$ rpki-client -vvf rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.mft File: AFF600EA088C0C0C3160D75A952506A94913C8A8.mft (raw, json) Hash identifier: 5YVs/aRZwJGHccZQvpFpZ3mZBUzcput1ZwGIzSG9SE0= Subject key identifier: 16:37:F7:1B:F7:10:A4:2B:08:19:41:A5:81:A2:1A:1A:C5:F2:D5:1F Authority key identifier: AF:F6:00:EA:08:8C:0C:0C:31:60:D7:5A:95:25:06:A9:49:13:C8:A8 Certificate issuer: /CN=AFF600EA088C0C0C3160D75A952506A94913C8A8 Certificate serial: 5E75818E1E8C0DEF59497829048E73A19C1E1603 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.cer Subject info access: rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.mft Manifest number: 03E0 Signing time: Tue 07 Apr 2026 15:00:02 +0000 Manifest this update: Tue 07 Apr 2026 14:55:02 +0000 Manifest next update: Wed 08 Apr 2026 18:05:02 +0000 Files and hashes: 1: 323830343a3266343a3a2f33322d3332203d3e203533313138.roa (hash: sRD6h65VglzeDY2TSBJaOKjsFwvSzqr6YQ3ZfPMDiNE=) 2: 3137372e31322e39362e302f32302d3230203d3e203533313138.roa (hash: AMaoJxpTFXAI7xcSjwpfn8pWvLYEAF9q8qG1UkKx0hk=) 3: 3137372e31322e3131322e302f32302d3234203d3e203533313138.roa (hash: V+sHb/70BnlYO+tHn2LPf6u1XHLARNcW5bnvr7GX6SQ=) 4: AFF600EA088C0C0C3160D75A952506A94913C8A8.crl (hash: 4/UncbUpKv1GoCSWGbK5K01cHrXe2wahg1jfXUqjVQk=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.crl rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 08 Apr 2026 18:05:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:75:81:8e:1e:8c:0d:ef:59:49:78:29:04:8e:73:a1:9c:1e:16:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFF600EA088C0C0C3160D75A952506A94913C8A8 Validity Not Before: Apr 7 14:55:02 2026 GMT Not After : Apr 8 18:05:02 2026 GMT Subject: CN=1637F71BF710A42B081941A581A21A1AC5F2D51F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:db:d7:ce:b2:cc:4e:13:35:fe:98:41:14:e5: d6:41:3f:ac:5c:b8:6e:fc:16:09:32:bd:4f:76:22: 81:94:d6:51:de:52:44:69:17:f5:b5:62:8e:c9:6c: 08:a9:40:33:ba:c5:52:67:fa:6f:57:bd:e3:ec:2b: 43:7a:90:9e:87:3a:f3:c9:4e:78:93:02:71:de:08: 40:9f:60:6d:48:e8:a9:45:ed:06:4b:4c:b3:3f:2d: 77:97:72:cf:e4:ad:20:1b:3c:e3:29:48:b8:e8:98: ba:9b:16:d6:c8:38:dd:11:17:60:c6:34:f7:d2:30: bb:a0:43:8f:a5:4a:21:ee:03:15:8b:64:18:f9:fd: 23:35:4a:17:ea:93:b0:3d:35:e9:1c:d0:8b:59:5c: 59:9c:d5:18:b8:fc:83:8a:42:84:e8:3a:ed:25:9f: 63:b9:03:6b:63:13:43:06:52:aa:b2:6a:fb:02:72: d2:44:5c:26:8c:4d:bc:3a:ae:5a:f9:24:c4:58:02: f5:58:a0:0c:ea:e2:10:64:1c:80:9f:44:77:b6:ba: d0:ec:b6:bc:66:08:e7:7c:ad:fb:c0:6c:9d:df:7f: 68:23:c7:a0:c2:0f:bf:77:25:f1:71:a6:03:19:42: 37:c0:85:78:e4:f8:fb:40:58:df:2b:0b:16:b5:b9: 18:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:37:F7:1B:F7:10:A4:2B:08:19:41:A5:81:A2:1A:1A:C5:F2:D5:1F