$ rpki-client -vvf rpki-repo.registro.br/repo/948iD2h8XvwkiBNCCTMxW71LCSUEHmYP41H8qdB943ti/0/8E596F31F6CFE57078B1303E68FEBDEEEAF96DDE.mft File: 8E596F31F6CFE57078B1303E68FEBDEEEAF96DDE.mft (raw, json) Hash identifier: CWQBE6y0CFYHH/1gLiuLJu/bvMWtaNbyOlmHWAELtSE= Subject key identifier: CC:27:D0:F5:93:E8:50:CC:F8:B9:58:21:63:C0:29:6E:B7:EC:F8:85 Authority key identifier: 8E:59:6F:31:F6:CF:E5:70:78:B1:30:3E:68:FE:BD:EE:EA:F9:6D:DE Certificate issuer: /CN=8E596F31F6CFE57078B1303E68FEBDEEEAF96DDE Certificate serial: 09A2B5F9745867BDF5CC3FC92FB506583ED854CE Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E596F31F6CFE57078B1303E68FEBDEEEAF96DDE.cer Subject info access: rsync://rpki-repo.registro.br/repo/948iD2h8XvwkiBNCCTMxW71LCSUEHmYP41H8qdB943ti/0/8E596F31F6CFE57078B1303E68FEBDEEEAF96DDE.mft Manifest number: 2F Signing time: Mon 02 Mar 2026 02:27:09 +0000 Manifest this update: Mon 02 Mar 2026 02:22:09 +0000 Manifest next update: Tue 03 Mar 2026 03:29:09 +0000 Files and hashes: 1: 3230302e392e38382e302f32322d3234203d3e203532363839.roa (hash: 3EFXWI8z99LFls8jbSEzmfbmJqCYOLGCDz3xMDvscu8=) 2: 3230302e3138392e382e302f32312d3234203d3e203532363839.roa (hash: TGa9bzbL5azUHfrojfM+b3lrJZ7G37Fe7+hT6qC40TQ=) 3: 3137372e37332e3132302e302f32322d3234203d3e203532363839.roa (hash: /YqVI3dm0izJ22/WvkZ3foHDT11+CifANbTBo8IDrNE=) 4: 323830343a6334633a3a2f33322d3438203d3e203532363839.roa (hash: LDkpv4I1xAk+Tuw+qCa83wdlDQXGNnDlBmt6F4kai7o=) 5: 3230302e332e31362e302f32302d3234203d3e203532363839.roa (hash: kx9GvgSHREQhYCuJOxuhkPkGY+YqfYlpfutFW2U46Wg=) 6: 8E596F31F6CFE57078B1303E68FEBDEEEAF96DDE.crl (hash: 5PYg7TSwEH5tsh6KXBOcbFdnmPF4GwgEEdyVIWZNKl4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/948iD2h8XvwkiBNCCTMxW71LCSUEHmYP41H8qdB943ti/0/8E596F31F6CFE57078B1303E68FEBDEEEAF96DDE.crl rsync://rpki-repo.registro.br/repo/948iD2h8XvwkiBNCCTMxW71LCSUEHmYP41H8qdB943ti/0/8E596F31F6CFE57078B1303E68FEBDEEEAF96DDE.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E596F31F6CFE57078B1303E68FEBDEEEAF96DDE.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 03 Mar 2026 03:29:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:a2:b5:f9:74:58:67:bd:f5:cc:3f:c9:2f:b5:06:58:3e:d8:54:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E596F31F6CFE57078B1303E68FEBDEEEAF96DDE Validity Not Before: Mar 2 02:22:09 2026 GMT Not After : Mar 3 03:29:09 2026 GMT Subject: CN=CC27D0F593E850CCF8B9582163C0296EB7ECF885 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:2e:ba:d1:a8:00:19:bf:5f:26:62:b3:fc:12: c3:21:32:a8:99:ab:f4:1c:a4:cc:5a:f8:b4:0b:16: 9a:81:1f:79:08:3f:b3:94:f9:41:05:8d:f9:42:7f: 69:1b:60:78:42:d1:41:ec:b3:a7:e5:10:f0:5f:1c: 09:01:4a:5e:c8:b7:f9:e9:b4:07:49:9c:1c:79:14: e9:37:b7:df:a0:28:60:88:99:53:18:8b:20:21:22: 50:a9:a0:7a:c6:a3:9c:1a:22:0f:fa:10:6a:58:a4: 88:fc:1d:0d:c3:7b:18:0f:e8:9c:95:8f:1e:1c:9a: 4c:67:1e:33:54:02:88:09:0b:e9:41:c8:37:a2:44: 6d:ef:8c:10:fb:30:77:96:2f:b7:c2:21:6d:6a:2c: d9:0a:81:ff:38:56:be:04:76:ae:e2:8f:6c:6f:34: b0:9d:30:bf:fe:53:87:c7:08:9e:93:ee:90:43:09: 74:85:25:31:ac:bc:72:24:be:40:f4:93:ce:dc:b6: 0c:1e:1f:ac:fe:36:b5:49:4a:cf:09:96:7d:26:f1: 54:1a:09:18:7a:b5:97:58:db:bb:47:de:df:22:f0: 29:a1:d1:79:f6:c1:d2:7c:09:1d:06:d3:22:8a:22: 