$ rpki-client -vvf rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/1C19E80DBAA12B8CEFCAD9E38BBC562A49BF6E63.mft File: 1C19E80DBAA12B8CEFCAD9E38BBC562A49BF6E63.mft (raw, json) Hash identifier: xV1eI2vmtczR8pBFigrGswaVtozpK0SaNLJko0sOim4= Subject key identifier: 86:63:C9:A6:E8:FD:CF:36:E8:4E:AA:18:CF:D6:A5:2C:76:16:95:1A Authority key identifier: 1C:19:E8:0D:BA:A1:2B:8C:EF:CA:D9:E3:8B:BC:56:2A:49:BF:6E:63 Certificate issuer: /CN=1C19E80DBAA12B8CEFCAD9E38BBC562A49BF6E63 Certificate serial: 45D3D7F662C0405F3587B728152DB6D86E5D3D14 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C19E80DBAA12B8CEFCAD9E38BBC562A49BF6E63.cer Subject info access: rsync://rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/1C19E80DBAA12B8CEFCAD9E38BBC562A49BF6E63.mft Manifest number: 5F Signing time: Sun 01 Mar 2026 18:49:42 +0000 Manifest this update: Sun 01 Mar 2026 18:44:42 +0000 Manifest next update: Mon 02 Mar 2026 21:56:42 +0000 Files and hashes: 1: 3138362e3232372e37362e302f32322d3332203d3e20323733343331.roa (hash: p9RhT4lVq5nKwyL7LrFDDbc9nTFkzyF7NHEulkLUAJU=) 2: 3139312e372e302e302f32332d3332203d3e20323733343331.roa (hash: LQmjA5poGNiCVqzA1d5+4wCMnXKAN90zAynt09PEKBM=) 3: 1C19E80DBAA12B8CEFCAD9E38BBC562A49BF6E63.crl (hash: 7PFXIVDaqjnebhF1UveDbxTJ5q0NSsZjqU9AM1SZ+LY=) 4: 323830343a386538343a3a2f33322d313238203d3e20323733343331.roa (hash: 5lE62mfypUR1is3D6EqKfQdFf494XA7e8gD50Xz4kNU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/1C19E80DBAA12B8CEFCAD9E38BBC562A49BF6E63.crl rsync://rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/1C19E80DBAA12B8CEFCAD9E38BBC562A49BF6E63.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C19E80DBAA12B8CEFCAD9E38BBC562A49BF6E63.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 02 Mar 2026 21:56:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:d3:d7:f6:62:c0:40:5f:35:87:b7:28:15:2d:b6:d8:6e:5d:3d:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1C19E80DBAA12B8CEFCAD9E38BBC562A49BF6E63 Validity Not Before: Mar 1 18:44:42 2026 GMT Not After : Mar 2 21:56:42 2026 GMT Subject: CN=8663C9A6E8FDCF36E84EAA18CFD6A52C7616951A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:99:93:00:c5:2f:66:95:08:57:8e:35:5f:6c: 46:7c:57:64:ee:ea:86:e6:93:02:3d:4e:3f:8a:09: 12:be:31:f5:ff:b3:6c:9a:90:82:43:9b:27:32:f2: c7:00:48:61:77:40:45:85:d9:11:00:bb:c7:e4:04: a1:d1:d3:c8:c4:78:af:5c:bb:de:02:7b:4b:c2:29: f1:fc:06:02:33:c9:8b:f5:6d:6a:b9:20:bd:a7:a4: 45:d2:69:f3:48:03:cb:f7:91:31:db:61:d4:05:cf: 16:3d:ae:0d:45:56:93:5b:5b:de:56:85:e7:c3:01: ee:20:56:7d:18:41:38:3b:da:7d:16:e9:5b:f7:9e: 08:a8:09:aa:56:66:78:82:78:a3:25:51:37:0f:0e: 21:7a:ac:a1:f5:13:2f:06:dd:9f:f6:54:4a:1a:35: 7c:bc:b9:71:3f:74:ca:45:d4:56:1b:bd:96:39:2c: 1d:35:2b:2b:43:cd:47:97:60:a3:bd:0a:a5:f3:ea: 2b:3c:b3:c8:39:0a:2b:4c:cf:da:43:2e:bf:5c:41: 90:46:ee:95:b9:9c:2f:bc:e7:72:0f:32:4f:66:60: 9a:99:fd:63:c8:67:1f:19:e0:39:09:df:37:3f:7f: 91:ad:ba:fe:1a:8a:e8:22:7e:72:c7:28:f8:f4:a4: 79:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:63:C9:A6:E8:FD:CF:36:E8:4E:AA:18:CF:D6:A5:2C:76:16:95:1A X509v3 Authority Key Identifier: keyid:1C:19:E8:0D:BA:A1:2B:8C:EF:CA:D9:E3:8B:BC:56:2A:49:BF:6E:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/1C19E80DBAA12B8CEFCAD9E38BBC562A49BF6E63.