$ rpki-client -vvf rpki-repo.registro.br/repo/HLAfbLhAenLQ9t3AP35NCibj3HYeqFL8Kz3on3WpoYSE/0/FAF093F291860536EFFC93934E77DC96693302DB.mft File: FAF093F291860536EFFC93934E77DC96693302DB.mft (raw, json) Hash identifier: P76dQD1Zyd54sPyAz28GzP9iaWw2TLlvYYeqlAwJi38= Subject key identifier: D0:C2:32:A8:B6:D5:81:3F:4D:F7:44:E5:54:20:B6:E5:9A:FA:1A:19 Authority key identifier: FA:F0:93:F2:91:86:05:36:EF:FC:93:93:4E:77:DC:96:69:33:02:DB Certificate issuer: /CN=FAF093F291860536EFFC93934E77DC96693302DB Certificate serial: 1DB6CADEFE35F6AC80EEB901E392C0CE219F8F3D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAF093F291860536EFFC93934E77DC96693302DB.cer Subject info access: rsync://rpki-repo.registro.br/repo/HLAfbLhAenLQ9t3AP35NCibj3HYeqFL8Kz3on3WpoYSE/0/FAF093F291860536EFFC93934E77DC96693302DB.mft Manifest number: 01AE Signing time: Sun 19 Oct 2025 23:12:49 +0000 Manifest this update: Sun 19 Oct 2025 23:07:49 +0000 Manifest next update: Tue 21 Oct 2025 02:53:49 +0000 Files and hashes: 1: 3133382e3235352e31322e302f32332d3234203d3e20323633393437.roa (hash: +6i+XKwWimizfoRbdVJb2YohVqqa/xjfO3uX3N5x8Vw=) 2: FAF093F291860536EFFC93934E77DC96693302DB.crl (hash: pQOsIVH0xDVrzscZ+x3UC4UveF8EknGbkVpL5oY9SeA=) 3: 3133382e3235352e31352e302f32342d3234203d3e20323633393437.roa (hash: EhmTEC5QC+H+pd2HDVqUylhWWO+vL5RhWs9lWiFoqmo=) 4: 323830343a323833343a3a2f33322d3334203d3e20323633393437.roa (hash: VoAdhZL4dy4CwwQ5dn/EUOWDbJltxLahEw3mn1FyuU4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HLAfbLhAenLQ9t3AP35NCibj3HYeqFL8Kz3on3WpoYSE/0/FAF093F291860536EFFC93934E77DC96693302DB.crl rsync://rpki-repo.registro.br/repo/HLAfbLhAenLQ9t3AP35NCibj3HYeqFL8Kz3on3WpoYSE/0/FAF093F291860536EFFC93934E77DC96693302DB.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAF093F291860536EFFC93934E77DC96693302DB.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 02:53:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:b6:ca:de:fe:35:f6:ac:80:ee:b9:01:e3:92:c0:ce:21:9f:8f:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FAF093F291860536EFFC93934E77DC96693302DB Validity Not Before: Oct 19 23:07:49 2025 GMT Not After : Oct 21 02:53:49 2025 GMT Subject: CN=D0C232A8B6D5813F4DF744E55420B6E59AFA1A19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:5e:1b:0e:8d:cc:3b:df:ea:a7:7d:ca:cb:6d: 11:d7:33:95:cb:79:05:df:2f:38:45:35:30:84:86: 50:27:08:a6:d6:d3:74:5c:e8:e2:28:64:ba:da:06: 89:bf:ef:61:09:96:d8:bc:f5:51:b4:8d:46:68:f9: f0:0b:dc:37:4e:2a:cc:f8:9a:18:bd:31:d5:0f:c4: 5f:ff:ab:ee:3b:5e:f8:aa:e1:84:13:c4:8d:50:c5: 9f:dd:d8:f7:94:58:ee:5d:50:94:fe:70:d9:f5:f1: dc:25:ca:ff:c9:f5:08:81:84:3f:c8:4f:ca:12:3f: b3:55:f6:4e:63:61:87:da:87:73:5a:96:89:06:b0: fb:14:8e:a4:a7:cd:29:7e:3b:3c:85:4a:00:47:4e: b6:18:06:14:a5:6b:2f:9c:e0:a2:da:fd:e5:37:4f: 8c:b9:6a:36:d3:4d:e2:de:b9:e9:83:3b:e0:13:06: ad:a1:38:3b:58:93:43:e4:cd:e8:6e:ec:7f:b4:87: d2:e3:e1:cf:32:69:7b:b3:6a:62:90:bd:65:cd:28: fd:4c:55:6d:8b:a2:62:5b:d1:3c:ee:ce:b9:bd:be: 60:33:05:18:fa:17:13:09:19:62:d1:fb:d8:a0:8d: 7d:82:57:9e:37:97:09:82:b3:57:fc:5b:5f:0a:c9: 53:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:C2:32:A8:B6:D5:81:3F:4D:F7:44:E5:54:20:B6:E5:9A:FA:1A:19 X509v3 Authority Key Identifier: keyid:FA:F0:93:F2:91:86:05:36:EF:FC:93:93:4E:77:DC:96:69:33:02:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HLAfbLhAenLQ9t3AP35NCibj3HYeqFL8Kz3on3WpoYSE/0/FAF093F291860536EFFC93934E77DC96693302DB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAF093F291860536EFFC93934E77DC96693302DB.