$ rpki-client -vvf rpki-repo.registro.br/repo/5cheyxTnGDnvuwzxM38F4toYC73UHZ6U6izUyoRrGsgt/0/4856F1A3B30D5C7881DA87018005E5D420414FCA.mft File: 4856F1A3B30D5C7881DA87018005E5D420414FCA.mft (raw, json) Hash identifier: ptTYWrGmnV/hVaZjKs+w+D277UwZ5qvolNJ6thaQQnQ= Subject key identifier: 5A:32:53:73:CB:6C:C9:29:10:0D:09:A2:D9:96:47:81:77:67:A4:6C Authority key identifier: 48:56:F1:A3:B3:0D:5C:78:81:DA:87:01:80:05:E5:D4:20:41:4F:CA Certificate issuer: /CN=4856F1A3B30D5C7881DA87018005E5D420414FCA Certificate serial: 63DBBB7FDF94565B25B9843A202B8FB15FC16CBA Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4856F1A3B30D5C7881DA87018005E5D420414FCA.cer Subject info access: rsync://rpki-repo.registro.br/repo/5cheyxTnGDnvuwzxM38F4toYC73UHZ6U6izUyoRrGsgt/0/4856F1A3B30D5C7881DA87018005E5D420414FCA.mft Manifest number: 01C7 Signing time: Sun 01 Mar 2026 11:44:57 +0000 Manifest this update: Sun 01 Mar 2026 11:39:57 +0000 Manifest next update: Mon 02 Mar 2026 15:12:57 +0000 Files and hashes: 1: 4856F1A3B30D5C7881DA87018005E5D420414FCA.crl (hash: bQchbzLRji3p23SS7ubnkKRk6ViUzTPSOmEy1duWIs8=) 2: 3137372e32312e38302e302f32302d3332203d3e203533303838.roa (hash: tFuHKz/s3BdjJM4pioXyxGPu891yBfBk8UFhPUldP30=) 3: 3138372e33332e3230382e302f32302d3332203d3e203533303838.roa (hash: A23b5UkF2jEVo2OGAZ7Hi0+sfgnbV7WaHxabvCl9A8E=) 4: 323830343a3336303a3a2f33322d313238203d3e203533303838.roa (hash: Fzkbt6+bDg45FHge4eVjFdmeR+Zts5Y2bHYh8Nn0uwQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5cheyxTnGDnvuwzxM38F4toYC73UHZ6U6izUyoRrGsgt/0/4856F1A3B30D5C7881DA87018005E5D420414FCA.crl rsync://rpki-repo.registro.br/repo/5cheyxTnGDnvuwzxM38F4toYC73UHZ6U6izUyoRrGsgt/0/4856F1A3B30D5C7881DA87018005E5D420414FCA.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4856F1A3B30D5C7881DA87018005E5D420414FCA.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 02 Mar 2026 15:12:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:db:bb:7f:df:94:56:5b:25:b9:84:3a:20:2b:8f:b1:5f:c1:6c:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4856F1A3B30D5C7881DA87018005E5D420414FCA Validity Not Before: Mar 1 11:39:57 2026 GMT Not After : Mar 2 15:12:57 2026 GMT Subject: CN=5A325373CB6CC929100D09A2D99647817767A46C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:67:7e:56:09:81:02:43:e4:43:59:2d:f2:38: 43:a7:cd:2f:e5:03:18:c4:e5:04:70:8b:23:d6:d1: 5f:a8:e4:71:a8:54:bf:5d:c0:0c:3e:4b:ca:ed:e9: 00:27:36:97:40:48:7a:f6:1f:8a:ed:3a:25:7d:28: c2:62:05:2d:e6:40:7c:69:51:20:4a:8b:99:ae:1a: 4b:eb:c1:4d:a9:5e:c0:29:be:9f:76:4d:12:b7:3f: 4c:b4:e5:1c:f9:a0:19:4e:44:46:e9:ef:93:9d:87: 42:8b:43:5f:0c:e4:0d:dd:b4:a6:16:a5:8d:9b:36: 3b:f0:ca:52:be:58:8c:63:d0:31:b7:b3:66:5e:88: 42:be:07:0c:32:18:4c:41:45:6c:81:a1:12:3d:8f: a0:b3:49:2f:f4:0f:7f:20:84:b7:8c:c6:2d:f4:b6: 06:e1:8d:3f:82:cf:b6:ba:b7:b6:0f:d0:85:59:bb: f4:15:af:a9:b8:e3:97:16:e8:5d:dd:a7:6d:1f:49: bb:7e:f8:13:b2:b6:cf:32:03:f9:71:ab:7d:f9:9f: 93:6a:7f:81:20:ee:a8:8f:4f:5c:9c:f7:1a:64:40: 39:ae:4c:3b:b6:32:88:b7:e8:f2:b1:51:f9:81:e0: a9:e1:c4:6c:27:82:e1:50:13:c4:03:34:06:e8:21: ef:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:32:53:73:CB:6C:C9:29:10:0D:09:A2:D9:96:47:81:77:67:A4:6C X509v3 Authority Key Identifier: keyid:48:56:F1:A3:B3:0D:5C:78:81:DA:87:01:80:05:E5:D4:20:41:4F:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5cheyxTnGDnvuwzxM38F4toYC73UHZ6U6izUyoRrGsgt/0/4856F1A3B30D5C7881DA87018005E5D420414FCA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4856F1A3B30D5C7881DA87018005E5D420414FCA.