$ rpki-client -vvf rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/D95738A14AD98B305087E048FD2E4821E5E2299A.mft File: D95738A14AD98B305087E048FD2E4821E5E2299A.mft (raw, json) Hash identifier: pPHRY1H4HsbawAfcjUIdblZq8LI7JqdZoJ4WMc2YO8o= Subject key identifier: C8:BF:CC:22:E4:3D:28:C4:45:13:E0:9A:D3:92:B5:1C:73:14:98:5F Authority key identifier: D9:57:38:A1:4A:D9:8B:30:50:87:E0:48:FD:2E:48:21:E5:E2:29:9A Certificate issuer: /CN=D95738A14AD98B305087E048FD2E4821E5E2299A Certificate serial: 6EAC865A078324CC9E1DFB75B2082DBC6DF3DE79 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D95738A14AD98B305087E048FD2E4821E5E2299A.cer Subject info access: rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/D95738A14AD98B305087E048FD2E4821E5E2299A.mft Manifest number: 01B3 Signing time: Mon 02 Mar 2026 16:32:33 +0000 Manifest this update: Mon 02 Mar 2026 16:27:33 +0000 Manifest next update: Tue 03 Mar 2026 18:56:33 +0000 Files and hashes: 1: 323830343a313235343a3a2f33322d3332203d3e20323633343730.roa (hash: ELWb7rC3fgvn1sa3PxipINIruhW615Gy+69ajKYPWzI=) 2: 3137302e38332e3230302e302f32322d3234203d3e20323633343730.roa (hash: 3dEyGzKHFOd9LeZVxU1UzcBmIS+t2RbJviuI4dC12Lk=) 3: D95738A14AD98B305087E048FD2E4821E5E2299A.crl (hash: 4Jimz0rtMVUzZgiiGB39+2mtgxCvLMgKSmFQGiKAweE=) 4: 3139312e3234322e34382e302f32312d3234203d3e20323633343730.roa (hash: g6mPrnM05WB2yDxH6Zlq8hbCsk4V+orsbGR3GF+AKT8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/D95738A14AD98B305087E048FD2E4821E5E2299A.crl rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/D95738A14AD98B305087E048FD2E4821E5E2299A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D95738A14AD98B305087E048FD2E4821E5E2299A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 03 Mar 2026 18:32:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:ac:86:5a:07:83:24:cc:9e:1d:fb:75:b2:08:2d:bc:6d:f3:de:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D95738A14AD98B305087E048FD2E4821E5E2299A Validity Not Before: Mar 2 16:27:33 2026 GMT Not After : Mar 3 18:56:33 2026 GMT Subject: CN=C8BFCC22E43D28C44513E09AD392B51C7314985F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:da:41:0d:9b:10:2f:93:8a:0f:eb:df:49:b0: 08:e8:34:d9:c0:85:79:25:8b:3b:6c:38:ca:ae:58: 62:38:8b:9c:9b:da:49:24:a0:91:9c:04:e4:4f:7d: bf:7f:40:99:f9:a2:bc:4f:a6:cb:f7:fe:bd:1a:c4: 67:d9:73:cd:f6:4b:9a:f8:71:8c:25:68:6d:cc:5f: 7d:f3:c5:70:a5:35:79:7f:08:18:63:64:e4:df:91: 36:57:e4:81:6f:aa:e0:96:ee:e6:2a:be:c1:47:1c: 6a:62:1f:f2:20:ee:30:fc:0b:29:35:62:95:b8:64: 39:8a:66:17:8f:e7:da:d8:bf:61:5c:1b:44:71:a9: cc:1d:b4:26:06:b0:3d:11:87:f3:c1:5d:ab:70:a9: 7d:a5:d8:7b:f3:c2:1a:97:01:3d:8d:b6:f4:e0:b5: 62:c8:eb:d5:f6:e6:c6:69:9d:09:70:82:ae:be:5b: 08:8a:02:a3:ba:e7:38:36:e7:4c:e0:17:42:b7:c9: cd:76:46:ec:07:b0:17:83:d5:a7:e0:74:3e:8b:4d: d6:5c:cf:53:fa:cc:03:67:be:41:f3:a0:c6:65:3b: c9:e6:2c:dc:53:25:3e:c8:4d:a2:37:65:ee:a5:95: cc:ce:e6:a9:cb:14:cf:0d:5e:57:52:b9:fa:92:c3: 1d:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:BF:CC:22:E4:3D:28:C4:45:13:E0:9A:D3:92:B5:1C:73:14:98:5F