$ rpki-client -vvf rpki-repo.registro.br/repo/BeVfxV1hAn3FurdeY9HhL1oFPfdKYdXcQYnjYC6cm6X3/1/AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.mft File: AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.mft (raw, json) Hash identifier: PkF7x6qOfZx4C4MY08RoSBIh9ZElZ+H+22XJihW5QoM= Subject key identifier: 66:61:AC:34:FC:D3:30:40:56:93:44:FE:0B:1C:3E:A7:0F:97:15:93 Authority key identifier: AF:F2:DE:84:A1:6A:AF:6B:11:BE:71:E4:16:5A:53:F8:A3:AC:19:7E Certificate issuer: /CN=AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E Certificate serial: 6B93D4F7F61D3E8CA6E7FCF9BB0946C5C36258A1 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.cer Subject info access: rsync://rpki-repo.registro.br/repo/BeVfxV1hAn3FurdeY9HhL1oFPfdKYdXcQYnjYC6cm6X3/1/AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.mft Manifest number: 02FE Signing time: Wed 05 Nov 2025 00:44:10 +0000 Manifest this update: Wed 05 Nov 2025 00:39:10 +0000 Manifest next update: Thu 06 Nov 2025 03:44:10 +0000 Files and hashes: 1: 323830343a363030303a3a2f33322d3438203d3e20323639313339.roa (hash: Xe55nUyv1G9rTdN4F9JJyZ5S73rOm7YPFxNpYGBVW3I=) 2: 34352e3138302e38342e302f32322d3234203d3e20323639313339.roa (hash: IHT+RS/iweARypGzyOff6XPhF2jKh7RDE/V2Q1hN5a8=) 3: AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.crl (hash: 55wGUPiBUzXWgTgjEWvBs1GkWrMAHOBKoHoXR7oE96c=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BeVfxV1hAn3FurdeY9HhL1oFPfdKYdXcQYnjYC6cm6X3/1/AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.crl rsync://rpki-repo.registro.br/repo/BeVfxV1hAn3FurdeY9HhL1oFPfdKYdXcQYnjYC6cm6X3/1/AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 03:44:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:93:d4:f7:f6:1d:3e:8c:a6:e7:fc:f9:bb:09:46:c5:c3:62:58:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E Validity Not Before: Nov 5 00:39:10 2025 GMT Not After : Nov 6 03:44:10 2025 GMT Subject: CN=6661AC34FCD33040569344FE0B1C3EA70F971593 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:c1:a9:91:98:0e:88:05:06:2a:37:3c:dc:0f: a8:ad:e1:f6:bc:60:02:9a:35:52:c7:97:c0:72:d4: 55:e8:cc:78:1c:0d:64:fc:90:2d:2e:13:4c:a5:f2: 73:c4:f1:10:21:fe:19:c7:f5:36:8d:2e:fc:33:44: a2:d9:04:e1:ba:c1:cd:ce:2d:24:9f:72:44:20:f2: 8e:08:6a:ff:3c:f3:9f:b8:ff:d3:38:91:b7:5c:82: 97:3e:f5:84:cb:bc:86:5a:3c:d7:cf:15:3b:a0:75: bf:01:30:c9:60:4c:4d:4d:1d:51:10:7e:b0:96:4a: b3:0e:ae:c2:61:be:28:e7:0c:4f:1b:ec:3c:50:b6: 4a:9a:0f:40:c6:19:ef:0e:5b:37:90:bf:b0:d4:58: c0:cf:d5:1a:fb:b0:84:ad:a4:d6:c5:29:e9:04:dc: d0:8f:5b:75:c9:55:b8:cf:f9:0c:af:a9:73:d3:e3: 75:bb:33:f3:16:63:f8:79:63:83:95:8c:56:92:38: b6:38:df:bc:2f:2d:e8:56:24:b4:58:c1:a5:40:e5: 54:b8:54:79:a2:01:e1:6e:19:3a:b9:7e:ee:58:bd: ac:2f:21:1f:50:5f:a1:43:a5:cc:aa:f5:60:6c:60: c9:a8:e3:df:6c:a9:8c:e5:c4:bd:7b:34:cb:a5:98: 49:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:61:AC:34:FC:D3:30:40:56:93:44:FE:0B:1C:3E:A7:0F:97:15:93 