$ rpki-client -vvf rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.mft File: AFC529FB243B7780A20B27A2C4E73DAF65C25021.mft (raw, json) Hash identifier: 0tTeAVBs2Lljzj5y7B2NbI07I+lg1l+ttzTZo3E+qRk= Subject key identifier: 36:E5:72:70:83:EA:BB:E0:7B:D4:0A:94:02:75:F7:9D:B6:4C:59:EC Authority key identifier: AF:C5:29:FB:24:3B:77:80:A2:0B:27:A2:C4:E7:3D:AF:65:C2:50:21 Certificate issuer: /CN=AFC529FB243B7780A20B27A2C4E73DAF65C25021 Certificate serial: 74977B9BBA72897C9B3F8702FF2072BA9ECC1632 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.cer Subject info access: rsync://rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.mft Manifest number: 02F0 Signing time: Mon 20 Oct 2025 05:30:03 +0000 Manifest this update: Mon 20 Oct 2025 05:25:03 +0000 Manifest next update: Tue 21 Oct 2025 08:16:03 +0000 Files and hashes: 1: AFC529FB243B7780A20B27A2C4E73DAF65C25021.crl (hash: mLyqyjahn0rTvegSg2HtusFe3nWHhlmHTBGOOzqbKww=) 2: 34352e3233362e3135362e302f32342d3234203d3e20323638323534.roa (hash: g+h7ZeJQoiwltb4pTrWxNjM0uMiKUgQuoMSR90spDQE=) 3: 34352e3233362e3135382e302f32342d3234203d3e20323638323534.roa (hash: JHU7hFLVcz7KCri5GGmgpJSrExwyJApMd1LcVi/3ahc=) 4: 34352e3233362e3135362e302f32322d3232203d3e20323638323534.roa (hash: XrgPqt2d+yXrgA5qVsA3hVOyOYJP6pNSPVOYcSw37As=) 5: 34352e3233362e3135372e302f32342d3234203d3e20323638323534.roa (hash: G+9fnKDKYzXcNVDiQbyVgNQLvfSyrAWnEylFjOb1cKM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.crl rsync://rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 08:16:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:97:7b:9b:ba:72:89:7c:9b:3f:87:02:ff:20:72:ba:9e:cc:16:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFC529FB243B7780A20B27A2C4E73DAF65C25021 Validity Not Before: Oct 20 05:25:03 2025 GMT Not After : Oct 21 08:16:03 2025 GMT Subject: CN=36E5727083EABBE07BD40A940275F79DB64C59EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:50:fa:30:1e:20:d2:87:46:77:2e:8e:2f:99: 3d:37:10:75:da:f0:42:29:dd:e9:2a:14:7a:b7:0e: 54:43:6c:42:6c:b3:7b:48:1c:2c:79:c8:90:cc:3a: c1:ae:e5:86:0a:85:6e:b8:c1:16:04:e3:4d:e1:18: a5:5d:3f:30:6f:29:23:34:17:f3:ec:c4:7f:4d:66: 3e:ea:56:84:36:fb:fb:6d:d4:c9:32:d3:6a:ed:69: 5e:94:9a:75:73:b7:c6:1a:69:08:86:3d:b4:24:5a: 83:48:dd:f9:86:42:86:a6:1a:0a:44:3f:ee:b5:4d: e0:e0:5e:01:a7:4f:28:1c:3f:8d:98:d2:6d:26:56: 4f:ab:74:a6:1e:3d:1d:d7:76:52:8b:46:07:c4:8b: 67:09:23:67:f5:8b:19:c7:7b:26:d0:ae:8f:c7:1b: 76:e3:dc:92:3d:7c:68:db:6b:6c:af:25:2c:59:0e: 90:8d:15:06:44:ab:a6:9f:fd:86:6c:a2:68:55:f9: 84:32:47:bb:f9:03:20:37:1a:7b:b2:05:3a:8a:e3: 8b:e9:70:1a:02:ff:9a:a9:12:fd:a3:af:97:a7:8e: c7:1d:0a:e6:60:a9:6d:4f:b2:09:50:f6:7b:74:59: 6d:b0:97:87:91:7a:2e:ba:fd:cc:2a:01:7a:17:1f: