$ rpki-client -vvf rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/CA2ED340034D0368230850867C30E245990118A2.mft File: CA2ED340034D0368230850867C30E245990118A2.mft (raw, json) Hash identifier: bXmFzo7ihgcOROwBziT3Mr7fFwDe8ols1Z7LEqQp1S4= Subject key identifier: 04:ED:BA:77:60:C1:0F:A5:44:A6:CA:DE:33:64:82:F3:48:34:56:A1 Authority key identifier: CA:2E:D3:40:03:4D:03:68:23:08:50:86:7C:30:E2:45:99:01:18:A2 Certificate issuer: /CN=CA2ED340034D0368230850867C30E245990118A2 Certificate serial: 39083579A0FA568CA90D339DDC3FED99B53B0DD3 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA2ED340034D0368230850867C30E245990118A2.cer Subject info access: rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/CA2ED340034D0368230850867C30E245990118A2.mft Manifest number: 0421 Signing time: Sun 01 Mar 2026 07:40:00 +0000 Manifest this update: Sun 01 Mar 2026 07:35:00 +0000 Manifest next update: Mon 02 Mar 2026 07:40:00 +0000 Files and hashes: 1: CA2ED340034D0368230850867C30E245990118A2.crl (hash: B8ze5iBy6mFxOKCwpAqr7XyDQIgvF9q8Tx0hwWAP06I=) 2: 3136302e3233382e3136332e302f32342d3234203d3e20323636353335.roa (hash: DqP5mf5U6YxJGBly2hzV6Uavn9AYJNW8SE/1OzFbx28=) 3: 323830343a336438303a383030303a3a2f33332d3333203d3e20323636353335.roa (hash: h97iUgEEBkr3O+lUMEj/QD+0mK6bNS7G42zz0AhsaHM=) 4: 3136302e3233382e3136302e302f32342d3234203d3e20323636353335.roa (hash: TxlG0812plpjPhvcX/d0Olltq3zIPufdkiSuAoXprqk=) 5: 323830343a336438303a3a2f33322d3332203d3e20323636353335.roa (hash: qACtYGAGjQIYzRF9TbvLGtYIE8yVLT/zZZ6QQjlw7Tc=) 6: 323830343a336438303a3a2f33332d3333203d3e20323636353335.roa (hash: z9igj7MGsmtf/1Sy9zcE0T7tcBaO8/e+SL2nDBel2m8=) 7: 3136302e3233382e3136302e302f32322d3232203d3e20323636353335.roa (hash: wHbI+HZw0d0+VVKI2O6UiIL7xxlmxDe0dzs6WnffOtM=) 8: 3136302e3233382e3136302e302f32332d3233203d3e20323636353335.roa (hash: mnXKGK0Sb3JfSD9qwtiqL+zB6Uxf7pRYFU72tIF3RgE=) 9: 3136302e3233382e3136322e302f32342d3234203d3e20323636353335.roa (hash: Mpe5/idJmRp1cNXJYCyARrtABVfhbdPKne04ORvkzmY=) 10: 3136302e3233382e3136312e302f32342d3234203d3e20323636353335.roa (hash: bECPbuRuBrIOnjdoBKScCAXjGsCP8o1jcCme3zamF0s=) 11: 323830343a336438303a3a2f33342d3334203d3e20323636353335.roa (hash: Ya6TTh4UGpO9OA9I2t2ljb687rAyfDeWzm8gruldMvY=) 12: 3136302e3233382e3136322e302f32332d3233203d3e20323636353335.roa (hash: ZciEocyNThB8Dt9USSnp55XhUpsQwG4rnTD6Z4ERIeo=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/CA2ED340034D0368230850867C30E245990118A2.crl rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/CA2ED340034D0368230850867C30E245990118A2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA2ED340034D0368230850867C30E245990118A2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 