$ rpki-client -vvf rpki-repo.registro.br/repo/4oKDjTtuVfRxybQECZfMRov5Z6DpryF7MyQN17v2sZKk/0/AF709D487025EB90C014C7186CC0AEA341A27C3B.mft File: AF709D487025EB90C014C7186CC0AEA341A27C3B.mft (raw, json) Hash identifier: D1ED2EfOtxEbjQPJNvUsAR7u9Z9+fxMNeh3HKDoWnA4= Subject key identifier: 3F:37:E6:7B:BF:5E:F4:61:FD:1E:EA:8D:04:6E:EA:E1:E7:CE:7D:01 Authority key identifier: AF:70:9D:48:70:25:EB:90:C0:14:C7:18:6C:C0:AE:A3:41:A2:7C:3B Certificate issuer: /CN=AF709D487025EB90C014C7186CC0AEA341A27C3B Certificate serial: 116BA8F9DB6C89EE378700D6BA74017A57375BA0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF709D487025EB90C014C7186CC0AEA341A27C3B.cer Subject info access: rsync://rpki-repo.registro.br/repo/4oKDjTtuVfRxybQECZfMRov5Z6DpryF7MyQN17v2sZKk/0/AF709D487025EB90C014C7186CC0AEA341A27C3B.mft Manifest number: 3F Signing time: Wed 05 Nov 2025 02:14:42 +0000 Manifest this update: Wed 05 Nov 2025 02:09:42 +0000 Manifest next update: Thu 06 Nov 2025 05:34:42 +0000 Files and hashes: 1: AF709D487025EB90C014C7186CC0AEA341A27C3B.crl (hash: Xa9DvgX8+VmVNPszIdywS+sNJ4vo0t5ceXv7m0ITw48=) 2: 323830343a373039633a3a2f33322d3438203d3e20323730373337.roa (hash: z3+jy+kvN0ec/CwA1jDFeo1POc5HGxkNptEzu9VsNXs=) 3: 3137372e3232312e3133362e302f32322d3234203d3e20323730373337.roa (hash: DlhDw1dzTc6ndQvekwKDgY9PvHeoaodotFzkhX2390Y=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4oKDjTtuVfRxybQECZfMRov5Z6DpryF7MyQN17v2sZKk/0/AF709D487025EB90C014C7186CC0AEA341A27C3B.crl rsync://rpki-repo.registro.br/repo/4oKDjTtuVfRxybQECZfMRov5Z6DpryF7MyQN17v2sZKk/0/AF709D487025EB90C014C7186CC0AEA341A27C3B.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF709D487025EB90C014C7186CC0AEA341A27C3B.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 05:34:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:6b:a8:f9:db:6c:89:ee:37:87:00:d6:ba:74:01:7a:57:37:5b:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF709D487025EB90C014C7186CC0AEA341A27C3B Validity Not Before: Nov 5 02:09:42 2025 GMT Not After : Nov 6 05:34:42 2025 GMT Subject: CN=3F37E67BBF5EF461FD1EEA8D046EEAE1E7CE7D01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:17:11:0e:ea:01:4d:2f:7f:d1:6a:35:cf:e1: b9:1e:82:2c:d6:d2:26:f4:ad:83:b8:1e:00:51:26: 44:e3:68:b0:f2:0c:4a:6a:e6:fd:98:54:ae:1a:66: 0c:4a:4d:cd:1b:8f:97:79:a4:47:ff:02:d8:a8:25: 69:ea:ad:4c:f4:be:1f:48:bb:79:15:38:0c:5b:db: ba:94:3a:da:68:98:a3:30:8d:0f:95:5f:6e:ff:0d: cf:70:69:2e:40:12:81:6d:3c:83:6f:33:bc:33:9e: 83:2b:77:84:c6:9d:b0:19:e0:41:cf:97:d3:9a:ff: 5c:c2:20:95:55:10:d6:98:eb:a6:0a:61:88:d6:fd: ab:1d:80:7b:4a:2d:f4:ce:8c:54:bb:c4:f8:d6:c6: 04:f8:6d:64:aa:6a:f1:ae:48:ef:52:3d:f5:57:9f: 71:70:13:bb:66:52:87:b4:aa:69:16:74:c6:10:3c: e5:5c:d0:46:56:75:11:6d:ba:23:b7:4d:a0:f3:6b: b9:84:47:6b:fb:a2:79:27:86:79:66:eb:74:7e:80: 82:43:74:c8:d6:40:2c:eb:17:99:2c:23:d4:a6:72: 55:0b:a1:97:b5:5f:9b:2a:84:90:89:99:c6:e4:9f: a1:4f:53:3f:76:33:d5:a2:18:37:75:60:27:6b:dd: 3c:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:37:E6:7B:BF:5E:F4:61:FD:1E:EA:8D:04:6E:EA:E1:E7:CE:7D:01 X509v3 Authority Key Identifier: keyid:AF:70:9D:48:70:25:EB:90:C0:14:C7:18:6C:C0:AE:A3:41:A2:7C:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4oKDjTtuVfRxybQECZfMRov5Z6DpryF7MyQN17v2sZKk/0/AF709D487025EB90C014C7186CC0AEA341A27C3B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF709D487025EB90C014C7186CC0AEA341A27C3B.