$ rpki-client -vvf rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.mft File: AFF600EA088C0C0C3160D75A952506A94913C8A8.mft (raw, json) Hash identifier: jBNlJevRBI5d6jhetFKYn/vqU2sdJ2Tr6kfTe05HIz8= Subject key identifier: 9E:5C:8F:96:98:7B:7D:F7:0C:97:FD:63:C4:A8:FA:4E:46:D2:FE:75 Authority key identifier: AF:F6:00:EA:08:8C:0C:0C:31:60:D7:5A:95:25:06:A9:49:13:C8:A8 Certificate issuer: /CN=AFF600EA088C0C0C3160D75A952506A94913C8A8 Certificate serial: 1EF96848D9C77BAF78B83659140F6479B71596B3 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.cer Subject info access: rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.mft Manifest number: 045A Signing time: Wed 08 Jul 2026 04:50:02 +0000 Manifest this update: Wed 08 Jul 2026 04:45:02 +0000 Manifest next update: Thu 09 Jul 2026 05:40:02 +0000 Files and hashes: 1: 323830343a3266343a3a2f33322d3332203d3e203533313138.roa (hash: sRD6h65VglzeDY2TSBJaOKjsFwvSzqr6YQ3ZfPMDiNE=) 2: 3137372e31322e3131322e302f32302d3234203d3e203533313138.roa (hash: V+sHb/70BnlYO+tHn2LPf6u1XHLARNcW5bnvr7GX6SQ=) 3: AFF600EA088C0C0C3160D75A952506A94913C8A8.crl (hash: cMiDlDXafvdKKJemYuw8m34KWP9D0eMXpFMHcFLL8vw=) 4: 3137372e31322e39362e302f32302d3230203d3e203533313138.roa (hash: AMaoJxpTFXAI7xcSjwpfn8pWvLYEAF9q8qG1UkKx0hk=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.crl rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 09 Jul 2026 05:40:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:f9:68:48:d9:c7:7b:af:78:b8:36:59:14:0f:64:79:b7:15:96:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFF600EA088C0C0C3160D75A952506A94913C8A8 Validity Not Before: Jul 8 04:45:02 2026 GMT Not After : Jul 9 05:40:02 2026 GMT Subject: CN=9E5C8F96987B7DF70C97FD63C4A8FA4E46D2FE75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:0d:57:8c:fe:2d:e9:e8:a1:50:73:cc:68:c4: 93:a1:25:3f:12:55:5d:89:c3:07:49:64:d1:50:df: 9f:9d:24:1b:7d:31:6a:2c:f8:a9:a2:14:e6:33:be: a3:c6:60:38:8e:31:07:94:2b:24:36:3b:5c:32:01: dd:de:4d:b5:7e:2b:ae:d5:ef:30:6b:cd:b5:75:47: d3:ca:3b:be:59:77:6e:b3:49:76:bc:12:47:ea:50: 64:96:76:78:f4:b8:04:07:6e:c4:68:2f:1a:2e:a0: 6c:71:2c:c4:9b:40:6e:7d:82:0b:34:57:e4:13:63: e7:cf:9a:cd:ee:e1:de:40:64:cb:78:7a:b3:58:62: b2:6f:bd:6c:4f:29:52:55:af:fc:d0:50:e8:47:57: 1f:83:3a:5c:c6:ec:63:35:d0:5d:7a:ae:93:aa:b8: ed:0d:a5:be:21:28:bc:f6:f1:44:92:75:24:53:eb: 99:8d:88:41:cf:33:6a:9d:e2:31:70:08:d4:f0:ba: 97:63:c2:89:68:be:75:21:f6:70:ce:96:6e:1c:f7: 2f:22:0f:c9:75:37:4b:7f:0d:51:81:23:f7:d6:aa: 70:21:7c:17:da:95:02:60:cc:91:e3:d1:da:05:97: bc:fd:43:76:6a:fe:21:7f:2e:41:91:5d:d5:10:d0: 92:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:5C:8F:96:98:7B:7D:F7:0C:97:FD:63:C4:A8:FA:4E:46:D2:FE:75 X509v3 