$ rpki-client -vvf rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/AFFAF320E60531FB95C6C685842B56D1BDFCED45.mft File: AFFAF320E60531FB95C6C685842B56D1BDFCED45.mft (raw, json) Hash identifier: RItsU+VHTG9MZkP1bUkyx6xGUKV+uWYQUoXQ2kfBwP8= Subject key identifier: A4:00:FF:31:3B:B2:43:A8:4C:C1:F0:AE:85:CF:79:19:57:C5:9E:27 Authority key identifier: AF:FA:F3:20:E6:05:31:FB:95:C6:C6:85:84:2B:56:D1:BD:FC:ED:45 Certificate issuer: /CN=AFFAF320E60531FB95C6C685842B56D1BDFCED45 Certificate serial: 0E71579CF5747BF229AC2C5A8E613F12C167DA2A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFFAF320E60531FB95C6C685842B56D1BDFCED45.cer Subject info access: rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/AFFAF320E60531FB95C6C685842B56D1BDFCED45.mft Manifest number: 0164 Signing time: Sun 02 Nov 2025 22:40:13 +0000 Manifest this update: Sun 02 Nov 2025 22:35:13 +0000 Manifest next update: Tue 04 Nov 2025 01:26:13 +0000 Files and hashes: 1: 323830343a343863303a3a2f33322d3438203d3e20323637313432.roa (hash: wf3PSbxaQoz04LuH+DpJ300lgKtkTir3v4uSeMTRXRA=) 2: AFFAF320E60531FB95C6C685842B56D1BDFCED45.crl (hash: qRpFl0SyG1G8/LtR3RuSgGp+4Vu04xvICIC6BhmSbYk=) 3: 3137372e3132382e38382e302f32322d3234203d3e20323637313432.roa (hash: L4iJGteHF6GdbZUpYdPsmSF6aU2WwIJnyrqJCiuS0u4=) 4: 34352e3232392e3234302e302f32322d3234203d3e20323637313432.roa (hash: hmyhqfarobJ23Jlj20PKq7o0hSXC88s466WrKIYsZEQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/AFFAF320E60531FB95C6C685842B56D1BDFCED45.crl rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/AFFAF320E60531FB95C6C685842B56D1BDFCED45.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFFAF320E60531FB95C6C685842B56D1BDFCED45.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 01:26:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:71:57:9c:f5:74:7b:f2:29:ac:2c:5a:8e:61:3f:12:c1:67:da:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFFAF320E60531FB95C6C685842B56D1BDFCED45 Validity Not Before: Nov 2 22:35:13 2025 GMT Not After : Nov 4 01:26:13 2025 GMT Subject: CN=A400FF313BB243A84CC1F0AE85CF791957C59E27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:f2:6f:31:a9:07:a6:59:55:44:50:f0:62:1d: ff:01:60:bf:36:2f:ff:96:53:a2:6d:6c:43:fe:7e: 9b:98:c3:fe:e5:63:19:ec:56:ee:86:55:a4:2a:cc: ee:82:96:1b:75:7f:7f:b2:15:ec:c1:ad:5e:a1:6f: c1:a9:9b:57:96:a8:3d:11:0c:ae:0f:c2:48:28:f2: 0c:17:00:ee:83:eb:6f:fb:41:b6:ff:2b:c8:2e:b4: 4c:50:b2:97:23:b3:7f:64:48:67:2c:e3:c7:57:dd: 04:7d:23:7c:0e:f0:7e:53:f0:c8:b5:22:e8:06:15: bd:59:47:13:fa:94:0a:f6:97:50:43:84:71:33:2d: dc:30:bb:40:e0:6c:92:07:13:cd:af:e9:a7:fd:9d: 58:87:70:14:ea:b4:47:f0:2c:51:90:ef:d2:35:5d: b7:c6:69:08:d9:be:f6:d2:e2:b9:92:54:b1:db:a2: ef:02:52:b7:12:0b:67:43:b7:3d:74:c6:40:a1:08: 24:0f:fb:53:32:cc:78:6d:d1:e3:70:2e:f8:15:6e: 0c:14:58:09:38:5b:16:ec:5c:86:88:9a:3c:5f:a1: 8a:86:09:7c:a2:4b:5c:19:1f:dc:10:dc:8e:38:2c: 24:51:05:5f:b3:ee:b1:6e:b6:19:1d:05:d9:4a:5b: b5:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:00:FF:31:3B:B2:43:A8:4C:C1:F0:AE:85:CF:79:19:57:C5:9E:27 X509v3 Authority Key Identifier: keyid:AF:FA:F3:20:E6:05:31:FB:95:C6:C6:85:84:2B:56:D1:BD:FC:ED:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/AFFAF320E60531FB95C6C685842B56D1BDFCED45.