
$ rpki-client -vvf rpki-repo.registro.br/repo/2uYSSDn2V2TM4qegQMVAyVC9MkvCBYoyHhbaQrxmH587/0/AFB37E8982591B18DBDE9E8217274DFABCEAA945.mft
File: AFB37E8982591B18DBDE9E8217274DFABCEAA945.mft (raw, json)
Hash identifier: RxvNcwmt8fvOW2CoL9sSzhJzIJ5G1MglMkkmySphTxg=
Subject key identifier: F2:31:6E:B9:44:F7:DF:25:48:AA:88:F8:EE:D0:F3:84:DA:4A:F8:1B
Authority key identifier: AF:B3:7E:89:82:59:1B:18:DB:DE:9E:82:17:27:4D:FA:BC:EA:A9:45
Certificate issuer: /CN=AFB37E8982591B18DBDE9E8217274DFABCEAA945
Certificate serial: 194FD98591E6DA8B2B119DBB507738FCCEE5616A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFB37E8982591B18DBDE9E8217274DFABCEAA945.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2uYSSDn2V2TM4qegQMVAyVC9MkvCBYoyHhbaQrxmH587/0/AFB37E8982591B18DBDE9E8217274DFABCEAA945.mft
Manifest number: 01A8
Signing time: Wed 05 Nov 2025 09:37:16 +0000
Manifest this update: Wed 05 Nov 2025 09:32:16 +0000
Manifest next update: Thu 06 Nov 2025 11:22:16 +0000
Files and hashes: 1: AFB37E8982591B18DBDE9E8217274DFABCEAA945.crl (hash: A2PobiEd5694xvYTTypa6MdLWC85q4JPE6bA3w1/3Dg=)
2: 323830343a333163303a3a2f33322d3438203d3e20323632343338.roa (hash: Nqck8WgvQAKrcOZojIIg8caQwhZaHsLYU74VYSjovik=)
3: 3137372e35322e36342e302f32312d3234203d3e20323632343338.roa (hash: K8PQUgh01LzhRhJHkugvECyuCRfTqjC9/MVn46/IUms=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2uYSSDn2V2TM4qegQMVAyVC9MkvCBYoyHhbaQrxmH587/0/AFB37E8982591B18DBDE9E8217274DFABCEAA945.crl
rsync://rpki-repo.registro.br/repo/2uYSSDn2V2TM4qegQMVAyVC9MkvCBYoyHhbaQrxmH587/0/AFB37E8982591B18DBDE9E8217274DFABCEAA945.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFB37E8982591B18DBDE9E8217274DFABCEAA945.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 06 Nov 2025 11:22:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:4f:d9:85:91:e6:da:8b:2b:11:9d:bb:50:77:38:fc:ce:e5:61:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFB37E8982591B18DBDE9E8217274DFABCEAA945
Validity
Not Before: Nov 5 09:32:16 2025 GMT
Not After : Nov 6 11:22:16 2025 GMT
Subject: CN=F2316EB944F7DF2548AA88F8EED0F384DA4AF81B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:49:fe:a4:34:9c:e9:e7:ed:e8:15:2f:59:96:
f5:4a:c4:0e:c2:59:a9:be:5f:1d:e9:30:27:2e:a8:
f9:c4:f5:a8:8a:b0:1e:1a:8b:5d:7d:7c:6b:c8:f8:
19:96:85:db:75:74:84:2b:24:e1:64:c9:cd:63:45:
4c:09:b0:82:23:41:fe:95:d2:8e:99:1f:1b:f0:8e:
63:7a:70:f5:f1:37:41:ea:5c:7a:99:85:3c:4b:3a:
90:77:24:82:3d:b9:fc:bf:fa:6b:74:40:dd:d8:7a:
fb:9c:85:7d:0b:d4:13:ce:89:60:b7:bb:fa:cf:19:
b6:7e:32:69:2c:17:16:e7:f4:8e:e8:53:8a:61:32:
82:df:ce:2b:f0:ed:2f:2c:47:2c:d1:9d:cf:95:aa:
58:d0:6c:49:29:64:20:72:bc:ce:a4:39:c3:d5:b6:
2d:5e:34:65:fe:89:5b:e6:60:a3:64:6a:94:e6:67:
0b:a7:8a:a6:c5:71:cb:5c:0b:4e:ff:eb:34:63:e4:
7d:3c:99:9e:e8:c1:2c:fa:2b:25:d7:ff:ae:d4:5a:
55:fe:7d:c2:b2:9b:61:e5:5f:f5:76:3b:d8:ba:f8:
22:e9:65:46:a4:43:f8:b5:27:c8:87:ea:55:83:f4:
7f:2c:41:35:11:5a:61:28:81:e1:b3:66:ab:1a:99:
36:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:31:6E:B9:44:F7:DF:25:48:AA:88:F8:EE:D0:F3:84:DA:4A:F8:1B
X509v3 Authority Key Identifier:
