$ rpki-client -vvf rpki-repo.registro.br/repo/52e8pEonz7issDNX56ZPqJAou8vEAdthUUnjtQRtkm7U/0/F9D7CAB3DBB6E836A9DA1124EB1C0DD2E4A3AFD2.mft File: F9D7CAB3DBB6E836A9DA1124EB1C0DD2E4A3AFD2.mft (raw, json) Hash identifier: tKMIOvc/wJyalVAqv8u4rtLGUkja6f05dBUHjpIzLY8= Subject key identifier: 95:CC:ED:A4:14:98:C0:D7:EE:67:D4:3D:08:32:99:5E:31:77:7A:16 Authority key identifier: F9:D7:CA:B3:DB:B6:E8:36:A9:DA:11:24:EB:1C:0D:D2:E4:A3:AF:D2 Certificate issuer: /CN=F9D7CAB3DBB6E836A9DA1124EB1C0DD2E4A3AFD2 Certificate serial: 442C3CCC03FEF8AA134F03F126EFBA4F24B52F7F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9D7CAB3DBB6E836A9DA1124EB1C0DD2E4A3AFD2.cer Subject info access: rsync://rpki-repo.registro.br/repo/52e8pEonz7issDNX56ZPqJAou8vEAdthUUnjtQRtkm7U/0/F9D7CAB3DBB6E836A9DA1124EB1C0DD2E4A3AFD2.mft Manifest number: B5 Signing time: Sun 01 Mar 2026 10:42:05 +0000 Manifest this update: Sun 01 Mar 2026 10:37:05 +0000 Manifest next update: Mon 02 Mar 2026 14:39:05 +0000 Files and hashes: 1: 34352e3232382e34342e302f32322d3332203d3e20323637303438.roa (hash: 7cDCdLU6VMbWBqB6t/edQ+r3L6KgzYWBki0xGa4vL0s=) 2: F9D7CAB3DBB6E836A9DA1124EB1C0DD2E4A3AFD2.crl (hash: byFriV0+PppCux6IdJl+NoRQ4uxpzE1PDw7imA2J9C8=) 3: 323830343a343735633a3a2f33322d313238203d3e20323637303438.roa (hash: jp3jh3cXGLRbte/PrsJ/rlc1qYfSMcCfJHgTskp8KeA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/52e8pEonz7issDNX56ZPqJAou8vEAdthUUnjtQRtkm7U/0/F9D7CAB3DBB6E836A9DA1124EB1C0DD2E4A3AFD2.crl rsync://rpki-repo.registro.br/repo/52e8pEonz7issDNX56ZPqJAou8vEAdthUUnjtQRtkm7U/0/F9D7CAB3DBB6E836A9DA1124EB1C0DD2E4A3AFD2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9D7CAB3DBB6E836A9DA1124EB1C0DD2E4A3AFD2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 02 Mar 2026 14:39:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:2c:3c:cc:03:fe:f8:aa:13:4f:03:f1:26:ef:ba:4f:24:b5:2f:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9D7CAB3DBB6E836A9DA1124EB1C0DD2E4A3AFD2 Validity Not Before: Mar 1 10:37:05 2026 GMT Not After : Mar 2 14:39:05 2026 GMT Subject: CN=95CCEDA41498C0D7EE67D43D0832995E31777A16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:59:36:71:fc:16:d2:b9:19:cc:b8:c0:e7:1d: 95:d4:8a:27:7d:6f:2b:4c:e4:b1:2f:b3:62:5f:3e: 71:ea:49:d3:e0:0b:24:f2:8c:d9:f1:a0:8b:a7:80: fe:fa:59:4c:1e:3b:bc:3e:d4:dd:81:fb:40:d9:56: 23:f8:cc:df:d8:96:b7:5a:8f:8d:7c:be:6a:7e:f3: 01:63:5c:1b:6e:91:46:2f:49:ba:c1:93:41:f6:21: cf:65:e1:64:19:8a:62:5c:5c:e6:ff:f2:f2:b8:24: 80:b2:81:2b:40:6f:94:fb:80:4e:8a:2c:d3:d1:4c: a7:40:c1:e7:83:45:57:df:98:f0:fe:4c:35:6c:3b: 87:3d:6a:a1:8b:82:cf:02:cf:77:79:83:bf:6f:58: 8a:90:5a:52:58:df:15:a0:31:b0:ad:0d:26:39:0d: be:c1:c5:65:c7:94:27:35:a6:b3:a9:2b:03:4c:bc: fd:36:eb:8f:2f:95:a3:01:b8:ca:88:b9:a9:41:78: e6:4f:23:14:9d:79:2c:c0:be:e7:50:bd:7f:14:97: ea:33:62:c7:d9:bf:c0:c8:d1:1c:e1:e7:65:d1:6c: ba:f4:17:c1:5b:6c:fb:ff:27:ed:88:05:21:50:23: 30:00:4f:6a:34:fa:11:ac:24:be:ec:94:26:61:80: 67:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:CC:ED:A4:14:98:C0:D7:EE:67:D4:3D:08:32:99:5E:31:77:7A:16 X509v3 Authority