$ rpki-client -vvf rpki-repo.registro.br/repo/BeVfxV1hAn3FurdeY9HhL1oFPfdKYdXcQYnjYC6cm6X3/1/AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.mft File: AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.mft (raw, json) Hash identifier: UoeGtnbnH0RTFZ1Of8CbqcEWqGxFGdU6JyVQogwPOlg= Subject key identifier: 55:2E:46:C2:A1:7A:24:22:1C:CA:1A:CA:53:14:28:F1:01:86:E9:10 Authority key identifier: AF:F2:DE:84:A1:6A:AF:6B:11:BE:71:E4:16:5A:53:F8:A3:AC:19:7E Certificate issuer: /CN=AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E Certificate serial: 3B0FCF54AEC8F1AC06962B92F0D7FDCA71B8509F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.cer Subject info access: rsync://rpki-repo.registro.br/repo/BeVfxV1hAn3FurdeY9HhL1oFPfdKYdXcQYnjYC6cm6X3/1/AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.mft Manifest number: 02BF Signing time: Thu 18 Sep 2025 08:47:36 +0000 Manifest this update: Thu 18 Sep 2025 08:42:36 +0000 Manifest next update: Fri 19 Sep 2025 09:41:36 +0000 Files and hashes: 1: AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.crl (hash: o56FO8ss36X+Tn4hXNowWJIe3JvNK0T1LlKkEgyiGNc=) 2: 34352e3138302e38342e302f32322d3234203d3e20323639313339.roa (hash: IHT+RS/iweARypGzyOff6XPhF2jKh7RDE/V2Q1hN5a8=) 3: 323830343a363030303a3a2f33322d3438203d3e20323639313339.roa (hash: Xe55nUyv1G9rTdN4F9JJyZ5S73rOm7YPFxNpYGBVW3I=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BeVfxV1hAn3FurdeY9HhL1oFPfdKYdXcQYnjYC6cm6X3/1/AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.crl rsync://rpki-repo.registro.br/repo/BeVfxV1hAn3FurdeY9HhL1oFPfdKYdXcQYnjYC6cm6X3/1/AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 19 Sep 2025 09:41:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:0f:cf:54:ae:c8:f1:ac:06:96:2b:92:f0:d7:fd:ca:71:b8:50:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E Validity Not Before: Sep 18 08:42:36 2025 GMT Not After : Sep 19 09:41:36 2025 GMT Subject: CN=552E46C2A17A24221CCA1ACA531428F10186E910 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:84:fa:a5:e3:cd:59:2c:80:c2:1d:b8:e7:23: da:16:6d:e6:7f:b2:8b:19:36:9d:38:71:8d:c6:1b: b2:c9:d7:0a:f3:28:13:1d:45:24:d9:95:a1:81:15: 97:92:7f:41:ef:28:e7:09:f1:85:06:f5:b5:a8:c4: 72:b0:1a:ea:e8:d6:be:f4:79:3b:ae:bf:20:ff:56: 3c:91:fd:97:9f:13:63:fe:48:42:04:3c:be:61:7a: d2:9e:98:74:80:10:ff:03:8f:de:fa:c7:70:b3:b4: 21:00:41:4c:00:6e:ac:24:55:13:ce:9c:04:91:e4: ce:ce:84:19:54:6b:00:32:3a:4d:5b:ae:cd:31:21: f1:0a:04:0a:25:00:fa:2a:fc:c7:b7:37:77:f7:4e: a0:af:10:b6:cf:8c:14:da:76:f7:47:a3:5d:31:89: b6:40:b7:4e:1d:dc:3d:6d:47:1c:cf:88:07:49:7a: 66:ac:bb:3e:e1:4b:24:6d:44:82:7a:cb:74:f7:1f: ba:67:ef:dd:f8:45:1d:eb:0c:a3:5d:3d:2f:fe:ec: a6:37:12:5c:d5:ec:45:d7:fe:96:2e:2f:34:11:26: ec:d8:49:fc:fd:61:11:3d:ad:26:89:78:26:22:94: 72:c8:23:95:f2:df:17:c3:50:bf:14:43:37:c0:98: ac:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:2E:46:C2:A1:7A:24:22:1C:CA:1A:CA:53:14:28:F1:01:86:E9:10 