$ rpki-client -vvf rpki-repo.registro.br/repo/DYy4aJMPvzackkLHg4k9oHHHZ7gjnErkQPJUasvp6anN/1/8AD497903AB3566443C9C794694A61EFE427FA7A.mft File: 8AD497903AB3566443C9C794694A61EFE427FA7A.mft (raw, json) Hash identifier: 7M2zjUH1fbs7Q9X+dOkJmyme58ITnkUcmbAjIBKMCgc= Subject key identifier: 72:64:1C:D8:70:17:64:7E:B4:A5:78:FB:12:6E:9C:87:1E:87:F9:36 Authority key identifier: 8A:D4:97:90:3A:B3:56:64:43:C9:C7:94:69:4A:61:EF:E4:27:FA:7A Certificate issuer: /CN=8AD497903AB3566443C9C794694A61EFE427FA7A Certificate serial: 3354E892863424EBBF36326A2CD905FFEABDC1E7 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AD497903AB3566443C9C794694A61EFE427FA7A.cer Subject info access: rsync://rpki-repo.registro.br/repo/DYy4aJMPvzackkLHg4k9oHHHZ7gjnErkQPJUasvp6anN/1/8AD497903AB3566443C9C794694A61EFE427FA7A.mft Manifest number: 03A7 Signing time: Mon 02 Mar 2026 22:31:31 +0000 Manifest this update: Mon 02 Mar 2026 22:26:31 +0000 Manifest next update: Tue 03 Mar 2026 22:50:31 +0000 Files and hashes: 1: 323830343a383630343a3a2f33322d3332203d3e20323732363134.roa (hash: vZGx2lypgvST/TN3BIHEMwmdhDBKDrZm/OU2px4pQ/U=) 2: 8AD497903AB3566443C9C794694A61EFE427FA7A.crl (hash: 5nEYLT2capajAyvaT1ww+F2mQ28DKQQxG5Ke+HfBCdg=) 3: 323830343a383630343a3a2f33332d3333203d3e20323732363134.roa (hash: xAJr0E9r4TKMxFOmg5cmoGsA01fiIOH+qeMsQLuKev4=) 4: 323830343a383630343a383030303a3a2f33332d3333203d3e20323732363134.roa (hash: udfpslgXWllHlVhUhwYULsf1Bac3lsTLTBZvpUx96iA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DYy4aJMPvzackkLHg4k9oHHHZ7gjnErkQPJUasvp6anN/1/8AD497903AB3566443C9C794694A61EFE427FA7A.crl rsync://rpki-repo.registro.br/repo/DYy4aJMPvzackkLHg4k9oHHHZ7gjnErkQPJUasvp6anN/1/8AD497903AB3566443C9C794694A61EFE427FA7A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AD497903AB3566443C9C794694A61EFE427FA7A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 03 Mar 2026 22:50:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:54:e8:92:86:34:24:eb:bf:36:32:6a:2c:d9:05:ff:ea:bd:c1:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AD497903AB3566443C9C794694A61EFE427FA7A Validity Not Before: Mar 2 22:26:31 2026 GMT Not After : Mar 3 22:50:31 2026 GMT Subject: CN=72641CD87017647EB4A578FB126E9C871E87F936 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:64:d9:0e:62:0e:f0:f0:d6:63:52:dd:21:b8: ff:45:01:7f:33:d0:44:18:65:d0:10:0b:14:5d:ae: 31:2b:4a:fd:2a:d7:82:6d:d6:b9:c7:d0:0a:8a:26: cd:b7:f4:48:9b:b1:dc:13:ae:8e:ff:6c:98:30:13: 57:8f:7d:f2:b1:8b:aa:fe:db:73:07:2c:81:be:d2: fd:0a:1d:79:a8:81:a0:47:ad:c9:20:34:4d:86:fa: 4d:ee:32:2e:6d:89:90:50:fb:48:7c:b3:7f:ec:62: 92:d3:0f:4b:23:a0:37:1b:cd:9a:04:b2:fa:30:dd: 17:d4:f7:50:db:48:77:f5:52:5b:43:a1:4a:d2:ab: bf:e8:e1:73:e6:f2:92:7a:a2:30:64:47:0a:14:2f: ba:62:ad:5b:3b:4b:fb:db:05:d0:08:11:b4:81:34: a3:c0:79:0b:fb:ef:19:52:e3:40:a8:e1:65:81:a2: 45:41:7d:8b:33:3c:02:6c:b5:a0:36:bb:e8:99:45: b5:29:d1:de:70:40:e4:5a:6d:31:de:e4:1f:2d:f9: e8:d0:a6:39:81:50:32:de:46:14:5d:af:f2:6b:31: e6:f0:0d:26:dc:9f:26:f1:52:55:d0:37:c2:b4:5f: 89:f1:31:90:01:c4:23:67:b7:da:7e:b9:a3:84:8a: 77:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:64:1C:D8:70:17:64:7E:B4:A5:78:FB:12:6E:9C:87:1E:87:F9:36 