$ rpki-client -vvf rpki-repo.registro.br/repo/BHgxNsAJfA4iS94ZkFf2yZyQByRozbJ1EPUAKLf5pbyF/0/AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.mft File: AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.mft (raw, json) Hash identifier: zh+gLz9WGS5btIShf8J5/AjV3anOGaHXax9lxUyVET8= Subject key identifier: 8A:91:25:15:C2:FD:20:08:18:BB:00:28:01:1A:98:1C:72:AF:78:E4 Authority key identifier: AD:58:EE:D2:0C:EA:04:01:BD:EB:DE:4C:A2:9C:C2:DB:59:D7:11:3A Certificate issuer: /CN=AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A Certificate serial: 7DD99E2DB35E3CAA5FFF2A6A8421F917CD93A8BF Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.cer Subject info access: rsync://rpki-repo.registro.br/repo/BHgxNsAJfA4iS94ZkFf2yZyQByRozbJ1EPUAKLf5pbyF/0/AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.mft Manifest number: 024A Signing time: Mon 02 Mar 2026 04:11:32 +0000 Manifest this update: Mon 02 Mar 2026 04:06:32 +0000 Manifest next update: Tue 03 Mar 2026 06:48:32 +0000 Files and hashes: 1: 34352e3136352e38302e302f32322d3234203d3e203631353935.roa (hash: E8fPnc3D01HrHu0IERiaVvqh7l7+gzZnFGvDM9PE9ic=) 2: AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.crl (hash: Jt/RnYvHImxavLulepFZv4mJSiVz6ZcvYaHh8J6FXEQ=) 3: 323830343a353463383a3a2f33322d3438203d3e203631353935.roa (hash: Lr4RgQ9+Kc8eB8NQKeHtU80CyD6ZWwwwrof8SW1hNR4=) 4: 34352e3136352e38302e302f32322d3234203d3e203533343237.roa (hash: 1xYFKSeSCizyds5gHEIPv0l3Tzgq0aCCTj2XdNILDmA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BHgxNsAJfA4iS94ZkFf2yZyQByRozbJ1EPUAKLf5pbyF/0/AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.crl rsync://rpki-repo.registro.br/repo/BHgxNsAJfA4iS94ZkFf2yZyQByRozbJ1EPUAKLf5pbyF/0/AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 03 Mar 2026 06:48:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:d9:9e:2d:b3:5e:3c:aa:5f:ff:2a:6a:84:21:f9:17:cd:93:a8:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A Validity Not Before: Mar 2 04:06:32 2026 GMT Not After : Mar 3 06:48:32 2026 GMT Subject: CN=8A912515C2FD200818BB0028011A981C72AF78E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:16:6f:15:79:ce:34:56:c5:0a:8f:6b:c6:93: 2f:37:20:b7:4d:43:91:42:de:08:7d:8b:04:87:c8: a1:03:44:56:6c:e7:8e:28:1f:75:82:a3:3f:87:6b: dd:b8:18:eb:fb:df:7d:9d:a7:c3:27:9e:bd:bd:13: 85:2b:83:4d:00:86:79:6c:d6:58:4f:0a:61:7c:3b: f4:1f:52:e1:51:0d:88:f5:0c:4d:90:e2:9b:f9:d2: 8a:fd:2f:95:74:41:10:e8:f1:f1:50:fb:16:22:5b: 7d:c1:19:9b:c0:3d:ed:a6:3f:27:ed:ca:ff:c5:cc: bc:c5:a6:43:8f:2b:43:79:db:67:60:11:df:e2:7e: d6:2f:5f:57:0b:1a:7a:a4:23:0b:9a:15:c3:19:e9: 12:23:8d:87:c4:7e:16:b3:94:c8:e8:a4:ac:2d:17: c1:09:5f:37:ce:2b:19:40:16:65:25:4d:1b:80:26: 9b:37:88:97:1a:3a:3e:36:2d:f9:cc:5b:1e:dd:e3: 41:9c:0e:50:16:bf:65:6a:42:5e:a3:46:8e:51:05: 1e:a1:69:fe:18:36:86:cd:5f:da:87:76:f7:85:8e: e3:1e:ce:24:7f:04:68:7c:f1:62:bd:53:1e:e0:f1: 25:2e:ba:fe:aa:51:39:70:48:c5:66:f4:28:25:c9: ba:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:91:25:15:C2:FD:20:08:18:BB:00:28:01:1A:98:1C:72:AF:78:E4 