$ rpki-client -vvf rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/947E29F37C387A9590C135AE83DBF68B102E9E57.mft File: 947E29F37C387A9590C135AE83DBF68B102E9E57.mft (raw, json) Hash identifier: BezKGhNXBRuZiKATD2zyLjZdSTi+OvbhxZZVRAkN244= Subject key identifier: 6D:99:6B:8F:50:99:29:3C:38:36:87:FE:66:D5:F0:7B:EA:5A:01:2F Authority key identifier: 94:7E:29:F3:7C:38:7A:95:90:C1:35:AE:83:DB:F6:8B:10:2E:9E:57 Certificate issuer: /CN=947E29F37C387A9590C135AE83DBF68B102E9E57 Certificate serial: 5B00E536FAB864FF555A956BCAB60D99FFCADCF5 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/947E29F37C387A9590C135AE83DBF68B102E9E57.cer Subject info access: rsync://rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/947E29F37C387A9590C135AE83DBF68B102E9E57.mft Manifest number: D8 Signing time: Sun 01 Mar 2026 22:46:13 +0000 Manifest this update: Sun 01 Mar 2026 22:41:13 +0000 Manifest next update: Mon 02 Mar 2026 23:56:13 +0000 Files and hashes: 1: 3137372e37352e34382e302f32302d3332203d3e20323632353838.roa (hash: g+BQjnshu/T89iCxLxgBpkKWO5lfsmAPBro5ZFYgeKs=) 2: 323830343a323930343a3a2f33322d313238203d3e20323632353838.roa (hash: Ql6MXz7sNhTEaV2AQIKeVREm8sq9lGZYeq9HnqYoCt0=) 3: 947E29F37C387A9590C135AE83DBF68B102E9E57.crl (hash: hbF/RzEG3B7nsAjY6jMXz+d00XWY0b0WCEck692PdCI=) 4: 3137302e38332e3133322e302f32322d3332203d3e20323632353838.roa (hash: 9rOtV+9PL/YX2ts7D12ytVbYuXEy8nUL3xSV2wPxy7g=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/947E29F37C387A9590C135AE83DBF68B102E9E57.crl rsync://rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/947E29F37C387A9590C135AE83DBF68B102E9E57.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/947E29F37C387A9590C135AE83DBF68B102E9E57.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 02 Mar 2026 23:56:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:00:e5:36:fa:b8:64:ff:55:5a:95:6b:ca:b6:0d:99:ff:ca:dc:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=947E29F37C387A9590C135AE83DBF68B102E9E57 Validity Not Before: Mar 1 22:41:13 2026 GMT Not After : Mar 2 23:56:13 2026 GMT Subject: CN=6D996B8F5099293C383687FE66D5F07BEA5A012F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:52:9a:a3:19:f7:c2:9b:d1:aa:cb:87:76:5a: 23:6a:72:43:8c:a1:03:6c:cf:c0:2f:b6:6f:25:52: ae:50:dc:71:c9:b0:1b:d7:66:34:0e:9b:ef:50:e1: 4b:a0:1f:d7:b8:30:e5:ff:22:cf:a8:27:9f:04:38: cf:be:8b:c5:a7:ca:85:bd:3f:85:90:d9:c2:84:dc: 25:27:44:ee:16:ff:8f:c5:45:38:21:4c:d7:c1:af: 50:d4:b7:ca:f9:0d:8f:7f:9e:5c:59:a5:e0:4f:49: e9:4e:0e:2c:55:53:55:b7:24:8a:9d:49:b8:06:ef: 07:6c:2b:99:bb:c0:59:16:c0:43:d8:ca:cf:ef:59: e4:32:e9:92:3a:e4:9a:02:53:0d:de:cd:5f:ff:81: 12:b5:eb:d1:7c:b9:be:60:ab:c8:01:96:0d:b4:b4: 85:16:a1:4a:cd:e5:f5:4a:e3:d8:00:8a:79:cf:87: 12:4b:96:79:2a:db:dd:12:e4:cd:73:03:d2:8d:c1: 97:8f:d6:77:79:f6:7a:d4:69:7b:83:db:75:e9:e8: 74:29:a0:47:68:21:47:f8:71:03:c0:3c:2d:68:5f: 31:1f:e4:a2:2b:16:83:60:92:05:6a:30:8b:74:39: 58:2c:92:de:2a:a6:8f:c6:44:2b:d2:87:63:e1:fb: 65:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:99:6B:8F:50:99:29:3C:38:36:87:FE:66:D5:F0:7B:EA:5A:01:2F X509v3 Authority Key Identifier: keyid:94:7E:29:F3:7C:38:7A:95:90:C1:35:AE:83:DB:F6:8B:10:2E:9E:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/947E29F37C387A9590C135AE83DBF68B102E9E57.