$ rpki-client -vvf rpki-repo.registro.br/repo/BeVfxV1hAn3FurdeY9HhL1oFPfdKYdXcQYnjYC6cm6X3/1/AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.mft File: AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.mft (raw, json) Hash identifier: FsgxWwNrbJ01y+d6g8rY8FlBogNgCyEO7bQTlL8MsZc= Subject key identifier: 24:E2:87:69:10:36:07:D5:F5:66:58:F4:FD:B7:0A:A6:34:53:C3:00 Authority key identifier: AF:F2:DE:84:A1:6A:AF:6B:11:BE:71:E4:16:5A:53:F8:A3:AC:19:7E Certificate issuer: /CN=AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E Certificate serial: 4C802B062BA3466FAD571632CF85E9983C6FB4ED Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.cer Subject info access: rsync://rpki-repo.registro.br/repo/BeVfxV1hAn3FurdeY9HhL1oFPfdKYdXcQYnjYC6cm6X3/1/AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.mft Manifest number: 03AA Signing time: Fri 17 Apr 2026 08:14:00 +0000 Manifest this update: Fri 17 Apr 2026 08:09:00 +0000 Manifest next update: Sat 18 Apr 2026 11:19:00 +0000 Files and hashes: 1: 323830343a363030303a3a2f33322d3438203d3e20323639313339.roa (hash: 8dCQjA7sfh1xtH61B+clyqaJwOe2FGLwiDK7lZSnl88=) 2: AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.crl (hash: 2kl7BwD5q8gmtxCwYXMZYN8YMQpupHREsZMbOA3VERA=) 3: 34352e3138302e38342e302f32322d3234203d3e20323639313339.roa (hash: C0pX84zBEhKRhl9C5gFvhi/VFuecxZXh/uAPLmzVMVw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BeVfxV1hAn3FurdeY9HhL1oFPfdKYdXcQYnjYC6cm6X3/1/AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.crl rsync://rpki-repo.registro.br/repo/BeVfxV1hAn3FurdeY9HhL1oFPfdKYdXcQYnjYC6cm6X3/1/AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Apr 2026 11:19:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:80:2b:06:2b:a3:46:6f:ad:57:16:32:cf:85:e9:98:3c:6f:b4:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E Validity Not Before: Apr 17 08:09:00 2026 GMT Not After : Apr 18 11:19:00 2026 GMT Subject: CN=24E28769103607D5F56658F4FDB70AA63453C300 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:92:9b:26:fb:0a:3b:61:36:16:c1:a7:9e:94: 2f:a2:c6:d7:f1:ba:ee:17:e1:f8:d5:dc:0d:e0:68: 11:47:c0:3c:8a:6e:2f:7b:5f:cc:2f:52:ac:c1:8b: e9:f8:a5:f3:6b:48:94:77:a8:84:30:77:45:8a:32: 25:76:eb:82:45:c8:28:b2:f0:4d:65:38:a1:5a:ff: 3d:bf:dc:ad:d9:d7:a1:fb:f1:ce:be:26:c3:5b:9b: 65:59:16:2c:2d:9b:55:47:30:b5:40:cc:04:2a:bf: 68:c3:43:2a:c2:93:9f:de:c0:cb:25:e0:ed:dd:23: fd:3b:2f:35:cd:f6:16:60:0b:58:44:6c:b1:4a:26: 29:f3:4e:e3:f5:e0:92:06:7e:5c:9e:e7:17:39:de: 27:59:ab:be:f6:3d:1c:2d:9d:c2:8c:45:0c:b5:09: ae:2f:d6:b1:07:a5:a7:75:24:af:bb:3b:0d:87:24: 1e:fd:ef:76:3d:0e:07:6f:2d:fe:f8:05:28:0b:53: d2:cd:6c:84:42:84:77:b5:a8:76:93:10:23:78:fb: 2a:e5:a8:dd:33:a7:d5:11:fc:c0:c8:a4:5f:ce:8f: 1c:97:72:0a:91:91:3c:f0:72:c4:65:1a:61:af:49: e7:b5:ce:06:bf:d3:92:c2:fb:97:58:10:cf:fc:e5: 19:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:E2:87:69:10:36:07:D5:F5:66:58:F4:FD:B7:0A:A6:34:53:C3:00 