$ rpki-client -vvf rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.mft File: AFF600EA088C0C0C3160D75A952506A94913C8A8.mft (raw, json) Hash identifier: Ey6u33jz4TteKwARx39FxFATeoO0TJQS6GjRamA+7/E= Subject key identifier: D9:C9:36:B3:39:8C:EE:8E:62:03:68:38:9E:47:DE:0D:BB:FE:70:BE Authority key identifier: AF:F6:00:EA:08:8C:0C:0C:31:60:D7:5A:95:25:06:A9:49:13:C8:A8 Certificate issuer: /CN=AFF600EA088C0C0C3160D75A952506A94913C8A8 Certificate serial: 3FE58EB70F589E11526869167F57A4540E477808 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.cer Subject info access: rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.mft Manifest number: 02FF Signing time: Mon 20 Oct 2025 17:20:01 +0000 Manifest this update: Mon 20 Oct 2025 17:15:01 +0000 Manifest next update: Tue 21 Oct 2025 17:53:01 +0000 Files and hashes: 1: 3137372e31322e3131322e302f32302d3234203d3e203533313138.roa (hash: V+sHb/70BnlYO+tHn2LPf6u1XHLARNcW5bnvr7GX6SQ=) 2: 3137372e31322e39362e302f32302d3230203d3e203533313138.roa (hash: h2Oqn3qxt0UufdhIxmkJFNRD7NQUg5lP6kk9tXGbGJ4=) 3: 323830343a3266343a3a2f33322d3332203d3e203533313138.roa (hash: FLOV3J4ELHykDuxEoc8TQNldBLQr0uQtj2VTGfj6c0Q=) 4: AFF600EA088C0C0C3160D75A952506A94913C8A8.crl (hash: wPf+vvGLl6d0o7IzgjKIynxkGofNEoSCY/26hZlFJQQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.crl rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 17:53:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:e5:8e:b7:0f:58:9e:11:52:68:69:16:7f:57:a4:54:0e:47:78:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFF600EA088C0C0C3160D75A952506A94913C8A8 Validity Not Before: Oct 20 17:15:01 2025 GMT Not After : Oct 21 17:53:01 2025 GMT Subject: CN=D9C936B3398CEE8E620368389E47DE0DBBFE70BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:15:55:05:18:d0:c8:50:ce:a4:27:6d:b8:82: cc:ae:c6:f5:f2:17:09:62:b1:13:86:8d:7e:46:37: 6b:96:98:60:e4:5d:e6:19:cd:5a:b4:6a:31:90:14: e3:e1:c2:1e:00:6b:92:74:88:c6:aa:be:b8:09:2a: c7:b1:49:fc:32:c1:12:5a:41:b8:b9:cc:d4:da:1e: 07:cb:6f:53:09:d9:ca:e2:8b:31:39:24:b7:05:ec: 8c:3d:52:57:24:e7:9f:0b:bf:41:2f:f7:98:4e:90: 07:6c:d7:ad:04:2f:27:49:c3:9d:85:2b:55:20:87: 88:76:b0:6f:76:a3:1c:9f:43:00:15:20:8a:1a:83: b0:a2:ea:07:7d:bc:38:5f:52:65:9b:a7:c9:b2:86: 27:32:b7:0e:75:05:42:17:8b:82:97:64:aa:18:77: ba:5d:59:11:30:8c:95:8b:53:81:39:ac:50:9c:6c: 6e:80:5c:f3:a9:40:45:f3:3e:e6:2a:f9:be:11:f7: 02:ff:bf:0a:f8:d0:c9:26:86:0b:0f:d7:6d:34:f8: 3e:39:8e:af:e5:6f:e3:03:6a:16:4a:0a:c4:b3:4e: 7c:6b:f4:1b:e7:a8:9e:ed:5d:bf:bf:bf:31:90:44: 99:27:84:b7:d8:46:2b:31:cb:6f:95:51:df:d3:a5: 08:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:C9:36:B3:39:8C:EE:8E:62:03:68:38:9E:47:DE:0D:BB:FE:70:BE X509v3 