$ rpki-client -vvf rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.mft File: AFC529FB243B7780A20B27A2C4E73DAF65C25021.mft (raw, json) Hash identifier: ghYJ5C4VUKJNhty6flNjClQu4Vka3unO97BCWJox0FU= Subject key identifier: 40:58:8D:43:9C:A9:01:5E:F5:46:0A:57:46:4A:44:6A:F4:9D:95:27 Authority key identifier: AF:C5:29:FB:24:3B:77:80:A2:0B:27:A2:C4:E7:3D:AF:65:C2:50:21 Certificate issuer: /CN=AFC529FB243B7780A20B27A2C4E73DAF65C25021 Certificate serial: 278B2E49966993C898954D0A14FC4FDFDB3874AF Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.cer Subject info access: rsync://rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.mft Manifest number: 02A3 Signing time: Sat 23 Aug 2025 14:40:01 +0000 Manifest this update: Sat 23 Aug 2025 14:35:01 +0000 Manifest next update: Sun 24 Aug 2025 16:50:01 +0000 Files and hashes: 1: AFC529FB243B7780A20B27A2C4E73DAF65C25021.crl (hash: S14flBtx7sRZwylabCauu4a8aCsKxCAnUjN8lNBIg+s=) 2: 34352e3233362e3135382e302f32342d3234203d3e20323638323534.roa (hash: JHU7hFLVcz7KCri5GGmgpJSrExwyJApMd1LcVi/3ahc=) 3: 34352e3233362e3135362e302f32322d3232203d3e20323638323534.roa (hash: XrgPqt2d+yXrgA5qVsA3hVOyOYJP6pNSPVOYcSw37As=) 4: 34352e3233362e3135362e302f32342d3234203d3e20323638323534.roa (hash: g+h7ZeJQoiwltb4pTrWxNjM0uMiKUgQuoMSR90spDQE=) 5: 34352e3233362e3135372e302f32342d3234203d3e20323638323534.roa (hash: G+9fnKDKYzXcNVDiQbyVgNQLvfSyrAWnEylFjOb1cKM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.crl rsync://rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Aug 2025 16:50:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:8b:2e:49:96:69:93:c8:98:95:4d:0a:14:fc:4f:df:db:38:74:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFC529FB243B7780A20B27A2C4E73DAF65C25021 Validity Not Before: Aug 23 14:35:01 2025 GMT Not After : Aug 24 16:50:01 2025 GMT Subject: CN=40588D439CA9015EF5460A57464A446AF49D9527 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:77:80:93:e0:2d:b6:1b:db:3c:07:40:8e:f7: 7c:4e:ca:68:8d:4d:fe:20:8f:49:ff:e2:92:b9:aa: 8c:ec:9d:78:12:a7:38:c6:aa:de:ed:c4:ed:d4:4b: 67:4d:de:5e:6d:dd:0a:6c:87:0a:57:ae:3e:a2:72: c6:4c:0e:c6:31:84:aa:f2:24:e0:bb:45:31:ba:ee: e8:71:eb:57:d1:7e:8b:b5:cd:63:14:b4:3f:4a:9e: 60:d9:ff:60:54:9b:6f:05:c1:e8:c6:88:92:b2:25: 8e:81:fc:cf:d4:d6:a2:7b:6f:cc:db:96:63:1d:83: a8:a3:29:a8:49:82:0c:9e:b2:41:0b:56:cd:6a:ab: e1:bf:f2:d9:04:64:75:f5:10:cc:06:82:7b:19:d6: bf:10:2f:8b:dd:0d:82:fe:31:2e:3e:3e:87:e3:be: e1:b4:8d:83:d1:74:42:8e:3b:4a:64:33:57:ad:72: c8:6c:ce:1a:ad:90:e3:e1:a6:8d:1c:cd:06:f0:45: 6a:46:e9:b2:00:04:ba:42:93:5b:9d:b3:d9:58:df: 6a:52:f2:68:2b:3c:cf:12:26:8a:51:56:1b:5a:55: d5:dd:1c:cc:85:a3:92:d8:28:9b:43:a3:58:24:da: 46:fe:85:4c:40:83:00:73:d4:76:83:5d:25:b0:a0: eb:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:58:8D:43:9C:A9:01:5E:F5:46:0A:57:46:4A:44:6A:F4:9D:95:27 X509v3 Authority Key Identifier: keyid:AF:C5:29:FB:24:3B:77:80:A2:0B:27:A2:C4:E7:3D:AF:65:C2:50:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:1a:cb:fb:7b:cb:b2:ff:20:a2:f3:2e:96:ae:76:1f:cf:b8: e3:e0:46:4b:25:60:3f:a4:9e:d0:b5:75:64:c1:19:b9:e9:ba: dc:e7:6f:55:80:c0:51:ea:a2:b8:51:4b:13:71:8a:a4:5f:b7: 47:af:68:cf:9c:b2:d7:8a:d8:6e:1a:4d:6f:d3:48:61:a5:e4: f8:b4:43:b4:d0:17:bf:6b:79:fc:54:c1:c9:6d:02:1a:85:a5: 95:45:22:af:12:c0:b7:1c:f1:d9:ed:40:c2:7d:59:cc:0c:57: c3:40:b0:29:1c:3b:de:a5:37:28:97:2a:89:ed:60:63:7d:c2: ec:ff:26:2d:ec:70:7e:9a:01:92:3d:0c:5a:59:72:29:37:b1: 25:50:24:a6:7d:59:41:15:b2:85:93:3b:64:11:83:8e:d9:e3: 66:e4:70:77:91:f6:b3:a9:ab:b6:e0:38:3a:58:f6:b9:53:cc: c0:d0:3c:f8:00:36:91:13:f4:85:a4:e7:f6:ee:34:fb:d2:26: f6:3d:06:47:07:44:ca:5f:8f:be:bd:96:63:3c:2d:2a:29:7e: 5b:35:5f:2d:0f:17:c9:7f:36:ed:32:e3:01:df:c8:56:61:25: b8:20:05:b9:84:9a:b8:01:34:78:96:d5:34:34:bb:c3:ba:7e: bf:77:67:94 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUJ4suSZZpk8iYlU0KFPxP39s4dK8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZDNTI5RkIyNDNCNzc4MEEyMEIyN0EyQzRFNzNEQUY2 NUMyNTAyMTAeFw0yNTA4MjMxNDM1MDFaFw0yNTA4MjQxNjUwMDFaMDMxMTAvBgNV BAMTKDQwNTg4RDQzOUNBOTAxNUVGNTQ2MEE1NzQ2NEE0NDZBRjQ5RDk1MjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAd4CT4C22G9s8B0CO93xOymiN Tf4gj0n/4pK5qozsnXgSpzjGqt7txO3US2dN3l5t3QpshwpXrj6icsZMDsYxhKry JOC7RTG67uhx61fRfou1zWMUtD9KnmDZ/2BUm28FwejGiJKyJY6B/M/U1qJ7b8zb lmMdg6ijKahJggyeskELVs1qq+G/8tkEZHX1EMwGgnsZ1r8QL4vdDYL+MS4+Pofj vuG0jYPRdEKOO0pkM1etcshszhqtkOPhpo0czQbwRWpG6bIABLpCk1uds9lY32pS 8mgrPM8SJopRVhtaVdXdHMyFo5LYKJtDo1gk2kb+hUxAgwBz1HaDXSWwoOslAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUQFiNQ5ypAV71RgpXRkpEavSdlScwHwYDVR0j BBgwFoAUr8Up+yQ7d4CiCyeixOc9r2XCUCEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQTNodHpDelJQekxuWUY3cTl5eDdBZEJZM1lHTm9jUUR3aHo3RFdZWjJQ UUIvMS9BRkM1MjlGQjI0M0I3NzgwQTIwQjI3QTJDNEU3M0RBRjY1QzI1MDIxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FGQzUyOUZCMjQzQjc3ODBB MjBCMjdBMkM0RTczREFGNjVDMjUwMjEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QTNodHpDelJQekxuWUY3cTl5eDdBZEJZM1lHTm9jUUR3aHo3RFdZWjJQUUIvMS9B RkM1MjlGQjI0M0I3NzgwQTIwQjI3QTJDNEU3M0RBRjY1QzI1MDIxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAABrL+3vLsv8govMulq52H8+44+BGSyVgP6Se0LV1ZMEZuem63OdvVYDAUeqi uFFLE3GKpF+3R69oz5yy14rYbhpNb9NIYaXk+LRDtNAXv2t5/FTByW0CGoWllUUi rxLAtxzx2e1Awn1ZzAxXw0CwKRw73qU3KJcqie1gY33C7P8mLexwfpoBkj0MWlly KTexJVAkpn1ZQRWyhZM7ZBGDjtnjZuRwd5H2s6mrtuA4Olj2uVPMwNA8+AA2kRP0 haTn9u40+9Im9j0GRwdEyl+Pvr2WYzwtKil+WzVfLQ8XyX827TLjAd/IVmEluCAF uYSauAE0eJbVNDS7w7p+v3dnlA== -----END CERTIFICATE-----Generated at Sat Aug 23 22:17:00 2025 by rpki-client