$ rpki-client -vvf rpki-repo.registro.br/repo/3hJ4RCNPQvYnRTmSpDFzcf1PWaxQ9Y11okExr7dq5n5k/1/642D27C2B88FC1E644188313B8DE644A2705C863.mft File: 642D27C2B88FC1E644188313B8DE644A2705C863.mft (raw, json) Hash identifier: FkIMg///N3iUR5rdM/rhDrwHOMSyCJkA6/ZGSNSMADA= Subject key identifier: 02:AE:95:71:21:30:D0:AC:83:39:C2:43:F7:0C:61:29:9F:7F:EB:1B Authority key identifier: 64:2D:27:C2:B8:8F:C1:E6:44:18:83:13:B8:DE:64:4A:27:05:C8:63 Certificate issuer: /CN=642D27C2B88FC1E644188313B8DE644A2705C863 Certificate serial: 5FCFEB36F3C8B0429471EBB9D2CE8C0A819720BC Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/642D27C2B88FC1E644188313B8DE644A2705C863.cer Subject info access: rsync://rpki-repo.registro.br/repo/3hJ4RCNPQvYnRTmSpDFzcf1PWaxQ9Y11okExr7dq5n5k/1/642D27C2B88FC1E644188313B8DE644A2705C863.mft Manifest number: 03A3 Signing time: Mon 02 Mar 2026 12:39:03 +0000 Manifest this update: Mon 02 Mar 2026 12:34:03 +0000 Manifest next update: Tue 03 Mar 2026 14:10:03 +0000 Files and hashes: 1: 3134332e3133372e382e302f32322d3332203d3e203533313732.roa (hash: X0PpyJ+ZkjeFXJjUFcys+L9H6+zRoxLuhwZHnOEhxs0=) 2: 642D27C2B88FC1E644188313B8DE644A2705C863.crl (hash: itUvAohLGfVuSS1KpUsiFR+NguRJTa4UW56MaqzQDDQ=) 3: 3138362e3232352e36342e302f32302d3332203d3e203533313732.roa (hash: sEQcH/MmUdhj4qZeg8tTfa6ACp7O9srZS6WMnAT4oeQ=) 4: 323830343a323938303a3a2f33322d313238203d3e203533313732.roa (hash: 3cNdKeqfTwiEo3K1ZkDPpVt0OMOgFIFtS6tZRrGyuA8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3hJ4RCNPQvYnRTmSpDFzcf1PWaxQ9Y11okExr7dq5n5k/1/642D27C2B88FC1E644188313B8DE644A2705C863.crl rsync://rpki-repo.registro.br/repo/3hJ4RCNPQvYnRTmSpDFzcf1PWaxQ9Y11okExr7dq5n5k/1/642D27C2B88FC1E644188313B8DE644A2705C863.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/642D27C2B88FC1E644188313B8DE644A2705C863.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 03 Mar 2026 14:10:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:cf:eb:36:f3:c8:b0:42:94:71:eb:b9:d2:ce:8c:0a:81:97:20:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=642D27C2B88FC1E644188313B8DE644A2705C863 Validity Not Before: Mar 2 12:34:03 2026 GMT Not After : Mar 3 14:10:03 2026 GMT Subject: CN=02AE95712130D0AC8339C243F70C61299F7FEB1B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:47:c9:31:5c:84:bb:d4:51:f5:14:6a:f5:ed: 4d:e6:fd:99:88:b0:72:21:1f:86:5f:cf:c3:ae:69: 74:23:ed:e7:91:e7:0b:02:24:bd:9d:1f:0d:f0:22: 2d:73:41:1f:bb:8d:6d:70:4b:df:d6:a6:63:d1:30: 8c:7f:f0:23:df:89:17:77:53:6b:dd:90:28:0f:b6: c0:54:c3:91:8c:5b:d2:df:97:d0:1c:a7:f3:de:08: f2:c4:f4:53:73:e1:c6:ad:5f:88:9e:af:03:a5:55: d6:7f:f0:21:54:39:1f:48:1d:22:4c:d8:02:89:d6: df:17:e7:09:4c:95:60:68:7d:4f:ac:be:4e:67:7c: ba:bc:ef:09:f2:87:d0:62:c0:26:e0:a4:1d:3f:c2: d1:75:ed:df:6f:06:4b:c2:81:61:20:11:95:8e:f2: e0:4e:13:5c:a0:b7:67:03:1f:71:e2:4c:f8:56:4e: 14:5a:98:22:d2:86:7d:23:ad:f2:ed:d6:6e:ee:04: 92:26:fb:67:f0:cd:92:b4:03:c2:9d:e1:60:58:5a: 1c:51:72:9b:a4:0d:0f:87:e1:06:47:46:b3:fe:6e: df:41:e0:ae:3e:47:00:03:58:ff:24:13:b9:6f:28: a1:c6:e9:4b:be:99:d8:21:c9:f9:ae:ab:40:a2:25: 2c:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:AE:95:71:21:30:D0:AC:83:39:C2:43:F7:0C:61:29:9F:7F:EB:1B X509v3 Authority Key Identifier: keyid:64:2D:27:C2:B8:8F:C1:E6:44:18:83:13:B8:DE:64:4A:27:05:C8:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3hJ4RCNPQvYnRTmSpDFzcf1PWaxQ9Y11okExr7dq5n5k/1/642D27C2B88FC1E644188313B8DE644A2705C863.