$ rpki-client -vvf rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.mft File: 89F33609E2B118C8ED9A105548D2D01FD6E38729.mft (raw, json) Hash identifier: wTHXCYTJYoNOoOdPeykRe43nf3H0knPBBk0D2kJpDi0= Subject key identifier: D8:5E:42:D0:D6:BF:CD:30:3F:5A:4B:23:73:7A:90:A5:4B:57:59:24 Authority key identifier: 89:F3:36:09:E2:B1:18:C8:ED:9A:10:55:48:D2:D0:1F:D6:E3:87:29 Certificate issuer: /CN=89F33609E2B118C8ED9A105548D2D01FD6E38729 Certificate serial: 454E838C7788F48AF2A55CD79A00A4273D1FFC79 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.cer Subject info access: rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.mft Manifest number: 03A0 Signing time: Mon 02 Mar 2026 10:20:53 +0000 Manifest this update: Mon 02 Mar 2026 10:15:53 +0000 Manifest next update: Tue 03 Mar 2026 11:24:53 +0000 Files and hashes: 1: 3137302e3234342e3231362e302f32322d3234203d3e20323633343936.roa (hash: ew5NkdN8Fi3KObAuy97z4lSLJTedaWh5168q9DGgY3w=) 2: 89F33609E2B118C8ED9A105548D2D01FD6E38729.crl (hash: sRWQqIzBLbf+KE/vW2NU/AEDxiavOHHpovr2ucszlls=) 3: 323830343a313263303a3a2f33322d3438203d3e20323633343936.roa (hash: lQMvzGKTexKr11ZtKxbyzWnk1sR3ocinG38SpRXYKuU=) 4: 3139312e3234332e35362e302f32312d3234203d3e20323633343936.roa (hash: wOOB4o7vIgPKPMxhgj52s0DYqn7UcJh+r6LIBZUHAog=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.crl rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 03 Mar 2026 11:24:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:4e:83:8c:77:88:f4:8a:f2:a5:5c:d7:9a:00:a4:27:3d:1f:fc:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89F33609E2B118C8ED9A105548D2D01FD6E38729 Validity Not Before: Mar 2 10:15:53 2026 GMT Not After : Mar 3 11:24:53 2026 GMT Subject: CN=D85E42D0D6BFCD303F5A4B23737A90A54B575924 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:64:78:c6:0e:85:07:9b:b4:f2:6a:1f:7d:17: 33:a2:6b:b2:ad:30:1a:88:e4:66:d6:cc:1d:7c:c9: 79:38:74:e5:f9:3f:16:d2:c2:0e:d2:77:f9:cc:a5: 5a:ba:c3:b9:e2:eb:cb:b4:6d:b0:0e:86:f9:12:95: 6a:6d:65:57:3a:6c:1c:1a:27:dc:cf:0e:0d:b2:45: 71:09:b4:fc:3a:2d:85:ae:a7:3d:d7:0a:b7:f3:bb: d2:7e:fc:97:78:a7:09:cf:07:ee:39:a6:3d:57:fc: b1:ee:49:a7:38:f8:c3:e3:2d:de:47:39:27:53:1a: ac:0a:c4:cf:c0:a3:02:21:f9:87:0b:6f:a3:65:ef: 02:14:60:70:b2:c7:7e:30:5c:fa:f5:60:fc:ec:d5: fe:67:53:cd:91:00:07:89:cc:56:c3:ae:85:c5:91: b7:34:ee:ae:84:30:22:86:ed:43:f6:3b:1b:b7:95: ea:74:30:0f:1c:30:81:4d:0d:8a:e1:ff:37:0e:cc: 66:b3:c0:7f:42:f4:1e:6a:e3:94:89:37:8a:ab:2b: e2:d8:33:8a:54:bc:37:52:cb:79:68:97:60:c6:48: ab:4b:f4:a1:57:9d:66:a1:98:7d:f9:d6:fb:3f:49: 07:86:05:c0:67:2e:5d:2b:bb:32:dc:cd:3e:d5:8e: e7:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:5E:42:D0:D6:BF:CD:30:3F:5A:4B:23:73:7A:90:A5:4B:57:59:24 