$ rpki-client -vvf rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.mft File: AFC529FB243B7780A20B27A2C4E73DAF65C25021.mft (raw, json) Hash identifier: kcGl+t+/AyKD1yYI4Cp3ddjV+3qpZFnUdEHmVPTTx44= Subject key identifier: 3A:F3:70:FE:B1:79:AF:21:B6:F6:86:09:32:18:C2:E6:41:DD:ED:1F Authority key identifier: AF:C5:29:FB:24:3B:77:80:A2:0B:27:A2:C4:E7:3D:AF:65:C2:50:21 Certificate issuer: /CN=AFC529FB243B7780A20B27A2C4E73DAF65C25021 Certificate serial: 36B5E5A5EA48CEB3F06F03171D8BE49537EDF938 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.cer Subject info access: rsync://rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.mft Manifest number: 0305 Signing time: Wed 05 Nov 2025 10:20:02 +0000 Manifest this update: Wed 05 Nov 2025 10:15:02 +0000 Manifest next update: Thu 06 Nov 2025 11:10:02 +0000 Files and hashes: 1: 34352e3233362e3135362e302f32322d3232203d3e20323638323534.roa (hash: XrgPqt2d+yXrgA5qVsA3hVOyOYJP6pNSPVOYcSw37As=) 2: AFC529FB243B7780A20B27A2C4E73DAF65C25021.crl (hash: EeV2TCmnFzkTbZB9mm/ABN9Ki8Nk/3afxts4m7j5Xok=) 3: 34352e3233362e3135362e302f32342d3234203d3e20323638323534.roa (hash: g+h7ZeJQoiwltb4pTrWxNjM0uMiKUgQuoMSR90spDQE=) 4: 34352e3233362e3135372e302f32342d3234203d3e20323638323534.roa (hash: G+9fnKDKYzXcNVDiQbyVgNQLvfSyrAWnEylFjOb1cKM=) 5: 34352e3233362e3135382e302f32342d3234203d3e20323638323534.roa (hash: JHU7hFLVcz7KCri5GGmgpJSrExwyJApMd1LcVi/3ahc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.crl rsync://rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 11:10:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:b5:e5:a5:ea:48:ce:b3:f0:6f:03:17:1d:8b:e4:95:37:ed:f9:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFC529FB243B7780A20B27A2C4E73DAF65C25021 Validity Not Before: Nov 5 10:15:02 2025 GMT Not After : Nov 6 11:10:02 2025 GMT Subject: CN=3AF370FEB179AF21B6F686093218C2E641DDED1F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:7d:d4:0a:b3:57:16:7f:33:59:b0:ee:3e:8f: 2a:30:e7:16:8a:7c:be:c1:32:bb:33:16:1e:45:a9: de:81:59:f5:79:f9:39:d4:68:bb:30:d8:55:6a:f6: 7a:00:b1:db:e3:25:41:41:d4:6e:8f:9d:38:77:9c: 2b:06:ae:29:b0:95:d9:4b:20:da:2f:c2:53:66:76: a0:fd:dc:c5:64:0e:21:66:ed:d7:c8:51:0d:f8:4b: a3:ab:bf:e8:91:48:86:f2:78:1c:5c:b6:c7:18:f8: 2a:d2:9e:94:93:e4:a7:0b:ec:d8:fb:1e:a1:41:d1: cc:b3:27:22:a4:c1:5a:18:68:7f:19:02:37:ff:6b: fe:a1:7a:95:5a:1f:53:0e:c0:60:ec:29:0d:f0:40: 93:8b:0d:d5:43:b1:f6:65:a3:9a:72:c3:b8:1e:be: 7d:9e:70:91:54:fd:0c:56:02:a8:f1:0c:59:78:d7: 36:de:d7:c0:13:ee:d8:11:1f:1a:ab:30:1a:4e:3f: 29:c2:4e:fc:0c:ea:1d:02:97:4f:c4:9d:12:d9:e0: d1:c3:6d:dd:1b:9c:5c:42:7d:37:e0:f7:67:bd:29: 41:88:45:69:38:55:fe:de:8a:17:0a:c9:f2:70:9d: b4:52:f8:6e:fb:f3:fb:e1:e8:bb:9b:e4:d7:e2:93: 55:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:F3:70:FE:B1:79:AF:21:B6:F6:86:09:32:18:C2:E6:41:DD:ED:1F X509v3 Authority Key Identifier: keyid:AF:C5:29:FB:24:3B:77:80:A2:0B:27:A2:C4:E7:3D:AF:65:C2:50:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:46:70:c7:d7:4e:32:91:e9:a1:40:2b:27:96:bd:f9:49:cd: 7c:b2:ec:94:3a:ef:89:d7:9c:79:3f:e2:c7:c0:a1:12:c4:0e: 5a:b4:f6:2f:73:f4:bb:f9:07:a4:a6:ab:1f:3e:f4:dd:8d:3b: 70:ea:ca:dd:88:ff:21:b6:50:28:ae:2c:7a:b5:78:72:b9:83: 0a:40:cd:a8:70:8a:92:c0:f3:bc:68:97:d0:c2:47:1e:92:2e: cf:dc:63:d1:31:74:ac:c8:16:27:59:fc:1f:62:80:4f:ca:32: e2:17:20:21:2e:0c:12:01:4e:b1:f5:f5:84:10:aa:b8:de:5c: 46:68:70:05:91:2d:ff:ad:4f:80:ec:d1:54:26:e7:a4:5a:65: 86:86:42:21:eb:e6:16:4f:97:fc:7b:22:b2:3c:be:a1:6a:5f: 2c:b3:b0:21:63:d7:71:52:5a:c6:c3:12:4a:7b:a0:57:75:e3: cb:d5:a2:65:e4:76:43:12:8c:06:49:7a:35:22:a6:cb:e5:b8: b3:0a:db:50:d5:b5:09:29:6d:e7:b9:60:43:91:12:ae:70:05: 95:b3:18:74:97:65:e6:4a:9f:5e:c1:7f:58:e6:1c:14:3e:19: f3:da:75:3c:cd:48:a7:1d:51:be:a0:cd:e6:c2:79:5b:15:82: f7:c5:b4:e4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUNrXlpepIzrPwbwMXHYvklTft+TgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZDNTI5RkIyNDNCNzc4MEEyMEIyN0EyQzRFNzNEQUY2 NUMyNTAyMTAeFw0yNTExMDUxMDE1MDJaFw0yNTExMDYxMTEwMDJaMDMxMTAvBgNV BAMTKDNBRjM3MEZFQjE3OUFGMjFCNkY2ODYwOTMyMThDMkU2NDFEREVEMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqfdQKs1cWfzNZsO4+jyow5xaK fL7BMrszFh5Fqd6BWfV5+TnUaLsw2FVq9noAsdvjJUFB1G6PnTh3nCsGrimwldlL INovwlNmdqD93MVkDiFm7dfIUQ34S6Orv+iRSIbyeBxctscY+CrSnpST5KcL7Nj7 HqFB0cyzJyKkwVoYaH8ZAjf/a/6hepVaH1MOwGDsKQ3wQJOLDdVDsfZlo5pyw7ge vn2ecJFU/QxWAqjxDFl41zbe18AT7tgRHxqrMBpOPynCTvwM6h0Cl0/EnRLZ4NHD bd0bnFxCfTfg92e9KUGIRWk4Vf7eihcKyfJwnbRS+G778/vh6Lub5Nfik1VNAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUOvNw/rF5ryG29oYJMhjC5kHd7R8wHwYDVR0j BBgwFoAUr8Up+yQ7d4CiCyeixOc9r2XCUCEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQTNodHpDelJQekxuWUY3cTl5eDdBZEJZM1lHTm9jUUR3aHo3RFdZWjJQ UUIvMS9BRkM1MjlGQjI0M0I3NzgwQTIwQjI3QTJDNEU3M0RBRjY1QzI1MDIxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FGQzUyOUZCMjQzQjc3ODBB MjBCMjdBMkM0RTczREFGNjVDMjUwMjEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QTNodHpDelJQekxuWUY3cTl5eDdBZEJZM1lHTm9jUUR3aHo3RFdZWjJQUUIvMS9B RkM1MjlGQjI0M0I3NzgwQTIwQjI3QTJDNEU3M0RBRjY1QzI1MDIxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAN0Zwx9dOMpHpoUArJ5a9+UnNfLLslDrvideceT/ix8ChEsQOWrT2L3P0u/kH pKarHz703Y07cOrK3Yj/IbZQKK4serV4crmDCkDNqHCKksDzvGiX0MJHHpIuz9xj 0TF0rMgWJ1n8H2KAT8oy4hcgIS4MEgFOsfX1hBCquN5cRmhwBZEt/61PgOzRVCbn pFplhoZCIevmFk+X/Hsisjy+oWpfLLOwIWPXcVJaxsMSSnugV3Xjy9WiZeR2QxKM Bkl6NSKmy+W4swrbUNW1CSlt57lgQ5ESrnAFlbMYdJdl5kqfXsF/WOYcFD4Z89p1 PM1Ipx1RvqDN5sJ5WxWC98W05A== -----END CERTIFICATE-----Generated at Wed Nov 5 20:59:40 2025 by rpki-client