$ rpki-client -vvf rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/AFFAF320E60531FB95C6C685842B56D1BDFCED45.mft File: AFFAF320E60531FB95C6C685842B56D1BDFCED45.mft (raw, json) Hash identifier: EN3lFR+p0oCiETp3TpAz7QLvlpsA0KvVbU1mVT6xWIw= Subject key identifier: 48:DF:2A:5F:3B:EF:FE:D7:67:8F:54:38:F7:99:33:F2:43:45:34:EE Authority key identifier: AF:FA:F3:20:E6:05:31:FB:95:C6:C6:85:84:2B:56:D1:BD:FC:ED:45 Certificate issuer: /CN=AFFAF320E60531FB95C6C685842B56D1BDFCED45 Certificate serial: 7286C4EA1CEF0808610C2F0D9B0789A793A02543 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFFAF320E60531FB95C6C685842B56D1BDFCED45.cer Subject info access: rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/AFFAF320E60531FB95C6C685842B56D1BDFCED45.mft Manifest number: 0152 Signing time: Mon 20 Oct 2025 09:23:52 +0000 Manifest this update: Mon 20 Oct 2025 09:18:52 +0000 Manifest next update: Tue 21 Oct 2025 11:23:52 +0000 Files and hashes: 1: 323830343a343863303a3a2f33322d3438203d3e20323637313432.roa (hash: wf3PSbxaQoz04LuH+DpJ300lgKtkTir3v4uSeMTRXRA=) 2: 34352e3232392e3234302e302f32322d3234203d3e20323637313432.roa (hash: hmyhqfarobJ23Jlj20PKq7o0hSXC88s466WrKIYsZEQ=) 3: 3137372e3132382e38382e302f32322d3234203d3e20323637313432.roa (hash: L4iJGteHF6GdbZUpYdPsmSF6aU2WwIJnyrqJCiuS0u4=) 4: AFFAF320E60531FB95C6C685842B56D1BDFCED45.crl (hash: WPwTaPjQqvfGs0VTQenM4ZFnUAN9E+AyGkX856x/ZJE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/AFFAF320E60531FB95C6C685842B56D1BDFCED45.crl rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/AFFAF320E60531FB95C6C685842B56D1BDFCED45.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFFAF320E60531FB95C6C685842B56D1BDFCED45.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 11:23:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:86:c4:ea:1c:ef:08:08:61:0c:2f:0d:9b:07:89:a7:93:a0:25:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFFAF320E60531FB95C6C685842B56D1BDFCED45 Validity Not Before: Oct 20 09:18:52 2025 GMT Not After : Oct 21 11:23:52 2025 GMT Subject: CN=48DF2A5F3BEFFED7678F5438F79933F2434534EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f2:aa:9f:1b:66:6e:a4:b6:83:df:c2:b4:19: e3:4a:be:0a:32:2e:3c:11:be:ed:97:7e:ec:30:a0: 1f:91:e5:0e:45:1a:b5:93:61:d1:68:7a:b1:c0:7b: 95:da:2a:2a:1e:74:ea:15:30:c0:0a:f7:ed:4d:5a: 3e:74:43:88:c1:b4:72:cf:e8:7c:af:3d:17:79:5f: 12:17:d8:57:18:48:41:02:d4:a4:58:98:fc:a7:3d: dc:5e:8d:16:77:e0:57:7e:c9:37:ab:7d:cb:61:0b: 07:db:6d:e2:c5:6f:24:f5:ab:5b:88:53:74:b0:12: 8d:63:8d:de:fd:e7:d4:bb:1a:ea:55:c9:77:39:78: 35:20:8a:c5:0c:f7:38:bd:e5:ed:6e:6a:b7:54:10: 04:80:67:de:ef:51:d8:9f:b4:96:5a:35:f6:74:1c: 3d:8a:41:f7:55:a1:08:af:99:da:b4:5e:df:fc:30: 4c:99:40:71:5e:b1:2b:0f:60:19:a9:fa:7e:c6:87: ac:28:14:5b:c0:ee:6f:4f:9a:c6:a8:40:c7:96:51: 50:51:66:de:4c:43:33:48:7d:0b:23:fd:b1:7b:90: 5d:7b:98:03:09:74:92:44:ce:04:9d:7d:c1:27:d6: a6:f4:13:95:0e:c2:05:b0:a6:8b:16:0f:24:b0:69: 7c:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:DF:2A:5F:3B:EF:FE:D7:67:8F:54:38:F7:99:33:F2:43:45:34:EE X509v3 Authority Key Identifier: keyid:AF:FA:F3:20:E6:05:31:FB:95:C6:C6:85:84:2B:56:D1:BD:FC:ED:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/AFFAF320E60531FB95C6C685842B56D1BDFCED45.