$ rpki-client -vvf rpki-repo.registro.br/repo/2dJhYWdK2uEnPg126sNH9irk3BQyu9Mxje61HJuzbPr8/0/AF22FDFE9E74C4496C70B504FFEC2864F1F6A869.mft File: AF22FDFE9E74C4496C70B504FFEC2864F1F6A869.mft (raw, json) Hash identifier: HWY4UgoNChgrPiuzxm8ENNKUZbI9CaIQSfKKX5YH+Fo= Subject key identifier: 9B:AB:B3:49:48:0B:AF:CA:45:DE:62:A8:41:C7:60:4C:13:91:20:D9 Authority key identifier: AF:22:FD:FE:9E:74:C4:49:6C:70:B5:04:FF:EC:28:64:F1:F6:A8:69 Certificate issuer: /CN=AF22FDFE9E74C4496C70B504FFEC2864F1F6A869 Certificate serial: 54CE317D97599C3B2147BA60F0D6BD40E33BE076 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF22FDFE9E74C4496C70B504FFEC2864F1F6A869.cer Subject info access: rsync://rpki-repo.registro.br/repo/2dJhYWdK2uEnPg126sNH9irk3BQyu9Mxje61HJuzbPr8/0/AF22FDFE9E74C4496C70B504FFEC2864F1F6A869.mft Manifest number: 29 Signing time: Fri 17 Apr 2026 16:48:42 +0000 Manifest this update: Fri 17 Apr 2026 16:43:42 +0000 Manifest next update: Sat 18 Apr 2026 16:53:42 +0000 Files and hashes: 1: AF22FDFE9E74C4496C70B504FFEC2864F1F6A869.crl (hash: EP8E6aPt2XXYUJeGGEk2z88f1O9qRu1lYj844C1aWi4=) 2: 323830343a383565343a3a2f33322d313238203d3e20323732363037.roa (hash: z12JUICPQb7EB2kRvswPIiP31KqgoENdf8iJc4MIQxY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2dJhYWdK2uEnPg126sNH9irk3BQyu9Mxje61HJuzbPr8/0/AF22FDFE9E74C4496C70B504FFEC2864F1F6A869.crl rsync://rpki-repo.registro.br/repo/2dJhYWdK2uEnPg126sNH9irk3BQyu9Mxje61HJuzbPr8/0/AF22FDFE9E74C4496C70B504FFEC2864F1F6A869.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF22FDFE9E74C4496C70B504FFEC2864F1F6A869.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Apr 2026 16:53:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:ce:31:7d:97:59:9c:3b:21:47:ba:60:f0:d6:bd:40:e3:3b:e0:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF22FDFE9E74C4496C70B504FFEC2864F1F6A869 Validity Not Before: Apr 17 16:43:42 2026 GMT Not After : Apr 18 16:53:42 2026 GMT Subject: CN=9BABB349480BAFCA45DE62A841C7604C139120D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:cc:1e:83:1f:92:ba:1e:4f:10:03:94:a3:73: 36:67:57:db:62:17:ef:84:72:90:af:95:85:39:eb: 5b:a2:7b:8e:7b:4c:42:34:df:ea:2c:35:0f:6d:4e: 66:06:c5:c1:90:7e:4f:2c:57:c6:41:89:a5:d9:31: a3:0e:db:11:74:ef:ab:00:4a:e9:05:e7:c0:ee:cb: ba:21:7b:23:2a:92:fe:14:fe:f7:98:d2:c1:1f:65: 44:94:53:d2:81:a4:d9:9e:e3:98:2d:a1:af:c8:ef: f7:51:9d:2d:3c:ca:f8:39:5d:af:29:38:89:e2:32: 28:a7:88:9d:9a:e5:89:9b:38:fc:10:2f:ec:c7:fe: 91:3a:60:15:99:6e:44:ff:1b:da:c3:c5:75:02:9b: b6:83:b1:be:de:dd:db:94:c1:11:3b:b3:17:23:9c: 48:13:de:81:63:ab:bb:2a:9c:84:ce:5d:76:92:28: b3:17:6f:a8:00:b2:8f:b6:58:ed:be:6d:a8:de:f5: fe:ba:39:a0:da:bf:d7:18:5e:ac:70:a7:93:ff:d1: 9b:29:80:c4:3f:13:98:3f:af:7b:90:61:d5:98:ba: bf:d7:c3:d7:65:ab:06:78:60:38:30:49:9f:b9:f1: 29:23:17:04:a6:be:64:bd:bb:c8:17:be:f0:a9:aa: e1:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:AB:B3:49:48:0B:AF:CA:45:DE:62:A8:41:C7:60:4C:13:91:20:D9 X509v3 Authority Key Identifier: keyid:AF:22:FD:FE:9E:74:C4:49:6C:70:B5:04:FF:EC:28:64:F1:F6:A8:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2dJhYWdK2uEnPg126sNH9irk3BQyu9Mxje61HJuzbPr8/0/AF22FDFE9E74C4496C70B504FFEC2864F1F6A869.