$ rpki-client -vvvf rpki-repo.registro.br/repo/BeVfxV1hAn3FurdeY9HhL1oFPfdKYdXcQYnjYC6cm6X3/1/AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.mft File: AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.mft (raw, json) Hash identifier: ULQIk3Edqw7boPywyk+MF2AtOlZn2USRah6wgX8/CA4= Subject key identifier: 59:C5:AA:38:57:E9:27:B3:7F:A2:28:BE:07:4F:45:03:74:6E:A7:C0 Authority key identifier: AF:F2:DE:84:A1:6A:AF:6B:11:BE:71:E4:16:5A:53:F8:A3:AC:19:7E Certificate issuer: /CN=AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E Certificate serial: 21888BC493384BC048B3E073A8BE92244C3756D6 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.cer Subject info access: rsync://rpki-repo.registro.br/repo/BeVfxV1hAn3FurdeY9HhL1oFPfdKYdXcQYnjYC6cm6X3/1/AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.mft Manifest number: 0457 Signing time: Mon 24 Aug 2026 13:42:54 +0000 Manifest this update: Mon 24 Aug 2026 13:37:54 +0000 Manifest next update: Tue 25 Aug 2026 16:20:54 +0000 Files and hashes: 1: 34352e3138302e38342e302f32322d3234203d3e20323639313339.roa (hash: C0pX84zBEhKRhl9C5gFvhi/VFuecxZXh/uAPLmzVMVw=) 2: AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.crl (hash: eCO+CssMeG4HpCRRQVso9xUVNLMjRrvj5Cm2gVimmSk=) 3: 323830343a363030303a3a2f33322d3438203d3e20323639313339.roa (hash: 8dCQjA7sfh1xtH61B+clyqaJwOe2FGLwiDK7lZSnl88=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BeVfxV1hAn3FurdeY9HhL1oFPfdKYdXcQYnjYC6cm6X3/1/AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.crl rsync://rpki-repo.registro.br/repo/BeVfxV1hAn3FurdeY9HhL1oFPfdKYdXcQYnjYC6cm6X3/1/AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 25 Aug 2026 16:20:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:88:8b:c4:93:38:4b:c0:48:b3:e0:73:a8:be:92:24:4c:37:56:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E Validity Not Before: Aug 24 13:37:54 2026 GMT Not After : Aug 25 16:20:54 2026 GMT Subject: CN=59C5AA3857E927B37FA228BE074F4503746EA7C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:13:c0:21:40:44:56:c5:53:33:67:e6:19:0d: e9:48:d9:0a:89:19:27:07:a4:dd:df:e5:8c:a2:d1: af:05:bf:70:83:10:2a:49:3e:b6:fe:6d:33:cb:86: 82:3b:75:0a:bf:ad:cb:26:31:59:5c:d2:b2:96:e2: d2:0d:ba:10:90:f1:cf:4d:0f:56:32:39:95:13:cb: 9f:e1:d7:63:89:13:ff:32:58:84:f5:6e:3a:22:ca: 55:9a:43:ab:c6:d5:f2:05:22:91:a3:93:61:10:af: 7a:09:8f:29:43:7f:76:ae:ba:ea:34:d1:f6:80:66: 41:83:ed:79:c0:f5:11:40:01:b4:53:09:f4:38:6a: 83:bf:7c:00:99:2d:e1:f2:3b:53:c9:00:8a:a0:78: 66:6d:86:ca:ac:84:f1:52:31:7f:5a:ec:b8:c4:ab: 87:53:a3:59:3a:56:7c:d9:e3:80:c0:53:de:0f:e3: f8:fc:0e:f0:8b:89:d0:27:6a:2a:30:1f:38:88:22: 2d:a6:3e:00:8c:5f:0c:0a:56:6f:6e:56:04:b0:4c: bc:2d:73:ca:70:12:0a:ee:d8:4f:e6:9f:a3:04:55: 85:a0:35:f4:1d:f5:b2:37:ad:85:35:6b:77:6b:a3: 8c:b2:61:32:d3:33:89:aa:41:44:4c:a7:ca:45:35: 8f:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:C5:AA:38:57:E9:27:B3:7F:A2:28:BE:07:4F:45:03:74:6E:A7:C0 