X509v3 Authority Key Identifier: keyid:8A:D4:97:90:3A:B3:56:64:43:C9:C7:94:69:4A:61:EF:E4:27:FA:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DYy4aJMPvzackkLHg4k9oHHHZ7gjnErkQPJUasvp6anN/1/8AD497903AB3566443C9C794694A61EFE427FA7A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AD497903AB3566443C9C794694A61EFE427FA7A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DYy4aJMPvzackkLHg4k9oHHHZ7gjnErkQPJUasvp6anN/1/8AD497903AB3566443C9C794694A61EFE427FA7A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:fe:7a:ae:e7:15:aa:18:6e:a1:17:68:42:24:bb:d5:8c:d2: c5:2a:e9:c3:7d:75:43:fb:00:0a:8b:e7:d9:9a:12:f4:b3:dd: cc:04:16:d9:b5:0f:01:62:8c:ef:36:92:57:3b:02:e2:95:39: e1:c6:cc:ab:fd:44:00:02:20:cf:31:f3:02:b4:f9:57:af:ed: 58:c5:b0:aa:1c:6f:a2:bc:57:02:c2:7e:08:38:d7:60:9a:c8: 46:81:c4:9a:17:3f:41:14:01:c7:0a:37:ff:1b:7d:89:2a:30: ef:53:5f:51:18:fc:e3:73:1e:d7:d9:3d:27:78:1f:11:be:38: cf:ce:8b:00:90:c6:7e:15:3c:e3:e5:3b:ed:31:a8:23:87:6c: c1:d6:73:c5:8e:ed:98:ff:01:7c:dc:22:f6:c4:19:de:10:c0: 94:cf:cd:b2:ad:84:7d:e1:6b:36:cc:57:e5:f0:a8:39:07:44: 70:ad:b8:b2:64:73:1e:e9:f2:5b:55:7a:b7:09:72:f7:ca:99: c4:ae:e1:1a:84:20:4c:f8:25:9b:66:41:7a:ad:2c:28:23:25: 90:48:c6:13:c7:21:92:30:5d:63:62:60:25:f2:4a:77:4b:9a: fc:6c:e6:99:5c:47:a0:e3:a0:a0:7f:27:ac:ec:f3:ab:42:3d: fb:48:2d:8b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUM1TokoY0JOu/NjJqLNkF/+q9wecwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEFENDk3OTAzQUIzNTY2NDQzQzlDNzk0Njk0QTYxRUZF NDI3RkE3QTAeFw0yNjAzMDIyMjI2MzFaFw0yNjAzMDMyMjUwMzFaMDMxMTAvBgNV BAMTKDcyNjQxQ0Q4NzAxNzY0N0VCNEE1NzhGQjEyNkU5Qzg3MUU4N0Y5MzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJZNkOYg7w8NZjUt0huP9FAX8z 0EQYZdAQCxRdrjErSv0q14Jt1rnH0AqKJs239EibsdwTro7/bJgwE1ePffKxi6r+ 23MHLIG+0v0KHXmogaBHrckgNE2G+k3uMi5tiZBQ+0h8s3/sYpLTD0sjoDcbzZoE svow3RfU91DbSHf1UltDoUrSq7/o4XPm8pJ6ojBkRwoUL7pirVs7S/vbBdAIEbSB NKPAeQv77xlS40Co4WWBokVBfYszPAJstaA2u+iZRbUp0d5wQORabTHe5B8t+ejQ pjmBUDLeRhRdr/JrMebwDSbcnybxUlXQN8K0X4nxMZABxCNnt9p+uaOEincnAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUcmQc2HAXZH60pXj7Em6chx6H+TYwHwYDVR0j BBgwFoAUitSXkDqzVmRDyceUaUph7+Qn+nowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRFl5NGFKTVB2emFja2tMSGc0azlvSEhIWjdnam5FcmtRUEpVYXN2cDZh bk4vMS84QUQ0OTc5MDNBQjM1NjY0NDNDOUM3OTQ2OTRBNjFFRkU0MjdGQTdBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhBRDQ5NzkwM0FCMzU2NjQ0 M0M5Qzc5NDY5NEE2MUVGRTQyN0ZBN0EuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RFl5NGFKTVB2emFja2tMSGc0azlvSEhIWjdnam5FcmtRUEpVYXN2cDZhbk4vMS84 QUQ0OTc5MDNBQjM1NjY0NDNDOUM3OTQ2OTRBNjFFRkU0MjdGQTdBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAM/56rucVqhhuoRdoQiS71YzSxSrpw311Q/sACovn2ZoS9LPdzAQW2bUPAWKM 7zaSVzsC4pU54cbMq/1EAAIgzzHzArT5V6/tWMWwqhxvorxXAsJ+CDjXYJrIRoHE mhc/QRQBxwo3/xt9iSow71NfURj843Me19k9J3gfEb44z86LAJDGfhU84+U77TGo I4dswdZzxY7tmP8BfNwi9sQZ3hDAlM/Nsq2EfeFrNsxX5fCoOQdEcK24smRzHuny W1V6twly98qZxK7hGoQgTPglm2ZBeq0sKCMlkEjGE8chkjBdY2JgJfJKd0ua/Gzm mVxHoOOgoH8nrOzzq0I9+0gtiw== -----END CERTIFICATE-----Generated at Tue Mar 3 04:29:35 2026 by rpki-client