$ rpki-client -vvf rpki-repo.registro.br/repo/4oKDjTtuVfRxybQECZfMRov5Z6DpryF7MyQN17v2sZKk/0/AF709D487025EB90C014C7186CC0AEA341A27C3B.mft File: AF709D487025EB90C014C7186CC0AEA341A27C3B.mft (raw, json) Hash identifier: VDBY8zhtV/WJT7dG7jeUgcIfXWrIDdA+GcXkS9+//fE= Subject key identifier: 51:59:72:22:C9:38:AB:37:C7:74:C7:8D:30:5A:8B:7C:90:4D:62:67 Authority key identifier: AF:70:9D:48:70:25:EB:90:C0:14:C7:18:6C:C0:AE:A3:41:A2:7C:3B Certificate issuer: /CN=AF709D487025EB90C014C7186CC0AEA341A27C3B Certificate serial: 19AD3371403A685DAE34E5039E20D77319E8AE12 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF709D487025EB90C014C7186CC0AEA341A27C3B.cer Subject info access: rsync://rpki-repo.registro.br/repo/4oKDjTtuVfRxybQECZfMRov5Z6DpryF7MyQN17v2sZKk/0/AF709D487025EB90C014C7186CC0AEA341A27C3B.mft Manifest number: 2A Signing time: Mon 20 Oct 2025 10:39:33 +0000 Manifest this update: Mon 20 Oct 2025 10:34:33 +0000 Manifest next update: Tue 21 Oct 2025 14:09:33 +0000 Files and hashes: 1: 323830343a373039633a3a2f33322d3438203d3e20323730373337.roa (hash: z3+jy+kvN0ec/CwA1jDFeo1POc5HGxkNptEzu9VsNXs=) 2: 3137372e3232312e3133362e302f32322d3234203d3e20323730373337.roa (hash: DlhDw1dzTc6ndQvekwKDgY9PvHeoaodotFzkhX2390Y=) 3: AF709D487025EB90C014C7186CC0AEA341A27C3B.crl (hash: ZeGDRjivmeEOrdCVHSz79tJQY5r94pusKSwuRV42YKo=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4oKDjTtuVfRxybQECZfMRov5Z6DpryF7MyQN17v2sZKk/0/AF709D487025EB90C014C7186CC0AEA341A27C3B.crl rsync://rpki-repo.registro.br/repo/4oKDjTtuVfRxybQECZfMRov5Z6DpryF7MyQN17v2sZKk/0/AF709D487025EB90C014C7186CC0AEA341A27C3B.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF709D487025EB90C014C7186CC0AEA341A27C3B.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 14:09:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:ad:33:71:40:3a:68:5d:ae:34:e5:03:9e:20:d7:73:19:e8:ae:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF709D487025EB90C014C7186CC0AEA341A27C3B Validity Not Before: Oct 20 10:34:33 2025 GMT Not After : Oct 21 14:09:33 2025 GMT Subject: CN=51597222C938AB37C774C78D305A8B7C904D6267 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:05:0a:07:f0:4d:91:39:ea:85:5e:36:e2:18: 13:8e:80:d6:a9:a8:77:84:41:a2:3e:68:22:2a:b0: 2e:3e:38:7e:1b:a8:f5:e6:99:7e:04:a1:19:9e:ac: e7:e8:39:c8:3d:e4:74:e1:c0:17:51:09:e1:8c:5b: 2c:c4:4b:6f:76:f1:94:e8:5f:a6:e4:f9:b0:cc:28: 8f:b4:2e:df:1d:18:e6:bf:b2:f3:d3:5f:a1:f5:7f: c5:22:ab:9e:45:62:a8:0a:a1:c0:8d:a9:a1:5a:7c: d9:f1:f3:63:8f:d3:b0:52:a0:3a:2a:4d:93:55:91: df:91:5f:b1:0b:e8:54:f8:8a:dc:8b:82:66:fd:52: a5:0d:03:8e:de:25:08:8f:d8:ac:6c:b7:fd:62:a1: d7:fa:5f:41:30:be:70:ff:32:3d:5b:e7:f6:6b:a5: 3e:7d:da:75:63:e9:cd:0f:a5:0a:f9:c0:56:b3:c5: 6f:47:ff:71:32:d8:68:ff:6b:58:8d:e9:75:64:0e: 92:c1:c7:78:5c:8b:98:db:9d:1d:ec:b3:7d:49:a2: 3e:e4:4f:3f:85:d3:50:20:46:c0:f4:3b:cf:fa:aa: c8:60:47:2f:fd:9d:0d:51:5f:b4:70:69:c7:8a:81: 7b:f1:43:a7:e8:b9:6d:31:8a:8a:d6:13:4a:7e:aa: 31:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:59:72:22:C9:38:AB:37:C7:74:C7:8D:30:5A:8B:7C:90:4D:62:67 X509v3 Authority Key Identifier: keyid:AF:70:9D:48:70:25:EB:90:C0:14:C7:18:6C:C0:AE:A3:41:A2:7C:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4oKDjTtuVfRxybQECZfMRov5Z6DpryF7MyQN17v2sZKk/0/AF709D487025EB90C014C7186CC0AEA341A27C3B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF709D487025EB90C014C7186CC0AEA341A27C3B.