$ rpki-client -vvf rpki-repo.registro.br/repo/4oWon9ukj5YKgYfECdsH4rb97JUFpcX2tZF2qS6M9662/0/40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.mft File: 40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.mft (raw, json) Hash identifier: 1OsoFpqIc75ch2Ly87DQVUeXtRSNNxNQ6MKN61UxzdM= Subject key identifier: 04:36:7D:02:64:2B:DC:B0:94:D1:90:4C:52:88:32:3A:EA:E1:69:D9 Authority key identifier: 40:BB:14:A2:FD:8B:81:10:30:42:BF:32:FA:C9:B2:D9:0A:CF:8A:FE Certificate issuer: /CN=40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE Certificate serial: 3D691F6BCD7FACBE99E730FBB785D68852050671 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.cer Subject info access: rsync://rpki-repo.registro.br/repo/4oWon9ukj5YKgYfECdsH4rb97JUFpcX2tZF2qS6M9662/0/40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.mft Manifest number: 01A1 Signing time: Mon 02 Mar 2026 06:04:21 +0000 Manifest this update: Mon 02 Mar 2026 05:59:21 +0000 Manifest next update: Tue 03 Mar 2026 07:59:21 +0000 Files and hashes: 1: 40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.crl (hash: O4gQXXP49NwkT4Lkek2IcqFDqRxU9FDAwb6S40PYUKs=) 2: 34352e3138392e33322e302f32342d3234203d3e20323734373633.roa (hash: f9h0xJPe6EC4HPN8Q4Vq2DpTHhojeqACv3nqBQ14BsY=) 3: 34352e3138392e33332e302f32342d3234203d3e20323734373633.roa (hash: 94RYiufY7USp0r1Hhmx7uAPsAj5eXGZhHiDHteIZcag=) 4: 34352e3138392e33352e302f32342d3234203d3e20323734373633.roa (hash: 1p2OZ2GU51vARCDd2EzB05jBSXBxDQiaqictJ71WwZg=) 5: 34352e3138392e33342e302f32342d3234203d3e20323734373633.roa (hash: +8SomA8CorpblFccJ5hAIRLE8zYsycHTpbXTAfqfp8w=) 6: 323830343a393333343a666630303a3a2f34302d3430203d3e20323734373633.roa (hash: Y/91UtAKoquFsWubq6LOKvQldnEvym4LP9Ysec9nxMw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4oWon9ukj5YKgYfECdsH4rb97JUFpcX2tZF2qS6M9662/0/40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.crl rsync://rpki-repo.registro.br/repo/4oWon9ukj5YKgYfECdsH4rb97JUFpcX2tZF2qS6M9662/0/40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 03 Mar 2026 07:59:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:69:1f:6b:cd:7f:ac:be:99:e7:30:fb:b7:85:d6:88:52:05:06:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE Validity Not Before: Mar 2 05:59:21 2026 GMT Not After : Mar 3 07:59:21 2026 GMT Subject: CN=04367D02642BDCB094D1904C5288323AEAE169D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a3:ed:f3:29:4b:69:1e:45:f0:2d:07:17:f5: 0a:af:3b:ea:c4:34:9c:da:f9:c6:ad:c3:90:2c:e3: 41:46:b5:f7:23:92:6c:43:65:0d:cb:85:56:6a:27: 61:ab:08:b0:9c:83:3f:cb:ca:2a:08:58:94:e9:d9: c5:d0:a0:4f:bf:29:7b:8e:b3:1b:36:fb:ab:2c:89: e0:16:f4:fc:9b:4b:89:bd:22:19:3f:eb:2f:99:e7: aa:d6:73:32:06:da:b2:1f:1a:34:62:a7:c3:c2:ec: 61:f7:02:5c:7c:39:9f:31:50:38:b4:0d:72:58:13: 7c:c4:98:3b:bc:7a:77:42:a2:60:28:ee:1b:c8:85: ca:22:4e:d1:30:74:2f:48:52:90:fa:27:84:58:12: e0:9a:47:94:21:e7:20:5e:ee:e4:ec:72:f2:1c:91: a2:39:1c:75:01:8a:63:10:ad:aa:1b:a6:0e:0c:c8: 19:24:d6:e4:1f:d9:6f:35:94:a5:92:99:80:c5:51: d5:11:96:63:0d:44:81:f7:f3:9c:70:0b:4a:32:5b: 96:0e:17:d2:ba:29:1e:53:6f:a5:7c:58:8d:28:95: 