$ rpki-client -vvf rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.mft File: AFC529FB243B7780A20B27A2C4E73DAF65C25021.mft (raw, json) Hash identifier: Z4rkHFZqAXQRfJX5udMqoGfAIf+Mt7BLauSWY5dRhSI= Subject key identifier: 3B:B5:6E:EA:F9:4D:9C:4A:BE:AA:CC:36:D6:E6:99:3A:BA:D9:07:69 Authority key identifier: AF:C5:29:FB:24:3B:77:80:A2:0B:27:A2:C4:E7:3D:AF:65:C2:50:21 Certificate issuer: /CN=AFC529FB243B7780A20B27A2C4E73DAF65C25021 Certificate serial: 3CA8480036FC9697A322FA1ABEE0CE3E70F90E2B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.cer Subject info access: rsync://rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.mft Manifest number: 0291 Signing time: Sun 10 Aug 2025 01:40:00 +0000 Manifest this update: Sun 10 Aug 2025 01:35:00 +0000 Manifest next update: Mon 11 Aug 2025 04:29:00 +0000 Files and hashes: 1: 34352e3233362e3135382e302f32342d3234203d3e20323638323534.roa (hash: JHU7hFLVcz7KCri5GGmgpJSrExwyJApMd1LcVi/3ahc=) 2: AFC529FB243B7780A20B27A2C4E73DAF65C25021.crl (hash: p99sddawmA9ZKdtlTSKFQtXx9plLZCVFmGR2mHs/C0U=) 3: 34352e3233362e3135362e302f32342d3234203d3e20323638323534.roa (hash: g+h7ZeJQoiwltb4pTrWxNjM0uMiKUgQuoMSR90spDQE=) 4: 34352e3233362e3135372e302f32342d3234203d3e20323638323534.roa (hash: G+9fnKDKYzXcNVDiQbyVgNQLvfSyrAWnEylFjOb1cKM=) 5: 34352e3233362e3135362e302f32322d3232203d3e20323638323534.roa (hash: XrgPqt2d+yXrgA5qVsA3hVOyOYJP6pNSPVOYcSw37As=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.crl rsync://rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 11 Aug 2025 04:29:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:a8:48:00:36:fc:96:97:a3:22:fa:1a:be:e0:ce:3e:70:f9:0e:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFC529FB243B7780A20B27A2C4E73DAF65C25021 Validity Not Before: Aug 10 01:35:00 2025 GMT Not After : Aug 11 04:29:00 2025 GMT Subject: CN=3BB56EEAF94D9C4ABEAACC36D6E6993ABAD90769 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:c5:c5:f5:74:22:64:21:4b:cc:2a:0b:2c:7d: 2d:94:32:b8:b0:d2:1e:c8:35:30:fb:4d:3a:14:b7: 6b:36:76:3b:9f:b1:38:80:86:51:4a:a2:0f:9b:82: 67:e3:48:7e:ba:40:e3:59:5e:74:8f:99:9b:8d:28: 4f:29:f9:82:32:84:3e:3a:fa:3f:cf:4f:25:f2:ca: 52:a1:0b:7c:0c:28:bb:dc:72:bc:90:29:6e:cb:7d: 3f:5c:c4:8f:52:9a:bd:f9:57:c6:36:b9:59:42:22: 73:35:13:b7:0e:fd:97:8d:d0:4d:a0:8a:72:40:0d: 6f:a8:68:cb:e0:1f:26:61:89:f0:c6:ca:ae:4c:f1: b4:7d:5a:f2:88:ce:f3:88:c2:fa:98:b8:30:32:b2: 3a:c7:4a:58:5a:5d:18:bd:65:d9:9a:f0:7b:5f:31: 1d:b4:c2:9e:64:b0:25:b7:6c:8c:58:1a:5a:3b:ce: 23:28:9c:56:7a:1a:82:9a:f7:f6:fe:55:ab:2e:9d: 00:11:72:80:b3:2e:b9:da:ee:9d:fd:aa:c7:15:a7: 52:07:fa:e9:bc:ec:f9:7a:c4:00:73:2b:bc:3b:d4: 6c:c7:33:09:c8:77:a9:07:0c:e4:54:01:a1:f4:46: 73:5e:ed:3a:6d:1a:99:1a:00:ec:79:9f:88:64:14: 37:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:B5:6E:EA:F9:4D:9C:4A:BE:AA:CC:36:D6:E6:99:3A:BA:D9:07:69 X509v3 Authority Key Identifier: keyid:AF:C5:29:FB:24:3B:77:80:A2:0B:27:A2:C4:E7:3D:AF:65:C2:50:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:be:ae:6d:ef:25:ea:13:b1:8d:ac:5e:ef:c4:73:94:bf:a0: 5e:c3:71:c1:e8:e5:9f:9a:bf:6f:46:59:c1:18:2a:16:ea:7e: 60:c3:ad:e4:2d:95:6c:f9:19:6d:84:33:23:85:c6:59:71:fb: 4f:28:a1:e7:2f:51:a0:21:0e:3b:d1:c3:9a:7d:83:6c:ae:02: 04:73:ed:11:ca:d6:90:e5:65:61:a2:72:03:7e:c2:0e:45:e3: fe:b6:14:24:04:31:22:a9:2e:aa:89:6a:bd:b2:ca:35:e0:a6: df:fa:56:34:e0:94:7e:ca:32:ce:da:62:d7:4e:44:07:c8:ba: bc:f3:76:e8:68:e4:62:8a:b2:7c:aa:45:14:8a:be:57:5d:7f: c4:4c:52:49:5e:9d:3a:dd:3e:5f:1b:d7:3e:bf:12:c8:86:07: 27:4f:65:dd:28:ef:1a:47:c1:d9:84:a1:55:0f:ac:78:9f:8e: 3e:23:eb:92:d7:2d:ba:c7:09:f3:a6:71:ae:d5:5c:9d:29:d7: 37:35:56:df:a3:d8:31:35:f9:68:4b:54:96:1d:0e:6a:1f:27: 0e:15:18:ab:a4:f6:79:7c:e7:93:27:bd:ad:a1:50:6c:b9:c2: 7c:78:2d:9c:10:cb:df:6f:f8:8c:43:f4:4a:d3:ca:2b:66:52: 15:c1:5f:ef -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUPKhIADb8lpejIvoavuDOPnD5DiswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZDNTI5RkIyNDNCNzc4MEEyMEIyN0EyQzRFNzNEQUY2 NUMyNTAyMTAeFw0yNTA4MTAwMTM1MDBaFw0yNTA4MTEwNDI5MDBaMDMxMTAvBgNV BAMTKDNCQjU2RUVBRjk0RDlDNEFCRUFBQ0MzNkQ2RTY5OTNBQkFEOTA3NjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVxcX1dCJkIUvMKgssfS2UMriw 0h7INTD7TToUt2s2djufsTiAhlFKog+bgmfjSH66QONZXnSPmZuNKE8p+YIyhD46 +j/PTyXyylKhC3wMKLvccryQKW7LfT9cxI9Smr35V8Y2uVlCInM1E7cO/ZeN0E2g inJADW+oaMvgHyZhifDGyq5M8bR9WvKIzvOIwvqYuDAysjrHSlhaXRi9Zdma8Htf MR20wp5ksCW3bIxYGlo7ziMonFZ6GoKa9/b+VasunQARcoCzLrna7p39qscVp1IH +um87Pl6xABzK7w71GzHMwnId6kHDORUAaH0RnNe7TptGpkaAOx5n4hkFDcRAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUO7Vu6vlNnEq+qsw21uaZOrrZB2kwHwYDVR0j BBgwFoAUr8Up+yQ7d4CiCyeixOc9r2XCUCEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQTNodHpDelJQekxuWUY3cTl5eDdBZEJZM1lHTm9jUUR3aHo3RFdZWjJQ UUIvMS9BRkM1MjlGQjI0M0I3NzgwQTIwQjI3QTJDNEU3M0RBRjY1QzI1MDIxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FGQzUyOUZCMjQzQjc3ODBB MjBCMjdBMkM0RTczREFGNjVDMjUwMjEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QTNodHpDelJQekxuWUY3cTl5eDdBZEJZM1lHTm9jUUR3aHo3RFdZWjJQUUIvMS9B RkM1MjlGQjI0M0I3NzgwQTIwQjI3QTJDNEU3M0RBRjY1QzI1MDIxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAL6ube8l6hOxjaxe78RzlL+gXsNxwejln5q/b0ZZwRgqFup+YMOt5C2VbPkZ bYQzI4XGWXH7Tyih5y9RoCEOO9HDmn2DbK4CBHPtEcrWkOVlYaJyA37CDkXj/rYU JAQxIqkuqolqvbLKNeCm3/pWNOCUfsoyztpi105EB8i6vPN26GjkYoqyfKpFFIq+ V11/xExSSV6dOt0+XxvXPr8SyIYHJ09l3SjvGkfB2YShVQ+seJ+OPiPrktctuscJ 86ZxrtVcnSnXNzVW36PYMTX5aEtUlh0Oah8nDhUYq6T2eXznkye9raFQbLnCfHgt nBDL32/4jEP0StPKK2ZSFcFf7w== -----END CERTIFICATE-----Generated at Sun Aug 10 18:28:55 2025 by rpki-client