$ rpki-client -vvf rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.mft File: AFC529FB243B7780A20B27A2C4E73DAF65C25021.mft (raw, json) Hash identifier: Ba4Q9KhDD1WgtG7r6AE76Tdt8el+b93JozC5FHwbdXI= Subject key identifier: E3:CC:4A:2C:EB:8E:D2:7E:D2:0E:3A:84:DC:5F:BC:23:A4:AC:32:2D Authority key identifier: AF:C5:29:FB:24:3B:77:80:A2:0B:27:A2:C4:E7:3D:AF:65:C2:50:21 Certificate issuer: /CN=AFC529FB243B7780A20B27A2C4E73DAF65C25021 Certificate serial: 569ED9F19E81F4D21D48D85EE28FAB46F56F5B84 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.cer Subject info access: rsync://rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.mft Manifest number: 03A1 Signing time: Mon 02 Mar 2026 05:10:03 +0000 Manifest this update: Mon 02 Mar 2026 05:05:03 +0000 Manifest next update: Tue 03 Mar 2026 07:02:03 +0000 Files and hashes: 1: 34352e3233362e3135362e302f32322d3232203d3e20323638323534.roa (hash: CuQjMpNkrIW1WzhX9cPRo+EN9gEwjyWh3xpLCuMgTVU=) 2: AFC529FB243B7780A20B27A2C4E73DAF65C25021.crl (hash: ISB4Wqsu0B7skOFk0vPWRhIG21RO5topnkirSIfmH3E=) 3: 34352e3233362e3135372e302f32342d3234203d3e20323638323534.roa (hash: jY+tbsAGTzcn5N+jHiOsaWS3WBkBKKylljU7SDevL8I=) 4: 34352e3233362e3135362e302f32342d3234203d3e20323638323534.roa (hash: 10cNS1rFXtwonEdWCsG96QN75TUPd3NohC99CLr6co4=) 5: 34352e3233362e3135382e302f32342d3234203d3e20323638323534.roa (hash: 6QajgBafqVgtgzsUpMYBPHbT8Yx62E6qE3HZwZj2TiE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.crl rsync://rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 03 Mar 2026 07:02:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:9e:d9:f1:9e:81:f4:d2:1d:48:d8:5e:e2:8f:ab:46:f5:6f:5b:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFC529FB243B7780A20B27A2C4E73DAF65C25021 Validity Not Before: Mar 2 05:05:03 2026 GMT Not After : Mar 3 07:02:03 2026 GMT Subject: CN=E3CC4A2CEB8ED27ED20E3A84DC5FBC23A4AC322D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:5f:5a:87:f0:d4:79:68:b2:28:1a:76:48:f0: 41:58:66:46:d4:6b:17:f5:c2:15:4d:f1:dc:4d:b8: fc:35:0c:5b:78:54:62:c8:4b:82:c9:da:0e:da:c7: c5:fa:e4:40:dd:85:f9:fa:74:b5:29:30:8d:6e:6e: c9:07:0e:02:10:91:b1:16:b8:a3:14:67:33:c2:1f: d5:e9:b2:0c:88:68:a7:5b:de:12:62:0d:e5:b6:c6: f6:bf:f4:21:6a:fd:be:dd:0a:fc:7c:0c:0b:6e:96: ef:3e:b1:c0:2c:53:dd:25:0f:68:96:1d:78:b6:72: 06:f1:28:46:7c:84:62:c8:5c:8c:dc:0a:24:91:f6: f0:75:0d:df:08:2f:d4:83:e1:a7:2c:72:e8:fa:66: dc:10:08:f9:0f:3c:e6:3c:dc:c6:cd:8c:ec:47:13: 15:1a:56:70:96:4d:1f:15:ef:ea:55:e9:9c:6e:62: ce:de:29:5d:0c:8c:44:b5:2e:71:57:0f:8e:04:53: b6:33:b4:6f:51:7d:32:4a:a4:1f:76:63:f6:0f:03: 07:9f:6d:66:a1:79:79:f6:12:f5:04:f7:5c:5d:c3: bf:17:9c:0c:9a:4b:82:bb:7d:70:91:7f:e3:1e:fa: da:fe:48:06:f7:0e:40:1d:de:54:5d:5c:b9:b4:ad: 