$ rpki-client -vvf rpki-repo.registro.br/repo/3W2cSkQQyqsAfuR6694VZF2EBd7WPhkDMcveD3tdyzfb/0/AF4A2DB89E34555B8683D2189961132177B11C81.mft File: AF4A2DB89E34555B8683D2189961132177B11C81.mft (raw, json) Hash identifier: km3bxIAfWBThBdYo3M6VPT1/re2sX2R/ti00DTb1HMg= Subject key identifier: CF:56:AE:D4:F5:5E:3D:8C:48:B5:8B:FB:0A:06:EA:C8:BC:C8:3B:F9 Authority key identifier: AF:4A:2D:B8:9E:34:55:5B:86:83:D2:18:99:61:13:21:77:B1:1C:81 Certificate issuer: /CN=AF4A2DB89E34555B8683D2189961132177B11C81 Certificate serial: 5266CD7DD76EFBF73D8A5805F25B3FFAD5A8540E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF4A2DB89E34555B8683D2189961132177B11C81.cer Subject info access: rsync://rpki-repo.registro.br/repo/3W2cSkQQyqsAfuR6694VZF2EBd7WPhkDMcveD3tdyzfb/0/AF4A2DB89E34555B8683D2189961132177B11C81.mft Manifest number: 90 Signing time: Sat 23 Aug 2025 06:33:33 +0000 Manifest this update: Sat 23 Aug 2025 06:28:33 +0000 Manifest next update: Sun 24 Aug 2025 08:36:33 +0000 Files and hashes: 1: AF4A2DB89E34555B8683D2189961132177B11C81.crl (hash: ozVrxObSAW0hG7mmmHfW5hWh98rTkqUb3aVWdFft0Wc=) 2: 323830343a323164383a3a2f33322d313238203d3e20323634353737.roa (hash: QNBOlmI1R5nTlUtL4Q8+avShqQstAd9Eh6Nq2rgyZcc=) 3: 3133382e33362e3131362e302f32322d3332203d3e20323634353737.roa (hash: Db8sToV5ujds5q1beOvfPPCXTGcHwubMfh/VEsxLVhg=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3W2cSkQQyqsAfuR6694VZF2EBd7WPhkDMcveD3tdyzfb/0/AF4A2DB89E34555B8683D2189961132177B11C81.crl rsync://rpki-repo.registro.br/repo/3W2cSkQQyqsAfuR6694VZF2EBd7WPhkDMcveD3tdyzfb/0/AF4A2DB89E34555B8683D2189961132177B11C81.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF4A2DB89E34555B8683D2189961132177B11C81.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Aug 2025 08:36:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:66:cd:7d:d7:6e:fb:f7:3d:8a:58:05:f2:5b:3f:fa:d5:a8:54:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF4A2DB89E34555B8683D2189961132177B11C81 Validity Not Before: Aug 23 06:28:33 2025 GMT Not After : Aug 24 08:36:33 2025 GMT Subject: CN=CF56AED4F55E3D8C48B58BFB0A06EAC8BCC83BF9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:ea:3c:6f:54:34:d6:87:fb:13:9d:b0:f5:4b: 3f:22:f8:3c:28:2f:cb:d2:00:d1:23:a6:a4:a3:b4: 46:d3:85:99:2c:17:1b:5c:e1:7e:dd:44:d4:31:c1: 1c:19:b8:df:8c:85:7a:fe:48:62:38:38:c8:07:05: 43:3c:99:c2:82:a3:95:cf:52:aa:cb:2b:31:e3:2c: c5:e0:a9:8b:89:c4:0c:de:32:dc:f0:25:08:4d:ea: b1:b5:1c:f1:52:a7:9c:a3:ae:ac:50:a1:13:fc:14: 66:47:a4:81:dd:20:ce:39:c8:d3:5d:f6:6f:78:45: ec:12:d6:a5:22:42:ac:21:87:31:10:44:c4:50:dc: bf:7c:b4:c5:6b:c4:99:eb:cb:d7:77:80:af:8d:3e: 85:9a:0e:bf:4a:9e:c5:fc:e6:9f:81:61:40:d1:e5: f6:0d:18:b9:2e:02:69:61:15:d1:9c:88:b6:dd:90: 1b:de:2a:a2:52:a1:58:16:aa:2c:ae:c1:d6:54:a8: ea:dd:ac:d3:59:5f:07:83:33:06:92:68:24:ba:d8: c1:fd:2e:71:4c:ba:53:45:e5:14:3f:17:39:3a:e7: 33:78:2b:10:1e:c4:0f:52:63:16:67:93:43:f0:4b: 13:37:8c:2a:a8:7c:73:d1:29:b1:0d:ac:61:83:12: e4:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:56:AE:D4:F5:5E:3D:8C:48:B5:8B:FB:0A:06:EA:C8:BC:C8:3B:F9 X509v3 Authority Key Identifier: keyid:AF:4A:2D:B8:9E:34:55:5B:86:83:D2:18:99:61:13:21:77:B1:1C:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3W2cSkQQyqsAfuR6694VZF2EBd7WPhkDMcveD3tdyzfb/0/AF4A2DB89E34555B8683D2189961132177B11C81.