X509v3 Authority Key Identifier: keyid:AF:F6:00:EA:08:8C:0C:0C:31:60:D7:5A:95:25:06:A9:49:13:C8:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:15:fc:f3:20:a9:0b:78:cd:97:48:07:f0:44:e1:dd:59:3d: 54:76:bb:14:e1:d7:94:86:b4:89:1d:73:f6:78:a4:26:54:69: 6f:17:a5:7a:dd:9b:6f:62:16:04:27:8c:35:55:11:b3:dc:08: 65:f5:42:34:b6:c0:cc:c0:41:e5:6a:46:c7:eb:ed:44:7c:c1: ba:ac:d8:2f:a3:a6:66:b9:d4:26:64:7a:70:92:bf:57:6e:84: 4f:b0:06:db:0c:6c:d5:de:e2:24:bb:92:89:b9:06:e6:d4:9d: da:97:22:e4:7c:22:42:d7:b7:0c:bd:c2:7a:4e:d5:e3:5b:40: 6c:1d:3c:2b:93:d5:c7:3d:2b:d1:96:b6:68:33:61:67:91:60: 37:d3:29:c7:3d:ba:7c:83:28:57:90:3c:bd:17:6b:08:9e:f7: f2:d1:61:77:ae:92:4c:6e:a9:5e:b1:2c:20:aa:a3:09:ad:03: 3e:58:a0:86:31:ac:ef:24:42:4b:d9:9b:c4:76:31:d0:43:d4: 97:68:60:a5:a4:f6:6a:59:be:ef:7c:63:67:11:df:b8:e8:6e: dc:02:f1:ae:af:ba:2c:0e:48:6a:1c:73:04:8d:ec:45:24:a5: 5d:ba:ae:55:f0:f4:9e:58:39:a7:e8:10:ec:94:c8:00:17:e7: 87:c6:0b:f5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUXnWBjh6MDe9ZSXgpBI5zoZweFgMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZGNjAwRUEwODhDMEMwQzMxNjBENzVBOTUyNTA2QTk0 OTEzQzhBODAeFw0yNjA0MDcxNDU1MDJaFw0yNjA0MDgxODA1MDJaMDMxMTAvBgNV BAMTKDE2MzdGNzFCRjcxMEE0MkIwODE5NDFBNTgxQTIxQTFBQzVGMkQ1MUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+29fOssxOEzX+mEEU5dZBP6xc uG78FgkyvU92IoGU1lHeUkRpF/W1Yo7JbAipQDO6xVJn+m9XvePsK0N6kJ6HOvPJ TniTAnHeCECfYG1I6KlF7QZLTLM/LXeXcs/krSAbPOMpSLjomLqbFtbION0RF2DG NPfSMLugQ4+lSiHuAxWLZBj5/SM1Shfqk7A9Nekc0ItZXFmc1Ri4/IOKQoToOu0l n2O5A2tjE0MGUqqyavsCctJEXCaMTbw6rlr5JMRYAvVYoAzq4hBkHICfRHe2utDs trxmCOd8rfvAbJ3ff2gjx6DCD793JfFxpgMZQjfAhXjk+PtAWN8rCxa1uRilAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUFjf3G/cQpCsIGUGlgaIaGsXy1R8wHwYDVR0j BBgwFoAUr/YA6giMDAwxYNdalSUGqUkTyKgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQVRHMXNMOXJEWDZoalhSMzdheHNYblNockVRaHVqWmdWd0JTSmFpYUpQ Y2ovMS9BRkY2MDBFQTA4OEMwQzBDMzE2MEQ3NUE5NTI1MDZBOTQ5MTNDOEE4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FGRjYwMEVBMDg4QzBDMEMz MTYwRDc1QTk1MjUwNkE5NDkxM0M4QTguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QVRHMXNMOXJEWDZoalhSMzdheHNYblNockVRaHVqWmdWd0JTSmFpYUpQY2ovMS9B RkY2MDBFQTA4OEMwQzBDMzE2MEQ3NUE5NTI1MDZBOTQ5MTNDOEE4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIRX88yCpC3jNl0gH8ETh3Vk9VHa7FOHXlIa0iR1z9nikJlRpbxelet2bb2IW BCeMNVURs9wIZfVCNLbAzMBB5WpGx+vtRHzBuqzYL6OmZrnUJmR6cJK/V26ET7AG 2wxs1d7iJLuSibkG5tSd2pci5HwiQte3DL3Cek7V41tAbB08K5PVxz0r0Za2aDNh Z5FgN9Mpxz26fIMoV5A8vRdrCJ738tFhd66STG6pXrEsIKqjCa0DPlighjGs7yRC S9mbxHYx0EPUl2hgpaT2alm+73xjZxHfuOhu3ALxrq+6LA5IahxzBI3sRSSlXbqu VfD0nlg5p+gQ7JTIABfnh8YL9Q== -----END CERTIFICATE-----Generated at Wed Apr 8 11:23:24 2026 by rpki-client