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/642D27C2B88FC1E644188313B8DE644A2705C863.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3hJ4RCNPQvYnRTmSpDFzcf1PWaxQ9Y11okExr7dq5n5k/1/642D27C2B88FC1E644188313B8DE644A2705C863.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:11:42:a5:b8:58:54:ff:37:a6:b2:42:3d:ec:31:6b:c4:3f: 46:5b:9c:27:ed:5e:b0:c8:9a:15:87:5d:9a:fb:63:b1:78:85: ab:03:b2:4d:b0:25:22:88:47:86:72:3a:ad:53:3e:a4:7b:32: 34:90:eb:55:35:e5:ba:7b:51:29:3a:22:11:19:3e:71:5f:d6: ad:a3:5f:22:ad:05:aa:df:91:2b:84:28:18:a2:05:01:6d:20: 59:88:64:36:7e:df:de:30:35:3f:c0:a4:d5:19:6b:64:ad:f6: 19:7e:c3:f7:92:07:f2:ac:62:d4:1b:7d:e2:6c:88:db:36:dd: 10:7c:df:f9:06:9d:c6:e3:b5:fb:b1:d1:29:bd:9e:8d:3c:e7: 9a:ef:dc:ce:38:fd:38:59:6b:7b:15:2f:73:a1:e3:9e:5b:eb: 31:60:71:86:d5:1b:3c:5d:f7:b3:5a:89:f6:a1:83:56:0e:6e: bc:86:7e:dc:fe:80:42:a4:29:17:6f:a1:63:ec:c9:1d:a3:70: 94:2c:18:ce:39:64:df:d2:9f:bf:51:c7:e2:eb:1f:33:1f:35: 2c:05:a5:e1:da:f6:2b:bf:b9:e7:75:9f:5b:f0:72:2f:53:a5: 5f:0c:34:bb:c1:65:a7:7b:18:d7:92:a1:70:e9:16:a3:ec:74: 46:8b:23:cc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUX8/rNvPIsEKUceu50s6MCoGXILwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjQyRDI3QzJCODhGQzFFNjQ0MTg4MzEzQjhERTY0NEEy NzA1Qzg2MzAeFw0yNjAzMDIxMjM0MDNaFw0yNjAzMDMxNDEwMDNaMDMxMTAvBgNV BAMTKDAyQUU5NTcxMjEzMEQwQUM4MzM5QzI0M0Y3MEM2MTI5OUY3RkVCMUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKR8kxXIS71FH1FGr17U3m/ZmI sHIhH4Zfz8OuaXQj7eeR5wsCJL2dHw3wIi1zQR+7jW1wS9/WpmPRMIx/8CPfiRd3 U2vdkCgPtsBUw5GMW9Lfl9Acp/PeCPLE9FNz4catX4ierwOlVdZ/8CFUOR9IHSJM 2AKJ1t8X5wlMlWBofU+svk5nfLq87wnyh9BiwCbgpB0/wtF17d9vBkvCgWEgEZWO 8uBOE1ygt2cDH3HiTPhWThRamCLShn0jrfLt1m7uBJIm+2fwzZK0A8Kd4WBYWhxR cpukDQ+H4QZHRrP+bt9B4K4+RwADWP8kE7lvKKHG6Uu+mdghyfmuq0CiJSxnAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUAq6VcSEw0KyDOcJD9wxhKZ9/6xswHwYDVR0j BBgwFoAUZC0nwriPweZEGIMTuN5kSicFyGMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM2hKNFJDTlBRdlluUlRtU3BERnpjZjFQV2F4UTlZMTFva0V4cjdkcTVu NWsvMS82NDJEMjdDMkI4OEZDMUU2NDQxODgzMTNCOERFNjQ0QTI3MDVDODYzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY0MkQyN0MyQjg4RkMxRTY0 NDE4ODMxM0I4REU2NDRBMjcwNUM4NjMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M2hKNFJDTlBRdlluUlRtU3BERnpjZjFQV2F4UTlZMTFva0V4cjdkcTVuNWsvMS82 NDJEMjdDMkI4OEZDMUU2NDQxODgzMTNCOERFNjQ0QTI3MDVDODYzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXRFCpbhYVP83prJCPewxa8Q/RlucJ+1esMiaFYddmvtjsXiFqwOyTbAlIohH hnI6rVM+pHsyNJDrVTXluntRKToiERk+cV/WraNfIq0Fqt+RK4QoGKIFAW0gWYhk Nn7f3jA1P8Ck1RlrZK32GX7D95IH8qxi1Bt94myI2zbdEHzf+QadxuO1+7HRKb2e jTznmu/czjj9OFlrexUvc6HjnlvrMWBxhtUbPF33s1qJ9qGDVg5uvIZ+3P6AQqQp F2+hY+zJHaNwlCwYzjlk39Kfv1HH4usfMx81LAWl4dr2K7+553WfW/ByL1OlXww0 u8Flp3sY15KhcOkWo+x0RosjzA== -----END CERTIFICATE-----Generated at Mon Mar 2 20:04:00 2026 by rpki-client