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C19E80DBAA12B8CEFCAD9E38BBC562A49BF6E63.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/1C19E80DBAA12B8CEFCAD9E38BBC562A49BF6E63.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:25:ac:41:9d:ca:fa:d7:62:c1:76:f8:de:2a:9d:2b:b5:d4: 0b:80:d1:ec:10:3e:70:33:83:fd:9e:dc:59:9a:89:1d:2f:9f: dd:28:06:5e:c8:dc:c4:a1:73:4e:19:19:66:4c:41:6e:48:be: ff:c3:15:76:d7:26:ce:91:09:2b:33:d0:14:a2:b5:f7:cb:9b: 34:6b:d4:7b:1c:3d:82:e3:8d:2c:66:db:72:aa:02:05:a3:ea: cc:4b:0f:23:df:ae:8d:5b:6a:1a:b8:4e:39:e9:31:4b:5c:e4: 3e:0e:e7:03:ad:fd:b3:a6:13:c5:cd:5b:b4:9d:56:93:b2:71: 1c:60:f8:27:51:06:f7:ab:5f:da:71:42:a5:2e:67:9b:d2:3f: ba:40:5e:bb:8a:ca:9b:5a:a7:44:80:8f:41:bd:79:22:46:f0: 16:6a:31:3f:ef:6a:0b:dd:ad:41:b4:fe:a4:30:15:c6:15:42: ef:ad:2b:c3:65:a5:47:59:fc:2d:14:c8:fa:22:51:55:5d:08: 41:7d:8b:98:e7:99:a6:3f:4f:62:5f:f4:37:d9:01:b7:89:7b: 49:1f:4b:35:a2:06:e0:6d:5a:e7:c4:bb:80:f0:22:58:38:ba: 37:bd:67:16:08:f8:e4:4f:38:82:c5:65:ef:f7:5a:6c:2f:a6: d9:f1:c0:a1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIURdPX9mLAQF81h7coFS222G5dPRQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUMxOUU4MERCQUExMkI4Q0VGQ0FEOUUzOEJCQzU2MkE0 OUJGNkU2MzAeFw0yNjAzMDExODQ0NDJaFw0yNjAzMDIyMTU2NDJaMDMxMTAvBgNV BAMTKDg2NjNDOUE2RThGRENGMzZFODRFQUExOENGRDZBNTJDNzYxNjk1MUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBmZMAxS9mlQhXjjVfbEZ8V2Tu 6obmkwI9Tj+KCRK+MfX/s2yakIJDmycy8scASGF3QEWF2REAu8fkBKHR08jEeK9c u94Ce0vCKfH8BgIzyYv1bWq5IL2npEXSafNIA8v3kTHbYdQFzxY9rg1FVpNbW95W hefDAe4gVn0YQTg72n0W6Vv3ngioCapWZniCeKMlUTcPDiF6rKH1Ey8G3Z/2VEoa NXy8uXE/dMpF1FYbvZY5LB01KytDzUeXYKO9CqXz6is8s8g5CitMz9pDLr9cQZBG 7pW5nC+853IPMk9mYJqZ/WPIZx8Z4DkJ3zc/f5Gtuv4aiugifnLHKPj0pHlRAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUhmPJpuj9zzboTqoYz9alLHYWlRowHwYDVR0j BBgwFoAUHBnoDbqhK4zvytnji7xWKkm/bmMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNGlwazRlUWQ5elV1Y3lFeExrc0NZeHlLNFNxRWR2R1FzSkxMazlNc3Bt RlgvMC8xQzE5RTgwREJBQTEyQjhDRUZDQUQ5RTM4QkJDNTYyQTQ5QkY2RTYzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFDMTlFODBEQkFBMTJCOENF RkNBRDlFMzhCQkM1NjJBNDlCRjZFNjMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NGlwazRlUWQ5elV1Y3lFeExrc0NZeHlLNFNxRWR2R1FzSkxMazlNc3BtRlgvMC8x QzE5RTgwREJBQTEyQjhDRUZDQUQ5RTM4QkJDNTYyQTQ5QkY2RTYzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAyCWsQZ3K+tdiwXb43iqdK7XUC4DR7BA+cDOD/Z7cWZqJHS+f3SgGXsjcxKFz ThkZZkxBbki+/8MVdtcmzpEJKzPQFKK198ubNGvUexw9guONLGbbcqoCBaPqzEsP I9+ujVtqGrhOOekxS1zkPg7nA639s6YTxc1btJ1Wk7JxHGD4J1EG96tf2nFCpS5n m9I/ukBeu4rKm1qnRICPQb15IkbwFmoxP+9qC92tQbT+pDAVxhVC760rw2WlR1n8 LRTI+iJRVV0IQX2LmOeZpj9PYl/0N9kBt4l7SR9LNaIG4G1a58S7gPAiWDi6N71n Fgj45E84gsVl7/dabC+m2fHAoQ== -----END CERTIFICATE-----Generated at Mon Mar 2 15:37:22 2026 by rpki-client