$ rpki-client -vvf rpki-repo.registro.br/repo/7KpwKJjGy6R95EFPa7iQd6PJJyvpQQC9hxS2rZti1Bxg/1/AFCA87E4AD035B5E4CA0EDA1C4C042C69BFE91EC.mft File: AFCA87E4AD035B5E4CA0EDA1C4C042C69BFE91EC.mft (raw, json) Hash identifier: Jqh/5/ZKAZsaWjwVGJ4jW9DvJaSRjudeIPLuB0QOF5E= Subject key identifier: 7F:1E:69:4A:43:55:9B:87:01:B9:05:3C:4E:D6:7C:EA:65:AC:94:40 Authority key identifier: AF:CA:87:E4:AD:03:5B:5E:4C:A0:ED:A1:C4:C0:42:C6:9B:FE:91:EC Certificate issuer: /CN=AFCA87E4AD035B5E4CA0EDA1C4C042C69BFE91EC Certificate serial: 19C542D60849538B7F48E6C86C1C2B5460B632CC Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFCA87E4AD035B5E4CA0EDA1C4C042C69BFE91EC.cer Subject info access: rsync://rpki-repo.registro.br/repo/7KpwKJjGy6R95EFPa7iQd6PJJyvpQQC9hxS2rZti1Bxg/1/AFCA87E4AD035B5E4CA0EDA1C4C042C69BFE91EC.mft Manifest number: 03D5 Signing time: Wed 25 Mar 2026 17:44:04 +0000 Manifest this update: Wed 25 Mar 2026 17:39:04 +0000 Manifest next update: Thu 26 Mar 2026 17:54:04 +0000 Files and hashes: 1: 323830343a343363383a3a2f33322d3336203d3e20323637353839.roa (hash: B7GOxylY6FVXV1v+bmDDWLNR2ojABmwThNErrOZyKjM=) 2: 34352e37302e3134382e302f32322d3234203d3e20323637353839.roa (hash: Cv/CYH8R4kueB9d5skXR/XvGpgGSxuwGpj0ARNbZVzM=) 3: AFCA87E4AD035B5E4CA0EDA1C4C042C69BFE91EC.crl (hash: r/hurikTTIRg/cpbI9wQSAzgOWVNY6ZisdVX3rv0cN4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7KpwKJjGy6R95EFPa7iQd6PJJyvpQQC9hxS2rZti1Bxg/1/AFCA87E4AD035B5E4CA0EDA1C4C042C69BFE91EC.crl rsync://rpki-repo.registro.br/repo/7KpwKJjGy6R95EFPa7iQd6PJJyvpQQC9hxS2rZti1Bxg/1/AFCA87E4AD035B5E4CA0EDA1C4C042C69BFE91EC.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFCA87E4AD035B5E4CA0EDA1C4C042C69BFE91EC.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 26 Mar 2026 17:54:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:c5:42:d6:08:49:53:8b:7f:48:e6:c8:6c:1c:2b:54:60:b6:32:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFCA87E4AD035B5E4CA0EDA1C4C042C69BFE91EC Validity Not Before: Mar 25 17:39:04 2026 GMT Not After : Mar 26 17:54:04 2026 GMT Subject: CN=7F1E694A43559B8701B9053C4ED67CEA65AC9440 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:04:b7:2f:e5:9a:8b:0b:fe:13:0c:8f:f1:d0: af:eb:71:c7:30:31:8a:89:d2:cc:a8:3b:e0:77:35: ce:50:c1:4c:ec:41:b1:06:10:78:aa:a6:89:83:fa: 56:4b:61:94:8a:92:8e:dc:00:18:9e:bb:24:08:85: 97:a7:8e:c4:81:3e:a8:e7:28:e6:8f:b0:da:a6:9f: 92:5c:16:5a:5d:b3:d1:bd:22:3b:45:04:74:9a:74: 64:ad:b7:a1:d6:1e:99:5e:19:51:33:79:90:da:88: ee:e2:8d:a3:99:82:f7:ca:ff:b1:47:4f:21:a0:df: 5f:8a:90:12:60:0b:59:63:d2:6e:5b:91:82:3f:ad: 4f:a8:d4:80:a3:2c:99:b4:4a:0b:e4:14:ff:32:f1: cc:9e:28:a8:59:98:53:f5:05:08:59:39:b1:3f:a0: 58:8d:bb:56:98:08:dd:48:1d:95:b5:62:7b:a3:10: 83:a3:ec:db:e6:f0:3e:9d:8d:1b:a0:13:7f:0d:21: f3:a9:69:e3:8c:79:b7:b4:25:2c:ed:ff:82:a6:43: 9e:c8:6e:f1:a6:57:39:31:d3:d4:8e:46:0a:48:f1: b5:71:8b:9a:5e:f1:78:2f:a1:11:90:b5:2d:eb:bb: 39:9e:74:c3:11:b2:a2:be:ec:4c:90:25:e5:81:b6: b9:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:1E:69:4A:43:55:9B:87:01:B9:05:3C:4E:D6:7C:EA:65:AC:94:40 X509v3 Authority Key Identifier: keyid:AF:CA:87:E4:AD:03:5B:5E:4C:A0:ED:A1:C4:C0:42:C6:9B:FE:91:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7KpwKJjGy6R95EFPa7iQd6PJJyvpQQC9hxS2rZti1Bxg/1/AFCA87E4AD035B5E4CA0EDA1C4C042C69BFE91EC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFCA87E4AD035B5E4CA0EDA1C4C042C69BFE91EC.