$ rpki-client -vvf rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/0/2AFA735BD922B81B8D49B7C0193B661015358B07.mft File: 2AFA735BD922B81B8D49B7C0193B661015358B07.mft (raw, json) Hash identifier: DeB5n0EYFTR6wzG155/MRJDZIRtzVuvKzb7j33pafNQ= Subject key identifier: 6D:B6:C7:6C:4A:C7:D3:E4:B9:AF:A0:F0:09:F7:81:F8:25:0E:42:52 Authority key identifier: 2A:FA:73:5B:D9:22:B8:1B:8D:49:B7:C0:19:3B:66:10:15:35:8B:07 Certificate issuer: /CN=2AFA735BD922B81B8D49B7C0193B661015358B07 Certificate serial: 40E9B76A918063CCEF3CAE9B708B80FDF09ABC28 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AFA735BD922B81B8D49B7C0193B661015358B07.cer Subject info access: rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/0/2AFA735BD922B81B8D49B7C0193B661015358B07.mft Manifest number: 38 Signing time: Mon 03 Nov 2025 12:25:02 +0000 Manifest this update: Mon 03 Nov 2025 12:20:02 +0000 Manifest next update: Tue 04 Nov 2025 14:17:02 +0000 Files and hashes: 1: 2AFA735BD922B81B8D49B7C0193B661015358B07.crl (hash: BL6i3UvJijxQXO8X8nui8ZswYjRsrCzIma4afSHAeAY=) 2: 323830343a353637343a3a2f33322d3438203d3e20323637393939.roa (hash: OMp0VOHQJmlx0pDjyH8nrjLj4t1+kkoAi1gxjq3Qngc=) 3: 34352e3136372e3130382e302f32332d3234203d3e20323637393939.roa (hash: 6orLroAee4vZGrjN6H/zYXLHJqDKFbzn5WyrqkDkzzM=) 4: 34352e3136372e3131302e302f32342d3234203d3e20323637393939.roa (hash: WaFQPRdEr1s1cPabk3fRShZFzRQn+NDhBvGA56NvuPQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/0/2AFA735BD922B81B8D49B7C0193B661015358B07.crl rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/0/2AFA735BD922B81B8D49B7C0193B661015358B07.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AFA735BD922B81B8D49B7C0193B661015358B07.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 14:17:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:e9:b7:6a:91:80:63:cc:ef:3c:ae:9b:70:8b:80:fd:f0:9a:bc:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2AFA735BD922B81B8D49B7C0193B661015358B07 Validity Not Before: Nov 3 12:20:02 2025 GMT Not After : Nov 4 14:17:02 2025 GMT Subject: CN=6DB6C76C4AC7D3E4B9AFA0F009F781F8250E4252 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:12:42:45:32:67:30:f9:01:6a:4a:cc:c4:0c: 75:92:ae:ce:01:dc:cd:fd:69:2f:88:91:e8:49:e5: 6e:96:d7:c3:53:49:ef:e6:f8:02:14:65:59:0e:f5: eb:01:21:18:05:79:3c:f2:bd:19:f0:16:ad:39:9e: ff:f9:b5:01:25:04:a5:b3:74:29:bc:71:a9:df:6e: cc:a9:b1:ca:01:98:69:03:bc:63:e5:46:5d:6b:2b: 46:b5:ed:e0:55:c7:d4:d0:31:a8:61:2c:a3:a8:f2: 67:c8:ad:02:e0:31:66:5b:e9:d9:07:12:6c:21:36: 23:74:92:0c:6f:38:b3:99:d4:e8:2a:2e:e0:eb:55: 7f:53:94:3c:7b:be:c9:5c:15:96:23:91:54:4b:d8: 40:ed:40:63:e7:24:16:c0:fa:d6:0b:8d:e1:1c:19: 10:ca:cc:3a:8b:ae:bb:3b:e0:8f:be:67:cc:44:e4: aa:13:e2:26:24:da:71:c5:37:31:13:6c:e7:a5:46: d4:d1:02:8c:5e:bc:18:59:bf:6d:0b:49:27:80:3a: 27:ac:be:d1:6c:c8:d9:57:9b:7b:b4:27:f6:e4:bd: f6:62:07:86:1d:3b:20:b4:07:51:03:fb:31:9b:50: f1:c4:2e:b2:12:23:e3:c5:61:20:9c:ba:c6:69:d1: 31:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:B6:C7:6C:4A:C7:D3:E4:B9:AF:A0:F0:09:F7:81:F8:25:0E:42:52 X509v3 Authority Key Identifier: keyid:2A:FA:73:5B:D9:22:B8:1B:8D:49:B7:C0:19:3B:66:10:15:35:8B:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/0/2AFA735BD922B81B8D49B7C0193B661015358B07.