$ rpki-client -vvf rpki-repo.registro.br/repo/EsQE87pvLo2B2YGPSYHzVkh6AjKta7r5ffABNY5FjFNQ/0/4B2D308A10AC4264B7DC7D903FFE478F2A400E1D.mft File: 4B2D308A10AC4264B7DC7D903FFE478F2A400E1D.mft (raw, json) Hash identifier: Wo8hKblffQSu3xBGsOsmzzkM2pvmfwFjS8i/Bzp+W1I= Subject key identifier: 32:42:19:6B:2D:1A:2F:A5:13:3D:A9:E0:25:89:C2:7C:30:6D:37:D3 Authority key identifier: 4B:2D:30:8A:10:AC:42:64:B7:DC:7D:90:3F:FE:47:8F:2A:40:0E:1D Certificate issuer: /CN=4B2D308A10AC4264B7DC7D903FFE478F2A400E1D Certificate serial: 23B1B245F3F40B281292719181AC0D5CC6FA3004 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B2D308A10AC4264B7DC7D903FFE478F2A400E1D.cer Subject info access: rsync://rpki-repo.registro.br/repo/EsQE87pvLo2B2YGPSYHzVkh6AjKta7r5ffABNY5FjFNQ/0/4B2D308A10AC4264B7DC7D903FFE478F2A400E1D.mft Manifest number: 012A Signing time: Mon 02 Mar 2026 08:22:01 +0000 Manifest this update: Mon 02 Mar 2026 08:17:01 +0000 Manifest next update: Tue 03 Mar 2026 09:19:01 +0000 Files and hashes: 1: 3137302e3234352e3131362e302f32322d3332203d3e20323634343239.roa (hash: bdYqLTrmyZVtnX3hQzjggcKDrPInm/SX7ouRHDPAjqE=) 2: 323830343a316537303a3a2f33322d313238203d3e20323634343239.roa (hash: 6ObJH/Yn0OhNlenVZChDhjf8OzouFK3QjeWFSU2/I54=) 3: 4B2D308A10AC4264B7DC7D903FFE478F2A400E1D.crl (hash: dp/GcX2zJKMjEAsxdLPtCkLffmJ9L0TlBFqPq2VcO3M=) 4: 3133312e3232312e3133322e302f32322d3332203d3e20323634343239.roa (hash: 4kjU7jzExWeoE5Ul09K/8oKzzSaEzcW2EMczGqlS9Wk=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/EsQE87pvLo2B2YGPSYHzVkh6AjKta7r5ffABNY5FjFNQ/0/4B2D308A10AC4264B7DC7D903FFE478F2A400E1D.crl rsync://rpki-repo.registro.br/repo/EsQE87pvLo2B2YGPSYHzVkh6AjKta7r5ffABNY5FjFNQ/0/4B2D308A10AC4264B7DC7D903FFE478F2A400E1D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B2D308A10AC4264B7DC7D903FFE478F2A400E1D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 03 Mar 2026 09:19:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:b1:b2:45:f3:f4:0b:28:12:92:71:91:81:ac:0d:5c:c6:fa:30:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4B2D308A10AC4264B7DC7D903FFE478F2A400E1D Validity Not Before: Mar 2 08:17:01 2026 GMT Not After : Mar 3 09:19:01 2026 GMT Subject: CN=3242196B2D1A2FA5133DA9E02589C27C306D37D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:aa:c2:fb:59:4f:a1:03:a2:c3:18:d9:52:c2: 73:2b:3b:45:89:1d:b2:0e:3d:bb:9e:96:ad:6a:2d: 25:22:f4:bb:3a:fa:b5:f7:18:a9:ec:8a:2e:ea:09: ce:44:3e:07:8f:16:8b:c6:57:be:ff:84:2f:97:47: 70:e8:78:2b:ad:6d:4f:b9:8a:77:5e:1a:aa:b8:9f: 6f:bc:82:be:6b:8e:61:c6:05:a9:62:4f:b3:b1:92: 4c:70:e9:12:39:94:08:90:fd:b2:70:1d:9c:7e:cb: 47:f6:02:88:25:32:67:a6:a8:55:f7:31:ec:d6:d4: 83:39:ef:c5:48:4d:95:90:ec:64:6e:f9:19:44:68: c0:dc:75:be:13:8f:1d:27:d3:a9:1a:b3:99:3c:dc: a2:ab:9f:fd:e9:70:6c:15:9e:4c:c4:9a:76:ab:a6: 0c:7e:84:60:5e:c4:24:25:ad:1f:3f:5a:9e:20:61: 8a:fa:5e:7c:2c:c0:f7:6f:43:8d:7b:f2:e8:a7:d2: 1c:ef:92:f1:3d:86:2e:fd:2f:de:8a:5d:cf:1f:54: 39:5a:37:1c:59:36:6a:e2:10:5d:64:9b:28:c6:7f: f2:4d:b1:48:95:35:3c:bf:65:e9:d9:0c:ba:87:c2: 22:9d:30:3d:de:95:84:55:54:3c:1c:3c:0b:ac:d9: 64:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:42:19:6B:2D:1A:2F:A5:13:3D:A9:E0:25:89:C2:7C:30:6D:37:D3 