$ rpki-client -vvf rpki-repo.registro.br/repo/DYd2iJ9nU2thSVQogpCZ6fJadagDjG9Acs9YtW8cNAPX/0/A1E6749C09E9E32D11C15678D45C1B936D525291.mft File: A1E6749C09E9E32D11C15678D45C1B936D525291.mft (raw, json) Hash identifier: LNsKAnvn+M1U7AVR11TMgfQgV3ibu2FmVCfm+2IhIK4= Subject key identifier: D0:FA:E8:18:C5:23:FA:86:D2:43:30:3F:E7:B7:8C:46:4D:C3:E9:42 Authority key identifier: A1:E6:74:9C:09:E9:E3:2D:11:C1:56:78:D4:5C:1B:93:6D:52:52:91 Certificate issuer: /CN=A1E6749C09E9E32D11C15678D45C1B936D525291 Certificate serial: 5EBA98F5C21E9F1810F73D602327D0F7D4F899CD Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1E6749C09E9E32D11C15678D45C1B936D525291.cer Subject info access: rsync://rpki-repo.registro.br/repo/DYd2iJ9nU2thSVQogpCZ6fJadagDjG9Acs9YtW8cNAPX/0/A1E6749C09E9E32D11C15678D45C1B936D525291.mft Manifest number: 037A Signing time: Mon 02 Mar 2026 08:07:46 +0000 Manifest this update: Mon 02 Mar 2026 08:02:46 +0000 Manifest next update: Tue 03 Mar 2026 11:04:46 +0000 Files and hashes: 1: A1E6749C09E9E32D11C15678D45C1B936D525291.crl (hash: MH8Jxg/RTU3YgzBczBWm9eHi9pcJgwfxPmc3dggoHFI=) 2: 323830343a313763343a3a2f33322d3438203d3e20323633323530.roa (hash: CYHN9rK1skgLKugPUzgZGszwHwGA3WFLBGl49tYzvoY=) 3: 3137372e3233342e3136302e302f31392d3234203d3e20323633323530.roa (hash: wlPnqD7qa81i/u0GABiCUaJGTeP2DvD2cJaBWTo4WcI=) 4: 34352e3138302e3235322e302f32322d3234203d3e20323633323530.roa (hash: ORMMmfGrpHZXNdiWY4NkF0L84UkSb+i4s3EBcHiCyW8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DYd2iJ9nU2thSVQogpCZ6fJadagDjG9Acs9YtW8cNAPX/0/A1E6749C09E9E32D11C15678D45C1B936D525291.crl rsync://rpki-repo.registro.br/repo/DYd2iJ9nU2thSVQogpCZ6fJadagDjG9Acs9YtW8cNAPX/0/A1E6749C09E9E32D11C15678D45C1B936D525291.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1E6749C09E9E32D11C15678D45C1B936D525291.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 03 Mar 2026 11:04:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:ba:98:f5:c2:1e:9f:18:10:f7:3d:60:23:27:d0:f7:d4:f8:99:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A1E6749C09E9E32D11C15678D45C1B936D525291 Validity Not Before: Mar 2 08:02:46 2026 GMT Not After : Mar 3 11:04:46 2026 GMT Subject: CN=D0FAE818C523FA86D243303FE7B78C464DC3E942 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:85:28:4e:97:2b:23:25:74:55:b1:d6:bb:a9: fe:14:7a:02:ef:ea:45:7c:ba:8b:e5:bb:df:29:5e: 25:00:a2:f3:ef:6f:ab:c1:d8:7a:d1:ca:8f:4f:64: 67:bc:1f:3d:fa:88:02:0e:a7:d8:0c:41:cd:74:29: 86:aa:25:82:e1:c5:75:d7:24:7c:10:6b:ff:1d:07: 9d:40:ac:c8:65:f9:2a:6c:dd:d2:ed:c4:cc:5d:47: 47:a2:52:eb:94:c4:fb:52:1e:ce:1f:f0:04:cd:9f: a1:5e:c8:f5:6d:bc:55:7c:51:91:2a:93:4d:b7:4f: b7:31:fa:ee:25:ac:43:99:8b:9b:25:9c:db:32:18: 2e:df:85:c9:4c:84:69:ce:63:33:eb:37:91:f4:23: 2c:6d:c3:c9:8f:ec:3b:e4:76:14:6a:1a:c5:49:6a: b7:25:24:a0:af:e2:a3:ed:03:4c:42:c7:4c:6b:12: 01:95:8f:af:89:93:a2:81:6f:0d:b2:a0:4c:2a:ff: 7f:ab:09:23:6b:b8:72:1d:76:45:6f:8f:2b:63:95: 6e:ab:47:41:28:8c:68:3a:2c:e7:f9:78:9f:77:88: 9f:42:96:70:5f:8b:da:60:e7:57:b5:30:1e:eb:fe: 37:f0:83:48:79:b4:b5:5d:a6:ec:27:c7:e2:7a:0a: 86:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:FA:E8:18:C5:23:FA:86:D2:43:30:3F:E7:B7:8C:46:4D:C3:E9:42 X509v3 Authority Key Identifier: keyid:A1:E6:74:9C:09:E9:E3:2D:11:C1:56:78:D4:5C:1B:93:6D:52:52:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DYd2iJ9nU2thSVQogpCZ6fJadagDjG9Acs9YtW8cNAPX/0/A1E6749C09E9E32D11C15678D45C1B936D525291.