$ rpki-client -vvf rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/AFFAF320E60531FB95C6C685842B56D1BDFCED45.mft File: AFFAF320E60531FB95C6C685842B56D1BDFCED45.mft (raw, json) Hash identifier: d0pKdGW7crq1RMr8ngnnsjXGC/hsRT/ObQVEfEFEulU= Subject key identifier: 89:42:ED:9E:BB:47:BB:67:9A:9F:66:F4:87:DA:06:6A:08:9F:49:B8 Authority key identifier: AF:FA:F3:20:E6:05:31:FB:95:C6:C6:85:84:2B:56:D1:BD:FC:ED:45 Certificate issuer: /CN=AFFAF320E60531FB95C6C685842B56D1BDFCED45 Certificate serial: 7719487CFBEF423D32D1AAC9BA5742A8BE51EF50 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFFAF320E60531FB95C6C685842B56D1BDFCED45.cer Subject info access: rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/AFFAF320E60531FB95C6C685842B56D1BDFCED45.mft Manifest number: 0104 Signing time: Sat 23 Aug 2025 07:42:14 +0000 Manifest this update: Sat 23 Aug 2025 07:37:14 +0000 Manifest next update: Sun 24 Aug 2025 09:56:14 +0000 Files and hashes: 1: 3137372e3132382e38382e302f32322d3234203d3e20323637313432.roa (hash: L4iJGteHF6GdbZUpYdPsmSF6aU2WwIJnyrqJCiuS0u4=) 2: AFFAF320E60531FB95C6C685842B56D1BDFCED45.crl (hash: P0GDXvbH4BiD40dtpYmwZ9MOX8Li+lMddjPLk8j3J0E=) 3: 323830343a343863303a3a2f33322d3438203d3e20323637313432.roa (hash: wf3PSbxaQoz04LuH+DpJ300lgKtkTir3v4uSeMTRXRA=) 4: 34352e3232392e3234302e302f32322d3234203d3e20323637313432.roa (hash: hmyhqfarobJ23Jlj20PKq7o0hSXC88s466WrKIYsZEQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/AFFAF320E60531FB95C6C685842B56D1BDFCED45.crl rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/AFFAF320E60531FB95C6C685842B56D1BDFCED45.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFFAF320E60531FB95C6C685842B56D1BDFCED45.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Aug 2025 09:56:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:19:48:7c:fb:ef:42:3d:32:d1:aa:c9:ba:57:42:a8:be:51:ef:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFFAF320E60531FB95C6C685842B56D1BDFCED45 Validity Not Before: Aug 23 07:37:14 2025 GMT Not After : Aug 24 09:56:14 2025 GMT Subject: CN=8942ED9EBB47BB679A9F66F487DA066A089F49B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:10:f5:89:73:d8:e8:7f:25:54:63:7d:37:a4: 94:a4:1c:64:9a:2f:06:99:80:a0:51:5d:62:c6:8f: 69:be:3a:29:32:e7:9c:2c:49:c3:07:de:d7:75:92: 54:a7:c1:60:8f:08:ac:9f:2e:71:ca:2e:b9:fd:a4: 61:0f:72:ba:3b:7d:11:96:78:e0:51:d3:ac:01:10: ac:4b:3b:fe:4a:db:ad:bd:7e:7e:53:f1:1f:0c:45: b2:fa:26:23:7f:87:db:76:3d:50:f5:2d:bb:9e:97: c7:b9:94:19:e7:6a:b9:24:13:bb:fe:27:1d:98:4a: cf:8b:8f:b6:0f:0f:ad:3f:03:86:a3:8d:b6:af:c2: ba:02:81:c3:57:d8:2a:f2:8e:6d:d4:da:ea:40:92: 26:3e:cc:9a:b0:70:18:78:0a:30:c3:d6:ef:b0:4c: 1c:86:c6:35:34:12:6f:d2:c2:88:0d:de:47:84:c7: d4:ef:62:d9:1c:fa:f6:57:b9:e6:92:eb:04:e1:5a: a8:6a:e6:86:7a:02:75:55:91:ea:e0:1f:e1:35:96: 8e:ec:85:75:8e:8c:fe:00:a3:91:2c:db:c1:d4:d1: 2e:eb:66:8b:69:f5:f8:61:4a:76:22:a6:1e:08:a4: b8:3d:1c:43:9a:43:08:76:5c:83:dc:6c:98:c6:57: 64:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:42:ED:9E:BB:47:BB:67:9A:9F:66:F4:87:DA:06:6A:08:9F:49:B8 X509v3 Authority Key Identifier: keyid:AF:FA:F3:20:E6:05:31:FB:95:C6:C6:85:84:2B:56:D1:BD:FC:ED:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/AFFAF320E60531FB95C6C685842B56D1BDFCED45.