$ rpki-client -vvf rpki-repo.registro.br/repo/Hnn3ReVmrZArAcBs9miuXMwZTic9hRAnF1tgnNNjRJcx/0/DED9E8FD1D2DB868985876502664A4CA2989C2CF.mft File: DED9E8FD1D2DB868985876502664A4CA2989C2CF.mft (raw, json) Hash identifier: BaOPRubZMB6FItPCNyeCT51/2OxDZQsGCAGH5TkId90= Subject key identifier: 50:41:CD:8D:10:96:92:01:F0:5F:F9:E6:4C:CF:BB:D7:2D:5E:B6:0F Authority key identifier: DE:D9:E8:FD:1D:2D:B8:68:98:58:76:50:26:64:A4:CA:29:89:C2:CF Certificate issuer: /CN=DED9E8FD1D2DB868985876502664A4CA2989C2CF Certificate serial: 4F360DC9FFCB77A5A57B4FDDADC61593B1BB52FF Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DED9E8FD1D2DB868985876502664A4CA2989C2CF.cer Subject info access: rsync://rpki-repo.registro.br/repo/Hnn3ReVmrZArAcBs9miuXMwZTic9hRAnF1tgnNNjRJcx/0/DED9E8FD1D2DB868985876502664A4CA2989C2CF.mft Manifest number: E2 Signing time: Mon 02 Mar 2026 05:11:55 +0000 Manifest this update: Mon 02 Mar 2026 05:06:55 +0000 Manifest next update: Tue 03 Mar 2026 07:13:55 +0000 Files and hashes: 1: DED9E8FD1D2DB868985876502664A4CA2989C2CF.crl (hash: rs8fwlEetOp+hLDV13VSJT5P7Ej6DP4yLbBSUbRUJrw=) 2: 323830343a366563303a3a2f33322d313238203d3e203238323933.roa (hash: c/3sklDWNh8JDDiUEAFzZFZqzlYqC6cY3wKSXLAufyQ=) 3: 3138392e32382e33322e302f31392d3332203d3e203238323933.roa (hash: bL7GKT0wjfBACi8NxbByAA/S3mQhxB4zgvFZ3X847ak=) 4: 3138392e32382e35362e302f32342d3234203d3e20323734333730.roa (hash: DPPeS7k7NogwFfGu4j/bJkEgnjR7R/qNjR2fd1ONYCM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Hnn3ReVmrZArAcBs9miuXMwZTic9hRAnF1tgnNNjRJcx/0/DED9E8FD1D2DB868985876502664A4CA2989C2CF.crl rsync://rpki-repo.registro.br/repo/Hnn3ReVmrZArAcBs9miuXMwZTic9hRAnF1tgnNNjRJcx/0/DED9E8FD1D2DB868985876502664A4CA2989C2CF.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DED9E8FD1D2DB868985876502664A4CA2989C2CF.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 03 Mar 2026 07:13:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:36:0d:c9:ff:cb:77:a5:a5:7b:4f:dd:ad:c6:15:93:b1:bb:52:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DED9E8FD1D2DB868985876502664A4CA2989C2CF Validity Not Before: Mar 2 05:06:55 2026 GMT Not After : Mar 3 07:13:55 2026 GMT Subject: CN=5041CD8D10969201F05FF9E64CCFBBD72D5EB60F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:3f:14:56:9c:a5:e4:d9:48:1b:d0:d0:52:63: a9:6e:18:62:81:02:0f:4d:d6:55:a9:a3:9f:d5:26: f6:b7:5e:19:10:a2:c0:a5:29:58:46:88:f3:cc:e8: 85:07:67:e5:9d:20:ee:b2:e2:c7:72:2f:98:ce:0b: 59:7d:07:26:fe:df:e8:b9:2d:f9:37:ac:1c:b6:0e: bb:50:86:a3:83:1e:ee:08:a5:bd:0c:3c:84:04:94: b2:74:10:4f:7c:d1:9f:ec:0b:dc:03:2c:ba:9d:34: 35:0f:01:b6:21:1c:dd:ce:fc:4e:d3:01:28:c3:69: 67:5a:d8:4b:a6:d3:6d:9b:f8:3f:fe:48:c0:14:9e: 7d:ac:67:de:80:da:c2:09:fd:24:84:9e:9d:4b:ba: 5e:5f:7f:c3:fe:3a:53:1a:ba:48:5d:7f:b8:db:8a: 1d:40:f5:5a:e0:03:ff:bf:22:c5:93:32:2d:21:88: f3:8e:45:2e:04:81:fa:93:32:e1:0c:98:b5:25:42: 35:a5:17:bf:74:fb:3b:7e:da:89:6f:c4:64:fe:24: fe:f5:f2:b6:45:d7:c1:de:7b:0f:a1:cf:1e:3e:4a: 02:42:cf:18:c0:5f:59:c5:cb:f3:c7:06:85:30:cf: 2d:78:8f:69:d1:aa:54:d6:bd:c3:60:57:f7:9a:a8: 52:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:41:CD:8D:10:96:92:01:F0:5F:F9:E6:4C:CF:BB:D7:2D:5E:B6:0F X509v3 Authority Key Identifier: keyid:DE:D9:E8:FD:1D:2D:B8:68:98:58:76:50:26:64:A4:CA:29:89:C2:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Hnn3ReVmrZArAcBs9miuXMwZTic9hRAnF1tgnNNjRJcx/0/DED9E8FD1D2DB868985876502664A4CA2989C2CF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DED9E8FD1D2DB868985876502664A4CA2989C2CF.