$ rpki-client -vvf rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/4BA0BB3B0B41C199ECE0C0525EC545C29A7E725D.mft File: 4BA0BB3B0B41C199ECE0C0525EC545C29A7E725D.mft (raw, json) Hash identifier: 0feLkspfHp99SM6Hjd3M9XyJvrOi97Gmsnha6RNDGDk= Subject key identifier: 93:2E:86:9E:31:50:36:EF:3F:7F:82:C3:B6:A8:F8:6A:73:E2:B4:41 Authority key identifier: 4B:A0:BB:3B:0B:41:C1:99:EC:E0:C0:52:5E:C5:45:C2:9A:7E:72:5D Certificate issuer: /CN=4BA0BB3B0B41C199ECE0C0525EC545C29A7E725D Certificate serial: 618B264C88FA9BE8041E5B9F3A7A193C429B650D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BA0BB3B0B41C199ECE0C0525EC545C29A7E725D.cer Subject info access: rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/4BA0BB3B0B41C199ECE0C0525EC545C29A7E725D.mft Manifest number: 9E Signing time: Sun 01 Mar 2026 05:08:16 +0000 Manifest this update: Sun 01 Mar 2026 05:03:16 +0000 Manifest next update: Mon 02 Mar 2026 06:54:16 +0000 Files and hashes: 1: 3133382e3235352e36342e302f32342d3234203d3e20323633393730.roa (hash: HyIF1owTWhNZKbdL4j/tFy1XH29oqm2BMRIZjyYDS4c=) 2: 4BA0BB3B0B41C199ECE0C0525EC545C29A7E725D.crl (hash: GVPe/IalqFrX4a4zywy/E1GFr7uexeTK+G69iHPlSOk=) 3: 323830343a323839633a3a2f33322d3332203d3e20323633393730.roa (hash: hanX1n7pZBfYj0MtzUDESDsAiHLpUk0WL8EIKdSOJRg=) 4: 3133382e3235352e36372e302f32342d3234203d3e20323633393730.roa (hash: jJ7fDKdTUjf6ULIYlTuCQZNNpz+0h5bEVFWszk21/Kk=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/4BA0BB3B0B41C199ECE0C0525EC545C29A7E725D.crl rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/4BA0BB3B0B41C199ECE0C0525EC545C29A7E725D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BA0BB3B0B41C199ECE0C0525EC545C29A7E725D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 02 Mar 2026 06:54:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:8b:26:4c:88:fa:9b:e8:04:1e:5b:9f:3a:7a:19:3c:42:9b:65:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4BA0BB3B0B41C199ECE0C0525EC545C29A7E725D Validity Not Before: Mar 1 05:03:16 2026 GMT Not After : Mar 2 06:54:16 2026 GMT Subject: CN=932E869E315036EF3F7F82C3B6A8F86A73E2B441 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:9a:e7:92:38:8c:7d:ab:48:8f:dd:89:00:1d: 3e:d0:cf:34:82:5e:ca:50:26:4e:b3:d8:47:32:34: a0:da:e1:cb:f5:96:97:90:d7:4a:2c:21:54:14:59: da:e7:7d:ee:5c:50:da:46:b4:92:7c:60:c0:d8:c8: 89:90:a3:99:58:c2:bf:1b:50:dc:10:45:9c:be:a0: 8d:02:e6:ce:ef:07:18:2b:b5:42:21:1f:d9:5f:eb: fa:dc:49:3c:5e:40:5a:68:ab:32:59:fd:c9:fb:7e: dc:e3:9e:a7:7f:ab:a3:7b:ff:02:e8:0b:2d:0b:b3: e5:d7:1f:97:ea:c7:7a:5f:02:d4:50:cc:db:c5:f1: 78:40:c1:cc:7f:00:8d:ef:8c:b6:3e:b8:27:62:4a: b4:54:8a:4e:40:84:4a:ef:25:bf:48:68:ea:4d:b8: ed:ce:58:ed:56:0b:f4:58:6f:a1:48:1c:70:a9:54: bf:90:9f:62:9a:4b:54:e0:0f:43:8d:36:3a:d4:ca: fb:0c:92:a9:40:a6:f0:63:eb:1e:9b:92:7c:24:6c: fc:bf:91:ba:05:67:f0:1d:00:f7:53:f0:ff:9f:52: d1:f3:2d:32:59:02:54:36:ce:74:26:7d:b9:1d:36: 73:ae:5d:21:91:c3:15:49:5b:90:86:80:ad:84:d7: 13:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:2E:86:9E:31:50:36:EF:3F:7F:82:C3:B6:A8:F8:6A:73:E2:B4:41 