X509v3 Authority Key Identifier: keyid:4B:2D:30:8A:10:AC:42:64:B7:DC:7D:90:3F:FE:47:8F:2A:40:0E:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/EsQE87pvLo2B2YGPSYHzVkh6AjKta7r5ffABNY5FjFNQ/0/4B2D308A10AC4264B7DC7D903FFE478F2A400E1D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B2D308A10AC4264B7DC7D903FFE478F2A400E1D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/EsQE87pvLo2B2YGPSYHzVkh6AjKta7r5ffABNY5FjFNQ/0/4B2D308A10AC4264B7DC7D903FFE478F2A400E1D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:99:51:62:1d:06:89:cd:e8:2b:6e:7c:0d:55:f4:69:2f:1e: a4:44:7f:cd:c5:30:cb:75:1b:fc:8a:ec:21:cc:92:bb:98:2c: d8:ae:df:ec:30:cc:83:7f:bc:39:95:fd:2e:85:62:5d:d8:a3: d1:6a:7c:2d:d6:f8:be:2f:f7:fc:30:3b:84:82:b3:de:37:4c: 78:6c:9e:f3:99:21:86:69:39:bf:d0:90:7e:24:32:37:40:5d: 27:25:2f:a4:47:2b:cf:e1:1b:4e:ef:be:0c:67:8c:0d:79:9b: af:ef:e0:6f:30:3b:92:b6:71:25:14:0c:85:29:da:0a:08:2b: d6:46:63:f8:42:87:cc:71:65:57:28:0d:f7:01:97:b3:de:44: 14:12:41:ad:5a:b8:cf:89:3a:0e:88:80:ab:2a:06:d1:9c:30: dd:6c:bc:0f:cf:6f:33:f8:70:21:8c:6a:48:f1:92:c6:e1:f7: bd:fb:c6:fc:37:db:3a:93:63:3f:e6:5e:45:e0:b3:eb:5f:0f: d2:ec:54:0b:74:a3:e0:f7:3d:b6:03:39:01:d7:7c:8b:86:18: b1:dc:17:ca:16:a7:57:48:e9:69:a7:35:b2:2c:a8:9d:92:5b: a3:8c:c2:7b:d5:49:ba:53:d6:4f:5b:dc:ec:24:d2:a5:3d:28: 63:b3:b2:47 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUI7GyRfP0CygSknGRgawNXMb6MAQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEIyRDMwOEExMEFDNDI2NEI3REM3RDkwM0ZGRTQ3OEYy QTQwMEUxRDAeFw0yNjAzMDIwODE3MDFaFw0yNjAzMDMwOTE5MDFaMDMxMTAvBgNV BAMTKDMyNDIxOTZCMkQxQTJGQTUxMzNEQTlFMDI1ODlDMjdDMzA2RDM3RDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCqsL7WU+hA6LDGNlSwnMrO0WJ HbIOPbuelq1qLSUi9Ls6+rX3GKnsii7qCc5EPgePFovGV77/hC+XR3DoeCutbU+5 indeGqq4n2+8gr5rjmHGBaliT7Oxkkxw6RI5lAiQ/bJwHZx+y0f2AoglMmemqFX3 MezW1IM578VITZWQ7GRu+RlEaMDcdb4Tjx0n06kas5k83KKrn/3pcGwVnkzEmnar pgx+hGBexCQlrR8/Wp4gYYr6XnwswPdvQ4178uin0hzvkvE9hi79L96KXc8fVDla NxxZNmriEF1kmyjGf/JNsUiVNTy/ZenZDLqHwiKdMD3elYRVVDwcPAus2WSrAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUMkIZay0aL6UTPangJYnCfDBtN9MwHwYDVR0j BBgwFoAUSy0wihCsQmS33H2QP/5HjypADh0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRXNRRTg3cHZMbzJCMllHUFNZSHpWa2g2QWpLdGE3cjVmZkFCTlk1RmpG TlEvMC80QjJEMzA4QTEwQUM0MjY0QjdEQzdEOTAzRkZFNDc4RjJBNDAwRTFELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRCMkQzMDhBMTBBQzQyNjRC N0RDN0Q5MDNGRkU0NzhGMkE0MDBFMUQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RXNRRTg3cHZMbzJCMllHUFNZSHpWa2g2QWpLdGE3cjVmZkFCTlk1RmpGTlEvMC80 QjJEMzA4QTEwQUM0MjY0QjdEQzdEOTAzRkZFNDc4RjJBNDAwRTFELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEARplRYh0Gic3oK258DVX0aS8epER/zcUwy3Ub/IrsIcySu5gs2K7f7DDMg3+8 OZX9LoViXdij0Wp8Ldb4vi/3/DA7hIKz3jdMeGye85khhmk5v9CQfiQyN0BdJyUv pEcrz+EbTu++DGeMDXmbr+/gbzA7krZxJRQMhSnaCggr1kZj+EKHzHFlVygN9wGX s95EFBJBrVq4z4k6DoiAqyoG0Zww3Wy8D89vM/hwIYxqSPGSxuH3vfvG/DfbOpNj P+ZeReCz618P0uxUC3Sj4Pc9tgM5Add8i4YYsdwXyhanV0jpaac1siyonZJbo4zC e9VJulPWT1vc7CTSpT0oY7OyRw== -----END CERTIFICATE-----Generated at Mon Mar 2 15:57:50 2026 by rpki-client