$ rpki-client -vvf rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.mft File: AFC529FB243B7780A20B27A2C4E73DAF65C25021.mft (raw, json) Hash identifier: E2rPHF4MFGgZ45owTYn0iX7reHvbV2WtQifIcp+cWAM= Subject key identifier: EF:4D:B2:6F:C2:35:4B:61:61:FA:05:4D:8C:0D:5B:A8:CC:25:FB:5F Authority key identifier: AF:C5:29:FB:24:3B:77:80:A2:0B:27:A2:C4:E7:3D:AF:65:C2:50:21 Certificate issuer: /CN=AFC529FB243B7780A20B27A2C4E73DAF65C25021 Certificate serial: 6B51727D0195BA47B38A05B7F262C70B787333C1 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.cer Subject info access: rsync://rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.mft Manifest number: 03DE Signing time: Fri 17 Apr 2026 10:30:02 +0000 Manifest this update: Fri 17 Apr 2026 10:25:02 +0000 Manifest next update: Sat 18 Apr 2026 13:28:02 +0000 Files and hashes: 1: 34352e3233362e3135382e302f32342d3234203d3e20323638323534.roa (hash: 6QajgBafqVgtgzsUpMYBPHbT8Yx62E6qE3HZwZj2TiE=) 2: 34352e3233362e3135362e302f32322d3232203d3e20323638323534.roa (hash: CuQjMpNkrIW1WzhX9cPRo+EN9gEwjyWh3xpLCuMgTVU=) 3: 34352e3233362e3135372e302f32342d3234203d3e20323638323534.roa (hash: jY+tbsAGTzcn5N+jHiOsaWS3WBkBKKylljU7SDevL8I=) 4: 34352e3233362e3135362e302f32342d3234203d3e20323638323534.roa (hash: 10cNS1rFXtwonEdWCsG96QN75TUPd3NohC99CLr6co4=) 5: AFC529FB243B7780A20B27A2C4E73DAF65C25021.crl (hash: eEAI5V//yq1APAQhBu1i3T7WYcf+eQGIMIu7klBXq9U=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.crl rsync://rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Apr 2026 13:28:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:51:72:7d:01:95:ba:47:b3:8a:05:b7:f2:62:c7:0b:78:73:33:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFC529FB243B7780A20B27A2C4E73DAF65C25021 Validity Not Before: Apr 17 10:25:02 2026 GMT Not After : Apr 18 13:28:02 2026 GMT Subject: CN=EF4DB26FC2354B6161FA054D8C0D5BA8CC25FB5F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a6:fe:aa:40:37:cf:06:49:03:c2:e6:d6:d1: c8:1a:47:f5:10:62:c3:4d:8b:59:62:36:77:76:50: 03:3c:29:ae:cc:f8:98:89:8b:9b:10:5f:dc:24:ee: 1b:d6:7b:70:aa:79:13:2f:00:b2:de:1a:eb:05:26: 08:cd:9d:f2:d1:c9:75:df:a6:bd:b7:9a:97:90:ee: 8b:3c:e5:ca:68:2b:71:7b:27:74:32:83:20:b5:dd: 05:1b:e6:6f:f3:76:fa:dd:f3:0b:2e:8c:9c:74:ec: bb:63:c9:94:5b:b2:9d:18:79:cf:6a:1d:53:0d:7b: 5c:9f:5b:25:2a:09:97:79:53:26:b6:85:3e:af:9f: 66:5f:ed:eb:4b:20:52:a9:0e:32:16:91:cc:47:9a: e9:14:db:c7:ec:60:ca:a4:ae:29:9e:f8:5d:71:2e: 38:9a:33:36:78:d1:66:f4:c5:eb:72:68:db:f6:b7: ca:d2:a1:f8:5c:4a:c8:3d:40:7c:54:db:38:37:b5: 0d:d4:c6:6b:10:a8:75:c2:57:2c:c8:51:54:a4:16: a9:5b:cf:02:80:3f:12:8e:a5:44:28:1b:e1:99:41: 75:47:55:7b:58:b5:c9:d1:ef:87:40:8f:b8:24:4b: 75:9d:e2:32:38:88:45:d5:05:6a:6d:1c:c1:23:f1: 