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/947E29F37C387A9590C135AE83DBF68B102E9E57.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/947E29F37C387A9590C135AE83DBF68B102E9E57.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:96:48:d0:84:31:6e:e9:b6:20:df:c1:10:5a:06:db:48:a3: 8b:d3:37:77:75:77:83:3b:af:56:65:26:e7:2b:f4:ee:c4:57: bd:91:a2:8e:68:e4:23:53:47:ef:89:ce:5d:63:60:5d:2e:c5: a3:ae:98:45:16:3b:7b:db:dc:76:fa:70:90:63:54:4c:29:c3: 6d:7c:21:48:26:ee:0e:80:02:5c:62:d1:14:2c:8d:09:bb:d8: d3:2b:7a:96:3b:bd:6e:69:7c:73:43:e7:b6:07:27:30:2e:77: d2:03:e4:5d:29:2b:1e:ef:37:4d:45:3f:12:cb:64:bc:07:55: 9a:b2:bf:1a:f6:e3:ff:fa:2a:01:a1:a0:95:5a:4d:77:25:f8: ef:27:e6:b3:58:1c:22:a0:cf:98:98:a1:a0:36:09:37:6a:22: 86:1e:4c:f6:c1:1b:95:ad:cd:df:11:85:b1:c7:1e:4e:20:fa: a1:0e:05:78:3f:86:42:59:2a:10:0b:53:10:d4:1d:bb:0b:b8: 6b:25:3c:6f:55:19:8a:d5:e2:d1:d4:a2:64:87:8a:40:16:06: 5b:38:c2:b5:9c:63:30:b8:76:28:b7:b9:2c:2a:c0:b0:95:d8: b9:18:6f:b5:9f:57:8d:bd:bf:55:f0:ef:93:e8:58:c7:d9:7c: 2a:6f:e2:01 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUWwDlNvq4ZP9VWpVryrYNmf/K3PUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTQ3RTI5RjM3QzM4N0E5NTkwQzEzNUFFODNEQkY2OEIx MDJFOUU1NzAeFw0yNjAzMDEyMjQxMTNaFw0yNjAzMDIyMzU2MTNaMDMxMTAvBgNV BAMTKDZEOTk2QjhGNTA5OTI5M0MzODM2ODdGRTY2RDVGMDdCRUE1QTAxMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuUpqjGffCm9Gqy4d2WiNqckOM oQNsz8Avtm8lUq5Q3HHJsBvXZjQOm+9Q4UugH9e4MOX/Is+oJ58EOM++i8WnyoW9 P4WQ2cKE3CUnRO4W/4/FRTghTNfBr1DUt8r5DY9/nlxZpeBPSelODixVU1W3JIqd SbgG7wdsK5m7wFkWwEPYys/vWeQy6ZI65JoCUw3ezV//gRK169F8ub5gq8gBlg20 tIUWoUrN5fVK49gAinnPhxJLlnkq290S5M1zA9KNwZeP1nd59nrUaXuD23Xp6HQp oEdoIUf4cQPAPC1oXzEf5KIrFoNgkgVqMIt0OVgskt4qpo/GRCvSh2Ph+2XzAgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUbZlrj1CZKTw4Nof+ZtXwe+paAS8wHwYDVR0j BBgwFoAUlH4p83w4epWQwTWug9v2ixAunlcwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9BR1M0eGZENXFQNUpCWGJLS1RrZUpacDlWNE5ESnVLVHI1M0I4ZEpZanRB LzAvOTQ3RTI5RjM3QzM4N0E5NTkwQzEzNUFFODNEQkY2OEIxMDJFOUU1Ny5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS85NDdFMjlGMzdDMzg3QTk1OTBD MTM1QUU4M0RCRjY4QjEwMkU5RTU3LmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0FH UzR4ZkQ1cVA1SkJYYktLVGtlSlpwOVY0TkRKdUtUcjUzQjhkSllqdEEvMC85NDdF MjlGMzdDMzg3QTk1OTBDMTM1QUU4M0RCRjY4QjEwMkU5RTU3Lm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA jJZI0IQxbum2IN/BEFoG20iji9M3d3V3gzuvVmUm5yv07sRXvZGijmjkI1NH74nO XWNgXS7Fo66YRRY7e9vcdvpwkGNUTCnDbXwhSCbuDoACXGLRFCyNCbvY0yt6lju9 bml8c0PntgcnMC530gPkXSkrHu83TUU/EstkvAdVmrK/Gvbj//oqAaGglVpNdyX4 7yfms1gcIqDPmJihoDYJN2oihh5M9sEbla3N3xGFscceTiD6oQ4FeD+GQlkqEAtT ENQduwu4ayU8b1UZitXi0dSiZIeKQBYGWzjCtZxjMLh2KLe5LCrAsJXYuRhvtZ9X jb2/VfDvk+hYx9l8Km/iAQ== -----END CERTIFICATE-----Generated at Mon Mar 2 16:20:48 2026 by rpki-client