$ rpki-client -vvf rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.mft File: 2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.mft (raw, json) Hash identifier: UxYAQCIfEmsK01KGShkMzSdRS8edWOco5s1KrV6FQAE= Subject key identifier: 42:7C:B0:C4:A2:CC:7A:99:3D:12:9C:E9:D9:BE:D2:8C:C4:30:73:3E Authority key identifier: 2C:9C:59:4E:93:6E:1E:28:AD:5A:D7:3A:6B:F2:8A:E3:8C:00:28:FB Certificate issuer: /CN=2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB Certificate serial: 6A74CA22EBCD97F04DFE1B15C2102D56F2E7DB32 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.cer Subject info access: rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.mft Manifest number: 03A1 Signing time: Mon 02 Mar 2026 19:30:53 +0000 Manifest this update: Mon 02 Mar 2026 19:25:53 +0000 Manifest next update: Tue 03 Mar 2026 21:05:53 +0000 Files and hashes: 1: 34352e3136342e3138382e302f32322d3234203d3e20323638363238.roa (hash: MFaOGmG3uk10MnFBlQJ/Pj6U7TcWeAadSbIdDIDPMAE=) 2: 3230382e35322e3136322e302f32332d3234203d3e20323638363238.roa (hash: maW2GNrI3AoqX8WFxWiMg/YOqECnU1fsdQA4kdJdduU=) 3: 323830343a353431383a3a2f33322d3438203d3e20323638363238.roa (hash: hHMhRh5DdSaR5fzUNnHJawbPKzBIyAZaoDmsUo8IWgk=) 4: 2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.crl (hash: 03IXCsous+rxTmJI46TmZIukikA7tAuPtwe1UKwgseo=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.crl rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 03 Mar 2026 21:05:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:74:ca:22:eb:cd:97:f0:4d:fe:1b:15:c2:10:2d:56:f2:e7:db:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB Validity Not Before: Mar 2 19:25:53 2026 GMT Not After : Mar 3 21:05:53 2026 GMT Subject: CN=427CB0C4A2CC7A993D129CE9D9BED28CC430733E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:24:c9:33:03:c3:86:c9:0f:66:d3:d2:aa:44: 57:30:54:16:62:45:ae:93:44:52:b6:f1:ce:4a:c9: 0e:79:6f:0d:a7:e5:5c:7d:8d:51:24:5e:f4:8a:9e: 89:14:a8:a2:80:c6:bd:3d:4d:7c:2d:a3:99:61:1f: 28:1c:f1:ae:06:69:34:d1:50:94:c3:e0:84:58:a0: ae:57:9f:fa:ed:28:1a:c8:04:e5:35:1e:05:10:3f: f9:e8:fd:d9:d5:71:cd:27:bc:1f:62:57:8a:b1:9c: 2c:13:90:b6:27:c7:fb:6b:a1:33:0f:2a:ea:a0:b3: a7:f2:a0:22:ec:2a:0b:c7:e5:8e:fc:3e:02:03:d9: 6b:2f:a2:09:3e:7d:c4:41:c7:a2:29:89:14:8c:48: 63:ae:ba:6d:e3:69:71:58:6d:d8:15:cc:74:fd:21: b5:3b:cb:a2:cc:6e:95:b8:bf:c8:08:cb:b9:2c:2d: 58:1e:33:8b:04:3b:12:11:db:be:f9:b8:6b:33:99: a6:d0:83:2f:93:91:e2:b4:26:99:78:2a:de:9a:8e: d6:54:5a:ca:62:a5:40:a7:04:73:f1:74:98:bf:ef: eb:e5:11:05:1b:9e:5d:cf:83:01:db:08:be:de:fb: 37:8d:a6:09:ad:07:38:51:f3:a2:a3:4d:64:39:2d: b8:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:7C:B0:C4:A2:CC:7A:99:3D:12:9C:E9:D9:BE:D2:8C:C4:30:73:3E