$ rpki-client -vvf rpki-repo.registro.br/repo/BeVfxV1hAn3FurdeY9HhL1oFPfdKYdXcQYnjYC6cm6X3/1/AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.mft File: AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.mft (raw, json) Hash identifier: 999yPlUXoBBmz5b8HyyYwMAqQu1BBhXChIcDKHAa/io= Subject key identifier: 7F:32:43:47:84:97:C7:F6:F7:EF:A4:90:6D:11:77:66:71:D8:47:0A Authority key identifier: AF:F2:DE:84:A1:6A:AF:6B:11:BE:71:E4:16:5A:53:F8:A3:AC:19:7E Certificate issuer: /CN=AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E Certificate serial: 640097921865A58CE68135D88F8EA920F89BAC67 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.cer Subject info access: rsync://rpki-repo.registro.br/repo/BeVfxV1hAn3FurdeY9HhL1oFPfdKYdXcQYnjYC6cm6X3/1/AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.mft Manifest number: 02FB Signing time: Sun 02 Nov 2025 23:39:01 +0000 Manifest this update: Sun 02 Nov 2025 23:34:01 +0000 Manifest next update: Mon 03 Nov 2025 23:57:01 +0000 Files and hashes: 1: 323830343a363030303a3a2f33322d3438203d3e20323639313339.roa (hash: Xe55nUyv1G9rTdN4F9JJyZ5S73rOm7YPFxNpYGBVW3I=) 2: AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.crl (hash: sIM7fVN9uHkMaQdSkRZgj655N0pkblZRJugQ+TpislM=) 3: 34352e3138302e38342e302f32322d3234203d3e20323639313339.roa (hash: IHT+RS/iweARypGzyOff6XPhF2jKh7RDE/V2Q1hN5a8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BeVfxV1hAn3FurdeY9HhL1oFPfdKYdXcQYnjYC6cm6X3/1/AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.crl rsync://rpki-repo.registro.br/repo/BeVfxV1hAn3FurdeY9HhL1oFPfdKYdXcQYnjYC6cm6X3/1/AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 03 Nov 2025 23:57:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:00:97:92:18:65:a5:8c:e6:81:35:d8:8f:8e:a9:20:f8:9b:ac:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E Validity Not Before: Nov 2 23:34:01 2025 GMT Not After : Nov 3 23:57:01 2025 GMT Subject: CN=7F3243478497C7F6F7EFA4906D11776671D8470A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:95:d9:ee:0d:3e:62:96:28:c6:98:9e:34:0a: 94:36:28:0f:6b:7c:40:89:9f:43:46:b0:c6:6e:46: c0:ff:79:58:5f:cc:8e:f8:0a:24:74:c4:5b:5e:d1: 64:c4:12:27:02:58:c6:dd:d5:35:09:95:c3:ce:57: 90:4c:20:2e:73:83:b3:b6:3c:33:09:66:cc:80:62: 01:cb:e7:36:65:c7:b3:74:51:0d:0f:18:b8:d7:50: c3:5b:f7:d4:25:e7:f7:8b:98:84:7f:16:12:1f:94: a6:ce:82:e6:71:e3:8e:eb:d5:e2:8b:1d:36:80:20: ed:cc:aa:47:ca:b4:9e:ea:37:41:86:96:26:88:b8: 0d:49:d9:a9:59:21:09:89:f1:6e:98:f0:11:35:de: 09:58:84:ba:d1:6a:2f:3f:cf:ae:96:d8:14:e3:de: 60:b3:ba:58:bf:47:92:4c:91:49:b5:3a:d9:96:bf: 4c:f2:fc:8e:81:e4:a2:b6:14:38:6b:6e:a6:88:59: 7f:22:79:65:2a:ca:0c:cb:51:06:7a:dc:3f:01:52: 16:bc:88:dd:5c:95:14:fa:19:3f:4a:a9:b6:29:13: bc:49:30:63:ea:82:1a:88:20:87:47:d2:94:c9:da: 24:b0:3c:1f:7c:08:e1:f6:69:88:37:d1:56:2f:d7: 31:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:32:43:47:84:97:C7:F6:F7:EF:A4:90:6D:11:77:66:71:D8:47:0A