$ rpki-client -vvf rpki-repo.registro.br/repo/3HqqyEHkoWjmW8pPbpUHueeSZnwddKiEQEHTmyZ1eEJL/0/D140329A9C2C7F8EF67D07AE6978FCF2C257CBDC.mft File: D140329A9C2C7F8EF67D07AE6978FCF2C257CBDC.mft (raw, json) Hash identifier: qtoAFWLrESowEUg55u37J1z9LjwEL3IIEDk3Tf8BuTE= Subject key identifier: A4:BF:42:F7:A7:88:5E:81:39:18:9C:BC:12:68:2D:76:83:E2:04:9F Authority key identifier: D1:40:32:9A:9C:2C:7F:8E:F6:7D:07:AE:69:78:FC:F2:C2:57:CB:DC Certificate issuer: /CN=D140329A9C2C7F8EF67D07AE6978FCF2C257CBDC Certificate serial: 5CECBA47E4F48B354675E27D7A446BB6C923163E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D140329A9C2C7F8EF67D07AE6978FCF2C257CBDC.cer Subject info access: rsync://rpki-repo.registro.br/repo/3HqqyEHkoWjmW8pPbpUHueeSZnwddKiEQEHTmyZ1eEJL/0/D140329A9C2C7F8EF67D07AE6978FCF2C257CBDC.mft Manifest number: FE Signing time: Mon 02 Mar 2026 16:42:48 +0000 Manifest this update: Mon 02 Mar 2026 16:37:48 +0000 Manifest next update: Tue 03 Mar 2026 17:30:48 +0000 Files and hashes: 1: 3139302e392e3132362e302f32342d3332203d3e20323731353936.roa (hash: uGWB+dLXvJyRVohmeQH5EDKbrZFb7329DIF62AsG+G4=) 2: 323830343a376530303a3a2f33322d313238203d3e20323731353936.roa (hash: atkpFiuFx9gI+NQUYhUM8BLIYtiVv1QBW1r3n1UGNww=) 3: D140329A9C2C7F8EF67D07AE6978FCF2C257CBDC.crl (hash: ZYOdQpOJIm1uA+h0vHKtfd5kx0LxVhVS9Fcawm3958c=) 4: 3133382e39392e38302e302f32332d3332203d3e20323731353936.roa (hash: HLRC3ILU1/Q0mbHQEP1oVDDagjnMAzt8TFJhqxGdn2k=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3HqqyEHkoWjmW8pPbpUHueeSZnwddKiEQEHTmyZ1eEJL/0/D140329A9C2C7F8EF67D07AE6978FCF2C257CBDC.crl rsync://rpki-repo.registro.br/repo/3HqqyEHkoWjmW8pPbpUHueeSZnwddKiEQEHTmyZ1eEJL/0/D140329A9C2C7F8EF67D07AE6978FCF2C257CBDC.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D140329A9C2C7F8EF67D07AE6978FCF2C257CBDC.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 03 Mar 2026 17:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:ec:ba:47:e4:f4:8b:35:46:75:e2:7d:7a:44:6b:b6:c9:23:16:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D140329A9C2C7F8EF67D07AE6978FCF2C257CBDC Validity Not Before: Mar 2 16:37:48 2026 GMT Not After : Mar 3 17:30:48 2026 GMT Subject: CN=A4BF42F7A7885E8139189CBC12682D7683E2049F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:76:96:b3:d6:91:b8:12:94:4b:cb:e6:bb:2a: 80:b0:eb:78:68:55:97:55:12:6f:4d:24:ac:e5:21: 8b:0d:45:ab:bf:61:34:6f:8b:ca:6c:ff:1d:b4:d7: 45:cb:28:80:f2:a8:4f:40:3f:39:70:a8:d7:7a:19: ad:d3:79:fd:3e:a5:12:c1:d0:a9:2e:d2:f4:15:95: aa:63:75:3a:7f:c7:59:c9:0c:62:e2:ad:f1:26:1d: 1d:e3:2d:a1:01:f9:60:66:2d:3b:8b:9b:83:61:5a: a2:86:12:77:5f:3b:df:4d:3c:a4:82:1e:43:74:76: f1:f4:4a:b6:60:f7:1d:6a:48:f9:c4:77:c6:3d:16: c9:df:d5:7d:5b:5a:67:f5:31:1c:4f:30:ce:52:06: cd:53:02:83:c5:83:db:b7:87:8c:ac:2e:fc:25:2a: 84:6d:d4:0b:96:c3:63:53:54:a1:ee:ee:f0:f1:2a: 43:32:49:3f:a7:82:9e:19:e7:5a:3c:11:2b:a2:17: 4f:cd:41:16:b7:b8:a4:e5:c0:6e:09:69:85:a7:17: 1e:6e:28:5e:57:d2:4a:62:77:e6:16:91:65:4a:76: 13:10:6d:55:04:55:b5:33:69:49:6e:c9:6f:f9:a2: 24:6d:6a:98:e3:2b:5d:b6:43:f2:ef:27:ec:ff:7d: 2d:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:BF:42:F7:A7:88:5E:81:39:18:9C:BC:12:68:2D:76:83:E2:04:9F X509v3 Authority Key Identifier: keyid:D1:40:32:9A:9C:2C:7F:8E:F6:7D:07:AE:69:78:FC:F2:C2:57:CB:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3HqqyEHkoWjmW8pPbpUHueeSZnwddKiEQEHTmyZ1eEJL/0/D140329A9C2C7F8EF67D07AE6978FCF2C257CBDC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D140329A9C2C7F8EF67D07AE6978FCF2C257CBDC.