$ rpki-client -vvf rpki-repo.registro.br/repo/BeVfxV1hAn3FurdeY9HhL1oFPfdKYdXcQYnjYC6cm6X3/1/AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.mft File: AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.mft (raw, json) Hash identifier: +jadRVJt675qQ93AUGTwXcoT2XKGe9vpsbDGahiIxm0= Subject key identifier: A3:89:B5:38:10:40:40:F1:EC:35:29:A4:C1:47:F4:81:D8:92:02:30 Authority key identifier: AF:F2:DE:84:A1:6A:AF:6B:11:BE:71:E4:16:5A:53:F8:A3:AC:19:7E Certificate issuer: /CN=AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E Certificate serial: 703858AB9BD81E4BBB7AD55E0FE1090FE3E000CA Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.cer Subject info access: rsync://rpki-repo.registro.br/repo/BeVfxV1hAn3FurdeY9HhL1oFPfdKYdXcQYnjYC6cm6X3/1/AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.mft Manifest number: 036D Signing time: Mon 02 Mar 2026 10:37:06 +0000 Manifest this update: Mon 02 Mar 2026 10:32:06 +0000 Manifest next update: Tue 03 Mar 2026 13:13:06 +0000 Files and hashes: 1: AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.crl (hash: LnECKGGvH9Lb53BbvdxtNrxiB3xupBeNJLe5ULiErj8=) 2: 323830343a363030303a3a2f33322d3438203d3e20323639313339.roa (hash: 8dCQjA7sfh1xtH61B+clyqaJwOe2FGLwiDK7lZSnl88=) 3: 34352e3138302e38342e302f32322d3234203d3e20323639313339.roa (hash: C0pX84zBEhKRhl9C5gFvhi/VFuecxZXh/uAPLmzVMVw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BeVfxV1hAn3FurdeY9HhL1oFPfdKYdXcQYnjYC6cm6X3/1/AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.crl rsync://rpki-repo.registro.br/repo/BeVfxV1hAn3FurdeY9HhL1oFPfdKYdXcQYnjYC6cm6X3/1/AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 03 Mar 2026 13:13:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:38:58:ab:9b:d8:1e:4b:bb:7a:d5:5e:0f:e1:09:0f:e3:e0:00:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E Validity Not Before: Mar 2 10:32:06 2026 GMT Not After : Mar 3 13:13:06 2026 GMT Subject: CN=A389B538104040F1EC3529A4C147F481D8920230 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ea:06:a1:f2:cb:f7:50:31:72:87:ed:5b:b6: e6:a2:0d:0c:f6:bd:55:4c:2d:cd:cc:ff:93:ad:ec: 9e:73:52:49:ea:bc:ea:fa:18:18:1f:f5:16:06:ed: 34:18:59:45:cd:c6:46:8b:4d:91:f8:72:de:b2:90: 06:1a:df:69:d6:67:2b:9a:94:b1:b3:45:90:10:b2: 1b:56:fe:33:6c:fa:c3:70:9c:1c:91:c5:f7:d1:e7: 75:2b:f2:fd:51:f0:37:e1:d2:8d:18:cf:a2:ba:f8: 9e:9b:34:0c:20:2b:f8:de:92:90:84:06:05:cc:85: d2:67:e6:fb:d1:fa:fd:f3:14:e7:c7:1c:2b:9c:a4: 15:a6:ed:9b:a0:3a:88:e1:43:83:76:c1:1a:d9:b9: bd:9f:5a:a9:2b:0f:d9:2c:60:66:c4:c0:67:e4:d1: 00:ae:25:12:1a:25:23:5c:76:5e:20:36:00:9a:1f: 38:70:4c:77:33:4a:54:9e:d8:b1:3f:e5:4c:9d:3e: 14:5d:78:c3:e9:9b:81:b7:f5:ac:47:59:9a:14:23: 80:c1:da:a6:44:6d:76:47:09:ed:52:66:d6:ab:3c: cc:a3:e5:1c:50:06:30:90:e3:e4:a1:ba:88:a3:35: 3c:ab:b8:cb:ad:9a:41:8f:a0:77:52:32:3c:92:60: a4:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:89:B5:38:10:40:40:F1:EC:35:29:A4:C1:47:F4:81:D8:92:02:30 