$ rpki-client -vvf rpki-repo.registro.br/repo/GkWNB2LuNoxCexi2UYrW6jzkC2UUGDZnWP5x191yoWcM/1/7CD32787AF54793C40E640D59B41C4E38532BB54.mft File: 7CD32787AF54793C40E640D59B41C4E38532BB54.mft (raw, json) Hash identifier: 5cRC5q8j+NFU7nFUlKYHzgUSLXvOpsN1+KydbwQz9+o= Subject key identifier: 97:33:B6:E6:4D:20:D6:9A:E9:F2:7E:B2:9E:09:36:D3:07:8C:41:F4 Authority key identifier: 7C:D3:27:87:AF:54:79:3C:40:E6:40:D5:9B:41:C4:E3:85:32:BB:54 Certificate issuer: /CN=7CD32787AF54793C40E640D59B41C4E38532BB54 Certificate serial: 55172B549A4D7C09BDBF7D2F945AAD64E2A51E0C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CD32787AF54793C40E640D59B41C4E38532BB54.cer Subject info access: rsync://rpki-repo.registro.br/repo/GkWNB2LuNoxCexi2UYrW6jzkC2UUGDZnWP5x191yoWcM/1/7CD32787AF54793C40E640D59B41C4E38532BB54.mft Manifest number: 03AC Signing time: Sun 01 Mar 2026 21:41:01 +0000 Manifest this update: Sun 01 Mar 2026 21:36:01 +0000 Manifest next update: Tue 03 Mar 2026 00:27:01 +0000 Files and hashes: 1: 323830343a353537343a3a2f33322d3332203d3e20323637393336.roa (hash: r4TzvjtKv3tH6vAwVbyPi0hBqLs8pSqsxfQxb6vamKQ=) 2: 323830343a353537343a3a2f33362d3336203d3e20323637393336.roa (hash: OmifMEDKFXOg1SRetP2/Jvi2WP9LAGSHAHm6uL/zTMw=) 3: 34352e3136362e35322e302f32322d3234203d3e20323637393336.roa (hash: Sp12wAoLxAkWvSLG5COk7Ya9OXVKfHTtBo6SSWv7I+k=) 4: 7CD32787AF54793C40E640D59B41C4E38532BB54.crl (hash: oepRIV0NsrzoJIoL6pfxTTUxWcR4b13+WtDGDRMAqMs=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GkWNB2LuNoxCexi2UYrW6jzkC2UUGDZnWP5x191yoWcM/1/7CD32787AF54793C40E640D59B41C4E38532BB54.crl rsync://rpki-repo.registro.br/repo/GkWNB2LuNoxCexi2UYrW6jzkC2UUGDZnWP5x191yoWcM/1/7CD32787AF54793C40E640D59B41C4E38532BB54.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CD32787AF54793C40E640D59B41C4E38532BB54.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 03 Mar 2026 00:27:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:17:2b:54:9a:4d:7c:09:bd:bf:7d:2f:94:5a:ad:64:e2:a5:1e:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7CD32787AF54793C40E640D59B41C4E38532BB54 Validity Not Before: Mar 1 21:36:01 2026 GMT Not After : Mar 3 00:27:01 2026 GMT Subject: CN=9733B6E64D20D69AE9F27EB29E0936D3078C41F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:1e:ae:ed:d7:a3:47:03:84:91:37:30:99:7e: 7f:7f:9f:86:cb:b0:1a:59:cc:25:c5:e0:05:7a:a0: 6e:ea:c8:fa:83:e3:6f:4c:00:ce:49:e6:fe:14:29: 94:0f:fc:8d:b8:37:3a:fa:6f:af:12:14:5f:9f:11: ca:a0:1d:c6:1f:da:9b:d8:2e:94:b1:e8:9c:c2:44: 8a:69:6f:e0:8c:c4:5d:30:80:f9:1c:35:7d:cd:64: a9:96:05:53:a4:b1:35:47:4e:83:6b:0e:26:24:89: 14:89:a0:5f:b8:86:5c:ba:5f:c7:86:11:c5:77:79: ac:d6:e6:67:90:db:c7:cf:06:32:e9:de:6d:e4:99: c3:bb:82:77:57:5d:bf:bd:85:f3:92:14:2d:6b:c9: bf:80:76:05:f2:37:8a:8c:bd:29:7e:06:39:bc:2e: d4:cb:3c:c4:5e:9c:4b:33:b2:74:13:de:4e:0b:85: 04:c3:26:45:18:72:87:87:6e:5e:c4:2b:04:bb:9c: 3a:78:52:36:31:97:f2:94:be:a5:9f:96:85:7d:91: 5a:b6:68:e7:41:05:d7:f2:93:a5:e8:71:a9:92:1d: ae:ab:ec:a8:f0:d5:d7:b7:28:c1:76:96:7b:23:f8: ba:d3:12:84:e9:af:3d:0f:ef:c3:33:d2:19:c7:5f: 22:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:33:B6:E6:4D:20:D6:9A:E9:F2:7E:B2:9E:09:36:D3:07:8C:41:F4 X509v3 Authority Key Identifier: keyid:7C:D3:27:87:AF:54:79:3C:40:E6:40:D5:9B:41:C4:E3:85:32:BB:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GkWNB2LuNoxCexi2UYrW6jzkC2UUGDZnWP5x191yoWcM/1/7CD32787AF54793C40E640D59B41C4E38532BB54.