$ rpki-client -vvf rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.mft File: AFF600EA088C0C0C3160D75A952506A94913C8A8.mft (raw, json) Hash identifier: ZLwrTsN6uh1zXFXFsdjSDPmt1VsnSsls0cLvlaMo5p4= Subject key identifier: 5B:AA:EB:4B:22:E8:22:66:E4:06:96:53:90:71:54:F3:11:EC:70:FB Authority key identifier: AF:F6:00:EA:08:8C:0C:0C:31:60:D7:5A:95:25:06:A9:49:13:C8:A8 Certificate issuer: /CN=AFF600EA088C0C0C3160D75A952506A94913C8A8 Certificate serial: 118196E2E17419D4D712C5B7501D220C1E586166 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.cer Subject info access: rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.mft Manifest number: 041E Signing time: Sun 24 May 2026 07:20:02 +0000 Manifest this update: Sun 24 May 2026 07:15:02 +0000 Manifest next update: Mon 25 May 2026 10:21:02 +0000 Files and hashes: 1: 3137372e31322e39362e302f32302d3230203d3e203533313138.roa (hash: AMaoJxpTFXAI7xcSjwpfn8pWvLYEAF9q8qG1UkKx0hk=) 2: 323830343a3266343a3a2f33322d3332203d3e203533313138.roa (hash: sRD6h65VglzeDY2TSBJaOKjsFwvSzqr6YQ3ZfPMDiNE=) 3: AFF600EA088C0C0C3160D75A952506A94913C8A8.crl (hash: DDhhYeaMYoBxJM257dl9u6urSZ5kLMmvRmA/m3Hj8Yw=) 4: 3137372e31322e3131322e302f32302d3234203d3e203533313138.roa (hash: V+sHb/70BnlYO+tHn2LPf6u1XHLARNcW5bnvr7GX6SQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.crl rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 25 May 2026 10:21:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:81:96:e2:e1:74:19:d4:d7:12:c5:b7:50:1d:22:0c:1e:58:61:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFF600EA088C0C0C3160D75A952506A94913C8A8 Validity Not Before: May 24 07:15:02 2026 GMT Not After : May 25 10:21:02 2026 GMT Subject: CN=5BAAEB4B22E82266E4069653907154F311EC70FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b4:e9:74:03:95:9c:48:c1:f7:ab:10:ea:84: 4a:f3:f6:bf:b5:f3:66:15:59:46:04:ba:8d:72:c1: c8:3f:3a:95:dc:f6:de:60:5a:44:13:5f:5b:ef:06: 06:71:70:05:45:f1:6d:53:5c:1f:d3:64:fb:fc:29: b9:3f:23:99:82:08:2c:c8:02:9c:78:3e:96:1d:bc: 7b:ec:16:3f:81:0e:4e:e9:b9:bb:91:d3:59:32:a6: f5:15:62:6d:29:b4:95:c3:57:cb:32:4b:bf:93:5d: 98:66:fe:ad:80:08:66:c5:75:92:76:12:19:51:4b: d6:f4:7b:6a:c3:a4:32:e1:5e:c8:e3:10:8b:e3:a5: f4:60:54:85:6c:0c:bf:0d:87:2b:b9:cf:1e:f0:9b: 14:46:fb:a4:a2:24:2c:5a:68:a8:aa:73:ee:52:37: 4c:ec:9d:9a:08:51:d4:bb:a0:22:74:90:d6:31:64: fb:70:33:f5:b4:2b:f9:fa:c1:c8:41:e2:67:c9:ab: e2:05:d4:82:e9:47:1a:ca:88:f6:33:66:c4:56:32: f4:29:8c:ac:b2:ff:26:4c:ed:2c:d3:1d:0c:81:cf: be:11:34:ec:b6:52:df:34:12:cc:43:f1:49:f7:95: c4:7f:86:da:20:c4:4c:e2:df:51:4b:34:80:2d:b6: 87:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:AA:EB:4B:22:E8:22:66:E4:06:96:53:90:71:54:F3:11:EC:70:FB X509v3 