$ rpki-client -vvf rpki-repo.registro.br/repo/4MsNDpeAhvv8wdjWHgj4yHttVDcVM8PXyydtzYT9irUP/0/A09FFB0FDC34DD07961FEDBB79D8593FC28112F3.mft File: A09FFB0FDC34DD07961FEDBB79D8593FC28112F3.mft (raw, json) Hash identifier: RhKnRcHr27LZJL5FrByHMlKEdBJI162zocH42vtXznk= Subject key identifier: E2:A7:55:58:01:C2:69:5E:76:AE:64:B2:AE:08:99:AD:C6:60:59:2D Authority key identifier: A0:9F:FB:0F:DC:34:DD:07:96:1F:ED:BB:79:D8:59:3F:C2:81:12:F3 Certificate issuer: /CN=A09FFB0FDC34DD07961FEDBB79D8593FC28112F3 Certificate serial: 55BEEB97E82438F557232FD8FA8B92494D726CEC Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A09FFB0FDC34DD07961FEDBB79D8593FC28112F3.cer Subject info access: rsync://rpki-repo.registro.br/repo/4MsNDpeAhvv8wdjWHgj4yHttVDcVM8PXyydtzYT9irUP/0/A09FFB0FDC34DD07961FEDBB79D8593FC28112F3.mft Manifest number: 02FA Signing time: Sun 01 Mar 2026 09:36:09 +0000 Manifest this update: Sun 01 Mar 2026 09:31:09 +0000 Manifest next update: Mon 02 Mar 2026 10:21:09 +0000 Files and hashes: 1: 323830343a323261303a3a2f33322d3438203d3e20323634313132.roa (hash: XUkg/RMARH1Dfo0HXIe/VkwDxry1vLL6HTSa7WxxHKM=) 2: 3133382e39372e32302e302f32322d3234203d3e20323634313132.roa (hash: vaPBjNRU5cLfNq4Ajf17RP29ZF8znjhebKhB7JEHAqE=) 3: A09FFB0FDC34DD07961FEDBB79D8593FC28112F3.crl (hash: FqL58CgMKJaCX7lBUNqa7VVrQ1e3pje0SAxqrmf4l88=) 4: 3137302e38332e3136302e302f32322d3234203d3e20323634313132.roa (hash: kjRXgE0/0tSktAP46xSsYXcpBUoV/kAEz7+o0rfOYak=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4MsNDpeAhvv8wdjWHgj4yHttVDcVM8PXyydtzYT9irUP/0/A09FFB0FDC34DD07961FEDBB79D8593FC28112F3.crl rsync://rpki-repo.registro.br/repo/4MsNDpeAhvv8wdjWHgj4yHttVDcVM8PXyydtzYT9irUP/0/A09FFB0FDC34DD07961FEDBB79D8593FC28112F3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A09FFB0FDC34DD07961FEDBB79D8593FC28112F3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 02 Mar 2026 10:21:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:be:eb:97:e8:24:38:f5:57:23:2f:d8:fa:8b:92:49:4d:72:6c:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A09FFB0FDC34DD07961FEDBB79D8593FC28112F3 Validity Not Before: Mar 1 09:31:09 2026 GMT Not After : Mar 2 10:21:09 2026 GMT Subject: CN=E2A7555801C2695E76AE64B2AE0899ADC660592D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:11:b3:87:9d:d4:d8:05:ac:21:5b:4c:25:e7: 8a:6f:f1:bb:7e:e7:48:01:54:ff:35:b0:15:2f:e2: 3d:cb:a6:f2:d8:f7:a7:6c:5b:ad:60:bc:d0:62:42: d9:82:4f:bd:79:48:e8:28:15:35:87:c1:7c:17:86: e5:00:ca:c8:94:cf:e7:14:05:ee:96:5d:32:75:4a: 76:5a:47:93:dc:91:57:72:27:3e:0e:7d:d9:46:09: c8:6f:cd:93:e8:ea:6b:2e:66:c8:e0:65:4d:fb:36: 5a:fb:5d:17:bc:82:bb:74:fe:aa:f5:19:f4:9d:24: 11:70:ab:93:c5:61:0d:85:0a:c2:3c:d9:5a:75:ef: 37:c3:05:cf:77:60:38:c3:03:9a:d1:34:ef:0b:c1: 95:c1:08:78:35:15:2f:67:dd:fb:87:70:55:a1:f7: e9:46:b5:db:48:8f:2d:7e:20:0f:7f:89:48:02:7c: 7e:6b:f0:32:6c:bd:fe:8c:ee:9d:31:62:24:37:b3: 99:ff:24:56:58:29:73:36:7a:44:10:e0:be:00:76: c3:6c:8c:ee:b5:b2:f5:31:9a:61:f7:67:fe:05:d7: 18:f2:34:bd:59:3d:de:79:1a:86:14:dd:db:22:a2: 8b:2f:d7:b1:c5:bd:70:e0:e7:fd:d0:3e:dd:df:60: 59:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:A7:55:58:01:C2:69:5E:76:AE:64:B2:AE:08:99:AD:C6:60:59:2D