02 Mar 2026 07:40:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:08:35:79:a0:fa:56:8c:a9:0d:33:9d:dc:3f:ed:99:b5:3b:0d:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA2ED340034D0368230850867C30E245990118A2 Validity Not Before: Mar 1 07:35:00 2026 GMT Not After : Mar 2 07:40:00 2026 GMT Subject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ubject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:20:e4:48:5f:4d:f3:09:f6:9f:cf:47:07:af: ae:dd:1e:19:fb:c8:10:07:bf:7c:b3:29:6a:14:aa: 34:e3:0e:fd:dd:d6:42:9c:c9:3c:ea:0a:76:28:bc: ce:ab:0b:a9:8e:61:96:b4:7e:17:8f:10:3a:13:a6: db:f2:60:93:e2:02:84:66:1e:59:7f:63:91:c1:1e: e6:3c:15:7c:e6:aa:73:02:91:21:da:7c:b6:63:49: eb:99:33:8a:64:49:ea:dd:24:4a:f2:72:af:64:fa: 71:4e:16:27:64:35:ec:06:6e:31:f6:50:eb:c3:42: 75:e3:cb:a7:a3:9e:58:bf:4d:6e:a6:26:b8:91:55: f8:a9:6f:56:1a:2c:a0:e5:72:87:0f:19:d2:61:57: 6f:3f:44:0c:cd:3e:d9:ef:ec:02:12:33:67:03:f0: 30:33:3f:34:72:4f:72:68:aa:4e:7a:f9:36:d1:1d: f6:b4:c9:16:bc:82:45:82:c4:04:80:95:21:2c:d1: 68:bf:e3:97:87:1b:a5:99:d2:e3:42:86:dd:f1:b3: 86:2b:e7:c5:cf:75:b1:7a:31:4a:cf:20:f1:d0:7f: 37:bf:c6:72:a1:ac:d2:70:a1:80:a7:3d:38:15:68: 2d:ea:1a:2e:ab:f0:d5:a1:a0:23:db:cb:25:09:7e: 98:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:ED:BA:77:60:C1:0F:A5:44:A6:CA:DE:33:64:82:F3:48:34:56:A1 X509v3 Authority Key Identifier: keyid:CA:2E:D3:40:03:4D:03:68:23:08:50:86:7C:30:E2:45:99:01:18:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/CA2ED340034D0368230850867C30E245990118A2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA2ED340034D0368230850867C30E245990118A2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/CA2ED340034D0368230850867C30E245990118A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:7c:cd:e8:3d:27:d1:44:3f:47:0c:c9:a4:8e:23:64:e2:b5: d3:ce:e9:4e:f2:e7:41:24:6a:da:1e:ba:4b:a0:08:2e:ce:10: c6:63:5d:cb:3d:9d:29:f5:07:35:3b:6a:eb:1b:b5:5f:63:c0: 2f:9f:5e:8b:8b:24:48:ee:e5:11:c5:3f:30:48:4b:a8:56:45: 8d:87:2b:de:e9:2b:34:28:7e:14:77:58:71:c5:28:55:d6:b0: ae:c1:89:55:3e:4f:0e:ee:f7:a6:e9:f8:de:a2:6d:f8:6c:93: 34:58:57:1b:6a:42:f6:ec:66:79:0c:d6:97:04:9c:9e:c3:27: 44:dc:10:9d:86:13:34:2a:e1:bf:63:50:48:3a:85:43:ed:a5: 73:a0:89:48:96:51:f0:53:8e:2b:09:f5:f6:b7:ad:67:80:19: 40:d4:9f:1b:ea:8b:cf:97:47:5b:a4:d9:d3:d5:0e:f4:7d:0f: c2:55:c1:14:41:0a:4d:40:6f:6e:4b:9d:1a:a4:f2:b7:0d:9f: 80:17:be:e9:b3:1e:c8:c2:12:29:3a:80:75:6f:f9:d0:85:3a: 6b:9e:01:d5:7f:45:cc:9a:e5:e4:5c:b1:a5:41:ad:21:53:39: 