Authority Key Identifier: keyid:AF:F6:00:EA:08:8C:0C:0C:31:60:D7:5A:95:25:06:A9:49:13:C8:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:f7:d5:79:75:ce:e1:1e:16:80:0c:af:fe:2e:9d:cc:c9:a3: cf:5c:6d:08:49:3c:10:4e:8d:d5:e3:8a:28:8f:89:8d:7d:d5: 00:19:4a:bf:d4:f5:b8:ce:3a:16:ba:95:9c:41:af:89:d7:b9: df:32:a4:7a:3e:b2:82:1b:b2:07:a6:c1:c3:b2:a3:95:ee:29: 14:6c:b0:e7:16:29:32:36:57:80:50:92:a7:38:43:70:20:1f: 5b:0b:08:e5:e8:86:fb:7e:19:b0:0a:58:af:b3:35:e6:36:94: f5:2f:6d:53:f9:8a:59:68:a2:30:92:89:1d:54:02:49:c8:f6: a9:8b:f5:e8:8f:45:72:df:61:1e:84:ba:5e:d8:25:a4:36:99: ac:77:32:be:c5:b1:3e:51:a5:2a:45:fd:6f:0b:c0:13:03:8c: d2:10:e7:be:c8:3f:26:47:7e:33:27:f2:29:5a:d3:0e:33:da: 6b:51:5e:44:0a:f0:9b:01:10:24:57:eb:68:3a:24:b5:e3:af: ac:aa:dd:55:6d:04:e2:11:c2:9d:fd:52:bd:60:94:65:f1:73: d9:8c:90:ca:49:4d:89:d2:6c:47:41:1f:8e:b2:a6:69:7c:e9: 42:cd:cb:36:28:26:b7:1e:08:ec:b5:fe:03:4c:70:4c:63:ef: cd:58:9d:ea -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUHvloSNnHe694uDZZFA9kebcVlrMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZGNjAwRUEwODhDMEMwQzMxNjBENzVBOTUyNTA2QTk0 OTEzQzhBODAeFw0yNjA3MDgwNDQ1MDJaFw0yNjA3MDkwNTQwMDJaMDMxMTAvBgNV BAMTKDlFNUM4Rjk2OTg3QjdERjcwQzk3RkQ2M0M0QThGQTRFNDZEMkZFNzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5DVeM/i3p6KFQc8xoxJOhJT8S VV2JwwdJZNFQ35+dJBt9MWos+KmiFOYzvqPGYDiOMQeUKyQ2O1wyAd3eTbV+K67V 7zBrzbV1R9PKO75Zd26zSXa8EkfqUGSWdnj0uAQHbsRoLxouoGxxLMSbQG59ggs0 V+QTY+fPms3u4d5AZMt4erNYYrJvvWxPKVJVr/zQUOhHVx+DOlzG7GM10F16rpOq uO0Npb4hKLz28USSdSRT65mNiEHPM2qd4jFwCNTwupdjwolovnUh9nDOlm4c9y8i D8l1N0t/DVGBI/fWqnAhfBfalQJgzJHj0doFl7z9Q3Zq/iF/LkGRXdUQ0JKhAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUnlyPlph7ffcMl/1jxKj6TkbS/nUwHwYDVR0j BBgwFoAUr/YA6giMDAwxYNdalSUGqUkTyKgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQVRHMXNMOXJEWDZoalhSMzdheHNYblNockVRaHVqWmdWd0JTSmFpYUpQ Y2ovMS9BRkY2MDBFQTA4OEMwQzBDMzE2MEQ3NUE5NTI1MDZBOTQ5MTNDOEE4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FGRjYwMEVBMDg4QzBDMEMz MTYwRDc1QTk1MjUwNkE5NDkxM0M4QTguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QVRHMXNMOXJEWDZoalhSMzdheHNYblNockVRaHVqWmdWd0JTSmFpYUpQY2ovMS9B RkY2MDBFQTA4OEMwQzBDMzE2MEQ3NUE5NTI1MDZBOTQ5MTNDOEE4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZPfVeXXO4R4WgAyv/i6dzMmjz1xtCEk8EE6N1eOKKI+JjX3VABlKv9T1uM46 FrqVnEGvide53zKkej6yghuyB6bBw7Kjle4pFGyw5xYpMjZXgFCSpzhDcCAfWwsI 5eiG+34ZsApYr7M15jaU9S9tU/mKWWiiMJKJHVQCScj2qYv16I9Fct9hHoS6Xtgl pDaZrHcyvsWxPlGlKkX9bwvAEwOM0hDnvsg/Jkd+MyfyKVrTDjPaa1FeRArwmwEQ JFfraDokteOvrKrdVW0E4hHCnf1SvWCUZfFz2YyQyklNidJsR0EfjrKmaXzpQs3L Nigmtx4I7LX+A0xwTGPvzVid6g== -----END CERTIFICATE-----Generated at Wed Jul 8 16:13:46 2026 by rpki-client