$ rpki-client -vvf rpki-repo.registro.br/repo/FgzNpq2vHXJqtu3wubox7RY2WGngNhrGTTAFE9izbHYJ/0/E25C8BAC5F3F0E1B158538E0C88D150037FBD43A.mft File: E25C8BAC5F3F0E1B158538E0C88D150037FBD43A.mft (raw, json) Hash identifier: 3V12L8qU+D5e/YtWyzKAjcYXtqmBBeDqc69P3wUX4FM= Subject key identifier: 47:58:2B:5D:9E:F1:7D:BA:65:67:1E:E2:B9:A2:E4:7C:E1:F4:64:AF Authority key identifier: E2:5C:8B:AC:5F:3F:0E:1B:15:85:38:E0:C8:8D:15:00:37:FB:D4:3A Certificate issuer: /CN=E25C8BAC5F3F0E1B158538E0C88D150037FBD43A Certificate serial: 17573C647A7A11A48113342B576C3251F12F346A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E25C8BAC5F3F0E1B158538E0C88D150037FBD43A.cer Subject info access: rsync://rpki-repo.registro.br/repo/FgzNpq2vHXJqtu3wubox7RY2WGngNhrGTTAFE9izbHYJ/0/E25C8BAC5F3F0E1B158538E0C88D150037FBD43A.mft Manifest number: 49 Signing time: Sun 01 Mar 2026 11:19:49 +0000 Manifest this update: Sun 01 Mar 2026 11:14:49 +0000 Manifest next update: Mon 02 Mar 2026 12:09:49 +0000 Files and hashes: 1: 323830343a316336343a3a2f33322d3332203d3e203631363533.roa (hash: foq5uSdPq4i+utJE2QsQrr/KRVv+eolGtO4qKpqMaIY=) 2: E25C8BAC5F3F0E1B158538E0C88D150037FBD43A.crl (hash: O+DU5nOit2F7pD+IEl00b+VsqPmJvc1xXdtwxYJGGMk=) 3: 3133312e3130302e3232342e302f32322d3332203d3e203631363533.roa (hash: lbqJ4bvDansH2bszjGpISn94SIODSMOuCxwVCLtajcc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/FgzNpq2vHXJqtu3wubox7RY2WGngNhrGTTAFE9izbHYJ/0/E25C8BAC5F3F0E1B158538E0C88D150037FBD43A.crl rsync://rpki-repo.registro.br/repo/FgzNpq2vHXJqtu3wubox7RY2WGngNhrGTTAFE9izbHYJ/0/E25C8BAC5F3F0E1B158538E0C88D150037FBD43A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E25C8BAC5F3F0E1B158538E0C88D150037FBD43A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 02 Mar 2026 12:09:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:57:3c:64:7a:7a:11:a4:81:13:34:2b:57:6c:32:51:f1:2f:34:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E25C8BAC5F3F0E1B158538E0C88D150037FBD43A Validity Not Before: Mar 1 11:14:49 2026 GMT Not After : Mar 2 12:09:49 2026 GMT Subject: CN=47582B5D9EF17DBA65671EE2B9A2E47CE1F464AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:eb:15:45:c1:1c:88:d4:f0:4f:a2:69:4d:9c: 44:03:ee:bd:96:a6:d2:f0:91:ed:64:48:09:f1:1e: af:55:72:cc:2c:47:85:9b:a5:8e:59:51:90:eb:4b: 69:22:bb:0d:2c:4c:f4:bf:b0:2c:d6:9e:de:3d:b3: a8:77:f3:4c:64:f8:90:02:07:e5:35:4e:78:59:ec: 50:26:40:ad:6d:d8:2f:b9:e4:9f:50:12:10:f1:2d: 18:60:68:f5:d0:3d:ea:06:fd:9b:0d:aa:48:66:1f: af:f3:d4:77:bf:2f:7b:79:c8:bd:b1:69:68:a9:ee: 70:33:19:03:20:11:ef:d8:10:7a:5f:53:80:fa:cb: d4:9e:25:6c:14:93:4d:a1:f0:a1:e4:3e:58:6d:a2: bc:dd:18:b5:c0:68:63:69:3d:ee:3b:4c:b1:c3:00: e4:5d:69:36:59:30:93:1b:cf:9c:0e:66:19:73:cc: b5:6b:0b:a3:43:2e:cc:e2:dd:0e:32:9d:ef:87:94: a8:9e:d7:82:00:03:b4:98:90:b4:fe:4c:19:49:66: 82:15:93:3a:a0:ca:d8:37:83:6f:37:27:27:c5:6c: d5:89:2c:6a:90:28:d5:91:68:b7:94:c2:4a:5f:47: f2:f8:4d:7c:3f:6a:c4:e9:a4:f6:19:6d:9b:b5:06: 04:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:58:2B:5D:9E:F1:7D:BA:65:67:1E:E2:B9:A2:E4:7C:E1:F4:64:AF X509v3 Authority