$ rpki-client -vvf rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.mft File: AFF600EA088C0C0C3160D75A952506A94913C8A8.mft (raw, json) Hash identifier: hAy0MwYGw/A3jJgwOFPX0Cm1J4S5VwIQwxN4ksAsfcU= Subject key identifier: C2:54:73:1D:D4:DA:91:3E:94:95:B8:A5:7E:6A:6C:3E:4B:1C:7D:4C Authority key identifier: AF:F6:00:EA:08:8C:0C:0C:31:60:D7:5A:95:25:06:A9:49:13:C8:A8 Certificate issuer: /CN=AFF600EA088C0C0C3160D75A952506A94913C8A8 Certificate serial: 627BA8EAF073177B4FFFCD1F5D96E1F565D6DBA7 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.cer Subject info access: rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.mft Manifest number: 03CE Signing time: Wed 25 Mar 2026 09:00:02 +0000 Manifest this update: Wed 25 Mar 2026 08:55:02 +0000 Manifest next update: Thu 26 Mar 2026 09:05:02 +0000 Files and hashes: 1: 323830343a3266343a3a2f33322d3332203d3e203533313138.roa (hash: sRD6h65VglzeDY2TSBJaOKjsFwvSzqr6YQ3ZfPMDiNE=) 2: 3137372e31322e3131322e302f32302d3234203d3e203533313138.roa (hash: V+sHb/70BnlYO+tHn2LPf6u1XHLARNcW5bnvr7GX6SQ=) 3: AFF600EA088C0C0C3160D75A952506A94913C8A8.crl (hash: 7iDziM6d31eJdff8UCk7+l8orGRxMWoUksq7JDQyAUk=) 4: 3137372e31322e39362e302f32302d3230203d3e203533313138.roa (hash: AMaoJxpTFXAI7xcSjwpfn8pWvLYEAF9q8qG1UkKx0hk=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.crl rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 26 Mar 2026 09:05:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:7b:a8:ea:f0:73:17:7b:4f:ff:cd:1f:5d:96:e1:f5:65:d6:db:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFF600EA088C0C0C3160D75A952506A94913C8A8 Validity Not Before: Mar 25 08:55:02 2026 GMT Not After : Mar 26 09:05:02 2026 GMT Subject: CN=C254731DD4DA913E9495B8A57E6A6C3E4B1C7D4C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:53:e3:10:36:d2:c3:99:d1:d4:af:dd:90:0c: 89:09:f3:60:ae:97:35:a1:9b:ba:df:4e:33:da:c8: fb:71:35:49:42:42:88:26:8c:4c:07:10:51:9e:5b: 8d:de:4f:cc:40:e4:3c:b8:6e:4b:6b:4c:bd:54:9f: 83:24:53:f3:76:43:f6:d7:5b:99:7e:f0:de:1e:a3: e5:49:28:1d:71:b9:f6:f4:e5:42:cd:3f:5d:d4:a8: 1e:53:d7:4a:34:f2:65:fc:6a:00:bd:1c:95:81:98: 0c:9d:63:41:87:fd:c8:b2:c2:3a:ad:f3:aa:b4:f1: 3a:61:b5:61:8b:6c:9d:76:f5:91:81:12:b6:60:ac: dc:90:f6:dd:7d:0c:02:6a:c7:ae:50:34:7e:ec:00: 69:6f:4a:19:75:a2:7e:27:66:2c:cb:12:c4:d8:99: e5:ef:b4:0c:32:30:c8:61:b4:e1:24:2a:2a:07:9e: 60:3f:c5:5b:33:6c:af:4c:12:fe:85:cb:46:dd:fe: f6:9e:9a:6c:9e:2f:dd:ea:ed:be:c5:f3:a5:ae:40: e4:b4:f3:2b:58:c4:06:33:a9:a4:99:82:94:cd:fa: 2b:97:bc:3b:45:9e:b4:2c:aa:90:33:4f:a3:bb:d0: 07:69:89:94:0a:01:3c:55:8e:0a:be:77:db:93:2e: fb:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:54:73:1D:D4:DA:91:3E:94:95:B8:A5:7E:6A:6C:3E:4B:1C:7D:4C