X509v3 Authority Key Identifier: keyid:AF:F2:DE:84:A1:6A:AF:6B:11:BE:71:E4:16:5A:53:F8:A3:AC:19:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BeVfxV1hAn3FurdeY9HhL1oFPfdKYdXcQYnjYC6cm6X3/1/AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BeVfxV1hAn3FurdeY9HhL1oFPfdKYdXcQYnjYC6cm6X3/1/AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:af:4a:23:88:51:5e:86:7d:01:6f:43:39:d4:01:28:1f:44: e5:b0:68:c5:ec:f4:64:be:d4:db:20:06:d9:5f:fa:2a:25:9f: 78:dc:77:e9:9c:03:65:f2:02:6f:36:45:fa:64:ed:c5:f6:cd: da:12:3e:c5:85:3b:9a:c0:07:41:77:70:ca:fd:78:fd:60:47: 81:01:9b:65:ea:6a:c3:88:25:2d:55:bb:21:97:12:66:1f:41: ae:93:55:77:e8:71:cb:88:ad:a6:55:a9:bd:40:f5:fe:c0:f7: 62:a2:cd:06:43:be:8f:82:55:e0:28:50:a4:07:d7:5a:11:c6: c6:84:7c:9a:79:21:9a:3e:40:86:1c:c3:a6:c2:ee:fb:61:fd: 23:64:64:55:ea:70:5b:82:9b:2b:37:55:19:3e:ff:27:79:b9: a7:53:87:95:2a:9d:41:f9:1c:c4:a7:cf:69:bc:e2:6e:53:22: 9e:f3:7c:59:5f:78:e2:f4:96:f4:22:88:c7:83:63:fd:26:88: 2b:ed:38:f0:36:2e:17:d4:92:e4:08:a5:95:2e:78:d6:d5:21: 1e:58:d4:5f:91:1b:b1:18:55:14:07:09:91:64:f6:ea:74:98: db:a3:53:57:f0:ab:21:5e:b7:7d:5b:ec:09:eb:d4:e2:53:87: 34:10:f8:1a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUTIArBiujRm+tVxYyz4XpmDxvtO0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZGMkRFODRBMTZBQUY2QjExQkU3MUU0MTY1QTUzRjhB M0FDMTk3RTAeFw0yNjA0MTcwODA5MDBaFw0yNjA0MTgxMTE5MDBaMDMxMTAvBgNV BAMTKDI0RTI4NzY5MTAzNjA3RDVGNTY2NThGNEZEQjcwQUE2MzQ1M0MzMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwkpsm+wo7YTYWwaeelC+ixtfx uu4X4fjV3A3gaBFHwDyKbi97X8wvUqzBi+n4pfNrSJR3qIQwd0WKMiV264JFyCiy 8E1lOKFa/z2/3K3Z16H78c6+JsNbm2VZFiwtm1VHMLVAzAQqv2jDQyrCk5/ewMsl 4O3dI/07LzXN9hZgC1hEbLFKJinzTuP14JIGflye5xc53idZq772PRwtncKMRQy1 Ca4v1rEHpad1JK+7Ow2HJB7973Y9DgdvLf74BSgLU9LNbIRChHe1qHaTECN4+yrl qN0zp9UR/MDIpF/OjxyXcgqRkTzwcsRlGmGvSee1zga/05LC+5dYEM/85RnTAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUJOKHaRA2B9X1Zlj0/bcKpjRTwwAwHwYDVR0j BBgwFoAUr/LehKFqr2sRvnHkFlpT+KOsGX4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQmVWZnhWMWhBbjNGdXJkZVk5SGhMMW9GUGZkS1lkWGNRWW5qWUM2Y202 WDMvMS9BRkYyREU4NEExNkFBRjZCMTFCRTcxRTQxNjVBNTNGOEEzQUMxOTdFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FGRjJERTg0QTE2QUFGNkIx MUJFNzFFNDE2NUE1M0Y4QTNBQzE5N0UuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QmVWZnhWMWhBbjNGdXJkZVk5SGhMMW9GUGZkS1lkWGNRWW5qWUM2Y202WDMvMS9B RkYyREU4NEExNkFBRjZCMTFCRTcxRTQxNjVBNTNGOEEzQUMxOTdFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAY69KI4hRXoZ9AW9DOdQBKB9E5bBoxez0ZL7U2yAG2V/6KiWfeNx36ZwDZfIC bzZF+mTtxfbN2hI+xYU7msAHQXdwyv14/WBHgQGbZepqw4glLVW7IZcSZh9BrpNV d+hxy4itplWpvUD1/sD3YqLNBkO+j4JV4ChQpAfXWhHGxoR8mnkhmj5AhhzDpsLu +2H9I2RkVepwW4KbKzdVGT7/J3m5p1OHlSqdQfkcxKfPabziblMinvN8WV944vSW 9CKIx4Nj/SaIK+048DYuF9SS5AillS541tUhHljUX5EbsRhVFAcJkWT26nSY26NT V/CrIV63fVvsCevU4lOHNBD4Gg== -----END CERTIFICATE-----Generated at Sat Apr 18 03:25:57 2026 by rpki-client