X509v3 Authority Key Identifier: keyid:D9:57:38:A1:4A:D9:8B:30:50:87:E0:48:FD:2E:48:21:E5:E2:29:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/D95738A14AD98B305087E048FD2E4821E5E2299A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D95738A14AD98B305087E048FD2E4821E5E2299A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/D95738A14AD98B305087E048FD2E4821E5E2299A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:16:8f:bf:3f:35:88:a7:a8:61:7a:0a:63:b0:78:8d:8d:d0: a6:90:4e:18:72:11:88:72:50:90:1a:2e:60:f4:3a:6d:0c:9c: 7d:d1:63:24:88:c3:77:b4:a1:e4:bd:5b:38:55:44:3b:1a:ae: 96:15:ba:44:1d:59:b0:d9:51:d3:37:e5:f8:ed:4f:28:b1:44: d1:72:d3:41:aa:27:5f:f0:ac:b4:65:7e:09:ec:1c:33:33:31: d3:74:3b:fb:d0:38:5d:50:fc:c8:22:fb:f9:73:98:c5:65:f3: ac:f9:79:39:d6:16:fd:b3:89:b7:b0:f6:fd:7e:e0:e8:25:ab: d4:d0:0a:0e:45:d8:40:3a:63:09:15:34:81:e1:3e:35:d2:54: 5e:f6:66:a3:7c:cf:99:12:0d:60:a3:2e:33:81:09:85:ea:47: c9:90:66:35:e3:34:77:52:b7:e3:f5:f1:79:d2:cb:91:ca:3b: 7d:1d:4f:43:61:8c:65:17:25:b9:04:cb:ad:dc:3b:40:3e:ec: e2:14:ba:7d:ac:ea:c0:03:cd:2f:23:5a:e8:d0:11:ad:b8:15: 9a:36:e1:6e:03:78:89:13:8a:26:bc:76:8a:e8:93:2a:f9:af: 02:cb:0b:98:00:cf:ed:d3:c9:9a:53:a3:2f:fe:4e:fc:e8:e5: 21:b7:de:e9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUbqyGWgeDJMyeHft1sggtvG3z3nkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDk1NzM4QTE0QUQ5OEIzMDUwODdFMDQ4RkQyRTQ4MjFF NUUyMjk5QTAeFw0yNjAzMDIxNjI3MzNaFw0yNjAzMDMxODU2MzNaMDMxMTAvBgNV BAMTKEM4QkZDQzIyRTQzRDI4QzQ0NTEzRTA5QUQzOTJCNTFDNzMxNDk4NUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx2kENmxAvk4oP699JsAjoNNnA hXkliztsOMquWGI4i5yb2kkkoJGcBORPfb9/QJn5orxPpsv3/r0axGfZc832S5r4 cYwlaG3MX33zxXClNXl/CBhjZOTfkTZX5IFvquCW7uYqvsFHHGpiH/Ig7jD8Cyk1 YpW4ZDmKZheP59rYv2FcG0RxqcwdtCYGsD0Rh/PBXatwqX2l2HvzwhqXAT2NtvTg tWLI69X25sZpnQlwgq6+WwiKAqO65zg250zgF0K3yc12RuwHsBeD1afgdD6LTdZc z1P6zANnvkHzoMZlO8nmLNxTJT7ITaI3Ze6llczO5qnLFM8NXldSufqSwx0vAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUyL/MIuQ9KMRFE+Ca05K1HHMUmF8wHwYDVR0j BBgwFoAU2Vc4oUrZizBQh+BI/S5IIeXiKZowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR3hTMUhrYk1VSjc0SHFhZnNqYktuM1dyUkxyblVtTWIyYVBmRFExR3g2 UFkvMC9EOTU3MzhBMTRBRDk4QjMwNTA4N0UwNDhGRDJFNDgyMUU1RTIyOTlBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q5NTczOEExNEFEOThCMzA1 MDg3RTA0OEZEMkU0ODIxRTVFMjI5OUEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R3hTMUhrYk1VSjc0SHFhZnNqYktuM1dyUkxyblVtTWIyYVBmRFExR3g2UFkvMC9E OTU3MzhBMTRBRDk4QjMwNTA4N0UwNDhGRDJFNDgyMUU1RTIyOTlBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEALhaPvz81iKeoYXoKY7B4jY3QppBOGHIRiHJQkBouYPQ6bQycfdFjJIjDd7Sh 5L1bOFVEOxqulhW6RB1ZsNlR0zfl+O1PKLFE0XLTQaonX/CstGV+CewcMzMx03Q7 +9A4XVD8yCL7+XOYxWXzrPl5OdYW/bOJt7D2/X7g6CWr1NAKDkXYQDpjCRU0geE+ NdJUXvZmo3zPmRINYKMuM4EJhepHyZBmNeM0d1K34/XxedLLkco7fR1PQ2GMZRcl uQTLrdw7QD7s4hS6fazqwAPNLyNa6NARrbgVmjbhbgN4iROKJrx2iuiTKvmvAssL mADP7dPJmlOjL/5O/OjlIbfe6Q== -----END CERTIFICATE-----Generated at Mon Mar 2 19:32:24 2026 by rpki-client