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5cheyxTnGDnvuwzxM38F4toYC73UHZ6U6izUyoRrGsgt/0/4856F1A3B30D5C7881DA87018005E5D420414FCA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:0c:ce:1b:51:96:f8:ee:8d:ae:c0:7b:44:42:c0:85:13:39: 42:a2:4e:b4:11:5d:1f:37:be:dc:4b:af:94:02:86:78:7d:5e: a5:8f:55:03:c8:08:34:b5:49:40:da:36:26:f2:8b:9d:76:0a: 28:0f:01:dd:f7:b7:60:ee:d1:71:81:fa:79:45:43:a3:0e:7c: 8a:de:81:3b:a3:d2:30:ed:86:db:1e:39:94:5d:7d:c9:b8:b6: 6a:c6:23:05:9e:07:02:a8:12:75:5e:76:06:c6:1a:96:90:22: 16:2e:5c:f8:0b:64:d4:d8:58:20:46:f4:be:ca:74:f1:f1:0e: 84:04:b9:1f:8c:84:a0:7b:4b:f9:14:bb:a3:e7:d6:de:e2:34: fa:1d:17:35:1b:18:a1:ad:00:43:9a:56:7f:de:4c:04:c7:65: 94:e6:f5:7b:02:b6:c2:b4:a0:dd:25:d3:e8:14:51:6c:9f:81: e0:83:8e:91:cc:98:2c:6a:f6:e0:a4:3c:5e:ae:4b:4c:c2:25: 94:03:6e:20:70:38:95:50:34:08:dd:bf:b2:bc:79:3c:c4:1c: 87:5b:90:8a:bd:81:c0:a3:b8:c5:f8:69:b0:44:d9:60:49:c9: 3c:5c:27:63:54:14:57:83:50:8a:1e:ee:31:6d:5b:89:0d:16: 9d:4c:be:ae -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUY9u7f9+UVlsluYQ6ICuPsV/BbLowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDg1NkYxQTNCMzBENUM3ODgxREE4NzAxODAwNUU1RDQy MDQxNEZDQTAeFw0yNjAzMDExMTM5NTdaFw0yNjAzMDIxNTEyNTdaMDMxMTAvBgNV BAMTKDVBMzI1MzczQ0I2Q0M5MjkxMDBEMDlBMkQ5OTY0NzgxNzc2N0E0NkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6Z35WCYECQ+RDWS3yOEOnzS/l AxjE5QRwiyPW0V+o5HGoVL9dwAw+S8rt6QAnNpdASHr2H4rtOiV9KMJiBS3mQHxp USBKi5muGkvrwU2pXsApvp92TRK3P0y05Rz5oBlOREbp75Odh0KLQ18M5A3dtKYW pY2bNjvwylK+WIxj0DG3s2ZeiEK+BwwyGExBRWyBoRI9j6CzSS/0D38ghLeMxi30 tgbhjT+Cz7a6t7YP0IVZu/QVr6m445cW6F3dp20fSbt++BOyts8yA/lxq335n5Nq f4Eg7qiPT1yc9xpkQDmuTDu2Moi36PKxUfmB4KnhxGwnguFQE8QDNAboIe/xAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUWjJTc8tsySkQDQmi2ZZHgXdnpGwwHwYDVR0j BBgwFoAUSFbxo7MNXHiB2ocBgAXl1CBBT8owDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNWNoZXl4VG5HRG52dXd6eE0zOEY0dG9ZQzczVUhaNlU2aXpVeW9Sckdz Z3QvMC80ODU2RjFBM0IzMEQ1Qzc4ODFEQTg3MDE4MDA1RTVENDIwNDE0RkNBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ4NTZGMUEzQjMwRDVDNzg4 MURBODcwMTgwMDVFNUQ0MjA0MTRGQ0EuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NWNoZXl4VG5HRG52dXd6eE0zOEY0dG9ZQzczVUhaNlU2aXpVeW9SckdzZ3QvMC80 ODU2RjFBM0IzMEQ1Qzc4ODFEQTg3MDE4MDA1RTVENDIwNDE0RkNBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUwzOG1GW+O6NrsB7RELAhRM5QqJOtBFdHze+3EuvlAKGeH1epY9VA8gINLVJ QNo2JvKLnXYKKA8B3fe3YO7RcYH6eUVDow58it6BO6PSMO2G2x45lF19ybi2asYj BZ4HAqgSdV52BsYalpAiFi5c+Atk1NhYIEb0vsp08fEOhAS5H4yEoHtL+RS7o+fW 3uI0+h0XNRsYoa0AQ5pWf95MBMdllOb1ewK2wrSg3SXT6BRRbJ+B4IOOkcyYLGr2 4KQ8Xq5LTMIllANuIHA4lVA0CN2/srx5PMQch1uQir2BwKO4xfhpsETZYEnJPFwn Y1QUV4NQih7uMW1biQ0WnUy+rg== -----END CERTIFICATE-----Generated at Sun Mar 1 21:15:50 2026 by rpki-client