34:e9:fa:a6:be:15:57:ff:43:93:13:0c:9c:43:c7:5d:11:a0: 39:c1:24:90 -----BEGIN CERTIFICATE----- MIIHSzCCBjOgAwIBAgIUOQg1eaD6VoypDTOd3D/tmbU7DdMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0EyRUQzNDAwMzREMDM2ODIzMDg1MDg2N0MzMEUyNDU5 OTAxMThBMjAeFw0yNjAzMDEwNzM1MDBaFw0yNjAzMDIwNzQwMDBaMIICLTGCAikw ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzQyMEU0NDg1RjRERjMwOUY2 OUZDRjQ3MDdBRkFFREQxRTE5RkJDODEwMDdCRjdDQjMyOTZBMTRBQTM0RTMwRUZE RERENjQyOUNDOTNDRUEwQTc2MjhCQ0NFQUIwQkE5OEU2MTk2QjQ3RTE3OEYxMDNB MTNBNkRCRjI2MDkzRTIwMjg0NjYxRTU5N0Y2MzkxQzExRUU2M0MxNTdDRTZBQTcz MDI5MTIxREE3Q0I2NjM0OUVCOTkzMzhBNjQ0OUVBREQyNDRBRjI3MkFGNjRGQTcx NEUxNjI3NjQzNUVDMDY2RTMxRjY1MEVCQzM0Mjc1RTNDQkE3QTM5RTU4QkY0RDZF QTYyNkI4OTE1NUY4QTk2RjU2MUEyQ0EwRTU3Mjg3MEYxOUQyNjE1NzZGM0Y0NDBD Q0QzRUQ5RUZFQzAyMTIzMzY3MDNGMDMwMzMzRjM0NzI0RjcyNjhBQTRFN0FGOTM2 RDExREY2QjRDOTE2QkM4MjQ1ODJDNDA0ODA5NTIxMkNEMTY4QkZFMzk3ODcxQkE1 OTlEMkUzNDI4NkRERjFCMzg2MkJFN0M1Q0Y3NUIxN0EzMTRBQ0YyMEYxRDA3RjM3 QkZDNjcyQTFBQ0QyNzBBMTgwQTczRDM4MTU2ODJERUExQTJFQUJGMEQ1QTFBMDIz REJDQjI1MDk3RTk4MDUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A MIIBCgKCAQEAxCDkSF9N8wn2n89HB6+u3R4Z+8gQB798sylqFKo04w793dZCnMk8 6gp2KLzOqwupjmGWtH4XjxA6E6bb8mCT4gKEZh5Zf2ORwR7mPBV85qpzApEh2ny2 Y0nrmTOKZEnq3SRK8nKvZPpxThYnZDXsBm4x9lDrw0J148uno55Yv01upia4kVX4 qW9WGiyg5XKHDxnSYVdvP0QMzT7Z7+wCEjNnA/AwMz80ck9yaKpOevk20R32tMkW vIJFgsQEgJUhLNFov+OXhxulmdLjQobd8bOGK+fFz3WxejFKzyDx0H83v8ZyoazS cKGApz04FWgt6houq/DVoaAj28slCX6YBQIDAQABo4ICWTCCAlUwHQYDVR0OBBYE FATtundgwQ+lRKbK3jNkgvNINFahMB8GA1UdIwQYMBaAFMou00ADTQNoIwhQhnww 4kWZARiiMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0VSbXpFdnpidTFlTWk4 RXZIVEhXaWtrQXhQQVQ4SlpBamNvY2MyZExqUkx5LzEvQ0EyRUQzNDAwMzREMDM2 ODIzMDg1MDg2N0MzMEUyNDU5OTAxMThBMi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p Y2JyX3JlcG8vMS9DQTJFRDM0MDAzNEQwMzY4MjMwODUwODY3QzMwRTI0NTk5MDEx OEEyLmNlcjCBnQYIKwYBBQUHAQsEgZAwgY0wgYoGCCsGAQUFBzALhn5yc3luYzov L3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0VSbXpFdnpidTFlTWk4RXZIVEhX aWtrQXhQQVQ4SlpBamNvY2MyZExqUkx5LzEvQ0EyRUQzNDAwMzREMDM2ODIzMDg1 MDg2N0MzMEUyNDU5OTAxMThBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAHd8zeg9J9FEP0cMyaSOI2Ti tdPO6U7y50EkatoeukugCC7OEMZjXcs9nSn1BzU7ausbtV9jwC+fXouLJEju5RHF PzBIS6hWRY2HK97pKzQofhR3WHHFKFXWsK7BiVU+Tw7u96bp+N6ibfhskzRYVxtq QvbsZnkM1pcEnJ7DJ0TcEJ2GEzQq4b9jUEg6hUPtpXOgiUiWUfBTjisJ9fa3rWeA GUDUnxvqi8+XR1uk2dPVDvR9D8JVwRRBCk1Ab25LnRqk8rcNn4AXvumzHsjCEik6 gHVv+dCFOmueAdV/Rcya5eRcsaVBrSFTOTTp+qa+FVf/Q5MTDJxDx10RoDnBJJA= -----END CERTIFICATE-----Generated at Sun Mar 1 21:14:41 2026 by rpki-client