$ rpki-client -vvf rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.mft File: AFC529FB243B7780A20B27A2C4E73DAF65C25021.mft (raw, json) Hash identifier: dLSM7OyRy6VYwJC0ldlZXVyRi65J/fFuzUlKyEkcMRI= Subject key identifier: 93:83:FF:F4:D7:53:E6:39:D1:88:87:61:CE:EC:86:DD:63:3C:A9:45 Authority key identifier: AF:C5:29:FB:24:3B:77:80:A2:0B:27:A2:C4:E7:3D:AF:65:C2:50:21 Certificate issuer: /CN=AFC529FB243B7780A20B27A2C4E73DAF65C25021 Certificate serial: 434D3EFBED41F47E5478517627A80BC40DF5A1A7 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.cer Subject info access: rsync://rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.mft Manifest number: 02C5 Signing time: Thu 18 Sep 2025 03:10:02 +0000 Manifest this update: Thu 18 Sep 2025 03:05:02 +0000 Manifest next update: Fri 19 Sep 2025 06:18:02 +0000 Files and hashes: 1: 34352e3233362e3135362e302f32322d3232203d3e20323638323534.roa (hash: XrgPqt2d+yXrgA5qVsA3hVOyOYJP6pNSPVOYcSw37As=) 2: 34352e3233362e3135382e302f32342d3234203d3e20323638323534.roa (hash: JHU7hFLVcz7KCri5GGmgpJSrExwyJApMd1LcVi/3ahc=) 3: 34352e3233362e3135372e302f32342d3234203d3e20323638323534.roa (hash: G+9fnKDKYzXcNVDiQbyVgNQLvfSyrAWnEylFjOb1cKM=) 4: 34352e3233362e3135362e302f32342d3234203d3e20323638323534.roa (hash: g+h7ZeJQoiwltb4pTrWxNjM0uMiKUgQuoMSR90spDQE=) 5: AFC529FB243B7780A20B27A2C4E73DAF65C25021.crl (hash: ZL3sFRyPAC+FGtIoDjwLFlr6oKtGSMSqp5aG/g+tnps=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.crl rsync://rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 19 Sep 2025 06:18:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:4d:3e:fb:ed:41:f4:7e:54:78:51:76:27:a8:0b:c4:0d:f5:a1:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFC529FB243B7780A20B27A2C4E73DAF65C25021 Validity Not Before: Sep 18 03:05:02 2025 GMT Not After : Sep 19 06:18:02 2025 GMT Subject: CN=9383FFF4D753E639D1888761CEEC86DD633CA945 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:af:91:ce:4b:f1:dc:13:f3:6e:23:c7:9c:38: 6d:f3:b1:9f:1c:e5:d1:cd:90:6f:e1:78:3f:48:8f: fc:23:81:f3:06:f3:3d:fa:a0:ba:00:c1:11:6c:65: 33:33:4a:3a:45:df:9c:1e:68:43:67:9f:8d:c7:35: 10:22:0b:74:9b:32:93:df:51:3f:9d:a5:8b:04:59: b5:ec:c8:04:14:cd:01:79:25:92:01:2e:f1:28:f3: 4f:c0:58:35:48:fb:9c:6e:5f:0c:c5:1b:64:85:39: 16:bc:0e:ec:8e:ff:7e:0f:0c:70:46:56:87:31:a8: 5a:e5:ae:46:63:0d:76:37:bf:6b:ac:2f:65:c3:66: 50:d3:7c:9e:8a:da:63:73:dc:93:0c:5f:37:90:f6: eb:46:e8:43:6d:07:07:de:40:98:32:c5:ff:81:20: df:27:c0:3e:52:ac:d5:b3:f7:25:8a:5e:2e:a2:4e: cb:5f:d3:1a:78:5f:86:99:7f:bc:26:fd:af:33:47: 33:54:70:ce:07:a9:2e:60:bc:aa:e5:e8:2f:5a:5c: 13:23:83:2b:23:7e:fb:39:f1:28:a7:e9:b6:6b:fd: 7e:17:45:f6:78:a0:f1:69:4b:ca:47:1f:61:24:76: 09:b3:56:6f:72:f4:b6:83:5c:78:8a:07:1a:63:64: 