$ rpki-client -vvf rpki-repo.registro.br/repo/5vfhd2kEoxEivgSho5UnJiYBtXAWBx7ebFY1meZDM1gt/0/CFDE24864395D54B821566D55DFAD56DC2717A4F.mft File: CFDE24864395D54B821566D55DFAD56DC2717A4F.mft (raw, json) Hash identifier: BxjuKHybwKDsUv+N/TfSphHH+zYR3+0B2FYbct43ybA= Subject key identifier: 87:92:52:A3:E1:73:1E:E2:E4:56:2D:10:D5:59:B6:0F:C4:3D:E5:B3 Authority key identifier: CF:DE:24:86:43:95:D5:4B:82:15:66:D5:5D:FA:D5:6D:C2:71:7A:4F Certificate issuer: /CN=CFDE24864395D54B821566D55DFAD56DC2717A4F Certificate serial: 1F259674D862301408D093D5205BC6FE35BF699C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFDE24864395D54B821566D55DFAD56DC2717A4F.cer Subject info access: rsync://rpki-repo.registro.br/repo/5vfhd2kEoxEivgSho5UnJiYBtXAWBx7ebFY1meZDM1gt/0/CFDE24864395D54B821566D55DFAD56DC2717A4F.mft Manifest number: 63 Signing time: Sun 01 Mar 2026 09:26:23 +0000 Manifest this update: Sun 01 Mar 2026 09:21:23 +0000 Manifest next update: Mon 02 Mar 2026 11:51:23 +0000 Files and hashes: 1: 323830343a383961633a3a2f33332d3333203d3e20323733363139.roa (hash: eySNpXWtJeR5WEHH6D9gUUrO/py+gmj0uFyjGnCwR4k=) 2: CFDE24864395D54B821566D55DFAD56DC2717A4F.crl (hash: NJDSyLyNiQ+GtX3Gyc2MdZ8dpKeGOurzAjWnZuXReh0=) 3: 323830343a383961633a383030303a3a2f33342d3334203d3e20323733363139.roa (hash: sCs5I/xxKnSn71/ptroWwjucZGA918ogCEIyQMRWm40=) 4: 323830343a383961633a3a2f33322d3332203d3e20323733363139.roa (hash: 6YR6ZiSGc7CxTkzhcIGVaCU+A/kiB1EQ85pD9gUP53k=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5vfhd2kEoxEivgSho5UnJiYBtXAWBx7ebFY1meZDM1gt/0/CFDE24864395D54B821566D55DFAD56DC2717A4F.crl rsync://rpki-repo.registro.br/repo/5vfhd2kEoxEivgSho5UnJiYBtXAWBx7ebFY1meZDM1gt/0/CFDE24864395D54B821566D55DFAD56DC2717A4F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFDE24864395D54B821566D55DFAD56DC2717A4F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 02 Mar 2026 11:51:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:25:96:74:d8:62:30:14:08:d0:93:d5:20:5b:c6:fe:35:bf:69:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFDE24864395D54B821566D55DFAD56DC2717A4F Validity Not Before: Mar 1 09:21:23 2026 GMT Not After : Mar 2 11:51:23 2026 GMT Subject: CN=879252A3E1731EE2E4562D10D559B60FC43DE5B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c9:da:a5:b4:cb:e0:17:9f:93:a8:24:85:71: f0:70:ad:7e:b5:ec:a6:d5:4a:e8:4a:52:7f:4b:b1: 0f:f5:7e:20:68:10:63:c7:7b:0a:fe:87:70:bc:86: 7a:65:58:6a:1f:b1:01:a3:24:06:77:a2:a8:c7:6a: 47:99:34:11:ca:95:f4:74:50:eb:32:b7:6b:6e:52: b8:9e:31:ae:9c:a5:c6:96:11:9f:52:a2:c6:38:53: 02:65:b1:d2:c9:97:d9:2b:31:db:f7:74:0b:f3:8e: 5b:e1:ad:a5:b0:94:86:6e:ea:0c:fb:d3:f0:61:93: 99:e0:4b:ad:88:6a:70:6a:4a:25:f9:79:d6:51:7e: 3b:3f:ab:64:06:eb:d4:d8:d9:74:17:67:7a:b3:18: 3e:d9:ce:83:b4:56:a5:31:d2:84:94:8e:c9:ad:6e: 78:27:ba:61:dd:89:9f:d7:24:ba:50:64:2f:7c:0a: ec:9a:d6:37:18:83:64:a9:71:71:80:16:15:41:c3: 1c:ab:ad:4d:26:a5:04:ef:be:76:2f:e5:38:59:6f: ec:5a:f5:6a:0f:96:11:ae:0b:57:3a:30:9e:a5:be: ff:0f:fd:d4:2e:f3:5a:0f:6b:1e:6e:2b:00:23:32: 98:4e:0f:ea:35:18:d4:4d:fb:2f:b8:fa:f5:e4:41: 5f:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:92:52:A3:E1:73:1E:E2:E4:56:2D:10:D5:59:B6:0F:C4:3D:E5:B3 