$ rpki-client -vvf rpki-repo.registro.br/repo/8YmhQGavke2MPpNBZnxBezqd1RM3r9NxppJC9AGUUyDY/0/CE2498E8CE7B488EBFB105BFE2A04876600CB5A3.mft File: CE2498E8CE7B488EBFB105BFE2A04876600CB5A3.mft (raw, json) Hash identifier: L1+kvP7ktxZVCgbeIVf+LSIQ7yl7TvmLIwc82H+MAXg= Subject key identifier: C8:7C:C0:4C:9E:34:F3:B4:0A:0F:2E:C5:32:99:90:DB:98:DA:86:29 Authority key identifier: CE:24:98:E8:CE:7B:48:8E:BF:B1:05:BF:E2:A0:48:76:60:0C:B5:A3 Certificate issuer: /CN=CE2498E8CE7B488EBFB105BFE2A04876600CB5A3 Certificate serial: 64782214D016D126BDF7FB702AB5BB617B565A90 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE2498E8CE7B488EBFB105BFE2A04876600CB5A3.cer Subject info access: rsync://rpki-repo.registro.br/repo/8YmhQGavke2MPpNBZnxBezqd1RM3r9NxppJC9AGUUyDY/0/CE2498E8CE7B488EBFB105BFE2A04876600CB5A3.mft Manifest number: 011C Signing time: Mon 02 Mar 2026 16:24:52 +0000 Manifest this update: Mon 02 Mar 2026 16:19:52 +0000 Manifest next update: Tue 03 Mar 2026 17:55:52 +0000 Files and hashes: 1: 3230312e3133312e32342e302f32312d3234203d3e20323632353139.roa (hash: mP9+5bqfsDm/dmjMQXVlmyWNr6uSZK6tCq5xBi+Kc8Q=) 2: 323830343a3939633a3a2f33322d3336203d3e20323632353139.roa (hash: gTiVAYf6/KXw1jjv/9yejWK3xD+mYu/04AQI9+Lo66Q=) 3: 3137372e36372e3132382e302f32312d3234203d3e20323632353139.roa (hash: fYY0WES9YoeoCKQ/AV0YzDdZUnBg9K2Sc6Z9kqWN/Sg=) 4: 3136382e3230352e3130342e302f32322d3234203d3e20323632353139.roa (hash: u7jFTziinpjWAlsLMJk9e+7JdYhWkIUNYw3qzq5Fx8c=) 5: CE2498E8CE7B488EBFB105BFE2A04876600CB5A3.crl (hash: OTEigxL+2HBzIPzNOtN97XKbl24LBP0hcgvoxOscWU0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8YmhQGavke2MPpNBZnxBezqd1RM3r9NxppJC9AGUUyDY/0/CE2498E8CE7B488EBFB105BFE2A04876600CB5A3.crl rsync://rpki-repo.registro.br/repo/8YmhQGavke2MPpNBZnxBezqd1RM3r9NxppJC9AGUUyDY/0/CE2498E8CE7B488EBFB105BFE2A04876600CB5A3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE2498E8CE7B488EBFB105BFE2A04876600CB5A3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 03 Mar 2026 17:55:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:78:22:14:d0:16:d1:26:bd:f7:fb:70:2a:b5:bb:61:7b:56:5a:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE2498E8CE7B488EBFB105BFE2A04876600CB5A3 Validity Not Before: Mar 2 16:19:52 2026 GMT Not After : Mar 3 17:55:52 2026 GMT Subject: CN=C87CC04C9E34F3B40A0F2EC5329990DB98DA8629 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:39:d2:5a:a9:d7:48:da:88:24:2a:4a:aa:c4: 19:5d:99:8f:2a:48:3e:78:de:16:dc:6e:9f:c9:9a: ee:24:c3:18:b3:b6:ce:29:42:07:70:0d:fb:93:c3: ed:c3:5a:96:c1:e6:83:4d:ca:9f:bd:75:fc:32:5b: 54:c3:65:71:8d:6b:bd:46:5d:d5:f6:3f:58:50:8a: bb:dd:dc:6c:bc:fb:51:a4:28:76:19:24:7f:11:f7: 0c:d1:91:b3:97:ab:c8:eb:2a:96:19:e6:f9:15:37: 4d:b3:79:d2:5b:14:fa:e4:97:c7:2b:d2:4d:4c:90: 48:4c:c4:e4:6b:eb:64:13:58:47:5f:70:f3:81:1d: f3:f8:79:d4:22:83:2c:74:08:70:ed:a5:e8:77:68: f6:9a:e9:6f:7d:ad:e7:2b:3d:38:8c:50:3b:0d:6f: 14:2d:60:c5:ff:3e:ec:35:06:fe:e4:bb:a1:8d:57: c1:bd:11:e6:ad:21:1c:54:ea:66:79:8e:ec:47:3c: 82:72:8a:83:3c:1b:b9:0c:9d:63:ad:b4:3d:9b:68: d6:18:bf:5f:78:af:2d:2f:96:e8:18:f8:4f:c7:b0: a6:33:ac:0d:cc:ff:1f:0b:b0:cd:9f:1f:af:0a:d7: d9:03:95:b7:1f:c0:05:ed:01:17:47:56:3b:1c:8c: