$ rpki-client -vvf rpki-repo.registro.br/repo/4cqcJWksQCUwumB7M3N3VD8G5WEn6wCDWBuKZZakY4Hv/1/FB4835D41A7B3A7F4D7586CB2038F3C82A7756CA.mft File: FB4835D41A7B3A7F4D7586CB2038F3C82A7756CA.mft (raw, json) Hash identifier: 0uYCdeD2vY1t0CGcm2+oNj0Pv+OYD1ha5yuYd/1KTS0= Subject key identifier: FC:41:74:D3:20:2C:67:DA:97:17:C7:0F:DD:56:37:32:D1:EE:EB:05 Authority key identifier: FB:48:35:D4:1A:7B:3A:7F:4D:75:86:CB:20:38:F3:C8:2A:77:56:CA Certificate issuer: /CN=FB4835D41A7B3A7F4D7586CB2038F3C82A7756CA Certificate serial: 423BAA17F5AC9047BB4F6F05478B705C1FE3D3A1 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB4835D41A7B3A7F4D7586CB2038F3C82A7756CA.cer Subject info access: rsync://rpki-repo.registro.br/repo/4cqcJWksQCUwumB7M3N3VD8G5WEn6wCDWBuKZZakY4Hv/1/FB4835D41A7B3A7F4D7586CB2038F3C82A7756CA.mft Manifest number: 03A2 Signing time: Mon 02 Mar 2026 15:33:17 +0000 Manifest this update: Mon 02 Mar 2026 15:28:17 +0000 Manifest next update: Tue 03 Mar 2026 17:58:17 +0000 Files and hashes: 1: 323830343a3164633a3a2f33322d3438203d3e203533323032.roa (hash: zzSay1aEVkCdcWyA0cE7AE1kWF31+mMRB6n/IEIA0ek=) 2: 3138362e3233352e3132382e302f31392d3234203d3e203533323032.roa (hash: ENuEmt7ZVkINiyDAl9+5ESWZqEpb5tqjnhi1G+I9Vow=) 3: FB4835D41A7B3A7F4D7586CB2038F3C82A7756CA.crl (hash: UfO8rq5L0hKM8sv7xWgSUZ3Zi9iP0C7CshTiVoJDyy8=) 4: 3138362e3233352e3132382e302f32342d3234203d3e203533323032.roa (hash: 1mPfQX99fsfphn8WBqCzX+BIIK50ftjVLIO6KErtsaI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4cqcJWksQCUwumB7M3N3VD8G5WEn6wCDWBuKZZakY4Hv/1/FB4835D41A7B3A7F4D7586CB2038F3C82A7756CA.crl rsync://rpki-repo.registro.br/repo/4cqcJWksQCUwumB7M3N3VD8G5WEn6wCDWBuKZZakY4Hv/1/FB4835D41A7B3A7F4D7586CB2038F3C82A7756CA.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB4835D41A7B3A7F4D7586CB2038F3C82A7756CA.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 03 Mar 2026 17:58:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:3b:aa:17:f5:ac:90:47:bb:4f:6f:05:47:8b:70:5c:1f:e3:d3:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB4835D41A7B3A7F4D7586CB2038F3C82A7756CA Validity Not Before: Mar 2 15:28:17 2026 GMT Not After : Mar 3 17:58:17 2026 GMT Subject: CN=FC4174D3202C67DA9717C70FDD563732D1EEEB05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ba:34:2c:e5:05:e7:ac:80:6a:06:c8:09:f3: 7b:71:04:bb:49:32:3d:cb:04:91:00:73:71:09:26: 5a:6d:02:92:f3:45:ca:0a:18:9d:53:67:00:99:4c: 28:4a:67:1c:0e:db:1b:0a:96:6c:78:e2:ab:70:86: fe:65:e5:b3:01:a2:be:59:c1:8d:76:77:ce:90:33: 1a:64:b0:e4:b3:0d:b7:52:38:f3:ca:f2:1d:f1:da: 7f:0f:24:9c:48:8b:30:91:10:5a:d7:0d:50:6d:e4: 8b:f7:35:52:b9:89:bb:a4:5d:d6:a8:fa:31:d0:e0: e5:7e:76:f4:52:be:44:7d:2c:87:3b:70:18:f2:8f: 10:c9:09:90:20:aa:ad:f8:9d:a3:e3:b4:4f:85:8c: a8:ac:42:91:4b:7f:84:f2:8a:aa:23:4d:06:8c:a1: 3d:0e:07:84:4e:f5:50:b1:5f:cd:9e:b8:41:55:23: 90:d5:0f:89:8a:70:fa:57:44:a0:b0:65:e0:ad:54: 4e:c7:cf:72:8d:ce:2b:81:f9:c1:8f:15:6c:a7:68: 4e:67:57:3c:b8:30:41:50:60:46:1c:e6:51:b0:c7: 23:93:8c:6f:3a:7f:28:0a:30:0f:27:72:6d:80:40: 5c:45:2b:e3:ae:5a:95:17:2d:33:3b:5e:08:0e:38: 31:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:41:74:D3:20:2C:67:DA:97:17:C7:0F:DD:56:37:32:D1:EE:EB:05 X509v3 Authority Key Identifier: keyid:FB:48:35:D4:1A:7B:3A:7F:4D:75:86:CB:20:38:F3:C8:2A:77:56:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4cqcJWksQCUwumB7M3N3VD8G5WEn6wCDWBuKZZakY4Hv/1/FB4835D41A7B3A7F4D7586CB2038F3C82A7756CA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB4835D41A7B3A7F4D7586CB2038F3C82A7756CA.