X509v3 Authority Key Identifier: keyid:AF:F6:00:EA:08:8C:0C:0C:31:60:D7:5A:95:25:06:A9:49:13:C8:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:2e:15:13:5f:d5:54:4a:37:52:6d:9b:8f:d4:77:fe:a6:c8: 02:9f:42:f5:0b:56:72:d2:a3:35:f0:a9:b4:aa:8e:52:0b:5a: d4:09:9a:29:ae:31:97:04:6a:7b:4e:89:3d:e8:bd:0c:e4:1e: 3c:1b:56:bb:3c:da:9a:37:8f:1f:d6:28:66:2f:45:7a:4c:fb: 37:4f:fe:9d:5b:f9:88:0c:af:ca:c7:78:49:5b:10:b2:b8:d2: 40:89:71:ec:69:c5:66:5a:66:b7:06:c6:33:98:b0:54:37:d8: c6:0b:7d:ca:1f:2e:33:27:58:84:a8:a3:ec:ee:24:a1:0a:53: b6:70:c3:58:f2:8e:67:d5:8e:4a:68:6f:ca:38:1b:e7:91:ac: 0c:18:32:41:34:72:dd:a6:32:60:49:cf:ee:2a:4b:17:dc:c1: 33:53:91:6f:f7:e9:f6:ba:a1:a2:38:9f:37:9d:43:41:f3:0e: 67:fe:0a:ad:2a:51:3c:7c:f6:98:3b:fe:5f:8d:46:ce:24:50: cc:e1:8d:a5:f3:66:3b:2e:c9:cb:9e:13:14:c5:e1:1d:df:10: 71:f2:c7:0f:df:e8:e7:66:fa:03:c2:e2:c4:27:7f:4b:40:46: f2:05:16:32:96:a1:0d:10:85:7c:a8:ad:52:39:79:b6:f2:d9: 34:00:32:59 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUYnuo6vBzF3tP/80fXZbh9WXW26cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZGNjAwRUEwODhDMEMwQzMxNjBENzVBOTUyNTA2QTk0 OTEzQzhBODAeFw0yNjAzMjUwODU1MDJaFw0yNjAzMjYwOTA1MDJaMDMxMTAvBgNV BAMTKEMyNTQ3MzFERDREQTkxM0U5NDk1QjhBNTdFNkE2QzNFNEIxQzdENEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPU+MQNtLDmdHUr92QDIkJ82Cu lzWhm7rfTjPayPtxNUlCQogmjEwHEFGeW43eT8xA5Dy4bktrTL1Un4MkU/N2Q/bX W5l+8N4eo+VJKB1xufb05ULNP13UqB5T10o08mX8agC9HJWBmAydY0GH/ciywjqt 86q08TphtWGLbJ129ZGBErZgrNyQ9t19DAJqx65QNH7sAGlvShl1on4nZizLEsTY meXvtAwyMMhhtOEkKioHnmA/xVszbK9MEv6Fy0bd/vaemmyeL93q7b7F86WuQOS0 8ytYxAYzqaSZgpTN+iuXvDtFnrQsqpAzT6O70AdpiZQKATxVjgq+d9uTLvuXAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUwlRzHdTakT6UlbilfmpsPkscfUwwHwYDVR0j BBgwFoAUr/YA6giMDAwxYNdalSUGqUkTyKgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQVRHMXNMOXJEWDZoalhSMzdheHNYblNockVRaHVqWmdWd0JTSmFpYUpQ Y2ovMS9BRkY2MDBFQTA4OEMwQzBDMzE2MEQ3NUE5NTI1MDZBOTQ5MTNDOEE4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FGRjYwMEVBMDg4QzBDMEMz MTYwRDc1QTk1MjUwNkE5NDkxM0M4QTguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QVRHMXNMOXJEWDZoalhSMzdheHNYblNockVRaHVqWmdWd0JTSmFpYUpQY2ovMS9B RkY2MDBFQTA4OEMwQzBDMzE2MEQ3NUE5NTI1MDZBOTQ5MTNDOEE4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYC4VE1/VVEo3Um2bj9R3/qbIAp9C9QtWctKjNfCptKqOUgta1AmaKa4xlwRq e06JPei9DOQePBtWuzzamjePH9YoZi9Fekz7N0/+nVv5iAyvysd4SVsQsrjSQIlx 7GnFZlpmtwbGM5iwVDfYxgt9yh8uMydYhKij7O4koQpTtnDDWPKOZ9WOSmhvyjgb 55GsDBgyQTRy3aYyYEnP7ipLF9zBM1ORb/fp9rqhojifN51DQfMOZ/4KrSpRPHz2 mDv+X41GziRQzOGNpfNmOy7Jy54TFMXhHd8QcfLHD9/o52b6A8LixCd/S0BG8gUW MpahDRCFfKitUjl5tvLZNAAyWQ== -----END CERTIFICATE-----Generated at Thu Mar 26 01:26:22 2026 by rpki-client