X509v3 Authority Key Identifier: keyid:4B:A0:BB:3B:0B:41:C1:99:EC:E0:C0:52:5E:C5:45:C2:9A:7E:72:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/4BA0BB3B0B41C199ECE0C0525EC545C29A7E725D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BA0BB3B0B41C199ECE0C0525EC545C29A7E725D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/0/4BA0BB3B0B41C199ECE0C0525EC545C29A7E725D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:c0:4a:c6:2a:02:d0:d9:81:12:ec:07:f5:22:1d:e2:a1:4e: 11:72:04:04:a2:b1:34:b3:6f:27:a3:da:27:21:aa:8e:a4:e0: ae:3e:c4:a4:9c:2f:2a:92:55:4f:24:e8:3f:6a:9b:db:71:7c: 4f:c4:96:ea:a7:f8:4b:d9:34:9b:fc:b3:dd:e4:21:13:16:56: f7:8c:27:80:80:ad:c6:91:59:13:22:50:02:1c:74:86:4c:d1: 22:b3:8c:81:95:19:9a:ec:67:98:db:d6:35:a3:0c:c9:19:da: 9d:1d:ef:95:5d:d5:e2:13:cd:a0:c9:17:c4:41:0a:84:86:b3: 8a:73:fb:4d:8a:66:c8:04:f1:b1:ef:7e:f4:52:82:09:bf:a9: 47:71:72:a2:d9:bb:01:7c:78:1f:1f:84:91:02:d6:e2:f4:95: fb:3d:dc:9a:c0:9b:54:9c:09:af:97:7f:18:ca:e3:2e:67:fc: 0b:4b:8e:c6:09:73:50:e4:10:5f:8f:09:06:e3:a7:88:98:55: e5:fe:a0:3f:9b:d0:5d:b5:0e:33:c2:d2:5d:11:ae:de:4a:41: 3f:a9:b5:40:20:f3:52:42:6c:3c:c9:b9:bc:09:1b:4a:dc:f6: 73:95:56:00:e0:d2:6a:bb:af:6d:9c:bf:0c:92:98:eb:43:b4: bd:26:1d:66 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUYYsmTIj6m+gEHlufOnoZPEKbZQ0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEJBMEJCM0IwQjQxQzE5OUVDRTBDMDUyNUVDNTQ1QzI5 QTdFNzI1RDAeFw0yNjAzMDEwNTAzMTZaFw0yNjAzMDIwNjU0MTZaMDMxMTAvBgNV BAMTKDkzMkU4NjlFMzE1MDM2RUYzRjdGODJDM0I2QThGODZBNzNFMkI0NDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVmueSOIx9q0iP3YkAHT7QzzSC XspQJk6z2EcyNKDa4cv1lpeQ10osIVQUWdrnfe5cUNpGtJJ8YMDYyImQo5lYwr8b UNwQRZy+oI0C5s7vBxgrtUIhH9lf6/rcSTxeQFpoqzJZ/cn7ftzjnqd/q6N7/wLo Cy0Ls+XXH5fqx3pfAtRQzNvF8XhAwcx/AI3vjLY+uCdiSrRUik5AhErvJb9IaOpN uO3OWO1WC/RYb6FIHHCpVL+Qn2KaS1TgD0ONNjrUyvsMkqlApvBj6x6bknwkbPy/ kboFZ/AdAPdT8P+fUtHzLTJZAlQ2znQmfbkdNnOuXSGRwxVJW5CGgK2E1xNNAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUky6GnjFQNu8/f4LDtqj4anPitEEwHwYDVR0j BBgwFoAUS6C7OwtBwZns4MBSXsVFwpp+cl0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOWZMcVYyWURyMnJTazEyOHVOaEJLejh2MlJiMUFYbnZKY0VLM2pyVTNn bWUvMC80QkEwQkIzQjBCNDFDMTk5RUNFMEMwNTI1RUM1NDVDMjlBN0U3MjVELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRCQTBCQjNCMEI0MUMxOTlF Q0UwQzA1MjVFQzU0NUMyOUE3RTcyNUQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OWZMcVYyWURyMnJTazEyOHVOaEJLejh2MlJiMUFYbnZKY0VLM2pyVTNnbWUvMC80 QkEwQkIzQjBCNDFDMTk5RUNFMEMwNTI1RUM1NDVDMjlBN0U3MjVELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAscBKxioC0NmBEuwH9SId4qFOEXIEBKKxNLNvJ6PaJyGqjqTgrj7EpJwvKpJV TyToP2qb23F8T8SW6qf4S9k0m/yz3eQhExZW94wngICtxpFZEyJQAhx0hkzRIrOM gZUZmuxnmNvWNaMMyRnanR3vlV3V4hPNoMkXxEEKhIazinP7TYpmyATxse9+9FKC Cb+pR3Fyotm7AXx4Hx+EkQLW4vSV+z3cmsCbVJwJr5d/GMrjLmf8C0uOxglzUOQQ X48JBuOniJhV5f6gP5vQXbUOM8LSXRGu3kpBP6m1QCDzUkJsPMm5vAkbStz2c5VW AODSaruvbZy/DJKY60O0vSYdZg== -----END CERTIFICATE-----Generated at Sun Mar 1 21:28:55 2026 by rpki-client