84:5d:ff:81:ba:9c:a9:ea:f8:37:b8:98:27:3a:b9: 93:0f:d5:95:d4:b5:6e:4f:3c:5e:79:59:6a:ce:73: 08:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:36:7D:02:64:2B:DC:B0:94:D1:90:4C:52:88:32:3A:EA:E1:69:D9 X509v3 Authority Key Identifier: keyid:40:BB:14:A2:FD:8B:81:10:30:42:BF:32:FA:C9:B2:D9:0A:CF:8A:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4oWon9ukj5YKgYfECdsH4rb97JUFpcX2tZF2qS6M9662/0/40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4oWon9ukj5YKgYfECdsH4rb97JUFpcX2tZF2qS6M9662/0/40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:3f:58:60:1c:7f:74:f4:e6:5f:cd:9c:47:8f:f6:e0:de:dc: d5:04:b2:c6:0f:c2:20:74:c1:ab:05:a1:27:1b:b7:b0:df:ec: ff:2b:58:65:7d:22:92:e8:c8:8e:99:81:50:72:20:3d:b3:67: 7b:ff:4e:36:d8:f5:40:f9:94:53:f9:d8:be:16:12:46:64:d5: 6e:ae:8d:99:4e:99:41:0e:e0:12:2a:02:ed:55:48:90:25:ae: 24:61:b5:04:01:c9:a9:99:71:f3:a2:a1:f8:de:a2:07:b0:30: 7e:7c:9d:65:64:67:54:03:7d:99:c7:e9:60:46:da:0e:8d:fb: a0:02:5a:16:43:fd:d6:35:03:2d:63:d3:a2:11:03:1e:6c:12: 38:bb:83:d1:d4:38:74:d3:42:f4:cc:1d:8a:fb:21:6b:b6:76: 1b:6c:00:79:c1:11:17:80:0f:1b:a8:7e:86:97:6a:b4:e4:d1: 42:b5:d4:68:0c:cf:24:b4:81:72:1a:a6:c9:ea:7e:09:35:f8: 8d:80:e7:d6:6a:0c:b9:c7:73:9a:7f:63:a1:bb:d5:2d:36:8a: cc:cf:9d:c2:a2:5b:27:44:6a:4b:30:c3:2e:72:93:e2:5e:0a: da:09:67:7b:81:d2:49:b6:82:cb:bc:c1:fb:64:de:93:2f:dc: f3:5d:cd:a2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUPWkfa81/rL6Z5zD7t4XWiFIFBnEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDBCQjE0QTJGRDhCODExMDMwNDJCRjMyRkFDOUIyRDkw QUNGOEFGRTAeFw0yNjAzMDIwNTU5MjFaFw0yNjAzMDMwNzU5MjFaMDMxMTAvBgNV BAMTKDA0MzY3RDAyNjQyQkRDQjA5NEQxOTA0QzUyODgzMjNBRUFFMTY5RDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoo+3zKUtpHkXwLQcX9QqvO+rE NJza+catw5As40FGtfcjkmxDZQ3LhVZqJ2GrCLCcgz/LyioIWJTp2cXQoE+/KXuO sxs2+6ssieAW9PybS4m9Ihk/6y+Z56rWczIG2rIfGjRip8PC7GH3Alx8OZ8xUDi0 DXJYE3zEmDu8endComAo7hvIhcoiTtEwdC9IUpD6J4RYEuCaR5Qh5yBe7uTscvIc kaI5HHUBimMQraobpg4MyBkk1uQf2W81lKWSmYDFUdURlmMNRIH385xwC0oyW5YO F9K6KR5Tb6V8WI0olYRd/4G6nKnq+De4mCc6uZMP1ZXUtW5PPF55WWrOcwg9AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUBDZ9AmQr3LCU0ZBMUogyOurhadkwHwYDVR0j BBgwFoAUQLsUov2LgRAwQr8y+smy2QrPiv4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNG9Xb245dWtqNVlLZ1lmRUNkc0g0cmI5N0pVRnBjWDJ0WkYycVM2TTk2 NjIvMC80MEJCMTRBMkZEOEI4MTEwMzA0MkJGMzJGQUM5QjJEOTBBQ0Y4QUZFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQwQkIxNEEyRkQ4QjgxMTAz MDQyQkYzMkZBQzlCMkQ5MEFDRjhBRkUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NG9Xb245dWtqNVlLZ1lmRUNkc0g0cmI5N0pVRnBjWDJ0WkYycVM2TTk2NjIvMC80 MEJCMTRBMkZEOEI4MTEwMzA0MkJGMzJGQUM5QjJEOTBBQ0Y4QUZFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPj9YYBx/dPTmX82cR4/24N7c1QSyxg/CIHTBqwWhJxu3sN/s/ytYZX0ikujI jpmBUHIgPbNne/9ONtj1QPmUU/nYvhYSRmTVbq6NmU6ZQQ7gEioC7VVIkCWuJGG1 BAHJqZlx86Kh+N6iB7AwfnydZWRnVAN9mcfpYEbaDo37oAJaFkP91jUDLWPTohED HmwSOLuD0dQ4dNNC9Mwdivsha7Z2G2wAecERF4APG6h+hpdqtOTRQrXUaAzPJLSB chqmyep+CTX4jYDn1moMucdzmn9jobvVLTaKzM+dwqJbJ0RqSzDDLnKT4l4K2gln e4HSSbaCy7zB+2Teky/c813Nog== -----END CERTIFICATE-----Generated at Mon Mar 2 19:43:11 2026 by rpki-client