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CD32787AF54793C40E640D59B41C4E38532BB54.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GkWNB2LuNoxCexi2UYrW6jzkC2UUGDZnWP5x191yoWcM/1/7CD32787AF54793C40E640D59B41C4E38532BB54.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:ef:d7:69:c0:9d:f2:93:9b:9f:88:9f:5d:68:3f:c6:19:b2: 9a:0e:1a:a2:c8:1c:5a:ca:70:fb:d9:f3:09:cc:d8:3a:1b:81: 97:1c:35:bb:19:7a:c2:ef:61:44:7d:cd:ac:fa:27:cd:1b:b3: cb:f5:26:4f:0c:93:60:a1:0f:6e:56:cb:51:cc:62:c4:d8:95: 3a:5a:48:de:9c:25:6c:72:55:33:58:88:79:67:bb:02:34:25: 38:3a:c0:87:2f:5a:1f:30:61:36:42:0a:24:32:eb:ba:b1:e6: 99:ce:dd:ac:2d:02:00:ff:28:85:cf:62:58:02:ec:b4:e2:a6: e4:f5:8b:ba:ff:d7:ce:26:c7:10:61:47:22:01:e6:f8:3f:dd: a3:d1:17:01:a4:10:ff:9c:b3:e7:9b:0c:7b:b3:88:b1:70:8c: 50:c1:13:83:b4:fa:dc:1e:65:74:5b:a1:69:08:cf:79:4b:e9: 97:10:e8:52:8b:d1:33:a0:f2:c7:ab:a9:9c:90:f5:bf:25:55: 75:d3:97:4a:b9:b8:0c:da:26:39:48:78:f6:f4:b2:8d:6c:1c: ce:69:25:3e:fd:bd:c0:5f:32:5c:7f:b2:46:67:6d:97:df:49: 13:cf:10:9c:14:2d:2e:d9:96:9d:ab:75:71:3e:78:2e:95:48: 6f:78:a8:94 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUVRcrVJpNfAm9v30vlFqtZOKlHgwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0NEMzI3ODdBRjU0NzkzQzQwRTY0MEQ1OUI0MUM0RTM4 NTMyQkI1NDAeFw0yNjAzMDEyMTM2MDFaFw0yNjAzMDMwMDI3MDFaMDMxMTAvBgNV BAMTKDk3MzNCNkU2NEQyMEQ2OUFFOUYyN0VCMjlFMDkzNkQzMDc4QzQxRjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1Hq7t16NHA4SRNzCZfn9/n4bL sBpZzCXF4AV6oG7qyPqD429MAM5J5v4UKZQP/I24Nzr6b68SFF+fEcqgHcYf2pvY LpSx6JzCRIppb+CMxF0wgPkcNX3NZKmWBVOksTVHToNrDiYkiRSJoF+4hly6X8eG EcV3eazW5meQ28fPBjLp3m3kmcO7gndXXb+9hfOSFC1ryb+AdgXyN4qMvSl+Bjm8 LtTLPMRenEszsnQT3k4LhQTDJkUYcoeHbl7EKwS7nDp4UjYxl/KUvqWfloV9kVq2 aOdBBdfyk6XocamSHa6r7Kjw1de3KMF2lnsj+LrTEoTprz0P78Mz0hnHXyLRAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUlzO25k0g1prp8n6yngk20weMQfQwHwYDVR0j BBgwFoAUfNMnh69UeTxA5kDVm0HE44Uyu1QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR2tXTkIyTHVOb3hDZXhpMlVZclc2anprQzJVVUdEWm5XUDV4MTkxeW9X Y00vMS83Q0QzMjc4N0FGNTQ3OTNDNDBFNjQwRDU5QjQxQzRFMzg1MzJCQjU0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdDRDMyNzg3QUY1NDc5M0M0 MEU2NDBENTlCNDFDNEUzODUzMkJCNTQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R2tXTkIyTHVOb3hDZXhpMlVZclc2anprQzJVVUdEWm5XUDV4MTkxeW9XY00vMS83 Q0QzMjc4N0FGNTQ3OTNDNDBFNjQwRDU5QjQxQzRFMzg1MzJCQjU0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhe/XacCd8pObn4ifXWg/xhmymg4aosgcWspw+9nzCczYOhuBlxw1uxl6wu9h RH3NrPonzRuzy/UmTwyTYKEPblbLUcxixNiVOlpI3pwlbHJVM1iIeWe7AjQlODrA hy9aHzBhNkIKJDLrurHmmc7drC0CAP8ohc9iWALstOKm5PWLuv/XzibHEGFHIgHm +D/do9EXAaQQ/5yz55sMe7OIsXCMUMETg7T63B5ldFuhaQjPeUvplxDoUovRM6Dy x6upnJD1vyVVddOXSrm4DNomOUh49vSyjWwczmklPv29wF8yXH+yRmdtl99JE88Q nBQtLtmWnat1cT54LpVIb3iolA== -----END CERTIFICATE-----Generated at Mon Mar 2 18:01:07 2026 by rpki-client