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFFAF320E60531FB95C6C685842B56D1BDFCED45.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/AFFAF320E60531FB95C6C685842B56D1BDFCED45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:1e:f0:5e:de:10:b8:8e:a6:d5:81:65:4c:a7:7a:bc:b1:e7: 30:1e:1c:20:b9:38:84:ca:61:a2:92:b1:e2:53:b2:83:41:38: 26:74:cb:ed:f1:57:4c:20:cc:7a:7c:46:a2:64:51:30:f2:ec: 77:69:87:75:76:17:f6:e1:f1:a0:c7:75:6f:51:ec:52:21:d2: e9:6a:e1:f7:d2:2c:23:3e:f5:e8:d8:f3:c9:a1:46:b1:d4:2a: 8e:e2:81:72:33:c2:8b:c6:18:44:7c:7a:65:e9:5e:d6:5c:3a: 32:25:32:d9:d4:01:8e:7f:e3:60:b7:73:88:39:4f:28:4b:a1: c7:cb:31:00:1d:10:0c:4d:07:23:a4:71:b6:09:0b:10:03:87: 97:c0:ba:86:10:45:b7:5f:a4:15:b0:b0:62:91:91:44:49:26: 56:10:bf:a2:2b:ca:5f:02:a0:cd:0c:77:cc:bd:38:97:d4:6b: 04:58:49:12:cc:13:cc:87:9b:50:fa:04:4a:5a:04:55:39:b1: 27:28:e5:70:c4:8a:d5:8b:d8:a9:bf:46:80:01:a4:6f:87:8a: ea:d6:3c:b1:cc:eb:9f:b5:39:53:38:16:5a:a6:54:10:62:7f: 07:e3:52:00:45:1c:23:f9:42:1f:54:c7:35:b7:36:37:c2:e1: cb:07:64:54 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUdxlIfPvvQj0y0arJuldCqL5R71AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZGQUYzMjBFNjA1MzFGQjk1QzZDNjg1ODQyQjU2RDFC REZDRUQ0NTAeFw0yNTA4MjMwNzM3MTRaFw0yNTA4MjQwOTU2MTRaMDMxMTAvBgNV BAMTKDg5NDJFRDlFQkI0N0JCNjc5QTlGNjZGNDg3REEwNjZBMDg5RjQ5QjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYEPWJc9jofyVUY303pJSkHGSa LwaZgKBRXWLGj2m+Oiky55wsScMH3td1klSnwWCPCKyfLnHKLrn9pGEPcro7fRGW eOBR06wBEKxLO/5K2629fn5T8R8MRbL6JiN/h9t2PVD1Lbuel8e5lBnnarkkE7v+ Jx2YSs+Lj7YPD60/A4ajjbavwroCgcNX2Cryjm3U2upAkiY+zJqwcBh4CjDD1u+w TByGxjU0Em/SwogN3keEx9TvYtkc+vZXueaS6wThWqhq5oZ6AnVVkergH+E1lo7s hXWOjP4Ao5Es28HU0S7rZotp9fhhSnYiph4IpLg9HEOaQwh2XIPcbJjGV2SnAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUiULtnrtHu2ean2b0h9oGagifSbgwHwYDVR0j BBgwFoAUr/rzIOYFMfuVxsaFhCtW0b387UUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRGhoYWNKRmdXczl3SzlDdUVQVFhlUUMxWER3amhnTU5KczN6VGg5dzl0 QlUvMC9BRkZBRjMyMEU2MDUzMUZCOTVDNkM2ODU4NDJCNTZEMUJERkNFRDQ1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FGRkFGMzIwRTYwNTMxRkI5 NUM2QzY4NTg0MkI1NkQxQkRGQ0VENDUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RGhoYWNKRmdXczl3SzlDdUVQVFhlUUMxWER3amhnTU5KczN6VGg5dzl0QlUvMC9B RkZBRjMyMEU2MDUzMUZCOTVDNkM2ODU4NDJCNTZEMUJERkNFRDQ1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmx7wXt4QuI6m1YFlTKd6vLHnMB4cILk4hMphopKx4lOyg0E4JnTL7fFXTCDM enxGomRRMPLsd2mHdXYX9uHxoMd1b1HsUiHS6Wrh99IsIz716NjzyaFGsdQqjuKB cjPCi8YYRHx6Zele1lw6MiUy2dQBjn/jYLdziDlPKEuhx8sxAB0QDE0HI6RxtgkL EAOHl8C6hhBFt1+kFbCwYpGRREkmVhC/oivKXwKgzQx3zL04l9RrBFhJEswTzIeb UPoESloEVTmxJyjlcMSK1YvYqb9GgAGkb4eK6tY8sczrn7U5UzgWWqZUEGJ/B+NS AEUcI/lCH1THNbc2N8LhywdkVA== -----END CERTIFICATE-----Generated at Sat Aug 23 12:43:33 2025 by rpki-client