$ rpki-client -vvf rpki-repo.registro.br/repo/3jvYAq8YM7riRtxmbzYYs5T6365iEg9AieED6dUA4GkZ/0/1E60FA7690519A93DF69DB8EACC9EDB0380B2B14.mft File: 1E60FA7690519A93DF69DB8EACC9EDB0380B2B14.mft (raw, json) Hash identifier: ztDCEZdgqrvu2EFdjD4F7XdVgBA41vlnC7uhj7tAbOs= Subject key identifier: 90:A2:3A:43:39:A8:DA:43:98:DF:62:24:59:F3:D6:59:18:48:14:DA Authority key identifier: 1E:60:FA:76:90:51:9A:93:DF:69:DB:8E:AC:C9:ED:B0:38:0B:2B:14 Certificate issuer: /CN=1E60FA7690519A93DF69DB8EACC9EDB0380B2B14 Certificate serial: 4C49C366F636384412093B9ABB299B11D9CCBD96 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E60FA7690519A93DF69DB8EACC9EDB0380B2B14.cer Subject info access: rsync://rpki-repo.registro.br/repo/3jvYAq8YM7riRtxmbzYYs5T6365iEg9AieED6dUA4GkZ/0/1E60FA7690519A93DF69DB8EACC9EDB0380B2B14.mft Manifest number: 01AA Signing time: Mon 02 Mar 2026 11:13:19 +0000 Manifest this update: Mon 02 Mar 2026 11:08:19 +0000 Manifest next update: Tue 03 Mar 2026 11:21:19 +0000 Files and hashes: 1: 3137302e38342e3139362e302f32322d3332203d3e20323635303138.roa (hash: GMqVz+pNv4jlVq8AM/MysXTepHhSdbVZyc7Np+Ty+wo=) 2: 3136302e3233382e3230302e302f32322d3332203d3e20323635303138.roa (hash: hv7rV0YAjf7OIxTmW4CmSIfCjHYfqZrGrG5y4H2smTY=) 3: 1E60FA7690519A93DF69DB8EACC9EDB0380B2B14.crl (hash: v9pYvRPqPdiaQIok4oJgkrH4hQJX7Erii5YsePjL3mQ=) 4: 323830343a333137633a3a2f33322d3634203d3e20323635303138.roa (hash: ez+ajbN41gMQLCvCNkwbbF7k57+fkGAT5m28gVygc5E=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3jvYAq8YM7riRtxmbzYYs5T6365iEg9AieED6dUA4GkZ/0/1E60FA7690519A93DF69DB8EACC9EDB0380B2B14.crl rsync://rpki-repo.registro.br/repo/3jvYAq8YM7riRtxmbzYYs5T6365iEg9AieED6dUA4GkZ/0/1E60FA7690519A93DF69DB8EACC9EDB0380B2B14.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E60FA7690519A93DF69DB8EACC9EDB0380B2B14.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 03 Mar 2026 11:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:49:c3:66:f6:36:38:44:12:09:3b:9a:bb:29:9b:11:d9:cc:bd:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1E60FA7690519A93DF69DB8EACC9EDB0380B2B14 Validity Not Before: Mar 2 11:08:19 2026 GMT Not After : Mar 3 11:21:19 2026 GMT Subject: CN=90A23A4339A8DA4398DF622459F3D659184814DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:e2:80:1d:42:20:b1:2d:ec:c8:f5:19:41:7e: cb:f1:c3:5a:2c:21:90:12:c6:2b:59:f0:2c:08:fb: 94:88:a8:5e:fb:05:29:8a:9f:a5:0a:60:6c:17:f9: eb:d6:46:5b:0f:5a:ce:7d:ad:65:13:38:a2:e0:db: d3:e1:7d:db:c3:12:6a:fb:83:58:89:59:81:13:b5: da:68:61:af:68:f0:1b:d5:5b:ff:5b:69:75:f1:67: b4:e8:d7:74:de:67:09:55:87:08:a6:c4:36:10:f1: e8:29:bc:f5:0f:16:0b:10:c6:90:32:70:6f:78:5b: 4d:a6:4b:a5:2e:e5:3d:38:51:30:c1:26:e7:1a:fc: 10:56:b1:aa:58:a1:00:d7:72:aa:6f:b5:99:66:23: ec:9e:27:ba:0e:e5:8c:91:8b:33:f4:e7:24:bd:32: 6b:8a:53:f4:c2:81:3d:02:04:45:2c:b3:f4:9b:9b: b0:7d:3a:4b:f9:62:7e:db:d7:b3:26:f9:37:1d:7d: 9a:fa:a4:58:17:e7:52:36:4b:b6:1d:3c:74:83:02: b7:de:e8:04:85:29:f6:f6:9e:01:c2:2d:2a:d3:9e: a8:1e:4f:3a:36:b9:d1:00:02:c4:9f:af:81:c4:f5: d9:81:57:06:28:ca:82:ac:d4:42:da:a7:98:d8:65: d6:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:A2:3A:43:39:A8:DA:43:98:DF:62:24:59:F3:D6:59:18:48:14:DA X509v3 Authority Key Identifier: keyid:1E:60:FA:76:90:51:9A:93:DF:69:DB:8E:AC:C9:ED:B0:38:0B:2B:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3jvYAq8YM7riRtxmbzYYs5T6365iEg9AieED6dUA4GkZ/0/1E60FA7690519A93DF69DB8EACC9EDB0380B2B14.