X509v3 Authority Key Identifier: keyid:AF:F2:DE:84:A1:6A:AF:6B:11:BE:71:E4:16:5A:53:F8:A3:AC:19:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BeVfxV1hAn3FurdeY9HhL1oFPfdKYdXcQYnjYC6cm6X3/1/AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BeVfxV1hAn3FurdeY9HhL1oFPfdKYdXcQYnjYC6cm6X3/1/AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:09:31:70:ca:a6:3a:da:67:4d:1c:d7:af:22:d9:c3:82:34: 28:8f:25:cb:df:f1:0b:3b:56:96:f4:aa:af:5e:9c:ba:2c:35: 86:a2:f5:9e:e7:f4:b9:e7:43:fe:77:22:34:34:0d:8f:92:46: 8b:a6:96:31:50:23:2c:ca:d6:61:9a:fe:58:32:d2:91:c5:1d: 4b:2a:96:c9:17:5e:3e:6d:c1:53:1f:d6:57:5b:d9:e3:e2:e9: 49:a0:f8:e1:54:12:41:fd:bf:d2:6c:f5:4d:5d:aa:fe:2a:86: 37:7f:6c:bc:10:0d:18:66:a8:8a:7e:09:2c:ff:8f:0b:91:ff: d5:84:cd:1e:d3:c5:2c:03:3c:52:23:00:41:5a:95:af:15:a4: 6b:f4:a4:fb:9c:fa:1c:83:80:db:45:42:94:ca:ed:be:f1:12: db:90:86:45:a3:b1:31:17:7b:2d:35:5a:1d:7c:81:20:84:4f: a0:9a:1f:8a:0e:af:56:11:f1:7c:68:1e:df:05:18:23:a4:e3: d4:3e:d0:93:f9:60:fc:d3:ea:97:f7:90:31:d7:d5:4f:68:6b: 90:3d:7c:98:60:6e:0a:ad:1a:6f:e2:77:37:07:58:e0:41:3a: 7c:a0:bd:90:1f:74:10:a8:6a:70:7d:8e:49:c6:d9:d0:07:f3: 8b:09:16:57 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUOw/PVK7I8awGliuS8Nf9ynG4UJ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZGMkRFODRBMTZBQUY2QjExQkU3MUU0MTY1QTUzRjhB M0FDMTk3RTAeFw0yNTA5MTgwODQyMzZaFw0yNTA5MTkwOTQxMzZaMDMxMTAvBgNV BAMTKDU1MkU0NkMyQTE3QTI0MjIxQ0NBMUFDQTUzMTQyOEYxMDE4NkU5MTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9hPql481ZLIDCHbjnI9oWbeZ/ sosZNp04cY3GG7LJ1wrzKBMdRSTZlaGBFZeSf0HvKOcJ8YUG9bWoxHKwGuro1r70 eTuuvyD/VjyR/ZefE2P+SEIEPL5hetKemHSAEP8Dj976x3CztCEAQUwAbqwkVRPO nASR5M7OhBlUawAyOk1brs0xIfEKBAolAPoq/Me3N3f3TqCvELbPjBTadvdHo10x ibZAt04d3D1tRxzPiAdJemasuz7hSyRtRIJ6y3T3H7pn7934RR3rDKNdPS/+7KY3 ElzV7EXX/pYuLzQRJuzYSfz9YRE9rSaJeCYilHLII5Xy3xfDUL8UQzfAmKyBAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUVS5GwqF6JCIcyhrKUxQo8QGG6RAwHwYDVR0j BBgwFoAUr/LehKFqr2sRvnHkFlpT+KOsGX4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQmVWZnhWMWhBbjNGdXJkZVk5SGhMMW9GUGZkS1lkWGNRWW5qWUM2Y202 WDMvMS9BRkYyREU4NEExNkFBRjZCMTFCRTcxRTQxNjVBNTNGOEEzQUMxOTdFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FGRjJERTg0QTE2QUFGNkIx MUJFNzFFNDE2NUE1M0Y4QTNBQzE5N0UuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QmVWZnhWMWhBbjNGdXJkZVk5SGhMMW9GUGZkS1lkWGNRWW5qWUM2Y202WDMvMS9B RkYyREU4NEExNkFBRjZCMTFCRTcxRTQxNjVBNTNGOEEzQUMxOTdFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEARQkxcMqmOtpnTRzXryLZw4I0KI8ly9/xCztWlvSqr16cuiw1hqL1nuf0uedD /nciNDQNj5JGi6aWMVAjLMrWYZr+WDLSkcUdSyqWyRdePm3BUx/WV1vZ4+LpSaD4 4VQSQf2/0mz1TV2q/iqGN39svBANGGaoin4JLP+PC5H/1YTNHtPFLAM8UiMAQVqV rxWka/Sk+5z6HIOA20VClMrtvvES25CGRaOxMRd7LTVaHXyBIIRPoJofig6vVhHx fGge3wUYI6Tj1D7Qk/lg/NPql/eQMdfVT2hrkD18mGBuCq0ab+J3NwdY4EE6fKC9 kB90EKhqcH2OScbZ0AfziwkWVw== -----END CERTIFICATE-----Generated at Thu Sep 18 20:30:38 2025 by rpki-client