$ rpki-client -vvf rpki-repo.registro.br/repo/7KpwKJjGy6R95EFPa7iQd6PJJyvpQQC9hxS2rZti1Bxg/1/AFCA87E4AD035B5E4CA0EDA1C4C042C69BFE91EC.mft File: AFCA87E4AD035B5E4CA0EDA1C4C042C69BFE91EC.mft (raw, json) Hash identifier: 0essaca+N2lY+VAJlGd/R2u4vg/wsg+DiyJorNcPFeY= Subject key identifier: 9B:02:0F:69:B7:D6:63:E4:3D:C6:07:52:61:86:97:22:C3:94:27:17 Authority key identifier: AF:CA:87:E4:AD:03:5B:5E:4C:A0:ED:A1:C4:C0:42:C6:9B:FE:91:EC Certificate issuer: /CN=AFCA87E4AD035B5E4CA0EDA1C4C042C69BFE91EC Certificate serial: 4C9BB02D29547672BB0DDAC777EFA175F4458B0A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFCA87E4AD035B5E4CA0EDA1C4C042C69BFE91EC.cer Subject info access: rsync://rpki-repo.registro.br/repo/7KpwKJjGy6R95EFPa7iQd6PJJyvpQQC9hxS2rZti1Bxg/1/AFCA87E4AD035B5E4CA0EDA1C4C042C69BFE91EC.mft Manifest number: 0303 Signing time: Mon 20 Oct 2025 22:48:51 +0000 Manifest this update: Mon 20 Oct 2025 22:43:51 +0000 Manifest next update: Wed 22 Oct 2025 01:03:51 +0000 Files and hashes: 1: 34352e37302e3134382e302f32322d3234203d3e20323637353839.roa (hash: 2p6uFFtOxrFLgwvk+5zkCXG63pr08f9yEGYoLV1hAJY=) 2: 323830343a343363383a3a2f33322d3336203d3e20323637353839.roa (hash: 8Gs+UV6nO+bLlDoxgdD+eVl74rMk1Zi2fSdRQ1UAf1M=) 3: AFCA87E4AD035B5E4CA0EDA1C4C042C69BFE91EC.crl (hash: hdyOuKgA7007jf5ogoBdgfYKmWPEcY1w15PHb05YV3E=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7KpwKJjGy6R95EFPa7iQd6PJJyvpQQC9hxS2rZti1Bxg/1/AFCA87E4AD035B5E4CA0EDA1C4C042C69BFE91EC.crl rsync://rpki-repo.registro.br/repo/7KpwKJjGy6R95EFPa7iQd6PJJyvpQQC9hxS2rZti1Bxg/1/AFCA87E4AD035B5E4CA0EDA1C4C042C69BFE91EC.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFCA87E4AD035B5E4CA0EDA1C4C042C69BFE91EC.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 22 Oct 2025 01:03:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:9b:b0:2d:29:54:76:72:bb:0d:da:c7:77:ef:a1:75:f4:45:8b:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFCA87E4AD035B5E4CA0EDA1C4C042C69BFE91EC Validity Not Before: Oct 20 22:43:51 2025 GMT Not After : Oct 22 01:03:51 2025 GMT Subject: CN=9B020F69B7D663E43DC6075261869722C3942717 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:a4:bf:bf:9e:ab:69:07:07:5f:a9:0b:58:4c: e3:57:ea:e4:11:ae:94:ef:02:d9:7b:9f:c5:b4:a2: b4:ca:a8:22:82:8f:5f:1f:bb:49:fe:79:df:e9:a5: 07:6d:9e:d1:23:d5:69:07:62:f1:7e:14:16:00:83: 84:79:40:95:99:b7:c0:0a:af:94:67:42:61:82:fb: 22:fb:25:6a:7c:b2:af:78:a3:c3:07:c8:da:0e:79: 30:6b:07:ce:f5:57:9a:3f:98:cc:21:3d:45:0b:db: 52:3c:71:40:72:5b:dc:02:7b:ef:dd:ff:e5:ff:82: 30:49:b3:a5:e0:c5:35:39:98:e6:47:d9:83:5f:c2: e7:c0:1a:da:57:7e:68:9a:48:4d:ad:3f:40:78:d6: 8d:df:87:b6:51:b2:9b:fb:3d:78:95:c9:a2:ed:57: b2:d5:95:04:c0:b0:42:f6:c8:0e:32:7d:91:07:4d: 16:3c:49:e2:42:19:44:13:b7:35:1b:0d:d8:76:5f: 8c:ba:2e:ad:b4:9f:3e:27:3e:df:87:bc:95:f7:91: d9:51:4b:4d:2e:a4:9e:99:3d:30:b8:29:ff:21:63: f6:3c:e6:22:e2:70:65:78:7c:65:95:5f:05:8e:a5: de:c9:ba:16:cb:84:60:6e:6d:fd:f4:3d:b9:af:75: 18:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:02:0F:69:B7:D6:63:E4:3D:C6:07:52:61:86:97:22:C3:94:27:17 X509v3 Authority Key Identifier: keyid:AF:CA:87:E4:AD:03:5B:5E:4C:A0:ED:A1:C4:C0:42:C6:9B:FE:91:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7KpwKJjGy6R95EFPa7iQd6PJJyvpQQC9hxS2rZti1Bxg/1/AFCA87E4AD035B5E4CA0EDA1C4C042C69BFE91EC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFCA87E4AD035B5E4CA0EDA1C4C042C69BFE91EC.