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4cqcJWksQCUwumB7M3N3VD8G5WEn6wCDWBuKZZakY4Hv/1/FB4835D41A7B3A7F4D7586CB2038F3C82A7756CA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:ef:dc:09:34:e6:f3:59:8d:02:49:d2:82:ca:23:03:2a:b6: 2c:b9:84:30:1d:ed:40:c3:1a:7e:d9:0d:8f:32:7d:b4:e2:a2: 7b:bc:90:9f:18:c5:44:63:e9:56:f2:83:17:eb:a3:d5:a0:d7: c4:45:78:ef:93:1d:8d:cf:a0:00:52:4e:69:dd:2b:a6:d9:13: 39:34:02:14:92:90:09:95:a9:39:33:15:1b:fc:da:11:75:dc: a2:e6:0b:a6:c5:e5:33:be:51:13:32:ac:c9:2d:67:41:f8:00: a4:fe:69:4e:4b:ba:af:2e:83:34:bd:4d:40:96:5d:06:ee:33: 3b:09:15:3e:e4:74:37:5c:3a:85:cb:d7:8e:74:7e:63:5e:5a: 74:b8:88:fc:d5:04:16:45:b8:7e:c7:d9:64:04:ff:ba:42:6a: 7e:6d:82:43:0c:f3:cc:c4:2a:00:82:d3:bb:f7:ab:20:51:8e: 5c:79:8d:96:f9:d3:e5:00:42:94:5b:7c:54:4a:90:11:de:5f: 0b:30:75:cc:7d:50:68:36:6e:27:fa:6b:3a:e0:3a:8b:36:e7: 4a:41:3a:8a:2f:89:00:1e:a9:40:56:09:71:95:f8:5f:9a:4d: 74:b7:00:1a:10:26:56:eb:f5:f7:c0:27:d5:83:ba:44:74:f3: 63:88:fe:ec -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUQjuqF/WskEe7T28FR4twXB/j06EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkI0ODM1RDQxQTdCM0E3RjRENzU4NkNCMjAzOEYzQzgy QTc3NTZDQTAeFw0yNjAzMDIxNTI4MTdaFw0yNjAzMDMxNzU4MTdaMDMxMTAvBgNV BAMTKEZDNDE3NEQzMjAyQzY3REE5NzE3QzcwRkRENTYzNzMyRDFFRUVCMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcujQs5QXnrIBqBsgJ83txBLtJ Mj3LBJEAc3EJJlptApLzRcoKGJ1TZwCZTChKZxwO2xsKlmx44qtwhv5l5bMBor5Z wY12d86QMxpksOSzDbdSOPPK8h3x2n8PJJxIizCREFrXDVBt5Iv3NVK5ibukXdao +jHQ4OV+dvRSvkR9LIc7cBjyjxDJCZAgqq34naPjtE+FjKisQpFLf4TyiqojTQaM oT0OB4RO9VCxX82euEFVI5DVD4mKcPpXRKCwZeCtVE7Hz3KNziuB+cGPFWynaE5n Vzy4MEFQYEYc5lGwxyOTjG86fygKMA8ncm2AQFxFK+OuWpUXLTM7XggOODElAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU/EF00yAsZ9qXF8cP3VY3MtHu6wUwHwYDVR0j BBgwFoAU+0g11Bp7On9NdYbLIDjzyCp3VsowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNGNxY0pXa3NRQ1V3dW1CN00zTjNWRDhHNVdFbjZ3Q0RXQnVLWlpha1k0 SHYvMS9GQjQ4MzVENDFBN0IzQTdGNEQ3NTg2Q0IyMDM4RjNDODJBNzc1NkNBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZCNDgzNUQ0MUE3QjNBN0Y0 RDc1ODZDQjIwMzhGM0M4MkE3NzU2Q0EuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NGNxY0pXa3NRQ1V3dW1CN00zTjNWRDhHNVdFbjZ3Q0RXQnVLWlpha1k0SHYvMS9G QjQ4MzVENDFBN0IzQTdGNEQ3NTg2Q0IyMDM4RjNDODJBNzc1NkNBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJO/cCTTm81mNAknSgsojAyq2LLmEMB3tQMMaftkNjzJ9tOKie7yQnxjFRGPp VvKDF+uj1aDXxEV475Mdjc+gAFJOad0rptkTOTQCFJKQCZWpOTMVG/zaEXXcouYL psXlM75REzKsyS1nQfgApP5pTku6ry6DNL1NQJZdBu4zOwkVPuR0N1w6hcvXjnR+ Y15adLiI/NUEFkW4fsfZZAT/ukJqfm2CQwzzzMQqAILTu/erIFGOXHmNlvnT5QBC lFt8VEqQEd5fCzB1zH1QaDZuJ/prOuA6izbnSkE6ii+JAB6pQFYJcZX4X5pNdLcA GhAmVuv198An1YO6RHTzY4j+7A== -----END CERTIFICATE-----Generated at Mon Mar 2 22:37:38 2026 by rpki-client