$ rpki-client -vvf rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/AFFAF320E60531FB95C6C685842B56D1BDFCED45.mft File: AFFAF320E60531FB95C6C685842B56D1BDFCED45.mft (raw, json) Hash identifier: reyuf2BorA+xIaAzcu5o6WV2ALhyulu+PC5R9ugF3bM= Subject key identifier: 2F:FA:32:5C:CE:91:10:B2:B5:87:44:A8:F1:FF:EA:42:36:F9:AC:08 Authority key identifier: AF:FA:F3:20:E6:05:31:FB:95:C6:C6:85:84:2B:56:D1:BD:FC:ED:45 Certificate issuer: /CN=AFFAF320E60531FB95C6C685842B56D1BDFCED45 Certificate serial: 760222AF1B04CEDC876B29C7696C35D29B9B6514 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFFAF320E60531FB95C6C685842B56D1BDFCED45.cer Subject info access: rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/AFFAF320E60531FB95C6C685842B56D1BDFCED45.mft Manifest number: 0167 Signing time: Wed 05 Nov 2025 07:05:25 +0000 Manifest this update: Wed 05 Nov 2025 07:00:25 +0000 Manifest next update: Thu 06 Nov 2025 08:18:25 +0000 Files and hashes: 1: AFFAF320E60531FB95C6C685842B56D1BDFCED45.crl (hash: NFZ0a42O7bH8G0d3Z7Qf8JjX7oGgqwdYjQ9YzskswbM=) 2: 323830343a343863303a3a2f33322d3438203d3e20323637313432.roa (hash: wf3PSbxaQoz04LuH+DpJ300lgKtkTir3v4uSeMTRXRA=) 3: 34352e3232392e3234302e302f32322d3234203d3e20323637313432.roa (hash: hmyhqfarobJ23Jlj20PKq7o0hSXC88s466WrKIYsZEQ=) 4: 3137372e3132382e38382e302f32322d3234203d3e20323637313432.roa (hash: L4iJGteHF6GdbZUpYdPsmSF6aU2WwIJnyrqJCiuS0u4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/AFFAF320E60531FB95C6C685842B56D1BDFCED45.crl rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/AFFAF320E60531FB95C6C685842B56D1BDFCED45.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFFAF320E60531FB95C6C685842B56D1BDFCED45.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 08:18:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:02:22:af:1b:04:ce:dc:87:6b:29:c7:69:6c:35:d2:9b:9b:65:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFFAF320E60531FB95C6C685842B56D1BDFCED45 Validity Not Before: Nov 5 07:00:25 2025 GMT Not After : Nov 6 08:18:25 2025 GMT Subject: CN=2FFA325CCE9110B2B58744A8F1FFEA4236F9AC08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:3d:43:99:fc:ec:51:67:b1:66:c6:de:62:fb: e3:dd:94:99:d7:e2:97:4d:e6:83:16:e9:f0:c1:78: 5d:92:8a:ad:8b:b8:5d:45:2b:84:fa:df:b9:f4:8b: 5d:c6:7f:a9:d4:fa:5a:3a:ca:44:c6:2c:60:f3:b9: d2:2f:59:10:71:bb:54:a4:af:39:d6:ba:f5:fd:28: 2b:d7:5a:95:79:78:31:4f:bd:dc:4f:3e:04:4b:17: b9:12:0b:5d:93:93:59:52:1d:29:fb:72:44:d9:43: 29:a1:1d:b6:e3:e6:76:d9:9f:43:c8:e1:2f:fa:be: fe:ad:e3:3e:b6:8c:b2:43:a3:1b:18:a3:29:59:59: f0:c7:54:47:f5:52:0c:0b:38:ed:c0:9e:0e:6a:8b: 61:c6:c1:eb:5b:ed:e3:44:0f:3f:7a:69:02:9d:f4: 6d:3f:3f:79:8e:f9:f7:a2:75:7c:77:e7:55:a9:81: fc:61:34:a7:ad:0e:4a:8f:8e:79:f7:5a:ef:53:8a: 23:e0:a4:ee:a8:18:f5:af:f8:92:c9:48:f9:68:b7: 7e:36:d3:bb:f5:34:f9:52:72:e0:08:9d:c4:ea:64: 2f:da:64:86:cc:57:dd:45:0f:40:53:28:3b:76:a3: e9:c6:ad:34:0f:9c:ea:37:5e:20:77:f0:af:78:da: 3a:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:FA:32:5C:CE:91:10:B2:B5:87:44:A8:F1:FF:EA:42:36:F9:AC:08 X509v3 Authority Key Identifier: keyid:AF:FA:F3:20:E6:05:31:FB:95:C6:C6:85:84:2B:56:D1:BD:FC:ED:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/AFFAF320E60531FB95C6C685842B56D1BDFCED45.