$ rpki-client -vvf rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.mft File: AFC529FB243B7780A20B27A2C4E73DAF65C25021.mft (raw, json) Hash identifier: dOrxOqWVlGyN4aOPWySZBCA4CbPDc8uxgg08CGwQXsc= Subject key identifier: 4B:0A:37:88:D0:8E:BD:A9:1E:F4:AC:27:6D:72:C4:F2:4C:02:23:65 Authority key identifier: AF:C5:29:FB:24:3B:77:80:A2:0B:27:A2:C4:E7:3D:AF:65:C2:50:21 Certificate issuer: /CN=AFC529FB243B7780A20B27A2C4E73DAF65C25021 Certificate serial: 72667B8AD3513CC1B6B6FE5EC3E61A2E6697548B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.cer Subject info access: rsync://rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.mft Manifest number: 03D2 Signing time: Wed 08 Apr 2026 03:30:03 +0000 Manifest this update: Wed 08 Apr 2026 03:25:03 +0000 Manifest next update: Thu 09 Apr 2026 05:42:03 +0000 Files and hashes: 1: AFC529FB243B7780A20B27A2C4E73DAF65C25021.crl (hash: W7HYHkafgXel/OQWMJ/oD7v11wIcFhT9Uozh7LGbOmI=) 2: 34352e3233362e3135372e302f32342d3234203d3e20323638323534.roa (hash: jY+tbsAGTzcn5N+jHiOsaWS3WBkBKKylljU7SDevL8I=) 3: 34352e3233362e3135362e302f32342d3234203d3e20323638323534.roa (hash: 10cNS1rFXtwonEdWCsG96QN75TUPd3NohC99CLr6co4=) 4: 34352e3233362e3135382e302f32342d3234203d3e20323638323534.roa (hash: 6QajgBafqVgtgzsUpMYBPHbT8Yx62E6qE3HZwZj2TiE=) 5: 34352e3233362e3135362e302f32322d3232203d3e20323638323534.roa (hash: CuQjMpNkrIW1WzhX9cPRo+EN9gEwjyWh3xpLCuMgTVU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.crl rsync://rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 09 Apr 2026 05:42:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:66:7b:8a:d3:51:3c:c1:b6:b6:fe:5e:c3:e6:1a:2e:66:97:54:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFC529FB243B7780A20B27A2C4E73DAF65C25021 Validity Not Before: Apr 8 03:25:03 2026 GMT Not After : Apr 9 05:42:03 2026 GMT Subject: CN=4B0A3788D08EBDA91EF4AC276D72C4F24C022365 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:1e:66:d7:71:bc:a9:09:3f:1a:d8:6f:40:9e: 60:0b:ba:3e:85:c5:91:a2:e6:a7:1c:b8:9a:2a:fa: 1c:fb:95:85:35:40:2f:e5:a5:a5:58:e6:47:57:3b: c3:25:03:dd:4c:60:68:8d:9e:bd:db:97:65:a4:4d: 4e:49:00:2d:5c:13:f7:01:ee:15:8a:74:3d:1f:df: 17:de:9b:1b:66:13:f5:3d:7e:d1:40:58:5b:71:42: b8:2b:ad:11:8f:05:f2:74:da:f7:5b:d3:9e:f1:16: 48:6c:79:04:72:c9:dc:a2:ac:7c:3b:39:ca:7b:27: 4c:bd:4d:14:47:64:ce:12:1d:e5:eb:bd:a8:c9:9a: 21:c9:f2:3b:c8:13:dc:0e:c2:c5:b2:e3:e6:4f:c9: 13:53:2e:6f:8b:87:f4:6d:5b:c5:2c:14:20:dc:2e: a8:c0:82:ce:4b:1a:2b:72:bf:bf:fd:c8:b9:f5:59: 11:ae:86:9c:4d:df:bc:65:cd:58:5e:86:3e:13:c2: 6f:15:cc:dc:92:98:92:e7:48:34:81:9e:50:5b:41: f1:28:87:26:1e:17:56:c6:fc:3f:4c:3f:f9:ef:14: ee:d7:5e:35:1d:f4:e4:c2:b8:be:28:53:7a:b3:8a: 75:45:28:b9:13:c9:99:f7:a2:cd:46:79:24:f9:35: d2:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:0A:37:88:D0:8E:BD:A9:1E:F4:AC:27:6D:72:C4:F2:4C:02:23:65 X509v3 Authority Key Identifier: keyid:AF:C5:29:FB:24:3B:77:80:A2:0B:27:A2:C4:E7:3D:AF:65:C2:50:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:4b:af:77:34:f8:d5:1a:80:44:79:f4:7f:c8:8e:36:c5:9b: d4:af:c5:b8:a2:ba:d8:65:94:bc:49:13:2e:b7:81:07:ba:49: 10:48:9d:4e:ab:96:4e:64:f9:e4:15:5b:a2:da:b7:0d:79:78: 98:6a:57:05:eb:cb:33:8b:ca:a5:d8:72:44:6a:81:1f:92:41: 88:0e:ec:b0:f9:f7:89:58:87:ce:32:40:18:2e:62:d8:82:cd: 18:72:32:07:b5:2b:f5:3e:a6:30:77:fc:3c:68:6c:81:c3:d2: 58:78:81:21:31:f9:fa:10:a2:87:e0:b1:8b:2b:e3:0b:e5:6e: 9f:6b:ff:34:b4:d3:91:1f:da:94:b8:66:09:45:65:27:52:e7: f3:71:d1:60:9d:5d:ce:a3:fa:5b:cc:79:10:81:5f:e1:9e:10: a2:b7:31:7f:7b:d1:18:eb:fe:e4:ee:26:67:5f:c0:dd:9f:29: f6:c8:ac:ed:8e:ac:48:e6:41:f5:ac:dd:46:30:65:88:ab:53: 54:d2:af:ef:38:0d:62:f0:15:9b:ce:4d:28:5c:46:c7:c1:93: 95:71:04:eb:47:e4:97:90:84:a4:97:8c:36:3b:e7:1b:3e:0b: 30:33:53:66:8d:08:25:08:db:bf:b0:01:e4:05:d1:9a:e0:3a: 23:98:2d:e0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUcmZ7itNRPMG2tv5ew+YaLmaXVIswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZDNTI5RkIyNDNCNzc4MEEyMEIyN0EyQzRFNzNEQUY2 NUMyNTAyMTAeFw0yNjA0MDgwMzI1MDNaFw0yNjA0MDkwNTQyMDNaMDMxMTAvBgNV BAMTKDRCMEEzNzg4RDA4RUJEQTkxRUY0QUMyNzZENzJDNEYyNEMwMjIzNjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxHmbXcbypCT8a2G9AnmALuj6F xZGi5qccuJoq+hz7lYU1QC/lpaVY5kdXO8MlA91MYGiNnr3bl2WkTU5JAC1cE/cB 7hWKdD0f3xfemxtmE/U9ftFAWFtxQrgrrRGPBfJ02vdb057xFkhseQRyydyirHw7 Ocp7J0y9TRRHZM4SHeXrvajJmiHJ8jvIE9wOwsWy4+ZPyRNTLm+Lh/RtW8UsFCDc LqjAgs5LGityv7/9yLn1WRGuhpxN37xlzVhehj4Twm8VzNySmJLnSDSBnlBbQfEo hyYeF1bG/D9MP/nvFO7XXjUd9OTCuL4oU3qzinVFKLkTyZn3os1GeST5NdKLAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUSwo3iNCOvake9KwnbXLE8kwCI2UwHwYDVR0j BBgwFoAUr8Up+yQ7d4CiCyeixOc9r2XCUCEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQTNodHpDelJQekxuWUY3cTl5eDdBZEJZM1lHTm9jUUR3aHo3RFdZWjJQ UUIvMS9BRkM1MjlGQjI0M0I3NzgwQTIwQjI3QTJDNEU3M0RBRjY1QzI1MDIxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FGQzUyOUZCMjQzQjc3ODBB MjBCMjdBMkM0RTczREFGNjVDMjUwMjEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QTNodHpDelJQekxuWUY3cTl5eDdBZEJZM1lHTm9jUUR3aHo3RFdZWjJQUUIvMS9B RkM1MjlGQjI0M0I3NzgwQTIwQjI3QTJDNEU3M0RBRjY1QzI1MDIxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAf0uvdzT41RqARHn0f8iONsWb1K/FuKK62GWUvEkTLreBB7pJEEidTquWTmT5 5BVbotq3DXl4mGpXBevLM4vKpdhyRGqBH5JBiA7ssPn3iViHzjJAGC5i2ILNGHIy B7Ur9T6mMHf8PGhsgcPSWHiBITH5+hCih+CxiyvjC+Vun2v/NLTTkR/alLhmCUVl J1Ln83HRYJ1dzqP6W8x5EIFf4Z4Qorcxf3vRGOv+5O4mZ1/A3Z8p9sis7Y6sSOZB 9azdRjBliKtTVNKv7zgNYvAVm85NKFxGx8GTlXEE60fkl5CEpJeMNjvnGz4LMDNT Zo0IJQjbv7AB5AXRmuA6I5gt4A== -----END CERTIFICATE-----Generated at Wed Apr 8 23:09:22 2026 by rpki-client