$ rpki-client -vvf rpki-repo.registro.br/repo/4oKDjTtuVfRxybQECZfMRov5Z6DpryF7MyQN17v2sZKk/0/AF709D487025EB90C014C7186CC0AEA341A27C3B.mft File: AF709D487025EB90C014C7186CC0AEA341A27C3B.mft (raw, json) Hash identifier: rkScomIjBwXriQBYiTEqs98Ep+rVh3pU5SLun2xqLaA= Subject key identifier: 90:4E:CD:EE:71:F6:00:B3:34:C5:72:9D:AA:A6:AD:E5:9E:F2:66:E3 Authority key identifier: AF:70:9D:48:70:25:EB:90:C0:14:C7:18:6C:C0:AE:A3:41:A2:7C:3B Certificate issuer: /CN=AF709D487025EB90C014C7186CC0AEA341A27C3B Certificate serial: 3EFD100DC3A8ABA280CFA29F160494EFDFC4E1BD Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF709D487025EB90C014C7186CC0AEA341A27C3B.cer Subject info access: rsync://rpki-repo.registro.br/repo/4oKDjTtuVfRxybQECZfMRov5Z6DpryF7MyQN17v2sZKk/0/AF709D487025EB90C014C7186CC0AEA341A27C3B.mft Manifest number: 010D Signing time: Wed 08 Apr 2026 17:32:12 +0000 Manifest this update: Wed 08 Apr 2026 17:27:12 +0000 Manifest next update: Thu 09 Apr 2026 20:41:12 +0000 Files and hashes: 1: AF709D487025EB90C014C7186CC0AEA341A27C3B.crl (hash: IT/QskTC/yyJ0fJ0rdsjj34/UAhztYmXhJm+QMMQZ3w=) 2: 323830343a373039633a3a2f33322d3438203d3e20323730373337.roa (hash: z3+jy+kvN0ec/CwA1jDFeo1POc5HGxkNptEzu9VsNXs=) 3: 3137372e3232312e3133362e302f32322d3234203d3e20323730373337.roa (hash: DlhDw1dzTc6ndQvekwKDgY9PvHeoaodotFzkhX2390Y=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4oKDjTtuVfRxybQECZfMRov5Z6DpryF7MyQN17v2sZKk/0/AF709D487025EB90C014C7186CC0AEA341A27C3B.crl rsync://rpki-repo.registro.br/repo/4oKDjTtuVfRxybQECZfMRov5Z6DpryF7MyQN17v2sZKk/0/AF709D487025EB90C014C7186CC0AEA341A27C3B.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF709D487025EB90C014C7186CC0AEA341A27C3B.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 09 Apr 2026 20:41:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:fd:10:0d:c3:a8:ab:a2:80:cf:a2:9f:16:04:94:ef:df:c4:e1:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF709D487025EB90C014C7186CC0AEA341A27C3B Validity Not Before: Apr 8 17:27:12 2026 GMT Not After : Apr 9 20:41:12 2026 GMT Subject: CN=904ECDEE71F600B334C5729DAAA6ADE59EF266E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:17:54:33:28:11:c0:0d:92:e6:8f:8f:d0:65: 6d:23:4c:5f:f7:66:61:78:37:17:99:bf:c9:cd:7f: 82:54:44:b2:fa:9a:d7:f4:dc:8e:00:eb:e9:89:7b: 02:74:4c:7e:62:64:a8:7f:ef:dc:1c:f6:5c:6d:0e: 1a:aa:bc:8c:8c:b9:95:28:cf:3d:8e:98:68:3a:4d: fe:f8:b4:93:70:96:7e:47:98:1f:66:7f:cc:0b:31: 23:3d:bb:48:2a:5d:c1:8d:f1:b8:04:4d:61:0c:0c: b4:89:7c:dc:53:ad:6f:d0:76:62:5a:9c:4f:53:b7: 8e:14:08:cc:e1:f1:3a:81:0b:b1:49:fd:e2:85:8f: 1d:d9:01:48:e5:63:fe:5d:48:b5:1d:67:71:2f:91: a4:63:b5:4d:d6:71:36:86:cb:b2:82:9e:76:fa:21: 0d:09:c4:51:ee:67:ae:be:f8:0d:a1:a3:90:bc:55: ea:5a:b1:ef:c4:65:55:ef:6e:f8:f6:0d:cf:cc:7d: 0d:28:6c:49:b0:c2:1a:86:a3:9b:ec:60:18:34:db: a7:b7:e9:38:13:e2:b7:b9:c0:59:03:06:d6:f9:56: 9c:75:ee:ce:26:26:e9:c9:bf:4c:63:49:c9:4b:64: 71:9b:2e:cd:89:73:82:28:33:65:2f:be:a8:76:f5: 1a:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:4E:CD:EE:71:F6:00:B3:34:C5:72:9D:AA:A6:AD:E5:9E:F2:66:E3 X509v3 Authority Key Identifier: keyid:AF:70:9D:48:70:25:EB:90:C0:14:C7:18:6C:C0:AE:A3:41:A2:7C:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4oKDjTtuVfRxybQECZfMRov5Z6DpryF7MyQN17v2sZKk/0/AF709D487025EB90C014C7186CC0AEA341A27C3B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF709D487025EB90C014C7186CC0AEA341A27C3B.