$ rpki-client -vvf rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.mft File: AFF600EA088C0C0C3160D75A952506A94913C8A8.mft (raw, json) Hash identifier: cl2JHxWAyLDZUOnmXL4rEUslQco7eCZOiDPM3RXxTmE= Subject key identifier: 41:24:3A:03:EE:4F:8C:D3:B1:2D:11:1A:59:A1:3D:75:35:89:67:9A Authority key identifier: AF:F6:00:EA:08:8C:0C:0C:31:60:D7:5A:95:25:06:A9:49:13:C8:A8 Certificate issuer: /CN=AFF600EA088C0C0C3160D75A952506A94913C8A8 Certificate serial: 732EFE48C46226E6B3BFD3DB4B488B2D0842B212 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.cer Subject info access: rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.mft Manifest number: 0313 Signing time: Tue 04 Nov 2025 13:40:02 +0000 Manifest this update: Tue 04 Nov 2025 13:35:02 +0000 Manifest next update: Wed 05 Nov 2025 14:18:02 +0000 Files and hashes: 1: AFF600EA088C0C0C3160D75A952506A94913C8A8.crl (hash: uNWCh0rSzTIvPS1ZifYEzmoNSoPleokYtxp2HS46zbc=) 2: 323830343a3266343a3a2f33322d3332203d3e203533313138.roa (hash: FLOV3J4ELHykDuxEoc8TQNldBLQr0uQtj2VTGfj6c0Q=) 3: 3137372e31322e39362e302f32302d3230203d3e203533313138.roa (hash: h2Oqn3qxt0UufdhIxmkJFNRD7NQUg5lP6kk9tXGbGJ4=) 4: 3137372e31322e3131322e302f32302d3234203d3e203533313138.roa (hash: V+sHb/70BnlYO+tHn2LPf6u1XHLARNcW5bnvr7GX6SQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.crl rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 14:18:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:2e:fe:48:c4:62:26:e6:b3:bf:d3:db:4b:48:8b:2d:08:42:b2:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFF600EA088C0C0C3160D75A952506A94913C8A8 Validity Not Before: Nov 4 13:35:02 2025 GMT Not After : Nov 5 14:18:02 2025 GMT Subject: CN=41243A03EE4F8CD3B12D111A59A13D753589679A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:2d:dd:c1:01:0c:e7:18:76:44:95:02:28:75: 94:61:9a:73:35:d3:25:49:6c:cb:4d:34:78:3f:3c: c9:7f:e6:dd:9e:98:d4:69:f9:20:bb:8e:36:11:4f: 5f:95:e1:ed:7c:58:7c:a5:be:96:ad:a8:63:f8:19: 8f:90:28:9f:39:0e:c6:40:5f:59:72:62:6c:1e:be: 71:11:fe:3b:09:cf:80:0d:40:f8:99:ec:6f:8b:d0: f1:3b:0b:9c:8f:2d:f4:85:d2:da:3b:9e:af:f5:07: 79:eb:18:ff:5f:e4:93:14:92:c6:4a:07:db:72:d4: 6a:a6:65:27:96:da:71:89:88:2f:51:c8:7d:e3:ad: 17:ee:e0:22:82:8c:5f:73:d2:04:d8:12:bd:68:3e: 78:70:ec:77:cf:cd:8e:40:e0:0a:5e:d0:eb:8d:aa: d0:7a:1b:d6:f7:94:02:dd:56:1d:47:08:d7:10:72: fa:d4:12:15:56:c7:06:77:cd:3e:b9:52:d7:ee:6d: 58:cd:d9:66:fe:df:df:0a:8d:e8:ba:c7:b4:6d:84: 2c:5f:6a:c7:94:80:e4:bd:a7:89:e5:0c:68:00:5b: 45:7f:78:34:42:c4:0a:c9:ce:af:d7:e6:7b:a6:6e: c5:0f:6e:6b:b0:03:34:08:76:f7:c9:cb:61:bd:79: 97:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:24:3A:03:EE:4F:8C:D3:B1:2D:11:1A:59:A1:3D:75:35:89:67:9A X509v3 