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFFAF320E60531FB95C6C685842B56D1BDFCED45.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/AFFAF320E60531FB95C6C685842B56D1BDFCED45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:05:f2:55:77:ce:8e:fc:7b:f1:d9:72:26:6d:af:e7:38:ac: 26:97:2e:d7:76:66:f8:f2:03:d6:fd:ee:19:7e:38:1c:e3:81: bf:bb:aa:cf:17:f3:22:15:d3:5c:3a:32:12:2c:0f:12:8e:61: f3:89:33:fe:27:82:af:2a:92:d8:7d:3a:b8:65:db:1a:f7:17: 13:89:7b:05:61:62:bb:98:8f:5b:68:52:d2:29:ca:17:53:bf: 27:03:c0:7b:db:78:78:88:28:b4:9b:0d:1e:41:5f:01:d0:98: 2c:8e:5a:df:b4:5a:a4:89:1d:63:a5:88:60:8b:41:e9:09:98: 79:52:c4:44:61:62:c0:47:a6:e8:58:a8:0f:de:e1:63:81:0d: 9a:5d:09:5a:9b:a5:c7:3f:c2:2d:19:f2:20:6c:d4:47:5e:9a: 01:0d:04:57:8d:57:83:fc:a9:a8:84:35:7f:2b:5a:14:ec:04: 4f:45:33:d3:ce:e3:37:06:a7:0f:41:9d:30:09:6f:bc:95:45: 20:bd:e4:f8:81:f6:7e:00:be:ce:9f:e5:a9:35:51:26:a5:b5: 2a:1a:12:78:e8:64:2b:f6:ef:e7:a2:17:5e:a0:f0:f7:6b:a5: 8e:ad:0f:31:f8:06:91:f2:92:d3:6a:37:4f:12:64:b0:d6:2d: 96:77:f6:a2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUdgIirxsEztyHaynHaWw10pubZRQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZGQUYzMjBFNjA1MzFGQjk1QzZDNjg1ODQyQjU2RDFC REZDRUQ0NTAeFw0yNTExMDUwNzAwMjVaFw0yNTExMDYwODE4MjVaMDMxMTAvBgNV BAMTKDJGRkEzMjVDQ0U5MTEwQjJCNTg3NDRBOEYxRkZFQTQyMzZGOUFDMDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGPUOZ/OxRZ7Fmxt5i++PdlJnX 4pdN5oMW6fDBeF2Siq2LuF1FK4T637n0i13Gf6nU+lo6ykTGLGDzudIvWRBxu1Sk rznWuvX9KCvXWpV5eDFPvdxPPgRLF7kSC12Tk1lSHSn7ckTZQymhHbbj5nbZn0PI 4S/6vv6t4z62jLJDoxsYoylZWfDHVEf1UgwLOO3Ang5qi2HGwetb7eNEDz96aQKd 9G0/P3mO+feidXx351WpgfxhNKetDkqPjnn3Wu9TiiPgpO6oGPWv+JLJSPlot342 07v1NPlScuAIncTqZC/aZIbMV91FD0BTKDt2o+nGrTQPnOo3XiB38K942jpHAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUL/oyXM6RELK1h0So8f/qQjb5rAgwHwYDVR0j BBgwFoAUr/rzIOYFMfuVxsaFhCtW0b387UUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRGhoYWNKRmdXczl3SzlDdUVQVFhlUUMxWER3amhnTU5KczN6VGg5dzl0 QlUvMC9BRkZBRjMyMEU2MDUzMUZCOTVDNkM2ODU4NDJCNTZEMUJERkNFRDQ1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FGRkFGMzIwRTYwNTMxRkI5 NUM2QzY4NTg0MkI1NkQxQkRGQ0VENDUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RGhoYWNKRmdXczl3SzlDdUVQVFhlUUMxWER3amhnTU5KczN6VGg5dzl0QlUvMC9B RkZBRjMyMEU2MDUzMUZCOTVDNkM2ODU4NDJCNTZEMUJERkNFRDQ1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXQXyVXfOjvx78dlyJm2v5zisJpcu13Zm+PID1v3uGX44HOOBv7uqzxfzIhXT XDoyEiwPEo5h84kz/ieCryqS2H06uGXbGvcXE4l7BWFiu5iPW2hS0inKF1O/JwPA e9t4eIgotJsNHkFfAdCYLI5a37RapIkdY6WIYItB6QmYeVLERGFiwEem6FioD97h Y4ENml0JWpulxz/CLRnyIGzUR16aAQ0EV41Xg/ypqIQ1fytaFOwET0Uz087jNwan D0GdMAlvvJVFIL3k+IH2fgC+zp/lqTVRJqW1KhoSeOhkK/bv56IXXqDw92uljq0P MfgGkfKS02o3TxJksNYtlnf2og== -----END CERTIFICATE-----Generated at Wed Nov 5 16:44:15 2025 by rpki-client