$ rpki-client -vvf rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.mft File: 8BAE9C90EBC5082F802055EFAA6360C661BF85CE.mft (raw, json) Hash identifier: 3w/gyboe8CPuCRsLBT3niFAsd3i5q/3bzqA0N1nMx94= Subject key identifier: B2:12:5E:8F:82:CE:6D:B6:A6:54:BA:6C:FC:5C:D9:27:33:8B:4B:28 Authority key identifier: 8B:AE:9C:90:EB:C5:08:2F:80:20:55:EF:AA:63:60:C6:61:BF:85:CE Certificate issuer: /CN=8BAE9C90EBC5082F802055EFAA6360C661BF85CE Certificate serial: 680E54F7FBC9C2B7D2EA674B5BBD64C64122591C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.cer Subject info access: rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.mft Manifest number: 036B Signing time: Sun 01 Mar 2026 17:22:06 +0000 Manifest this update: Sun 01 Mar 2026 17:17:06 +0000 Manifest next update: Mon 02 Mar 2026 21:16:06 +0000 Files and hashes: 1: 3133382e3138352e3233362e302f32322d3234203d3e20323633393139.roa (hash: KYkcxrUCG5d2OgDxXVUc4Ip1FNkjOzjKHcyZw6KqQbM=) 2: 8BAE9C90EBC5082F802055EFAA6360C661BF85CE.crl (hash: CSXkRmGs2w0yIW5D0LfNex4H9wMhK1KfFl9Qvi2qyZc=) 3: 323830343a323762633a3a2f33322d3438203d3e20323633393139.roa (hash: w/YO1KIf4eo5zvFM926/mpG6uypq9a8w/nPaoqyoSig=) 4: 3137302e302e3230382e302f32322d3234203d3e20323633393139.roa (hash: e4E3vMJmvzuFUBj3Gl3MPDMXsuyK/NWYw9KKWpE7NIU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.crl rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 02 Mar 2026 20:33:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:0e:54:f7:fb:c9:c2:b7:d2:ea:67:4b:5b:bd:64:c6:41:22:59:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BAE9C90EBC5082F802055EFAA6360C661BF85CE Validity Not Before: Mar 1 17:17:06 2026 GMT Not After : Mar 2 21:16:06 2026 GMT Subject: CN=B2125E8F82CE6DB6A654BA6CFC5CD927338B4B28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:ae:e9:35:94:9d:3a:a6:14:04:a1:fe:69:8a: b7:03:ca:77:02:cf:2e:d2:2c:e8:6e:02:de:59:c4: 59:e5:3c:3a:c7:24:4e:8f:66:9a:25:cf:2d:93:1b: c3:ef:45:70:8b:14:5a:6e:5e:b9:02:7c:3f:e3:ce: bb:bb:ef:82:b2:c5:9d:0d:74:b6:ae:f0:aa:f2:de: f7:29:73:ec:1c:67:ae:ee:e5:f2:48:01:12:e0:7b: cf:40:e4:66:94:cc:f2:c8:b9:6c:c7:be:a3:7a:c7: fc:68:a9:5e:e7:7d:3c:6c:7e:00:0b:41:9c:ef:0b: 20:e0:f8:68:c2:11:a5:29:de:df:5e:73:46:77:0d: 4d:05:3e:ec:30:e7:64:7b:26:40:be:c2:39:67:d0: 5d:e0:fa:78:01:3c:3c:e8:12:43:8f:f9:d1:91:b3: 49:f2:31:9e:0b:6e:7b:5b:15:8c:ab:0c:6f:c0:8f: 5c:50:d8:f6:46:8e:c0:2f:c7:73:51:ff:ef:15:86: e0:b9:2a:35:95:82:2f:18:1f:92:ae:f9:7f:c1:5b: cc:33:4d:49:12:ed:c6:8e:2b:ad:6d:51:a5:ad:3e: ef:90:f6:0b:70:03:74:9c:93:02:1d:ea:e8:3d:f8: 12:8e:87:f0:99:69:1f:16:a5:8d:84:31:56:55:78: 51:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:12:5E:8F:82:CE:6D:B6:A6:54:BA:6C:FC:5C:D9:27:33:8B:4B:28 