$ rpki-client -vvf rpki-repo.registro.br/repo/2riT5sd2VqWFybDfr6r2gBHdkgHSAF1DmFPMWSkhHG1f/0/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.mft File: F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.mft (raw, json) Hash identifier: 1mLkjUgeFfu0/pBRKFvSlx14OYuDVm61ycYgGm5tL8w= Subject key identifier: 9B:4D:84:BF:9B:84:C9:BA:83:D3:BF:4E:69:00:B1:CA:37:8C:B8:3A Authority key identifier: F4:20:AE:63:ED:99:12:4F:7D:3F:14:B8:FA:9C:1F:F3:78:00:67:C2 Certificate issuer: /CN=F420AE63ED99124F7D3F14B8FA9C1FF3780067C2 Certificate serial: 3126EE174A95D6266F0299C38E8A6D5937D1FC75 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.cer Subject info access: rsync://rpki-repo.registro.br/repo/2riT5sd2VqWFybDfr6r2gBHdkgHSAF1DmFPMWSkhHG1f/0/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.mft Manifest number: 03A3 Signing time: Sun 01 Mar 2026 03:42:44 +0000 Manifest this update: Sun 01 Mar 2026 03:37:44 +0000 Manifest next update: Mon 02 Mar 2026 05:09:44 +0000 Files and hashes: 1: 323830343a346335633a3a2f33322d3438203d3e20323637333636.roa (hash: aBuDzalJjtN6QjODimHKIqdgYVt/ZmaeAC/ItTdnYZs=) 2: 34352e3233342e3133322e302f32322d3332203d3e20323637333636.roa (hash: YRwpO+qV9F49NAjD4t6i+dZs654OmXK5qpgT8nKdEac=) 3: F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.crl (hash: 4nbwleEZ3RiLuZTYPE21eBa4fGkkVJa0aaHvpIT6cPA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2riT5sd2VqWFybDfr6r2gBHdkgHSAF1DmFPMWSkhHG1f/0/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.crl rsync://rpki-repo.registro.br/repo/2riT5sd2VqWFybDfr6r2gBHdkgHSAF1DmFPMWSkhHG1f/0/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 02 Mar 2026 05:09:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:26:ee:17:4a:95:d6:26:6f:02:99:c3:8e:8a:6d:59:37:d1:fc:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F420AE63ED99124F7D3F14B8FA9C1FF3780067C2 Validity Not Before: Mar 1 03:37:44 2026 GMT Not After : Mar 2 05:09:44 2026 GMT Subject: CN=9B4D84BF9B84C9BA83D3BF4E6900B1CA378CB83A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:2e:a7:aa:ac:b6:93:49:25:af:9c:42:c3:be: 7d:26:c1:4e:af:64:07:85:1f:29:fe:ba:cd:be:80: 8b:e0:c8:ae:06:d4:8e:63:48:16:2e:63:9b:e4:d0: bf:5b:ee:3f:bc:6b:46:db:76:2f:9b:35:05:c3:b7: b6:d1:2a:0d:0b:6c:c0:d0:5d:15:fd:95:26:5f:56: de:31:d1:b4:f6:02:aa:de:b8:d4:8f:26:ef:1d:2d: 71:aa:c9:cf:64:85:75:93:6b:8f:95:71:14:70:6f: 0f:3a:0a:11:c2:93:3d:ea:2e:1b:55:aa:6d:c2:d2: 8f:c9:a2:9e:07:4a:f1:2d:1d:b7:32:96:fa:5b:0f: 90:05:f5:73:db:3d:de:ea:15:42:40:f2:eb:6f:91: fa:39:7e:d5:24:ad:c5:97:57:10:74:bd:c8:64:83: e4:d7:84:f7:99:41:65:57:a8:1b:28:41:73:28:3b: 3b:36:04:18:e1:81:4b:92:cb:15:3e:b8:56:65:b6: b0:3f:24:d4:0e:db:3e:09:74:14:8e:81:72:09:c0: e0:b2:97:32:a9:1d:f5:9c:40:64:eb:23:ac:f3:9b: e6:a8:f7:36:62:a5:b7:86:1d:23:2a:1a:2e:e7:c8: fb:5a:cb:c9:cb:11:0d:31:cc:bd:04:f2:d1:94:fe: 48:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:4D:84:BF:9B:84:C9:BA:83:D3:BF:4E:69:00:B1:CA:37:8C:B8:3A