$ rpki-client -vvf rpki-repo.registro.br/repo/4oKDjTtuVfRxybQECZfMRov5Z6DpryF7MyQN17v2sZKk/0/AF709D487025EB90C014C7186CC0AEA341A27C3B.mft File: AF709D487025EB90C014C7186CC0AEA341A27C3B.mft (raw, json) Hash identifier: kVHS+MKdJzs6UsMJ0vhklTlAM530650okp6I9S0iHy4= Subject key identifier: E9:2B:35:0D:48:F4:91:2A:7C:8C:66:AC:95:BB:D3:8F:1A:92:8C:0C Authority key identifier: AF:70:9D:48:70:25:EB:90:C0:14:C7:18:6C:C0:AE:A3:41:A2:7C:3B Certificate issuer: /CN=AF709D487025EB90C014C7186CC0AEA341A27C3B Certificate serial: 5650CFEFB252039C293439B23810398196CDEDC5 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF709D487025EB90C014C7186CC0AEA341A27C3B.cer Subject info access: rsync://rpki-repo.registro.br/repo/4oKDjTtuVfRxybQECZfMRov5Z6DpryF7MyQN17v2sZKk/0/AF709D487025EB90C014C7186CC0AEA341A27C3B.mft Manifest number: DA Signing time: Sun 01 Mar 2026 12:35:39 +0000 Manifest this update: Sun 01 Mar 2026 12:30:39 +0000 Manifest next update: Mon 02 Mar 2026 12:44:39 +0000 Files and hashes: 1: 3137372e3232312e3133362e302f32322d3234203d3e20323730373337.roa (hash: DlhDw1dzTc6ndQvekwKDgY9PvHeoaodotFzkhX2390Y=) 2: AF709D487025EB90C014C7186CC0AEA341A27C3B.crl (hash: Q3jIYA48q2yB6MsM6YJREgctMgpnEwAhySItUOwV1L4=) 3: 323830343a373039633a3a2f33322d3438203d3e20323730373337.roa (hash: z3+jy+kvN0ec/CwA1jDFeo1POc5HGxkNptEzu9VsNXs=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4oKDjTtuVfRxybQECZfMRov5Z6DpryF7MyQN17v2sZKk/0/AF709D487025EB90C014C7186CC0AEA341A27C3B.crl rsync://rpki-repo.registro.br/repo/4oKDjTtuVfRxybQECZfMRov5Z6DpryF7MyQN17v2sZKk/0/AF709D487025EB90C014C7186CC0AEA341A27C3B.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF709D487025EB90C014C7186CC0AEA341A27C3B.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 02 Mar 2026 12:44:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:50:cf:ef:b2:52:03:9c:29:34:39:b2:38:10:39:81:96:cd:ed:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF709D487025EB90C014C7186CC0AEA341A27C3B Validity Not Before: Mar 1 12:30:39 2026 GMT Not After : Mar 2 12:44:39 2026 GMT Subject: CN=E92B350D48F4912A7C8C66AC95BBD38F1A928C0C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:56:a9:42:f4:40:2e:44:0b:c8:48:7d:3b:63: 3f:56:50:4b:27:48:72:91:7c:e5:64:65:9f:dc:81: 99:59:10:fb:e6:b1:54:c6:9c:d7:46:ec:27:94:1e: 05:70:04:d1:c8:59:f7:5d:af:14:2a:b4:66:ac:54: 9d:c6:a1:1f:e9:59:fe:0c:5c:d4:e9:d8:01:a2:2a: 2a:88:ca:db:62:36:97:86:1f:ca:55:f2:1f:ac:12: 31:74:95:64:a7:10:20:95:1f:97:f4:8b:d1:3a:7f: a4:80:58:f6:f3:f9:e3:70:bd:89:70:41:cc:f3:06: 83:c2:45:71:29:0d:a5:3c:44:e4:ad:f4:84:0f:58: 97:59:71:fe:a8:e1:1b:1b:a1:bd:a2:d2:7e:4e:63: ac:25:9f:10:e9:f1:46:26:05:a4:83:4a:32:b1:ae: 17:2d:3d:a8:e9:ea:86:9d:66:5b:ca:ef:1e:3c:18: 83:0e:f7:8c:fc:5e:9e:a7:f9:a0:6a:6a:75:02:03: 58:ab:19:92:1a:31:9c:c3:aa:1f:3e:63:a1:d1:72: ae:d9:cb:d1:41:d7:12:3a:26:30:dc:a2:b8:5a:e5: 1e:00:11:6e:30:ee:df:dc:2f:de:36:1b:3e:d0:6b: 00:19:ab:a1:e2:16:5b:b2:bc:bd:e1:4b:cf:0a:e4: ac:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:2B:35:0D:48:F4:91:2A:7C:8C:66:AC:95:BB:D3:8F:1A:92:8C:0C X509v3 Authority Key Identifier: keyid:AF:70:9D:48:70:25:EB:90:C0:14:C7:18:6C:C0:AE:A3:41:A2:7C:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4oKDjTtuVfRxybQECZfMRov5Z6DpryF7MyQN17v2sZKk/0/AF709D487025EB90C014C7186CC0AEA341A27C3B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF709D487025EB90C014C7186CC0AEA341A27C3B.