X509v3 Authority Key Identifier: keyid:AD:58:EE:D2:0C:EA:04:01:BD:EB:DE:4C:A2:9C:C2:DB:59:D7:11:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BHgxNsAJfA4iS94ZkFf2yZyQByRozbJ1EPUAKLf5pbyF/0/AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BHgxNsAJfA4iS94ZkFf2yZyQByRozbJ1EPUAKLf5pbyF/0/AD58EED20CEA0401BDEBDE4CA29CC2DB59D7113A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:c7:8b:c8:0b:d8:96:62:a1:80:6c:14:0f:f9:c1:95:1b:1c: 62:6d:63:95:19:ce:d1:8c:18:43:78:5d:50:17:22:6c:22:da: 71:2e:89:dd:c9:bb:ff:41:12:2b:62:05:db:f4:01:d2:b8:e0: 9e:75:88:3b:a4:f1:9f:7d:43:c9:f9:a7:b0:50:4c:4d:0d:b3: 33:fb:60:96:33:a0:0f:b6:b0:84:a9:d1:ee:65:54:a4:19:84: 37:ff:ea:f1:a7:d9:de:be:5b:be:78:34:eb:07:90:24:13:a1: ff:23:ec:29:5d:fd:df:20:9a:15:35:3c:5a:7d:0b:72:d2:aa: 57:78:c8:be:bd:73:ea:14:8f:f4:ef:84:d7:c7:f6:78:bb:9c: d8:43:19:8c:a0:f1:01:9c:45:a1:ec:56:43:aa:1e:56:b1:cf: d5:24:40:82:5c:27:7b:44:5d:42:6a:be:03:f3:24:72:f6:4c: 6b:57:a2:e6:3e:bb:1c:25:04:06:93:16:90:e6:48:89:21:c8: 8a:83:eb:a5:44:9b:87:a5:ba:4d:78:0c:4e:ac:ea:66:b5:22: e6:be:70:1e:bc:34:cc:33:03:0f:a3:c3:0d:0c:4a:3d:d4:1e: aa:96:4c:52:30:ea:b6:b6:17:97:d4:69:10:df:1c:e6:aa:b9: b9:41:d1:ce -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUfdmeLbNePKpf/ypqhCH5F82TqL8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQ1OEVFRDIwQ0VBMDQwMUJERUJERTRDQTI5Q0MyREI1 OUQ3MTEzQTAeFw0yNjAzMDIwNDA2MzJaFw0yNjAzMDMwNjQ4MzJaMDMxMTAvBgNV BAMTKDhBOTEyNTE1QzJGRDIwMDgxOEJCMDAyODAxMUE5ODFDNzJBRjc4RTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRFm8Vec40VsUKj2vGky83ILdN Q5FC3gh9iwSHyKEDRFZs544oH3WCoz+Ha924GOv7332dp8Mnnr29E4Urg00Ahnls 1lhPCmF8O/QfUuFRDYj1DE2Q4pv50or9L5V0QRDo8fFQ+xYiW33BGZvAPe2mPyft yv/FzLzFpkOPK0N522dgEd/iftYvX1cLGnqkIwuaFcMZ6RIjjYfEfhazlMjopKwt F8EJXzfOKxlAFmUlTRuAJps3iJcaOj42LfnMWx7d40GcDlAWv2VqQl6jRo5RBR6h af4YNobNX9qHdveFjuMeziR/BGh88WK9Ux7g8SUuuv6qUTlwSMVm9CglybqdAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUipElFcL9IAgYuwAoARqYHHKveOQwHwYDVR0j BBgwFoAUrVju0gzqBAG9695MopzC21nXETowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQkhneE5zQUpmQTRpUzk0WmtGZjJ5WnlRQnlSb3piSjFFUFVBS0xmNXBi eUYvMC9BRDU4RUVEMjBDRUEwNDAxQkRFQkRFNENBMjlDQzJEQjU5RDcxMTNBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FENThFRUQyMENFQTA0MDFC REVCREU0Q0EyOUNDMkRCNTlENzExM0EuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QkhneE5zQUpmQTRpUzk0WmtGZjJ5WnlRQnlSb3piSjFFUFVBS0xmNXBieUYvMC9B RDU4RUVEMjBDRUEwNDAxQkRFQkRFNENBMjlDQzJEQjU5RDcxMTNBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkceLyAvYlmKhgGwUD/nBlRscYm1jlRnO0YwYQ3hdUBcibCLacS6J3cm7/0ES K2IF2/QB0rjgnnWIO6Txn31DyfmnsFBMTQ2zM/tgljOgD7awhKnR7mVUpBmEN//q 8afZ3r5bvng06weQJBOh/yPsKV393yCaFTU8Wn0LctKqV3jIvr1z6hSP9O+E18f2 eLuc2EMZjKDxAZxFoexWQ6oeVrHP1SRAglwne0RdQmq+A/MkcvZMa1ei5j67HCUE BpMWkOZIiSHIioPrpUSbh6W6TXgMTqzqZrUi5r5wHrw0zDMDD6PDDQxKPdQeqpZM UjDqtrYXl9RpEN8c5qq5uUHRzg== -----END CERTIFICATE-----Generated at Mon Mar 2 21:45:45 2026 by rpki-client