$ rpki-client -vvf rpki-repo.registro.br/repo/2mjfsoNSv6ZwzyhVwSHNu7MAGVK6Nzf7UW7BY5QiJmqd/0/35248DE460997A8581D1487D69B81A4E42C335CA.mft File: 35248DE460997A8581D1487D69B81A4E42C335CA.mft (raw, json) Hash identifier: miJmRRX5VsLOELyEPVljYlsy3OemcRvIKMVBWltwVMI= Subject key identifier: 52:5A:04:AD:41:98:5C:F9:A5:7B:86:6C:55:04:C5:FA:5E:F7:B1:E0 Authority key identifier: 35:24:8D:E4:60:99:7A:85:81:D1:48:7D:69:B8:1A:4E:42:C3:35:CA Certificate issuer: /CN=35248DE460997A8581D1487D69B81A4E42C335CA Certificate serial: 3DCF731508E75A02EB36D68D56C0F1ADC797BD93 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35248DE460997A8581D1487D69B81A4E42C335CA.cer Subject info access: rsync://rpki-repo.registro.br/repo/2mjfsoNSv6ZwzyhVwSHNu7MAGVK6Nzf7UW7BY5QiJmqd/0/35248DE460997A8581D1487D69B81A4E42C335CA.mft Manifest number: 23 Signing time: Sun 01 Mar 2026 05:44:49 +0000 Manifest this update: Sun 01 Mar 2026 05:39:49 +0000 Manifest next update: Mon 02 Mar 2026 05:51:49 +0000 Files and hashes: 1: 3138372e38352e3131322e302f32302d3234203d3e203238363134.roa (hash: FaqrQSQJkJCZU7KxdhjflnRa9D9SVyFcZ4poz9uuPOs=) 2: 3230312e35342e3139322e302f32302d3234203d3e203238363134.roa (hash: yDMQTcJu0ejDP3FNPU5F/BzEVk7TOhSglt/8DutaxJU=) 3: 323830313a38303a333536303a3a2f34342d3434203d3e203238363134.roa (hash: ypeV32b1Sy6ARUihKyKTjFedSszUpvnfcQywV7flPEA=) 4: 35248DE460997A8581D1487D69B81A4E42C335CA.crl (hash: 1Ij9FX0hKaJrVkW5ACNH3ftTGAacUmmf0S1vfQjDMrw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2mjfsoNSv6ZwzyhVwSHNu7MAGVK6Nzf7UW7BY5QiJmqd/0/35248DE460997A8581D1487D69B81A4E42C335CA.crl rsync://rpki-repo.registro.br/repo/2mjfsoNSv6ZwzyhVwSHNu7MAGVK6Nzf7UW7BY5QiJmqd/0/35248DE460997A8581D1487D69B81A4E42C335CA.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35248DE460997A8581D1487D69B81A4E42C335CA.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 02 Mar 2026 05:51:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:cf:73:15:08:e7:5a:02:eb:36:d6:8d:56:c0:f1:ad:c7:97:bd:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35248DE460997A8581D1487D69B81A4E42C335CA Validity Not Before: Mar 1 05:39:49 2026 GMT Not After : Mar 2 05:51:49 2026 GMT Subject: CN=525A04AD41985CF9A57B866C5504C5FA5EF7B1E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:48:b6:fa:d6:0b:4e:d7:ac:65:34:ec:d3:1f: 76:ca:9e:8a:da:f3:ab:24:f8:4a:40:dc:0d:f5:3c: 91:43:9f:73:92:be:91:76:a9:46:d8:61:7b:fd:04: 58:29:23:3e:39:99:90:53:6a:15:30:16:1b:94:8c: c6:83:f6:15:0c:1f:90:f9:a2:37:d9:fc:43:f6:e1: b0:04:dd:24:42:f7:cc:9f:3b:5b:8e:18:d3:37:c3: a2:ec:9a:33:3f:36:be:04:d5:23:75:95:d1:25:1c: b8:0a:36:bc:91:31:c5:04:bc:d9:1f:bf:d1:92:83: 79:d0:7d:76:de:00:4e:79:bb:7d:89:13:8b:cb:f4: 24:17:2c:fc:f7:e9:f9:3d:7e:8d:3c:3d:01:de:9d: c4:27:95:48:97:7b:42:2a:2d:5b:6c:11:db:d6:f4: 75:6f:ab:c5:76:24:43:54:62:a5:91:27:dc:11:1e: af:aa:8b:ad:96:79:94:4a:ca:48:0e:a8:a7:fd:1f: 46:24:7e:e9:35:87:28:12:8d:f2:50:ba:27:a3:da: 74:4b:c2:f3:7d:4c:72:a7:b7:cd:5c:76:e0:5a:ae: a3:7d:f7:15:02:6f:8c:a9:9f:e4:6b:34:30:4d:73: bb:17:67:56:c8:5b:3c:bd:a2:98:02:e5:4e:37:2e: 12:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:5A:04:AD:41:98:5C:F9:A5:7B:86:6C:55:04:C5:FA:5E:F7:B1:E0 X509v3 Authority Key Identifier: keyid:35:24:8D:E4:60:99:7A:85:81:D1:48:7D:69:B8:1A:4E:42:C3:35:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2mjfsoNSv6ZwzyhVwSHNu7MAGVK6Nzf7UW7BY5QiJmqd/0/35248DE460997A8581D1487D69B81A4E42C335CA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35248DE460997A8581D1487D69B81A4E42C335CA.