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HLAfbLhAenLQ9t3AP35NCibj3HYeqFL8Kz3on3WpoYSE/0/FAF093F291860536EFFC93934E77DC96693302DB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:61:46:4d:88:4f:6e:42:35:18:27:5e:8f:9b:b7:04:12:42: 7d:4b:0e:21:18:33:e7:9d:c7:29:55:3d:eb:f7:be:ca:4a:7e: 3f:12:ce:f0:d1:e8:f6:a8:88:a7:f7:ef:91:1f:ea:86:a5:e1: 89:1e:66:6e:86:8a:36:77:9e:c7:05:2c:90:7e:65:78:8e:04: b6:c9:5e:88:be:04:0c:a5:34:42:53:d6:1b:68:08:87:13:d9: 91:dd:6f:b5:90:dc:a1:5f:9a:2d:02:79:f4:49:b5:92:ae:d4: d0:14:39:f0:2f:83:8a:87:4f:b8:01:01:0d:fe:ef:7c:8c:c7: ce:3e:f3:ef:e5:b7:ed:0d:2f:74:28:ca:57:de:45:6e:e1:14: 40:f1:22:4d:84:c9:91:48:38:a2:ea:f3:7a:cb:ca:f2:4d:f9: 8d:62:23:ec:5b:27:ad:06:7e:67:86:96:9e:42:31:81:e7:fe: b5:61:f4:b4:a0:6a:a0:12:16:20:02:43:39:da:81:00:6b:8c: de:0b:a4:d5:76:57:1b:47:52:19:e0:27:2d:f7:58:f9:dd:eb: cb:57:39:b9:73:e1:b6:82:e9:77:55:af:30:76:d5:b5:5a:9c: 9c:ac:6e:c2:67:a8:6a:3c:0f:cc:d6:0a:fd:50:41:c2:32:e5: f0:f8:8a:54 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUHbbK3v419qyA7rkB45LAziGfjz0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkFGMDkzRjI5MTg2MDUzNkVGRkM5MzkzNEU3N0RDOTY2 OTMzMDJEQjAeFw0yNTEwMTkyMzA3NDlaFw0yNTEwMjEwMjUzNDlaMDMxMTAvBgNV BAMTKEQwQzIzMkE4QjZENTgxM0Y0REY3NDRFNTU0MjBCNkU1OUFGQTFBMTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeXhsOjcw73+qnfcrLbRHXM5XL eQXfLzhFNTCEhlAnCKbW03Rc6OIoZLraBom/72EJlti89VG0jUZo+fAL3DdOKsz4 mhi9MdUPxF//q+47Xviq4YQTxI1QxZ/d2PeUWO5dUJT+cNn18dwlyv/J9QiBhD/I T8oSP7NV9k5jYYfah3NalokGsPsUjqSnzSl+OzyFSgBHTrYYBhSlay+c4KLa/eU3 T4y5ajbTTeLeuemDO+ATBq2hODtYk0Pkzehu7H+0h9Lj4c8yaXuzamKQvWXNKP1M VW2LomJb0Tzuzrm9vmAzBRj6FxMJGWLR+9igjX2CV543lwmCs1f8W18KyVMFAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU0MIyqLbVgT9N90TlVCC25Zr6GhkwHwYDVR0j BBgwFoAU+vCT8pGGBTbv/JOTTnfclmkzAtswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSExBZmJMaEFlbkxROXQzQVAzNU5DaWJqM0hZZXFGTDhLejNvbjNXcG9Z U0UvMC9GQUYwOTNGMjkxODYwNTM2RUZGQzkzOTM0RTc3REM5NjY5MzMwMkRCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZBRjA5M0YyOTE4NjA1MzZF RkZDOTM5MzRFNzdEQzk2NjkzMzAyREIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SExBZmJMaEFlbkxROXQzQVAzNU5DaWJqM0hZZXFGTDhLejNvbjNXcG9ZU0UvMC9G QUYwOTNGMjkxODYwNTM2RUZGQzkzOTM0RTc3REM5NjY5MzMwMkRCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmmFGTYhPbkI1GCdej5u3BBJCfUsOIRgz553HKVU96/e+ykp+PxLO8NHo9qiI p/fvkR/qhqXhiR5mboaKNneexwUskH5leI4EtsleiL4EDKU0QlPWG2gIhxPZkd1v tZDcoV+aLQJ59Em1kq7U0BQ58C+DiodPuAEBDf7vfIzHzj7z7+W37Q0vdCjKV95F buEUQPEiTYTJkUg4ourzesvK8k35jWIj7FsnrQZ+Z4aWnkIxgef+tWH0tKBqoBIW IAJDOdqBAGuM3guk1XZXG0dSGeAnLfdY+d3ry1c5uXPhtoLpd1WvMHbVtVqcnKxu wmeoajwPzNYK/VBBwjLl8PiKVA== -----END CERTIFICATE-----Generated at Mon Oct 20 13:51:19 2025 by rpki-client