$ rpki-client -vvf rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/0688357ED433C0A60770FB474BDB2C72796B78BD.mft File: 0688357ED433C0A60770FB474BDB2C72796B78BD.mft (raw, json) Hash identifier: BRdhcJw+uO7m8N0x+rd6Nwtkob0jQiG1kxLKU4LbUXE= Subject key identifier: 12:0B:E7:27:A6:62:A8:B8:1A:6A:F8:21:02:FC:D5:5B:1A:C8:60:EE Authority key identifier: 06:88:35:7E:D4:33:C0:A6:07:70:FB:47:4B:DB:2C:72:79:6B:78:BD Certificate issuer: /CN=0688357ED433C0A60770FB474BDB2C72796B78BD Certificate serial: 5890ECC5A02C47960796F1E4AD0138BFF248733B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0688357ED433C0A60770FB474BDB2C72796B78BD.cer Subject info access: rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/0688357ED433C0A60770FB474BDB2C72796B78BD.mft Manifest number: 01AD Signing time: Mon 02 Mar 2026 15:38:22 +0000 Manifest this update: Mon 02 Mar 2026 15:33:19 +0000 Manifest next update: Tue 03 Mar 2026 19:36:19 +0000 Files and hashes: 1: 3133382e33362e3233322e302f32322d3332203d3e203631363936.roa (hash: 0PAGB5C8H6IcqwDv00MSTHzGTYgYIUYZIqOHywJKqvU=) 2: 3230312e3134302e3234382e302f32322d3332203d3e203631363936.roa (hash: IaTZ4i3zNgWw2pTgrax+ua0Htv3rIzLefPo79rSHOwM=) 3: 0688357ED433C0A60770FB474BDB2C72796B78BD.crl (hash: Akg6vKmCO56IDv53ArGTGEGinwkAcPjwIO0S+wccEN0=) 4: 323830343a316165303a3a2f33322d3634203d3e203631363936.roa (hash: MNi0hCQVw5LiwCn26uDAV8DWpcneKIoS1bbRQFE26gw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/0688357ED433C0A60770FB474BDB2C72796B78BD.crl rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/0688357ED433C0A60770FB474BDB2C72796B78BD.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0688357ED433C0A60770FB474BDB2C72796B78BD.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 03 Mar 2026 17:23:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:90:ec:c5:a0:2c:47:96:07:96:f1:e4:ad:01:38:bf:f2:48:73:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0688357ED433C0A60770FB474BDB2C72796B78BD Validity Not Before: Mar 2 15:33:19 2026 GMT Not After : Mar 3 19:36:19 2026 GMT Subject: CN=120BE727A662A8B81A6AF82102FCD55B1AC860EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:26:85:05:71:49:d4:50:2a:82:f1:ff:1d:40: bd:a2:49:ad:c5:43:a1:5d:c2:68:73:b2:ac:ab:92: 23:ca:a9:27:c3:13:aa:b4:b8:01:75:e2:3c:1e:c3: 8a:1c:3a:15:9d:47:71:1f:8d:87:d7:80:cb:0b:7b: 50:59:8d:63:dc:c7:d8:a0:22:da:58:15:d8:fc:a7: 72:81:2e:6f:50:5d:79:97:3a:9a:1f:ff:ba:10:ec: 8a:ab:3d:cb:b4:b8:58:5b:6b:18:d1:12:2b:97:a4: 29:2a:89:0d:6a:28:ef:fb:41:85:37:0f:2f:f3:c0: f4:ae:78:b6:cc:2f:c5:b1:72:75:3a:a0:03:6c:b5: 78:87:ed:2b:42:ce:91:d3:97:50:83:f0:8b:8d:c8: fc:71:91:58:a8:be:85:8e:44:8f:a3:b7:a4:ef:74: e5:32:cd:2b:c3:fc:69:82:ec:49:1c:a3:1d:20:6e: ea:0e:2b:1f:91:0f:92:7a:bd:e4:14:d0:ef:c4:e2: 2a:e7:64:10:1b:ea:51:ca:61:76:b1:bf:64:04:35: 74:13:28:ac:00:71:d0:86:04:88:bc:67:db:74:f8: 5a:79:dc:f6:ff:64:4e:86:45:23:82:85:69:33:23: 61:43:be:02:65:5b:2b:cd:73:02:1d:33:a9:24:77: ea:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:0B:E7:27:A6:62:A8:B8:1A:6A:F8:21:02:FC:D5:5B:1A:C8:60:EE X509v3 Authority Key Identifier: keyid:06:88:35:7E:D4:33:C0:A6:07:70:FB:47:4B:DB:2C:72:79:6B:78:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/0688357ED433C0A60770FB474BDB2C72796B78BD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0688357ED433C0A60770FB474BDB2C72796B78BD.