d8:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:E5:72:70:83:EA:BB:E0:7B:D4:0A:94:02:75:F7:9D:B6:4C:59:EC X509v3 Authority Key Identifier: keyid:AF:C5:29:FB:24:3B:77:80:A2:0B:27:A2:C4:E7:3D:AF:65:C2:50:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:01:6f:8a:4e:db:1c:be:3f:14:2f:dc:51:9b:3d:ac:5b:1e: 7e:18:0a:d1:eb:c5:46:6f:26:41:25:f0:95:3a:10:c1:37:6a: 91:42:96:43:ea:0f:9a:d2:5a:fa:59:8d:f0:d0:07:27:fe:81: 66:26:22:e3:62:67:fb:09:53:d7:65:dc:f4:79:92:1f:36:b4: 41:1d:75:c7:39:d0:5d:a8:37:92:28:bc:3a:03:3f:8b:c4:dd: cb:34:59:6c:a4:23:47:fd:ed:c6:fe:d9:53:b8:29:f7:d4:c0: 69:7b:a7:00:01:b0:8f:2f:be:c7:4d:0a:8a:34:40:0b:b1:60: 39:b6:b9:ad:db:27:4a:2b:f6:8b:a0:ce:89:21:94:80:50:8a: 5d:f1:64:a1:6f:46:bd:83:67:38:ee:5f:53:41:fc:13:ac:dc: 36:5b:b4:07:2c:86:21:74:51:a1:46:14:90:72:ac:28:54:fa: d0:41:af:a7:50:7b:15:35:5f:44:3e:43:5d:1b:9e:c2:b7:01: 4d:48:11:53:e9:bd:b1:bc:8b:b8:59:77:f8:1b:78:a8:7e:dc: 15:38:eb:29:f1:ec:70:42:50:32:ab:60:73:07:23:4f:f0:fd: df:e9:1a:dd:fb:95:18:7f:c4:58:02:f7:81:fa:80:13:28:4d: 15:5d:8b:ef -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUdJd7m7pyiXybP4cC/yByup7MFjIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZDNTI5RkIyNDNCNzc4MEEyMEIyN0EyQzRFNzNEQUY2 NUMyNTAyMTAeFw0yNTEwMjAwNTI1MDNaFw0yNTEwMjEwODE2MDNaMDMxMTAvBgNV BAMTKDM2RTU3MjcwODNFQUJCRTA3QkQ0MEE5NDAyNzVGNzlEQjY0QzU5RUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8UPowHiDSh0Z3Lo4vmT03EHXa 8EIp3ekqFHq3DlRDbEJss3tIHCx5yJDMOsGu5YYKhW64wRYE403hGKVdPzBvKSM0 F/PsxH9NZj7qVoQ2+/tt1Mky02rtaV6UmnVzt8YaaQiGPbQkWoNI3fmGQoamGgpE P+61TeDgXgGnTygcP42Y0m0mVk+rdKYePR3XdlKLRgfEi2cJI2f1ixnHeybQro/H G3bj3JI9fGjba2yvJSxZDpCNFQZEq6af/YZsomhV+YQyR7v5AyA3GnuyBTqK44vp cBoC/5qpEv2jr5enjscdCuZgqW1PsglQ9nt0WW2wl4eRei66/cwqAXoXH9jrAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUNuVycIPqu+B71AqUAnX3nbZMWewwHwYDVR0j BBgwFoAUr8Up+yQ7d4CiCyeixOc9r2XCUCEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQTNodHpDelJQekxuWUY3cTl5eDdBZEJZM1lHTm9jUUR3aHo3RFdZWjJQ UUIvMS9BRkM1MjlGQjI0M0I3NzgwQTIwQjI3QTJDNEU3M0RBRjY1QzI1MDIxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FGQzUyOUZCMjQzQjc3ODBB MjBCMjdBMkM0RTczREFGNjVDMjUwMjEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QTNodHpDelJQekxuWUY3cTl5eDdBZEJZM1lHTm9jUUR3aHo3RFdZWjJQUUIvMS9B RkM1MjlGQjI0M0I3NzgwQTIwQjI3QTJDNEU3M0RBRjY1QzI1MDIxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFgFvik7bHL4/FC/cUZs9rFsefhgK0evFRm8mQSXwlToQwTdqkUKWQ+oPmtJa +lmN8NAHJ/6BZiYi42Jn+wlT12Xc9HmSHza0QR11xznQXag3kii8OgM/i8TdyzRZ bKQjR/3txv7ZU7gp99TAaXunAAGwjy++x00KijRAC7FgOba5rdsnSiv2i6DOiSGU gFCKXfFkoW9GvYNnOO5fU0H8E6zcNlu0ByyGIXRRoUYUkHKsKFT60EGvp1B7FTVf RD5DXRuewrcBTUgRU+m9sbyLuFl3+Bt4qH7cFTjrKfHscEJQMqtgcwcjT/D93+ka 3fuVGH/EWAL3gfqAEyhNFV2L7w== -----END CERTIFICATE-----Generated at Mon Oct 20 13:41:34 2025 by rpki-client