$ rpki-client -vvf rpki-repo.registro.br/repo/CKnPxhksQHRuqgsakFRxumt4XRcgo7gQVGdSz9hTFFoq/0/7162F9F3C7B8AF4AD2D8313E9D00B32AE35D3023.mft File: 7162F9F3C7B8AF4AD2D8313E9D00B32AE35D3023.mft (raw, json) Hash identifier: RlJHd6JkehU7aZD5UlAzupLkDCZLCon+zpmjfp1w6/g= Subject key identifier: 85:5D:22:6A:27:8D:96:EE:41:0E:76:DB:0F:07:A7:10:12:51:5E:92 Authority key identifier: 71:62:F9:F3:C7:B8:AF:4A:D2:D8:31:3E:9D:00:B3:2A:E3:5D:30:23 Certificate issuer: /CN=7162F9F3C7B8AF4AD2D8313E9D00B32AE35D3023 Certificate serial: 73F4354E609E778D4DA1E68170FDE522656AC0F0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7162F9F3C7B8AF4AD2D8313E9D00B32AE35D3023.cer Subject info access: rsync://rpki-repo.registro.br/repo/CKnPxhksQHRuqgsakFRxumt4XRcgo7gQVGdSz9hTFFoq/0/7162F9F3C7B8AF4AD2D8313E9D00B32AE35D3023.mft Manifest number: A3 Signing time: Mon 02 Mar 2026 02:15:04 +0000 Manifest this update: Mon 02 Mar 2026 02:10:04 +0000 Manifest next update: Tue 03 Mar 2026 03:24:04 +0000 Files and hashes: 1: 3230312e3138322e36342e302f32322d3234203d3e20323637353031.roa (hash: Cb9uBAF2EaOUHmrHAFVYmgpxWgVV9Rb8YyF72RVTEL8=) 2: 323830343a343237343a3a2f33322d3438203d3e20323637353031.roa (hash: gkg5WucXeB39IkBNzUJ/wROSzkjcCy2rjzLCNwKcOIE=) 3: 7162F9F3C7B8AF4AD2D8313E9D00B32AE35D3023.crl (hash: fIbT5iUy7H4T0DMtKA4cfAf14BsEIk02ZNYLi5vn9ZY=) 4: 34352e3138332e3133322e302f32322d3234203d3e20323637353031.roa (hash: MgiPJKjQ74ldpmf673lk0UClRYBtZCsAHjX15iwaiGU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CKnPxhksQHRuqgsakFRxumt4XRcgo7gQVGdSz9hTFFoq/0/7162F9F3C7B8AF4AD2D8313E9D00B32AE35D3023.crl rsync://rpki-repo.registro.br/repo/CKnPxhksQHRuqgsakFRxumt4XRcgo7gQVGdSz9hTFFoq/0/7162F9F3C7B8AF4AD2D8313E9D00B32AE35D3023.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7162F9F3C7B8AF4AD2D8313E9D00B32AE35D3023.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 03 Mar 2026 03:24:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:f4:35:4e:60:9e:77:8d:4d:a1:e6:81:70:fd:e5:22:65:6a:c0:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7162F9F3C7B8AF4AD2D8313E9D00B32AE35D3023 Validity Not Before: Mar 2 02:10:04 2026 GMT Not After : Mar 3 03:24:04 2026 GMT Subject: CN=855D226A278D96EE410E76DB0F07A71012515E92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a9:74:3f:c7:f6:56:18:07:0b:d4:e0:52:94: 17:8b:bc:43:22:f0:54:1f:06:90:63:88:07:bd:a0: 44:f4:3f:27:5f:b8:23:43:a7:84:a4:53:dd:a8:c9: 71:a0:82:12:1d:33:59:2f:f0:1b:ad:6f:1b:d3:fd: 90:c0:0a:16:89:8e:2b:4a:6a:4a:c5:d9:0b:1c:53: 06:a4:a7:c6:39:13:45:5f:fb:7c:5b:70:dc:44:e1: ae:c2:ab:96:62:56:a4:f4:0d:e2:67:f7:1b:01:01: 3d:ae:10:08:94:04:f9:05:8a:53:9b:f7:73:a9:fa: ec:4c:19:7a:18:ab:79:1b:6f:6b:5c:18:91:66:2e: d8:d5:dc:21:08:bb:40:9e:0d:9b:50:0c:45:5e:45: 65:23:e7:19:ae:0d:5d:90:47:ba:d0:c3:f7:2f:b6: 04:02:b4:c2:d9:78:fb:21:84:6b:b0:6b:de:9d:3a: 67:8a:74:af:8e:13:5e:5f:1f:0a:1f:ca:60:40:ee: 63:35:87:0e:e9:74:c4:4b:6f:2d:c1:48:0e:8a:e7: 15:4a:d4:2a:f0:db:9b:e6:af:e5:82:7f:58:28:ad: 32:49:ae:dc:bc:cc:5e:7b:df:57:fb:37:86:fa:6d: cc:1a:75:0d:86:de:01:16:fe:76:3f:c4:e4:89:3d: 59:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:5D:22:6A:27:8D:96:EE:41:0E:76:DB:0F:07:A7:10:12:51:5E:92 X509v3 Authority Key Identifier: keyid:71:62:F9:F3:C7:B8:AF:4A:D2:D8:31:3E:9D:00:B3:2A:E3:5D:30:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CKnPxhksQHRuqgsakFRxumt4XRcgo7gQVGdSz9hTFFoq/0/7162F9F3C7B8AF4AD2D8313E9D00B32AE35D3023.