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4oKDjTtuVfRxybQECZfMRov5Z6DpryF7MyQN17v2sZKk/0/AF709D487025EB90C014C7186CC0AEA341A27C3B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:d1:a3:4e:02:24:2a:21:03:15:32:9f:39:9a:f1:8c:82:80: 7e:ce:61:78:62:83:28:29:b0:28:5a:f9:34:19:8b:ce:81:b5: 15:df:6f:9f:b5:1d:b5:c0:c7:97:34:95:1c:0c:c1:98:df:fe: af:8c:93:3e:bf:af:75:cb:0f:21:4a:57:ae:5c:00:01:72:8e: d9:8b:4c:2e:99:e6:45:3c:cf:99:58:55:e1:69:1c:7a:c2:bc: dd:4f:2c:0f:64:a2:42:22:d9:a6:6c:6e:5a:6b:b9:36:b8:a4: 3d:54:cc:71:83:64:c7:10:01:20:a6:01:65:af:46:34:d8:18: 5a:fa:1c:cf:18:4c:fe:ad:b6:6d:cd:45:a2:c4:55:70:18:fc: 73:a2:f0:74:7c:dc:b2:64:c1:42:61:86:b4:f2:7d:71:90:48: b9:5b:5c:80:c1:12:17:de:74:8c:06:73:1b:6a:4f:e2:90:31: 14:de:79:1d:cc:e2:6a:32:db:4b:36:81:9a:f4:09:0d:6f:8a: e4:12:84:ae:8e:4e:9b:d2:c7:55:3d:12:2a:be:ed:52:49:15: bd:00:91:1e:32:76:bb:4c:39:fb:a9:39:6b:ea:7b:ab:96:d4: 77:9e:10:a5:1c:7e:fd:f4:6d:55:ef:12:a1:f0:74:c5:8f:88: 43:aa:e1:99 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUEWuo+dtsie43hwDWunQBelc3W6AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY3MDlENDg3MDI1RUI5MEMwMTRDNzE4NkNDMEFFQTM0 MUEyN0MzQjAeFw0yNTExMDUwMjA5NDJaFw0yNTExMDYwNTM0NDJaMDMxMTAvBgNV BAMTKDNGMzdFNjdCQkY1RUY0NjFGRDFFRUE4RDA0NkVFQUUxRTdDRTdEMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqFxEO6gFNL3/RajXP4bkegizW 0ib0rYO4HgBRJkTjaLDyDEpq5v2YVK4aZgxKTc0bj5d5pEf/AtioJWnqrUz0vh9I u3kVOAxb27qUOtpomKMwjQ+VX27/Dc9waS5AEoFtPINvM7wznoMrd4TGnbAZ4EHP l9Oa/1zCIJVVENaY66YKYYjW/asdgHtKLfTOjFS7xPjWxgT4bWSqavGuSO9SPfVX n3FwE7tmUoe0qmkWdMYQPOVc0EZWdRFtuiO3TaDza7mER2v7onknhnlm63R+gIJD dMjWQCzrF5ksI9SmclULoZe1X5sqhJCJmcbkn6FPUz92M9WiGDd1YCdr3TyLAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUPzfme79e9GH9HuqNBG7q4efOfQEwHwYDVR0j BBgwFoAUr3CdSHAl65DAFMcYbMCuo0GifDswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNG9LRGpUdHVWZlJ4eWJRRUNaZk1Sb3Y1WjZEcHJ5RjdNeVFOMTd2MnNa S2svMC9BRjcwOUQ0ODcwMjVFQjkwQzAxNEM3MTg2Q0MwQUVBMzQxQTI3QzNCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FGNzA5RDQ4NzAyNUVCOTBD MDE0QzcxODZDQzBBRUEzNDFBMjdDM0IuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NG9LRGpUdHVWZlJ4eWJRRUNaZk1Sb3Y1WjZEcHJ5RjdNeVFOMTd2MnNaS2svMC9B RjcwOUQ0ODcwMjVFQjkwQzAxNEM3MTg2Q0MwQUVBMzQxQTI3QzNCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAd9GjTgIkKiEDFTKfOZrxjIKAfs5heGKDKCmwKFr5NBmLzoG1Fd9vn7UdtcDH lzSVHAzBmN/+r4yTPr+vdcsPIUpXrlwAAXKO2YtMLpnmRTzPmVhV4WkcesK83U8s D2SiQiLZpmxuWmu5NrikPVTMcYNkxxABIKYBZa9GNNgYWvoczxhM/q22bc1FosRV cBj8c6LwdHzcsmTBQmGGtPJ9cZBIuVtcgMESF950jAZzG2pP4pAxFN55HcziajLb SzaBmvQJDW+K5BKEro5Om9LHVT0SKr7tUkkVvQCRHjJ2u0w5+6k5a+p7q5bUd54Q pRx+/fRtVe8SofB0xY+IQ6rhmQ== -----END CERTIFICATE-----Generated at Wed Nov 5 11:40:26 2025 by rpki-client