X509v3 Authority Key Identifier: keyid:F4:20:AE:63:ED:99:12:4F:7D:3F:14:B8:FA:9C:1F:F3:78:00:67:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2riT5sd2VqWFybDfr6r2gBHdkgHSAF1DmFPMWSkhHG1f/0/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2riT5sd2VqWFybDfr6r2gBHdkgHSAF1DmFPMWSkhHG1f/0/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:b0:1e:48:bb:ff:5c:0e:21:4f:25:ac:b4:8d:64:cb:5b:92: 9b:dd:b5:ee:9b:dd:91:e4:7d:a1:36:a6:5b:14:82:84:6e:bc: c9:7e:ef:86:f5:e9:ec:84:87:2e:57:90:d2:65:bc:6e:2d:3c: 98:f8:f4:de:63:22:05:83:d4:a8:b4:ed:2a:20:36:8b:98:8d: 02:bb:c4:50:62:ac:c2:60:cb:a3:05:31:5b:4b:39:29:54:ae: 6e:62:a3:52:4d:75:b8:07:18:84:c6:c7:4e:e1:e7:f4:d9:4b: cf:1a:aa:10:60:ee:97:b1:38:99:af:83:fe:39:83:1b:63:5f: ec:d9:bd:dd:28:bf:e3:53:d4:3d:e5:15:ad:32:cc:a1:a0:05: 8b:95:3b:cd:2a:86:41:51:0f:f3:ba:5e:6d:d6:3c:bb:d1:92: 7a:22:46:35:19:0d:42:5d:29:ee:e1:a1:df:41:8b:d0:93:e3: 72:7f:72:9d:5a:2b:e9:5d:a8:df:d3:07:7b:b3:9d:39:46:6c: 11:e0:b9:05:0e:12:21:c4:22:a2:77:da:b5:fa:ac:d4:c1:79: 32:6d:ca:49:7c:ed:f7:9e:2a:1f:b5:79:83:74:a0:33:9f:ea: 16:4e:51:fc:6b:2f:e1:ea:7b:f4:ae:8b:64:9f:9a:8b:35:7c: ae:3e:85:b3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUMSbuF0qV1iZvApnDjoptWTfR/HUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjQyMEFFNjNFRDk5MTI0RjdEM0YxNEI4RkE5QzFGRjM3 ODAwNjdDMjAeFw0yNjAzMDEwMzM3NDRaFw0yNjAzMDIwNTA5NDRaMDMxMTAvBgNV BAMTKDlCNEQ4NEJGOUI4NEM5QkE4M0QzQkY0RTY5MDBCMUNBMzc4Q0I4M0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFLqeqrLaTSSWvnELDvn0mwU6v ZAeFHyn+us2+gIvgyK4G1I5jSBYuY5vk0L9b7j+8a0bbdi+bNQXDt7bRKg0LbMDQ XRX9lSZfVt4x0bT2AqreuNSPJu8dLXGqyc9khXWTa4+VcRRwbw86ChHCkz3qLhtV qm3C0o/Jop4HSvEtHbcylvpbD5AF9XPbPd7qFUJA8utvkfo5ftUkrcWXVxB0vchk g+TXhPeZQWVXqBsoQXMoOzs2BBjhgUuSyxU+uFZltrA/JNQO2z4JdBSOgXIJwOCy lzKpHfWcQGTrI6zzm+ao9zZipbeGHSMqGi7nyPtay8nLEQ0xzL0E8tGU/kgdAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUm02Ev5uEybqD079OaQCxyjeMuDowHwYDVR0j BBgwFoAU9CCuY+2ZEk99PxS4+pwf83gAZ8IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMnJpVDVzZDJWcVdGeWJEZnI2cjJnQkhka2dIU0FGMURtRlBNV1NraEhH MWYvMC9GNDIwQUU2M0VEOTkxMjRGN0QzRjE0QjhGQTlDMUZGMzc4MDA2N0MyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y0MjBBRTYzRUQ5OTEyNEY3 RDNGMTRCOEZBOUMxRkYzNzgwMDY3QzIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MnJpVDVzZDJWcVdGeWJEZnI2cjJnQkhka2dIU0FGMURtRlBNV1NraEhHMWYvMC9G NDIwQUU2M0VEOTkxMjRGN0QzRjE0QjhGQTlDMUZGMzc4MDA2N0MyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAg7AeSLv/XA4hTyWstI1ky1uSm9217pvdkeR9oTamWxSChG68yX7vhvXp7ISH LleQ0mW8bi08mPj03mMiBYPUqLTtKiA2i5iNArvEUGKswmDLowUxW0s5KVSubmKj Uk11uAcYhMbHTuHn9NlLzxqqEGDul7E4ma+D/jmDG2Nf7Nm93Si/41PUPeUVrTLM oaAFi5U7zSqGQVEP87pebdY8u9GSeiJGNRkNQl0p7uGh30GL0JPjcn9ynVor6V2o 39MHe7OdOUZsEeC5BQ4SIcQionfatfqs1MF5Mm3KSXzt954qH7V5g3SgM5/qFk5R /Gsv4ep79K6LZJ+aizV8rj6Fsw== -----END CERTIFICATE-----Generated at Sun Mar 1 21:13:22 2026 by rpki-client