$ rpki-client -vvf rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.mft File: AFF600EA088C0C0C3160D75A952506A94913C8A8.mft (raw, json) Hash identifier: VGCrHYXOPEjKQngzvgV1RGK72RL9LyYa6u2G/Vnc/0w= Subject key identifier: 44:79:67:43:71:AA:95:B3:E3:96:5B:A6:FB:7C:1F:A0:50:7C:B4:78 Authority key identifier: AF:F6:00:EA:08:8C:0C:0C:31:60:D7:5A:95:25:06:A9:49:13:C8:A8 Certificate issuer: /CN=AFF600EA088C0C0C3160D75A952506A94913C8A8 Certificate serial: 2835C5C286C88100F4E9A74710B74D03C4C28FF6 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.cer Subject info access: rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.mft Manifest number: 0311 Signing time: Mon 03 Nov 2025 02:50:01 +0000 Manifest this update: Mon 03 Nov 2025 02:45:01 +0000 Manifest next update: Tue 04 Nov 2025 05:10:01 +0000 Files and hashes: 1: 3137372e31322e3131322e302f32302d3234203d3e203533313138.roa (hash: V+sHb/70BnlYO+tHn2LPf6u1XHLARNcW5bnvr7GX6SQ=) 2: AFF600EA088C0C0C3160D75A952506A94913C8A8.crl (hash: j0/GBOUqHzqm5E+9wTaC7BLh55Rr+XRR+HtDL8N5DTA=) 3: 3137372e31322e39362e302f32302d3230203d3e203533313138.roa (hash: h2Oqn3qxt0UufdhIxmkJFNRD7NQUg5lP6kk9tXGbGJ4=) 4: 323830343a3266343a3a2f33322d3332203d3e203533313138.roa (hash: FLOV3J4ELHykDuxEoc8TQNldBLQr0uQtj2VTGfj6c0Q=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.crl rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 05:10:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:35:c5:c2:86:c8:81:00:f4:e9:a7:47:10:b7:4d:03:c4:c2:8f:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFF600EA088C0C0C3160D75A952506A94913C8A8 Validity Not Before: Nov 3 02:45:01 2025 GMT Not After : Nov 4 05:10:01 2025 GMT Subject: CN=4479674371AA95B3E3965BA6FB7C1FA0507CB478 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:c7:63:a4:69:ec:41:5d:f0:c7:bb:83:dd:16: 5d:6a:23:53:1f:04:0d:35:05:e4:29:38:89:fe:17: 00:39:1f:7f:95:5d:0b:b4:13:a9:98:b7:a4:ce:2e: 44:07:8f:be:64:a0:96:3a:e6:28:80:64:93:55:3a: 4a:d4:6f:89:fe:4c:50:49:ec:db:2c:8a:ef:ec:c3: b7:2a:92:27:1b:e0:d8:01:32:d7:6e:64:5d:35:68: d7:78:c0:2c:ab:b0:10:fc:04:42:6d:ca:b5:b2:fa: ba:25:d6:60:81:d7:08:0d:c9:14:51:a0:a4:6e:fb: 82:44:dd:28:94:4c:0f:2a:34:90:62:69:3a:3a:1d: 84:81:09:d9:91:e5:45:e1:4b:58:1b:bb:72:fb:e9: 9a:6d:c9:46:81:7a:30:6e:18:0e:1a:66:95:56:97: ed:54:4f:8a:57:a1:f0:03:7b:93:a5:33:a5:d0:be: 84:92:35:4b:d1:ea:f2:1c:77:7c:72:be:2e:3b:b1: 1c:cd:27:f0:13:aa:de:11:eb:85:6f:24:71:db:59: ae:57:99:03:0b:cd:93:6d:0e:bb:a1:af:b6:2b:91: 5e:31:c2:5f:b7:39:38:9e:a7:ae:75:0d:cb:a2:54: cd:7f:44:16:fe:65:fd:0b:e0:f9:21:92:b7:4e:86: 6f:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:79:67:43:71:AA:95:B3:E3:96:5B:A6:FB:7C:1F:A0:50:7C:B4:78 X509v3 