$ rpki-client -vvf rpki-repo.registro.br/repo/4MztZRAU2GQr4ezk8R898gF3aFgnphA9QsNKAdCkFtMk/1/032EBC04B31CCA7416FFF2267C50AACE979BC999.mft File: 032EBC04B31CCA7416FFF2267C50AACE979BC999.mft (raw, json) Hash identifier: nmNjX6dMKw2VU0Ss4AAUk4nnRG22L5rlt20p+FjQxg0= Subject key identifier: 59:8E:02:47:06:F9:3E:F6:6F:E2:E8:E9:CC:E1:B9:85:A1:A9:58:6F Authority key identifier: 03:2E:BC:04:B3:1C:CA:74:16:FF:F2:26:7C:50:AA:CE:97:9B:C9:99 Certificate issuer: /CN=032EBC04B31CCA7416FFF2267C50AACE979BC999 Certificate serial: 30DCA4BB5A40ABFA937FF8FDB714471A4CF6F361 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/032EBC04B31CCA7416FFF2267C50AACE979BC999.cer Subject info access: rsync://rpki-repo.registro.br/repo/4MztZRAU2GQr4ezk8R898gF3aFgnphA9QsNKAdCkFtMk/1/032EBC04B31CCA7416FFF2267C50AACE979BC999.mft Manifest number: 03A1 Signing time: Mon 02 Mar 2026 15:55:53 +0000 Manifest this update: Mon 02 Mar 2026 15:50:53 +0000 Manifest next update: Tue 03 Mar 2026 16:27:53 +0000 Files and hashes: 1: 323830343a336238343a3a2f33322d3438203d3e20323636313534.roa (hash: GzzGAhO8xW0SYSmZg4JucArQFk7jR/ai+dVlenp/HMA=) 2: 3139322e3134302e382e302f32322d3234203d3e20323636313534.roa (hash: ORbVx+nh4f+oaSG+F+ejDNYKTa5ZupSXQajfOzftgs0=) 3: 032EBC04B31CCA7416FFF2267C50AACE979BC999.crl (hash: 6xFSIHP7thl2JxapXerjQruT2Pl/beNB/QImiIZu91M=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4MztZRAU2GQr4ezk8R898gF3aFgnphA9QsNKAdCkFtMk/1/032EBC04B31CCA7416FFF2267C50AACE979BC999.crl rsync://rpki-repo.registro.br/repo/4MztZRAU2GQr4ezk8R898gF3aFgnphA9QsNKAdCkFtMk/1/032EBC04B31CCA7416FFF2267C50AACE979BC999.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/032EBC04B31CCA7416FFF2267C50AACE979BC999.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 03 Mar 2026 16:27:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:dc:a4:bb:5a:40:ab:fa:93:7f:f8:fd:b7:14:47:1a:4c:f6:f3:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=032EBC04B31CCA7416FFF2267C50AACE979BC999 Validity Not Before: Mar 2 15:50:53 2026 GMT Not After : Mar 3 16:27:53 2026 GMT Subject: CN=598E024706F93EF66FE2E8E9CCE1B985A1A9586F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:04:03:8f:9c:11:35:ba:e2:86:af:32:76:40: d9:98:8d:c6:e5:b5:3d:bb:5c:70:c9:2b:6f:95:36: 44:c3:f7:fc:f0:ef:28:01:e6:88:37:72:db:6d:11: d9:a5:f5:90:c4:01:b7:a9:9e:04:60:cc:2c:86:ad: 17:bf:23:98:1b:cc:db:28:b2:1e:e0:89:d5:1b:7c: 49:7d:7c:be:1f:69:72:a1:d7:00:da:76:fa:02:b0: 14:1b:da:c3:59:ab:99:57:a7:7b:95:98:fc:d7:29: 2d:a0:c3:91:26:b6:96:52:ea:1f:bf:4e:66:e1:5d: c5:99:b2:ad:fa:a8:56:af:00:0a:11:30:f5:a5:e5: d6:fd:73:99:3a:9a:87:7f:d3:77:0a:f0:2e:b1:aa: 8c:f1:28:b1:f5:35:2e:59:3b:a8:8b:92:91:e6:13: 2c:08:e1:3e:08:02:48:18:4d:d7:72:4c:6a:99:d7: cf:c5:c1:cd:05:76:37:31:23:c5:e6:ab:4f:e2:aa: a9:0b:db:b9:d8:25:fd:b0:0a:5f:25:5d:62:e5:31: ae:07:a8:a6:17:2e:f6:b8:89:c5:c8:dc:31:bd:25: f1:04:22:bf:9b:05:32:e4:0e:d2:e6:93:6c:85:d9: a5:41:4c:b5:ff:e7:56:a5:99:47:bc:9f:38:f8:4e: b5:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:8E:02:47:06:F9:3E:F6:6F:E2:E8:E9:CC:E1:B9:85:A1:A9:58:6F X509v3 Authority Key Identifier: keyid:03:2E:BC:04:B3:1C:CA:74:16:FF:F2:26:7C:50:AA:CE:97:9B:C9:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4MztZRAU2GQr4ezk8R898gF3aFgnphA9QsNKAdCkFtMk/1/032EBC04B31CCA7416FFF2267C50AACE979BC999.