$ rpki-client -vvf rpki-repo.registro.br/repo/CPxhNqg5EAcghUDjU4YBeesmmKaFdqnvE3r5GK5fnyFF/1/84210C699884A23E38D45F40B27833D84A440F91.mft File: 84210C699884A23E38D45F40B27833D84A440F91.mft (raw, json) Hash identifier: eSyS6z7OzKXsYkWBUaONNpx6B1DZH5bOyCMX4K8puMc= Subject key identifier: CE:4F:A1:D9:10:6F:B4:24:63:A7:C5:69:4A:7B:7B:19:A0:96:00:12 Authority key identifier: 84:21:0C:69:98:84:A2:3E:38:D4:5F:40:B2:78:33:D8:4A:44:0F:91 Certificate issuer: /CN=84210C699884A23E38D45F40B27833D84A440F91 Certificate serial: 37F1C1F021C139B9DFA4E9047FB00DDA5B73FC49 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84210C699884A23E38D45F40B27833D84A440F91.cer Subject info access: rsync://rpki-repo.registro.br/repo/CPxhNqg5EAcghUDjU4YBeesmmKaFdqnvE3r5GK5fnyFF/1/84210C699884A23E38D45F40B27833D84A440F91.mft Manifest number: 03A9 Signing time: Mon 02 Mar 2026 03:20:00 +0000 Manifest this update: Mon 02 Mar 2026 03:15:00 +0000 Manifest next update: Tue 03 Mar 2026 05:06:00 +0000 Files and hashes: 1: 323830343a323163303a3a2f33322d3332203d3e20323634353731.roa (hash: JQkS3aVjRYIUrDrcqdT2yRUNgeAwc+sxOIedWxAMUJI=) 2: 3133382e33362e38302e302f32322d3234203d3e20323634353731.roa (hash: W9cuh6TY+DbzNPDLc450PMX/lZENV+B6iA3ixoKigao=) 3: 84210C699884A23E38D45F40B27833D84A440F91.crl (hash: dys23Qad8ajbT2vqBCRBIbfOOM2gl1udWeI/mpHMVuI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CPxhNqg5EAcghUDjU4YBeesmmKaFdqnvE3r5GK5fnyFF/1/84210C699884A23E38D45F40B27833D84A440F91.crl rsync://rpki-repo.registro.br/repo/CPxhNqg5EAcghUDjU4YBeesmmKaFdqnvE3r5GK5fnyFF/1/84210C699884A23E38D45F40B27833D84A440F91.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84210C699884A23E38D45F40B27833D84A440F91.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 03 Mar 2026 05:06:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:f1:c1:f0:21:c1:39:b9:df:a4:e9:04:7f:b0:0d:da:5b:73:fc:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84210C699884A23E38D45F40B27833D84A440F91 Validity Not Before: Mar 2 03:15:00 2026 GMT Not After : Mar 3 05:06:00 2026 GMT Subject: CN=CE4FA1D9106FB42463A7C5694A7B7B19A0960012 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b0:77:bf:de:42:9a:4e:79:a1:7b:38:86:3c: 21:38:08:82:49:47:c7:75:00:db:7b:f6:76:9b:81: ab:fb:fb:e1:e7:9c:b5:74:93:e4:1d:f6:29:fe:04: f7:ca:1e:bf:24:a9:86:46:ef:8c:a2:bb:bc:c2:0f: 9e:94:48:d2:f4:32:e8:a5:fc:f2:9b:cf:c2:8b:26: b0:da:e5:f4:af:27:0d:fe:7f:5e:d9:63:aa:c9:bf: ff:41:4b:b1:b1:51:7b:9a:a5:51:3c:5d:65:64:22: 99:4d:81:76:62:3d:e7:03:cb:37:15:36:af:7f:06: fb:0c:d8:89:87:0e:8d:55:ca:93:38:ee:a0:1d:dc: f2:33:42:ee:cb:d3:7d:38:ae:e0:31:b0:74:d9:07: d5:27:e7:01:04:06:d5:12:76:e8:f6:37:cd:56:e0: 1a:16:2a:a6:e7:2c:c6:08:ff:03:59:14:65:c1:d1: 87:75:3f:2d:39:8d:ec:ea:77:de:97:1f:da:04:df: df:e2:34:ab:1d:eb:63:e1:0c:78:f4:54:d9:e4:57: 75:72:16:16:fe:09:32:31:5e:32:e4:c5:24:be:87: 90:c7:55:5d:e8:ce:ca:67:b1:84:4c:8e:98:2b:68: b2:a1:a6:16:1f:dd:2f:b1:2e:ed:11:6d:0f:14:48: cd:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:4F:A1:D9:10:6F:B4:24:63:A7:C5:69:4A:7B:7B:19:A0:96:00:12 X509v3 Authority Key Identifier: keyid:84:21:0C:69:98:84:A2:3E:38:D4:5F:40:B2:78:33:D8:4A:44:0F:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CPxhNqg5EAcghUDjU4YBeesmmKaFdqnvE3r5GK5fnyFF/1/84210C699884A23E38D45F40B27833D84A440F91.