X509v3 Authority Key Identifier: keyid:CF:DE:24:86:43:95:D5:4B:82:15:66:D5:5D:FA:D5:6D:C2:71:7A:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5vfhd2kEoxEivgSho5UnJiYBtXAWBx7ebFY1meZDM1gt/0/CFDE24864395D54B821566D55DFAD56DC2717A4F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFDE24864395D54B821566D55DFAD56DC2717A4F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5vfhd2kEoxEivgSho5UnJiYBtXAWBx7ebFY1meZDM1gt/0/CFDE24864395D54B821566D55DFAD56DC2717A4F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:a1:4e:0e:b7:c1:0b:e7:66:74:10:e4:b1:a6:69:1d:86:62: 9b:81:ec:08:16:3b:5b:56:0d:31:69:a0:51:07:e6:91:f8:68: 6a:ac:24:84:7f:75:d4:19:f3:9f:16:67:88:c0:b6:e1:4a:6b: b8:cb:a9:5e:8e:2f:38:60:79:19:f9:22:49:c2:a3:2a:b4:cc: 58:69:18:55:64:d2:85:e8:fc:43:cf:21:c5:be:54:65:97:18: ca:7c:8f:c4:d6:f3:19:d2:00:f8:1e:0e:a2:44:13:52:2a:b9: 0c:be:70:e8:1a:c6:e0:ec:c3:45:19:60:50:87:94:0a:67:ae: 82:db:36:90:4c:23:13:6a:ce:40:48:12:8f:c3:b5:45:13:c1: 61:09:09:2a:35:81:8a:42:21:c0:02:76:0b:b3:60:7c:b6:dd: 9b:74:5f:05:a7:3d:d6:7c:dd:d8:8e:c5:02:fa:a0:d3:17:bb: d5:ed:ce:7b:7b:a7:c5:22:1c:fb:23:54:8f:0f:cb:73:eb:13: 51:37:88:7f:12:97:07:0b:b4:e5:f1:c9:e7:08:71:b7:82:65: ce:09:30:58:6e:45:7c:63:87:e4:41:f3:63:fe:94:b0:3b:23: 3f:f6:fc:41:42:c2:e5:7a:72:cd:63:5b:dd:aa:47:76:4c:e6: 82:6c:94:12 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUHyWWdNhiMBQI0JPVIFvG/jW/aZwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZERTI0ODY0Mzk1RDU0QjgyMTU2NkQ1NURGQUQ1NkRD MjcxN0E0RjAeFw0yNjAzMDEwOTIxMjNaFw0yNjAzMDIxMTUxMjNaMDMxMTAvBgNV BAMTKDg3OTI1MkEzRTE3MzFFRTJFNDU2MkQxMEQ1NTlCNjBGQzQzREU1QjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5ydqltMvgF5+TqCSFcfBwrX61 7KbVSuhKUn9LsQ/1fiBoEGPHewr+h3C8hnplWGofsQGjJAZ3oqjHakeZNBHKlfR0 UOsyt2tuUrieMa6cpcaWEZ9SosY4UwJlsdLJl9krMdv3dAvzjlvhraWwlIZu6gz7 0/Bhk5ngS62IanBqSiX5edZRfjs/q2QG69TY2XQXZ3qzGD7ZzoO0VqUx0oSUjsmt bngnumHdiZ/XJLpQZC98Cuya1jcYg2SpcXGAFhVBwxyrrU0mpQTvvnYv5ThZb+xa 9WoPlhGuC1c6MJ6lvv8P/dQu81oPax5uKwAjMphOD+o1GNRN+y+4+vXkQV+FAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUh5JSo+FzHuLkVi0Q1Vm2D8Q95bMwHwYDVR0j BBgwFoAUz94khkOV1UuCFWbVXfrVbcJxek8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNXZmaGQya0VveEVpdmdTaG81VW5KaVlCdFhBV0J4N2ViRlkxbWVaRE0x Z3QvMC9DRkRFMjQ4NjQzOTVENTRCODIxNTY2RDU1REZBRDU2REMyNzE3QTRGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NGREUyNDg2NDM5NUQ1NEI4 MjE1NjZENTVERkFENTZEQzI3MTdBNEYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NXZmaGQya0VveEVpdmdTaG81VW5KaVlCdFhBV0J4N2ViRlkxbWVaRE0xZ3QvMC9D RkRFMjQ4NjQzOTVENTRCODIxNTY2RDU1REZBRDU2REMyNzE3QTRGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEArKFODrfBC+dmdBDksaZpHYZim4HsCBY7W1YNMWmgUQfmkfhoaqwkhH911Bnz nxZniMC24UpruMupXo4vOGB5GfkiScKjKrTMWGkYVWTShej8Q88hxb5UZZcYynyP xNbzGdIA+B4OokQTUiq5DL5w6BrG4OzDRRlgUIeUCmeugts2kEwjE2rOQEgSj8O1 RRPBYQkJKjWBikIhwAJ2C7NgfLbdm3RfBac91nzd2I7FAvqg0xe71e3Oe3unxSIc +yNUjw/Lc+sTUTeIfxKXBwu05fHJ5whxt4JlzgkwWG5FfGOH5EHzY/6UsDsjP/b8 QULC5XpyzWNb3apHdkzmgmyUEg== -----END CERTIFICATE-----Generated at Sun Mar 1 21:16:02 2026 by rpki-client