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hnn3ReVmrZArAcBs9miuXMwZTic9hRAnF1tgnNNjRJcx/0/DED9E8FD1D2DB868985876502664A4CA2989C2CF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption de:0b:45:76:95:c0:d7:65:61:23:5f:e6:b7:1d:de:0f:68:c4: a7:60:ff:9b:eb:b2:62:a6:69:93:a5:bd:55:6a:7c:0f:8f:9c: 64:0a:30:cd:7b:55:e1:a4:e1:5b:d9:fd:c1:4f:eb:4b:b7:9c: dc:52:e0:a1:83:bb:13:4e:e5:e6:e9:1c:34:21:e7:27:e0:9a: 7d:83:fd:15:b1:e5:17:da:b8:26:cc:92:27:f2:5f:1d:4a:f3: c4:4e:a9:3c:7a:01:46:1e:3a:43:2b:2d:5d:0f:47:2a:4b:41: 3b:b7:95:cd:a1:a2:ad:d4:f0:e1:41:72:e3:37:02:b6:f9:74: 84:fd:a4:14:82:4c:38:3a:96:5d:11:7b:a3:9b:9a:74:c4:80: 45:c6:73:1f:37:db:7a:53:8b:c5:c1:07:3f:38:cc:c1:f2:69: e0:25:4d:0c:59:1e:34:07:b3:dd:7f:7b:cb:02:a1:00:d4:16: e5:94:7a:0b:ef:61:b4:57:91:7e:78:12:1c:9d:db:d0:d4:bd: 04:a1:09:65:d2:08:bd:44:d7:74:79:d4:33:77:0e:17:de:34: 2c:65:76:dc:81:95:0f:61:b9:1d:20:30:9a:2e:00:d9:d8:cd: b9:5d:26:51:65:f1:03:c2:1f:b1:f4:a2:3a:21:1c:65:04:3e: d4:b4:6e:cc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUTzYNyf/Ld6Wle0/drcYVk7G7Uv8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREVEOUU4RkQxRDJEQjg2ODk4NTg3NjUwMjY2NEE0Q0Ey OTg5QzJDRjAeFw0yNjAzMDIwNTA2NTVaFw0yNjAzMDMwNzEzNTVaMDMxMTAvBgNV BAMTKDUwNDFDRDhEMTA5NjkyMDFGMDVGRjlFNjRDQ0ZCQkQ3MkQ1RUI2MEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJPxRWnKXk2Ugb0NBSY6luGGKB Ag9N1lWpo5/VJva3XhkQosClKVhGiPPM6IUHZ+WdIO6y4sdyL5jOC1l9Byb+3+i5 Lfk3rBy2DrtQhqODHu4Ipb0MPIQElLJ0EE980Z/sC9wDLLqdNDUPAbYhHN3O/E7T ASjDaWda2Eum022b+D/+SMAUnn2sZ96A2sIJ/SSEnp1Lul5ff8P+OlMaukhdf7jb ih1A9VrgA/+/IsWTMi0hiPOORS4EgfqTMuEMmLUlQjWlF790+zt+2olvxGT+JP71 8rZF18Heew+hzx4+SgJCzxjAX1nFy/PHBoUwzy14j2nRqlTWvcNgV/eaqFIbAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUUEHNjRCWkgHwX/nmTM+71y1etg8wHwYDVR0j BBgwFoAU3tno/R0tuGiYWHZQJmSkyimJws8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSG5uM1JlVm1yWkFyQWNCczltaXVYTXdaVGljOWhSQW5GMXRnbk5OalJK Y3gvMC9ERUQ5RThGRDFEMkRCODY4OTg1ODc2NTAyNjY0QTRDQTI5ODlDMkNGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RFRDlFOEZEMUQyREI4Njg5 ODU4NzY1MDI2NjRBNENBMjk4OUMyQ0YuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SG5uM1JlVm1yWkFyQWNCczltaXVYTXdaVGljOWhSQW5GMXRnbk5OalJKY3gvMC9E RUQ5RThGRDFEMkRCODY4OTg1ODc2NTAyNjY0QTRDQTI5ODlDMkNGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEA3gtFdpXA12VhI1/mtx3eD2jEp2D/m+uyYqZpk6W9VWp8D4+cZAowzXtV4aTh W9n9wU/rS7ec3FLgoYO7E07l5ukcNCHnJ+CafYP9FbHlF9q4JsySJ/JfHUrzxE6p PHoBRh46QystXQ9HKktBO7eVzaGirdTw4UFy4zcCtvl0hP2kFIJMODqWXRF7o5ua dMSARcZzHzfbelOLxcEHPzjMwfJp4CVNDFkeNAez3X97ywKhANQW5ZR6C+9htFeR fngSHJ3b0NS9BKEJZdIIvUTXdHnUM3cOF940LGV23IGVD2G5HSAwmi4A2djNuV0m UWXxA8IfsfSiOiEcZQQ+1LRuzA== -----END CERTIFICATE-----Generated at Mon Mar 2 10:22:06 2026 by rpki-client