$ rpki-client -vvf rpki-repo.registro.br/repo/4jkPcRmxHMoom96gmaNWYQJv1Lh2PQhYvWeMV22YXci4/1/2A07DF4D61C2A80B9E0A6BE4F5D7A80930C735CB.mft File: 2A07DF4D61C2A80B9E0A6BE4F5D7A80930C735CB.mft (raw, json) Hash identifier: 2UGdkHaAHykwub+yJ0tRm0jeQl1theLo66np3wd206E= Subject key identifier: 11:FE:BF:74:05:26:AC:E1:52:94:2E:7D:4B:F4:2B:10:0B:A0:25:B0 Authority key identifier: 2A:07:DF:4D:61:C2:A8:0B:9E:0A:6B:E4:F5:D7:A8:09:30:C7:35:CB Certificate issuer: /CN=2A07DF4D61C2A80B9E0A6BE4F5D7A80930C735CB Certificate serial: 048F386C55A740E3A41269919D25AC4AFB5D0AA2 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A07DF4D61C2A80B9E0A6BE4F5D7A80930C735CB.cer Subject info access: rsync://rpki-repo.registro.br/repo/4jkPcRmxHMoom96gmaNWYQJv1Lh2PQhYvWeMV22YXci4/1/2A07DF4D61C2A80B9E0A6BE4F5D7A80930C735CB.mft Manifest number: 03A2 Signing time: Mon 02 Mar 2026 10:40:53 +0000 Manifest this update: Mon 02 Mar 2026 10:35:53 +0000 Manifest next update: Tue 03 Mar 2026 12:17:53 +0000 Files and hashes: 1: 2A07DF4D61C2A80B9E0A6BE4F5D7A80930C735CB.crl (hash: k5SzjgH+jjmijivSmp4jjvUWGSZwFEHyitlOvSJ081M=) 2: 34352e3137352e31322e302f32322d3234203d3e20323638383734.roa (hash: Gr61bIojfm0jhwKq3KKpboNVR8t+czSPfPn+sKOe4bU=) 3: 323830343a356265303a3a2f33322d3332203d3e20323638383734.roa (hash: HyTB1ovQKz4OIuy7dSkUxoWOc7VcGBTFbvVSGAQ1DmU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4jkPcRmxHMoom96gmaNWYQJv1Lh2PQhYvWeMV22YXci4/1/2A07DF4D61C2A80B9E0A6BE4F5D7A80930C735CB.crl rsync://rpki-repo.registro.br/repo/4jkPcRmxHMoom96gmaNWYQJv1Lh2PQhYvWeMV22YXci4/1/2A07DF4D61C2A80B9E0A6BE4F5D7A80930C735CB.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A07DF4D61C2A80B9E0A6BE4F5D7A80930C735CB.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 03 Mar 2026 12:17:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:8f:38:6c:55:a7:40:e3:a4:12:69:91:9d:25:ac:4a:fb:5d:0a:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A07DF4D61C2A80B9E0A6BE4F5D7A80930C735CB Validity Not Before: Mar 2 10:35:53 2026 GMT Not After : Mar 3 12:17:53 2026 GMT Subject: CN=11FEBF740526ACE152942E7D4BF42B100BA025B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ed:c9:c4:7c:5d:07:84:bd:05:4e:d9:ce:b7: 21:2b:dc:db:bd:c5:2e:7b:e1:97:47:e2:be:5d:9c: e5:23:d0:36:b2:4b:8d:b4:74:aa:69:31:9d:8d:46: 7c:f5:44:8d:2e:1c:65:8f:1c:dd:be:01:02:6b:26: 2c:2f:c1:08:02:7a:13:7f:ba:71:e7:2d:be:72:e3: fd:40:2d:7c:ee:de:56:60:a4:64:64:48:c1:4f:82: 7a:c4:ab:34:34:13:4b:cc:28:40:f8:af:64:8d:1a: de:43:83:f0:94:2d:98:71:0b:fd:d6:ad:99:1b:f1: f1:cb:eb:1d:66:19:52:49:86:9a:8e:05:de:89:23: 50:07:35:18:af:2f:ec:50:0a:9d:e4:94:7b:ad:1d: 6a:45:49:12:57:84:91:cf:72:98:63:13:64:6c:d1: e4:a6:82:5b:ab:1c:9f:1f:6d:89:df:00:cf:f4:ca: 2a:99:dc:1e:4f:60:da:c2:2d:1b:71:24:2b:5e:e0: 9d:08:5f:3f:a7:cd:50:63:81:4b:81:97:b4:fa:a4: 3f:ea:b7:3c:32:b7:4e:0d:c7:c5:d9:b7:4b:3c:e0: 16:e3:0b:e6:36:cd:f8:64:df:4e:60:75:e2:f3:e2: d6:c4:9e:27:0e:8f:5d:7a:f8:97:cd:5c:cb:7c:11: 21:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:FE:BF:74:05:26:AC:E1:52:94:2E:7D:4B:F4:2B:10:0B:A0:25:B0 X509v3 Authority Key Identifier: keyid:2A:07:DF:4D:61:C2:A8:0B:9E:0A:6B:E4:F5:D7:A8:09:30:C7:35:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4jkPcRmxHMoom96gmaNWYQJv1Lh2PQhYvWeMV22YXci4/1/2A07DF4D61C2A80B9E0A6BE4F5D7A80930C735CB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A07DF4D61C2A80B9E0A6BE4F5D7A80930C735CB.