ff:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:7C:C0:4C:9E:34:F3:B4:0A:0F:2E:C5:32:99:90:DB:98:DA:86:29 X509v3 Authority Key Identifier: keyid:CE:24:98:E8:CE:7B:48:8E:BF:B1:05:BF:E2:A0:48:76:60:0C:B5:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8YmhQGavke2MPpNBZnxBezqd1RM3r9NxppJC9AGUUyDY/0/CE2498E8CE7B488EBFB105BFE2A04876600CB5A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE2498E8CE7B488EBFB105BFE2A04876600CB5A3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8YmhQGavke2MPpNBZnxBezqd1RM3r9NxppJC9AGUUyDY/0/CE2498E8CE7B488EBFB105BFE2A04876600CB5A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:b0:e6:59:d0:b9:0f:ca:7c:c8:59:c8:4c:4f:d1:88:0e:1a: cd:d5:3b:09:ff:6a:0a:a1:e7:5c:68:22:bc:e4:f5:f2:18:1f: 7b:95:ca:fd:b0:19:69:fa:12:8a:47:a4:69:a4:e1:4d:be:14: 2a:c3:bd:92:bf:dc:e6:19:06:0d:24:9c:fa:13:2c:7e:96:6e: 80:a2:5a:1a:38:b3:c4:ad:bc:72:c7:91:da:44:0e:8f:e0:76: e0:fc:49:2a:5c:42:9e:0b:59:07:27:43:08:9a:1c:51:8a:84: 39:84:f4:13:e6:6f:f0:b9:df:7f:ca:06:70:bc:90:4a:d1:ad: 22:a9:5c:b9:2a:89:92:e5:d7:34:29:d9:ee:2e:47:d9:40:3a: 82:78:46:37:ea:d0:f0:3e:17:54:ca:dd:59:15:ca:1a:3a:85: ec:15:13:ca:37:51:64:91:dc:95:58:cc:9a:17:36:2a:36:44: 1e:2c:b7:dd:fe:bd:c7:fa:36:d6:1e:e9:46:77:88:f3:37:01: 6b:95:26:11:cf:07:8a:eb:f8:f8:d9:34:29:2e:22:ad:67:ce: b3:e8:30:cb:8d:c5:10:2f:3b:c7:67:a4:a2:06:58:10:b3:aa: 83:ba:6c:53:f3:8d:a1:9c:ec:e0:52:80:6f:f7:89:9c:c0:22: 7c:84:9f:f9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUZHgiFNAW0Sa99/twKrW7YXtWWpAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0UyNDk4RThDRTdCNDg4RUJGQjEwNUJGRTJBMDQ4NzY2 MDBDQjVBMzAeFw0yNjAzMDIxNjE5NTJaFw0yNjAzMDMxNzU1NTJaMDMxMTAvBgNV BAMTKEM4N0NDMDRDOUUzNEYzQjQwQTBGMkVDNTMyOTk5MERCOThEQTg2MjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6OdJaqddI2ogkKkqqxBldmY8q SD543hbcbp/Jmu4kwxizts4pQgdwDfuTw+3DWpbB5oNNyp+9dfwyW1TDZXGNa71G XdX2P1hQirvd3Gy8+1GkKHYZJH8R9wzRkbOXq8jrKpYZ5vkVN02zedJbFPrkl8cr 0k1MkEhMxORr62QTWEdfcPOBHfP4edQigyx0CHDtpeh3aPaa6W99recrPTiMUDsN bxQtYMX/Puw1Bv7ku6GNV8G9EeatIRxU6mZ5juxHPIJyioM8G7kMnWOttD2baNYY v194ry0vlugY+E/HsKYzrA3M/x8LsM2fH68K19kDlbcfwAXtARdHVjscjP9fAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUyHzATJ4087QKDy7FMpmQ25jahikwHwYDVR0j BBgwFoAUziSY6M57SI6/sQW/4qBIdmAMtaMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOFltaFFHYXZrZTJNUHBOQlpueEJlenFkMVJNM3I5TnhwcEpDOUFHVVV5 RFkvMC9DRTI0OThFOENFN0I0ODhFQkZCMTA1QkZFMkEwNDg3NjYwMENCNUEzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NFMjQ5OEU4Q0U3QjQ4OEVC RkIxMDVCRkUyQTA0ODc2NjAwQ0I1QTMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OFltaFFHYXZrZTJNUHBOQlpueEJlenFkMVJNM3I5TnhwcEpDOUFHVVV5RFkvMC9D RTI0OThFOENFN0I0ODhFQkZCMTA1QkZFMkEwNDg3NjYwMENCNUEzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAh7DmWdC5D8p8yFnITE/RiA4azdU7Cf9qCqHnXGgivOT18hgfe5XK/bAZafoS ikekaaThTb4UKsO9kr/c5hkGDSSc+hMsfpZugKJaGjizxK28cseR2kQOj+B24PxJ KlxCngtZBydDCJocUYqEOYT0E+Zv8Lnff8oGcLyQStGtIqlcuSqJkuXXNCnZ7i5H 2UA6gnhGN+rQ8D4XVMrdWRXKGjqF7BUTyjdRZJHclVjMmhc2KjZEHiy33f69x/o2 1h7pRneI8zcBa5UmEc8Hiuv4+Nk0KS4irWfOs+gwy43FEC87x2ekogZYELOqg7ps U/ONoZzs4FKAb/eJnMAifISf+Q== -----END CERTIFICATE-----Generated at Mon Mar 2 20:21:25 2026 by rpki-client