keyid:AF:B3:7E:89:82:59:1B:18:DB:DE:9E:82:17:27:4D:FA:BC:EA:A9:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2uYSSDn2V2TM4qegQMVAyVC9MkvCBYoyHhbaQrxmH587/0/AFB37E8982591B18DBDE9E8217274DFABCEAA945.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFB37E8982591B18DBDE9E8217274DFABCEAA945.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2uYSSDn2V2TM4qegQMVAyVC9MkvCBYoyHhbaQrxmH587/0/AFB37E8982591B18DBDE9E8217274DFABCEAA945.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:0d:62:da:64:a9:a6:79:7c:1d:7c:71:f0:d1:00:f3:5f:c2:
f1:c6:2d:b0:d2:fd:34:49:75:27:8c:89:fe:eb:fb:fd:70:72:
99:b7:cb:39:1a:91:76:36:b4:d5:e7:58:f1:09:96:ad:70:8f:
d9:9e:d4:c3:db:d2:2b:e4:d2:25:b5:27:1a:2a:c9:5c:8b:3e:
75:6f:48:d8:0f:39:c7:23:af:00:b3:7d:f8:b3:ed:de:94:f1:
1c:1e:b1:7a:d6:d4:08:0f:ef:0d:74:b1:ef:22:a7:84:6a:0a:
d6:4c:05:a3:7e:b5:46:dd:18:a4:6d:29:64:fc:63:47:6f:63:
a0:ce:cb:7d:9a:12:78:58:aa:c8:93:ed:e0:8c:c1:8e:58:06:
d5:87:46:29:df:2b:38:f7:63:91:57:9a:34:15:69:f0:a4:87:
4c:b2:a6:a8:52:3a:4c:94:64:77:cc:a1:b1:4f:f5:aa:d4:17:
1d:2e:d3:b0:37:bb:4c:23:1e:88:11:2d:0f:66:ab:b5:01:96:
db:46:b7:f5:1a:02:19:31:19:28:c1:e7:62:4b:00:dc:09:ec:
94:04:71:13:ab:3b:06:34:d9:57:dc:73:44:e5:8a:cd:01:ce:
e9:92:78:10:57:2d:94:a5:c6:ce:ff:64:fc:a6:05:f8:db:13:
c8:86:85:0f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUGU/ZhZHm2osrEZ27UHc4/M7lYWowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUZCMzdFODk4MjU5MUIxOERCREU5RTgyMTcyNzRERkFC
Q0VBQTk0NTAeFw0yNTExMDUwOTMyMTZaFw0yNTExMDYxMTIyMTZaMDMxMTAvBgNV
BAMTKEYyMzE2RUI5NDRGN0RGMjU0OEFBODhGOEVFRDBGMzg0REE0QUY4MUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjSf6kNJzp5+3oFS9ZlvVKxA7C
Wam+Xx3pMCcuqPnE9aiKsB4ai119fGvI+BmWhdt1dIQrJOFkyc1jRUwJsIIjQf6V
0o6ZHxvwjmN6cPXxN0HqXHqZhTxLOpB3JII9ufy/+mt0QN3YevuchX0L1BPOiWC3
u/rPGbZ+MmksFxbn9I7oU4phMoLfzivw7S8sRyzRnc+VqljQbEkpZCByvM6kOcPV
ti1eNGX+iVvmYKNkapTmZwuniqbFcctcC07/6zRj5H08mZ7owSz6KyXX/67UWlX+
fcKym2HlX/V2O9i6+CLpZUakQ/i1J8iH6lWD9H8sQTURWmEogeGzZqsamTYNAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU8jFuuUT33yVIqoj47tDzhNpK+BswHwYDVR0j
BBgwFoAUr7N+iYJZGxjb3p6CFydN+rzqqUUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMnVZU1NEbjJWMlRNNHFlZ1FNVkF5VkM5TWt2Q0JZb3lIaGJhUXJ4bUg1
ODcvMC9BRkIzN0U4OTgyNTkxQjE4REJERTlFODIxNzI3NERGQUJDRUFBOTQ1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FGQjM3RTg5ODI1OTFCMThE
QkRFOUU4MjE3Mjc0REZBQkNFQUE5NDUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
MnVZU1NEbjJWMlRNNHFlZ1FNVkF5VkM5TWt2Q0JZb3lIaGJhUXJ4bUg1ODcvMC9B
RkIzN0U4OTgyNTkxQjE4REJERTlFODIxNzI3NERGQUJDRUFBOTQ1Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEABw1i2mSppnl8HXxx8NEA81/C8cYtsNL9NEl1J4yJ/uv7/XBymbfLORqRdja0
1edY8QmWrXCP2Z7Uw9vSK+TSJbUnGirJXIs+dW9I2A85xyOvALN9+LPt3pTxHB6x
etbUCA/vDXSx7yKnhGoK1kwFo361Rt0YpG0pZPxjR29joM7LfZoSeFiqyJPt4IzB
jlgG1YdGKd8rOPdjkVeaNBVp8KSHTLKmqFI6TJRkd8yhsU/1qtQXHS7TsDe7TCMe
iBEtD2artQGW20a39RoCGTEZKMHnYksA3AnslARxE6s7BjTZV9xzROWKzQHO6ZJ4
EFctlKXGzv9k/KYF+NsTyIaFDw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 11:45:10 2025 by rpki-client