X509v3 Authority Key Identifier: keyid:8B:AE:9C:90:EB:C5:08:2F:80:20:55:EF:AA:63:60:C6:61:BF:85:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:f2:05:ba:ae:34:22:7d:fa:17:d1:0c:68:6e:9c:e1:2f:37: 43:e5:f2:a7:c8:1e:ee:24:90:f0:e2:e6:4c:8a:af:0d:34:f9: 91:2c:3b:cf:c6:14:f4:06:82:a6:e2:84:b0:07:4e:06:3c:95: d0:70:5a:a2:e2:6c:3f:7c:88:9b:f7:4b:fa:4b:b7:a1:42:46: 99:c3:af:ba:c7:57:b3:a4:35:f9:f4:e5:2a:c3:d5:d0:64:6d: 26:5e:6f:69:c1:04:e8:f2:69:96:a2:46:8b:42:94:7c:61:68: 08:86:ee:0c:60:39:12:44:b3:1c:e0:ec:44:f6:31:32:2b:1f: fa:cd:2b:d9:ae:e7:73:db:90:9c:84:6f:a6:9d:23:06:3e:36: 98:37:47:2d:94:80:7b:b9:e6:1f:0d:0b:dc:4c:5e:c7:58:58: c4:55:07:50:95:71:ed:50:d5:82:e8:ed:ad:f7:47:c4:20:7e: 1f:09:32:1e:b4:2b:14:b2:af:64:4c:1c:66:98:6f:62:d5:bb: fd:99:00:39:b9:ae:95:e2:da:79:f8:4b:c4:9c:78:12:4c:fb: 61:2e:33:c5:da:8a:4c:7d:ca:4a:a1:81:0c:f9:99:55:55:d7: 11:15:0f:72:68:fd:c5:39:e3:d7:85:13:03:15:7f:ee:a7:80: a1:7c:7f:0b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUaA5U9/vJwrfS6mdLW71kxkEiWRwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJBRTlDOTBFQkM1MDgyRjgwMjA1NUVGQUE2MzYwQzY2 MUJGODVDRTAeFw0yNjAzMDExNzE3MDZaFw0yNjAzMDIyMTE2MDZaMDMxMTAvBgNV BAMTKEIyMTI1RThGODJDRTZEQjZBNjU0QkE2Q0ZDNUNEOTI3MzM4QjRCMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqruk1lJ06phQEof5pircDyncC zy7SLOhuAt5ZxFnlPDrHJE6PZpolzy2TG8PvRXCLFFpuXrkCfD/jzru774KyxZ0N dLau8Kry3vcpc+wcZ67u5fJIARLge89A5GaUzPLIuWzHvqN6x/xoqV7nfTxsfgAL QZzvCyDg+GjCEaUp3t9ec0Z3DU0FPuww52R7JkC+wjln0F3g+ngBPDzoEkOP+dGR s0nyMZ4LbntbFYyrDG/Aj1xQ2PZGjsAvx3NR/+8VhuC5KjWVgi8YH5Ku+X/BW8wz TUkS7caOK61tUaWtPu+Q9gtwA3SckwId6ug9+BKOh/CZaR8WpY2EMVZVeFH3AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUshJej4LObbamVLps/FzZJzOLSygwHwYDVR0j BBgwFoAUi66ckOvFCC+AIFXvqmNgxmG/hc4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNGNHMm9iRVVZZk1LaFdBWDQ1N25GZ3pvVFhZU3RpTEs0RGFFMzRWRFNL ODUvMS84QkFFOUM5MEVCQzUwODJGODAyMDU1RUZBQTYzNjBDNjYxQkY4NUNFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhCQUU5QzkwRUJDNTA4MkY4 MDIwNTVFRkFBNjM2MEM2NjFCRjg1Q0UuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NGNHMm9iRVVZZk1LaFdBWDQ1N25GZ3pvVFhZU3RpTEs0RGFFMzRWRFNLODUvMS84 QkFFOUM5MEVCQzUwODJGODAyMDU1RUZBQTYzNjBDNjYxQkY4NUNFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEALvIFuq40In36F9EMaG6c4S83Q+Xyp8ge7iSQ8OLmTIqvDTT5kSw7z8YU9AaC puKEsAdOBjyV0HBaouJsP3yIm/dL+ku3oUJGmcOvusdXs6Q1+fTlKsPV0GRtJl5v acEE6PJplqJGi0KUfGFoCIbuDGA5EkSzHODsRPYxMisf+s0r2a7nc9uQnIRvpp0j Bj42mDdHLZSAe7nmHw0L3Exex1hYxFUHUJVx7VDVgujtrfdHxCB+HwkyHrQrFLKv ZEwcZphvYtW7/ZkAObmuleLaefhLxJx4Ekz7YS4zxdqKTH3KSqGBDPmZVVXXERUP cmj9xTnj14UTAxV/7qeAoXx/Cw== -----END CERTIFICATE-----Generated at Sun Mar 1 21:16:49 2026 by rpki-client