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2mjfsoNSv6ZwzyhVwSHNu7MAGVK6Nzf7UW7BY5QiJmqd/0/35248DE460997A8581D1487D69B81A4E42C335CA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:ba:ff:9f:45:0d:ec:fd:51:48:89:30:00:0c:02:05:03:55: d8:d0:94:ab:4d:0a:0a:c0:9a:00:72:37:fd:8b:fa:91:d6:be: 0a:f1:d3:61:ed:02:75:ee:a5:d5:2a:1f:32:45:88:fc:16:18: 4e:da:92:7e:60:82:d5:02:56:7a:35:37:76:01:f2:c7:ca:83: 29:2d:85:c8:01:af:ff:04:6c:5f:73:4e:b8:29:91:bf:80:3c: 57:ca:5f:f4:a8:5f:52:59:34:47:f8:fd:13:a3:80:1f:b1:c5: 2f:a8:14:61:51:64:63:49:50:4e:55:96:83:35:a9:04:2f:bc: 3c:c9:e0:87:d3:68:30:f7:5f:aa:b5:0e:84:72:be:ed:fe:1b: cd:87:88:c5:ec:85:c6:98:0c:c7:c1:7f:61:81:62:1f:97:7a: 8e:ae:09:f8:31:d7:63:d2:55:6c:36:4a:b2:ef:29:97:79:41: 51:d2:37:28:21:85:14:a2:e9:ec:49:ca:00:ef:c1:ed:9e:87: 68:46:74:46:5a:6e:6d:46:6e:9e:d3:59:d2:e1:ac:e4:8a:da: f2:d2:e0:48:89:80:c4:bb:81:b3:b4:f9:5f:17:e5:96:04:df: 80:5a:98:ed:32:8f:80:21:3e:47:3f:c3:9f:8a:6e:3a:2a:ce: a4:5a:94:10 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUPc9zFQjnWgLrNtaNVsDxrceXvZMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzUyNDhERTQ2MDk5N0E4NTgxRDE0ODdENjlCODFBNEU0 MkMzMzVDQTAeFw0yNjAzMDEwNTM5NDlaFw0yNjAzMDIwNTUxNDlaMDMxMTAvBgNV BAMTKDUyNUEwNEFENDE5ODVDRjlBNTdCODY2QzU1MDRDNUZBNUVGN0IxRTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfSLb61gtO16xlNOzTH3bKnora 86sk+EpA3A31PJFDn3OSvpF2qUbYYXv9BFgpIz45mZBTahUwFhuUjMaD9hUMH5D5 ojfZ/EP24bAE3SRC98yfO1uOGNM3w6LsmjM/Nr4E1SN1ldElHLgKNryRMcUEvNkf v9GSg3nQfXbeAE55u32JE4vL9CQXLPz36fk9fo08PQHencQnlUiXe0IqLVtsEdvW 9HVvq8V2JENUYqWRJ9wRHq+qi62WeZRKykgOqKf9H0Ykfuk1hygSjfJQuiej2nRL wvN9THKnt81cduBarqN99xUCb4ypn+RrNDBNc7sXZ1bIWzy9opgC5U43LhIJAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUUloErUGYXPmle4ZsVQTF+l73seAwHwYDVR0j BBgwFoAUNSSN5GCZeoWB0Uh9abgaTkLDNcowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMm1qZnNvTlN2Nlp3enloVndTSE51N01BR1ZLNk56ZjdVVzdCWTVRaUpt cWQvMC8zNTI0OERFNDYwOTk3QTg1ODFEMTQ4N0Q2OUI4MUE0RTQyQzMzNUNBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM1MjQ4REU0NjA5OTdBODU4 MUQxNDg3RDY5QjgxQTRFNDJDMzM1Q0EuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Mm1qZnNvTlN2Nlp3enloVndTSE51N01BR1ZLNk56ZjdVVzdCWTVRaUptcWQvMC8z NTI0OERFNDYwOTk3QTg1ODFEMTQ4N0Q2OUI4MUE0RTQyQzMzNUNBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEASLr/n0UN7P1RSIkwAAwCBQNV2NCUq00KCsCaAHI3/Yv6kda+CvHTYe0Cde6l 1SofMkWI/BYYTtqSfmCC1QJWejU3dgHyx8qDKS2FyAGv/wRsX3NOuCmRv4A8V8pf 9KhfUlk0R/j9E6OAH7HFL6gUYVFkY0lQTlWWgzWpBC+8PMngh9NoMPdfqrUOhHK+ 7f4bzYeIxeyFxpgMx8F/YYFiH5d6jq4J+DHXY9JVbDZKsu8pl3lBUdI3KCGFFKLp 7EnKAO/B7Z6HaEZ0RlpubUZuntNZ0uGs5Ira8tLgSImAxLuBs7T5XxfllgTfgFqY 7TKPgCE+Rz/Dn4puOirOpFqUEA== -----END CERTIFICATE-----Generated at Sun Mar 1 21:06:59 2026 by rpki-client