$ rpki-client -vvf rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.mft File: AFF600EA088C0C0C3160D75A952506A94913C8A8.mft (raw, json) Hash identifier: TboVcfeVE0h5j34QpDrmsvSUMTRYfIE94n/Q/iIntHg= Subject key identifier: ED:AF:2A:0F:5D:B0:4E:EA:8B:D5:B6:C0:D4:D4:0B:00:73:44:4F:EA Authority key identifier: AF:F6:00:EA:08:8C:0C:0C:31:60:D7:5A:95:25:06:A9:49:13:C8:A8 Certificate issuer: /CN=AFF600EA088C0C0C3160D75A952506A94913C8A8 Certificate serial: 6D3840957DEB1B8B8C3D79442C210B579FBD42AC Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.cer Subject info access: rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.mft Manifest number: 024A Signing time: Sat 14 Jun 2025 14:50:00 +0000 Manifest this update: Sat 14 Jun 2025 14:45:00 +0000 Manifest next update: Sun 15 Jun 2025 17:51:00 +0000 Files and hashes: 1: 3137372e31322e39362e302f32302d3230203d3e203533313138.roa (hash: h2Oqn3qxt0UufdhIxmkJFNRD7NQUg5lP6kk9tXGbGJ4=) 2: 3137372e31322e3132332e302f32342d3234203d3e203533313138.roa (hash: Kq+MibEAzFGTBoCjjqLDshi/5eMUdsSQZ+YXEELUOww=) 3: 3138372e3131302e3136302e302f32302d3230203d3e203533313138.roa (hash: VQ2nRm2+YMc/UCt8ERS/C8ZPSft97reB3mR1kQAvLaI=) 4: 3137372e31322e3131322e302f32302d3230203d3e203533313138.roa (hash: jN25SYmZKfd1sPcHySVfXCIHkpd4KxWXs3ZwAiKGYuw=) 5: 323830343a3266343a3a2f33322d3332203d3e203533313138.roa (hash: FLOV3J4ELHykDuxEoc8TQNldBLQr0uQtj2VTGfj6c0Q=) 6: 3138372e3131302e3137352e302f32342d3234203d3e203533313138.roa (hash: Og14qieFhd2yPSbUgzfLCt9UBveopB8PQo+8zpZO8is=) 7: 3137372e31322e3132322e302f32342d3234203d3e203533313138.roa (hash: FPOIK0HoDwaAUy65NC3MdxlbC9Je6s9SlFjedqzplPg=) 8: 3138372e3131302e3137342e302f32342d3234203d3e203533313138.roa (hash: Uhs2EnhLYS3vvCI6rXGY44HBJ7cQCIiuaZCLEF3JbUA=) 9: AFF600EA088C0C0C3160D75A952506A94913C8A8.crl (hash: 8yM8kP2DfbQz0XUWy9q9nPyD/GfSuxv/wdVa8ALxp04=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.crl rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 15 Jun 2025 16:22:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:38:40:95:7d:eb:1b:8b:8c:3d:79:44:2c:21:0b:57:9f:bd:42:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFF600EA088C0C0C3160D75A952506A94913C8A8 Validity Not Before: Jun 14 14:45:00 2025 GMT Not After : Jun 15 17:51:00 2025 GMT Subject: CN=EDAF2A0F5DB04EEA8BD5B6C0D4D40B0073444FEA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:26:46:06:04:6f:46:4c:f5:ba:80:d5:90:f0: 55:5e:ff:7d:eb:c2:ac:ce:2e:6a:b4:8e:e9:09:c6: bd:d6:c2:40:02:42:45:7b:d1:f1:c2:c6:e0:06:3e: 73:5b:f1:07:05:8c:fb:85:28:23:e3:aa:7b:c7:1a: e0:61:36:bf:02:d7:35:51:8f:89:a8:ad:f9:9e:67: d9:aa:6e:c8:63:dc:82:41:c2:98:1b:0d:a7:1c:15: ba:7a:03:ef:0d:c5:12:05:65:9c:6a:1f:80:b2:70: 91:63:72:58:d4:26:ec:bd:71:79:1d:ef:bd:fd:0f: e7:de:0d:41:13:60:72:b2:41:9f:29:90:f1:2a:4b: cf:75:4d:68:88:e1:30:dc:a1:ea:a7:14:71:c3:6c: 20:62:c3:c9:e6:cd:53:76:f7:f9:08:4f:9f:fe:ca: b9:4e:22:95:96:5c:01:5b:6d:3b:e4:b6:8e:4d:03: 72:65:e2:76:a9:71:b4:dd:95:39:57:a6:aa:46:fb: 