Key Identifier: keyid:E2:5C:8B:AC:5F:3F:0E:1B:15:85:38:E0:C8:8D:15:00:37:FB:D4:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/FgzNpq2vHXJqtu3wubox7RY2WGngNhrGTTAFE9izbHYJ/0/E25C8BAC5F3F0E1B158538E0C88D150037FBD43A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E25C8BAC5F3F0E1B158538E0C88D150037FBD43A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/FgzNpq2vHXJqtu3wubox7RY2WGngNhrGTTAFE9izbHYJ/0/E25C8BAC5F3F0E1B158538E0C88D150037FBD43A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:c2:27:75:af:0f:2a:2e:dc:fc:19:bd:a3:21:f9:30:62:63: 0f:91:67:84:9f:92:ac:54:60:41:23:75:c2:4e:d0:e4:e8:2e: 89:1d:e5:57:cf:b1:05:97:54:4a:c2:3d:f7:73:1c:60:ee:f4: 5c:ca:82:65:d3:b1:d2:71:53:9b:39:a0:c1:ca:48:24:11:b0: ed:2d:c6:bc:46:13:7c:b8:ba:30:f7:3e:41:07:92:f3:d7:0d: 88:37:3c:76:89:8b:b3:71:06:4a:c8:5f:b8:22:bd:da:17:52: 88:20:d1:63:18:03:90:45:2a:04:67:44:f6:2a:99:a0:0e:35: 40:a5:6c:d2:b0:4b:63:8c:55:3f:75:96:ac:26:77:69:68:aa: 2c:f1:48:4d:5e:85:f6:e5:5b:54:ac:2d:12:fb:66:d0:e8:10: c4:c2:11:c7:bf:5d:6b:76:c2:89:8a:88:66:cb:f5:41:71:97: e8:73:bc:c7:39:cf:4a:ae:bc:a5:f4:37:49:d3:90:e2:ed:ae: 8e:f6:65:7c:f3:7d:9a:07:4e:49:a8:5a:a1:2d:0b:cf:98:8d: c5:8c:72:3f:7a:bc:ce:46:85:8b:00:b8:ea:0c:19:0a:88:39: 44:6b:bc:47:1e:ca:0e:4a:2d:f8:2c:98:1c:5c:7c:24:f3:78: cb:c6:72:e7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUF1c8ZHp6EaSBEzQrV2wyUfEvNGowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTI1QzhCQUM1RjNGMEUxQjE1ODUzOEUwQzg4RDE1MDAz N0ZCRDQzQTAeFw0yNjAzMDExMTE0NDlaFw0yNjAzMDIxMjA5NDlaMDMxMTAvBgNV BAMTKDQ3NTgyQjVEOUVGMTdEQkE2NTY3MUVFMkI5QTJFNDdDRTFGNDY0QUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV6xVFwRyI1PBPomlNnEQD7r2W ptLwke1kSAnxHq9VcswsR4WbpY5ZUZDrS2kiuw0sTPS/sCzWnt49s6h380xk+JAC B+U1TnhZ7FAmQK1t2C+55J9QEhDxLRhgaPXQPeoG/ZsNqkhmH6/z1He/L3t5yL2x aWip7nAzGQMgEe/YEHpfU4D6y9SeJWwUk02h8KHkPlhtorzdGLXAaGNpPe47TLHD AORdaTZZMJMbz5wOZhlzzLVrC6NDLszi3Q4yne+HlKie14IAA7SYkLT+TBlJZoIV kzqgytg3g283JyfFbNWJLGqQKNWRaLeUwkpfR/L4TXw/asTppPYZbZu1BgShAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUR1grXZ7xfbplZx7iuaLkfOH0ZK8wHwYDVR0j BBgwFoAU4lyLrF8/DhsVhTjgyI0VADf71DowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRmd6TnBxMnZIWEpxdHUzd3Vib3g3UlkyV0duZ05ockdUVEFGRTlpemJI WUovMC9FMjVDOEJBQzVGM0YwRTFCMTU4NTM4RTBDODhEMTUwMDM3RkJENDNBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0UyNUM4QkFDNUYzRjBFMUIx NTg1MzhFMEM4OEQxNTAwMzdGQkQ0M0EuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Rmd6TnBxMnZIWEpxdHUzd3Vib3g3UlkyV0duZ05ockdUVEFGRTlpemJIWUovMC9F MjVDOEJBQzVGM0YwRTFCMTU4NTM4RTBDODhEMTUwMDM3RkJENDNBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQsInda8PKi7c/Bm9oyH5MGJjD5FnhJ+SrFRgQSN1wk7Q5OguiR3lV8+xBZdU SsI993McYO70XMqCZdOx0nFTmzmgwcpIJBGw7S3GvEYTfLi6MPc+QQeS89cNiDc8 domLs3EGSshfuCK92hdSiCDRYxgDkEUqBGdE9iqZoA41QKVs0rBLY4xVP3WWrCZ3 aWiqLPFITV6F9uVbVKwtEvtm0OgQxMIRx79da3bCiYqIZsv1QXGX6HO8xznPSq68 pfQ3SdOQ4u2ujvZlfPN9mgdOSahaoS0Lz5iNxYxyP3q8zkaFiwC46gwZCog5RGu8 Rx7KDkot+CyYHFx8JPN4y8Zy5w== -----END CERTIFICATE-----Generated at Sun Mar 1 21:07:02 2026 by rpki-client