Authority Key Identifier: keyid:AF:F6:00:EA:08:8C:0C:0C:31:60:D7:5A:95:25:06:A9:49:13:C8:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:d7:78:ac:a6:2f:7b:e7:6d:51:9c:ae:fe:32:fb:ea:55:11: 55:52:27:b0:f6:b7:09:67:a0:42:67:de:25:fc:33:b7:fc:8a: b1:c7:08:f8:2f:b9:25:c7:14:35:b0:5b:d8:13:11:23:94:50: 87:d0:e7:c2:26:df:53:5a:83:8b:7a:99:2e:68:dc:47:f0:6b: 63:ce:8c:0b:c6:f7:0c:82:52:e7:fd:f9:ab:fb:ec:7a:77:8d: bd:32:59:af:a2:f1:67:d7:aa:e5:fb:28:df:6c:6c:a6:da:df: 72:50:52:bd:79:24:f0:8e:ae:98:27:e8:dc:24:3c:39:f8:d8: a7:d8:04:ec:96:f6:54:83:38:77:bd:bb:59:bf:de:be:38:df: 1d:54:77:8e:9d:07:2e:e7:7d:8c:99:90:91:47:9f:eb:97:f4: 83:6b:fd:01:cd:34:d2:c6:6e:92:f7:8f:0d:ef:be:03:a1:1d: 3a:9b:c9:dc:ea:27:ff:c1:d2:ec:af:72:75:f2:8b:89:c3:48: 6a:14:23:38:98:47:0e:d5:35:9f:92:1c:5b:a1:5f:a9:e1:62: 32:dd:c8:5f:7c:24:79:be:f1:ca:b2:83:99:b2:85:45:fc:a2: 04:0b:88:92:03:79:df:cb:80:96:15:da:98:27:d0:bc:4f:32: 67:31:30:34 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUP+WOtw9YnhFSaGkWf1ekVA5HeAgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZGNjAwRUEwODhDMEMwQzMxNjBENzVBOTUyNTA2QTk0 OTEzQzhBODAeFw0yNTEwMjAxNzE1MDFaFw0yNTEwMjExNzUzMDFaMDMxMTAvBgNV BAMTKEQ5QzkzNkIzMzk4Q0VFOEU2MjAzNjgzODlFNDdERTBEQkJGRTcwQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnFVUFGNDIUM6kJ224gsyuxvXy FwlisROGjX5GN2uWmGDkXeYZzVq0ajGQFOPhwh4Aa5J0iMaqvrgJKsexSfwywRJa Qbi5zNTaHgfLb1MJ2criizE5JLcF7Iw9Ulck558Lv0Ev95hOkAds160ELydJw52F K1Ugh4h2sG92oxyfQwAVIIoag7Ci6gd9vDhfUmWbp8myhicytw51BUIXi4KXZKoY d7pdWREwjJWLU4E5rFCcbG6AXPOpQEXzPuYq+b4R9wL/vwr40MkmhgsP1200+D45 jq/lb+MDahZKCsSzTnxr9BvnqJ7tXb+/vzGQRJknhLfYRisxy2+VUd/TpQj1AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU2ck2szmM7o5iA2g4nkfeDbv+cL4wHwYDVR0j BBgwFoAUr/YA6giMDAwxYNdalSUGqUkTyKgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQVRHMXNMOXJEWDZoalhSMzdheHNYblNockVRaHVqWmdWd0JTSmFpYUpQ Y2ovMS9BRkY2MDBFQTA4OEMwQzBDMzE2MEQ3NUE5NTI1MDZBOTQ5MTNDOEE4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FGRjYwMEVBMDg4QzBDMEMz MTYwRDc1QTk1MjUwNkE5NDkxM0M4QTguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QVRHMXNMOXJEWDZoalhSMzdheHNYblNockVRaHVqWmdWd0JTSmFpYUpQY2ovMS9B RkY2MDBFQTA4OEMwQzBDMzE2MEQ3NUE5NTI1MDZBOTQ5MTNDOEE4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAj9d4rKYve+dtUZyu/jL76lURVVInsPa3CWegQmfeJfwzt/yKsccI+C+5JccU NbBb2BMRI5RQh9DnwibfU1qDi3qZLmjcR/BrY86MC8b3DIJS5/35q/vseneNvTJZ r6LxZ9eq5fso32xsptrfclBSvXkk8I6umCfo3CQ8OfjYp9gE7Jb2VIM4d727Wb/e vjjfHVR3jp0HLud9jJmQkUef65f0g2v9Ac000sZukvePDe++A6EdOpvJ3Oon/8HS 7K9ydfKLicNIahQjOJhHDtU1n5IcW6FfqeFiMt3IX3wkeb7xyrKDmbKFRfyiBAuI kgN538uAlhXamCfQvE8yZzEwNA== -----END CERTIFICATE-----Generated at Mon Oct 20 19:25:12 2025 by rpki-client