$ rpki-client -vvf rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/AFFAF320E60531FB95C6C685842B56D1BDFCED45.mft File: AFFAF320E60531FB95C6C685842B56D1BDFCED45.mft (raw, json) Hash identifier: 8UWQwBjHkFoZfTAa5UB1BLlMPei/fdG3lmATb5X7+kk= Subject key identifier: FE:7D:93:5A:F7:4F:43:8E:2F:C2:05:19:5F:C9:F8:4F:9E:51:7A:ED Authority key identifier: AF:FA:F3:20:E6:05:31:FB:95:C6:C6:85:84:2B:56:D1:BD:FC:ED:45 Certificate issuer: /CN=AFFAF320E60531FB95C6C685842B56D1BDFCED45 Certificate serial: 156B601EF398E931722D66762D0D4EE4A1FF799F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFFAF320E60531FB95C6C685842B56D1BDFCED45.cer Subject info access: rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/AFFAF320E60531FB95C6C685842B56D1BDFCED45.mft Manifest number: 0203 Signing time: Mon 02 Mar 2026 04:43:10 +0000 Manifest this update: Mon 02 Mar 2026 04:38:10 +0000 Manifest next update: Tue 03 Mar 2026 04:58:10 +0000 Files and hashes: 1: 3137372e3132382e38382e302f32322d3234203d3e20323637313432.roa (hash: b4eUJyjlF0Q0XlY/Ooz3h6sd8Zu0IgW1LvZBt+QSDf8=) 2: AFFAF320E60531FB95C6C685842B56D1BDFCED45.crl (hash: 9aV69TJXgDfP1RTPoxJ39B1GaD721/z5YpjfsW3BN+I=) 3: 323830343a343863303a3a2f33322d3438203d3e20323637313432.roa (hash: PfR01nZvf8Y0H0KECgEtEIbuWHqNwiR3gN4ycjpky3I=) 4: 34352e3232392e3234302e302f32322d3234203d3e20323637313432.roa (hash: HgQsIMV6fUBBPi1fo5CFCEg7KsMIECihgUWpMFYGGj8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/AFFAF320E60531FB95C6C685842B56D1BDFCED45.crl rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/AFFAF320E60531FB95C6C685842B56D1BDFCED45.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFFAF320E60531FB95C6C685842B56D1BDFCED45.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 03 Mar 2026 04:58:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:6b:60:1e:f3:98:e9:31:72:2d:66:76:2d:0d:4e:e4:a1:ff:79:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFFAF320E60531FB95C6C685842B56D1BDFCED45 Validity Not Before: Mar 2 04:38:10 2026 GMT Not After : Mar 3 04:58:10 2026 GMT Subject: CN=FE7D935AF74F438E2FC205195FC9F84F9E517AED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:9a:3d:86:44:bf:18:14:e8:66:cf:5a:52:ce: f8:31:9f:34:ca:d3:5f:73:9d:33:74:15:ee:55:9a: e2:9f:0d:7b:e0:04:3c:c4:07:7f:47:0b:d2:7e:cf: c0:b1:a6:80:66:cf:4e:2b:78:b4:18:26:1a:92:aa: 0b:1c:d3:9a:aa:51:35:ea:e8:35:1b:0c:ca:93:f2: c9:33:b2:89:f8:c6:fc:c3:90:aa:ee:7d:fa:46:d7: 03:6b:99:53:0e:ae:23:10:5c:77:4d:91:93:07:2c: 54:51:fd:41:32:41:e3:03:5a:c5:f7:ee:dc:fc:8e: 97:5b:de:3e:30:6d:05:2e:26:6f:09:dc:9f:61:60: ec:da:fb:f5:d2:a0:9e:40:3a:be:49:01:0d:eb:8a: 23:d0:32:6a:67:02:bb:f8:10:2a:3c:1c:41:e3:4f: 27:02:96:ad:df:09:4f:85:9e:8f:f4:d9:cc:01:fa: 53:18:79:cb:85:25:60:92:bd:1e:b2:99:47:31:46: 8f:8e:cb:b6:b7:4a:01:2d:f1:92:ef:e6:bc:0d:f5: 9f:15:be:c0:22:fd:e0:99:c8:c3:fd:1f:d9:75:5d: 70:cf:91:7d:85:3c:ff:7e:d9:47:49:28:2f:5d:d5: f9:71:9e:9d:d1:11:47:77:a3:6e:fc:1c:ea:29:7a: ba:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:7D:93:5A:F7:4F:43:8E:2F:C2:05:19:5F:C9:F8:4F:9E:51:7A:ED X509v3 Authority Key Identifier: keyid:AF:FA:F3:20:E6:05:31:FB:95:C6:C6:85:84:2B:56:D1:BD:FC:ED:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/AFFAF320E60531FB95C6C685842B56D1BDFCED45.