$ rpki-client -vvf rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/AFFAF320E60531FB95C6C685842B56D1BDFCED45.mft File: AFFAF320E60531FB95C6C685842B56D1BDFCED45.mft (raw, json) Hash identifier: PSVUN3b+Ma11l2tQf1KnKEs2/2hNaZTbpPvQoUJvt64= Subject key identifier: D3:94:C5:AD:25:AF:3C:04:BD:49:9C:FA:51:9D:3D:89:C8:18:78:E9 Authority key identifier: AF:FA:F3:20:E6:05:31:FB:95:C6:C6:85:84:2B:56:D1:BD:FC:ED:45 Certificate issuer: /CN=AFFAF320E60531FB95C6C685842B56D1BDFCED45 Certificate serial: 4BA15D1655ED7563B6B454869F32BB6C0F12A7C5 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFFAF320E60531FB95C6C685842B56D1BDFCED45.cer Subject info access: rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/AFFAF320E60531FB95C6C685842B56D1BDFCED45.mft Manifest number: E0 Signing time: Sat 26 Jul 2025 20:56:06 +0000 Manifest this update: Sat 26 Jul 2025 20:51:06 +0000 Manifest next update: Sun 27 Jul 2025 22:53:06 +0000 Files and hashes: 1: 323830343a343863303a3a2f33322d3438203d3e20323637313432.roa (hash: wf3PSbxaQoz04LuH+DpJ300lgKtkTir3v4uSeMTRXRA=) 2: AFFAF320E60531FB95C6C685842B56D1BDFCED45.crl (hash: 9CB0MJgJeqT62c4TdLN+xGiRQCwIoj1WixCXMsI96RE=) 3: 34352e3232392e3234302e302f32322d3234203d3e20323637313432.roa (hash: hmyhqfarobJ23Jlj20PKq7o0hSXC88s466WrKIYsZEQ=) 4: 3137372e3132382e38382e302f32322d3234203d3e20323637313432.roa (hash: L4iJGteHF6GdbZUpYdPsmSF6aU2WwIJnyrqJCiuS0u4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/AFFAF320E60531FB95C6C685842B56D1BDFCED45.crl rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/AFFAF320E60531FB95C6C685842B56D1BDFCED45.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFFAF320E60531FB95C6C685842B56D1BDFCED45.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 27 Jul 2025 22:53:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:a1:5d:16:55:ed:75:63:b6:b4:54:86:9f:32:bb:6c:0f:12:a7:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFFAF320E60531FB95C6C685842B56D1BDFCED45 Validity Not Before: Jul 26 20:51:06 2025 GMT Not After : Jul 27 22:53:06 2025 GMT Subject: CN=D394C5AD25AF3C04BD499CFA519D3D89C81878E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f5:84:f7:0a:c9:80:3b:7d:46:f6:37:80:32: 02:33:34:1f:41:18:77:fa:49:6d:c1:44:b9:a5:b7: 96:f5:86:15:89:07:ab:09:13:db:32:71:e5:57:25: 32:91:0d:20:6e:13:ef:a8:bb:06:1f:57:20:ba:b7: ed:d7:01:f0:49:96:96:cf:b4:dd:f6:95:d0:0f:64: b4:d6:0d:5c:cf:c9:5f:ce:d0:f3:7c:9e:66:b2:b7: 71:12:fa:b4:44:cb:92:1b:24:f2:a7:6d:f2:c9:a3: 9e:2c:08:bf:1f:86:ef:7a:5a:bb:5b:d4:30:37:cc: 86:df:43:29:e6:0a:4d:71:70:ed:f7:a1:53:fc:47: ea:f3:6a:ff:03:09:82:2d:39:c6:32:fa:ea:9b:1b: 8a:9d:78:4b:42:ec:16:0f:67:e3:89:01:12:b1:39: 8b:a9:2c:70:ac:38:3e:c1:90:e0:c2:b7:6c:17:d6: a7:a7:43:cc:06:a3:d7:c3:cd:ae:35:07:ad:ef:e9: 9d:c0:7f:37:3e:0f:51:01:ba:ce:bf:ee:66:19:64: 3b:09:22:d1:77:7b:30:c5:cc:c4:42:e3:a4:a5:6b: 44:f5:de:d9:19:50:a4:1d:6e:b2:6a:96:c5:61:82: 33:c8:1e:b0:6e:da:10:66:37:db:38:35:8c:00:45: 91:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:94:C5:AD:25:AF:3C:04:BD:49:9C:FA:51:9D:3D:89:C8:18:78:E9 X509v3 Authority Key Identifier: keyid:AF:FA:F3:20:E6:05:31:FB:95:C6:C6:85:84:2B:56:D1:BD:FC:ED:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/AFFAF320E60531FB95C6C685842B56D1BDFCED45.