$ rpki-client -vvf rpki-repo.registro.br/repo/BeVfxV1hAn3FurdeY9HhL1oFPfdKYdXcQYnjYC6cm6X3/1/AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.mft File: AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.mft (raw, json) Hash identifier: P0+pkHJu4kM/k2tEUpnBUwv/J116ijuoJf6bsUEi0lM= Subject key identifier: F5:F7:B0:39:5E:96:81:28:24:4E:1F:3A:69:38:3A:74:CC:83:41:FC Authority key identifier: AF:F2:DE:84:A1:6A:AF:6B:11:BE:71:E4:16:5A:53:F8:A3:AC:19:7E Certificate issuer: /CN=AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E Certificate serial: 4CCB9B42FAEFE0B100BF658E9DD3022988B3A78F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.cer Subject info access: rsync://rpki-repo.registro.br/repo/BeVfxV1hAn3FurdeY9HhL1oFPfdKYdXcQYnjYC6cm6X3/1/AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.mft Manifest number: 0272 Signing time: Mon 20 Oct 2025 03:44:33 +0000 Manifest this update: Mon 20 Oct 2025 03:39:33 +0000 Manifest next update: Tue 21 Oct 2025 07:20:33 +0000 Files and hashes: 1: AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.crl (hash: PqhN5Mftwv+4qGRvaaqmba3bblln+Z977SxKUUYXVRg=) 2: 323830343a363030303a3a2f33322d3438203d3e20323639313339.roa (hash: 1Iz71HTjnZ/0tWUvLlErPh/P2JU2jJxgWc0Sff2RsME=) 3: 34352e3138302e38342e302f32322d3234203d3e20323639313339.roa (hash: jySJyY9nMaQG7UMWI0p3ckE9o6HbVEUcBaHE9eU8jt8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BeVfxV1hAn3FurdeY9HhL1oFPfdKYdXcQYnjYC6cm6X3/1/AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.crl rsync://rpki-repo.registro.br/repo/BeVfxV1hAn3FurdeY9HhL1oFPfdKYdXcQYnjYC6cm6X3/1/AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 07:20:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:cb:9b:42:fa:ef:e0:b1:00:bf:65:8e:9d:d3:02:29:88:b3:a7:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E Validity Not Before: Oct 20 03:39:33 2025 GMT Not After : Oct 21 07:20:33 2025 GMT Subject: CN=F5F7B0395E968128244E1F3A69383A74CC8341FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:5d:61:31:d1:8c:f9:a2:29:90:06:c4:60:a1: c7:45:42:97:67:70:49:ad:34:c2:8e:37:34:23:16: 1e:cc:70:cb:60:96:d7:ce:f5:d5:89:b5:ca:6c:e1: fa:5b:5f:30:81:73:93:ac:0b:b0:eb:e1:3f:14:ba: 77:a5:0e:34:f7:76:a1:3c:36:a7:14:cd:83:d1:88: a6:63:19:49:22:25:78:79:b3:d4:e2:a2:29:e7:db: c4:ad:8a:9e:ef:1c:64:29:d8:5a:92:93:d3:56:6c: d2:7e:7b:f7:e4:e1:74:5f:84:ab:59:1d:b0:e6:10: e5:3f:12:0b:0d:8c:1c:5a:47:2b:b4:db:2d:d3:c0: cb:3a:10:99:c9:54:3e:14:3f:9b:2f:5e:40:cc:c4: 38:95:e9:61:5d:29:6b:67:cf:f2:cb:1e:06:c1:63: 00:83:31:c4:88:ff:f6:7c:3e:37:f6:c3:90:47:e9: d6:98:29:09:29:2a:93:07:c7:72:4d:6c:53:0b:4d: 64:f1:48:96:5e:e8:19:db:72:a0:f4:0c:cd:d7:cf: 17:9c:47:92:2a:33:8d:38:82:d9:57:6e:bc:89:af: 71:cf:40:8e:1c:51:c6:49:06:79:86:5e:d6:c0:68: 1e:7d:f0:43:f6:b1:a5:ac:01:10:ab:69:e0:47:4c: 9a:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:F7:B0:39:5E:96:81:28:24:4E:1F:3A:69:38:3A:74:CC:83:41:FC