$ rpki-client -vvf rpki-repo.registro.br/repo/7KpwKJjGy6R95EFPa7iQd6PJJyvpQQC9hxS2rZti1Bxg/1/AFCA87E4AD035B5E4CA0EDA1C4C042C69BFE91EC.mft File: AFCA87E4AD035B5E4CA0EDA1C4C042C69BFE91EC.mft (raw, json) Hash identifier: o++Mldq0XoXcP0KxpEBOkxZmCqLjT1sz2FmIJEokZRk= Subject key identifier: F9:D9:0E:D5:80:D7:F9:2D:4F:DA:4A:25:34:5D:85:5E:8F:48:7E:6D Authority key identifier: AF:CA:87:E4:AD:03:5B:5E:4C:A0:ED:A1:C4:C0:42:C6:9B:FE:91:EC Certificate issuer: /CN=AFCA87E4AD035B5E4CA0EDA1C4C042C69BFE91EC Certificate serial: 25E9EA55EF80620DA71016B959B1346E4AC1EE1B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFCA87E4AD035B5E4CA0EDA1C4C042C69BFE91EC.cer Subject info access: rsync://rpki-repo.registro.br/repo/7KpwKJjGy6R95EFPa7iQd6PJJyvpQQC9hxS2rZti1Bxg/1/AFCA87E4AD035B5E4CA0EDA1C4C042C69BFE91EC.mft Manifest number: 0317 Signing time: Tue 04 Nov 2025 18:43:51 +0000 Manifest this update: Tue 04 Nov 2025 18:38:51 +0000 Manifest next update: Wed 05 Nov 2025 20:28:51 +0000 Files and hashes: 1: 34352e37302e3134382e302f32322d3234203d3e20323637353839.roa (hash: 2p6uFFtOxrFLgwvk+5zkCXG63pr08f9yEGYoLV1hAJY=) 2: AFCA87E4AD035B5E4CA0EDA1C4C042C69BFE91EC.crl (hash: jV/GE4Zk5aR2T+4mIgUTi4EMorYca4eAr9qwcxCdJiE=) 3: 323830343a343363383a3a2f33322d3336203d3e20323637353839.roa (hash: 8Gs+UV6nO+bLlDoxgdD+eVl74rMk1Zi2fSdRQ1UAf1M=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7KpwKJjGy6R95EFPa7iQd6PJJyvpQQC9hxS2rZti1Bxg/1/AFCA87E4AD035B5E4CA0EDA1C4C042C69BFE91EC.crl rsync://rpki-repo.registro.br/repo/7KpwKJjGy6R95EFPa7iQd6PJJyvpQQC9hxS2rZti1Bxg/1/AFCA87E4AD035B5E4CA0EDA1C4C042C69BFE91EC.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFCA87E4AD035B5E4CA0EDA1C4C042C69BFE91EC.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 20:28:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:e9:ea:55:ef:80:62:0d:a7:10:16:b9:59:b1:34:6e:4a:c1:ee:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFCA87E4AD035B5E4CA0EDA1C4C042C69BFE91EC Validity Not Before: Nov 4 18:38:51 2025 GMT Not After : Nov 5 20:28:51 2025 GMT Subject: CN=F9D90ED580D7F92D4FDA4A25345D855E8F487E6D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:d6:97:07:45:3d:04:86:05:ee:45:1f:62:0d: 09:7c:2d:98:e2:3e:5e:c7:fb:c3:7b:7a:bf:05:bf: 12:22:8f:a7:66:e5:89:27:09:fd:5a:86:29:e3:34: b7:ae:14:72:bc:21:f5:37:58:30:33:07:96:b0:84: 59:72:c6:92:89:cd:2f:98:ad:0a:b5:1b:df:74:cf: ea:9c:66:02:19:d6:38:62:ec:80:2b:20:b8:0e:fd: 01:ba:5f:91:d2:b1:41:4a:f8:96:e5:e7:11:0a:96: d6:d2:75:1d:74:f7:90:8d:a5:db:3a:13:66:54:5a: 83:c2:7a:f8:a8:94:62:eb:77:43:a4:a6:3f:7a:1c: 69:aa:11:10:21:1a:19:20:23:57:80:c5:83:da:84: ef:59:5c:c7:6b:a0:67:a2:f4:eb:c6:74:5d:48:8b: 13:99:86:b3:a9:0b:f0:a0:10:81:7d:d7:7a:21:ff: 03:5e:d7:88:da:b7:d0:18:b1:63:89:06:f4:b4:f5: d7:da:87:99:69:da:fb:6d:ff:c5:8b:9f:9c:50:de: 43:1c:d8:53:82:70:4d:8c:df:7d:06:7b:7b:76:9c: 17:80:d2:2f:56:93:b8:67:91:03:aa:57:c6:42:4f: 8c:eb:73:e0:ec:ef:93:a8:c6:af:fe:37:0d:bb:fb: 1f:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:D9:0E:D5:80:D7:F9:2D:4F:DA:4A:25:34:5D:85:5E:8F:48:7E:6D X509v3 Authority Key Identifier: keyid:AF:CA:87:E4:AD:03:5B:5E:4C:A0:ED:A1:C4:C0:42:C6:9B:FE:91:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7KpwKJjGy6R95EFPa7iQd6PJJyvpQQC9hxS2rZti1Bxg/1/AFCA87E4AD035B5E4CA0EDA1C4C042C69BFE91EC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFCA87E4AD035B5E4CA0EDA1C4C042C69BFE91EC.