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4jkPcRmxHMoom96gmaNWYQJv1Lh2PQhYvWeMV22YXci4/1/2A07DF4D61C2A80B9E0A6BE4F5D7A80930C735CB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:4e:c1:fc:7e:78:ac:6c:cd:0b:8d:5b:89:96:c1:9e:51:8d: 4a:af:e4:fd:96:4a:3d:e2:f0:50:c0:51:53:d3:76:17:b6:0c: d9:d0:db:81:8c:95:c5:bf:45:e1:e6:87:be:6b:4b:cf:2f:69: 87:56:bf:0f:9b:38:f2:70:82:5c:15:69:2e:57:89:24:22:e4: 6d:b7:95:10:71:af:84:e7:52:89:1c:17:f8:63:54:3e:01:4b: d0:03:25:d2:cc:3d:b7:75:8e:8d:8b:91:fa:7f:47:0c:51:9a: d0:20:df:19:a5:2b:5a:66:24:f9:b1:a5:2b:fb:f8:71:f2:84: fe:84:68:d5:60:83:3c:c4:a6:06:26:f6:4b:a9:48:12:f2:7e: cd:70:4d:4a:91:0c:aa:5b:bf:6d:4c:24:de:2f:d2:a0:15:3f: ba:3a:e0:d1:97:f2:63:86:4e:d3:f5:17:2c:31:b6:cf:db:69: 92:0f:89:f5:bd:69:19:32:6f:9f:1f:a4:06:fb:c9:0d:08:13: b2:e1:d0:a5:08:7f:87:1f:76:d6:47:00:54:64:9e:7c:43:68: 96:3b:c0:7b:f4:66:e2:0a:ed:45:e5:d4:5e:f4:85:5d:6c:2d: 57:74:f6:8d:41:59:7f:65:00:6c:8b:f3:00:e0:5d:b7:f3:a9: ac:bc:77:12 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUBI84bFWnQOOkEmmRnSWsSvtdCqIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEwN0RGNEQ2MUMyQTgwQjlFMEE2QkU0RjVEN0E4MDkz MEM3MzVDQjAeFw0yNjAzMDIxMDM1NTNaFw0yNjAzMDMxMjE3NTNaMDMxMTAvBgNV BAMTKDExRkVCRjc0MDUyNkFDRTE1Mjk0MkU3RDRCRjQyQjEwMEJBMDI1QjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr7cnEfF0HhL0FTtnOtyEr3Nu9 xS574ZdH4r5dnOUj0DayS420dKppMZ2NRnz1RI0uHGWPHN2+AQJrJiwvwQgCehN/ unHnLb5y4/1ALXzu3lZgpGRkSMFPgnrEqzQ0E0vMKED4r2SNGt5Dg/CULZhxC/3W rZkb8fHL6x1mGVJJhpqOBd6JI1AHNRivL+xQCp3klHutHWpFSRJXhJHPcphjE2Rs 0eSmglurHJ8fbYnfAM/0yiqZ3B5PYNrCLRtxJCte4J0IXz+nzVBjgUuBl7T6pD/q tzwyt04Nx8XZt0s84BbjC+Y2zfhk305gdeLz4tbEnicOj116+JfNXMt8ESFPAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUEf6/dAUmrOFSlC59S/QrEAugJbAwHwYDVR0j BBgwFoAUKgffTWHCqAueCmvk9deoCTDHNcswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNGprUGNSbXhITW9vbTk2Z21hTldZUUp2MUxoMlBRaFl2V2VNVjIyWVhj aTQvMS8yQTA3REY0RDYxQzJBODBCOUUwQTZCRTRGNUQ3QTgwOTMwQzczNUNCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJBMDdERjRENjFDMkE4MEI5 RTBBNkJFNEY1RDdBODA5MzBDNzM1Q0IuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NGprUGNSbXhITW9vbTk2Z21hTldZUUp2MUxoMlBRaFl2V2VNVjIyWVhjaTQvMS8y QTA3REY0RDYxQzJBODBCOUUwQTZCRTRGNUQ3QTgwOTMwQzczNUNCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAv07B/H54rGzNC41biZbBnlGNSq/k/ZZKPeLwUMBRU9N2F7YM2dDbgYyVxb9F 4eaHvmtLzy9ph1a/D5s48nCCXBVpLleJJCLkbbeVEHGvhOdSiRwX+GNUPgFL0AMl 0sw9t3WOjYuR+n9HDFGa0CDfGaUrWmYk+bGlK/v4cfKE/oRo1WCDPMSmBib2S6lI EvJ+zXBNSpEMqlu/bUwk3i/SoBU/ujrg0ZfyY4ZO0/UXLDG2z9tpkg+J9b1pGTJv nx+kBvvJDQgTsuHQpQh/hx921kcAVGSefENoljvAe/Rm4grtReXUXvSFXWwtV3T2 jUFZf2UAbIvzAOBdt/OprLx3Eg== -----END CERTIFICATE-----Generated at Mon Mar 2 17:58:54 2026 by rpki-client