79:bd:0b:50:0c:3b:e2:45:f7:50:5a:25:42:d8:b1: fb:8b:62:08:9d:a6:08:aa:d7:92:c1:8c:25:d8:34: 3e:fa:8d:73:32:0f:c9:d9:e7:d0:7e:11:d9:60:e9: 80:98:45:fb:16:54:22:a0:2d:86:40:73:cc:7c:c3: d3:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:AF:2A:0F:5D:B0:4E:EA:8B:D5:B6:C0:D4:D4:0B:00:73:44:4F:EA X509v3 Authority Key Identifier: keyid:AF:F6:00:EA:08:8C:0C:0C:31:60:D7:5A:95:25:06:A9:49:13:C8:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:21:fe:01:bd:5f:f9:2c:20:c9:44:1a:ea:eb:9b:85:bb:60: df:aa:a4:2d:76:d8:4d:2d:bd:7c:e6:a0:77:9c:47:e2:0c:26: d9:8b:9d:4f:bc:b3:ae:c9:53:8f:bf:43:a4:26:9e:95:be:1f: 0f:e3:b8:d8:a2:8f:a4:cb:3f:e2:4d:0c:5a:ec:d7:80:97:bc: 44:8f:0d:ca:5c:b6:be:99:39:a7:bb:59:7c:d3:73:f7:64:bd: 8d:45:c0:6d:e5:fd:c5:8e:04:d8:95:35:25:00:b7:1c:3f:02: d4:ae:d5:0e:d8:a5:ed:56:c6:5e:0d:c3:b1:e9:35:f5:11:ab: 0a:62:8f:02:ae:60:26:05:78:d2:ef:60:40:2e:0d:69:98:88: c3:78:c7:56:6c:72:42:0d:1e:af:d1:3a:84:a3:aa:fc:db:a8: e2:31:0b:b3:c6:0b:e1:0c:56:9b:b9:43:99:b0:dc:93:76:b6: 6a:ce:90:2e:44:6a:08:64:6c:e2:de:01:1c:20:f8:da:7c:eb: 74:13:ac:70:24:df:61:47:97:ee:2c:23:fb:86:06:b0:14:4b: b0:c8:fd:1a:3d:0c:03:1a:a8:cb:db:c6:57:06:ed:5f:ea:20: b7:5f:9a:0a:97:8d:aa:af:31:f2:20:74:59:b5:a3:aa:79:2a: d4:22:87:42 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUbThAlX3rG4uMPXlELCELV5+9QqwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZGNjAwRUEwODhDMEMwQzMxNjBENzVBOTUyNTA2QTk0 OTEzQzhBODAeFw0yNTA2MTQxNDQ1MDBaFw0yNTA2MTUxNzUxMDBaMDMxMTAvBgNV BAMTKEVEQUYyQTBGNURCMDRFRUE4QkQ1QjZDMEQ0RDQwQjAwNzM0NDRGRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8JkYGBG9GTPW6gNWQ8FVe/33r wqzOLmq0jukJxr3WwkACQkV70fHCxuAGPnNb8QcFjPuFKCPjqnvHGuBhNr8C1zVR j4morfmeZ9mqbshj3IJBwpgbDaccFbp6A+8NxRIFZZxqH4CycJFjcljUJuy9cXkd 7739D+feDUETYHKyQZ8pkPEqS891TWiI4TDcoeqnFHHDbCBiw8nmzVN29/kIT5/+ yrlOIpWWXAFbbTvkto5NA3Jl4napcbTdlTlXpqpG+3m9C1AMO+JF91BaJULYsfuL Ygidpgiq15LBjCXYND76jXMyD8nZ59B+Edlg6YCYRfsWVCKgLYZAc8x8w9M7AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU7a8qD12wTuqL1bbA1NQLAHNET+owHwYDVR0j BBgwFoAUr/YA6giMDAwxYNdalSUGqUkTyKgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQVRHMXNMOXJEWDZoalhSMzdheHNYblNockVRaHVqWmdWd0JTSmFpYUpQ Y2ovMS9BRkY2MDBFQTA4OEMwQzBDMzE2MEQ3NUE5NTI1MDZBOTQ5MTNDOEE4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FGRjYwMEVBMDg4QzBDMEMz MTYwRDc1QTk1MjUwNkE5NDkxM0M4QTguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QVRHMXNMOXJEWDZoalhSMzdheHNYblNockVRaHVqWmdWd0JTSmFpYUpQY2ovMS9B RkY2MDBFQTA4OEMwQzBDMzE2MEQ3NUE5NTI1MDZBOTQ5MTNDOEE4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfiH+Ab1f+SwgyUQa6uubhbtg36qkLXbYTS29fOagd5xH4gwm2YudT7yzrslT j79DpCaelb4fD+O42KKPpMs/4k0MWuzXgJe8RI8Nyly2vpk5p7tZfNNz92S9jUXA beX9xY4E2JU1JQC3HD8C1K7VDtil7VbGXg3Dsek19RGrCmKPAq5gJgV40u9gQC4N aZiIw3jHVmxyQg0er9E6hKOq/Nuo4jELs8YL4QxWm7lDmbDck3a2as6QLkRqCGRs 4t4BHCD42nzrdBOscCTfYUeX7iwj+4YGsBRLsMj9Gj0MAxqoy9vGVwbtX+ogt1+a CpeNqq8x8iB0WbWjqnkq1CKHQg== -----END CERTIFICATE-----Generated at Sat Jun 14 16:46:33 2025 by rpki-client