$ rpki-client -vvf rpki-repo.registro.br/repo/fSudM4EMwKHEw9w5iuppyaniE4UEeTe3zAiPrGsxLCY/0/1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822.mft File: 1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822.mft (raw, json) Hash identifier: aMAHTaELUqcgYAeVrhBFy7HQMWFJ3v2cGXeoYMjF5yI= Subject key identifier: 51:52:31:3F:3D:22:10:C8:E3:68:E3:0C:76:66:92:00:40:60:B3:04 Authority key identifier: 1A:9F:A3:7F:39:AE:1F:F5:54:22:CD:1E:A4:DD:C2:2C:7B:D3:A8:22 Certificate issuer: /CN=1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822 Certificate serial: 1D5BC05924F91FE6F44E395683CF8B0936CC24C3 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822.cer Subject info access: rsync://rpki-repo.registro.br/repo/fSudM4EMwKHEw9w5iuppyaniE4UEeTe3zAiPrGsxLCY/0/1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822.mft Manifest number: 0304 Signing time: Sun 01 Mar 2026 17:30:09 +0000 Manifest this update: Sun 01 Mar 2026 17:25:09 +0000 Manifest next update: Mon 02 Mar 2026 19:06:09 +0000 Files and hashes: 1: 3138362e3233332e3231362e302f32322d3332203d3e20323633303835.roa (hash: PmbAUkUTs5Q/iqhBLo3baohkXrtjqFpyLdaX9yDXwCU=) 2: 3134332e3230322e3138382e302f32322d3332203d3e20323633303835.roa (hash: qVNRJ2a+cClLtMLaZjQAdZ5dHXHXN/VmcqEwBxCBPig=) 3: 1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822.crl (hash: MweOpH6kkp8cNH2DDXzTkdUZDulqpf0VfvansIC7+cI=) 4: 323830343a3936633a3a2f33322d3332203d3e20323633303835.roa (hash: yfYQFGEPfpIaz9q6MsF2wbPrq5WbyG9gA+FrZE8hhOE=) 5: 323830343a3936633a363430303a3a2f34302d3430203d3e20323633303835.roa (hash: 52huXuVGIt+pjgM9LTH0dEdhFFUOrYBxuDBGKi6kYYk=) 6: 3230302e3233332e33362e302f32322d3332203d3e20323633303835.roa (hash: BGbb/zOEduZEwJ5taF3w2NYPUpXFQ6mSEafjuDNKgOU=) 7: 323830343a3936633a383830303a3a2f34302d3430203d3e20323633303835.roa (hash: m3ls13XwMMeaUU0wgwEDdQpbhiGR1d07fgmlhjZjmcs=) 8: 323830343a3936633a363330303a3a2f34302d3430203d3e20323633303835.roa (hash: cy03UHaQfqom7bstU3w2b656/ZgUkji+2LkvIZylFA0=) 9: 323830343a3936633a383930303a3a2f34302d3430203d3e20323633303835.roa (hash: fAXn6GA+/V91XTLCQkUNO9fS3hjHpQ6K9P+U0GoI5Uw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/fSudM4EMwKHEw9w5iuppyaniE4UEeTe3zAiPrGsxLCY/0/1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822.crl rsync://rpki-repo.registro.br/repo/fSudM4EMwKHEw9w5iuppyaniE4UEeTe3zAiPrGsxLCY/0/1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 02 Mar 2026 19:06:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:5b:c0:59:24:f9:1f:e6:f4:4e:39:56:83:cf:8b:09:36:cc:24:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822 Validity Not Before: Mar 1 17:25:09 2026 GMT Not After : Mar 2 19:06:09 2026 GMT Subject: CN=5152313F3D2210C8E368E30C766692004060B304 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:bd:19:36:3b:66:11:f9:ea:33:ed:3f:a0:c7: 9d:81:e2:4f:c7:7d:01:95:07:d1:2b:4c:39:73:de: f0:d9:69:19:d8:31:89:1b:8e:21:dc:fc:36:0f:c8: a0:e6:88:e3:ba:c0:b0:96:57:09:45:c1:da:8f:83: a0:ce:99:cf:72:1e:37:48:9a:88:a9:6d:1c:cb:97: 06:f7:fb:16:16:36:79:e2:7c:88:e5:44:13:fc:d0: 02:6c:d6:ee:b3:11:9c:2c:48:ac:cb:e9:43:cc:5e: c2:87:61:f8:58:09:1c:0b:e6:e1:95:f8:ba:40:37: 04:db:1e:16:81:75:2e:cd:60:2b:2f:d2:b5:52:09: b9:41:69:45:bb:0d:41:23:89:03:6f:d2:7c:4f:79: fa:3c:82:6d:15:b1:57:5d:db:ad:d0:c6:bd:e2:68: cb:65:68:30:3f:e6:36:b3:1d:2d:c0:36:49:5b:8c: d4:92:85:50:6c:26:37:bf:52:c9:60:71:e6:fe:8f: 39:8b:b8:22:d2:2f:22:55:31:25:75:c0:fc:52:fb: 90:4a:15:23:fb:70:a0:74:4d:4b:e2:41:9d:89:4d: 15:42:c4:0d:ff:98:2e:c1:73:24:27:56:49:4b:be: c1:e5:bc:c0:a1:3d:27:08:7a:07:85:2b:7f:69:ca: 92:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:52:31:3F:3D:22:10:C8:E3:68:E3:0C:76:66:92:00:40:60:B3:04 X509v3 Authority Key Identifier: keyid:1A:9F:A3:7F:39:AE:1F:F5:54:22:CD:1E:A4:DD:C2:2C:7B:D3:A8:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/fSudM4EMwKHEw9w5iuppyaniE4UEeTe3zAiPrGsxLCY/0/1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/fSudM4EMwKHEw9w5iuppyaniE4UEeTe3zAiPrGsxLCY/0/1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:90:f6:8e:1a:6b:51:59:a0:83:65:c5:f2:6e:ac:03:27:79: b4:3a:42:94:c7:dc:48:6c:fb:22:dd:bf:5c:c0:a3:eb:4a:40: b5:60:24:a4:4e:0f:a2:71:98:e6:5d:1b:c0:db:f7:f6:4c:56: fb:7d:86:26:8b:5f:c2:fe:ce:68:12:f0:7f:83:11:17:27:fb: 25:38:d8:78:7d:5a:1c:3f:07:7a:b9:05:6c:ee:17:d9:73:90: a4:07:f9:fc:63:34:01:da:bd:a3:a4:04:4c:ae:ff:3b:2e:3e: 43:59:e3:1d:50:2e:fe:42:5c:0d:28:a0:25:4c:75:44:fb:66: 34:d3:73:8c:0c:d2:15:87:89:c2:d1:aa:54:03:e1:e8:dc:68: e4:f7:b7:a9:96:6b:f2:3f:d2:23:f8:65:25:cf:1c:6a:bf:7d: 9f:44:6e:a9:63:1b:93:d3:30:e3:da:8f:65:fc:ce:bf:da:29: 00:17:e8:26:60:c2:37:40:72:f6:88:33:e0:d3:bc:12:4f:10: c0:b6:8b:1d:c5:ab:b1:04:d2:99:74:8f:71:08:bb:fb:8b:1c: 4e:04:73:5e:e0:cb:42:00:33:37:7f:67:a1:de:95:b4:2e:a6: e6:97:62:79:4a:6c:6a:05:b1:39:a3:55:50:46:0b:7d:8f:b6: 1a:7f:10:37 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUHVvAWST5H+b0TjlWg8+LCTbMJMMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE5RkEzN0YzOUFFMUZGNTU0MjJDRDFFQTREREMyMkM3 QkQzQTgyMjAeFw0yNjAzMDExNzI1MDlaFw0yNjAzMDIxOTA2MDlaMDMxMTAvBgNV BAMTKDUxNTIzMTNGM0QyMjEwQzhFMzY4RTMwQzc2NjY5MjAwNDA2MEIzMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMvRk2O2YR+eoz7T+gx52B4k/H fQGVB9ErTDlz3vDZaRnYMYkbjiHc/DYPyKDmiOO6wLCWVwlFwdqPg6DOmc9yHjdI moipbRzLlwb3+xYWNnnifIjlRBP80AJs1u6zEZwsSKzL6UPMXsKHYfhYCRwL5uGV +LpANwTbHhaBdS7NYCsv0rVSCblBaUW7DUEjiQNv0nxPefo8gm0VsVdd263Qxr3i aMtlaDA/5jazHS3ANklbjNSShVBsJje/Uslgceb+jzmLuCLSLyJVMSV1wPxS+5BK FSP7cKB0TUviQZ2JTRVCxA3/mC7BcyQnVklLvsHlvMChPScIegeFK39pypK1AgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUUVIxPz0iEMjjaOMMdmaSAEBgswQwHwYDVR0j BBgwFoAUGp+jfzmuH/VUIs0epN3CLHvTqCIwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9mU3VkTTRFTXdLSEV3OXc1aXVwcHlhbmlFNFVFZVRlM3pBaVByR3N4TENZ LzAvMUE5RkEzN0YzOUFFMUZGNTU0MjJDRDFFQTREREMyMkM3QkQzQTgyMi5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8xQTlGQTM3RjM5QUUxRkY1NTQy MkNEMUVBNEREQzIyQzdCRDNBODIyLmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL2ZT dWRNNEVNd0tIRXc5dzVpdXBweWFuaUU0VUVlVGUzekFpUHJHc3hMQ1kvMC8xQTlG QTM3RjM5QUUxRkY1NTQyMkNEMUVBNEREQzIyQzdCRDNBODIyLm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA yJD2jhprUVmgg2XF8m6sAyd5tDpClMfcSGz7It2/XMCj60pAtWAkpE4PonGY5l0b wNv39kxW+32GJotfwv7OaBLwf4MRFyf7JTjYeH1aHD8HerkFbO4X2XOQpAf5/GM0 Adq9o6QETK7/Oy4+Q1njHVAu/kJcDSigJUx1RPtmNNNzjAzSFYeJwtGqVAPh6Nxo 5Pe3qZZr8j/SI/hlJc8car99n0RuqWMbk9Mw49qPZfzOv9opABfoJmDCN0By9ogz 4NO8Ek8QwLaLHcWrsQTSmXSPcQi7+4scTgRzXuDLQgAzN39nod6VtC6m5pdieUps agWxOaNVUEYLfY+2Gn8QNw== -----END CERTIFICATE-----Generated at Sun Mar 1 21:16:22 2026 by rpki-client