X509v3 Authority Key Identifier: keyid:2C:9C:59:4E:93:6E:1E:28:AD:5A:D7:3A:6B:F2:8A:E3:8C:00:28:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:53:28:a5:88:27:8c:ec:81:02:fc:dd:75:a1:b3:31:3c:ef: fd:b5:fe:4f:82:83:e8:dd:8a:55:b0:f5:a1:e0:b6:2f:2e:a0: e7:d8:01:2c:13:52:83:12:62:d7:1a:3b:1a:e0:e3:71:e4:c3: 06:7f:ed:b8:ec:a3:83:af:d5:ab:dc:1d:4e:e7:9d:0f:a2:f1: 5a:5e:2a:43:57:76:da:38:12:2c:3a:63:9f:88:f7:cb:08:76: b9:af:32:0b:68:b3:a7:73:68:10:31:7f:c3:ff:3b:d7:54:26: e9:64:38:31:e7:4d:fe:8d:c3:39:48:09:be:c2:2d:a1:a4:6a: 8a:ac:62:88:35:57:35:e6:4a:8f:4a:1b:b6:e8:f3:ce:22:2c: 2c:c3:11:fd:ab:1e:4a:a4:c9:f2:16:9b:c9:21:7e:21:40:c1: 4c:47:47:33:3c:f7:bd:ad:4f:0f:5e:10:43:4f:50:ae:60:63: 62:fe:84:e0:a6:69:b9:6e:00:e2:91:cf:31:29:30:ce:8d:d9: 6b:c5:51:69:de:93:fb:93:28:d0:20:e8:41:53:be:3b:e7:9e: bd:94:8f:9f:b7:fa:fd:dc:a7:2e:04:6f:3b:30:83:c7:1f:69: 53:77:b9:ec:47:d5:82:21:e7:ce:47:36:65:fb:e5:b9:22:22: 7c:70:49:37 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUanTKIuvNl/BN/hsVwhAtVvLn2zIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkM5QzU5NEU5MzZFMUUyOEFENUFENzNBNkJGMjhBRTM4 QzAwMjhGQjAeFw0yNjAzMDIxOTI1NTNaFw0yNjAzMDMyMTA1NTNaMDMxMTAvBgNV BAMTKDQyN0NCMEM0QTJDQzdBOTkzRDEyOUNFOUQ5QkVEMjhDQzQzMDczM0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4JMkzA8OGyQ9m09KqRFcwVBZi Ra6TRFK28c5KyQ55bw2n5Vx9jVEkXvSKnokUqKKAxr09TXwto5lhHygc8a4GaTTR UJTD4IRYoK5Xn/rtKBrIBOU1HgUQP/no/dnVcc0nvB9iV4qxnCwTkLYnx/troTMP Kuqgs6fyoCLsKgvH5Y78PgID2Wsvogk+fcRBx6IpiRSMSGOuum3jaXFYbdgVzHT9 IbU7y6LMbpW4v8gIy7ksLVgeM4sEOxIR2775uGszmabQgy+TkeK0Jpl4Kt6ajtZU WspipUCnBHPxdJi/7+vlEQUbnl3PgwHbCL7e+zeNpgmtBzhR86KjTWQ5LbjTAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUQnywxKLMepk9Epzp2b7SjMQwcz4wHwYDVR0j BBgwFoAULJxZTpNuHiitWtc6a/KK44wAKPswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM0JGYkRCRWdadVRnY1k5NmFvQzNNZGlkN0JFOHJqamlwZ3luTDNpbXpy aEEvMS8yQzlDNTk0RTkzNkUxRTI4QUQ1QUQ3M0E2QkYyOEFFMzhDMDAyOEZCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJDOUM1OTRFOTM2RTFFMjhB RDVBRDczQTZCRjI4QUUzOEMwMDI4RkIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M0JGYkRCRWdadVRnY1k5NmFvQzNNZGlkN0JFOHJqamlwZ3luTDNpbXpyaEEvMS8y QzlDNTk0RTkzNkUxRTI4QUQ1QUQ3M0E2QkYyOEFFMzhDMDAyOEZCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAR1MopYgnjOyBAvzddaGzMTzv/bX+T4KD6N2KVbD1oeC2Ly6g59gBLBNSgxJi 1xo7GuDjceTDBn/tuOyjg6/Vq9wdTuedD6LxWl4qQ1d22jgSLDpjn4j3ywh2ua8y C2izp3NoEDF/w/8711Qm6WQ4MedN/o3DOUgJvsItoaRqiqxiiDVXNeZKj0obtujz ziIsLMMR/aseSqTJ8habySF+IUDBTEdHMzz3va1PD14QQ09QrmBjYv6E4KZpuW4A 4pHPMSkwzo3Za8VRad6T+5Mo0CDoQVO+O+eevZSPn7f6/dynLgRvOzCDxx9pU3e5 7EfVgiHnzkc2ZfvluSIifHBJNw== -----END CERTIFICATE-----Generated at Mon Mar 2 21:31:22 2026 by rpki-client