X509v3 Authority Key Identifier: keyid:AF:F2:DE:84:A1:6A:AF:6B:11:BE:71:E4:16:5A:53:F8:A3:AC:19:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BeVfxV1hAn3FurdeY9HhL1oFPfdKYdXcQYnjYC6cm6X3/1/AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BeVfxV1hAn3FurdeY9HhL1oFPfdKYdXcQYnjYC6cm6X3/1/AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:60:4b:bb:b6:cf:fa:cc:43:2f:43:e5:fa:95:18:a1:3d:cd: 33:8b:6f:90:03:5f:9c:ba:e1:49:1f:09:05:e1:1d:3b:16:0b: 9f:00:e1:4c:6e:bc:b0:f0:d5:96:2a:dd:0f:64:6c:6a:47:14: 44:36:4b:c3:04:b9:45:80:c1:fc:a6:90:f9:9a:b2:04:23:53: 7f:35:b1:f0:42:c1:02:a2:48:b4:69:66:70:b8:ff:d0:cd:34: 0c:03:3d:d8:15:ea:40:19:09:16:b1:86:ae:37:ff:4a:d7:46: 19:29:a1:a3:37:81:fd:89:42:57:85:83:e8:45:45:cc:96:3f: 76:58:ad:64:24:76:c7:18:f6:96:21:56:a6:22:31:51:a3:ab: 09:c5:e1:b6:aa:9e:1a:53:d5:05:6c:02:9a:f2:fc:4f:d9:f4: d5:68:5d:a9:a4:f1:1f:02:07:95:1a:54:9c:1f:c6:15:4c:b2: c9:93:7d:67:e2:19:8f:46:c2:d8:24:3a:2e:7b:44:9c:6f:cd: 41:85:fb:7b:e6:10:7f:d5:64:46:0f:fb:57:fd:1d:74:c0:8d: 3a:c5:2e:ab:35:98:79:5a:a8:b7:49:02:bc:ca:e9:3a:3c:5b: 63:cf:32:46:43:59:b4:43:72:7c:d2:e5:08:85:78:ae:95:ae: c1:50:e5:86 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUcDhYq5vYHku7etVeD+EJD+PgAMowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZGMkRFODRBMTZBQUY2QjExQkU3MUU0MTY1QTUzRjhB M0FDMTk3RTAeFw0yNjAzMDIxMDMyMDZaFw0yNjAzMDMxMzEzMDZaMDMxMTAvBgNV BAMTKEEzODlCNTM4MTA0MDQwRjFFQzM1MjlBNEMxNDdGNDgxRDg5MjAyMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl6gah8sv3UDFyh+1btuaiDQz2 vVVMLc3M/5Ot7J5zUknqvOr6GBgf9RYG7TQYWUXNxkaLTZH4ct6ykAYa32nWZyua lLGzRZAQshtW/jNs+sNwnByRxffR53Ur8v1R8Dfh0o0Yz6K6+J6bNAwgK/jekpCE BgXMhdJn5vvR+v3zFOfHHCucpBWm7ZugOojhQ4N2wRrZub2fWqkrD9ksYGbEwGfk 0QCuJRIaJSNcdl4gNgCaHzhwTHczSlSe2LE/5UydPhRdeMPpm4G39axHWZoUI4DB 2qZEbXZHCe1SZtarPMyj5RxQBjCQ4+ShuoijNTyruMutmkGPoHdSMjySYKQzAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUo4m1OBBAQPHsNSmkwUf0gdiSAjAwHwYDVR0j BBgwFoAUr/LehKFqr2sRvnHkFlpT+KOsGX4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQmVWZnhWMWhBbjNGdXJkZVk5SGhMMW9GUGZkS1lkWGNRWW5qWUM2Y202 WDMvMS9BRkYyREU4NEExNkFBRjZCMTFCRTcxRTQxNjVBNTNGOEEzQUMxOTdFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FGRjJERTg0QTE2QUFGNkIx MUJFNzFFNDE2NUE1M0Y4QTNBQzE5N0UuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QmVWZnhWMWhBbjNGdXJkZVk5SGhMMW9GUGZkS1lkWGNRWW5qWUM2Y202WDMvMS9B RkYyREU4NEExNkFBRjZCMTFCRTcxRTQxNjVBNTNGOEEzQUMxOTdFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjWBLu7bP+sxDL0Pl+pUYoT3NM4tvkANfnLrhSR8JBeEdOxYLnwDhTG68sPDV lirdD2RsakcURDZLwwS5RYDB/KaQ+ZqyBCNTfzWx8ELBAqJItGlmcLj/0M00DAM9 2BXqQBkJFrGGrjf/StdGGSmhozeB/YlCV4WD6EVFzJY/dlitZCR2xxj2liFWpiIx UaOrCcXhtqqeGlPVBWwCmvL8T9n01WhdqaTxHwIHlRpUnB/GFUyyyZN9Z+IZj0bC 2CQ6LntEnG/NQYX7e+YQf9VkRg/7V/0ddMCNOsUuqzWYeVqot0kCvMrpOjxbY88y RkNZtENyfNLlCIV4rpWuwVDlhg== -----END CERTIFICATE-----Generated at Mon Mar 2 23:09:48 2026 by rpki-client