$ rpki-client -vvf rpki-repo.registro.br/repo/4Q2ToqP2rGKt3zHgTG6WPNtC6ni1C2fSfne1KLjEaxKh/0/19260CFDC65E0274748EF44AA37858B8E34F0C25.mft File: 19260CFDC65E0274748EF44AA37858B8E34F0C25.mft (raw, json) Hash identifier: uNocVmB26irQNtqm7vxfa0r/pIasCzK9Vp7vs10z4Rw= Subject key identifier: A2:C0:F8:91:65:C3:5D:54:F1:9C:F1:2C:3F:A5:9C:1D:E2:F3:E8:48 Authority key identifier: 19:26:0C:FD:C6:5E:02:74:74:8E:F4:4A:A3:78:58:B8:E3:4F:0C:25 Certificate issuer: /CN=19260CFDC65E0274748EF44AA37858B8E34F0C25 Certificate serial: 24FA943425639F74F648221F79C11BEE9E2E9DFC Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19260CFDC65E0274748EF44AA37858B8E34F0C25.cer Subject info access: rsync://rpki-repo.registro.br/repo/4Q2ToqP2rGKt3zHgTG6WPNtC6ni1C2fSfne1KLjEaxKh/0/19260CFDC65E0274748EF44AA37858B8E34F0C25.mft Manifest number: 0247 Signing time: Mon 02 Mar 2026 10:01:35 +0000 Manifest this update: Mon 02 Mar 2026 09:56:35 +0000 Manifest next update: Tue 03 Mar 2026 12:43:35 +0000 Files and hashes: 1: 3137372e382e3139322e302f32302d3234203d3e20323632373230.roa (hash: 1fqSrbNJ+tQB5rhZrLdWCaBq68tJPejUh24LUOT41IY=) 2: 3138362e3139352e39362e302f32302d3234203d3e20323632373230.roa (hash: SBx9vdzdd9Mv0ujlt1b428CIPPDH4BPgwIEKRksNKFg=) 3: 19260CFDC65E0274748EF44AA37858B8E34F0C25.crl (hash: XZVlY9b3jwooxyKBBj7oyLoNUOqazS5G3nBjwunW2kU=) 4: 323830343a6339343a3a2f33322d3438203d3e20323632373230.roa (hash: N56O7mQ7UqC+iY3Mi9L4LP8X8I5Anmjdmyk41yE4bJE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4Q2ToqP2rGKt3zHgTG6WPNtC6ni1C2fSfne1KLjEaxKh/0/19260CFDC65E0274748EF44AA37858B8E34F0C25.crl rsync://rpki-repo.registro.br/repo/4Q2ToqP2rGKt3zHgTG6WPNtC6ni1C2fSfne1KLjEaxKh/0/19260CFDC65E0274748EF44AA37858B8E34F0C25.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19260CFDC65E0274748EF44AA37858B8E34F0C25.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 03 Mar 2026 12:43:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:fa:94:34:25:63:9f:74:f6:48:22:1f:79:c1:1b:ee:9e:2e:9d:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19260CFDC65E0274748EF44AA37858B8E34F0C25 Validity Not Before: Mar 2 09:56:35 2026 GMT Not After : Mar 3 12:43:35 2026 GMT Subject: CN=A2C0F89165C35D54F19CF12C3FA59C1DE2F3E848 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:1f:0c:1d:d7:77:71:5f:40:65:da:3b:74:13: b9:e7:af:38:bb:e9:d9:68:e0:05:79:94:1a:fb:96: 14:05:c1:9f:8f:36:99:c7:72:cb:55:49:61:b6:a4: 3c:64:69:5a:d7:e3:79:de:9e:51:76:07:35:6b:0b: 4c:9d:02:2d:03:f5:79:f9:b1:32:4e:12:10:0d:f4: 93:8e:b9:aa:38:70:49:25:7d:32:28:a5:25:ea:ff: c0:4d:b7:1b:33:44:15:9b:5d:55:ec:36:fa:52:40: d5:9b:23:22:e1:a8:92:cd:83:7d:af:93:96:85:94: 8e:c0:37:a7:4f:64:0c:f8:01:c7:a9:50:ab:fc:fc: c6:70:e5:61:00:bc:5b:bd:fe:89:fd:0a:98:f3:f8: 20:e9:1d:3a:b4:81:ea:c1:87:c8:92:5f:34:4d:8f: 4d:9a:c9:be:01:06:a9:84:c4:e3:ed:6d:00:e6:fb: 7e:9f:78:9c:eb:b1:f2:85:84:55:26:55:e4:45:6e: 39:d8:af:48:6f:72:ab:ce:ea:d8:c9:61:78:12:bf: 8d:72:dd:83:3b:2d:05:55:3b:28:63:53:71:a8:53: c2:d2:e0:0f:c1:27:19:6a:26:ca:00:7e:fe:46:fc: 4a:14:f8:60:4e:28:7f:9d:31:8e:da:88:1d:f4:7b: 35:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:C0:F8:91:65:C3:5D:54:F1:9C:F1:2C:3F:A5:9C:1D:E2:F3:E8:48 X509v3 Authority Key Identifier: keyid:19:26:0C:FD:C6:5E:02:74:74:8E:F4:4A:A3:78:58:B8:E3:4F:0C:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4Q2ToqP2rGKt3zHgTG6WPNtC6ni1C2fSfne1KLjEaxKh/0/19260CFDC65E0274748EF44AA37858B8E34F0C25.