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3HqqyEHkoWjmW8pPbpUHueeSZnwddKiEQEHTmyZ1eEJL/0/D140329A9C2C7F8EF67D07AE6978FCF2C257CBDC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:16:31:8a:f4:45:03:1e:ee:17:51:b4:71:5a:f7:b6:f1:2d: 46:83:1c:94:8f:e8:74:ec:40:91:37:be:69:f3:28:91:31:61: 03:f3:6a:d2:8c:c6:82:5f:fc:4f:d6:7b:b0:a9:19:3c:36:54: 14:ba:3a:06:ae:69:af:b5:57:e6:e6:b2:81:3e:7b:20:34:23: d0:94:f6:c3:bf:6f:d1:38:52:ac:85:cc:e5:c9:3c:70:06:f9: ec:ef:b5:b9:a1:8a:59:b4:f9:ad:96:93:59:23:71:50:7f:40: 11:c7:be:5c:97:18:ed:c1:df:77:e8:fe:3c:aa:98:a3:99:ef: e2:c6:9f:2f:1d:a2:f5:0e:5e:4d:c9:c0:ce:a5:c4:0b:ba:f8: 88:b6:e7:80:d6:04:f1:0d:85:ea:77:3b:93:b1:c2:68:81:ed: 7e:69:3f:83:e6:37:89:e6:cd:60:98:25:14:0c:a7:4d:8f:22: dc:d6:52:35:1c:d8:9f:a8:c1:0a:f7:3f:c5:63:7e:c5:86:f5: c0:b4:49:a9:e5:b2:4e:7d:7a:a7:43:8d:5a:ca:b1:77:78:55: 75:59:18:73:23:52:c5:2f:b1:4d:e2:89:3a:b0:d7:f2:cb:09: 16:35:28:6d:53:43:93:05:e4:db:09:7d:76:66:f6:ef:8c:6f: fd:ba:a4:fc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUXOy6R+T0izVGdeJ9ekRrtskjFj4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDE0MDMyOUE5QzJDN0Y4RUY2N0QwN0FFNjk3OEZDRjJD MjU3Q0JEQzAeFw0yNjAzMDIxNjM3NDhaFw0yNjAzMDMxNzMwNDhaMDMxMTAvBgNV BAMTKEE0QkY0MkY3QTc4ODVFODEzOTE4OUNCQzEyNjgyRDc2ODNFMjA0OUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbdpaz1pG4EpRLy+a7KoCw63ho VZdVEm9NJKzlIYsNRau/YTRvi8ps/x2010XLKIDyqE9APzlwqNd6Ga3Tef0+pRLB 0Kku0vQVlapjdTp/x1nJDGLirfEmHR3jLaEB+WBmLTuLm4NhWqKGEndfO99NPKSC HkN0dvH0SrZg9x1qSPnEd8Y9Fsnf1X1bWmf1MRxPMM5SBs1TAoPFg9u3h4ysLvwl KoRt1AuWw2NTVKHu7vDxKkMyST+ngp4Z51o8ESuiF0/NQRa3uKTlwG4JaYWnFx5u KF5X0kpid+YWkWVKdhMQbVUEVbUzaUluyW/5oiRtapjjK122Q/LvJ+z/fS33AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUpL9C96eIXoE5GJy8EmgtdoPiBJ8wHwYDVR0j BBgwFoAU0UAympwsf472fQeuaXj88sJXy9wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM0hxcXlFSGtvV2ptVzhwUGJwVUh1ZWVTWm53ZGRLaUVRRUhUbXlaMWVF SkwvMC9EMTQwMzI5QTlDMkM3RjhFRjY3RDA3QUU2OTc4RkNGMkMyNTdDQkRDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QxNDAzMjlBOUMyQzdGOEVG NjdEMDdBRTY5NzhGQ0YyQzI1N0NCREMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M0hxcXlFSGtvV2ptVzhwUGJwVUh1ZWVTWm53ZGRLaUVRRUhUbXlaMWVFSkwvMC9E MTQwMzI5QTlDMkM3RjhFRjY3RDA3QUU2OTc4RkNGMkMyNTdDQkRDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEhYxivRFAx7uF1G0cVr3tvEtRoMclI/odOxAkTe+afMokTFhA/Nq0ozGgl/8 T9Z7sKkZPDZUFLo6Bq5pr7VX5uaygT57IDQj0JT2w79v0ThSrIXM5ck8cAb57O+1 uaGKWbT5rZaTWSNxUH9AEce+XJcY7cHfd+j+PKqYo5nv4safLx2i9Q5eTcnAzqXE C7r4iLbngNYE8Q2F6nc7k7HCaIHtfmk/g+Y3iebNYJglFAynTY8i3NZSNRzYn6jB Cvc/xWN+xYb1wLRJqeWyTn16p0ONWsqxd3hVdVkYcyNSxS+xTeKJOrDX8ssJFjUo bVNDkwXk2wl9dmb274xv/bqk/A== -----END CERTIFICATE-----Generated at Mon Mar 2 19:43:24 2026 by rpki-client