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E60FA7690519A93DF69DB8EACC9EDB0380B2B14.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3jvYAq8YM7riRtxmbzYYs5T6365iEg9AieED6dUA4GkZ/0/1E60FA7690519A93DF69DB8EACC9EDB0380B2B14.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:31:1e:80:20:96:25:e8:39:f0:d3:3a:6e:3e:a2:e7:78:dc: 92:99:38:2e:b3:9a:f1:02:74:f8:21:77:fc:a9:2b:ed:0b:70: d9:7a:6c:38:1e:2e:ef:74:23:11:b3:6e:2f:b7:6c:87:f8:60: dc:21:0c:c7:59:83:f1:3d:e5:b4:43:bd:25:02:2c:a4:b3:00: 5b:06:22:91:ef:1a:8b:5b:32:78:ce:ee:bf:43:90:d3:e4:4b: c1:8b:60:65:bc:36:ea:be:4c:d0:ec:29:31:cf:a3:07:03:19: 83:aa:cf:18:f6:94:26:9f:ea:32:50:41:fe:b3:56:0a:40:c6: f8:b6:4f:4d:e6:69:26:0b:7d:95:96:17:f2:b0:a9:a6:47:3b: 56:d0:c4:70:16:13:97:75:61:63:70:35:6d:40:56:fe:d2:6f: 3c:34:d5:51:07:52:f6:d8:cf:1f:bc:7d:69:d4:a2:29:57:52: 36:5a:89:3a:0d:e1:a3:b9:fc:6c:52:f2:b9:b0:90:bc:73:6d: bd:62:fc:3f:29:dd:f5:f1:0d:55:dd:73:65:9d:f1:94:83:4e: c9:a0:bb:e5:8d:96:e9:5c:fa:1a:fa:bc:cf:0a:24:ac:97:e2: e9:1b:53:32:c2:92:ee:0a:62:01:74:5c:36:10:b6:17:31:45: 97:21:01:38 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUTEnDZvY2OEQSCTuauymbEdnMvZYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUU2MEZBNzY5MDUxOUE5M0RGNjlEQjhFQUNDOUVEQjAz ODBCMkIxNDAeFw0yNjAzMDIxMTA4MTlaFw0yNjAzMDMxMTIxMTlaMDMxMTAvBgNV BAMTKDkwQTIzQTQzMzlBOERBNDM5OERGNjIyNDU5RjNENjU5MTg0ODE0REEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDi4oAdQiCxLezI9RlBfsvxw1os IZASxitZ8CwI+5SIqF77BSmKn6UKYGwX+evWRlsPWs59rWUTOKLg29PhfdvDEmr7 g1iJWYETtdpoYa9o8BvVW/9baXXxZ7To13TeZwlVhwimxDYQ8egpvPUPFgsQxpAy cG94W02mS6Uu5T04UTDBJuca/BBWsapYoQDXcqpvtZlmI+yeJ7oO5YyRizP05yS9 MmuKU/TCgT0CBEUss/Sbm7B9Okv5Yn7b17Mm+TcdfZr6pFgX51I2S7YdPHSDArfe 6ASFKfb2ngHCLSrTnqgeTzo2udEAAsSfr4HE9dmBVwYoyoKs1ELap5jYZdaJAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUkKI6Qzmo2kOY32IkWfPWWRhIFNowHwYDVR0j BBgwFoAUHmD6dpBRmpPfaduOrMntsDgLKxQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM2p2WUFxOFlNN3JpUnR4bWJ6WVlzNVQ2MzY1aUVnOUFpZUVENmRVQTRH a1ovMC8xRTYwRkE3NjkwNTE5QTkzREY2OURCOEVBQ0M5RURCMDM4MEIyQjE0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFFNjBGQTc2OTA1MTlBOTNE RjY5REI4RUFDQzlFREIwMzgwQjJCMTQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M2p2WUFxOFlNN3JpUnR4bWJ6WVlzNVQ2MzY1aUVnOUFpZUVENmRVQTRHa1ovMC8x RTYwRkE3NjkwNTE5QTkzREY2OURCOEVBQ0M5RURCMDM4MEIyQjE0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlTEegCCWJeg58NM6bj6i53jckpk4LrOa8QJ0+CF3/Kkr7Qtw2XpsOB4u73Qj EbNuL7dsh/hg3CEMx1mD8T3ltEO9JQIspLMAWwYike8ai1syeM7uv0OQ0+RLwYtg Zbw26r5M0OwpMc+jBwMZg6rPGPaUJp/qMlBB/rNWCkDG+LZPTeZpJgt9lZYX8rCp pkc7VtDEcBYTl3VhY3A1bUBW/tJvPDTVUQdS9tjPH7x9adSiKVdSNlqJOg3ho7n8 bFLyubCQvHNtvWL8Pynd9fENVd1zZZ3xlINOyaC75Y2W6Vz6Gvq8zwokrJfi6RtT MsKS7gpiAXRcNhC2FzFFlyEBOA== -----END CERTIFICATE-----Generated at Mon Mar 2 16:14:48 2026 by rpki-client