X509v3 Authority Key Identifier: keyid:AF:F2:DE:84:A1:6A:AF:6B:11:BE:71:E4:16:5A:53:F8:A3:AC:19:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BeVfxV1hAn3FurdeY9HhL1oFPfdKYdXcQYnjYC6cm6X3/1/AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BeVfxV1hAn3FurdeY9HhL1oFPfdKYdXcQYnjYC6cm6X3/1/AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:fa:bd:a2:fb:61:ce:f9:3e:de:f3:bf:ac:fd:59:41:b0:ac: 98:52:ab:93:14:b2:e5:23:05:07:07:1c:ec:7b:49:69:e1:76: e6:fe:63:02:ad:f5:81:7d:ed:87:2a:85:fd:b7:79:22:e2:75: a0:74:0f:ef:c4:8a:4b:e2:09:00:77:e6:bc:3b:10:6f:bc:2b: e7:b4:1c:f7:8c:8b:bd:77:28:73:5f:4f:c8:d3:c5:ba:11:2d: 0c:87:57:f6:aa:a6:63:b2:e6:20:97:68:2a:12:9d:87:51:8d: 4f:25:ea:62:cc:58:b2:bb:5c:0a:10:a5:f4:39:79:7b:74:9b: 49:ec:ae:99:fb:42:35:16:5f:58:5c:df:33:12:9c:bf:ef:e7: 2f:d6:bb:90:81:42:c1:c5:dc:3c:10:33:ad:b4:0c:52:03:7c: 6a:b0:17:6d:ee:c7:a3:a7:97:cf:73:68:c1:d8:0e:24:53:f2: e0:74:0e:d8:5c:cb:49:be:14:22:52:3e:61:71:be:0c:97:7b: 9c:6a:75:54:7b:9d:5c:6f:fc:7a:84:61:e6:8d:e3:e0:9b:3a: 51:97:17:e5:b1:10:25:47:65:27:05:31:2f:51:78:cc:de:c0: e4:10:e6:8b:33:94:6f:be:7a:2a:d0:0b:74:8a:bb:5d:58:f9: b9:0c:75:22 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUIYiLxJM4S8BIs+BzqL6SJEw3VtYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZGMkRFODRBMTZBQUY2QjExQkU3MUU0MTY1QTUzRjhB M0FDMTk3RTAeFw0yNjA4MjQxMzM3NTRaFw0yNjA4MjUxNjIwNTRaMDMxMTAvBgNV BAMTKDU5QzVBQTM4NTdFOTI3QjM3RkEyMjhCRTA3NEY0NTAzNzQ2RUE3QzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPE8AhQERWxVMzZ+YZDelI2QqJ GScHpN3f5Yyi0a8Fv3CDECpJPrb+bTPLhoI7dQq/rcsmMVlc0rKW4tINuhCQ8c9N D1YyOZUTy5/h12OJE/8yWIT1bjoiylWaQ6vG1fIFIpGjk2EQr3oJjylDf3auuuo0 0faAZkGD7XnA9RFAAbRTCfQ4aoO/fACZLeHyO1PJAIqgeGZthsqshPFSMX9a7LjE q4dTo1k6VnzZ44DAU94P4/j8DvCLidAnaiowHziIIi2mPgCMXwwKVm9uVgSwTLwt c8pwEgru2E/mn6MEVYWgNfQd9bI3rYU1a3dro4yyYTLTM4mqQURMp8pFNY8DAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUWcWqOFfpJ7N/oii+B09FA3Rup8AwHwYDVR0j BBgwFoAUr/LehKFqr2sRvnHkFlpT+KOsGX4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQmVWZnhWMWhBbjNGdXJkZVk5SGhMMW9GUGZkS1lkWGNRWW5qWUM2Y202 WDMvMS9BRkYyREU4NEExNkFBRjZCMTFCRTcxRTQxNjVBNTNGOEEzQUMxOTdFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FGRjJERTg0QTE2QUFGNkIx MUJFNzFFNDE2NUE1M0Y4QTNBQzE5N0UuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QmVWZnhWMWhBbjNGdXJkZVk5SGhMMW9GUGZkS1lkWGNRWW5qWUM2Y202WDMvMS9B RkYyREU4NEExNkFBRjZCMTFCRTcxRTQxNjVBNTNGOEEzQUMxOTdFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAuPq9ovthzvk+3vO/rP1ZQbCsmFKrkxSy5SMFBwcc7HtJaeF25v5jAq31gX3t hyqF/bd5IuJ1oHQP78SKS+IJAHfmvDsQb7wr57Qc94yLvXcoc19PyNPFuhEtDIdX 9qqmY7LmIJdoKhKdh1GNTyXqYsxYsrtcChCl9Dl5e3SbSeyumftCNRZfWFzfMxKc v+/nL9a7kIFCwcXcPBAzrbQMUgN8arAXbe7Ho6eXz3NowdgOJFPy4HQO2FzLSb4U IlI+YXG+DJd7nGp1VHudXG/8eoRh5o3j4Js6UZcX5bEQJUdlJwUxL1F4zN7A5BDm izOUb756KtALdIq7XVj5uQx1Ig== -----END CERTIFICATE-----Generated at Mon Aug 24 23:43:23 2026 by rpki-client