Key Identifier: keyid:F9:D7:CA:B3:DB:B6:E8:36:A9:DA:11:24:EB:1C:0D:D2:E4:A3:AF:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/52e8pEonz7issDNX56ZPqJAou8vEAdthUUnjtQRtkm7U/0/F9D7CAB3DBB6E836A9DA1124EB1C0DD2E4A3AFD2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9D7CAB3DBB6E836A9DA1124EB1C0DD2E4A3AFD2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/52e8pEonz7issDNX56ZPqJAou8vEAdthUUnjtQRtkm7U/0/F9D7CAB3DBB6E836A9DA1124EB1C0DD2E4A3AFD2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:dc:8a:b8:b0:6d:92:81:52:38:e8:23:27:59:6a:87:3d:ce: f0:ed:a2:24:16:33:86:e7:1a:1e:89:6c:ad:33:f2:68:d0:90: 55:aa:52:79:a5:c3:98:c4:be:f6:a6:9b:5a:02:bd:70:47:7f: 76:a1:c5:70:71:b2:d4:c9:33:1d:b0:19:6c:66:12:f9:5e:d9: ee:13:dc:a7:33:4c:16:0d:e8:9c:db:9d:ec:fa:c0:d8:95:97: 12:cc:9a:33:e8:f6:5e:b3:37:7e:7b:9a:a8:5b:9e:d9:e4:de: e6:d4:b0:13:ec:87:63:b6:7c:07:b9:18:5a:a3:cb:e9:e8:43: f3:c8:30:c1:ae:9e:ae:24:cc:ca:8c:7d:01:1c:3c:b0:0f:36: 67:97:2e:0c:f2:46:fd:33:6a:bd:64:95:ea:c4:31:6b:04:b6: c2:d2:45:8a:10:15:21:41:a7:6e:ba:a2:ee:01:a1:2d:57:02: 86:f5:2d:a8:bf:0a:4e:d2:cd:f6:a5:9a:aa:42:06:ab:5e:7a: 54:42:e4:d1:53:b4:ce:5c:63:d1:19:17:0c:14:8c:c8:b0:8f: f0:a8:9a:09:bd:01:db:18:62:6f:d5:74:df:b8:b0:2a:c2:48: 69:d1:ea:30:e5:84:4f:6e:3e:56:fa:83:2a:02:9f:ee:33:3e: 96:85:44:f0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIURCw8zAP++KoTTwPxJu+6TyS1L38wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjlEN0NBQjNEQkI2RTgzNkE5REExMTI0RUIxQzBERDJF NEEzQUZEMjAeFw0yNjAzMDExMDM3MDVaFw0yNjAzMDIxNDM5MDVaMDMxMTAvBgNV BAMTKDk1Q0NFREE0MTQ5OEMwRDdFRTY3RDQzRDA4MzI5OTVFMzE3NzdBMTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1WTZx/BbSuRnMuMDnHZXUiid9 bytM5LEvs2JfPnHqSdPgCyTyjNnxoIungP76WUweO7w+1N2B+0DZViP4zN/Ylrda j418vmp+8wFjXBtukUYvSbrBk0H2Ic9l4WQZimJcXOb/8vK4JICygStAb5T7gE6K LNPRTKdAweeDRVffmPD+TDVsO4c9aqGLgs8Cz3d5g79vWIqQWlJY3xWgMbCtDSY5 Db7BxWXHlCc1prOpKwNMvP02648vlaMBuMqIualBeOZPIxSdeSzAvudQvX8Ul+oz YsfZv8DI0Rzh52XRbLr0F8FbbPv/J+2IBSFQIzAAT2o0+hGsJL7slCZhgGeVAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUlcztpBSYwNfuZ9Q9CDKZXjF3ehYwHwYDVR0j BBgwFoAU+dfKs9u26Dap2hEk6xwN0uSjr9IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNTJlOHBFb256N2lzc0ROWDU2WlBxSkFvdTh2RUFkdGhVVW5qdFFSdGtt N1UvMC9GOUQ3Q0FCM0RCQjZFODM2QTlEQTExMjRFQjFDMEREMkU0QTNBRkQyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y5RDdDQUIzREJCNkU4MzZB OURBMTEyNEVCMUMwREQyRTRBM0FGRDIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NTJlOHBFb256N2lzc0ROWDU2WlBxSkFvdTh2RUFkdGhVVW5qdFFSdGttN1UvMC9G OUQ3Q0FCM0RCQjZFODM2QTlEQTExMjRFQjFDMEREMkU0QTNBRkQyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEApNyKuLBtkoFSOOgjJ1lqhz3O8O2iJBYzhucaHolsrTPyaNCQVapSeaXDmMS+ 9qabWgK9cEd/dqHFcHGy1MkzHbAZbGYS+V7Z7hPcpzNMFg3onNud7PrA2JWXEsya M+j2XrM3fnuaqFue2eTe5tSwE+yHY7Z8B7kYWqPL6ehD88gwwa6eriTMyox9ARw8 sA82Z5cuDPJG/TNqvWSV6sQxawS2wtJFihAVIUGnbrqi7gGhLVcChvUtqL8KTtLN 9qWaqkIGq156VELk0VO0zlxj0RkXDBSMyLCP8KiaCb0B2xhib9V037iwKsJIadHq MOWET24+VvqDKgKf7jM+loVE8A== -----END CERTIFICATE-----Generated at Sun Mar 1 22:39:50 2026 by rpki-client