$ rpki-client -vvf rpki-repo.registro.br/repo/ENmcGYLH7Dib3Uoe91fupE5D93Sp6pG4Esxz26S21cxF/0/AFCF347C2BC075F096BD454BE695B3295D26490B.mft File: AFCF347C2BC075F096BD454BE695B3295D26490B.mft (raw, json) Hash identifier: tB+DxVu/Rut/T0jtFGXTVEQbS4z1jBZjiErTSUWEEJ8= Subject key identifier: D5:D9:42:79:F4:FF:6D:F0:43:C6:C9:43:EF:CA:84:C0:9A:BC:65:76 Authority key identifier: AF:CF:34:7C:2B:C0:75:F0:96:BD:45:4B:E6:95:B3:29:5D:26:49:0B Certificate issuer: /CN=AFCF347C2BC075F096BD454BE695B3295D26490B Certificate serial: 34223BFF81FDFC3AE77F35ADA135E1DCBCD96841 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFCF347C2BC075F096BD454BE695B3295D26490B.cer Subject info access: rsync://rpki-repo.registro.br/repo/ENmcGYLH7Dib3Uoe91fupE5D93Sp6pG4Esxz26S21cxF/0/AFCF347C2BC075F096BD454BE695B3295D26490B.mft Manifest number: 0B Signing time: Mon 03 Nov 2025 09:55:29 +0000 Manifest this update: Mon 03 Nov 2025 09:50:29 +0000 Manifest next update: Tue 04 Nov 2025 10:57:29 +0000 Files and hashes: 1: AFCF347C2BC075F096BD454BE695B3295D26490B.crl (hash: qkaO5THLvNAz8TGWrIImS3p5xf0dsz9wHASuIHQMO5k=) 2: 323830343a353330633a3a2f33322d313238203d3e20323638353630.roa (hash: jvS4o81q2KXHANuKmFeQbZrp+3iRXf+KD7u+AIwdIqE=) 3: 34352e3136332e3134382e302f32322d3332203d3e20323638353630.roa (hash: r8lr8GNDAk1GVlP419VdfS7t17B7E2hIsrCHwW3f/OA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/ENmcGYLH7Dib3Uoe91fupE5D93Sp6pG4Esxz26S21cxF/0/AFCF347C2BC075F096BD454BE695B3295D26490B.crl rsync://rpki-repo.registro.br/repo/ENmcGYLH7Dib3Uoe91fupE5D93Sp6pG4Esxz26S21cxF/0/AFCF347C2BC075F096BD454BE695B3295D26490B.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFCF347C2BC075F096BD454BE695B3295D26490B.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 10:57:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:22:3b:ff:81:fd:fc:3a:e7:7f:35:ad:a1:35:e1:dc:bc:d9:68:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFCF347C2BC075F096BD454BE695B3295D26490B Validity Not Before: Nov 3 09:50:29 2025 GMT Not After : Nov 4 10:57:29 2025 GMT Subject: CN=D5D94279F4FF6DF043C6C943EFCA84C09ABC6576 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:87:85:f7:bc:7f:f2:a1:96:dd:bf:49:3c:87: 53:c6:f1:ee:e4:dd:b1:81:2e:d7:01:84:e7:85:67: ac:7a:de:34:09:b7:15:dd:6a:88:f6:8d:98:c4:9a: 2c:01:2b:ba:8f:87:db:46:68:14:c1:90:93:6b:93: 2d:27:f9:7d:ae:bc:3a:a3:14:d1:0b:d0:3a:88:22: a0:4c:77:fa:69:29:c8:89:39:96:15:bd:3b:5c:10: 79:6c:f8:aa:20:00:28:a3:b9:13:a5:2d:1d:17:d7: 29:c9:15:cf:92:f9:f6:34:d1:4f:f1:6a:08:a6:17: 00:62:7e:d1:9a:7f:a4:c5:56:40:8b:55:78:7d:5a: c2:25:87:81:d4:01:9d:ed:cb:13:9a:60:81:1f:46: 24:03:63:66:a9:e7:3b:ba:7d:b9:8d:59:5f:4d:f2: f0:1a:91:30:d8:68:49:7c:ec:b9:57:3a:82:58:39: 03:17:05:30:f2:87:97:4d:cf:7c:94:6f:07:af:71: 29:78:11:76:15:62:dc:27:ec:c6:46:f0:1c:7b:2e: 79:cb:7e:93:ae:f0:91:4f:a5:6a:d9:33:69:df:af: 93:c1:76:42:bd:dd:a6:62:3a:37:95:3b:37:fb:0a: 75:8d:c0:e2:4d:82:2b:17:4d:03:5d:00:b1:79:75: ac:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:D9:42:79:F4:FF:6D:F0:43:C6:C9:43:EF:CA:84:C0:9A:BC:65:76 X509v3 Authority Key Identifier: keyid:AF:CF:34:7C:2B:C0:75:F0:96:BD:45:4B:E6:95:B3:29:5D:26:49:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/ENmcGYLH7Dib3Uoe91fupE5D93Sp6pG4Esxz26S21cxF/0/AFCF347C2BC075F096BD454BE695B3295D26490B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFCF347C2BC075F096BD454BE695B3295D26490B.