2f:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:4D:B2:6F:C2:35:4B:61:61:FA:05:4D:8C:0D:5B:A8:CC:25:FB:5F X509v3 Authority Key Identifier: keyid:AF:C5:29:FB:24:3B:77:80:A2:0B:27:A2:C4:E7:3D:AF:65:C2:50:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:1f:96:24:5c:64:28:cd:df:cb:ea:48:c4:c6:dc:7a:93:6b: d4:59:93:6e:5c:c4:06:95:3b:57:2c:3f:85:36:1f:00:aa:94: 29:ae:69:2d:ef:b3:15:a0:84:53:7a:80:f1:c7:d4:47:6c:aa: 96:ea:cd:a7:b6:da:9b:aa:16:45:8d:0e:7d:9a:a8:6c:a7:60: 66:e2:5e:a5:37:02:77:95:bb:ba:d8:8b:ec:80:5b:36:9a:f3: 70:f6:71:c8:05:bd:39:5b:b2:83:55:92:6b:41:2d:e1:85:77: 51:0b:de:e9:04:86:db:eb:b8:92:74:94:38:b6:eb:19:38:8f: 77:e9:37:b4:34:05:14:1e:2d:9e:dd:15:48:2a:fd:0c:53:45: e6:0f:d8:36:f0:61:ec:35:9c:b7:a5:59:61:9a:1c:20:30:9f: c1:14:ef:80:58:d7:1e:d1:eb:6e:fa:0f:22:cf:9b:c2:6a:2f: 09:2c:f2:6d:fb:5e:04:4a:b7:c0:b8:e0:8c:43:e7:cb:4c:2c: 58:c1:5d:c3:59:b1:37:b3:4e:56:0a:e6:1f:7a:18:64:a6:ac: 8d:35:f5:b9:d6:8e:be:e6:bf:76:1a:96:49:1f:9b:29:5b:37: 4b:b4:b5:a8:56:15:db:1a:42:ab:8f:1a:32:8b:67:4d:82:b8: 67:9f:3e:28 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUa1FyfQGVukezigW38mLHC3hzM8EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZDNTI5RkIyNDNCNzc4MEEyMEIyN0EyQzRFNzNEQUY2 NUMyNTAyMTAeFw0yNjA0MTcxMDI1MDJaFw0yNjA0MTgxMzI4MDJaMDMxMTAvBgNV BAMTKEVGNERCMjZGQzIzNTRCNjE2MUZBMDU0RDhDMEQ1QkE4Q0MyNUZCNUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBpv6qQDfPBkkDwubW0cgaR/UQ YsNNi1liNnd2UAM8Ka7M+JiJi5sQX9wk7hvWe3CqeRMvALLeGusFJgjNnfLRyXXf pr23mpeQ7os85cpoK3F7J3QygyC13QUb5m/zdvrd8wsujJx07LtjyZRbsp0Yec9q HVMNe1yfWyUqCZd5Uya2hT6vn2Zf7etLIFKpDjIWkcxHmukU28fsYMqkrime+F1x LjiaMzZ40Wb0xetyaNv2t8rSofhcSsg9QHxU2zg3tQ3UxmsQqHXCVyzIUVSkFqlb zwKAPxKOpUQoG+GZQXVHVXtYtcnR74dAj7gkS3Wd4jI4iEXVBWptHMEj8S/rAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU702yb8I1S2Fh+gVNjA1bqMwl+18wHwYDVR0j BBgwFoAUr8Up+yQ7d4CiCyeixOc9r2XCUCEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQTNodHpDelJQekxuWUY3cTl5eDdBZEJZM1lHTm9jUUR3aHo3RFdZWjJQ UUIvMS9BRkM1MjlGQjI0M0I3NzgwQTIwQjI3QTJDNEU3M0RBRjY1QzI1MDIxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FGQzUyOUZCMjQzQjc3ODBB MjBCMjdBMkM0RTczREFGNjVDMjUwMjEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QTNodHpDelJQekxuWUY3cTl5eDdBZEJZM1lHTm9jUUR3aHo3RFdZWjJQUUIvMS9B RkM1MjlGQjI0M0I3NzgwQTIwQjI3QTJDNEU3M0RBRjY1QzI1MDIxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZB+WJFxkKM3fy+pIxMbcepNr1FmTblzEBpU7Vyw/hTYfAKqUKa5pLe+zFaCE U3qA8cfUR2yqlurNp7bam6oWRY0OfZqobKdgZuJepTcCd5W7utiL7IBbNprzcPZx yAW9OVuyg1WSa0Et4YV3UQve6QSG2+u4knSUOLbrGTiPd+k3tDQFFB4tnt0VSCr9 DFNF5g/YNvBh7DWct6VZYZocIDCfwRTvgFjXHtHrbvoPIs+bwmovCSzybfteBEq3 wLjgjEPny0wsWMFdw1mxN7NOVgrmH3oYZKasjTX1udaOvua/dhqWSR+bKVs3S7S1 qFYV2xpCq48aMotnTYK4Z58+KA== -----END CERTIFICATE-----Generated at Sat Apr 18 01:55:50 2026 by rpki-client