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84210C699884A23E38D45F40B27833D84A440F91.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CPxhNqg5EAcghUDjU4YBeesmmKaFdqnvE3r5GK5fnyFF/1/84210C699884A23E38D45F40B27833D84A440F91.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:4e:a1:50:42:d2:41:70:b7:82:2f:37:fa:dc:71:7e:24:40: 9f:23:3f:1a:81:46:4f:73:10:05:bb:1e:08:7e:30:43:e6:3a: 02:60:61:51:ab:d4:9a:e6:c6:97:66:0d:c2:1e:c6:50:75:26: 18:81:2a:ee:2b:72:aa:6f:61:a3:81:b1:78:2f:8b:29:1d:11: 1f:40:ea:1a:87:3b:e1:4a:42:13:e9:fc:8a:1f:19:1f:39:3e: 7f:3f:0a:33:29:81:ab:4e:cf:65:2f:f8:83:e2:13:ec:84:f4: 39:79:02:d0:e8:75:fc:99:c4:54:4d:f1:1a:6f:57:43:66:cd: 41:2e:f3:8f:4e:13:4b:ff:93:53:bd:3c:9f:97:80:68:73:6e: 5a:6a:47:55:43:93:92:23:de:4e:16:29:87:b4:a3:36:d6:1d: ca:3d:d6:7f:ce:87:04:ac:59:af:b7:90:1b:f5:6a:1a:08:08: 5e:b9:a9:78:45:d6:e0:69:8e:99:0b:bf:13:41:5e:02:e2:14: 55:95:ac:71:29:e2:54:b8:90:dc:bd:dc:70:b1:66:f5:39:bb: a4:55:0a:b1:e0:a3:cb:12:68:a8:c3:3d:f5:7c:0f:30:41:c3: eb:cd:37:af:cc:fb:95:83:15:29:c7:29:db:f4:16:67:0f:00: d7:3a:c0:91 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUN/HB8CHBObnfpOkEf7AN2ltz/EkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQyMTBDNjk5ODg0QTIzRTM4RDQ1RjQwQjI3ODMzRDg0 QTQ0MEY5MTAeFw0yNjAzMDIwMzE1MDBaFw0yNjAzMDMwNTA2MDBaMDMxMTAvBgNV BAMTKENFNEZBMUQ5MTA2RkI0MjQ2M0E3QzU2OTRBN0I3QjE5QTA5NjAwMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGsHe/3kKaTnmheziGPCE4CIJJ R8d1ANt79nabgav7++HnnLV0k+Qd9in+BPfKHr8kqYZG74yiu7zCD56USNL0Muil /PKbz8KLJrDa5fSvJw3+f17ZY6rJv/9BS7GxUXuapVE8XWVkIplNgXZiPecDyzcV Nq9/BvsM2ImHDo1VypM47qAd3PIzQu7L0304ruAxsHTZB9Un5wEEBtUSduj2N81W 4BoWKqbnLMYI/wNZFGXB0Yd1Py05jezqd96XH9oE39/iNKsd62PhDHj0VNnkV3Vy Fhb+CTIxXjLkxSS+h5DHVV3ozspnsYRMjpgraLKhphYf3S+xLu0RbQ8USM31AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUzk+h2RBvtCRjp8VpSnt7GaCWABIwHwYDVR0j BBgwFoAUhCEMaZiEoj441F9Asngz2EpED5EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ1B4aE5xZzVFQWNnaFVEalU0WUJlZXNtbUthRmRxbnZFM3I1R0s1Zm55 RkYvMS84NDIxMEM2OTk4ODRBMjNFMzhENDVGNDBCMjc4MzNEODRBNDQwRjkxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg0MjEwQzY5OTg4NEEyM0Uz OEQ0NUY0MEIyNzgzM0Q4NEE0NDBGOTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q1B4aE5xZzVFQWNnaFVEalU0WUJlZXNtbUthRmRxbnZFM3I1R0s1Zm55RkYvMS84 NDIxMEM2OTk4ODRBMjNFMzhENDVGNDBCMjc4MzNEODRBNDQwRjkxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXE6hUELSQXC3gi83+txxfiRAnyM/GoFGT3MQBbseCH4wQ+Y6AmBhUavUmubG l2YNwh7GUHUmGIEq7ityqm9ho4GxeC+LKR0RH0DqGoc74UpCE+n8ih8ZHzk+fz8K MymBq07PZS/4g+IT7IT0OXkC0Oh1/JnEVE3xGm9XQ2bNQS7zj04TS/+TU708n5eA aHNuWmpHVUOTkiPeThYph7SjNtYdyj3Wf86HBKxZr7eQG/VqGggIXrmpeEXW4GmO mQu/E0FeAuIUVZWscSniVLiQ3L3ccLFm9Tm7pFUKseCjyxJoqMM99XwPMEHD6803 r8z7lYMVKccp2/QWZw8A1zrAkQ== -----END CERTIFICATE-----Generated at Mon Mar 2 20:13:02 2026 by rpki-client