$ rpki-client -vvf rpki-repo.registro.br/repo/8aP1i4ygyyirdYtc5QQm58TJuQXadqT71yyjh3NMQyCK/1/00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74.mft File: 00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74.mft (raw, json) Hash identifier: eG09FVjMSEI7VzRQddbj2MeQxrhLkIhCzeyjADFPUvY= Subject key identifier: 5C:E3:F5:0B:6C:34:67:E2:C7:27:CC:CB:40:9D:6A:F1:CB:F0:B0:BE Authority key identifier: 00:D9:5A:AB:43:E0:36:D7:A6:DE:22:28:E9:DB:13:FF:AB:79:BE:74 Certificate issuer: /CN=00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74 Certificate serial: 111E7CF4DF1B3A64C6625FB995935E9CAD0DD0CD Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74.cer Subject info access: rsync://rpki-repo.registro.br/repo/8aP1i4ygyyirdYtc5QQm58TJuQXadqT71yyjh3NMQyCK/1/00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74.mft Manifest number: 03A3 Signing time: Mon 02 Mar 2026 13:31:10 +0000 Manifest this update: Mon 02 Mar 2026 13:26:10 +0000 Manifest next update: Tue 03 Mar 2026 14:54:10 +0000 Files and hashes: 1: 34352e3138302e3134342e302f32322d3332203d3e20323639313337.roa (hash: M2/f+qAdVdCb7KTuh+OMRc31I7vb9gKfRCr3bCTCX8A=) 2: 00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74.crl (hash: Ej0Df+BHTDaylMwIwhw/ttla6bf+dVoVSWUrEDkankw=) 3: 323830343a356666383a3a2f33322d3438203d3e20323639313337.roa (hash: Qu8SOuwmPFomMoaDPKHSrBCNVxQVDZ7bIXJ/lQ8lu6w=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8aP1i4ygyyirdYtc5QQm58TJuQXadqT71yyjh3NMQyCK/1/00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74.crl rsync://rpki-repo.registro.br/repo/8aP1i4ygyyirdYtc5QQm58TJuQXadqT71yyjh3NMQyCK/1/00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 03 Mar 2026 14:54:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:1e:7c:f4:df:1b:3a:64:c6:62:5f:b9:95:93:5e:9c:ad:0d:d0:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74 Validity Not Before: Mar 2 13:26:10 2026 GMT Not After : Mar 3 14:54:10 2026 GMT Subject: CN=5CE3F50B6C3467E2C727CCCB409D6AF1CBF0B0BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:20:ab:3f:e7:a2:e7:35:0c:3f:c9:78:ce:e7: f0:ac:bf:28:93:04:7d:27:0f:8b:c6:b6:ec:39:1e: fe:8b:f7:d0:fa:d0:00:52:64:7a:98:56:27:7b:13: 41:36:27:d7:f6:62:3c:df:f2:bf:35:e8:1a:8a:85: c5:9a:ae:90:dc:9c:ae:14:1f:11:fb:25:36:44:6c: be:81:32:e1:5f:9c:98:30:b6:5e:11:ce:36:62:ba: 00:cc:af:c6:ff:e8:4b:f9:e4:c5:48:ad:b8:f0:5d: 88:2d:be:b1:d1:13:39:64:7c:70:c3:1f:e1:b5:02: 18:57:cc:56:0c:97:c9:a2:f6:fd:54:51:4d:b9:e2: a4:35:37:8f:a7:46:fc:af:d3:c1:f5:83:74:40:00: 9b:ef:11:28:51:a2:21:e8:03:3c:ab:de:27:84:b7: 1f:67:e5:c1:d0:ae:2c:fb:e1:0b:ed:3e:6c:bc:30: 66:64:38:e4:53:04:ed:61:07:78:23:7c:70:2a:11: d4:fc:7a:e8:40:1d:f7:c9:d2:0f:45:40:ea:36:de: c5:71:1b:0c:b9:21:62:fa:b4:23:28:2d:6d:01:84: a4:69:59:42:0c:1b:04:9b:7d:32:60:99:70:2e:ac: 2e:ba:c1:3d:47:ef:4b:27:c5:eb:24:5c:be:8c:5e: df:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:E3:F5:0B:6C:34:67:E2:C7:27:CC:CB:40:9D:6A:F1:CB:F0:B0:BE