdLYFMNXd2gts0c3w/bB 23Ek1nDAg2H/kUfgBWAU9Kg0Tvf5rpfhtbfpD/cAsOvVAHTqJlkmOX0jTGG8Cp6u LWWYohTleDdVLiRMM5mgTkOV1Jv7uG90eKd1fGGt+axmBpw8nQrRa9Td0h2HAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUxj0hZdNWKPOPG+hShY65HkW2Y5kwHwYDVR0j BBgwFoAUr8Up+yQ7d4CiCyeixOc9r2XCUCEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQTNodHpDelJQekxuWUY3cTl5eDdBZEJZM1lHTm9jUUR3aHo3RFdZWjJQ UUIvMS9BRkM1MjlGQjI0M0I3NzgwQTIwQjI3QTJDNEU3M0RBRjY1QzI1MDIxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FGQzUyOUZCMjQzQjc3ODBB MjBCMjdBMkM0RTczREFGNjVDMjUwMjEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QTNodHpDelJQekxuWUY3cTl5eDdBZEJZM1lHTm9jUUR3aHo3RFdZWjJQUUIvMS9B RkM1MjlGQjI0M0I3NzgwQTIwQjI3QTJDNEU3M0RBRjY1QzI1MDIxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAflN1KkVTicstg0kOOPP7xJ4qLsRri/9+BgiUtV/eXAKA/HeqQgE53PSiieKL K+R/slaXUIXKkxPQ/NCyskJnDT+RlIMuNqu3daPmpGuD1b8lO3sJOTOxjkoVM6Y6 cbmTB+oDBqduz7Wn7Qq/NiiYfiT5dYBOOu3S6hKKdUzt4nGG/lWlXtZ6p7pqbEp8 oJ57Gs+anXBnA8TyzK1PaA7bGUi889g5GnF3qXkkkdmpJWCzd8fn9rCdi4sTq7tY B7thhXBEVY9mHOYExj6N91IZ3YEQtB7KuF0SALLWBtsvTKq51ZasxAqNfDDXIdxH NiV7EThaX0RE5OKT9FR1gYGVfg== -----END CERTIFICATE-----Generated at Mon Nov 3 12:36:55 2025 by rpki-client