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7KpwKJjGy6R95EFPa7iQd6PJJyvpQQC9hxS2rZti1Bxg/1/AFCA87E4AD035B5E4CA0EDA1C4C042C69BFE91EC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:03:25:fe:ca:41:ba:b4:84:e4:9d:bb:c8:32:47:f0:ea:d6: e5:17:f6:da:d0:77:86:5a:5b:24:2b:d2:00:12:52:7e:ae:ca: 22:48:94:7a:76:09:58:41:c1:4c:ec:13:c2:4f:7f:80:b0:37: d0:f5:7a:43:fa:3c:34:03:29:3d:6c:a4:71:4a:d4:6d:7c:a8: b3:7d:e4:53:e9:7f:03:bf:19:2a:42:4d:f6:1c:ae:4b:e5:1c: 81:b9:e9:65:4e:f9:33:b8:80:f9:d6:a1:6f:3b:ec:54:8f:6d: 34:bc:f8:fc:05:63:06:4a:05:32:21:59:13:f3:fc:01:3a:b6: b6:1c:0d:5f:7b:ea:bf:80:f4:8f:6d:d6:68:36:a8:e8:50:19: 80:51:6e:ad:eb:bc:d4:c9:32:6e:53:39:20:77:73:fe:6b:78: 16:47:fc:f2:2b:66:00:f8:ba:57:cc:0c:30:4a:91:b2:7c:c7: 55:43:bb:a7:ad:d9:e2:01:2a:25:b0:6f:26:47:35:c6:fc:9a: c1:35:0f:17:8e:f8:ec:89:a7:30:d1:0e:7a:98:83:56:6a:43: a6:28:ae:a6:c0:e2:27:fe:52:4f:6b:c0:56:27:d8:70:93:46: 2c:09:54:1a:26:e8:92:47:cd:c5:76:98:9e:b5:eb:a6:8e:63: ac:86:49:f7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUTJuwLSlUdnK7DdrHd++hdfRFiwowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZDQTg3RTRBRDAzNUI1RTRDQTBFREExQzRDMDQyQzY5 QkZFOTFFQzAeFw0yNTEwMjAyMjQzNTFaFw0yNTEwMjIwMTAzNTFaMDMxMTAvBgNV BAMTKDlCMDIwRjY5QjdENjYzRTQzREM2MDc1MjYxODY5NzIyQzM5NDI3MTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD8pL+/nqtpBwdfqQtYTONX6uQR rpTvAtl7n8W0orTKqCKCj18fu0n+ed/ppQdtntEj1WkHYvF+FBYAg4R5QJWZt8AK r5RnQmGC+yL7JWp8sq94o8MHyNoOeTBrB871V5o/mMwhPUUL21I8cUByW9wCe+/d /+X/gjBJs6XgxTU5mOZH2YNfwufAGtpXfmiaSE2tP0B41o3fh7ZRspv7PXiVyaLt V7LVlQTAsEL2yA4yfZEHTRY8SeJCGUQTtzUbDdh2X4y6Lq20nz4nPt+HvJX3kdlR S00upJ6ZPTC4Kf8hY/Y85iLicGV4fGWVXwWOpd7JuhbLhGBubf30PbmvdRgRAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUmwIPabfWY+Q9xgdSYYaXIsOUJxcwHwYDVR0j BBgwFoAUr8qH5K0DW15MoO2hxMBCxpv+kewwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN0twd0tKakd5NlI5NUVGUGE3aVFkNlBKSnl2cFFRQzloeFMyclp0aTFC eGcvMS9BRkNBODdFNEFEMDM1QjVFNENBMEVEQTFDNEMwNDJDNjlCRkU5MUVDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FGQ0E4N0U0QUQwMzVCNUU0 Q0EwRURBMUM0QzA0MkM2OUJGRTkxRUMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v N0twd0tKakd5NlI5NUVGUGE3aVFkNlBKSnl2cFFRQzloeFMyclp0aTFCeGcvMS9B RkNBODdFNEFEMDM1QjVFNENBMEVEQTFDNEMwNDJDNjlCRkU5MUVDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnwMl/spBurSE5J27yDJH8OrW5Rf22tB3hlpbJCvSABJSfq7KIkiUenYJWEHB TOwTwk9/gLA30PV6Q/o8NAMpPWykcUrUbXyos33kU+l/A78ZKkJN9hyuS+Ucgbnp ZU75M7iA+dahbzvsVI9tNLz4/AVjBkoFMiFZE/P8ATq2thwNX3vqv4D0j23WaDao 6FAZgFFureu81MkyblM5IHdz/mt4Fkf88itmAPi6V8wMMEqRsnzHVUO7p63Z4gEq JbBvJkc1xvyawTUPF4747ImnMNEOepiDVmpDpiiupsDiJ/5ST2vAVifYcJNGLAlU GibokkfNxXaYnrXrpo5jrIZJ9w== -----END CERTIFICATE-----Generated at Tue Oct 21 03:03:18 2025 by rpki-client