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFFAF320E60531FB95C6C685842B56D1BDFCED45.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/AFFAF320E60531FB95C6C685842B56D1BDFCED45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:6a:ec:59:18:1b:72:b7:23:72:bd:d4:46:7b:8a:f0:3e:4d: fd:d4:38:d4:26:69:48:0f:38:fc:76:d0:38:ba:64:37:12:c6: ce:a0:6d:a8:ac:d3:86:0e:0e:d9:2e:62:a2:04:be:7f:07:be: c7:c3:44:e5:22:2c:b8:0d:f1:c1:5b:2d:d2:2b:7b:52:81:15: b3:4d:51:aa:7e:0b:70:0b:8d:61:b5:63:a6:86:93:11:8d:02: b3:0c:d3:83:6c:b0:a0:05:ed:34:67:21:d2:70:3d:39:f9:ee: 2b:ed:4a:10:00:8f:f4:a1:5d:cb:ef:ed:9e:a0:ce:07:c0:bc: c3:59:d9:c1:04:74:62:31:af:90:53:ef:11:54:37:95:dc:f6: ea:5b:12:d2:4e:c4:7a:9f:1b:b7:17:0d:8d:75:17:e3:d4:14: ba:59:03:d5:8c:0b:6a:f9:06:be:c8:b9:74:b3:7a:f8:b9:46: f6:62:2c:24:4e:04:9c:d9:c7:c0:1e:c7:5c:69:f2:87:07:5c: db:c7:d5:2f:5a:3e:7c:6c:c2:81:95:71:bf:d0:6e:60:0e:0d: 2f:73:af:6c:c4:71:d0:a6:04:41:5a:87:c9:a9:43:e8:c0:98: 34:03:69:00:56:5e:ea:ad:9a:fc:b1:01:b1:7c:83:70:35:29: 90:d4:4a:25 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUFWtgHvOY6TFyLWZ2LQ1O5KH/eZ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZGQUYzMjBFNjA1MzFGQjk1QzZDNjg1ODQyQjU2RDFC REZDRUQ0NTAeFw0yNjAzMDIwNDM4MTBaFw0yNjAzMDMwNDU4MTBaMDMxMTAvBgNV BAMTKEZFN0Q5MzVBRjc0RjQzOEUyRkMyMDUxOTVGQzlGODRGOUU1MTdBRUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFmj2GRL8YFOhmz1pSzvgxnzTK 019znTN0Fe5VmuKfDXvgBDzEB39HC9J+z8CxpoBmz04reLQYJhqSqgsc05qqUTXq 6DUbDMqT8skzson4xvzDkKruffpG1wNrmVMOriMQXHdNkZMHLFRR/UEyQeMDWsX3 7tz8jpdb3j4wbQUuJm8J3J9hYOza+/XSoJ5AOr5JAQ3riiPQMmpnArv4ECo8HEHj TycClq3fCU+Fno/02cwB+lMYecuFJWCSvR6ymUcxRo+Oy7a3SgEt8ZLv5rwN9Z8V vsAi/eCZyMP9H9l1XXDPkX2FPP9+2UdJKC9d1flxnp3REUd3o278HOoperqVAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU/n2TWvdPQ44vwgUZX8n4T55Reu0wHwYDVR0j BBgwFoAUr/rzIOYFMfuVxsaFhCtW0b387UUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRGhoYWNKRmdXczl3SzlDdUVQVFhlUUMxWER3amhnTU5KczN6VGg5dzl0 QlUvMC9BRkZBRjMyMEU2MDUzMUZCOTVDNkM2ODU4NDJCNTZEMUJERkNFRDQ1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FGRkFGMzIwRTYwNTMxRkI5 NUM2QzY4NTg0MkI1NkQxQkRGQ0VENDUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RGhoYWNKRmdXczl3SzlDdUVQVFhlUUMxWER3amhnTU5KczN6VGg5dzl0QlUvMC9B RkZBRjMyMEU2MDUzMUZCOTVDNkM2ODU4NDJCNTZEMUJERkNFRDQ1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAuWrsWRgbcrcjcr3URnuK8D5N/dQ41CZpSA84/HbQOLpkNxLGzqBtqKzThg4O 2S5iogS+fwe+x8NE5SIsuA3xwVst0it7UoEVs01Rqn4LcAuNYbVjpoaTEY0CswzT g2ywoAXtNGch0nA9OfnuK+1KEACP9KFdy+/tnqDOB8C8w1nZwQR0YjGvkFPvEVQ3 ldz26lsS0k7Eep8btxcNjXUX49QUulkD1YwLavkGvsi5dLN6+LlG9mIsJE4EnNnH wB7HXGnyhwdc28fVL1o+fGzCgZVxv9BuYA4NL3OvbMRx0KYEQVqHyalD6MCYNANp AFZe6q2a/LEBsXyDcDUpkNRKJQ== -----END CERTIFICATE-----Generated at Mon Mar 2 21:34:02 2026 by rpki-client