X509v3 Authority Key Identifier: keyid:AF:F2:DE:84:A1:6A:AF:6B:11:BE:71:E4:16:5A:53:F8:A3:AC:19:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BeVfxV1hAn3FurdeY9HhL1oFPfdKYdXcQYnjYC6cm6X3/1/AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BeVfxV1hAn3FurdeY9HhL1oFPfdKYdXcQYnjYC6cm6X3/1/AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:4f:3e:05:a3:37:08:96:53:f8:87:ca:71:25:9e:35:77:5b: ae:a5:57:4f:cb:f7:29:dd:60:c9:45:24:46:fa:22:f2:d3:5a: 4f:0e:8b:3e:a6:46:b0:1a:30:03:1f:79:80:45:35:1c:b1:15: 85:f0:5b:ff:35:8f:87:16:67:09:bb:5d:4c:ab:76:80:e9:11: a5:38:17:2a:69:30:a9:b9:4e:72:69:e1:21:68:be:c9:bf:27: 27:01:ff:75:a2:82:82:55:80:c3:c3:99:ba:54:1d:c4:36:f2: 1c:20:68:68:f0:3a:bf:1d:2c:78:c1:1b:34:76:64:04:f6:a3: a4:6a:0d:60:7e:5c:ba:f2:67:05:4d:75:f6:3c:57:2b:33:2b: 16:6f:f2:70:5d:1c:54:ae:bd:2d:92:5f:f5:af:8f:57:79:c9: 62:71:6c:67:9e:fc:56:4d:33:21:9a:2d:50:0a:57:32:e1:ab: 97:f7:bb:ec:90:7a:2f:cb:46:28:99:23:5e:6b:e5:d6:54:1b: 1b:c4:ea:12:fb:56:08:9d:47:ef:a8:61:1a:63:83:dd:8e:ed: a0:11:fd:d6:c9:a2:b7:7c:8d:55:00:ec:e7:22:4c:32:df:95: a7:f3:aa:b0:6e:fe:35:ac:22:b4:c7:7e:b6:83:44:b4:ea:b1: fb:f1:65:69 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUZACXkhhlpYzmgTXYj46pIPibrGcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZGMkRFODRBMTZBQUY2QjExQkU3MUU0MTY1QTUzRjhB M0FDMTk3RTAeFw0yNTExMDIyMzM0MDFaFw0yNTExMDMyMzU3MDFaMDMxMTAvBgNV BAMTKDdGMzI0MzQ3ODQ5N0M3RjZGN0VGQTQ5MDZEMTE3NzY2NzFEODQ3MEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRldnuDT5ilijGmJ40CpQ2KA9r fECJn0NGsMZuRsD/eVhfzI74CiR0xFte0WTEEicCWMbd1TUJlcPOV5BMIC5zg7O2 PDMJZsyAYgHL5zZlx7N0UQ0PGLjXUMNb99Ql5/eLmIR/FhIflKbOguZx447r1eKL HTaAIO3MqkfKtJ7qN0GGliaIuA1J2alZIQmJ8W6Y8BE13glYhLrRai8/z66W2BTj 3mCzuli/R5JMkUm1OtmWv0zy/I6B5KK2FDhrbqaIWX8ieWUqygzLUQZ63D8BUha8 iN1clRT6GT9KqbYpE7xJMGPqghqIIIdH0pTJ2iSwPB98COH2aYg30VYv1zE5AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUfzJDR4SXx/b376SQbRF3ZnHYRwowHwYDVR0j BBgwFoAUr/LehKFqr2sRvnHkFlpT+KOsGX4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQmVWZnhWMWhBbjNGdXJkZVk5SGhMMW9GUGZkS1lkWGNRWW5qWUM2Y202 WDMvMS9BRkYyREU4NEExNkFBRjZCMTFCRTcxRTQxNjVBNTNGOEEzQUMxOTdFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FGRjJERTg0QTE2QUFGNkIx MUJFNzFFNDE2NUE1M0Y4QTNBQzE5N0UuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QmVWZnhWMWhBbjNGdXJkZVk5SGhMMW9GUGZkS1lkWGNRWW5qWUM2Y202WDMvMS9B RkYyREU4NEExNkFBRjZCMTFCRTcxRTQxNjVBNTNGOEEzQUMxOTdFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAoU8+BaM3CJZT+IfKcSWeNXdbrqVXT8v3Kd1gyUUkRvoi8tNaTw6LPqZGsBow Ax95gEU1HLEVhfBb/zWPhxZnCbtdTKt2gOkRpTgXKmkwqblOcmnhIWi+yb8nJwH/ daKCglWAw8OZulQdxDbyHCBoaPA6vx0seMEbNHZkBPajpGoNYH5cuvJnBU119jxX KzMrFm/ycF0cVK69LZJf9a+PV3nJYnFsZ578Vk0zIZotUApXMuGrl/e77JB6L8tG KJkjXmvl1lQbG8TqEvtWCJ1H76hhGmOD3Y7toBH91smit3yNVQDs5yJMMt+Vp/Oq sG7+NawitMd+toNEtOqx+/FlaQ== -----END CERTIFICATE-----Generated at Mon Nov 3 12:27:39 2025 by rpki-client