$ rpki-client -vvf rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.mft File: AFF600EA088C0C0C3160D75A952506A94913C8A8.mft (raw, json) Hash identifier: 9b37uuzNSlThfhZHhKREvZ1fRQZAETLwXPE0AV+8zCI= Subject key identifier: 76:B8:8F:78:86:66:C1:14:E7:33:9F:6A:5D:D2:D0:4D:7D:44:39:89 Authority key identifier: AF:F6:00:EA:08:8C:0C:0C:31:60:D7:5A:95:25:06:A9:49:13:C8:A8 Certificate issuer: /CN=AFF600EA088C0C0C3160D75A952506A94913C8A8 Certificate serial: 56794D6AE603EB1E1F918AD0BEABE9EE0593F25D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.cer Subject info access: rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.mft Manifest number: 02D4 Signing time: Thu 18 Sep 2025 02:10:01 +0000 Manifest this update: Thu 18 Sep 2025 02:05:01 +0000 Manifest next update: Fri 19 Sep 2025 02:27:01 +0000 Files and hashes: 1: 3137372e31322e3131322e302f32302d3234203d3e203533313138.roa (hash: V+sHb/70BnlYO+tHn2LPf6u1XHLARNcW5bnvr7GX6SQ=) 2: AFF600EA088C0C0C3160D75A952506A94913C8A8.crl (hash: uiJ/o813n6SFusdEG4AtSCdOnFHqq1EPNufg6ovG3ro=) 3: 3137372e31322e39362e302f32302d3230203d3e203533313138.roa (hash: h2Oqn3qxt0UufdhIxmkJFNRD7NQUg5lP6kk9tXGbGJ4=) 4: 323830343a3266343a3a2f33322d3332203d3e203533313138.roa (hash: FLOV3J4ELHykDuxEoc8TQNldBLQr0uQtj2VTGfj6c0Q=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.crl rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 19 Sep 2025 02:27:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:79:4d:6a:e6:03:eb:1e:1f:91:8a:d0:be:ab:e9:ee:05:93:f2:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFF600EA088C0C0C3160D75A952506A94913C8A8 Validity Not Before: Sep 18 02:05:01 2025 GMT Not After : Sep 19 02:27:01 2025 GMT Subject: CN=76B88F788666C114E7339F6A5DD2D04D7D443989 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:05:ea:d4:cf:a4:48:22:3d:4e:f3:f2:fd:14: 3a:4f:a3:26:4f:4d:e5:fc:67:d5:89:a1:91:18:0c: 21:a6:e1:89:a6:8f:79:d6:9e:0d:ef:55:66:6a:61: fd:59:23:eb:cf:0c:c9:31:50:db:7a:8b:3f:0f:47: 16:c5:00:f6:23:d8:8f:fa:85:6f:d8:16:41:30:87: f5:c8:5f:ae:61:6e:06:7a:86:3f:4c:c4:91:9e:68: ea:05:06:26:13:58:8c:73:f6:dc:65:fb:ef:f0:b1: 4c:1e:3a:1c:68:d4:c8:1c:b0:e1:52:a4:5a:e1:00: 0a:15:5a:3d:63:05:24:22:75:b6:9b:82:0a:46:5b: cb:3d:e0:b1:2a:6a:cf:4b:e2:32:d6:e3:84:30:de: f4:3f:cb:75:d3:96:12:6c:fa:33:a7:cb:97:12:3c: aa:8d:26:fc:b5:d0:89:ac:86:cd:ba:27:18:39:8b: f7:6d:0a:69:3d:60:9a:e6:18:c8:69:84:6e:83:60: 84:a7:5a:ca:09:4d:a8:31:02:93:aa:b9:90:96:06: 82:59:88:7f:8b:b5:69:dd:26:af:a7:c2:79:91:47: 55:59:9e:0e:06:61:2c:4e:65:27:8d:0c:cb:c4:63: 2a:7a:bb:9c:f6:4d:22:3c:b4:1e:3b:11:f4:a8:5d: 81:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:B8:8F:78:86:66:C1:14:E7:33:9F:6A:5D:D2:D0:4D:7D:44:39:89 