$ rpki-client -vvf rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.mft File: AFF600EA088C0C0C3160D75A952506A94913C8A8.mft (raw, json) Hash identifier: BDvvMfxBZLNSnFGtIMTrWI2UeqMit4C24eLxaBl8Bi0= Subject key identifier: DF:57:FA:03:65:B9:E1:A6:94:FB:AA:5B:48:92:1E:10:D9:F4:2B:F0 Authority key identifier: AF:F6:00:EA:08:8C:0C:0C:31:60:D7:5A:95:25:06:A9:49:13:C8:A8 Certificate issuer: /CN=AFF600EA088C0C0C3160D75A952506A94913C8A8 Certificate serial: 47DFD19D6C8BE729F856AB9BE7D683162ABBCBB6 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.cer Subject info access: rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.mft Manifest number: 0410 Signing time: Wed 13 May 2026 16:30:03 +0000 Manifest this update: Wed 13 May 2026 16:25:03 +0000 Manifest next update: Thu 14 May 2026 18:46:03 +0000 Files and hashes: 1: 323830343a3266343a3a2f33322d3332203d3e203533313138.roa (hash: sRD6h65VglzeDY2TSBJaOKjsFwvSzqr6YQ3ZfPMDiNE=) 2: 3137372e31322e3131322e302f32302d3234203d3e203533313138.roa (hash: V+sHb/70BnlYO+tHn2LPf6u1XHLARNcW5bnvr7GX6SQ=) 3: AFF600EA088C0C0C3160D75A952506A94913C8A8.crl (hash: 3NpqotOGJJuE7rqCaNVZQ/xDMMpa+qgpOX3mQAHSo5o=) 4: 3137372e31322e39362e302f32302d3230203d3e203533313138.roa (hash: AMaoJxpTFXAI7xcSjwpfn8pWvLYEAF9q8qG1UkKx0hk=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.crl rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 14 May 2026 18:46:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:df:d1:9d:6c:8b:e7:29:f8:56:ab:9b:e7:d6:83:16:2a:bb:cb:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFF600EA088C0C0C3160D75A952506A94913C8A8 Validity Not Before: May 13 16:25:03 2026 GMT Not After : May 14 18:46:03 2026 GMT Subject: CN=DF57FA0365B9E1A694FBAA5B48921E10D9F42BF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:2d:3e:35:d2:9b:98:ec:b6:2e:34:87:65:80: 8a:0f:0c:5e:62:69:f5:7d:dd:d7:f8:c9:f7:5e:a3: 91:01:0c:c9:c9:eb:f0:3c:47:16:f8:d1:32:51:75: 0f:93:3f:f5:a9:6a:14:70:23:a7:86:bc:3e:b6:b7: 0c:ab:ce:2f:49:27:4f:74:10:c6:38:5d:1f:4c:08: 14:75:49:29:0f:25:7d:2b:69:3d:37:59:ae:82:8d: 17:da:4d:9a:f9:41:a4:f3:64:48:91:58:db:81:d5: 54:38:dd:98:2c:e6:1c:7a:85:fb:d0:ea:32:1d:78: 5e:f1:71:45:c3:35:cc:61:a4:bb:cd:40:48:2e:a9: 6e:2b:17:21:ea:2b:9b:f3:27:8e:f2:8d:3f:0c:07: 7e:c8:90:bf:cf:55:a8:93:20:bf:18:46:67:55:f4: 6a:a5:20:a3:9e:06:19:00:62:7e:eb:24:34:e2:c5: ba:03:12:a5:df:ac:51:cc:d0:12:f7:9d:4f:31:94: 18:f2:98:5d:31:ee:ac:be:45:1d:84:6c:5e:ba:93: e6:da:2b:67:91:3f:8c:a6:7d:9b:39:2f:31:25:46: 85:ed:5c:70:c6:6d:d7:a1:18:4a:6f:3b:b4:ce:75: e3:6c:ac:42:d3:c5:66:73:28:f6:5c:0c:6e:12:80: 60:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:57:FA:03:65:B9:E1:A6:94:FB:AA:5B:48:92:1E:10:D9:F4:2B:F0 