Authority Key Identifier: keyid:AF:F6:00:EA:08:8C:0C:0C:31:60:D7:5A:95:25:06:A9:49:13:C8:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:54:43:4b:8d:8d:3e:91:41:c0:cc:c6:dd:f0:4d:96:47:b7: 12:1a:01:0e:9b:75:7e:2c:69:93:b5:62:08:eb:01:bb:82:bf: 20:77:ae:08:f9:8d:f6:b0:7b:c1:d7:1f:6d:cc:52:39:b1:eb: 28:8d:00:5e:2c:94:5a:83:fb:5d:c8:d9:07:68:60:15:38:00: dc:3a:ff:85:94:2b:69:ae:33:83:02:56:55:8c:d5:26:c9:b0: 33:73:7e:59:f2:df:f0:90:fc:0c:34:99:0f:6c:85:3b:85:99: 58:3a:12:9b:74:61:68:48:a3:1f:cd:53:3d:3a:0b:a4:8a:04: 66:4f:c9:43:f4:46:5b:32:51:7c:00:42:94:4f:d0:cc:42:d8: bf:6c:ff:5a:64:5b:37:80:4d:0b:5e:64:0a:65:bd:71:ba:d2: 4d:8e:5d:bf:3c:9b:c4:0f:b0:a7:bb:c8:06:ce:c1:71:05:7d: 86:a0:a7:aa:38:9d:bc:8f:df:99:e5:0a:ae:6b:cd:f5:9a:b0: a3:52:70:f9:51:c0:6a:d8:0c:54:e4:f4:86:25:92:0d:25:34: 5a:90:bd:54:10:c5:30:d1:be:71:fb:56:e2:b6:ef:2f:dc:14: 74:de:76:53:f7:83:d7:a3:da:7d:c1:fd:b0:56:7a:7b:fe:ec: c2:e0:15:bd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUKDXFwobIgQD06adHELdNA8TCj/YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZGNjAwRUEwODhDMEMwQzMxNjBENzVBOTUyNTA2QTk0 OTEzQzhBODAeFw0yNTExMDMwMjQ1MDFaFw0yNTExMDQwNTEwMDFaMDMxMTAvBgNV BAMTKDQ0Nzk2NzQzNzFBQTk1QjNFMzk2NUJBNkZCN0MxRkEwNTA3Q0I0NzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtx2OkaexBXfDHu4PdFl1qI1Mf BA01BeQpOIn+FwA5H3+VXQu0E6mYt6TOLkQHj75koJY65iiAZJNVOkrUb4n+TFBJ 7Nssiu/sw7cqkicb4NgBMtduZF01aNd4wCyrsBD8BEJtyrWy+rol1mCB1wgNyRRR oKRu+4JE3SiUTA8qNJBiaTo6HYSBCdmR5UXhS1gbu3L76ZptyUaBejBuGA4aZpVW l+1UT4pXofADe5OlM6XQvoSSNUvR6vIcd3xyvi47sRzNJ/ATqt4R64VvJHHbWa5X mQMLzZNtDruhr7YrkV4xwl+3OTiep651DcuiVM1/RBb+Zf0L4PkhkrdOhm+PAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQURHlnQ3GqlbPjllum+3wfoFB8tHgwHwYDVR0j BBgwFoAUr/YA6giMDAwxYNdalSUGqUkTyKgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQVRHMXNMOXJEWDZoalhSMzdheHNYblNockVRaHVqWmdWd0JTSmFpYUpQ Y2ovMS9BRkY2MDBFQTA4OEMwQzBDMzE2MEQ3NUE5NTI1MDZBOTQ5MTNDOEE4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FGRjYwMEVBMDg4QzBDMEMz MTYwRDc1QTk1MjUwNkE5NDkxM0M4QTguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QVRHMXNMOXJEWDZoalhSMzdheHNYblNockVRaHVqWmdWd0JTSmFpYUpQY2ovMS9B RkY2MDBFQTA4OEMwQzBDMzE2MEQ3NUE5NTI1MDZBOTQ5MTNDOEE4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbFRDS42NPpFBwMzG3fBNlke3EhoBDpt1fixpk7ViCOsBu4K/IHeuCPmN9rB7 wdcfbcxSObHrKI0AXiyUWoP7XcjZB2hgFTgA3Dr/hZQraa4zgwJWVYzVJsmwM3N+ WfLf8JD8DDSZD2yFO4WZWDoSm3RhaEijH81TPToLpIoEZk/JQ/RGWzJRfABClE/Q zELYv2z/WmRbN4BNC15kCmW9cbrSTY5dvzybxA+wp7vIBs7BcQV9hqCnqjidvI/f meUKrmvN9Zqwo1Jw+VHAatgMVOT0hiWSDSU0WpC9VBDFMNG+cftW4rbvL9wUdN52 U/eD16PafcH9sFZ6e/7swuAVvQ== -----END CERTIFICATE-----Generated at Mon Nov 3 12:34:29 2025 by rpki-client