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/0688357ED433C0A60770FB474BDB2C72796B78BD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:84:5c:68:e4:ca:e1:b7:13:86:1c:c4:6c:a0:4e:60:91:af: d0:2b:24:35:9a:04:5b:1a:5b:28:e5:98:fe:0c:c2:58:9a:df: 85:6c:a2:83:12:ec:ca:54:9c:be:4c:b2:e9:fb:23:4c:62:0a: 2f:78:c1:06:bd:5c:50:ba:e4:14:b0:ea:32:95:f5:56:e6:c3: c7:58:c6:28:5f:f1:37:d9:cb:4c:e7:10:1a:44:e0:c4:40:a3: 32:9f:79:26:e8:c3:68:f8:68:67:2c:f7:dd:cf:c2:7a:0f:0e: 07:c6:5f:97:57:66:ea:7c:fd:09:eb:08:75:f1:09:00:e5:ea: 13:bc:f8:ce:b8:96:eb:92:8e:63:55:d3:19:d5:97:3f:84:6d: 85:9f:cf:3a:9e:c5:11:19:01:15:a0:2d:d0:a3:5f:9c:64:62: 5b:c2:5f:8f:ad:02:ab:a2:b6:75:01:d0:74:1f:fa:32:50:ce: 23:5a:d4:52:5e:5c:45:09:c3:29:77:52:3b:33:ad:e7:10:29: 84:59:22:74:da:0f:50:0d:b2:c2:84:5d:d4:62:37:df:d2:cf: df:6b:57:01:92:ca:49:37:ee:63:b7:e0:15:4a:c1:ae:79:7e: 4e:97:61:17:81:1e:45:bc:f8:d8:2a:ea:b3:b1:7f:df:6a:68: 2d:d2:31:73 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUWJDsxaAsR5YHlvHkrQE4v/JIczswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDY4ODM1N0VENDMzQzBBNjA3NzBGQjQ3NEJEQjJDNzI3 OTZCNzhCRDAeFw0yNjAzMDIxNTMzMTlaFw0yNjAzMDMxOTM2MTlaMDMxMTAvBgNV BAMTKDEyMEJFNzI3QTY2MkE4QjgxQTZBRjgyMTAyRkNENTVCMUFDODYwRUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgJoUFcUnUUCqC8f8dQL2iSa3F Q6FdwmhzsqyrkiPKqSfDE6q0uAF14jwew4ocOhWdR3EfjYfXgMsLe1BZjWPcx9ig ItpYFdj8p3KBLm9QXXmXOpof/7oQ7IqrPcu0uFhbaxjREiuXpCkqiQ1qKO/7QYU3 Dy/zwPSueLbML8WxcnU6oANstXiH7StCzpHTl1CD8IuNyPxxkViovoWORI+jt6Tv dOUyzSvD/GmC7Ekcox0gbuoOKx+RD5J6veQU0O/E4irnZBAb6lHKYXaxv2QENXQT KKwAcdCGBIi8Z9t0+Fp53Pb/ZE6GRSOChWkzI2FDvgJlWyvNcwIdM6kkd+rpAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUEgvnJ6ZiqLgaavghAvzVWxrIYO4wHwYDVR0j BBgwFoAUBog1ftQzwKYHcPtHS9sscnlreL0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMlhFaVJKTlVlVXd2ZWNYYjZNaHpNRGlNSlVvWWFlcjg3ajNxeWNqVGNX c3gvMC8wNjg4MzU3RUQ0MzNDMEE2MDc3MEZCNDc0QkRCMkM3Mjc5NkI3OEJELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA2ODgzNTdFRDQzM0MwQTYw NzcwRkI0NzRCREIyQzcyNzk2Qjc4QkQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MlhFaVJKTlVlVXd2ZWNYYjZNaHpNRGlNSlVvWWFlcjg3ajNxeWNqVGNXc3gvMC8w Njg4MzU3RUQ0MzNDMEE2MDc3MEZCNDc0QkRCMkM3Mjc5NkI3OEJELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcIRcaOTK4bcThhzEbKBOYJGv0CskNZoEWxpbKOWY/gzCWJrfhWyigxLsylSc vkyy6fsjTGIKL3jBBr1cULrkFLDqMpX1VubDx1jGKF/xN9nLTOcQGkTgxECjMp95 JujDaPhoZyz33c/Ceg8OB8Zfl1dm6nz9CesIdfEJAOXqE7z4zriW65KOY1XTGdWX P4RthZ/POp7FERkBFaAt0KNfnGRiW8Jfj60Cq6K2dQHQdB/6MlDOI1rUUl5cRQnD KXdSOzOt5xAphFkidNoPUA2ywoRd1GI339LP32tXAZLKSTfuY7fgFUrBrnl+Tpdh F4EeRbz42Crqs7F/32poLdIxcw== -----END CERTIFICATE-----Generated at Mon Mar 2 18:13:55 2026 by rpki-client