$ rpki-client -vvf rpki-repo.registro.br/repo/D1MhRwpZ6QeoFtx6ZrsCsUR3hhi4K8vViDLrtVFneEtJ/0/AA3B5DBF298ABAA4F809A6FD7352BEF91FC78585.mft File: AA3B5DBF298ABAA4F809A6FD7352BEF91FC78585.mft (raw, json) Hash identifier: h71xodiAg7BwTzs5aEBF0C7vxWvzIodgvpGOcGwWUQE= Subject key identifier: DE:AA:BC:F2:50:41:C1:AC:A0:2A:29:3D:42:BA:26:EB:69:D6:A2:39 Authority key identifier: AA:3B:5D:BF:29:8A:BA:A4:F8:09:A6:FD:73:52:BE:F9:1F:C7:85:85 Certificate issuer: /CN=AA3B5DBF298ABAA4F809A6FD7352BEF91FC78585 Certificate serial: 42F8CA1A2E34044065ECEE370436F82CB349EE05 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA3B5DBF298ABAA4F809A6FD7352BEF91FC78585.cer Subject info access: rsync://rpki-repo.registro.br/repo/D1MhRwpZ6QeoFtx6ZrsCsUR3hhi4K8vViDLrtVFneEtJ/0/AA3B5DBF298ABAA4F809A6FD7352BEF91FC78585.mft Manifest number: C4 Signing time: Mon 02 Mar 2026 09:38:27 +0000 Manifest this update: Mon 02 Mar 2026 09:33:27 +0000 Manifest next update: Tue 03 Mar 2026 13:28:27 +0000 Files and hashes: 1: 323830343a336262383a3a2f33322d313238203d3e20323636313637.roa (hash: PCBJ5STCzw9+/GFdGErJzANC+sl1s1q/clzXkR0Vk08=) 2: AA3B5DBF298ABAA4F809A6FD7352BEF91FC78585.crl (hash: hVe8Fio/ko4FELVkx4BUDWK6PIdZ2EIxr928D3xGkp0=) 3: 3136302e31392e3234302e302f32322d3332203d3e20323636313637.roa (hash: JNmyrnJWmOL269NQjAHg0Etu8oD933ZzlQ4sBwx3LWA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/D1MhRwpZ6QeoFtx6ZrsCsUR3hhi4K8vViDLrtVFneEtJ/0/AA3B5DBF298ABAA4F809A6FD7352BEF91FC78585.crl rsync://rpki-repo.registro.br/repo/D1MhRwpZ6QeoFtx6ZrsCsUR3hhi4K8vViDLrtVFneEtJ/0/AA3B5DBF298ABAA4F809A6FD7352BEF91FC78585.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA3B5DBF298ABAA4F809A6FD7352BEF91FC78585.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 03 Mar 2026 11:14:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:f8:ca:1a:2e:34:04:40:65:ec:ee:37:04:36:f8:2c:b3:49:ee:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA3B5DBF298ABAA4F809A6FD7352BEF91FC78585 Validity Not Before: Mar 2 09:33:27 2026 GMT Not After : Mar 3 13:28:27 2026 GMT Subject: CN=DEAABCF25041C1ACA02A293D42BA26EB69D6A239 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:7d:9d:2d:e0:26:1b:05:ce:29:8f:3f:95:4c: 39:71:ba:2d:18:fa:ee:03:66:92:08:64:cb:9c:e1: 9d:c9:23:0b:9b:d7:f0:6f:2a:77:98:72:1e:3b:6d: c8:67:6e:4d:17:67:86:3c:ee:24:7b:7b:bb:25:a7: 13:0e:23:1b:d2:7f:a8:0b:4e:f6:d3:79:4d:6c:be: 87:28:e1:f4:25:98:39:79:27:4b:22:4c:7d:b1:b9: e4:9f:44:1d:3f:62:f3:3f:5d:e6:fb:86:81:22:7a: 29:78:b3:d8:d9:79:b3:76:80:29:06:24:20:b0:19: 99:6d:82:c8:99:e3:c0:ee:b0:fc:b8:dc:d0:d2:78: 42:f0:6b:5a:f3:1e:3b:95:4a:1c:9e:2d:18:3c:34: f6:5f:c4:5c:e9:22:b7:86:2b:0d:6b:c6:34:28:5f: b0:98:32:d9:e7:67:86:af:f7:55:5d:51:96:c3:66: 13:ef:f7:35:c0:51:05:ef:a5:33:7f:66:cd:30:6d: d9:1f:9f:73:64:e4:aa:c1:81:67:89:33:1c:72:fa: b7:9b:55:35:f1:ac:57:bc:4e:cb:07:e1:ba:42:ad: e3:3e:04:a4:c4:92:ba:de:39:fe:72:a5:d3:4f:ff: 81:e3:8d:61:1f:a4:70:00:cb:96:51:c8:1f:ae:ea: 40:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:AA:BC:F2:50:41:C1:AC:A0:2A:29:3D:42:BA:26:EB:69:D6:A2:39 X509v3 Authority Key Identifier: keyid:AA:3B:5D:BF:29:8A:BA:A4:F8:09:A6:FD:73:52:BE:F9:1F:C7:85:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/D1MhRwpZ6QeoFtx6ZrsCsUR3hhi4K8vViDLrtVFneEtJ/0/AA3B5DBF298ABAA4F809A6FD7352BEF91FC78585.