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF22FDFE9E74C4496C70B504FFEC2864F1F6A869.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dJhYWdK2uEnPg126sNH9irk3BQyu9Mxje61HJuzbPr8/0/AF22FDFE9E74C4496C70B504FFEC2864F1F6A869.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:3c:6e:5a:16:45:4e:ff:b2:8d:31:4e:d9:2a:6d:7b:e0:7c: 9c:09:71:69:da:f1:65:ce:8a:e5:f7:a6:e0:39:ab:32:21:44: b5:09:21:9b:a0:02:ed:e1:0d:bd:c1:f0:61:bd:f6:6b:e0:21: e7:e5:71:78:8b:e5:be:06:43:e4:fe:5c:ed:60:07:79:4d:f8: f0:e7:36:b0:1b:42:c8:d9:2d:d1:36:b9:76:20:7d:ca:7c:f1: f8:06:70:a4:e6:9f:8b:5a:08:6f:38:12:08:2f:3b:19:0a:c7: ea:07:32:4f:dd:78:85:49:37:79:77:8f:e8:a2:a6:e9:33:0b: f9:12:9e:9f:9e:bd:f4:e0:7d:ce:ea:91:6b:b6:c3:7d:c8:d5: 65:67:42:d9:b5:c5:a4:b0:dd:27:90:65:cc:cc:4e:2e:af:f2: 43:cd:59:bb:dd:e0:00:d3:6a:33:c6:5c:45:43:ba:1e:92:4f: ab:83:06:0a:98:23:7f:eb:68:a6:05:48:a7:bb:91:97:e8:23: 06:ed:77:4c:7e:84:c6:dd:a6:43:ad:60:87:f9:dc:fb:c7:a2: d3:b2:af:39:4e:13:71:72:7b:72:bd:70:0f:7e:5b:b5:cb:eb: 83:19:cd:d8:93:b8:da:f7:9e:52:d9:3b:b9:38:ba:a4:7f:56: a9:38:b3:bf -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUVM4xfZdZnDshR7pg8Na9QOM74HYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUYyMkZERkU5RTc0QzQ0OTZDNzBCNTA0RkZFQzI4NjRG MUY2QTg2OTAeFw0yNjA0MTcxNjQzNDJaFw0yNjA0MTgxNjUzNDJaMDMxMTAvBgNV BAMTKDlCQUJCMzQ5NDgwQkFGQ0E0NURFNjJBODQxQzc2MDRDMTM5MTIwRDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnzB6DH5K6Hk8QA5SjczZnV9ti F++EcpCvlYU561uie457TEI03+osNQ9tTmYGxcGQfk8sV8ZBiaXZMaMO2xF076sA SukF58Duy7oheyMqkv4U/veY0sEfZUSUU9KBpNme45gtoa/I7/dRnS08yvg5Xa8p OIniMiiniJ2a5YmbOPwQL+zH/pE6YBWZbkT/G9rDxXUCm7aDsb7e3duUwRE7sxcj nEgT3oFjq7sqnITOXXaSKLMXb6gAso+2WO2+baje9f66OaDav9cYXqxwp5P/0Zsp gMQ/E5g/r3uQYdWYur/Xw9dlqwZ4YDgwSZ+58SkjFwSmvmS9u8gXvvCpquETAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUm6uzSUgLr8pF3mKoQcdgTBORINkwHwYDVR0j BBgwFoAUryL9/p50xElscLUE/+woZPH2qGkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMmRKaFlXZEsydUVuUGcxMjZzTkg5aXJrM0JReXU5TXhqZTYxSEp1emJQ cjgvMC9BRjIyRkRGRTlFNzRDNDQ5NkM3MEI1MDRGRkVDMjg2NEYxRjZBODY5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FGMjJGREZFOUU3NEM0NDk2 QzcwQjUwNEZGRUMyODY0RjFGNkE4NjkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MmRKaFlXZEsydUVuUGcxMjZzTkg5aXJrM0JReXU5TXhqZTYxSEp1emJQcjgvMC9B RjIyRkRGRTlFNzRDNDQ5NkM3MEI1MDRGRkVDMjg2NEYxRjZBODY5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgzxuWhZFTv+yjTFO2Spte+B8nAlxadrxZc6K5fem4DmrMiFEtQkhm6AC7eEN vcHwYb32a+Ah5+VxeIvlvgZD5P5c7WAHeU348Oc2sBtCyNkt0Ta5diB9ynzx+AZw pOafi1oIbzgSCC87GQrH6gcyT914hUk3eXeP6KKm6TML+RKen5699OB9zuqRa7bD fcjVZWdC2bXFpLDdJ5BlzMxOLq/yQ81Zu93gANNqM8ZcRUO6HpJPq4MGCpgjf+to pgVIp7uRl+gjBu13TH6Ext2mQ61gh/nc+8ei07KvOU4TcXJ7cr1wD35btcvrgxnN 2JO42veeUtk7uTi6pH9WqTizvw== -----END CERTIFICATE-----Generated at Sat Apr 18 00:22:20 2026 by rpki-client