Authority Key Identifier: keyid:AF:F6:00:EA:08:8C:0C:0C:31:60:D7:5A:95:25:06:A9:49:13:C8:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:75:9d:02:7e:5d:46:2b:2a:5f:6d:3f:a6:91:11:c0:e5:26: 5f:0f:6f:ca:46:20:b8:d5:1b:10:c5:4e:9a:fa:03:6f:55:c9: 26:0e:3c:5d:2a:f5:a5:2c:a7:71:f0:8a:92:31:b7:49:d6:87: 8d:96:aa:a9:7e:4b:2d:c7:2f:7f:a2:b9:65:a7:b2:15:89:ee: 36:fb:08:4e:42:8e:a5:0c:44:66:a4:d3:98:d8:93:ed:fe:a3: 7a:61:e6:2f:13:20:1a:70:f3:e1:7e:79:98:b5:39:b9:5c:e8: bf:0f:21:af:bb:50:74:4f:f7:74:17:74:89:67:b3:fd:70:00: 64:b9:4b:bb:8d:9d:56:e1:fe:93:10:53:b2:d2:27:34:10:63: cd:f9:44:c7:d0:7f:54:c4:aa:2d:87:5f:93:1c:71:5b:b7:e6: d0:cf:28:9f:05:1a:31:b5:06:0a:bf:b6:9b:77:38:1e:ad:53: 24:54:31:17:f4:71:c0:dc:79:5c:1d:33:3e:ca:c9:c1:04:8a: 3a:29:9c:9e:9d:64:cd:60:93:b6:cf:04:fe:8b:62:3c:1c:df: 05:2f:1d:02:13:b0:a5:f4:7c:78:1f:90:80:29:37:f4:a9:a3: 0c:58:fb:61:1a:a4:65:ea:a3:36:f2:b6:41:37:41:ee:eb:f3: 49:74:e0:d1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUcy7+SMRiJuazv9PbS0iLLQhCshIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZGNjAwRUEwODhDMEMwQzMxNjBENzVBOTUyNTA2QTk0 OTEzQzhBODAeFw0yNTExMDQxMzM1MDJaFw0yNTExMDUxNDE4MDJaMDMxMTAvBgNV BAMTKDQxMjQzQTAzRUU0RjhDRDNCMTJEMTExQTU5QTEzRDc1MzU4OTY3OUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtLd3BAQznGHZElQIodZRhmnM1 0yVJbMtNNHg/PMl/5t2emNRp+SC7jjYRT1+V4e18WHylvpatqGP4GY+QKJ85DsZA X1lyYmwevnER/jsJz4ANQPiZ7G+L0PE7C5yPLfSF0to7nq/1B3nrGP9f5JMUksZK B9ty1GqmZSeW2nGJiC9RyH3jrRfu4CKCjF9z0gTYEr1oPnhw7HfPzY5A4Ape0OuN qtB6G9b3lALdVh1HCNcQcvrUEhVWxwZ3zT65UtfubVjN2Wb+398Kjei6x7RthCxf aseUgOS9p4nlDGgAW0V/eDRCxArJzq/X5numbsUPbmuwAzQIdvfJy2G9eZe9AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUQSQ6A+5PjNOxLREaWaE9dTWJZ5owHwYDVR0j BBgwFoAUr/YA6giMDAwxYNdalSUGqUkTyKgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQVRHMXNMOXJEWDZoalhSMzdheHNYblNockVRaHVqWmdWd0JTSmFpYUpQ Y2ovMS9BRkY2MDBFQTA4OEMwQzBDMzE2MEQ3NUE5NTI1MDZBOTQ5MTNDOEE4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FGRjYwMEVBMDg4QzBDMEMz MTYwRDc1QTk1MjUwNkE5NDkxM0M4QTguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QVRHMXNMOXJEWDZoalhSMzdheHNYblNockVRaHVqWmdWd0JTSmFpYUpQY2ovMS9B RkY2MDBFQTA4OEMwQzBDMzE2MEQ3NUE5NTI1MDZBOTQ5MTNDOEE4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgnWdAn5dRisqX20/ppERwOUmXw9vykYguNUbEMVOmvoDb1XJJg48XSr1pSyn cfCKkjG3SdaHjZaqqX5LLccvf6K5ZaeyFYnuNvsITkKOpQxEZqTTmNiT7f6jemHm LxMgGnDz4X55mLU5uVzovw8hr7tQdE/3dBd0iWez/XAAZLlLu42dVuH+kxBTstIn NBBjzflEx9B/VMSqLYdfkxxxW7fm0M8onwUaMbUGCr+2m3c4Hq1TJFQxF/RxwNx5 XB0zPsrJwQSKOimcnp1kzWCTts8E/otiPBzfBS8dAhOwpfR8eB+QgCk39KmjDFj7 YRqkZeqjNvK2QTdB7uvzSXTg0Q== -----END CERTIFICATE-----Generated at Wed Nov 5 05:16:40 2025 by rpki-client