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA3B5DBF298ABAA4F809A6FD7352BEF91FC78585.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/D1MhRwpZ6QeoFtx6ZrsCsUR3hhi4K8vViDLrtVFneEtJ/0/AA3B5DBF298ABAA4F809A6FD7352BEF91FC78585.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:a8:6b:b1:97:cb:08:f3:3f:cd:44:eb:24:93:93:84:c3:40: 64:0d:19:2f:ca:b2:14:bb:2d:a1:a6:12:e2:a9:e1:7d:fb:55: 46:ce:e0:34:07:07:17:46:7a:31:72:b5:21:23:b3:f6:39:40: b3:f0:af:d0:a8:45:e9:e6:bb:57:4d:fa:a9:79:f3:d3:f5:db: a9:2a:1a:17:a5:cd:59:33:45:95:84:bb:f4:32:01:8c:bb:b4: 57:32:66:67:6c:c1:61:36:41:99:ba:7c:cb:d0:90:87:38:0c: 9e:6a:8c:aa:66:04:99:f8:c4:b9:64:12:2e:31:70:28:45:a1: 5c:30:6d:4b:f0:67:4d:0c:f8:a8:93:a5:90:b8:1a:e0:74:c7: f8:88:b6:06:76:04:01:dc:e2:0a:af:ee:c9:a4:0b:31:f9:e7: e8:ea:d6:c3:0a:71:be:45:ee:ec:07:4d:3c:20:a1:b0:31:32: 44:ec:6c:62:53:1b:f0:33:04:1e:53:0d:29:f3:59:10:5f:eb: dc:a6:07:01:21:8e:8d:95:d5:f3:4b:ac:57:0e:cd:e5:04:74: 4c:20:32:e0:52:06:35:b4:8d:10:f1:b0:2d:98:68:40:f3:94: 0c:17:30:cc:52:74:c2:2c:cc:bc:5c:18:73:00:07:b0:dd:1c: ac:02:a3:ae -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUQvjKGi40BEBl7O43BDb4LLNJ7gUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUEzQjVEQkYyOThBQkFBNEY4MDlBNkZENzM1MkJFRjkx RkM3ODU4NTAeFw0yNjAzMDIwOTMzMjdaFw0yNjAzMDMxMzI4MjdaMDMxMTAvBgNV BAMTKERFQUFCQ0YyNTA0MUMxQUNBMDJBMjkzRDQyQkEyNkVCNjlENkEyMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1fZ0t4CYbBc4pjz+VTDlxui0Y +u4DZpIIZMuc4Z3JIwub1/BvKneYch47bchnbk0XZ4Y87iR7e7slpxMOIxvSf6gL TvbTeU1svoco4fQlmDl5J0siTH2xueSfRB0/YvM/Xeb7hoEieil4s9jZebN2gCkG JCCwGZltgsiZ48DusPy43NDSeELwa1rzHjuVShyeLRg8NPZfxFzpIreGKw1rxjQo X7CYMtnnZ4av91VdUZbDZhPv9zXAUQXvpTN/Zs0wbdkfn3Nk5KrBgWeJMxxy+reb VTXxrFe8TssH4bpCreM+BKTEkrreOf5ypdNP/4HjjWEfpHAAy5ZRyB+u6kC7AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU3qq88lBBwaygKik9Qrom62nWojkwHwYDVR0j BBgwFoAUqjtdvymKuqT4Cab9c1K++R/HhYUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRDFNaFJ3cFo2UWVvRnR4Nlpyc0NzVVIzaGhpNEs4dlZpRExydFZGbmVF dEovMC9BQTNCNURCRjI5OEFCQUE0RjgwOUE2RkQ3MzUyQkVGOTFGQzc4NTg1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FBM0I1REJGMjk4QUJBQTRG ODA5QTZGRDczNTJCRUY5MUZDNzg1ODUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RDFNaFJ3cFo2UWVvRnR4Nlpyc0NzVVIzaGhpNEs4dlZpRExydFZGbmVFdEovMC9B QTNCNURCRjI5OEFCQUE0RjgwOUE2RkQ3MzUyQkVGOTFGQzc4NTg1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnKhrsZfLCPM/zUTrJJOThMNAZA0ZL8qyFLstoaYS4qnhfftVRs7gNAcHF0Z6 MXK1ISOz9jlAs/Cv0KhF6ea7V036qXnz0/XbqSoaF6XNWTNFlYS79DIBjLu0VzJm Z2zBYTZBmbp8y9CQhzgMnmqMqmYEmfjEuWQSLjFwKEWhXDBtS/BnTQz4qJOlkLga 4HTH+Ii2BnYEAdziCq/uyaQLMfnn6OrWwwpxvkXu7AdNPCChsDEyROxsYlMb8DME HlMNKfNZEF/r3KYHASGOjZXV80usVw7N5QR0TCAy4FIGNbSNEPGwLZhoQPOUDBcw zFJ0wizMvFwYcwAHsN0crAKjrg== -----END CERTIFICATE-----Generated at Mon Mar 2 13:37:38 2026 by rpki-client