$ rpki-client -vvf rpki-repo.registro.br/repo/Bns6T5M9tRSFwW6wVuwGb55MSTj9mRvtbymmZoB3wszv/0/8AE33D76F6C9FC9D0B0FF7F554C3519271D1C838.mft File: 8AE33D76F6C9FC9D0B0FF7F554C3519271D1C838.mft (raw, json) Hash identifier: 9OjbM8t2bDeC5WrYXbrXBCvV1aeFiQytytcq2kjQYRQ= Subject key identifier: 65:66:34:AF:94:1C:8D:3D:29:31:A1:9B:70:BB:34:03:49:8F:C4:4B Authority key identifier: 8A:E3:3D:76:F6:C9:FC:9D:0B:0F:F7:F5:54:C3:51:92:71:D1:C8:38 Certificate issuer: /CN=8AE33D76F6C9FC9D0B0FF7F554C3519271D1C838 Certificate serial: 5C9286886EBA726D146D47BD5065E7D6FC4BDD54 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AE33D76F6C9FC9D0B0FF7F554C3519271D1C838.cer Subject info access: rsync://rpki-repo.registro.br/repo/Bns6T5M9tRSFwW6wVuwGb55MSTj9mRvtbymmZoB3wszv/0/8AE33D76F6C9FC9D0B0FF7F554C3519271D1C838.mft Manifest number: CA Signing time: Mon 02 Mar 2026 10:49:21 +0000 Manifest this update: Mon 02 Mar 2026 10:44:21 +0000 Manifest next update: Tue 03 Mar 2026 12:59:21 +0000 Files and hashes: 1: 3139302e3130392e39362e302f32332d3233203d3e20323731323232.roa (hash: eS5+BzUz/P8gDxELe1obBXuVHdIgN6UEEqiN1aXBrk4=) 2: 3139302e3130392e39392e302f32342d3234203d3e20323731323232.roa (hash: wHlU3sTFbjAA4O7WdhVkKwAR5dednQvUfHubbR1dvf8=) 3: 8AE33D76F6C9FC9D0B0FF7F554C3519271D1C838.crl (hash: ntSJnvewTNdyq5R9MoaNeHHQnWFMocM05ylk63Pomjs=) 4: 3139302e3130392e39382e302f32342d3234203d3e20323731323232.roa (hash: 4BJu53rKTMN1pl6CAz+q6eWZttl5HIejDJqVkTRBNw8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Bns6T5M9tRSFwW6wVuwGb55MSTj9mRvtbymmZoB3wszv/0/8AE33D76F6C9FC9D0B0FF7F554C3519271D1C838.crl rsync://rpki-repo.registro.br/repo/Bns6T5M9tRSFwW6wVuwGb55MSTj9mRvtbymmZoB3wszv/0/8AE33D76F6C9FC9D0B0FF7F554C3519271D1C838.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AE33D76F6C9FC9D0B0FF7F554C3519271D1C838.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 03 Mar 2026 12:59:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:92:86:88:6e:ba:72:6d:14:6d:47:bd:50:65:e7:d6:fc:4b:dd:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AE33D76F6C9FC9D0B0FF7F554C3519271D1C838 Validity Not Before: Mar 2 10:44:21 2026 GMT Not After : Mar 3 12:59:21 2026 GMT Subject: CN=656634AF941C8D3D2931A19B70BB3403498FC44B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:23:a9:a1:cb:ff:9d:67:24:da:fc:89:b0:97: 88:9a:8b:a7:6f:11:20:a2:b7:d1:13:9a:6a:e5:12: 0f:15:36:a4:ff:5d:21:25:b7:c6:05:a6:95:c3:17: f4:b8:58:e1:a8:48:e1:4e:5a:14:e2:34:d5:54:a8: c5:f8:da:5a:63:8b:a8:29:6b:b0:22:35:2c:fe:26: 13:7a:ec:28:10:10:f3:31:44:e6:d4:2b:9e:32:45: 18:d4:74:4a:74:ab:65:38:e5:09:ec:92:b3:94:5c: fc:71:c1:2a:3f:e7:0f:98:d8:15:67:e1:b8:c1:9b: 1a:bf:dd:f5:30:9b:b0:ee:9d:c9:44:19:1d:52:89: 33:20:d1:81:6e:87:74:ca:5f:21:58:69:0d:6f:e0: ae:de:7a:46:e4:9d:8d:79:b0:84:5e:ae:9e:c3:1a: da:f7:55:07:df:ce:0e:01:f2:fb:90:71:16:8d:ce: 23:0a:8f:88:19:cf:7e:9e:c8:0e:b4:56:16:2e:bc: bc:c1:5e:6c:2e:10:d8:d6:18:26:65:14:f7:5b:ab: bf:9e:2e:c2:07:c7:6d:d7:9b:b3:44:11:f6:08:f5: f5:98:34:ce:6f:85:38:71:01:10:a6:6f:97:04:39: 2c:f5:35:57:ab:ce:b5:6c:da:87:4d:77:a2:78:ce: d4:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:66:34:AF:94:1C:8D:3D:29:31:A1:9B:70:BB:34:03:49:8F:C4:4B X509v3 Authority Key Identifier: keyid:8A:E3:3D:76:F6:C9:FC:9D:0B:0F:F7:F5:54:C3:51:92:71:D1:C8:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Bns6T5M9tRSFwW6wVuwGb55MSTj9mRvtbymmZoB3wszv/0/8AE33D76F6C9FC9D0B0FF7F554C3519271D1C838.