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4oKDjTtuVfRxybQECZfMRov5Z6DpryF7MyQN17v2sZKk/0/AF709D487025EB90C014C7186CC0AEA341A27C3B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:cd:85:95:b9:9e:82:88:23:ae:b9:08:98:78:fd:3a:07:a2: 64:b2:86:dd:fa:e1:b2:1c:48:0d:87:0a:af:b6:16:e0:25:86: 95:bb:b9:a5:1c:96:dc:be:18:cb:8e:78:61:c2:2f:2e:b9:bd: a5:97:0f:c9:ad:ff:a8:7a:60:8f:8e:a5:40:a3:c8:e6:a8:5e: d5:31:d9:b8:d9:15:51:47:b3:ac:01:24:c3:4b:ed:80:56:66: fe:0e:c9:8d:62:d6:d7:c1:3c:a8:19:3e:92:1b:67:db:e6:f8: 63:be:81:7e:e7:01:d6:d6:ce:46:66:05:16:fe:a2:03:0c:48: 48:76:f9:e9:13:44:65:f3:b9:e9:51:95:82:e5:59:b4:40:38: cb:f7:c9:27:55:f3:be:3b:0a:47:66:27:d2:31:8f:0e:71:28: 40:c9:8f:b6:29:31:2e:0a:f1:5c:b2:ef:7f:41:94:a9:87:9c: fd:58:08:36:d4:f7:7d:44:05:35:2d:dd:57:73:b3:26:81:2f: ab:a3:5b:f2:17:e4:f0:bf:43:cf:90:31:1e:96:f4:44:be:f6: c3:d0:2c:8f:65:60:d1:ba:66:06:f2:c1:e8:6c:97:7f:bd:c1: 59:19:d8:1c:b5:2f:ea:82:0d:3c:29:f2:fc:ba:24:f8:68:4c: c0:4d:1e:2c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUPv0QDcOoq6KAz6KfFgSU79/E4b0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY3MDlENDg3MDI1RUI5MEMwMTRDNzE4NkNDMEFFQTM0 MUEyN0MzQjAeFw0yNjA0MDgxNzI3MTJaFw0yNjA0MDkyMDQxMTJaMDMxMTAvBgNV BAMTKDkwNEVDREVFNzFGNjAwQjMzNEM1NzI5REFBQTZBREU1OUVGMjY2RTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0F1QzKBHADZLmj4/QZW0jTF/3 ZmF4NxeZv8nNf4JURLL6mtf03I4A6+mJewJ0TH5iZKh/79wc9lxtDhqqvIyMuZUo zz2OmGg6Tf74tJNwln5HmB9mf8wLMSM9u0gqXcGN8bgETWEMDLSJfNxTrW/QdmJa nE9Tt44UCMzh8TqBC7FJ/eKFjx3ZAUjlY/5dSLUdZ3EvkaRjtU3WcTaGy7KCnnb6 IQ0JxFHuZ66++A2ho5C8Vepase/EZVXvbvj2Dc/MfQ0obEmwwhqGo5vsYBg026e3 6TgT4re5wFkDBtb5Vpx17s4mJunJv0xjSclLZHGbLs2Jc4IoM2Uvvqh29RqJAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUkE7N7nH2ALM0xXKdqqat5Z7yZuMwHwYDVR0j BBgwFoAUr3CdSHAl65DAFMcYbMCuo0GifDswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNG9LRGpUdHVWZlJ4eWJRRUNaZk1Sb3Y1WjZEcHJ5RjdNeVFOMTd2MnNa S2svMC9BRjcwOUQ0ODcwMjVFQjkwQzAxNEM3MTg2Q0MwQUVBMzQxQTI3QzNCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FGNzA5RDQ4NzAyNUVCOTBD MDE0QzcxODZDQzBBRUEzNDFBMjdDM0IuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NG9LRGpUdHVWZlJ4eWJRRUNaZk1Sb3Y1WjZEcHJ5RjdNeVFOMTd2MnNaS2svMC9B RjcwOUQ0ODcwMjVFQjkwQzAxNEM3MTg2Q0MwQUVBMzQxQTI3QzNCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOc2FlbmegogjrrkImHj9OgeiZLKG3frhshxIDYcKr7YW4CWGlbu5pRyW3L4Y y454YcIvLrm9pZcPya3/qHpgj46lQKPI5qhe1THZuNkVUUezrAEkw0vtgFZm/g7J jWLW18E8qBk+khtn2+b4Y76BfucB1tbORmYFFv6iAwxISHb56RNEZfO56VGVguVZ tEA4y/fJJ1XzvjsKR2Yn0jGPDnEoQMmPtikxLgrxXLLvf0GUqYec/VgINtT3fUQF NS3dV3OzJoEvq6Nb8hfk8L9Dz5AxHpb0RL72w9Asj2Vg0bpmBvLB6GyXf73BWRnY HLUv6oINPCny/Lok+GhMwE0eLA== -----END CERTIFICATE-----Generated at Thu Apr 9 12:51:44 2026 by rpki-client