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/ENmcGYLH7Dib3Uoe91fupE5D93Sp6pG4Esxz26S21cxF/0/AFCF347C2BC075F096BD454BE695B3295D26490B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption dd:74:e7:8b:00:1d:54:0e:27:1c:19:a0:1e:d8:29:d7:7f:b6: 83:bb:e2:17:1b:d2:6b:b5:09:ef:6c:12:bb:11:39:8a:18:33: a7:8b:e0:6a:be:c3:63:64:77:48:7d:10:d8:4c:9d:02:4e:17: a8:af:4b:db:fc:35:b2:23:f0:e0:f9:dd:5b:05:f6:08:1d:02: b7:f3:b6:48:f6:92:c4:22:91:3a:6d:d1:84:19:06:a7:57:f8: f5:a1:01:01:da:d7:1d:3f:3d:c0:9e:61:b9:b4:7b:de:74:a7: 1a:3e:7c:61:80:b5:c5:60:0f:33:17:23:59:ea:dd:21:86:30: fa:7b:03:31:4e:eb:0b:b5:12:3b:6e:a0:8f:82:3c:fa:15:b5: ae:e5:b5:3b:89:18:34:65:e9:35:19:93:5a:82:c6:e1:57:fe: c5:57:f3:78:af:9f:b1:6c:25:8d:d6:5d:b4:4a:d8:3f:33:c4: 6b:ab:6e:11:f0:f9:3b:81:92:9c:52:d4:11:3b:6b:db:00:a1: 4c:03:31:07:53:c9:4e:24:4c:1a:2f:4d:f4:8e:9b:bd:14:dd: eb:ae:18:aa:80:03:2a:f9:c6:b0:0a:96:e6:9c:b8:81:20:68: 24:ab:e3:6f:ad:a4:49:54:20:f7:b5:98:20:7a:f9:97:07:a9: 5a:88:ad:d7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUNCI7/4H9/DrnfzWtoTXh3LzZaEEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZDRjM0N0MyQkMwNzVGMDk2QkQ0NTRCRTY5NUIzMjk1 RDI2NDkwQjAeFw0yNTExMDMwOTUwMjlaFw0yNTExMDQxMDU3MjlaMDMxMTAvBgNV BAMTKEQ1RDk0Mjc5RjRGRjZERjA0M0M2Qzk0M0VGQ0E4NEMwOUFCQzY1NzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPh4X3vH/yoZbdv0k8h1PG8e7k 3bGBLtcBhOeFZ6x63jQJtxXdaoj2jZjEmiwBK7qPh9tGaBTBkJNrky0n+X2uvDqj FNEL0DqIIqBMd/ppKciJOZYVvTtcEHls+KogACijuROlLR0X1ynJFc+S+fY00U/x agimFwBiftGaf6TFVkCLVXh9WsIlh4HUAZ3tyxOaYIEfRiQDY2ap5zu6fbmNWV9N 8vAakTDYaEl87LlXOoJYOQMXBTDyh5dNz3yUbwevcSl4EXYVYtwn7MZG8Bx7LnnL fpOu8JFPpWrZM2nfr5PBdkK93aZiOjeVOzf7CnWNwOJNgisXTQNdALF5daxrAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU1dlCefT/bfBDxslD78qEwJq8ZXYwHwYDVR0j BBgwFoAUr880fCvAdfCWvUVL5pWzKV0mSQswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRU5tY0dZTEg3RGliM1VvZTkxZnVwRTVEOTNTcDZwRzRFc3h6MjZTMjFj eEYvMC9BRkNGMzQ3QzJCQzA3NUYwOTZCRDQ1NEJFNjk1QjMyOTVEMjY0OTBCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FGQ0YzNDdDMkJDMDc1RjA5 NkJENDU0QkU2OTVCMzI5NUQyNjQ5MEIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RU5tY0dZTEg3RGliM1VvZTkxZnVwRTVEOTNTcDZwRzRFc3h6MjZTMjFjeEYvMC9B RkNGMzQ3QzJCQzA3NUYwOTZCRDQ1NEJFNjk1QjMyOTVEMjY0OTBCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEA3XTniwAdVA4nHBmgHtgp13+2g7viFxvSa7UJ72wSuxE5ihgzp4vgar7DY2R3 SH0Q2EydAk4XqK9L2/w1siPw4PndWwX2CB0Ct/O2SPaSxCKROm3RhBkGp1f49aEB AdrXHT89wJ5hubR73nSnGj58YYC1xWAPMxcjWerdIYYw+nsDMU7rC7USO26gj4I8 +hW1ruW1O4kYNGXpNRmTWoLG4Vf+xVfzeK+fsWwljdZdtErYPzPEa6tuEfD5O4GS nFLUETtr2wChTAMxB1PJTiRMGi9N9I6bvRTd664YqoADKvnGsAqW5py4gSBoJKvj b62kSVQg97WYIHr5lwepWoit1w== -----END CERTIFICATE-----Generated at Mon Nov 3 12:05:36 2025 by rpki-client