$ rpki-client -vvf rpki-repo.registro.br/repo/Er2sAPFTxrFBTUh1eQdQPYusZAcpGzsQNVukehPZEEkV/0/430D3B87524CE340FD3E751913764E863F537391.mft File: 430D3B87524CE340FD3E751913764E863F537391.mft (raw, json) Hash identifier: wX8G0Y9MNgVZpL8EnNsnyPVOzBj39rlxp/KC7mcNv+c= Subject key identifier: 1E:40:D5:FB:9B:EC:4F:75:53:C4:10:B6:C5:E7:55:43:02:8F:E2:99 Authority key identifier: 43:0D:3B:87:52:4C:E3:40:FD:3E:75:19:13:76:4E:86:3F:53:73:91 Certificate issuer: /CN=430D3B87524CE340FD3E751913764E863F537391 Certificate serial: 205C3463B31B280D0B5F9439D38EA72A9B0A618D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/430D3B87524CE340FD3E751913764E863F537391.cer Subject info access: rsync://rpki-repo.registro.br/repo/Er2sAPFTxrFBTUh1eQdQPYusZAcpGzsQNVukehPZEEkV/0/430D3B87524CE340FD3E751913764E863F537391.mft Manifest number: 19 Signing time: Mon 02 Mar 2026 01:47:28 +0000 Manifest this update: Mon 02 Mar 2026 01:42:28 +0000 Manifest next update: Tue 03 Mar 2026 01:56:28 +0000 Files and hashes: 1: 34352e3137342e3132382e302f32342d3234203d3e20323638383530.roa (hash: V7zoDtkrYz3vVYs8XQu31fGEZRKvw7a5cMYeEBCILCs=) 2: 430D3B87524CE340FD3E751913764E863F537391.crl (hash: 4mqaGgWKW27nEl5Xd3WQ9r/RBy4gFJwM+4vH9Jt8eys=) 3: 323830313a38303a333534303a3a2f34382d3438203d3e20323638383530.roa (hash: dDjMMZGMmb5KHAwz1Ae9IIUJARCD4KB/EhNV/Ttg55c=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Er2sAPFTxrFBTUh1eQdQPYusZAcpGzsQNVukehPZEEkV/0/430D3B87524CE340FD3E751913764E863F537391.crl rsync://rpki-repo.registro.br/repo/Er2sAPFTxrFBTUh1eQdQPYusZAcpGzsQNVukehPZEEkV/0/430D3B87524CE340FD3E751913764E863F537391.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/430D3B87524CE340FD3E751913764E863F537391.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 03 Mar 2026 01:56:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:5c:34:63:b3:1b:28:0d:0b:5f:94:39:d3:8e:a7:2a:9b:0a:61:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=430D3B87524CE340FD3E751913764E863F537391 Validity Not Before: Mar 2 01:42:28 2026 GMT Not After : Mar 3 01:56:28 2026 GMT Subject: CN=1E40D5FB9BEC4F7553C410B6C5E75543028FE299 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d2:b6:c4:2d:b9:f9:3b:92:f9:d7:ea:9f:5f: 08:2a:4f:7b:19:b8:57:95:31:e9:d8:fd:41:2d:ba: 9b:68:eb:1d:73:62:f6:56:72:fa:58:76:a2:26:76: ad:1a:76:72:71:ee:c4:e6:f7:f1:8c:fc:2e:4d:e4: 9b:c0:93:0e:94:aa:d6:cf:0c:00:bf:63:5e:fb:3e: f0:bf:fc:10:e2:5b:31:43:42:9d:3c:65:57:f1:ff: 9a:4c:58:0c:11:7f:36:30:85:fb:2f:1b:5f:76:33: ef:2a:0b:ed:18:1f:44:06:fc:76:1a:08:f9:e6:e8: 58:76:4c:e5:6b:1c:b0:14:4c:03:1b:1d:d8:a2:1a: fa:32:f2:c6:10:28:f3:3e:a3:84:5a:15:d5:60:f7: dd:7c:93:8d:b3:c8:ec:3c:33:1e:fa:d7:6e:61:bb: b6:ad:7b:bf:c7:1a:ca:a1:a8:76:1b:2a:2a:6d:f2: 0b:80:a7:70:31:d7:cf:0a:1f:fc:b3:c6:9e:c5:3f: 70:97:a1:31:e4:44:eb:87:ce:81:b5:61:a4:7d:f0: 31:4f:b3:c7:b2:d0:14:9d:31:5f:3e:84:8d:e9:4b: bb:16:00:dc:a3:6b:b5:d0:88:c8:fd:7b:3e:b1:e6: ff:b2:fd:c9:db:17:4d:83:4c:8c:98:c4:fb:6c:24: 04:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:40:D5:FB:9B:EC:4F:75:53:C4:10:B6:C5:E7:55:43:02:8F:E2:99 X509v3 Authority Key Identifier: keyid:43:0D:3B:87:52:4C:E3:40:FD:3E:75:19:13:76:4E:86:3F:53:73:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Er2sAPFTxrFBTUh1eQdQPYusZAcpGzsQNVukehPZEEkV/0/430D3B87524CE340FD3E751913764E863F537391.