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4oKDjTtuVfRxybQECZfMRov5Z6DpryF7MyQN17v2sZKk/0/AF709D487025EB90C014C7186CC0AEA341A27C3B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:2e:69:56:de:04:cf:81:b8:81:e2:7c:b9:be:bf:39:7f:e0: d6:e9:55:fc:d2:95:32:d4:bd:3b:a8:64:17:45:7c:2c:8e:c0: 28:c1:4e:7b:55:43:3b:d7:9c:e6:39:1a:b4:fa:79:c1:2b:40: ba:6d:c7:2e:bb:4b:91:d4:5d:91:30:c7:51:47:6d:6f:9e:30: a0:62:55:fe:6a:e3:d4:3a:c5:7b:ca:88:6a:56:7d:28:20:b6: f0:16:f6:9d:38:0f:26:2f:96:31:50:3f:42:b9:0e:60:e7:73: 4f:b9:ca:2e:7a:70:47:1c:98:bd:fd:98:11:1a:a8:7e:84:48: 3d:97:15:24:b5:86:1e:bf:4b:62:d7:44:f7:1f:7a:3b:15:f1: 67:4d:28:4c:c8:12:21:9e:45:32:a2:81:00:71:15:09:0c:48: c2:fc:cf:2e:ba:a2:f4:42:db:14:54:8c:b7:be:25:d5:1d:bc: 8f:a4:70:60:1b:b7:f6:61:46:01:15:74:7a:b8:cc:c7:5f:d6: 7f:da:da:15:f9:ec:56:1e:73:37:42:81:c4:5b:04:30:6d:8e: f4:59:bb:3c:62:81:ba:01:42:bb:5e:be:8b:6d:a4:20:c3:bc: c8:d3:5c:54:b2:7f:a3:5d:29:ee:b6:a3:31:00:ac:aa:f5:0f: 57:dc:3f:cd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUVlDP77JSA5wpNDmyOBA5gZbN7cUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY3MDlENDg3MDI1RUI5MEMwMTRDNzE4NkNDMEFFQTM0 MUEyN0MzQjAeFw0yNjAzMDExMjMwMzlaFw0yNjAzMDIxMjQ0MzlaMDMxMTAvBgNV BAMTKEU5MkIzNTBENDhGNDkxMkE3QzhDNjZBQzk1QkJEMzhGMUE5MjhDMEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGVqlC9EAuRAvISH07Yz9WUEsn SHKRfOVkZZ/cgZlZEPvmsVTGnNdG7CeUHgVwBNHIWfddrxQqtGasVJ3GoR/pWf4M XNTp2AGiKiqIyttiNpeGH8pV8h+sEjF0lWSnECCVH5f0i9E6f6SAWPbz+eNwvYlw QczzBoPCRXEpDaU8ROSt9IQPWJdZcf6o4Rsbob2i0n5OY6wlnxDp8UYmBaSDSjKx rhctPajp6oadZlvK7x48GIMO94z8Xp6n+aBqanUCA1irGZIaMZzDqh8+Y6HRcq7Z y9FB1xI6JjDcorha5R4AEW4w7t/cL942Gz7QawAZq6HiFluyvL3hS88K5Kw7AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU6Ss1DUj0kSp8jGaslbvTjxqSjAwwHwYDVR0j BBgwFoAUr3CdSHAl65DAFMcYbMCuo0GifDswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNG9LRGpUdHVWZlJ4eWJRRUNaZk1Sb3Y1WjZEcHJ5RjdNeVFOMTd2MnNa S2svMC9BRjcwOUQ0ODcwMjVFQjkwQzAxNEM3MTg2Q0MwQUVBMzQxQTI3QzNCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FGNzA5RDQ4NzAyNUVCOTBD MDE0QzcxODZDQzBBRUEzNDFBMjdDM0IuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NG9LRGpUdHVWZlJ4eWJRRUNaZk1Sb3Y1WjZEcHJ5RjdNeVFOMTd2MnNaS2svMC9B RjcwOUQ0ODcwMjVFQjkwQzAxNEM3MTg2Q0MwQUVBMzQxQTI3QzNCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVy5pVt4Ez4G4geJ8ub6/OX/g1ulV/NKVMtS9O6hkF0V8LI7AKMFOe1VDO9ec 5jkatPp5wStAum3HLrtLkdRdkTDHUUdtb54woGJV/mrj1DrFe8qIalZ9KCC28Bb2 nTgPJi+WMVA/QrkOYOdzT7nKLnpwRxyYvf2YERqofoRIPZcVJLWGHr9LYtdE9x96 OxXxZ00oTMgSIZ5FMqKBAHEVCQxIwvzPLrqi9ELbFFSMt74l1R28j6RwYBu39mFG ARV0erjMx1/Wf9raFfnsVh5zN0KBxFsEMG2O9Fm7PGKBugFCu16+i22kIMO8yNNc VLJ/o10p7rajMQCsqvUPV9w/zQ== -----END CERTIFICATE-----Generated at Sun Mar 1 21:15:22 2026 by rpki-client