X509v3 Authority Key Identifier: keyid:AF:F2:DE:84:A1:6A:AF:6B:11:BE:71:E4:16:5A:53:F8:A3:AC:19:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BeVfxV1hAn3FurdeY9HhL1oFPfdKYdXcQYnjYC6cm6X3/1/AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BeVfxV1hAn3FurdeY9HhL1oFPfdKYdXcQYnjYC6cm6X3/1/AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:7f:4f:fd:eb:48:84:8d:cc:0e:37:a3:67:db:85:a1:91:92: 55:a2:76:c8:5f:f0:35:f6:1f:0b:b2:45:33:5a:dc:c4:ba:c3: c0:1c:ae:23:8a:c3:91:da:94:1e:f8:c6:15:b7:19:d7:bf:0d: 08:96:0e:a1:52:13:43:b9:54:6a:3e:7d:fd:a7:4b:00:b4:c7: 79:ed:d6:96:c5:9f:eb:9c:7f:69:4e:31:a7:dd:77:62:8f:7a: 79:a6:86:23:6e:37:cb:2d:75:d7:76:1e:20:0c:26:e6:2f:b7: 42:36:3c:1e:0e:eb:34:86:a7:59:7c:f5:cb:85:44:b7:0a:c1: e6:a8:35:34:fb:45:2f:f4:7b:d0:5e:e3:2e:e4:f4:8b:77:f6: bf:2f:47:e2:9f:a2:3a:24:06:00:cb:d9:1a:1e:96:bc:c4:de: 91:9a:fe:80:f4:5f:4d:70:3f:12:c3:1a:69:63:61:c5:cc:3b: 24:ca:26:ea:03:5e:4d:d5:9b:42:18:da:80:b3:14:5e:40:27: 6e:65:5b:eb:b8:c3:c0:7f:70:fb:96:ff:bd:d9:9d:58:86:4a: 45:44:4e:4c:77:33:20:3c:c1:15:ce:f8:40:ac:c9:a3:21:ae: fd:62:0b:2b:39:9f:36:ff:49:fa:b6:fc:04:9f:fe:ed:c9:d8: 7f:c8:6a:91 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUa5PU9/YdPoym5/z5uwlGxcNiWKEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZGMkRFODRBMTZBQUY2QjExQkU3MUU0MTY1QTUzRjhB M0FDMTk3RTAeFw0yNTExMDUwMDM5MTBaFw0yNTExMDYwMzQ0MTBaMDMxMTAvBgNV BAMTKDY2NjFBQzM0RkNEMzMwNDA1NjkzNDRGRTBCMUMzRUE3MEY5NzE1OTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0wamRmA6IBQYqNzzcD6it4fa8 YAKaNVLHl8By1FXozHgcDWT8kC0uE0yl8nPE8RAh/hnH9TaNLvwzRKLZBOG6wc3O LSSfckQg8o4Iav8885+4/9M4kbdcgpc+9YTLvIZaPNfPFTugdb8BMMlgTE1NHVEQ frCWSrMOrsJhvijnDE8b7DxQtkqaD0DGGe8OWzeQv7DUWMDP1Rr7sIStpNbFKekE 3NCPW3XJVbjP+QyvqXPT43W7M/MWY/h5Y4OVjFaSOLY437wvLehWJLRYwaVA5VS4 VHmiAeFuGTq5fu5YvawvIR9QX6FDpcyq9WBsYMmo499sqYzlxL17NMulmEnfAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUZmGsNPzTMEBWk0T+Cxw+pw+XFZMwHwYDVR0j BBgwFoAUr/LehKFqr2sRvnHkFlpT+KOsGX4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQmVWZnhWMWhBbjNGdXJkZVk5SGhMMW9GUGZkS1lkWGNRWW5qWUM2Y202 WDMvMS9BRkYyREU4NEExNkFBRjZCMTFCRTcxRTQxNjVBNTNGOEEzQUMxOTdFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FGRjJERTg0QTE2QUFGNkIx MUJFNzFFNDE2NUE1M0Y4QTNBQzE5N0UuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QmVWZnhWMWhBbjNGdXJkZVk5SGhMMW9GUGZkS1lkWGNRWW5qWUM2Y202WDMvMS9B RkYyREU4NEExNkFBRjZCMTFCRTcxRTQxNjVBNTNGOEEzQUMxOTdFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnn9P/etIhI3MDjejZ9uFoZGSVaJ2yF/wNfYfC7JFM1rcxLrDwByuI4rDkdqU HvjGFbcZ178NCJYOoVITQ7lUaj59/adLALTHee3WlsWf65x/aU4xp913Yo96eaaG I243yy1113YeIAwm5i+3QjY8Hg7rNIanWXz1y4VEtwrB5qg1NPtFL/R70F7jLuT0 i3f2vy9H4p+iOiQGAMvZGh6WvMTekZr+gPRfTXA/EsMaaWNhxcw7JMom6gNeTdWb QhjagLMUXkAnbmVb67jDwH9w+5b/vdmdWIZKRUROTHczIDzBFc74QKzJoyGu/WIL KzmfNv9J+rb8BJ/+7cnYf8hqkQ== -----END CERTIFICATE-----Generated at Wed Nov 5 10:58:38 2025 by rpki-client