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/430D3B87524CE340FD3E751913764E863F537391.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Er2sAPFTxrFBTUh1eQdQPYusZAcpGzsQNVukehPZEEkV/0/430D3B87524CE340FD3E751913764E863F537391.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:7c:d0:58:1e:92:f9:60:73:1e:f0:58:cd:2f:b8:92:81:3a: 49:6d:18:76:c9:0f:33:ab:8b:5f:b5:29:6f:7b:71:0d:94:23: a6:16:97:65:53:e7:12:8e:45:5f:f8:27:27:bf:00:3c:7e:61: 6b:ca:c7:b2:7a:ac:15:f1:a9:8d:3f:c7:11:72:fd:02:31:aa: 80:10:13:65:1c:7d:b2:80:b7:a6:c4:9a:12:a1:36:ef:e1:ab: 3f:93:f1:8f:d2:0c:56:73:a8:4e:27:91:1c:8b:6a:72:45:a3: 3f:aa:4d:e1:d7:42:96:dc:52:6e:14:15:85:84:49:b8:5a:36: d4:78:bc:0a:1d:a5:83:cc:b0:77:72:97:a4:a8:39:1e:93:ac: 99:f0:04:30:8a:8a:4f:36:a6:e3:7d:9c:8a:dd:e5:47:fa:c3: f1:08:59:0f:2d:2f:01:15:7c:3c:fd:fd:7a:2e:05:dc:fd:36: 54:e5:58:cf:ea:d4:7e:b2:7b:ff:5c:51:4b:2f:45:81:a9:bc: aa:a3:d3:40:6e:56:ab:8a:6c:80:fd:00:8f:f2:32:97:1e:f4: e9:40:c0:ce:e4:7f:53:f5:47:82:52:96:cf:ae:11:0e:ff:8b: 44:32:9b:65:87:15:1f:54:7e:33:3e:8d:86:37:93:d1:88:fe: 57:df:cc:cf -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUIFw0Y7MbKA0LX5Q5046nKpsKYY0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDMwRDNCODc1MjRDRTM0MEZEM0U3NTE5MTM3NjRFODYz RjUzNzM5MTAeFw0yNjAzMDIwMTQyMjhaFw0yNjAzMDMwMTU2MjhaMDMxMTAvBgNV BAMTKDFFNDBENUZCOUJFQzRGNzU1M0M0MTBCNkM1RTc1NTQzMDI4RkUyOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC20rbELbn5O5L51+qfXwgqT3sZ uFeVMenY/UEtupto6x1zYvZWcvpYdqImdq0adnJx7sTm9/GM/C5N5JvAkw6UqtbP DAC/Y177PvC//BDiWzFDQp08ZVfx/5pMWAwRfzYwhfsvG192M+8qC+0YH0QG/HYa CPnm6Fh2TOVrHLAUTAMbHdiiGvoy8sYQKPM+o4RaFdVg9918k42zyOw8Mx76125h u7ate7/HGsqhqHYbKipt8guAp3Ax188KH/yzxp7FP3CXoTHkROuHzoG1YaR98DFP s8ey0BSdMV8+hI3pS7sWANyja7XQiMj9ez6x5v+y/cnbF02DTIyYxPtsJASrAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUHkDV+5vsT3VTxBC2xedVQwKP4pkwHwYDVR0j BBgwFoAUQw07h1JM40D9PnUZE3ZOhj9Tc5EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRXIyc0FQRlR4ckZCVFVoMWVRZFFQWXVzWkFjcEd6c1FOVnVrZWhQWkVF a1YvMC80MzBEM0I4NzUyNENFMzQwRkQzRTc1MTkxMzc2NEU4NjNGNTM3MzkxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQzMEQzQjg3NTI0Q0UzNDBG RDNFNzUxOTEzNzY0RTg2M0Y1MzczOTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RXIyc0FQRlR4ckZCVFVoMWVRZFFQWXVzWkFjcEd6c1FOVnVrZWhQWkVFa1YvMC80 MzBEM0I4NzUyNENFMzQwRkQzRTc1MTkxMzc2NEU4NjNGNTM3MzkxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEATHzQWB6S+WBzHvBYzS+4koE6SW0YdskPM6uLX7Upb3txDZQjphaXZVPnEo5F X/gnJ78APH5ha8rHsnqsFfGpjT/HEXL9AjGqgBATZRx9soC3psSaEqE27+GrP5Px j9IMVnOoTieRHItqckWjP6pN4ddCltxSbhQVhYRJuFo21Hi8Ch2lg8ywd3KXpKg5 HpOsmfAEMIqKTzam432cit3lR/rD8QhZDy0vARV8PP39ei4F3P02VOVYz+rUfrJ7 /1xRSy9Fgam8qqPTQG5Wq4psgP0Aj/Iylx706UDAzuR/U/VHglKWz64RDv+LRDKb ZYcVH1R+Mz6NhjeT0Yj+V9/Mzw== -----END CERTIFICATE-----Generated at Mon Mar 2 19:22:58 2026 by rpki-client