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7162F9F3C7B8AF4AD2D8313E9D00B32AE35D3023.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CKnPxhksQHRuqgsakFRxumt4XRcgo7gQVGdSz9hTFFoq/0/7162F9F3C7B8AF4AD2D8313E9D00B32AE35D3023.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:95:e0:39:07:d6:ea:67:ca:e9:2c:12:a4:dc:e2:07:6c:7a: bb:d5:9d:a8:62:c3:84:94:4c:02:be:82:b3:b9:18:5a:b4:24: 3b:48:c5:54:71:2c:f2:58:22:fb:13:88:a0:bc:a8:a1:cf:4a: e2:61:65:5d:45:5b:e0:ca:21:87:42:ac:e5:31:c6:b2:c8:3a: c3:2c:37:f3:b8:13:a9:40:e1:1c:c3:01:c9:45:d8:59:04:dc: 4c:7b:d1:8c:d0:43:8b:97:dc:6b:73:db:2a:94:41:0b:7c:7b: 52:8a:c8:8f:e2:45:23:78:88:ca:60:20:2e:48:64:59:d8:c5: e9:95:eb:38:df:93:61:60:1e:e3:fc:d1:4c:06:1d:2c:2d:eb: 7f:35:a9:fc:62:47:d8:d7:6b:de:b3:9f:46:8f:a7:1a:5a:ae: aa:61:e4:a2:b2:37:9d:2c:26:30:08:f1:3c:7c:f1:b4:38:1b: 70:9f:37:9e:72:a5:61:e3:48:cf:21:75:e3:ab:6b:90:26:15: 7a:ed:da:21:a7:7a:09:67:01:5a:3a:d7:ad:71:90:45:aa:6a: 0d:ba:79:47:ab:f1:87:81:11:3d:51:da:22:b0:9f:ea:4b:c7: 00:5f:6c:59:b5:91:75:3c:cd:fc:2c:9d:4f:75:e7:1c:ac:5e: 9e:f8:db:02 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUc/Q1TmCed41NoeaBcP3lImVqwPAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzE2MkY5RjNDN0I4QUY0QUQyRDgzMTNFOUQwMEIzMkFF MzVEMzAyMzAeFw0yNjAzMDIwMjEwMDRaFw0yNjAzMDMwMzI0MDRaMDMxMTAvBgNV BAMTKDg1NUQyMjZBMjc4RDk2RUU0MTBFNzZEQjBGMDdBNzEwMTI1MTVFOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBqXQ/x/ZWGAcL1OBSlBeLvEMi 8FQfBpBjiAe9oET0PydfuCNDp4SkU92oyXGgghIdM1kv8ButbxvT/ZDAChaJjitK akrF2QscUwakp8Y5E0Vf+3xbcNxE4a7Cq5ZiVqT0DeJn9xsBAT2uEAiUBPkFilOb 93Op+uxMGXoYq3kbb2tcGJFmLtjV3CEIu0CeDZtQDEVeRWUj5xmuDV2QR7rQw/cv tgQCtMLZePshhGuwa96dOmeKdK+OE15fHwofymBA7mM1hw7pdMRLby3BSA6K5xVK 1Crw25vmr+WCf1gorTJJrty8zF5731f7N4b6bcwadQ2G3gEW/nY/xOSJPVmrAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUhV0iaieNlu5BDnbbDwenEBJRXpIwHwYDVR0j BBgwFoAUcWL588e4r0rS2DE+nQCzKuNdMCMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ0tuUHhoa3NRSFJ1cWdzYWtGUnh1bXQ0WFJjZ283Z1FWR2RTejloVEZG b3EvMC83MTYyRjlGM0M3QjhBRjRBRDJEODMxM0U5RDAwQjMyQUUzNUQzMDIzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzcxNjJGOUYzQzdCOEFGNEFE MkQ4MzEzRTlEMDBCMzJBRTM1RDMwMjMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q0tuUHhoa3NRSFJ1cWdzYWtGUnh1bXQ0WFJjZ283Z1FWR2RTejloVEZGb3EvMC83 MTYyRjlGM0M3QjhBRjRBRDJEODMxM0U5RDAwQjMyQUUzNUQzMDIzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAI5XgOQfW6mfK6SwSpNziB2x6u9WdqGLDhJRMAr6Cs7kYWrQkO0jFVHEs8lgi +xOIoLyooc9K4mFlXUVb4Mohh0Ks5THGssg6wyw387gTqUDhHMMByUXYWQTcTHvR jNBDi5fca3PbKpRBC3x7UorIj+JFI3iIymAgLkhkWdjF6ZXrON+TYWAe4/zRTAYd LC3rfzWp/GJH2Ndr3rOfRo+nGlquqmHkorI3nSwmMAjxPHzxtDgbcJ83nnKlYeNI zyF146trkCYVeu3aIad6CWcBWjrXrXGQRapqDbp5R6vxh4ERPVHaIrCf6kvHAF9s WbWRdTzN/CydT3XnHKxenvjbAg== -----END CERTIFICATE-----Generated at Mon Mar 2 16:15:27 2026 by rpki-client