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7KpwKJjGy6R95EFPa7iQd6PJJyvpQQC9hxS2rZti1Bxg/1/AFCA87E4AD035B5E4CA0EDA1C4C042C69BFE91EC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:5c:84:c1:b8:dc:9e:f7:f2:89:5c:22:ca:e5:25:1c:24:9c: 59:29:4c:57:41:1b:99:d0:46:35:ac:69:4e:7c:b8:c9:83:ca: af:c7:c5:98:23:2b:7f:ea:2d:84:4e:35:dd:c6:e1:dc:c4:61: 6a:79:ef:2b:6c:d1:e9:20:d7:8b:fa:7a:ab:59:8f:d1:9f:dc: 08:c6:22:5a:e0:f1:c9:d8:8b:18:26:d9:80:c8:f4:b6:d0:9d: 4e:f8:4e:a0:a5:1b:9d:de:c3:b1:16:ae:cf:44:5c:7a:63:76: 5d:2b:8e:0e:02:74:7d:3a:d7:3b:af:a8:42:61:86:11:19:cc: 06:d5:2f:31:ea:d9:6e:58:d2:90:b4:22:fc:10:a8:4c:85:97: 32:40:e2:e5:95:5c:41:88:5a:d9:7d:31:5e:26:72:bc:16:ba: f9:86:ab:73:df:ee:a2:18:38:74:38:5d:46:6f:38:fa:b9:2c: 8e:ae:ef:1f:af:a3:b7:bd:9d:4e:2e:35:21:90:86:77:b0:65: 5a:b9:65:5e:f3:4c:96:b3:cc:14:9f:7c:83:86:be:d0:49:aa: 63:97:36:0d:53:f4:7f:6c:97:d8:d8:56:ab:96:cf:1e:c6:7c: 5a:a9:50:50:e1:ef:fe:58:07:eb:80:c2:e7:12:af:a4:61:8c: 2d:b6:27:6b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUJenqVe+AYg2nEBa5WbE0bkrB7hswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZDQTg3RTRBRDAzNUI1RTRDQTBFREExQzRDMDQyQzY5 QkZFOTFFQzAeFw0yNTExMDQxODM4NTFaFw0yNTExMDUyMDI4NTFaMDMxMTAvBgNV BAMTKEY5RDkwRUQ1ODBEN0Y5MkQ0RkRBNEEyNTM0NUQ4NTVFOEY0ODdFNkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS1pcHRT0EhgXuRR9iDQl8LZji Pl7H+8N7er8FvxIij6dm5YknCf1ahinjNLeuFHK8IfU3WDAzB5awhFlyxpKJzS+Y rQq1G990z+qcZgIZ1jhi7IArILgO/QG6X5HSsUFK+Jbl5xEKltbSdR1095CNpds6 E2ZUWoPCeviolGLrd0Okpj96HGmqERAhGhkgI1eAxYPahO9ZXMdroGei9OvGdF1I ixOZhrOpC/CgEIF913oh/wNe14jat9AYsWOJBvS09dfah5lp2vtt/8WLn5xQ3kMc 2FOCcE2M330Ge3t2nBeA0i9Wk7hnkQOqV8ZCT4zrc+Ds75Ooxq/+Nw27+x9tAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU+dkO1YDX+S1P2kolNF2FXo9Ifm0wHwYDVR0j BBgwFoAUr8qH5K0DW15MoO2hxMBCxpv+kewwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN0twd0tKakd5NlI5NUVGUGE3aVFkNlBKSnl2cFFRQzloeFMyclp0aTFC eGcvMS9BRkNBODdFNEFEMDM1QjVFNENBMEVEQTFDNEMwNDJDNjlCRkU5MUVDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FGQ0E4N0U0QUQwMzVCNUU0 Q0EwRURBMUM0QzA0MkM2OUJGRTkxRUMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v N0twd0tKakd5NlI5NUVGUGE3aVFkNlBKSnl2cFFRQzloeFMyclp0aTFCeGcvMS9B RkNBODdFNEFEMDM1QjVFNENBMEVEQTFDNEMwNDJDNjlCRkU5MUVDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiFyEwbjcnvfyiVwiyuUlHCScWSlMV0EbmdBGNaxpTny4yYPKr8fFmCMrf+ot hE413cbh3MRhannvK2zR6SDXi/p6q1mP0Z/cCMYiWuDxydiLGCbZgMj0ttCdTvhO oKUbnd7DsRauz0RcemN2XSuODgJ0fTrXO6+oQmGGERnMBtUvMerZbljSkLQi/BCo TIWXMkDi5ZVcQYha2X0xXiZyvBa6+Yarc9/uohg4dDhdRm84+rksjq7vH6+jt72d Ti41IZCGd7BlWrllXvNMlrPMFJ98g4a+0EmqY5c2DVP0f2yX2NhWq5bPHsZ8WqlQ UOHv/lgH64DC5xKvpGGMLbYnaw== -----END CERTIFICATE-----Generated at Wed Nov 5 02:34:30 2025 by rpki-client