1f:78:b3:50:0a:a8:3a:4a:74:d9:a9:dd:6f:3b:86: 0f:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:27:D0:F5:93:E8:50:CC:F8:B9:58:21:63:C0:29:6E:B7:EC:F8:85 X509v3 Authority Key Identifier: keyid:8E:59:6F:31:F6:CF:E5:70:78:B1:30:3E:68:FE:BD:EE:EA:F9:6D:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/948iD2h8XvwkiBNCCTMxW71LCSUEHmYP41H8qdB943ti/0/8E596F31F6CFE57078B1303E68FEBDEEEAF96DDE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E596F31F6CFE57078B1303E68FEBDEEEAF96DDE.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/948iD2h8XvwkiBNCCTMxW71LCSUEHmYP41H8qdB943ti/0/8E596F31F6CFE57078B1303E68FEBDEEEAF96DDE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:51:82:61:70:22:0e:5b:1b:28:f6:38:b9:df:7e:ef:05:f2: f9:09:99:47:56:78:80:ac:ff:d0:d4:e0:b3:84:8d:b1:f0:86: 20:81:8c:26:34:14:fa:41:bc:e6:5e:7e:33:b2:3b:b5:64:e4: ae:99:b9:8e:b5:34:c5:d6:78:ea:a3:9c:39:26:d8:60:0a:0d: da:3e:bb:28:03:c5:2a:67:8d:d8:6a:6e:d4:ef:97:53:79:0e: 4b:43:29:7a:27:74:65:dd:ee:ba:da:cb:17:78:60:d9:ad:f2: 0a:e6:09:ee:07:23:92:05:da:e5:d4:3f:e4:f8:71:58:3b:2b: cb:54:05:40:f1:35:96:17:ed:de:f1:16:03:35:29:1d:4e:8a: 1c:f5:d9:1f:e8:48:6c:04:19:b3:a7:c3:55:27:87:50:8e:4e: 7c:1d:4f:61:60:11:76:39:db:34:34:38:f2:83:c9:dc:a8:fd: 1a:c7:69:dc:3c:83:cd:6e:b2:5a:87:b6:a5:9c:ac:a9:65:ef: 1c:f2:49:17:72:ce:39:68:64:5b:b6:51:b6:5f:9d:e0:0a:53: 15:03:b6:7d:47:b4:38:2c:26:77:e6:fe:70:a8:ea:02:e7:0f: 33:44:24:e8:24:76:f7:7b:d7:31:40:e0:51:5b:83:8b:67:ec: a6:59:4c:c2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUCaK1+XRYZ731zD/JL7UGWD7YVM4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEU1OTZGMzFGNkNGRTU3MDc4QjEzMDNFNjhGRUJERUVF QUY5NkRERTAeFw0yNjAzMDIwMjIyMDlaFw0yNjAzMDMwMzI5MDlaMDMxMTAvBgNV BAMTKENDMjdEMEY1OTNFODUwQ0NGOEI5NTgyMTYzQzAyOTZFQjdFQ0Y4ODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYLrrRqAAZv18mYrP8EsMhMqiZ q/QcpMxa+LQLFpqBH3kIP7OU+UEFjflCf2kbYHhC0UHss6flEPBfHAkBSl7It/np tAdJnBx5FOk3t9+gKGCImVMYiyAhIlCpoHrGo5waIg/6EGpYpIj8HQ3DexgP6JyV jx4cmkxnHjNUAogJC+lByDeiRG3vjBD7MHeWL7fCIW1qLNkKgf84Vr4Edq7ij2xv NLCdML/+U4fHCJ6T7pBDCXSFJTGsvHIkvkD0k87ctgweH6z+NrVJSs8Jln0m8VQa CRh6tZdY27tH3t8i8Cmh0Xn2wdJ8CR0G0yKKIh94s1AKqDpKdNmp3W87hg+fAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUzCfQ9ZPoUMz4uVghY8Apbrfs+IUwHwYDVR0j BBgwFoAUjllvMfbP5XB4sTA+aP697ur5bd4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOTQ4aUQyaDhYdndraUJOQ0NUTXhXNzFMQ1NVRUhtWVA0MUg4cWRCOTQz dGkvMC84RTU5NkYzMUY2Q0ZFNTcwNzhCMTMwM0U2OEZFQkRFRUVBRjk2RERFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhFNTk2RjMxRjZDRkU1NzA3 OEIxMzAzRTY4RkVCREVFRUFGOTZEREUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OTQ4aUQyaDhYdndraUJOQ0NUTXhXNzFMQ1NVRUhtWVA0MUg4cWRCOTQzdGkvMC84 RTU5NkYzMUY2Q0ZFNTcwNzhCMTMwM0U2OEZFQkRFRUVBRjk2RERFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZlGCYXAiDlsbKPY4ud9+7wXy+QmZR1Z4gKz/0NTgs4SNsfCGIIGMJjQU+kG8 5l5+M7I7tWTkrpm5jrU0xdZ46qOcOSbYYAoN2j67KAPFKmeN2Gpu1O+XU3kOS0Mp eid0Zd3uutrLF3hg2a3yCuYJ7gcjkgXa5dQ/5PhxWDsry1QFQPE1lhft3vEWAzUp HU6KHPXZH+hIbAQZs6fDVSeHUI5OfB1PYWARdjnbNDQ48oPJ3Kj9Gsdp3DyDzW6y Woe2pZysqWXvHPJJF3LOOWhkW7ZRtl+d4ApTFQO2fUe0OCwmd+b+cKjqAucPM0Qk 6CR293vXMUDgUVuDi2fspllMwg== -----END CERTIFICATE-----Generated at Mon Mar 2 14:57:56 2026 by rpki-client