X509v3 Authority Key Identifier: keyid:AF:F6:00:EA:08:8C:0C:0C:31:60:D7:5A:95:25:06:A9:49:13:C8:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:38:d1:5c:fc:f7:37:53:18:52:a2:2a:1e:b1:de:53:90:dc: c9:24:00:6a:92:cd:1a:ad:53:d2:cc:79:7d:2c:3f:e1:b0:7b: cd:dd:8f:66:b9:17:c1:c5:50:56:cc:9b:c1:65:69:06:3a:be: f1:4b:e9:de:09:26:70:dd:72:00:c5:c5:4c:32:fe:31:b6:73: 41:fc:92:cd:7f:c8:d4:fc:66:82:7f:55:11:e0:e9:d6:cd:00: 3d:00:ea:3a:d8:40:65:49:c2:ad:c2:07:22:c0:b8:20:50:ac: 28:5b:ce:e1:01:f9:46:b9:b8:7b:ad:99:76:9a:22:81:fa:c5: f5:d3:95:ff:5e:8f:50:28:44:d4:19:40:81:97:4b:e7:c6:ab: 0c:ef:47:f6:4a:11:cc:d7:97:16:d9:cd:3e:21:c1:c4:f2:60: 45:2c:b1:82:40:43:45:a4:f3:aa:23:98:55:c4:9e:9f:c9:71: 57:64:40:31:9a:23:64:31:af:b8:2e:78:c7:d1:0a:e5:74:76: f2:5f:63:c3:93:0d:b1:ed:0a:fd:2a:3e:56:8a:02:8d:1c:fb: 85:c7:43:84:91:8a:ff:69:4a:a6:f5:48:75:45:b4:39:fc:5c: a8:bb:1e:72:27:35:54:dd:3d:1c:7a:4b:84:d4:d1:43:fa:10: f1:75:92:c6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUVnlNauYD6x4fkYrQvqvp7gWT8l0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZGNjAwRUEwODhDMEMwQzMxNjBENzVBOTUyNTA2QTk0 OTEzQzhBODAeFw0yNTA5MTgwMjA1MDFaFw0yNTA5MTkwMjI3MDFaMDMxMTAvBgNV BAMTKDc2Qjg4Rjc4ODY2NkMxMTRFNzMzOUY2QTVERDJEMDREN0Q0NDM5ODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKBerUz6RIIj1O8/L9FDpPoyZP TeX8Z9WJoZEYDCGm4Ymmj3nWng3vVWZqYf1ZI+vPDMkxUNt6iz8PRxbFAPYj2I/6 hW/YFkEwh/XIX65hbgZ6hj9MxJGeaOoFBiYTWIxz9txl++/wsUweOhxo1MgcsOFS pFrhAAoVWj1jBSQidbabggpGW8s94LEqas9L4jLW44Qw3vQ/y3XTlhJs+jOny5cS PKqNJvy10Imshs26Jxg5i/dtCmk9YJrmGMhphG6DYISnWsoJTagxApOquZCWBoJZ iH+LtWndJq+nwnmRR1VZng4GYSxOZSeNDMvEYyp6u5z2TSI8tB47EfSoXYFLAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUdriPeIZmwRTnM59qXdLQTX1EOYkwHwYDVR0j BBgwFoAUr/YA6giMDAwxYNdalSUGqUkTyKgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQVRHMXNMOXJEWDZoalhSMzdheHNYblNockVRaHVqWmdWd0JTSmFpYUpQ Y2ovMS9BRkY2MDBFQTA4OEMwQzBDMzE2MEQ3NUE5NTI1MDZBOTQ5MTNDOEE4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FGRjYwMEVBMDg4QzBDMEMz MTYwRDc1QTk1MjUwNkE5NDkxM0M4QTguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QVRHMXNMOXJEWDZoalhSMzdheHNYblNockVRaHVqWmdWd0JTSmFpYUpQY2ovMS9B RkY2MDBFQTA4OEMwQzBDMzE2MEQ3NUE5NTI1MDZBOTQ5MTNDOEE4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEATzjRXPz3N1MYUqIqHrHeU5DcySQAapLNGq1T0sx5fSw/4bB7zd2PZrkXwcVQ VsybwWVpBjq+8Uvp3gkmcN1yAMXFTDL+MbZzQfySzX/I1Pxmgn9VEeDp1s0APQDq OthAZUnCrcIHIsC4IFCsKFvO4QH5Rrm4e62ZdpoigfrF9dOV/16PUChE1BlAgZdL 58arDO9H9koRzNeXFtnNPiHBxPJgRSyxgkBDRaTzqiOYVcSen8lxV2RAMZojZDGv uC54x9EK5XR28l9jw5MNse0K/So+VooCjRz7hcdDhJGK/2lKpvVIdUW0OfxcqLse cic1VN09HHpLhNTRQ/oQ8XWSxg== -----END CERTIFICATE-----Generated at Thu Sep 18 13:56:27 2025 by rpki-client