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7KpwKJjGy6R95EFPa7iQd6PJJyvpQQC9hxS2rZti1Bxg/1/AFCA87E4AD035B5E4CA0EDA1C4C042C69BFE91EC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:07:1c:d6:98:ff:2b:1e:43:90:79:8c:75:a2:63:67:2d:f3: 53:51:a6:7c:22:95:9e:a1:6c:50:fd:da:56:d1:07:28:dc:09: 2f:33:ac:0d:37:ab:1d:cb:d8:83:86:9f:4b:fa:bc:a5:e3:ab: 24:65:28:dd:12:d7:0f:af:72:1d:2e:a8:81:9f:1e:e9:6d:07: 83:5a:53:5a:49:1f:24:97:90:6e:ff:84:7a:f3:d0:d4:1d:0a: a9:68:87:e9:0f:6c:36:bf:af:65:36:e0:d0:6f:52:d3:f0:f9: ee:9f:3e:33:ac:a2:93:8d:9c:53:bd:86:f8:b1:71:9c:b4:21: 11:4a:72:39:3e:a7:db:a7:e0:f0:3d:5d:10:14:65:d6:58:3d: d7:e1:4f:af:53:67:c3:8d:6b:4e:57:f2:c1:d6:7f:3e:56:da: 90:4d:15:8e:e2:19:9c:a5:ab:3c:89:6e:8d:db:d7:c2:6f:22: 3e:67:56:aa:de:d1:c2:59:2c:c8:02:8f:c1:86:9b:b2:ab:df: 57:6b:3c:bf:94:a5:db:61:05:85:03:98:ff:1d:38:54:31:ff: cc:9c:95:4d:99:21:27:3f:f8:31:55:5e:07:b7:40:d7:eb:73: e6:18:d5:f5:76:e3:ab:08:e1:19:25:e0:88:6c:4a:e5:0c:24: 36:35:db:9f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUGcVC1ghJU4t/SObIbBwrVGC2MswwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZDQTg3RTRBRDAzNUI1RTRDQTBFREExQzRDMDQyQzY5 QkZFOTFFQzAeFw0yNjAzMjUxNzM5MDRaFw0yNjAzMjYxNzU0MDRaMDMxMTAvBgNV BAMTKDdGMUU2OTRBNDM1NTlCODcwMUI5MDUzQzRFRDY3Q0VBNjVBQzk0NDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClBLcv5ZqLC/4TDI/x0K/rcccw MYqJ0syoO+B3Nc5QwUzsQbEGEHiqpomD+lZLYZSKko7cABieuyQIhZenjsSBPqjn KOaPsNqmn5JcFlpds9G9IjtFBHSadGStt6HWHpleGVEzeZDaiO7ijaOZgvfK/7FH TyGg31+KkBJgC1lj0m5bkYI/rU+o1ICjLJm0SgvkFP8y8cyeKKhZmFP1BQhZObE/ oFiNu1aYCN1IHZW1YnujEIOj7Nvm8D6djRugE38NIfOpaeOMebe0JSzt/4KmQ57I bvGmVzkx09SORgpI8bVxi5pe8XgvoRGQtS3ruzmedMMRsqK+7EyQJeWBtrlDAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUfx5pSkNVm4cBuQU8TtZ86mWslEAwHwYDVR0j BBgwFoAUr8qH5K0DW15MoO2hxMBCxpv+kewwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN0twd0tKakd5NlI5NUVGUGE3aVFkNlBKSnl2cFFRQzloeFMyclp0aTFC eGcvMS9BRkNBODdFNEFEMDM1QjVFNENBMEVEQTFDNEMwNDJDNjlCRkU5MUVDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FGQ0E4N0U0QUQwMzVCNUU0 Q0EwRURBMUM0QzA0MkM2OUJGRTkxRUMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v N0twd0tKakd5NlI5NUVGUGE3aVFkNlBKSnl2cFFRQzloeFMyclp0aTFCeGcvMS9B RkNBODdFNEFEMDM1QjVFNENBMEVEQTFDNEMwNDJDNjlCRkU5MUVDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfAcc1pj/Kx5DkHmMdaJjZy3zU1GmfCKVnqFsUP3aVtEHKNwJLzOsDTerHcvY g4afS/q8peOrJGUo3RLXD69yHS6ogZ8e6W0Hg1pTWkkfJJeQbv+EevPQ1B0KqWiH 6Q9sNr+vZTbg0G9S0/D57p8+M6yik42cU72G+LFxnLQhEUpyOT6n26fg8D1dEBRl 1lg91+FPr1Nnw41rTlfywdZ/PlbakE0VjuIZnKWrPIlujdvXwm8iPmdWqt7Rwlks yAKPwYabsqvfV2s8v5Sl22EFhQOY/x04VDH/zJyVTZkhJz/4MVVeB7dA1+tz5hjV 9XbjqwjhGSXgiGxK5QwkNjXbnw== -----END CERTIFICATE-----Generated at Thu Mar 26 00:09:26 2026 by rpki-client