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/032EBC04B31CCA7416FFF2267C50AACE979BC999.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4MztZRAU2GQr4ezk8R898gF3aFgnphA9QsNKAdCkFtMk/1/032EBC04B31CCA7416FFF2267C50AACE979BC999.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:4f:28:2c:0d:44:35:2f:3a:bb:d3:3d:ef:e4:36:2e:95:e0: 3e:37:56:39:cd:1e:89:38:a6:41:42:67:69:ba:99:6b:22:da: 62:d2:6d:ad:1f:80:8b:3e:86:23:b2:bb:e3:12:3e:fa:ed:9b: ba:c6:36:ed:9b:5d:e2:32:27:0e:71:4f:48:c7:fd:5e:ec:40: b0:e2:44:46:4e:a2:9c:4d:e8:35:8c:81:7d:b8:f4:04:ab:64: 81:7f:6b:f3:fb:76:91:78:8c:e8:cd:48:8e:5d:af:37:7e:3e: c6:44:cc:d0:d3:b5:65:ae:21:b8:a4:24:8c:6b:a0:50:7c:8c: 97:bc:94:2c:ad:a6:8a:db:d9:b7:bd:0e:87:5d:7b:ef:5e:72: 07:93:e2:d5:6c:e8:81:be:62:39:4b:91:e7:e0:02:f4:27:4f: da:ca:ce:66:7c:cd:b7:66:f1:89:42:3d:21:dd:ba:99:b9:b5: f9:74:95:82:67:08:3a:ba:00:ee:fe:3c:8a:d3:8f:99:f6:1b: 99:1c:57:17:e8:61:41:a2:ba:e9:41:3c:ab:f1:54:b4:b3:94: bf:62:02:e6:ca:14:98:7e:31:ff:12:22:cf:bd:ea:73:47:b7: af:18:fb:58:b3:59:48:c9:a0:37:a1:79:b5:bc:a7:8d:66:a1: 95:b3:aa:7a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUMNyku1pAq/qTf/j9txRHGkz282EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDMyRUJDMDRCMzFDQ0E3NDE2RkZGMjI2N0M1MEFBQ0U5 NzlCQzk5OTAeFw0yNjAzMDIxNTUwNTNaFw0yNjAzMDMxNjI3NTNaMDMxMTAvBgNV BAMTKDU5OEUwMjQ3MDZGOTNFRjY2RkUyRThFOUNDRTFCOTg1QTFBOTU4NkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFBAOPnBE1uuKGrzJ2QNmYjcbl tT27XHDJK2+VNkTD9/zw7ygB5og3ctttEdml9ZDEAbepngRgzCyGrRe/I5gbzNso sh7gidUbfEl9fL4faXKh1wDadvoCsBQb2sNZq5lXp3uVmPzXKS2gw5EmtpZS6h+/ TmbhXcWZsq36qFavAAoRMPWl5db9c5k6mod/03cK8C6xqozxKLH1NS5ZO6iLkpHm EywI4T4IAkgYTddyTGqZ18/Fwc0FdjcxI8Xmq0/iqqkL27nYJf2wCl8lXWLlMa4H qKYXLva4icXI3DG9JfEEIr+bBTLkDtLmk2yF2aVBTLX/51almUe8nzj4TrVxAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUWY4CRwb5PvZv4ujpzOG5haGpWG8wHwYDVR0j BBgwFoAUAy68BLMcynQW//ImfFCqzpebyZkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNE16dFpSQVUyR1FyNGV6azhSODk4Z0YzYUZnbnBoQTlRc05LQWRDa0Z0 TWsvMS8wMzJFQkMwNEIzMUNDQTc0MTZGRkYyMjY3QzUwQUFDRTk3OUJDOTk5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAzMkVCQzA0QjMxQ0NBNzQx NkZGRjIyNjdDNTBBQUNFOTc5QkM5OTkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NE16dFpSQVUyR1FyNGV6azhSODk4Z0YzYUZnbnBoQTlRc05LQWRDa0Z0TWsvMS8w MzJFQkMwNEIzMUNDQTc0MTZGRkYyMjY3QzUwQUFDRTk3OUJDOTk5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYU8oLA1ENS86u9M97+Q2LpXgPjdWOc0eiTimQUJnabqZayLaYtJtrR+Aiz6G I7K74xI++u2busY27Ztd4jInDnFPSMf9XuxAsOJERk6inE3oNYyBfbj0BKtkgX9r 8/t2kXiM6M1Ijl2vN34+xkTM0NO1Za4huKQkjGugUHyMl7yULK2mitvZt70Oh117 715yB5Pi1Wzogb5iOUuR5+AC9CdP2srOZnzNt2bxiUI9Id26mbm1+XSVgmcIOroA 7v48itOPmfYbmRxXF+hhQaK66UE8q/FUtLOUv2IC5soUmH4x/xIiz73qc0e3rxj7 WLNZSMmgN6F5tbynjWahlbOqeg== -----END CERTIFICATE-----Generated at Mon Mar 2 20:21:11 2026 by rpki-client