X509v3 Authority Key Identifier: keyid:89:F3:36:09:E2:B1:18:C8:ED:9A:10:55:48:D2:D0:1F:D6:E3:87:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:1d:9a:82:32:0a:67:fc:93:e4:13:54:e7:25:2a:ae:1f:c5: b0:5c:1a:a0:2c:d0:d7:87:e1:41:78:da:db:68:80:60:74:06: cc:06:40:8a:c2:61:1f:08:3e:3e:52:eb:08:8c:c3:6c:bc:18: 27:29:d5:38:80:db:cf:36:3d:ce:6a:34:60:52:87:be:5c:f9: 25:eb:1d:6e:97:4f:83:52:ed:57:6c:bd:b1:78:ee:c9:24:79: 8c:39:41:1f:f0:bd:a1:4c:a8:c2:6e:df:ed:9d:d4:7d:f0:09: 08:f8:20:3a:3d:9b:50:b6:07:b9:1f:71:f1:1c:75:8f:0b:45: b7:6f:8c:d1:c3:5e:90:f6:17:ae:34:d2:ef:bc:cc:88:17:65: b5:a7:8d:c4:c1:eb:e9:72:d2:29:3e:3d:75:a4:d2:03:21:f2: 58:7b:21:84:42:f6:2a:9b:92:5f:dc:7b:05:13:38:f8:fd:73: d1:b3:f0:14:81:98:ee:0e:10:ac:c8:de:e3:d0:33:38:26:4f: 9a:47:2e:41:f8:5a:f0:ec:84:52:b4:0e:39:f9:d9:6e:7e:f6: d1:6e:b0:d3:e2:1d:30:29:39:eb:27:b1:c2:5b:78:b5:fe:68: 50:4e:7a:28:e0:88:3b:36:06:c2:b1:ac:b9:78:51:d1:42:5c: b6:0b:7a:f8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIURU6DjHeI9IrypVzXmgCkJz0f/HkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODlGMzM2MDlFMkIxMThDOEVEOUExMDU1NDhEMkQwMUZE NkUzODcyOTAeFw0yNjAzMDIxMDE1NTNaFw0yNjAzMDMxMTI0NTNaMDMxMTAvBgNV BAMTKEQ4NUU0MkQwRDZCRkNEMzAzRjVBNEIyMzczN0E5MEE1NEI1NzU5MjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFZHjGDoUHm7Tyah99FzOia7Kt MBqI5GbWzB18yXk4dOX5PxbSwg7Sd/nMpVq6w7ni68u0bbAOhvkSlWptZVc6bBwa J9zPDg2yRXEJtPw6LYWupz3XCrfzu9J+/Jd4pwnPB+45pj1X/LHuSac4+MPjLd5H OSdTGqwKxM/AowIh+YcLb6Nl7wIUYHCyx34wXPr1YPzs1f5nU82RAAeJzFbDroXF kbc07q6EMCKG7UP2Oxu3lep0MA8cMIFNDYrh/zcOzGazwH9C9B5q45SJN4qrK+LY M4pUvDdSy3lol2DGSKtL9KFXnWahmH351vs/SQeGBcBnLl0ruzLczT7VjucBAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU2F5C0Na/zTA/Wksjc3qQpUtXWSQwHwYDVR0j BBgwFoAUifM2CeKxGMjtmhBVSNLQH9bjhykwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRXBlY2JlcUNKUDVSUWFoaFprejZNWUZoazVRQkNIQUxXSkNLTEw5N1Y4 ekUvMS84OUYzMzYwOUUyQjExOEM4RUQ5QTEwNTU0OEQyRDAxRkQ2RTM4NzI5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg5RjMzNjA5RTJCMTE4QzhF RDlBMTA1NTQ4RDJEMDFGRDZFMzg3MjkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RXBlY2JlcUNKUDVSUWFoaFprejZNWUZoazVRQkNIQUxXSkNLTEw5N1Y4ekUvMS84 OUYzMzYwOUUyQjExOEM4RUQ5QTEwNTU0OEQyRDAxRkQ2RTM4NzI5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjR2agjIKZ/yT5BNU5yUqrh/FsFwaoCzQ14fhQXja22iAYHQGzAZAisJhHwg+ PlLrCIzDbLwYJynVOIDbzzY9zmo0YFKHvlz5JesdbpdPg1LtV2y9sXjuySR5jDlB H/C9oUyowm7f7Z3UffAJCPggOj2bULYHuR9x8Rx1jwtFt2+M0cNekPYXrjTS77zM iBdltaeNxMHr6XLSKT49daTSAyHyWHshhEL2KpuSX9x7BRM4+P1z0bPwFIGY7g4Q rMje49AzOCZPmkcuQfha8OyEUrQOOfnZbn720W6w0+IdMCk56yexwlt4tf5oUE56 KOCIOzYGwrGsuXhR0UJctgt6+A== -----END CERTIFICATE-----Generated at Mon Mar 2 15:57:50 2026 by rpki-client