X509v3 Authority Key Identifier: keyid:A0:9F:FB:0F:DC:34:DD:07:96:1F:ED:BB:79:D8:59:3F:C2:81:12:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4MsNDpeAhvv8wdjWHgj4yHttVDcVM8PXyydtzYT9irUP/0/A09FFB0FDC34DD07961FEDBB79D8593FC28112F3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A09FFB0FDC34DD07961FEDBB79D8593FC28112F3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4MsNDpeAhvv8wdjWHgj4yHttVDcVM8PXyydtzYT9irUP/0/A09FFB0FDC34DD07961FEDBB79D8593FC28112F3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ca:84:4c:65:1b:03:63:5b:98:66:fa:ac:e2:f3:4f:82:3f:b1: 7d:d5:1e:ad:87:d1:e1:e3:6a:2b:ff:3c:51:a3:90:12:9e:74: 3a:6b:4a:b9:0b:14:f0:49:16:da:93:c7:96:9a:5c:8f:44:80: c9:c1:39:41:c9:19:fc:4b:96:a3:b6:8b:af:c9:74:e6:fa:48: 7c:ba:8a:e8:0e:42:6d:fd:8b:00:21:33:09:35:c0:2d:53:36: 79:61:e5:a9:39:ee:cc:33:66:3c:0c:a4:66:59:f0:ab:1b:4d: 59:97:c2:0c:ac:00:00:9e:7b:6a:0a:00:c2:b6:6a:06:0a:ff: 29:6a:be:85:00:93:be:7a:00:74:49:44:71:81:7e:c0:be:dc: 97:2b:f1:a7:75:96:fa:4f:2a:d1:94:cf:02:02:f1:8e:c4:b9: 10:18:a8:5e:00:71:09:da:94:e9:71:85:77:e9:87:12:e6:db: be:be:94:a6:86:1a:49:c1:9f:25:72:7f:a0:b2:6a:14:7a:61: 09:28:0a:39:33:ee:a6:71:27:e7:22:ce:e5:38:7c:bc:c1:c7: 5f:bc:5b:72:4e:8d:30:a8:3f:b8:dc:17:a6:03:a3:cd:0d:5b: 85:2e:32:b1:14:b0:a8:fd:6b:b5:2b:e6:23:5b:d6:be:70:b2: 09:ae:92:cc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUVb7rl+gkOPVXIy/Y+ouSSU1ybOwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTA5RkZCMEZEQzM0REQwNzk2MUZFREJCNzlEODU5M0ZD MjgxMTJGMzAeFw0yNjAzMDEwOTMxMDlaFw0yNjAzMDIxMDIxMDlaMDMxMTAvBgNV BAMTKEUyQTc1NTU4MDFDMjY5NUU3NkFFNjRCMkFFMDg5OUFEQzY2MDU5MkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBEbOHndTYBawhW0wl54pv8bt+ 50gBVP81sBUv4j3LpvLY96dsW61gvNBiQtmCT715SOgoFTWHwXwXhuUAysiUz+cU Be6WXTJ1SnZaR5PckVdyJz4OfdlGCchvzZPo6msuZsjgZU37Nlr7XRe8grt0/qr1 GfSdJBFwq5PFYQ2FCsI82Vp17zfDBc93YDjDA5rRNO8LwZXBCHg1FS9n3fuHcFWh 9+lGtdtIjy1+IA9/iUgCfH5r8DJsvf6M7p0xYiQ3s5n/JFZYKXM2ekQQ4L4AdsNs jO61svUxmmH3Z/4F1xjyNL1ZPd55GoYU3dsioosv17HFvXDg5/3QPt3fYFmdAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU4qdVWAHCaV52rmSyrgiZrcZgWS0wHwYDVR0j BBgwFoAUoJ/7D9w03QeWH+27edhZP8KBEvMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNE1zTkRwZUFodnY4d2RqV0hnajR5SHR0VkRjVk04UFh5eWR0ellUOWly VVAvMC9BMDlGRkIwRkRDMzRERDA3OTYxRkVEQkI3OUQ4NTkzRkMyODExMkYzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0EwOUZGQjBGREMzNEREMDc5 NjFGRURCQjc5RDg1OTNGQzI4MTEyRjMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NE1zTkRwZUFodnY4d2RqV0hnajR5SHR0VkRjVk04UFh5eWR0ellUOWlyVVAvMC9B MDlGRkIwRkRDMzRERDA3OTYxRkVEQkI3OUQ4NTkzRkMyODExMkYzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAyoRMZRsDY1uYZvqs4vNPgj+xfdUerYfR4eNqK/88UaOQEp50OmtKuQsU8EkW 2pPHlppcj0SAycE5QckZ/EuWo7aLr8l05vpIfLqK6A5Cbf2LACEzCTXALVM2eWHl qTnuzDNmPAykZlnwqxtNWZfCDKwAAJ57agoAwrZqBgr/KWq+hQCTvnoAdElEcYF+ wL7clyvxp3WW+k8q0ZTPAgLxjsS5EBioXgBxCdqU6XGFd+mHEubbvr6UpoYaScGf JXJ/oLJqFHphCSgKOTPupnEn5yLO5Th8vMHHX7xbck6NMKg/uNwXpgOjzQ1bhS4y sRSwqP1rtSvmI1vWvnCyCa6SzA== -----END CERTIFICATE-----Generated at Sun Mar 1 21:16:30 2026 by rpki-client