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19260CFDC65E0274748EF44AA37858B8E34F0C25.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Q2ToqP2rGKt3zHgTG6WPNtC6ni1C2fSfne1KLjEaxKh/0/19260CFDC65E0274748EF44AA37858B8E34F0C25.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:82:3e:8e:1f:95:f4:83:58:07:55:e2:2f:a9:f0:ef:7b:3b: 29:b3:31:70:b3:c5:61:17:5c:68:e7:21:d3:ab:3c:36:43:b4: 35:e5:1f:e2:bc:f7:a7:5a:a9:99:4e:18:34:95:be:8c:77:c8: b9:23:1d:f8:fe:68:e9:1e:34:5b:1e:10:0f:70:3c:bf:ca:d6: 9a:fb:aa:f0:03:b4:1d:b7:9d:01:32:a9:ec:7f:e1:23:e3:77: cb:a2:f6:e4:e9:dc:af:fc:21:d3:c1:42:2b:61:2d:94:f6:8a: e1:66:d7:52:dc:b1:49:8c:9c:34:4f:94:f4:38:81:55:20:40: 91:fc:7c:d0:90:44:9a:f1:b8:28:8e:7b:e2:86:a0:f1:e5:e8: aa:ac:9c:b4:85:f8:d5:be:82:f4:a2:12:03:2b:60:38:76:2d: c7:07:53:b9:90:24:5e:dc:96:64:3d:3e:9c:e0:14:6a:fb:34: cf:86:2d:00:c7:18:96:78:d8:4f:82:e8:0f:44:e5:55:63:fb: e1:1b:9f:06:08:33:ba:a7:7d:a8:2d:fa:0d:92:e2:c4:47:fc: e6:61:43:c8:01:ab:6f:64:f5:d4:9d:b8:d2:c3:dd:92:a2:76: 8d:32:00:92:32:87:9e:f8:9d:6a:91:93:67:f7:ad:90:f7:db: cd:86:b6:18 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUJPqUNCVjn3T2SCIfecEb7p4unfwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTkyNjBDRkRDNjVFMDI3NDc0OEVGNDRBQTM3ODU4QjhF MzRGMEMyNTAeFw0yNjAzMDIwOTU2MzVaFw0yNjAzMDMxMjQzMzVaMDMxMTAvBgNV BAMTKEEyQzBGODkxNjVDMzVENTRGMTlDRjEyQzNGQTU5QzFERTJGM0U4NDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgHwwd13dxX0Bl2jt0E7nnrzi7 6dlo4AV5lBr7lhQFwZ+PNpnHcstVSWG2pDxkaVrX43nenlF2BzVrC0ydAi0D9Xn5 sTJOEhAN9JOOuao4cEklfTIopSXq/8BNtxszRBWbXVXsNvpSQNWbIyLhqJLNg32v k5aFlI7AN6dPZAz4AcepUKv8/MZw5WEAvFu9/on9Cpjz+CDpHTq0gerBh8iSXzRN j02ayb4BBqmExOPtbQDm+36feJzrsfKFhFUmVeRFbjnYr0hvcqvO6tjJYXgSv41y 3YM7LQVVOyhjU3GoU8LS4A/BJxlqJsoAfv5G/EoU+GBOKH+dMY7aiB30ezV7AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUosD4kWXDXVTxnPEsP6WcHeLz6EgwHwYDVR0j BBgwFoAUGSYM/cZeAnR0jvRKo3hYuONPDCUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNFEyVG9xUDJyR0t0M3pIZ1RHNldQTnRDNm5pMUMyZlNmbmUxS0xqRWF4 S2gvMC8xOTI2MENGREM2NUUwMjc0NzQ4RUY0NEFBMzc4NThCOEUzNEYwQzI1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE5MjYwQ0ZEQzY1RTAyNzQ3 NDhFRjQ0QUEzNzg1OEI4RTM0RjBDMjUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NFEyVG9xUDJyR0t0M3pIZ1RHNldQTnRDNm5pMUMyZlNmbmUxS0xqRWF4S2gvMC8x OTI2MENGREM2NUUwMjc0NzQ4RUY0NEFBMzc4NThCOEUzNEYwQzI1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEANYI+jh+V9INYB1XiL6nw73s7KbMxcLPFYRdcaOch06s8NkO0NeUf4rz3p1qp mU4YNJW+jHfIuSMd+P5o6R40Wx4QD3A8v8rWmvuq8AO0HbedATKp7H/hI+N3y6L2 5Oncr/wh08FCK2EtlPaK4WbXUtyxSYycNE+U9DiBVSBAkfx80JBEmvG4KI574oag 8eXoqqyctIX41b6C9KISAytgOHYtxwdTuZAkXtyWZD0+nOAUavs0z4YtAMcYlnjY T4LoD0TlVWP74RufBggzuqd9qC36DZLixEf85mFDyAGrb2T11J240sPdkqJ2jTIA kjKHnvidapGTZ/etkPfbzYa2GA== -----END CERTIFICATE-----Generated at Mon Mar 2 16:17:02 2026 by rpki-client