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1E6749C09E9E32D11C15678D45C1B936D525291.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DYd2iJ9nU2thSVQogpCZ6fJadagDjG9Acs9YtW8cNAPX/0/A1E6749C09E9E32D11C15678D45C1B936D525291.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:b8:4e:14:83:1b:f3:ad:ca:19:d5:1a:33:23:70:f8:d9:2f: 2b:13:ff:76:7b:49:cb:55:e4:4e:e3:9b:d7:a7:26:34:81:55: 18:e5:1a:dc:ba:35:20:ca:32:b8:61:0c:1f:76:60:0a:ee:43: ce:37:ee:77:38:e0:6d:94:9f:5e:45:a7:70:95:16:ee:cf:e6: 04:a4:10:d5:e5:30:06:b6:ae:e6:74:b4:b0:fa:14:b6:e3:5d: 31:95:08:4a:84:a5:da:51:17:c7:05:78:ec:ee:c0:ae:0d:06: 6c:37:a5:87:2b:be:57:75:90:2e:86:14:c4:e0:b9:be:c2:22: 9b:59:c7:03:86:1e:79:26:19:47:11:03:6e:d7:09:0c:ee:1e: 75:4f:03:93:18:4e:34:7e:a7:ab:76:c4:16:1b:22:18:ab:c9: 06:b8:de:5e:4d:0d:7d:52:f1:8f:3d:ca:a1:35:51:30:69:63: 6c:0f:6b:37:da:ad:80:93:69:93:18:5f:6e:21:d4:84:89:ca: f4:4f:fd:44:d1:e5:b0:64:c2:2c:d3:71:d2:1f:ca:1f:fe:f5: 12:19:56:31:c8:09:52:ae:49:dc:10:df:ef:42:6e:27:2f:29: f0:9a:f1:cd:2b:82:9e:8a:bb:58:c7:3d:af:38:b7:6e:45:82: 32:d6:97:e0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUXrqY9cIenxgQ9z1gIyfQ99T4mc0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTFFNjc0OUMwOUU5RTMyRDExQzE1Njc4RDQ1QzFCOTM2 RDUyNTI5MTAeFw0yNjAzMDIwODAyNDZaFw0yNjAzMDMxMTA0NDZaMDMxMTAvBgNV BAMTKEQwRkFFODE4QzUyM0ZBODZEMjQzMzAzRkU3Qjc4QzQ2NERDM0U5NDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbhShOlysjJXRVsda7qf4UegLv 6kV8uovlu98pXiUAovPvb6vB2HrRyo9PZGe8Hz36iAIOp9gMQc10KYaqJYLhxXXX JHwQa/8dB51ArMhl+Sps3dLtxMxdR0eiUuuUxPtSHs4f8ATNn6FeyPVtvFV8UZEq k023T7cx+u4lrEOZi5slnNsyGC7fhclMhGnOYzPrN5H0Iyxtw8mP7DvkdhRqGsVJ arclJKCv4qPtA0xCx0xrEgGVj6+Jk6KBbw2yoEwq/3+rCSNruHIddkVvjytjlW6r R0EojGg6LOf5eJ93iJ9ClnBfi9pg51e1MB7r/jfwg0h5tLVdpuwnx+J6CobPAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU0ProGMUj+obSQzA/57eMRk3D6UIwHwYDVR0j BBgwFoAUoeZ0nAnp4y0RwVZ41Fwbk21SUpEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRFlkMmlKOW5VMnRoU1ZRb2dwQ1o2ZkphZGFnRGpHOUFjczlZdFc4Y05B UFgvMC9BMUU2NzQ5QzA5RTlFMzJEMTFDMTU2NzhENDVDMUI5MzZENTI1MjkxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ExRTY3NDlDMDlFOUUzMkQx MUMxNTY3OEQ0NUMxQjkzNkQ1MjUyOTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RFlkMmlKOW5VMnRoU1ZRb2dwQ1o2ZkphZGFnRGpHOUFjczlZdFc4Y05BUFgvMC9B MUU2NzQ5QzA5RTlFMzJEMTFDMTU2NzhENDVDMUI5MzZENTI1MjkxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEADLhOFIMb863KGdUaMyNw+NkvKxP/dntJy1XkTuOb16cmNIFVGOUa3Lo1IMoy uGEMH3ZgCu5DzjfudzjgbZSfXkWncJUW7s/mBKQQ1eUwBrau5nS0sPoUtuNdMZUI SoSl2lEXxwV47O7Arg0GbDelhyu+V3WQLoYUxOC5vsIim1nHA4YeeSYZRxEDbtcJ DO4edU8DkxhONH6nq3bEFhsiGKvJBrjeXk0NfVLxjz3KoTVRMGljbA9rN9qtgJNp kxhfbiHUhInK9E/9RNHlsGTCLNNx0h/KH/71EhlWMcgJUq5J3BDf70JuJy8p8Jrx zSuCnoq7WMc9rzi3bkWCMtaX4A== -----END CERTIFICATE-----Generated at Mon Mar 2 21:59:39 2026 by rpki-client