X509v3 Authority Key Identifier: keyid:AF:F6:00:EA:08:8C:0C:0C:31:60:D7:5A:95:25:06:A9:49:13:C8:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:7f:b4:44:b2:78:b8:50:05:12:c4:02:2b:aa:04:f8:f3:61: d8:68:b4:ad:30:67:37:44:2e:7c:61:2f:db:9f:51:7d:eb:32: 50:34:b2:90:c0:c7:6e:04:cd:87:d3:94:20:32:8b:30:4a:05: 22:7e:96:20:c4:5b:a3:90:87:2e:17:e5:2c:2a:04:24:ed:05: b7:ce:52:f7:4c:ea:c5:2a:40:e6:a3:8f:21:3a:b9:6e:39:6a: 04:1a:8e:7b:5f:ea:fa:5e:66:79:10:3d:e6:e9:60:35:c4:44: 5b:f9:3d:df:ae:98:24:7f:d4:aa:88:db:8c:63:fb:ce:be:6a: c3:c0:6e:75:1a:af:23:4f:67:f0:e2:48:d3:41:0e:42:30:1c: fb:f7:25:a6:27:07:d7:b9:5b:e7:27:01:ed:2a:7e:a7:c0:0f: 48:b2:99:77:bf:75:30:e3:1d:73:bc:f9:ff:9d:46:32:61:81: a4:c2:fe:7a:19:56:eb:77:21:ef:8a:39:d6:c7:d1:73:37:46: 45:cc:e0:86:71:09:84:22:57:78:56:49:ae:4c:cf:b9:ae:63: 50:79:ed:f6:3e:cc:a0:07:c8:5c:8c:27:9e:c8:56:2b:03:ae: ea:df:e6:ba:b4:ce:1e:0a:a3:1b:15:00:1a:d4:28:11:fc:d8: cd:8b:c8:7f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUR9/RnWyL5yn4Vqub59aDFiq7y7YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZGNjAwRUEwODhDMEMwQzMxNjBENzVBOTUyNTA2QTk0 OTEzQzhBODAeFw0yNjA1MTMxNjI1MDNaFw0yNjA1MTQxODQ2MDNaMDMxMTAvBgNV BAMTKERGNTdGQTAzNjVCOUUxQTY5NEZCQUE1QjQ4OTIxRTEwRDlGNDJCRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwLT410puY7LYuNIdlgIoPDF5i afV93df4yfdeo5EBDMnJ6/A8Rxb40TJRdQ+TP/WpahRwI6eGvD62twyrzi9JJ090 EMY4XR9MCBR1SSkPJX0raT03Wa6CjRfaTZr5QaTzZEiRWNuB1VQ43Zgs5hx6hfvQ 6jIdeF7xcUXDNcxhpLvNQEguqW4rFyHqK5vzJ47yjT8MB37IkL/PVaiTIL8YRmdV 9GqlIKOeBhkAYn7rJDTixboDEqXfrFHM0BL3nU8xlBjymF0x7qy+RR2EbF66k+ba K2eRP4ymfZs5LzElRoXtXHDGbdehGEpvO7TOdeNsrELTxWZzKPZcDG4SgGBrAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU31f6A2W54aaU+6pbSJIeENn0K/AwHwYDVR0j BBgwFoAUr/YA6giMDAwxYNdalSUGqUkTyKgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQVRHMXNMOXJEWDZoalhSMzdheHNYblNockVRaHVqWmdWd0JTSmFpYUpQ Y2ovMS9BRkY2MDBFQTA4OEMwQzBDMzE2MEQ3NUE5NTI1MDZBOTQ5MTNDOEE4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FGRjYwMEVBMDg4QzBDMEMz MTYwRDc1QTk1MjUwNkE5NDkxM0M4QTguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QVRHMXNMOXJEWDZoalhSMzdheHNYblNockVRaHVqWmdWd0JTSmFpYUpQY2ovMS9B RkY2MDBFQTA4OEMwQzBDMzE2MEQ3NUE5NTI1MDZBOTQ5MTNDOEE4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXH+0RLJ4uFAFEsQCK6oE+PNh2Gi0rTBnN0QufGEv259RfesyUDSykMDHbgTN h9OUIDKLMEoFIn6WIMRbo5CHLhflLCoEJO0Ft85S90zqxSpA5qOPITq5bjlqBBqO e1/q+l5meRA95ulgNcREW/k9366YJH/UqojbjGP7zr5qw8BudRqvI09n8OJI00EO QjAc+/clpicH17lb5ycB7Sp+p8APSLKZd791MOMdc7z5/51GMmGBpML+ehlW63ch 74o51sfRczdGRczghnEJhCJXeFZJrkzPua5jUHnt9j7MoAfIXIwnnshWKwOu6t/m urTOHgqjGxUAGtQoEfzYzYvIfw== -----END CERTIFICATE-----Generated at Wed May 13 19:17:22 2026 by rpki-client