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4oKDjTtuVfRxybQECZfMRov5Z6DpryF7MyQN17v2sZKk/0/AF709D487025EB90C014C7186CC0AEA341A27C3B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:45:47:d9:0e:97:f5:4a:59:5a:71:44:fd:60:79:c7:ad:da: c9:3c:c4:8b:72:56:ea:b5:5a:df:c1:71:ac:98:1a:16:f8:e9: 3a:3b:2d:0e:86:3f:d9:13:92:e6:61:94:0c:54:02:af:44:3e: 12:17:2b:7a:2a:ea:9b:55:fe:cb:df:5e:4f:a3:a1:6d:9d:a4: fe:3e:eb:de:39:00:3f:60:3d:9d:03:ca:50:e5:5b:c6:a8:03: d4:cf:34:00:4f:fa:9f:19:67:5c:e3:ae:22:ea:95:42:31:a5: 04:2e:8b:38:e7:c8:4a:84:82:c2:a6:a1:70:36:13:ea:53:38: 8e:b5:02:46:b0:9a:96:39:a3:a1:a0:96:ad:32:06:03:29:93: 9e:eb:19:10:7b:d7:6c:5c:86:9f:0f:1b:8c:79:0a:6b:fb:64: 9a:de:90:3f:01:d2:1b:42:b2:db:05:36:80:11:9f:af:0f:81: a9:0d:b0:33:aa:2d:38:7a:72:f2:6e:82:2e:0e:bf:48:27:32: b2:e5:00:fb:1d:27:1c:de:c9:00:e9:59:c7:2e:ac:a7:33:d6: d1:3f:92:4e:6a:af:5c:0f:4e:1e:39:91:78:d7:e1:0f:f1:91: 24:9b:50:71:a0:41:bd:27:1a:0d:dd:03:2d:4c:e9:8c:ec:cc: d1:78:64:b5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUGa0zcUA6aF2uNOUDniDXcxnorhIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY3MDlENDg3MDI1RUI5MEMwMTRDNzE4NkNDMEFFQTM0 MUEyN0MzQjAeFw0yNTEwMjAxMDM0MzNaFw0yNTEwMjExNDA5MzNaMDMxMTAvBgNV BAMTKDUxNTk3MjIyQzkzOEFCMzdDNzc0Qzc4RDMwNUE4QjdDOTA0RDYyNjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1BQoH8E2ROeqFXjbiGBOOgNap qHeEQaI+aCIqsC4+OH4bqPXmmX4EoRmerOfoOcg95HThwBdRCeGMWyzES2928ZTo X6bk+bDMKI+0Lt8dGOa/svPTX6H1f8Uiq55FYqgKocCNqaFafNnx82OP07BSoDoq TZNVkd+RX7EL6FT4ityLgmb9UqUNA47eJQiP2Kxst/1iodf6X0EwvnD/Mj1b5/Zr pT592nVj6c0PpQr5wFazxW9H/3Ey2Gj/a1iN6XVkDpLBx3hci5jbnR3ss31Joj7k Tz+F01AgRsD0O8/6qshgRy/9nQ1RX7RwaceKgXvxQ6fouW0xiorWE0p+qjHlAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUUVlyIsk4qzfHdMeNMFqLfJBNYmcwHwYDVR0j BBgwFoAUr3CdSHAl65DAFMcYbMCuo0GifDswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNG9LRGpUdHVWZlJ4eWJRRUNaZk1Sb3Y1WjZEcHJ5RjdNeVFOMTd2MnNa S2svMC9BRjcwOUQ0ODcwMjVFQjkwQzAxNEM3MTg2Q0MwQUVBMzQxQTI3QzNCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FGNzA5RDQ4NzAyNUVCOTBD MDE0QzcxODZDQzBBRUEzNDFBMjdDM0IuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NG9LRGpUdHVWZlJ4eWJRRUNaZk1Sb3Y1WjZEcHJ5RjdNeVFOMTd2MnNaS2svMC9B RjcwOUQ0ODcwMjVFQjkwQzAxNEM3MTg2Q0MwQUVBMzQxQTI3QzNCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEARkVH2Q6X9UpZWnFE/WB5x63ayTzEi3JW6rVa38FxrJgaFvjpOjstDoY/2ROS 5mGUDFQCr0Q+Ehcreirqm1X+y99eT6OhbZ2k/j7r3jkAP2A9nQPKUOVbxqgD1M80 AE/6nxlnXOOuIuqVQjGlBC6LOOfISoSCwqahcDYT6lM4jrUCRrCaljmjoaCWrTIG AymTnusZEHvXbFyGnw8bjHkKa/tkmt6QPwHSG0Ky2wU2gBGfrw+BqQ2wM6otOHpy 8m6CLg6/SCcysuUA+x0nHN7JAOlZxy6spzPW0T+STmqvXA9OHjmReNfhD/GRJJtQ caBBvScaDd0DLUzpjOzM0XhktQ== -----END CERTIFICATE-----Generated at Mon Oct 20 18:11:26 2025 by rpki-client