X509v3 Authority Key Identifier: keyid:AF:F2:DE:84:A1:6A:AF:6B:11:BE:71:E4:16:5A:53:F8:A3:AC:19:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BeVfxV1hAn3FurdeY9HhL1oFPfdKYdXcQYnjYC6cm6X3/1/AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BeVfxV1hAn3FurdeY9HhL1oFPfdKYdXcQYnjYC6cm6X3/1/AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:42:fa:b8:f1:3b:17:cd:11:ed:35:93:52:ee:fc:e2:44:69: fe:4d:68:c7:92:6c:fa:73:32:0e:2d:17:d8:e2:f4:72:c3:14: 4e:32:f9:57:74:f8:84:f4:46:a3:8a:62:64:69:09:9f:80:16: 75:82:0e:32:37:ce:94:a1:ab:4a:4a:48:86:c0:40:7c:ba:00: de:d4:b6:ee:cf:00:10:3a:49:7b:00:8a:25:0a:62:4d:b3:94: 65:2b:f1:aa:94:96:24:c4:4d:11:a3:ce:2f:e3:e1:05:95:c0: 07:38:c7:45:7a:5e:ce:19:71:f8:6b:3b:29:e2:26:20:0c:c8: e0:2c:97:4d:9b:42:2e:f3:ed:04:88:36:8b:49:7c:2e:7c:ee: f8:d1:01:de:f1:a6:b8:94:ec:f8:f5:07:68:e9:cc:5a:63:f3: 95:32:8d:de:98:1e:71:8b:bc:69:f9:5b:16:5d:5d:9d:cd:ed: 2f:88:46:93:4e:25:9a:61:76:14:f1:50:55:39:71:d8:d4:7e: 46:11:be:f7:94:24:39:fb:f7:a5:e8:a4:fa:8d:c7:fe:81:90: 12:2e:8b:4a:89:f2:14:34:2a:67:c3:48:a7:15:87:d1:dc:25: 68:68:08:65:34:4d:76:ef:7a:a8:d3:93:03:23:22:b1:00:78: 51:bf:99:a2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUTMubQvrv4LEAv2WOndMCKYizp48wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZGMkRFODRBMTZBQUY2QjExQkU3MUU0MTY1QTUzRjhB M0FDMTk3RTAeFw0yNTEwMjAwMzM5MzNaFw0yNTEwMjEwNzIwMzNaMDMxMTAvBgNV BAMTKEY1RjdCMDM5NUU5NjgxMjgyNDRFMUYzQTY5MzgzQTc0Q0M4MzQxRkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1XWEx0Yz5oimQBsRgocdFQpdn cEmtNMKONzQjFh7McMtgltfO9dWJtcps4fpbXzCBc5OsC7Dr4T8UunelDjT3dqE8 NqcUzYPRiKZjGUkiJXh5s9Tioinn28Stip7vHGQp2FqSk9NWbNJ+e/fk4XRfhKtZ HbDmEOU/EgsNjBxaRyu02y3TwMs6EJnJVD4UP5svXkDMxDiV6WFdKWtnz/LLHgbB YwCDMcSI//Z8Pjf2w5BH6daYKQkpKpMHx3JNbFMLTWTxSJZe6BnbcqD0DM3Xzxec R5IqM404gtlXbryJr3HPQI4cUcZJBnmGXtbAaB598EP2saWsARCraeBHTJrnAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU9fewOV6WgSgkTh86aTg6dMyDQfwwHwYDVR0j BBgwFoAUr/LehKFqr2sRvnHkFlpT+KOsGX4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQmVWZnhWMWhBbjNGdXJkZVk5SGhMMW9GUGZkS1lkWGNRWW5qWUM2Y202 WDMvMS9BRkYyREU4NEExNkFBRjZCMTFCRTcxRTQxNjVBNTNGOEEzQUMxOTdFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FGRjJERTg0QTE2QUFGNkIx MUJFNzFFNDE2NUE1M0Y4QTNBQzE5N0UuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QmVWZnhWMWhBbjNGdXJkZVk5SGhMMW9GUGZkS1lkWGNRWW5qWUM2Y202WDMvMS9B RkYyREU4NEExNkFBRjZCMTFCRTcxRTQxNjVBNTNGOEEzQUMxOTdFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHkL6uPE7F80R7TWTUu784kRp/k1ox5Js+nMyDi0X2OL0csMUTjL5V3T4hPRG o4piZGkJn4AWdYIOMjfOlKGrSkpIhsBAfLoA3tS27s8AEDpJewCKJQpiTbOUZSvx qpSWJMRNEaPOL+PhBZXABzjHRXpezhlx+Gs7KeImIAzI4CyXTZtCLvPtBIg2i0l8 Lnzu+NEB3vGmuJTs+PUHaOnMWmPzlTKN3pgecYu8aflbFl1dnc3tL4hGk04lmmF2 FPFQVTlx2NR+RhG+95QkOfv3peik+o3H/oGQEi6LSonyFDQqZ8NIpxWH0dwlaGgI ZTRNdu96qNOTAyMisQB4Ub+Zog== -----END CERTIFICATE-----Generated at Mon Oct 20 13:11:10 2025 by rpki-client