X509v3 Authority Key Identifier: keyid:00:D9:5A:AB:43:E0:36:D7:A6:DE:22:28:E9:DB:13:FF:AB:79:BE:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8aP1i4ygyyirdYtc5QQm58TJuQXadqT71yyjh3NMQyCK/1/00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8aP1i4ygyyirdYtc5QQm58TJuQXadqT71yyjh3NMQyCK/1/00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:73:f8:1d:90:d6:82:16:03:26:59:c0:2a:0d:e1:c0:ad:66: 5f:32:23:8f:02:c9:65:b5:7e:6a:df:f2:21:7f:8f:6c:ad:c3: a7:37:b9:b7:55:70:2e:bc:0b:18:ed:56:be:6b:b3:e4:d1:7c: 55:92:f4:d7:7f:87:ae:22:b6:4c:57:98:87:84:5a:29:f3:4f: bd:92:c6:e5:7b:ce:bd:ef:e8:c1:91:a4:61:5c:c9:d9:18:1f: 01:81:95:42:0d:3a:21:f7:a4:06:fc:c4:6d:5e:67:64:65:dd: a1:7c:4e:95:ad:ff:26:38:0b:a1:dd:93:61:ea:7f:e0:76:d0: b1:60:4f:9f:84:11:58:de:6c:4c:67:22:c2:f9:4f:82:c0:b2: 45:78:9c:7d:42:31:b0:22:46:ea:89:aa:81:a1:9d:16:6c:78: 76:50:62:90:20:6a:a7:66:ce:66:51:e8:cc:d2:07:5a:28:a3: b4:eb:44:97:e9:be:df:2e:df:e0:06:41:4e:b4:69:22:9f:11: 01:95:f5:bb:71:f6:99:4f:f4:c7:28:50:4d:e9:d2:7f:72:84: 29:f0:3c:bb:5b:a6:7c:97:7a:a5:46:46:04:5d:dd:92:23:09: c3:50:e1:92:b0:a9:cf:86:39:45:13:62:76:8f:1b:8d:b3:26: 53:06:58:1c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUER589N8bOmTGYl+5lZNenK0N0M0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDBEOTVBQUI0M0UwMzZEN0E2REUyMjI4RTlEQjEzRkZB Qjc5QkU3NDAeFw0yNjAzMDIxMzI2MTBaFw0yNjAzMDMxNDU0MTBaMDMxMTAvBgNV BAMTKDVDRTNGNTBCNkMzNDY3RTJDNzI3Q0NDQjQwOUQ2QUYxQ0JGMEIwQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHIKs/56LnNQw/yXjO5/CsvyiT BH0nD4vGtuw5Hv6L99D60ABSZHqYVid7E0E2J9f2Yjzf8r816BqKhcWarpDcnK4U HxH7JTZEbL6BMuFfnJgwtl4RzjZiugDMr8b/6Ev55MVIrbjwXYgtvrHREzlkfHDD H+G1AhhXzFYMl8mi9v1UUU254qQ1N4+nRvyv08H1g3RAAJvvEShRoiHoAzyr3ieE tx9n5cHQriz74QvtPmy8MGZkOORTBO1hB3gjfHAqEdT8euhAHffJ0g9FQOo23sVx Gwy5IWL6tCMoLW0BhKRpWUIMGwSbfTJgmXAurC66wT1H70snxeskXL6MXt9nAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUXOP1C2w0Z+LHJ8zLQJ1q8cvwsL4wHwYDVR0j BBgwFoAUANlaq0PgNtem3iIo6dsT/6t5vnQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOGFQMWk0eWd5eWlyZFl0YzVRUW01OFRKdVFYYWRxVDcxeXlqaDNOTVF5 Q0svMS8wMEQ5NUFBQjQzRTAzNkQ3QTZERTIyMjhFOURCMTNGRkFCNzlCRTc0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAwRDk1QUFCNDNFMDM2RDdB NkRFMjIyOEU5REIxM0ZGQUI3OUJFNzQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OGFQMWk0eWd5eWlyZFl0YzVRUW01OFRKdVFYYWRxVDcxeXlqaDNOTVF5Q0svMS8w MEQ5NUFBQjQzRTAzNkQ3QTZERTIyMjhFOURCMTNGRkFCNzlCRTc0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiHP4HZDWghYDJlnAKg3hwK1mXzIjjwLJZbV+at/yIX+PbK3Dpze5t1VwLrwL GO1Wvmuz5NF8VZL013+HriK2TFeYh4RaKfNPvZLG5XvOve/owZGkYVzJ2RgfAYGV Qg06IfekBvzEbV5nZGXdoXxOla3/JjgLod2TYep/4HbQsWBPn4QRWN5sTGciwvlP gsCyRXicfUIxsCJG6omqgaGdFmx4dlBikCBqp2bOZlHozNIHWiijtOtEl+m+3y7f 4AZBTrRpIp8RAZX1u3H2mU/0xyhQTenSf3KEKfA8u1umfJd6pUZGBF3dkiMJw1Dh krCpz4Y5RRNido8bjbMmUwZYHA== -----END CERTIFICATE-----Generated at Mon Mar 2 16:21:51 2026 by rpki-client