5e:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:83:FF:F4:D7:53:E6:39:D1:88:87:61:CE:EC:86:DD:63:3C:A9:45 X509v3 Authority Key Identifier: keyid:AF:C5:29:FB:24:3B:77:80:A2:0B:27:A2:C4:E7:3D:AF:65:C2:50:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:9b:27:89:99:d1:be:5b:a9:6e:07:26:71:05:56:94:3b:7e: ae:83:1e:73:cd:97:8b:3d:de:ed:b8:d1:61:66:1c:30:26:36: ba:8d:f2:6c:c0:cf:c7:a5:51:e0:3f:37:29:29:a7:24:bd:92: 4b:fb:d5:26:c7:41:39:dd:87:cd:b1:42:e3:22:b3:0e:01:44: a7:2e:7d:42:e7:a2:8a:a6:5e:e0:e3:ec:90:f3:79:f7:d7:3b: 89:36:19:bf:12:b2:e3:7c:65:85:02:a6:d1:e7:8e:9c:8e:3c: 72:81:30:47:14:95:fe:fe:1f:da:79:7f:88:ef:c7:85:5d:c7: ad:ec:c6:dd:8c:4d:9b:f7:e0:a2:98:12:2f:26:e1:ef:93:fd: f7:a0:a8:4f:64:c8:bc:d2:fa:ed:34:f9:13:fa:4c:d6:1c:60: 76:e1:3d:32:6d:2f:c6:0b:f3:2d:94:c5:cd:4f:06:02:05:9f: 98:2a:5b:de:bb:a2:6c:55:b8:08:03:75:be:3c:2c:72:7c:90: 78:79:24:da:8c:63:21:f3:48:03:81:09:62:b3:9d:74:54:12: 42:df:09:b5:5b:11:46:f6:10:f7:84:6c:ed:b9:ef:7c:a2:a4: bd:7b:a9:bb:58:21:bd:d3:20:53:9e:41:dc:b3:54:e0:d4:00: ed:2d:19:a2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUQ00+++1B9H5UeFF2J6gLxA31oacwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZDNTI5RkIyNDNCNzc4MEEyMEIyN0EyQzRFNzNEQUY2 NUMyNTAyMTAeFw0yNTA5MTgwMzA1MDJaFw0yNTA5MTkwNjE4MDJaMDMxMTAvBgNV BAMTKDkzODNGRkY0RDc1M0U2MzlEMTg4ODc2MUNFRUM4NkRENjMzQ0E5NDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYr5HOS/HcE/NuI8ecOG3zsZ8c 5dHNkG/heD9Ij/wjgfMG8z36oLoAwRFsZTMzSjpF35weaENnn43HNRAiC3SbMpPf UT+dpYsEWbXsyAQUzQF5JZIBLvEo80/AWDVI+5xuXwzFG2SFORa8DuyO/34PDHBG VocxqFrlrkZjDXY3v2usL2XDZlDTfJ6K2mNz3JMMXzeQ9utG6ENtBwfeQJgyxf+B IN8nwD5SrNWz9yWKXi6iTstf0xp4X4aZf7wm/a8zRzNUcM4HqS5gvKrl6C9aXBMj gysjfvs58Sin6bZr/X4XRfZ4oPFpS8pHH2EkdgmzVm9y9LaDXHiKBxpjZF59AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUk4P/9NdT5jnRiIdhzuyG3WM8qUUwHwYDVR0j BBgwFoAUr8Up+yQ7d4CiCyeixOc9r2XCUCEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQTNodHpDelJQekxuWUY3cTl5eDdBZEJZM1lHTm9jUUR3aHo3RFdZWjJQ UUIvMS9BRkM1MjlGQjI0M0I3NzgwQTIwQjI3QTJDNEU3M0RBRjY1QzI1MDIxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FGQzUyOUZCMjQzQjc3ODBB MjBCMjdBMkM0RTczREFGNjVDMjUwMjEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QTNodHpDelJQekxuWUY3cTl5eDdBZEJZM1lHTm9jUUR3aHo3RFdZWjJQUUIvMS9B RkM1MjlGQjI0M0I3NzgwQTIwQjI3QTJDNEU3M0RBRjY1QzI1MDIxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKJsniZnRvlupbgcmcQVWlDt+roMec82Xiz3e7bjRYWYcMCY2uo3ybMDPx6VR 4D83KSmnJL2SS/vVJsdBOd2HzbFC4yKzDgFEpy59QueiiqZe4OPskPN599c7iTYZ vxKy43xlhQKm0eeOnI48coEwRxSV/v4f2nl/iO/HhV3HrezG3YxNm/fgopgSLybh 75P996CoT2TIvNL67TT5E/pM1hxgduE9Mm0vxgvzLZTFzU8GAgWfmCpb3ruibFW4 CAN1vjwscnyQeHkk2oxjIfNIA4EJYrOddFQSQt8JtVsRRvYQ94Rs7bnvfKKkvXup u1ghvdMgU55B3LNU4NQA7S0Zog== -----END CERTIFICATE-----Generated at Thu Sep 18 19:13:28 2025 by rpki-client