$ rpki-client -vvf rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.mft File: 2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.mft (raw, json) Hash identifier: LmlcOCtoT/8iwVQyvPFVVJCxv7b1jibDUUVkVtQopZ4= Subject key identifier: 02:14:24:F0:2E:AF:6C:5D:72:86:5A:34:40:41:8E:88:B4:64:EC:84 Authority key identifier: 2D:0D:14:8B:DF:2E:D4:FB:DB:EB:80:DB:1E:B3:77:EA:A3:64:3F:94 Certificate issuer: /CN=2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94 Certificate serial: 4DB568AE00C1EC8C7C5D4A1CAEED0D73180FAA3D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.cer Subject info access: rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.mft Manifest number: 041D Signing time: Sun 01 Mar 2026 12:42:46 +0000 Manifest this update: Sun 01 Mar 2026 12:37:46 +0000 Manifest next update: Mon 02 Mar 2026 13:04:46 +0000 Files and hashes: 1: 3137372e3133372e3230382e302f32302d3332203d3e20323633303837.roa (hash: lsPfySBrQRokkFGPXoHfXtf83HsA13dTki6xitZ2OTw=) 2: 3137392e3130392e3136302e302f32302d3332203d3e20323633303837.roa (hash: XRhfslxEoTNm+hxIZ2x4tmw31Lm059fbAltLDLKYMTE=) 3: 323830343a3937383a3a2f33322d313238203d3e20323633303837.roa (hash: G/FFJ7H4y3UmSNdQvjTb1QYjVB9bKR8OycW7xU2KFuI=) 4: 2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.crl (hash: J3mwSTwOaYc7fJqJdECbZN4nZHtyipJ65XSrLzQz+rQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.crl rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 02 Mar 2026 13:04:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:b5:68:ae:00:c1:ec:8c:7c:5d:4a:1c:ae:ed:0d:73:18:0f:aa:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94 Validity Not Before: Mar 1 12:37:46 2026 GMT Not After : Mar 2 13:04:46 2026 GMT Subject: CN=021424F02EAF6C5D72865A3440418E88B464EC84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:f4:04:22:9b:94:7b:9c:0a:a1:97:ba:f2:6d: 44:fb:ba:c8:99:f0:1e:f6:13:9c:cf:a8:aa:72:82: ee:8d:38:1a:07:48:84:9b:eb:4d:f7:a1:53:b3:ff: 1d:33:10:e6:06:09:8f:3e:22:c6:14:e7:bf:e1:d8: 46:55:af:1a:9c:f4:d9:e9:52:87:4f:91:82:d9:4f: 8e:e3:36:76:11:f0:33:90:fc:e7:de:81:26:87:f7: d8:7f:46:71:26:f6:72:e1:38:c6:f2:f3:89:9b:24: cb:03:2e:2b:86:30:56:06:d1:0d:a7:d3:b7:4e:2d: 2a:b9:c5:c6:dd:30:4a:a1:da:37:23:54:49:10:f0: f4:55:3b:83:4b:0f:0d:64:e4:75:03:7b:09:89:2a: 19:40:9d:f0:d6:90:6a:f0:a2:20:1f:f8:77:12:60: e6:05:e7:76:69:be:1e:07:8a:d8:9e:e6:5b:56:76: f8:93:b5:1d:29:8d:6f:9e:a2:a2:76:65:71:10:f8: c0:e8:d9:50:6d:d9:3d:30:8c:af:f8:aa:7a:98:6f: dd:90:6b:ca:e6:49:e8:7b:49:53:44:4a:bb:9a:5c: 68:0e:e1:a6:86:b8:39:52:d3:d9:ab:7d:8a:86:22: 19:e8:a9:6b:6c:91:68:4c:58:c1:49:81:89:3e:10: 34:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:14:24:F0:2E:AF:6C:5D:72:86:5A:34:40:41:8E:88:B4:64:EC:84 