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AFA735BD922B81B8D49B7C0193B661015358B07.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/0/2AFA735BD922B81B8D49B7C0193B661015358B07.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:6e:a7:8a:31:49:37:29:85:8c:89:b4:41:1a:ef:ec:1f:57: 99:09:68:70:67:1c:f7:df:fe:b1:fd:93:e5:9b:1b:6e:d6:c6: fd:07:1e:42:59:88:9d:a4:e9:d3:7e:d8:d7:3e:e3:19:ac:1a: 5e:a5:72:17:b8:88:67:06:48:9a:d9:bc:95:5e:97:f4:b7:1b: 0c:f5:98:41:1d:f3:52:bc:7e:44:ad:1c:e3:41:77:3a:91:b7: 90:fc:9f:10:58:96:da:92:7b:79:41:77:5b:33:0d:c7:a6:3c: ad:ec:f4:6d:f1:60:62:3a:13:de:35:a8:4e:38:a3:c5:f5:dc: 07:9c:2c:cd:65:fc:9a:9f:93:60:bf:37:db:ca:da:a3:52:91: 2d:44:12:f7:8e:27:a4:7b:51:65:07:98:db:5e:06:a7:d0:5e: c3:11:98:ac:15:3b:1d:01:7f:2d:c6:2d:f0:71:c8:dc:e8:df: b8:1f:7c:64:fd:56:c4:82:cd:92:ac:82:6b:eb:5c:d5:c6:1f: d1:32:59:89:53:85:04:2e:38:e4:29:ad:46:d5:c1:f5:d2:f3: bd:3b:5a:85:04:fb:bf:fb:03:60:09:19:9c:97:72:7f:1a:9f: f4:43:95:06:06:61:3f:45:0b:ae:02:72:a4:b7:74:1c:b9:50: 36:b8:30:e6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUQOm3apGAY8zvPK6bcIuA/fCavCgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFGQTczNUJEOTIyQjgxQjhENDlCN0MwMTkzQjY2MTAx NTM1OEIwNzAeFw0yNTExMDMxMjIwMDJaFw0yNTExMDQxNDE3MDJaMDMxMTAvBgNV BAMTKDZEQjZDNzZDNEFDN0QzRTRCOUFGQTBGMDA5Rjc4MUY4MjUwRTQyNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwEkJFMmcw+QFqSszEDHWSrs4B 3M39aS+IkehJ5W6W18NTSe/m+AIUZVkO9esBIRgFeTzyvRnwFq05nv/5tQElBKWz dCm8canfbsypscoBmGkDvGPlRl1rK0a17eBVx9TQMahhLKOo8mfIrQLgMWZb6dkH EmwhNiN0kgxvOLOZ1OgqLuDrVX9TlDx7vslcFZYjkVRL2EDtQGPnJBbA+tYLjeEc GRDKzDqLrrs74I++Z8xE5KoT4iYk2nHFNzETbOelRtTRAoxevBhZv20LSSeAOies vtFsyNlXm3u0J/bkvfZiB4YdOyC0B1ED+zGbUPHELrISI+PFYSCcusZp0TFJAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUbbbHbErH0+S5r6DwCfeB+CUOQlIwHwYDVR0j BBgwFoAUKvpzW9kiuBuNSbfAGTtmEBU1iwcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQW1QakVHZUN5bnQyYlNUdTh4MTRHVnVkV2ZwV2trZkFkV3ZnZnVGWldy S2QvMC8yQUZBNzM1QkQ5MjJCODFCOEQ0OUI3QzAxOTNCNjYxMDE1MzU4QjA3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJBRkE3MzVCRDkyMkI4MUI4 RDQ5QjdDMDE5M0I2NjEwMTUzNThCMDcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QW1QakVHZUN5bnQyYlNUdTh4MTRHVnVkV2ZwV2trZkFkV3ZnZnVGWldyS2QvMC8y QUZBNzM1QkQ5MjJCODFCOEQ0OUI3QzAxOTNCNjYxMDE1MzU4QjA3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkm6nijFJNymFjIm0QRrv7B9XmQlocGcc99/+sf2T5ZsbbtbG/QceQlmInaTp 037Y1z7jGawaXqVyF7iIZwZImtm8lV6X9LcbDPWYQR3zUrx+RK0c40F3OpG3kPyf EFiW2pJ7eUF3WzMNx6Y8rez0bfFgYjoT3jWoTjijxfXcB5wszWX8mp+TYL8328ra o1KRLUQS944npHtRZQeY214Gp9BewxGYrBU7HQF/LcYt8HHI3OjfuB98ZP1WxILN kqyCa+tc1cYf0TJZiVOFBC445CmtRtXB9dLzvTtahQT7v/sDYAkZnJdyfxqf9EOV BgZhP0ULrgJypLd0HLlQNrgw5g== -----END CERTIFICATE-----Generated at Tue Nov 4 00:15:28 2025 by rpki-client