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF4A2DB89E34555B8683D2189961132177B11C81.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3W2cSkQQyqsAfuR6694VZF2EBd7WPhkDMcveD3tdyzfb/0/AF4A2DB89E34555B8683D2189961132177B11C81.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:7b:9f:cf:a5:d5:2d:26:74:7c:d4:79:e1:64:eb:cd:69:d6: 53:72:bf:33:9a:95:f6:af:48:ea:01:29:19:20:7d:1a:04:ef: 45:84:31:12:3c:50:54:43:ec:05:6f:95:cd:24:f4:d9:fd:ca: 2b:2f:48:33:9b:16:58:b5:93:2d:70:71:18:92:2d:eb:16:28: 0a:d8:d5:8b:3a:45:9a:0f:cf:51:b1:ca:bc:e3:f5:67:1d:34: 49:dc:83:61:ec:64:9c:68:ce:a1:92:31:c9:d3:72:60:d7:9c: f9:75:a1:06:f8:af:1e:43:af:59:bf:23:2e:ad:f2:53:80:9c: b4:52:cc:90:1e:8e:bb:50:25:70:31:2b:af:4f:2e:b2:77:ea: c8:df:64:7e:92:85:84:4e:51:9a:a1:41:fd:8d:47:9b:d1:e0: 99:de:22:2a:10:93:3d:d6:9e:09:96:6d:35:fb:1b:8a:53:49: 07:21:38:27:40:6a:9a:ef:dd:f4:e7:6e:e9:17:38:89:74:b3: e1:9f:01:8c:18:5b:05:a8:89:53:c4:13:59:bf:08:bd:02:40: 03:43:6d:08:2d:74:b0:f8:39:93:7e:7a:dc:33:ad:e6:48:6f: 75:7b:d9:c0:ef:bc:e8:2e:7b:bc:cf:cb:4d:a3:35:32:1d:43: ee:32:d7:f4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUUmbNfddu+/c9ilgF8ls/+tWoVA4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY0QTJEQjg5RTM0NTU1Qjg2ODNEMjE4OTk2MTEzMjE3 N0IxMUM4MTAeFw0yNTA4MjMwNjI4MzNaFw0yNTA4MjQwODM2MzNaMDMxMTAvBgNV BAMTKENGNTZBRUQ0RjU1RTNEOEM0OEI1OEJGQjBBMDZFQUM4QkNDODNCRjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW6jxvVDTWh/sTnbD1Sz8i+Dwo L8vSANEjpqSjtEbThZksFxtc4X7dRNQxwRwZuN+MhXr+SGI4OMgHBUM8mcKCo5XP UqrLKzHjLMXgqYuJxAzeMtzwJQhN6rG1HPFSp5yjrqxQoRP8FGZHpIHdIM45yNNd 9m94RewS1qUiQqwhhzEQRMRQ3L98tMVrxJnry9d3gK+NPoWaDr9KnsX85p+BYUDR 5fYNGLkuAmlhFdGciLbdkBveKqJSoVgWqiyuwdZUqOrdrNNZXweDMwaSaCS62MH9 LnFMulNF5RQ/Fzk65zN4KxAexA9SYxZnk0PwSxM3jCqofHPRKbENrGGDEuRFAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUz1au1PVePYxItYv7CgbqyLzIO/kwHwYDVR0j BBgwFoAUr0otuJ40VVuGg9IYmWETIXexHIEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM1cyY1NrUVF5cXNBZnVSNjY5NFZaRjJFQmQ3V1Boa0RNY3ZlRDN0ZHl6 ZmIvMC9BRjRBMkRCODlFMzQ1NTVCODY4M0QyMTg5OTYxMTMyMTc3QjExQzgxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FGNEEyREI4OUUzNDU1NUI4 NjgzRDIxODk5NjExMzIxNzdCMTFDODEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M1cyY1NrUVF5cXNBZnVSNjY5NFZaRjJFQmQ3V1Boa0RNY3ZlRDN0ZHl6ZmIvMC9B RjRBMkRCODlFMzQ1NTVCODY4M0QyMTg5OTYxMTMyMTc3QjExQzgxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdXufz6XVLSZ0fNR54WTrzWnWU3K/M5qV9q9I6gEpGSB9GgTvRYQxEjxQVEPs BW+VzST02f3KKy9IM5sWWLWTLXBxGJIt6xYoCtjVizpFmg/PUbHKvOP1Zx00SdyD YexknGjOoZIxydNyYNec+XWhBvivHkOvWb8jLq3yU4CctFLMkB6Ou1AlcDErr08u snfqyN9kfpKFhE5RmqFB/Y1Hm9Hgmd4iKhCTPdaeCZZtNfsbilNJByE4J0Bqmu/d 9Odu6Rc4iXSz4Z8BjBhbBaiJU8QTWb8IvQJAA0NtCC10sPg5k3563DOt5khvdXvZ wO+86C57vM/LTaM1Mh1D7jLX9A== -----END CERTIFICATE-----Generated at Sat Aug 23 17:19:17 2025 by rpki-client