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFFAF320E60531FB95C6C685842B56D1BDFCED45.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/AFFAF320E60531FB95C6C685842B56D1BDFCED45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:ea:11:fc:9a:a7:44:f0:0d:64:0c:c4:5a:aa:ff:57:61:65: a5:44:8e:b7:c6:43:d5:e7:c6:8e:c1:b9:4f:7c:47:b0:a3:1c: d3:a8:f1:5b:14:66:63:58:30:35:ab:39:b6:64:b9:a1:10:93: e9:d7:a4:23:b2:cb:5e:8d:e2:19:d2:b6:6b:2b:18:ce:b0:09: 9f:30:05:a8:78:31:a2:c3:06:7e:80:fc:de:91:60:39:e3:85: 1a:e3:86:54:24:39:28:7d:cd:82:84:1e:d3:91:e6:e1:35:81: 0d:50:ca:6f:8c:7e:17:5d:61:11:36:2a:16:68:cd:ba:8a:6b: e4:8d:76:0f:e5:3b:ba:ac:00:90:af:57:64:b8:f1:fb:0e:b7: 70:3f:f1:9c:4f:5e:87:bb:b4:41:22:54:82:96:01:9b:d9:60: 8d:3a:89:9b:29:97:29:a3:fb:a2:80:1b:e0:4a:61:b3:17:7b: 46:30:53:0b:61:09:99:21:4d:ad:bf:47:0b:d3:13:a4:ff:b0: d0:58:5b:bd:cb:2c:93:3a:13:64:0d:3b:52:cd:54:af:42:f6: 60:8a:8f:ec:ec:ca:ee:0b:82:a7:3d:85:96:95:14:7e:e6:b4: 55:c0:6f:56:b6:29:58:22:d9:69:f3:57:50:f5:b8:09:f2:6a: b6:36:45:1b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUS6FdFlXtdWO2tFSGnzK7bA8Sp8UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZGQUYzMjBFNjA1MzFGQjk1QzZDNjg1ODQyQjU2RDFC REZDRUQ0NTAeFw0yNTA3MjYyMDUxMDZaFw0yNTA3MjcyMjUzMDZaMDMxMTAvBgNV BAMTKEQzOTRDNUFEMjVBRjNDMDRCRDQ5OUNGQTUxOUQzRDg5QzgxODc4RTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC49YT3CsmAO31G9jeAMgIzNB9B GHf6SW3BRLmlt5b1hhWJB6sJE9syceVXJTKRDSBuE++ouwYfVyC6t+3XAfBJlpbP tN32ldAPZLTWDVzPyV/O0PN8nmayt3ES+rREy5IbJPKnbfLJo54sCL8fhu96Wrtb 1DA3zIbfQynmCk1xcO33oVP8R+rzav8DCYItOcYy+uqbG4qdeEtC7BYPZ+OJARKx OYupLHCsOD7BkODCt2wX1qenQ8wGo9fDza41B63v6Z3Afzc+D1EBus6/7mYZZDsJ ItF3ezDFzMRC46Sla0T13tkZUKQdbrJqlsVhgjPIHrBu2hBmN9s4NYwARZEtAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU05TFrSWvPAS9SZz6UZ09icgYeOkwHwYDVR0j BBgwFoAUr/rzIOYFMfuVxsaFhCtW0b387UUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRGhoYWNKRmdXczl3SzlDdUVQVFhlUUMxWER3amhnTU5KczN6VGg5dzl0 QlUvMC9BRkZBRjMyMEU2MDUzMUZCOTVDNkM2ODU4NDJCNTZEMUJERkNFRDQ1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FGRkFGMzIwRTYwNTMxRkI5 NUM2QzY4NTg0MkI1NkQxQkRGQ0VENDUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RGhoYWNKRmdXczl3SzlDdUVQVFhlUUMxWER3amhnTU5KczN6VGg5dzl0QlUvMC9B RkZBRjMyMEU2MDUzMUZCOTVDNkM2ODU4NDJCNTZEMUJERkNFRDQ1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAveoR/JqnRPANZAzEWqr/V2FlpUSOt8ZD1efGjsG5T3xHsKMc06jxWxRmY1gw Nas5tmS5oRCT6dekI7LLXo3iGdK2aysYzrAJnzAFqHgxosMGfoD83pFgOeOFGuOG VCQ5KH3NgoQe05Hm4TWBDVDKb4x+F11hETYqFmjNuopr5I12D+U7uqwAkK9XZLjx +w63cD/xnE9eh7u0QSJUgpYBm9lgjTqJmymXKaP7ooAb4Ephsxd7RjBTC2EJmSFN rb9HC9MTpP+w0FhbvcsskzoTZA07Us1Ur0L2YIqP7OzK7guCpz2FlpUUfua0VcBv VrYpWCLZafNXUPW4CfJqtjZFGw== -----END CERTIFICATE-----Generated at Sun Jul 27 02:06:01 2025 by rpki-client