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFFAF320E60531FB95C6C685842B56D1BDFCED45.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/AFFAF320E60531FB95C6C685842B56D1BDFCED45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:be:bd:ff:ad:5a:3d:3f:86:75:c5:d3:4c:69:4c:cc:d8:eb: 09:c8:df:72:dc:2c:b7:63:af:21:d3:7e:e5:11:19:49:7e:1f: df:08:cb:6e:d6:c6:7d:e9:27:84:87:d4:bb:9f:89:3d:ab:d5: 08:7d:9c:ec:b8:50:62:ba:9a:10:ce:cd:bd:7f:0d:4f:d4:50: 48:b4:19:82:8f:a2:67:6e:08:7b:5e:90:4a:63:16:d9:78:6e: e7:cb:25:ed:95:46:10:2b:7c:8e:63:97:ec:05:07:bc:d9:05: 90:4e:ba:b5:67:4c:64:da:63:e5:11:ef:71:c0:82:bf:30:61: 3b:49:9e:05:73:23:91:67:70:ac:54:66:2f:ea:8b:e5:97:47: d9:19:2a:12:86:97:02:5c:5c:cd:09:b9:49:a2:f9:f6:11:cb: 6e:a6:82:3f:26:52:1e:c6:04:c2:88:c1:ec:5e:5d:18:51:e7: af:43:8a:18:ba:e5:90:93:1a:73:5c:7b:e8:26:63:95:87:59: 6e:a3:f8:40:c4:ac:92:85:4b:92:03:98:6d:bb:a8:2b:f7:34: be:e7:ff:da:7b:c2:0b:bd:52:59:a3:ba:17:4d:ab:53:dc:a3: b8:c3:62:c7:1c:a2:0c:18:ed:ba:6b:7b:87:de:a8:69:d4:b0: 8d:89:3d:52 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUcobE6hzvCAhhDC8NmweJp5OgJUMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZGQUYzMjBFNjA1MzFGQjk1QzZDNjg1ODQyQjU2RDFC REZDRUQ0NTAeFw0yNTEwMjAwOTE4NTJaFw0yNTEwMjExMTIzNTJaMDMxMTAvBgNV BAMTKDQ4REYyQTVGM0JFRkZFRDc2NzhGNTQzOEY3OTkzM0YyNDM0NTM0RUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn8qqfG2ZupLaD38K0GeNKvgoy LjwRvu2XfuwwoB+R5Q5FGrWTYdFoerHAe5XaKioedOoVMMAK9+1NWj50Q4jBtHLP 6HyvPRd5XxIX2FcYSEEC1KRYmPynPdxejRZ34Fd+yTerfcthCwfbbeLFbyT1q1uI U3SwEo1jjd7959S7GupVyXc5eDUgisUM9zi95e1uardUEASAZ97vUdiftJZaNfZ0 HD2KQfdVoQivmdq0Xt/8MEyZQHFesSsPYBmp+n7Gh6woFFvA7m9PmsaoQMeWUVBR Zt5MQzNIfQsj/bF7kF17mAMJdJJEzgSdfcEn1qb0E5UOwgWwposWDySwaXzpAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUSN8qXzvv/tdnj1Q495kz8kNFNO4wHwYDVR0j BBgwFoAUr/rzIOYFMfuVxsaFhCtW0b387UUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRGhoYWNKRmdXczl3SzlDdUVQVFhlUUMxWER3amhnTU5KczN6VGg5dzl0 QlUvMC9BRkZBRjMyMEU2MDUzMUZCOTVDNkM2ODU4NDJCNTZEMUJERkNFRDQ1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FGRkFGMzIwRTYwNTMxRkI5 NUM2QzY4NTg0MkI1NkQxQkRGQ0VENDUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RGhoYWNKRmdXczl3SzlDdUVQVFhlUUMxWER3amhnTU5KczN6VGg5dzl0QlUvMC9B RkZBRjMyMEU2MDUzMUZCOTVDNkM2ODU4NDJCNTZEMUJERkNFRDQ1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEACr69/61aPT+GdcXTTGlMzNjrCcjfctwst2OvIdN+5REZSX4f3wjLbtbGfekn hIfUu5+JPavVCH2c7LhQYrqaEM7NvX8NT9RQSLQZgo+iZ24Ie16QSmMW2Xhu58sl 7ZVGECt8jmOX7AUHvNkFkE66tWdMZNpj5RHvccCCvzBhO0meBXMjkWdwrFRmL+qL 5ZdH2RkqEoaXAlxczQm5SaL59hHLbqaCPyZSHsYEwojB7F5dGFHnr0OKGLrlkJMa c1x76CZjlYdZbqP4QMSskoVLkgOYbbuoK/c0vuf/2nvCC71SWaO6F02rU9yjuMNi xxyiDBjtumt7h96oadSwjYk9Ug== -----END CERTIFICATE-----Generated at Mon Oct 20 13:43:23 2025 by rpki-client