Authority Key Identifier: keyid:AF:F6:00:EA:08:8C:0C:0C:31:60:D7:5A:95:25:06:A9:49:13:C8:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:c3:79:64:d1:42:5f:d4:97:77:5e:b1:e7:78:7b:07:66:25: b2:59:6f:a8:84:fa:2c:18:84:03:3a:45:94:2b:a4:c6:75:0d: 9b:52:0b:4b:5e:48:63:82:c2:d9:39:ab:12:b7:34:81:1c:cd: a6:18:a2:06:7d:8a:3e:30:62:57:0a:b4:dc:ac:ee:76:3a:55: ea:bd:c0:1b:83:69:3c:e8:66:06:e9:8b:9d:cd:8b:c2:59:c6: eb:48:98:e5:43:07:b8:7e:bc:99:ff:20:2d:a8:35:42:c7:e7: 1f:90:1d:e5:7f:86:e1:19:6e:a5:2c:1e:62:24:bf:76:6d:e1: 8c:17:a9:91:0a:a4:1c:79:75:00:c9:35:ca:05:d3:9a:56:3c: 51:89:f6:23:c0:f9:73:c8:3a:59:a2:9c:76:f8:47:33:9f:62: 01:7b:7a:6c:35:b7:c0:15:3b:27:d9:de:0f:fb:e4:9d:c5:cf: fa:3e:e8:96:6d:83:82:87:80:31:97:4d:34:f2:75:51:a2:ed: 6a:b4:ff:d9:71:da:78:c9:5b:3b:97:37:0b:ee:79:f4:b7:fb: 54:9b:dd:27:a6:34:50:c8:f7:b9:d9:cb:9f:4c:18:cc:b2:5f: 9a:38:af:b6:54:9b:75:19:bf:9f:bc:51:96:13:75:52:db:c1: e6:19:37:5a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUEYGW4uF0GdTXEsW3UB0iDB5YYWYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZGNjAwRUEwODhDMEMwQzMxNjBENzVBOTUyNTA2QTk0 OTEzQzhBODAeFw0yNjA1MjQwNzE1MDJaFw0yNjA1MjUxMDIxMDJaMDMxMTAvBgNV BAMTKDVCQUFFQjRCMjJFODIyNjZFNDA2OTY1MzkwNzE1NEYzMTFFQzcwRkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAtOl0A5WcSMH3qxDqhErz9r+1 82YVWUYEuo1ywcg/OpXc9t5gWkQTX1vvBgZxcAVF8W1TXB/TZPv8Kbk/I5mCCCzI Apx4PpYdvHvsFj+BDk7pubuR01kypvUVYm0ptJXDV8syS7+TXZhm/q2ACGbFdZJ2 EhlRS9b0e2rDpDLhXsjjEIvjpfRgVIVsDL8Nhyu5zx7wmxRG+6SiJCxaaKiqc+5S N0zsnZoIUdS7oCJ0kNYxZPtwM/W0K/n6wchB4mfJq+IF1ILpRxrKiPYzZsRWMvQp jKyy/yZM7SzTHQyBz74RNOy2Ut80EsxD8Un3lcR/htogxEzi31FLNIAttocPAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUW6rrSyLoImbkBpZTkHFU8xHscPswHwYDVR0j BBgwFoAUr/YA6giMDAwxYNdalSUGqUkTyKgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQVRHMXNMOXJEWDZoalhSMzdheHNYblNockVRaHVqWmdWd0JTSmFpYUpQ Y2ovMS9BRkY2MDBFQTA4OEMwQzBDMzE2MEQ3NUE5NTI1MDZBOTQ5MTNDOEE4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FGRjYwMEVBMDg4QzBDMEMz MTYwRDc1QTk1MjUwNkE5NDkxM0M4QTguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QVRHMXNMOXJEWDZoalhSMzdheHNYblNockVRaHVqWmdWd0JTSmFpYUpQY2ovMS9B RkY2MDBFQTA4OEMwQzBDMzE2MEQ3NUE5NTI1MDZBOTQ5MTNDOEE4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEADsN5ZNFCX9SXd16x53h7B2YlsllvqIT6LBiEAzpFlCukxnUNm1ILS15IY4LC 2TmrErc0gRzNphiiBn2KPjBiVwq03KzudjpV6r3AG4NpPOhmBumLnc2LwlnG60iY 5UMHuH68mf8gLag1QsfnH5Ad5X+G4RlupSweYiS/dm3hjBepkQqkHHl1AMk1ygXT mlY8UYn2I8D5c8g6WaKcdvhHM59iAXt6bDW3wBU7J9neD/vkncXP+j7olm2DgoeA MZdNNPJ1UaLtarT/2XHaeMlbO5c3C+559Lf7VJvdJ6Y0UMj3udnLn0wYzLJfmjiv tlSbdRm/n7xRlhN1UtvB5hk3Wg== -----END CERTIFICATE-----Generated at Sun May 24 12:51:47 2026 by rpki-client