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFFAF320E60531FB95C6C685842B56D1BDFCED45.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/AFFAF320E60531FB95C6C685842B56D1BDFCED45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:ce:9f:d5:5a:8e:b9:9c:7b:4f:f5:1b:93:35:b8:85:f7:08: 7d:2d:79:d7:4b:da:74:71:28:e1:09:dc:65:f4:fe:f3:f1:cc: f0:37:cc:b0:81:68:94:5c:a7:01:d3:a0:ba:39:35:9d:03:9c: 56:33:1b:96:aa:41:d5:0a:ad:96:8f:22:e4:3d:57:71:69:f2: 4c:bb:bc:be:b5:a3:a8:bc:8f:eb:5e:1c:9d:95:bc:de:6e:a7: c6:04:66:4f:89:c8:0f:65:a6:96:59:8e:b0:92:0b:79:2f:ed: 06:36:21:79:19:ba:e8:e7:88:02:15:bc:60:f5:df:3c:28:b8: cc:f2:59:b9:db:60:71:65:2c:82:58:41:dd:46:b2:a1:fc:f2: 9e:98:6f:ee:08:8c:05:69:8f:c1:ff:78:08:ad:41:25:a7:42: 71:18:17:4d:63:93:df:38:fa:c9:ca:0c:e9:22:10:6c:c1:5a: 73:86:05:64:e1:bb:21:88:f1:32:ef:e4:a3:27:3e:7c:fa:a9: ca:d9:9e:63:20:9d:95:36:ac:cb:d6:74:f4:16:d3:3a:5d:8e: 2a:e4:1b:a6:2e:46:97:28:a9:e6:38:e3:60:9c:a5:f3:9c:30: 56:9a:bc:ad:33:0f:4d:86:4a:18:e4:cf:3e:3b:ae:cb:40:01: 50:54:90:84 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUDnFXnPV0e/IprCxajmE/EsFn2iowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZGQUYzMjBFNjA1MzFGQjk1QzZDNjg1ODQyQjU2RDFC REZDRUQ0NTAeFw0yNTExMDIyMjM1MTNaFw0yNTExMDQwMTI2MTNaMDMxMTAvBgNV BAMTKEE0MDBGRjMxM0JCMjQzQTg0Q0MxRjBBRTg1Q0Y3OTE5NTdDNTlFMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ8m8xqQemWVVEUPBiHf8BYL82 L/+WU6JtbEP+fpuYw/7lYxnsVu6GVaQqzO6Clht1f3+yFezBrV6hb8Gpm1eWqD0R DK4Pwkgo8gwXAO6D62/7Qbb/K8gutExQspcjs39kSGcs48dX3QR9I3wO8H5T8Mi1 IugGFb1ZRxP6lAr2l1BDhHEzLdwwu0DgbJIHE82v6af9nViHcBTqtEfwLFGQ79I1 XbfGaQjZvvbS4rmSVLHbou8CUrcSC2dDtz10xkChCCQP+1MyzHht0eNwLvgVbgwU WAk4WxbsXIaImjxfoYqGCXyiS1wZH9wQ3I44LCRRBV+z7rFuthkdBdlKW7WNAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUpAD/MTuyQ6hMwfCuhc95GVfFnicwHwYDVR0j BBgwFoAUr/rzIOYFMfuVxsaFhCtW0b387UUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRGhoYWNKRmdXczl3SzlDdUVQVFhlUUMxWER3amhnTU5KczN6VGg5dzl0 QlUvMC9BRkZBRjMyMEU2MDUzMUZCOTVDNkM2ODU4NDJCNTZEMUJERkNFRDQ1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FGRkFGMzIwRTYwNTMxRkI5 NUM2QzY4NTg0MkI1NkQxQkRGQ0VENDUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RGhoYWNKRmdXczl3SzlDdUVQVFhlUUMxWER3amhnTU5KczN6VGg5dzl0QlUvMC9B RkZBRjMyMEU2MDUzMUZCOTVDNkM2ODU4NDJCNTZEMUJERkNFRDQ1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqc6f1VqOuZx7T/UbkzW4hfcIfS1510vadHEo4QncZfT+8/HM8DfMsIFolFyn AdOgujk1nQOcVjMblqpB1Qqtlo8i5D1XcWnyTLu8vrWjqLyP614cnZW83m6nxgRm T4nID2WmllmOsJILeS/tBjYheRm66OeIAhW8YPXfPCi4zPJZudtgcWUsglhB3Uay ofzynphv7giMBWmPwf94CK1BJadCcRgXTWOT3zj6ycoM6SIQbMFac4YFZOG7IYjx Mu/koyc+fPqpytmeYyCdlTasy9Z09BbTOl2OKuQbpi5Glyip5jjjYJyl85wwVpq8 rTMPTYZKGOTPPjuuy0ABUFSQhA== -----END CERTIFICATE-----Generated at Mon Nov 3 12:36:59 2025 by rpki-client