$ rpki-client -vvf rpki-repo.registro.br/repo/4bNVhjyvsE6TAzkxTZWGGj6R1bbvyY1cJq3Typ8R859Q/1/295B9D364BD76A81DD34AA5D5C965BB1FC27A520.mft File: 295B9D364BD76A81DD34AA5D5C965BB1FC27A520.mft (raw, json) Hash identifier: BlePkrL7qXzvB/9S/T6HhZm3jZij3j+QQ3PWf7nSXjA= Subject key identifier: 20:44:7B:20:C4:28:2B:9A:1C:FB:B0:71:A4:31:71:75:54:BE:C2:3A Authority key identifier: 29:5B:9D:36:4B:D7:6A:81:DD:34:AA:5D:5C:96:5B:B1:FC:27:A5:20 Certificate issuer: /CN=295B9D364BD76A81DD34AA5D5C965BB1FC27A520 Certificate serial: 1368D3A0D114CC0FDB097E31BF1C45BFBAB4E32F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/295B9D364BD76A81DD34AA5D5C965BB1FC27A520.cer Subject info access: rsync://rpki-repo.registro.br/repo/4bNVhjyvsE6TAzkxTZWGGj6R1bbvyY1cJq3Typ8R859Q/1/295B9D364BD76A81DD34AA5D5C965BB1FC27A520.mft Manifest number: 0330 Signing time: Sun 01 Mar 2026 18:50:40 +0000 Manifest this update: Sun 01 Mar 2026 18:45:40 +0000 Manifest next update: Mon 02 Mar 2026 22:15:40 +0000 Files and hashes: 1: 295B9D364BD76A81DD34AA5D5C965BB1FC27A520.crl (hash: cAaTfxFE6V6nk5Gm5l62bifw6eSCNBJiJQ/7J1blkgw=) 2: 34352e3138302e35362e302f32322d3332203d3e20323639313331.roa (hash: ml1PgEl1uyA5wlPRryO9VgZNbFnY5kGR+gZ0jYqB0QI=) 3: 323830343a356665383a3a2f33322d313238203d3e20323639313331.roa (hash: mMedel6rBF9qXPa+cR65v7KZB3eekORLIPOsGhYiHa8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4bNVhjyvsE6TAzkxTZWGGj6R1bbvyY1cJq3Typ8R859Q/1/295B9D364BD76A81DD34AA5D5C965BB1FC27A520.crl rsync://rpki-repo.registro.br/repo/4bNVhjyvsE6TAzkxTZWGGj6R1bbvyY1cJq3Typ8R859Q/1/295B9D364BD76A81DD34AA5D5C965BB1FC27A520.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/295B9D364BD76A81DD34AA5D5C965BB1FC27A520.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 02 Mar 2026 22:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:68:d3:a0:d1:14:cc:0f:db:09:7e:31:bf:1c:45:bf:ba:b4:e3:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=295B9D364BD76A81DD34AA5D5C965BB1FC27A520 Validity Not Before: Mar 1 18:45:40 2026 GMT Not After : Mar 2 22:15:40 2026 GMT Subject: CN=20447B20C4282B9A1CFBB071A431717554BEC23A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:50:84:e9:8c:33:e7:83:29:4c:25:80:44:a2: f2:14:2d:c9:52:b6:74:1e:e4:16:19:94:e2:cd:89: 3e:39:94:3e:5d:84:3d:63:b8:ee:d6:97:61:3b:95: b8:44:2a:6d:54:2b:94:56:d7:b8:64:dd:ef:13:be: 0e:69:63:14:56:9b:96:c1:09:7d:5e:58:73:e4:23: d0:64:8b:07:f1:67:26:16:a7:2e:db:dd:59:31:50: fc:c2:e1:61:76:e6:c4:16:9b:f3:2e:75:7a:ec:a4: 17:62:6b:ea:95:54:3e:5f:ca:f5:ab:b7:45:cb:6f: 74:f0:ca:56:70:e0:1a:82:0c:03:48:70:2a:c7:88: 20:e1:f5:9d:92:4c:ff:cc:41:42:d5:49:60:96:ce: 4e:ad:2e:f5:6e:a9:e7:3a:fb:c7:73:93:92:c0:a4: 37:2b:0a:05:e9:ad:75:e2:9b:95:5a:64:34:66:53: 2b:62:58:9e:01:73:b6:ed:f9:e6:d3:a5:e6:3c:03: d4:85:0b:12:2b:49:a8:45:9e:e5:9d:49:fe:75:13: 1f:50:50:8f:62:2d:d2:8b:7d:7d:67:12:f5:9d:1b: dd:f4:eb:0d:05:dc:68:ca:49:95:e7:2a:91:e6:5a: 6f:d1:e1:3f:18:07:6d:e0:46:89:cb:9b:f3:fb:d8: 21:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:44:7B:20:C4:28:2B:9A:1C:FB:B0:71:A4:31:71:75:54:BE:C2:3A X509v3 Authority Key Identifier: keyid:29:5B:9D:36:4B:D7:6A:81:DD:34:AA:5D:5C:96:5B:B1:FC:27:A5:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4bNVhjyvsE6TAzkxTZWGGj6R1bbvyY1cJq3Typ8R859Q/1/295B9D364BD76A81DD34AA5D5C965BB1FC27A520.