$ rpki-client -vvf rpki-repo.registro.br/repo/3As3Bd5oosFtNhQtDtxTwXztkwPAhcE1Jfq9rSB7buCh/0/9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.mft File: 9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.mft (raw, json) Hash identifier: x33Vr3pWwMIxudXcRw129fTBcnJhSkif3JcruhXdpCg= Subject key identifier: 32:FD:4D:11:BE:69:22:4C:E8:E9:9E:B5:C1:EB:31:40:4E:B5:A6:1D Authority key identifier: 9A:32:CD:91:FC:E9:CA:DB:F2:8B:ED:F4:C7:20:E6:7B:79:AF:B9:CC Certificate issuer: /CN=9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC Certificate serial: 3E213B0644C35310DE528543E61A4246B3F1A37B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.cer Subject info access: rsync://rpki-repo.registro.br/repo/3As3Bd5oosFtNhQtDtxTwXztkwPAhcE1Jfq9rSB7buCh/0/9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.mft Manifest number: 0210 Signing time: Mon 02 Mar 2026 00:52:20 +0000 Manifest this update: Mon 02 Mar 2026 00:47:20 +0000 Manifest next update: Tue 03 Mar 2026 04:26:20 +0000 Files and hashes: 1: 3137302e3234362e3138342e302f32322d3234203d3e20323634383830.roa (hash: K2cK3NZIFljKeOpvvpHj0lLcmC4oQ0tB2wi3PEj4Arg=) 2: 9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.crl (hash: oBHBcnsaOGH0AEJkkecs5DZvBbRMiaRlhKzNgdzxFxM=) 3: 3136382e3232372e35362e302f32322d3234203d3e20323634383830.roa (hash: cbbKnj2SOZFOPSYnm7IW0oAfYkFG8ZiF0WmU5IaJh4A=) 4: 323830343a326634303a3a2f33322d3438203d3e20323634383830.roa (hash: ORyxhMiPsLuMYUTUTFf1a5ZPgbN+I86oYsBHv0CQLjI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3As3Bd5oosFtNhQtDtxTwXztkwPAhcE1Jfq9rSB7buCh/0/9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.crl rsync://rpki-repo.registro.br/repo/3As3Bd5oosFtNhQtDtxTwXztkwPAhcE1Jfq9rSB7buCh/0/9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 03 Mar 2026 04:26:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:21:3b:06:44:c3:53:10:de:52:85:43:e6:1a:42:46:b3:f1:a3:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC Validity Not Before: Mar 2 00:47:20 2026 GMT Not After : Mar 3 04:26:20 2026 GMT Subject: CN=32FD4D11BE69224CE8E99EB5C1EB31404EB5A61D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:83:c5:5a:53:5c:7b:67:de:b6:8f:b1:b7:45: a1:ea:7c:78:3a:56:db:ae:b3:33:2b:fb:94:7d:88: aa:e9:42:ef:4e:42:68:71:84:6c:0f:d4:0f:3a:0f: 06:19:c9:14:93:2f:b1:4a:63:cc:bc:5b:64:e7:97: 0c:91:15:58:f3:58:03:ae:d2:31:49:02:9d:bd:b1: 3f:1a:e0:16:68:89:d1:a1:9c:1e:ee:d9:be:43:c7: 00:0f:72:7b:02:09:bf:69:8a:80:0e:ed:55:08:f9: a7:85:fd:7a:de:d8:89:e9:88:9d:06:3a:23:c3:39: 71:7a:1f:4e:ce:54:74:f5:57:8f:95:9a:5a:bf:16: cd:45:a2:18:ad:b0:81:4c:9e:ea:25:f9:cb:ee:04: 52:ad:de:4c:65:f7:28:21:d0:f0:45:64:52:59:67: 22:dd:c9:ca:fa:fc:5d:9a:8b:d6:1e:33:6f:2c:75: b5:f1:9b:d5:04:b6:c3:2b:c6:1c:d2:18:ad:8f:5e: 33:7e:da:d4:99:ad:1a:41:e2:00:a7:c4:3f:4d:65: ee:07:0c:c6:dd:89:2a:de:28:b7:28:6c:7d:f8:d2: 1e:75:f1:bf:5b:e7:62:cd:d6:13:2b:e8:81:94:aa: 2e:e2:bc:b9:f9:20:91:9d:06:98:0b:f2:3a:fe:12: 63:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:FD:4D:11:BE:69:22:4C:E8:E9:9E:B5:C1:EB:31:40:4E:B5:A6:1D X509v3 Authority Key Identifier: keyid:9A:32:CD:91:FC:E9:CA:DB:F2:8B:ED:F4:C7:20:E6:7B:79:AF:B9:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3As3Bd5oosFtNhQtDtxTwXztkwPAhcE1Jfq9rSB7buCh/0/9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3As3Bd5oosFtNhQtDtxTwXztkwPAhcE1Jfq9rSB7buCh/0/9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:f1:f8:2c:34:74:1a:5e:21:0e:dc:91:b2:a4:08:26:df:ea: 02:7f:5f:60:40:d3:b3:b4:cb:ff:aa:81:0a:84:0e:f1:c8:d9: 53:17:34:55:e3:f5:b8:44:02:b5:19:77:69:5a:2d:83:59:6b: c8:65:7b:7a:b7:4f:37:cd:65:af:12:77:f3:ff:1d:e1:33:fb: cd:9d:76:d9:88:1b:d3:db:98:c6:a2:7f:de:82:1a:7b:d5:ff: bb:5b:40:ba:e3:18:27:87:11:42:50:1e:2d:cc:10:bd:45:3a: 8e:45:0c:86:17:8e:bb:92:14:0f:b2:12:69:07:60:a9:ce:37: 8a:c9:a4:e1:25:be:dd:d1:61:4e:fa:62:fb:1c:6c:f7:fc:e7: de:eb:1e:97:8e:95:fd:91:fa:b6:11:a5:10:f7:6e:f1:cb:0e: ef:3d:38:67:72:04:04:2f:0a:0c:32:8e:02:a4:0a:d7:6c:61: bf:8d:de:e7:4f:e3:b7:18:17:16:5c:5a:72:6c:4d:c0:e4:b7: d7:bc:01:4f:a4:82:52:74:3a:b8:16:23:99:b1:42:bd:74:e9: ec:61:2a:67:66:a3:76:2f:9e:13:e5:f4:c8:f7:f8:df:1c:4e: 8d:90:39:ee:72:13:da:52:97:ed:cc:61:4c:66:ad:e3:c9:be: 72:94:66:35 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUPiE7BkTDUxDeUoVD5hpCRrPxo3swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUEzMkNEOTFGQ0U5Q0FEQkYyOEJFREY0QzcyMEU2N0I3 OUFGQjlDQzAeFw0yNjAzMDIwMDQ3MjBaFw0yNjAzMDMwNDI2MjBaMDMxMTAvBgNV BAMTKDMyRkQ0RDExQkU2OTIyNENFOEU5OUVCNUMxRUIzMTQwNEVCNUE2MUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrg8VaU1x7Z962j7G3RaHqfHg6 VtuuszMr+5R9iKrpQu9OQmhxhGwP1A86DwYZyRSTL7FKY8y8W2TnlwyRFVjzWAOu 0jFJAp29sT8a4BZoidGhnB7u2b5DxwAPcnsCCb9pioAO7VUI+aeF/Xre2InpiJ0G OiPDOXF6H07OVHT1V4+Vmlq/Fs1FohitsIFMnuol+cvuBFKt3kxl9ygh0PBFZFJZ ZyLdycr6/F2ai9YeM28sdbXxm9UEtsMrxhzSGK2PXjN+2tSZrRpB4gCnxD9NZe4H DMbdiSreKLcobH340h518b9b52LN1hMr6IGUqi7ivLn5IJGdBpgL8jr+EmOTAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUMv1NEb5pIkzo6Z61wesxQE61ph0wHwYDVR0j BBgwFoAUmjLNkfzpytvyi+30xyDme3mvucwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM0FzM0JkNW9vc0Z0TmhRdER0eFR3WHp0a3dQQWhjRTFKZnE5clNCN2J1 Q2gvMC85QTMyQ0Q5MUZDRTlDQURCRjI4QkVERjRDNzIwRTY3Qjc5QUZCOUNDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlBMzJDRDkxRkNFOUNBREJG MjhCRURGNEM3MjBFNjdCNzlBRkI5Q0MuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M0FzM0JkNW9vc0Z0TmhRdER0eFR3WHp0a3dQQWhjRTFKZnE5clNCN2J1Q2gvMC85 QTMyQ0Q5MUZDRTlDQURCRjI4QkVERjRDNzIwRTY3Qjc5QUZCOUNDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAffH4LDR0Gl4hDtyRsqQIJt/qAn9fYEDTs7TL/6qBCoQO8cjZUxc0VeP1uEQC tRl3aVotg1lryGV7erdPN81lrxJ38/8d4TP7zZ122Ygb09uYxqJ/3oIae9X/u1tA uuMYJ4cRQlAeLcwQvUU6jkUMhheOu5IUD7ISaQdgqc43ismk4SW+3dFhTvpi+xxs 9/zn3usel46V/ZH6thGlEPdu8csO7z04Z3IEBC8KDDKOAqQK12xhv43e50/jtxgX FlxacmxNwOS317wBT6SCUnQ6uBYjmbFCvXTp7GEqZ2ajdi+eE+X0yPf43xxOjZA5 7nIT2lKX7cxhTGat48m+cpRmNQ== -----END CERTIFICATE-----Generated at Mon Mar 2 19:46:17 2026 by rpki-client