6c:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:CC:4A:2C:EB:8E:D2:7E:D2:0E:3A:84:DC:5F:BC:23:A4:AC:32:2D X509v3 Authority Key Identifier: keyid:AF:C5:29:FB:24:3B:77:80:A2:0B:27:A2:C4:E7:3D:AF:65:C2:50:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:14:10:55:e9:8d:54:32:60:3c:d9:db:0a:eb:8e:df:83:0b: d6:2a:0e:9a:c3:56:4f:5d:2f:26:40:23:d1:98:13:0e:71:ff: 36:c7:be:62:20:e5:96:fc:aa:dc:ee:7e:65:58:92:05:fa:1e: 75:4d:4f:47:37:4a:cb:2d:d4:1f:4e:90:40:21:e2:ae:17:8d: b8:7e:c5:9f:7b:3f:fb:c1:5e:4d:7e:ba:39:82:0e:cf:5a:d1: ce:5b:c5:7b:b2:23:87:28:2e:e7:e1:52:ae:24:50:e0:c2:b1: ab:6e:12:14:a4:9a:0a:63:40:75:b3:cc:88:db:d2:20:f0:a1: 1e:db:ea:61:6a:1a:e5:60:f4:60:15:26:46:29:c3:1f:17:ee: cc:92:d7:ba:d4:c1:59:5e:a2:c4:c3:b4:62:d0:9f:13:a9:ea: e8:b5:77:52:19:d3:e0:44:b5:b6:43:e8:a5:40:cd:23:8f:82: e7:81:f5:fd:db:26:db:61:7d:d7:f1:ba:36:ff:f2:df:d2:cf: cc:da:88:a3:6e:c5:91:a2:ae:d5:1b:b3:cc:7e:18:be:e0:5b: 76:3c:a5:a2:d8:3c:94:d7:37:22:83:25:70:7f:32:73:3b:55: 63:09:c7:a9:6d:a2:7c:0a:47:c2:9c:ec:e0:4e:81:be:11:9a: 07:c7:4a:20 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUVp7Z8Z6B9NIdSNhe4o+rRvVvW4QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZDNTI5RkIyNDNCNzc4MEEyMEIyN0EyQzRFNzNEQUY2 NUMyNTAyMTAeFw0yNjAzMDIwNTA1MDNaFw0yNjAzMDMwNzAyMDNaMDMxMTAvBgNV BAMTKEUzQ0M0QTJDRUI4RUQyN0VEMjBFM0E4NERDNUZCQzIzQTRBQzMyMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiX1qH8NR5aLIoGnZI8EFYZkbU axf1whVN8dxNuPw1DFt4VGLIS4LJ2g7ax8X65EDdhfn6dLUpMI1ubskHDgIQkbEW uKMUZzPCH9XpsgyIaKdb3hJiDeW2xva/9CFq/b7dCvx8DAtulu8+scAsU90lD2iW HXi2cgbxKEZ8hGLIXIzcCiSR9vB1Dd8IL9SD4acscuj6ZtwQCPkPPOY83MbNjOxH ExUaVnCWTR8V7+pV6ZxuYs7eKV0MjES1LnFXD44EU7YztG9RfTJKpB92Y/YPAwef bWaheXn2EvUE91xdw78XnAyaS4K7fXCRf+Me+tr+SAb3DkAd3lRdXLm0rWw5AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU48xKLOuO0n7SDjqE3F+8I6SsMi0wHwYDVR0j BBgwFoAUr8Up+yQ7d4CiCyeixOc9r2XCUCEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQTNodHpDelJQekxuWUY3cTl5eDdBZEJZM1lHTm9jUUR3aHo3RFdZWjJQ UUIvMS9BRkM1MjlGQjI0M0I3NzgwQTIwQjI3QTJDNEU3M0RBRjY1QzI1MDIxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FGQzUyOUZCMjQzQjc3ODBB MjBCMjdBMkM0RTczREFGNjVDMjUwMjEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QTNodHpDelJQekxuWUY3cTl5eDdBZEJZM1lHTm9jUUR3aHo3RFdZWjJQUUIvMS9B RkM1MjlGQjI0M0I3NzgwQTIwQjI3QTJDNEU3M0RBRjY1QzI1MDIxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkRQQVemNVDJgPNnbCuuO34ML1ioOmsNWT10vJkAj0ZgTDnH/Nse+YiDllvyq 3O5+ZViSBfoedU1PRzdKyy3UH06QQCHirheNuH7Fn3s/+8FeTX66OYIOz1rRzlvF e7Ijhygu5+FSriRQ4MKxq24SFKSaCmNAdbPMiNvSIPChHtvqYWoa5WD0YBUmRinD HxfuzJLXutTBWV6ixMO0YtCfE6nq6LV3UhnT4ES1tkPopUDNI4+C54H1/dsm22F9 1/G6Nv/y39LPzNqIo27FkaKu1RuzzH4YvuBbdjylotg8lNc3IoMlcH8ycztVYwnH qW2ifApHwpzs4E6BvhGaB8dKIA== -----END CERTIFICATE-----Generated at Mon Mar 2 16:02:54 2026 by rpki-client