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/295B9D364BD76A81DD34AA5D5C965BB1FC27A520.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4bNVhjyvsE6TAzkxTZWGGj6R1bbvyY1cJq3Typ8R859Q/1/295B9D364BD76A81DD34AA5D5C965BB1FC27A520.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:80:2b:37:85:8d:f6:69:39:90:4a:55:28:2e:91:e6:37:6a: 06:bd:be:e8:fe:b2:24:c1:0a:3b:c6:f7:8c:2f:49:29:8a:65: c1:16:11:78:6b:70:2e:12:19:fb:93:55:eb:31:66:cb:c6:94: d7:27:01:3c:c5:18:53:97:01:ab:20:4a:4f:06:2a:9f:6a:c1: 3e:22:20:2d:93:2f:6b:f0:51:b0:e3:02:47:ac:7b:34:f0:27: f6:bd:08:49:b6:11:fa:b8:25:61:b1:6e:8b:cf:87:8e:f4:93: da:91:8c:2f:74:df:5a:ad:98:b0:66:74:90:e1:01:d8:0a:8a: ce:ce:1d:1e:b4:da:24:c5:58:37:10:ab:05:03:21:42:5e:29: ff:d6:c8:af:9b:42:18:23:cb:a8:b0:9a:e7:66:a1:d5:09:ba: f2:f8:b8:81:2b:06:c4:00:2e:18:bd:5a:b1:42:d8:8f:2e:06: 1f:1c:0f:ce:fd:1e:b4:8b:50:4c:6c:ce:91:11:74:a0:f7:e8: f9:9d:f3:7a:51:d3:27:c0:ed:4d:ee:96:cd:1f:ef:2a:ab:39: f3:09:ae:21:38:08:c0:8e:c9:af:71:7c:3c:60:8d:e8:9c:6f: f0:52:43:45:de:47:e9:e0:0a:cf:03:a5:11:31:c2:8b:80:28: 08:5f:1f:e6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUE2jToNEUzA/bCX4xvxxFv7q04y8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk1QjlEMzY0QkQ3NkE4MUREMzRBQTVENUM5NjVCQjFG QzI3QTUyMDAeFw0yNjAzMDExODQ1NDBaFw0yNjAzMDIyMjE1NDBaMDMxMTAvBgNV BAMTKDIwNDQ3QjIwQzQyODJCOUExQ0ZCQjA3MUE0MzE3MTc1NTRCRUMyM0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNUITpjDPngylMJYBEovIULclS tnQe5BYZlOLNiT45lD5dhD1juO7Wl2E7lbhEKm1UK5RW17hk3e8Tvg5pYxRWm5bB CX1eWHPkI9BkiwfxZyYWpy7b3VkxUPzC4WF25sQWm/MudXrspBdia+qVVD5fyvWr t0XLb3TwylZw4BqCDANIcCrHiCDh9Z2STP/MQULVSWCWzk6tLvVuqec6+8dzk5LA pDcrCgXprXXim5VaZDRmUytiWJ4Bc7bt+ebTpeY8A9SFCxIrSahFnuWdSf51Ex9Q UI9iLdKLfX1nEvWdG9306w0F3GjKSZXnKpHmWm/R4T8YB23gRonLm/P72CH1AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUIER7IMQoK5oc+7BxpDFxdVS+wjowHwYDVR0j BBgwFoAUKVudNkvXaoHdNKpdXJZbsfwnpSAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNGJOVmhqeXZzRTZUQXpreFRaV0dHajZSMWJidnlZMWNKcTNUeXA4Ujg1 OVEvMS8yOTVCOUQzNjRCRDc2QTgxREQzNEFBNUQ1Qzk2NUJCMUZDMjdBNTIwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI5NUI5RDM2NEJENzZBODFE RDM0QUE1RDVDOTY1QkIxRkMyN0E1MjAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NGJOVmhqeXZzRTZUQXpreFRaV0dHajZSMWJidnlZMWNKcTNUeXA4Ujg1OVEvMS8y OTVCOUQzNjRCRDc2QTgxREQzNEFBNUQ1Qzk2NUJCMUZDMjdBNTIwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXYArN4WN9mk5kEpVKC6R5jdqBr2+6P6yJMEKO8b3jC9JKYplwRYReGtwLhIZ +5NV6zFmy8aU1ycBPMUYU5cBqyBKTwYqn2rBPiIgLZMva/BRsOMCR6x7NPAn9r0I SbYR+rglYbFui8+HjvST2pGML3TfWq2YsGZ0kOEB2AqKzs4dHrTaJMVYNxCrBQMh Ql4p/9bIr5tCGCPLqLCa52ah1Qm68vi4gSsGxAAuGL1asULYjy4GHxwPzv0etItQ TGzOkRF0oPfo+Z3zelHTJ8DtTe6WzR/vKqs58wmuITgIwI7Jr3F8PGCN6Jxv8FJD Rd5H6eAKzwOlETHCi4AoCF8f5g== -----END CERTIFICATE-----Generated at Mon Mar 2 16:17:38 2026 by rpki-client