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AE33D76F6C9FC9D0B0FF7F554C3519271D1C838.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bns6T5M9tRSFwW6wVuwGb55MSTj9mRvtbymmZoB3wszv/0/8AE33D76F6C9FC9D0B0FF7F554C3519271D1C838.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:32:bb:54:0d:ce:5f:4e:0c:b7:5f:26:7d:11:2d:3e:e4:3b: b7:97:22:56:46:9d:6b:78:02:ce:fd:a7:c9:e7:c0:b7:b6:32: a4:ae:58:48:e9:a7:a3:3b:3b:3f:9f:36:4c:dd:64:18:98:03: 34:91:64:d7:15:39:dd:de:96:f1:ad:c2:6b:27:5d:e3:a5:b5: 4d:75:a1:e0:b4:d2:60:d0:fa:e7:d0:19:09:7e:ad:ba:87:fb: f9:1b:bc:78:88:bd:9b:6f:16:b7:0c:27:f2:4c:45:4e:b0:de: e9:7d:b9:17:75:c4:92:61:51:1c:09:db:1b:4b:9c:55:91:5d: bb:a3:0b:46:29:0d:73:90:7d:69:8f:ed:02:c0:b4:ce:f2:b6: 73:8b:97:cf:e8:c1:80:97:0f:ab:ae:d3:ca:17:b4:8d:9e:8b: 94:26:79:a5:9f:c6:64:39:52:6e:29:e4:2d:2c:07:25:9f:e1: 8d:3c:4c:df:0c:71:a1:43:4c:ab:ab:b4:17:cf:f1:9b:4a:5d: c8:99:21:21:6b:d1:1c:da:4b:48:4a:30:ed:c8:f3:2e:cd:06: e7:f8:72:96:b9:27:11:d9:dd:85:b8:ff:aa:b8:f5:7d:31:73: 98:d2:cf:f6:ac:fa:bf:3d:de:78:94:82:7c:3e:15:51:54:9d: 44:8f:ad:fc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUXJKGiG66cm0UbUe9UGXn1vxL3VQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEFFMzNENzZGNkM5RkM5RDBCMEZGN0Y1NTRDMzUxOTI3 MUQxQzgzODAeFw0yNjAzMDIxMDQ0MjFaFw0yNjAzMDMxMjU5MjFaMDMxMTAvBgNV BAMTKDY1NjYzNEFGOTQxQzhEM0QyOTMxQTE5QjcwQkIzNDAzNDk4RkM0NEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVI6mhy/+dZyTa/Imwl4iai6dv ESCit9ETmmrlEg8VNqT/XSElt8YFppXDF/S4WOGoSOFOWhTiNNVUqMX42lpji6gp a7AiNSz+JhN67CgQEPMxRObUK54yRRjUdEp0q2U45QnskrOUXPxxwSo/5w+Y2BVn 4bjBmxq/3fUwm7DunclEGR1SiTMg0YFuh3TKXyFYaQ1v4K7eekbknY15sIRerp7D Gtr3VQffzg4B8vuQcRaNziMKj4gZz36eyA60VhYuvLzBXmwuENjWGCZlFPdbq7+e LsIHx23Xm7NEEfYI9fWYNM5vhThxARCmb5cEOSz1NVerzrVs2odNd6J4ztQjAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUZWY0r5QcjT0pMaGbcLs0A0mPxEswHwYDVR0j BBgwFoAUiuM9dvbJ/J0LD/f1VMNRknHRyDgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQm5zNlQ1TTl0UlNGd1c2d1Z1d0diNTVNU1RqOW1SdnRieW1tWm9CM3dz enYvMC84QUUzM0Q3NkY2QzlGQzlEMEIwRkY3RjU1NEMzNTE5MjcxRDFDODM4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhBRTMzRDc2RjZDOUZDOUQw QjBGRjdGNTU0QzM1MTkyNzFEMUM4MzguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Qm5zNlQ1TTl0UlNGd1c2d1Z1d0diNTVNU1RqOW1SdnRieW1tWm9CM3dzenYvMC84 QUUzM0Q3NkY2QzlGQzlEMEIwRkY3RjU1NEMzNTE5MjcxRDFDODM4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAujK7VA3OX04Mt18mfREtPuQ7t5ciVkada3gCzv2nyefAt7YypK5YSOmnozs7 P582TN1kGJgDNJFk1xU53d6W8a3Caydd46W1TXWh4LTSYND659AZCX6tuof7+Ru8 eIi9m28Wtwwn8kxFTrDe6X25F3XEkmFRHAnbG0ucVZFdu6MLRikNc5B9aY/tAsC0 zvK2c4uXz+jBgJcPq67Tyhe0jZ6LlCZ5pZ/GZDlSbinkLSwHJZ/hjTxM3wxxoUNM q6u0F8/xm0pdyJkhIWvRHNpLSEow7cjzLs0G5/hylrknEdndhbj/qrj1fTFzmNLP 9qz6vz3eeJSCfD4VUVSdRI+t/A== -----END CERTIFICATE-----Generated at Mon Mar 2 21:45:36 2026 by rpki-client