X509v3 Authority Key Identifier: keyid:2D:0D:14:8B:DF:2E:D4:FB:DB:EB:80:DB:1E:B3:77:EA:A3:64:3F:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:14:50:2a:13:91:a2:b3:a1:17:3a:b9:e4:e1:e9:b4:ed:10: 0e:3d:66:82:41:93:99:04:5a:67:2f:4f:14:16:17:1e:ed:b9: a0:70:22:ac:33:7d:c3:b5:15:eb:37:08:c4:1d:6f:a2:61:55: 39:cc:3d:64:8f:41:aa:36:fa:3b:7a:a9:02:bc:a1:bb:26:92: d6:df:ea:1c:5c:8b:c4:df:0c:25:45:3d:1b:4c:e2:b1:e5:e6: 89:0d:20:a8:2b:b4:5d:cc:04:37:98:b8:83:f8:4a:18:eb:5c: 1f:6c:89:c6:39:7e:ed:f3:93:22:19:3b:c7:8a:6c:48:24:77: ea:fe:a6:7d:ef:7a:c6:70:93:ad:22:2e:4f:0e:b1:2a:dc:23: 6e:2d:f6:23:fd:9f:f9:2a:39:7f:61:01:28:9f:a3:9b:08:46: c1:33:28:9d:e0:21:82:c5:d7:26:93:4e:ce:30:83:78:32:27: 3c:0c:e2:81:93:c7:c6:90:c6:32:6f:f8:63:8a:7f:ad:36:0a: ab:ef:16:77:c7:ae:ff:4c:65:0b:24:1f:b4:72:3e:25:37:0c: de:9f:f0:11:af:57:46:78:e3:58:ef:45:a7:2d:42:5d:88:30: c1:36:f4:ad:db:8d:92:c1:12:7c:a6:15:ab:b0:3f:0d:2d:7a: ac:60:bf:cf -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUTbVorgDB7Ix8XUocru0NcxgPqj0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQwRDE0OEJERjJFRDRGQkRCRUI4MERCMUVCMzc3RUFB MzY0M0Y5NDAeFw0yNjAzMDExMjM3NDZaFw0yNjAzMDIxMzA0NDZaMDMxMTAvBgNV BAMTKDAyMTQyNEYwMkVBRjZDNUQ3Mjg2NUEzNDQwNDE4RTg4QjQ2NEVDODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD29AQim5R7nAqhl7rybUT7usiZ 8B72E5zPqKpygu6NOBoHSISb6033oVOz/x0zEOYGCY8+IsYU57/h2EZVrxqc9Nnp UodPkYLZT47jNnYR8DOQ/OfegSaH99h/RnEm9nLhOMby84mbJMsDLiuGMFYG0Q2n 07dOLSq5xcbdMEqh2jcjVEkQ8PRVO4NLDw1k5HUDewmJKhlAnfDWkGrwoiAf+HcS YOYF53Zpvh4Hitie5ltWdviTtR0pjW+eoqJ2ZXEQ+MDo2VBt2T0wjK/4qnqYb92Q a8rmSeh7SVNESruaXGgO4aaGuDlS09mrfYqGIhnoqWtskWhMWMFJgYk+EDS3AgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUAhQk8C6vbF1yhlo0QEGOiLRk7IQwHwYDVR0j BBgwFoAULQ0Ui98u1Pvb64DbHrN36qNkP5QwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9LRmU5RkczYXhIWm81R2VIRjNmRkZibVdDMTU3dTVuY1RXZGM2WUFxVm1C LzAvMkQwRDE0OEJERjJFRDRGQkRCRUI4MERCMUVCMzc3RUFBMzY0M0Y5NC5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8yRDBEMTQ4QkRGMkVENEZCREJF QjgwREIxRUIzNzdFQUEzNjQzRjk0LmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0tG ZTlGRzNheEhabzVHZUhGM2ZGRmJtV0MxNTd1NW5jVFdkYzZZQXFWbUIvMC8yRDBE MTQ4QkRGMkVENEZCREJFQjgwREIxRUIzNzdFQUEzNjQzRjk0Lm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA nRRQKhORorOhFzq55OHptO0QDj1mgkGTmQRaZy9PFBYXHu25oHAirDN9w7UV6zcI xB1vomFVOcw9ZI9Bqjb6O3qpAryhuyaS1t/qHFyLxN8MJUU9G0ziseXmiQ0gqCu0 XcwEN5i4g/hKGOtcH2yJxjl+7fOTIhk7x4psSCR36v6mfe96xnCTrSIuTw6xKtwj bi32I/2f+So5f2EBKJ+jmwhGwTMoneAhgsXXJpNOzjCDeDInPAzigZPHxpDGMm/4 Y4p/rTYKq+8Wd8eu/0xlCyQftHI+JTcM3p/wEa9XRnjjWO9Fpy1CXYgwwTb0rduN ksESfKYVq7A/DS16rGC/zw== -----END CERTIFICATE-----Generated at Sun Mar 1 22:44:34 2026 by rpki-client