$ rpki-client -vvf rpki-repo.registro.br/repo/kyWpGA2vP9UEDYfVNXwDktBCNDgsTRrJkxzQ5Bjm237/2/67A81E20D9B7972AADDB1C394778320F56BE023B.mft File: 67A81E20D9B7972AADDB1C394778320F56BE023B.mft (raw, json) Hash identifier: 7r8Oy5Ryce3kyzWSdgKmB/+/gVu2vz+zGovp+QWnOlw= Subject key identifier: 52:AF:A8:72:C9:56:6A:BB:AA:EA:1B:96:91:9E:B1:03:60:4B:BF:FB Authority key identifier: 67:A8:1E:20:D9:B7:97:2A:AD:DB:1C:39:47:78:32:0F:56:BE:02:3B Certificate issuer: /CN=67A81E20D9B7972AADDB1C394778320F56BE023B Certificate serial: 4CF534022ED2AF85390F4DD2EDA41D2DDBF5A05D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67A81E20D9B7972AADDB1C394778320F56BE023B.cer Subject info access: rsync://rpki-repo.registro.br/repo/kyWpGA2vP9UEDYfVNXwDktBCNDgsTRrJkxzQ5Bjm237/2/67A81E20D9B7972AADDB1C394778320F56BE023B.mft Manifest number: 0175 Signing time: Mon 02 Mar 2026 13:40:22 +0000 Manifest this update: Mon 02 Mar 2026 13:35:22 +0000 Manifest next update: Tue 03 Mar 2026 17:15:22 +0000 Files and hashes: 1: 67A81E20D9B7972AADDB1C394778320F56BE023B.crl (hash: 0VGkxz0GApfdoHdXOGhSoE274emjRb2OFVkNVBe2Q0k=) 2: 34352e3137312e3138392e302f32342d3234203d3e203533313037.roa (hash: ZfM83HfKeKzzsIlJvLRkpTey+TNllfkHWy25NrM+coc=) 3: 34352e3137312e3138392e302f32342d3234203d3e20323638373237.roa (hash: +UFS2xAxUtJTPsgIN5GML3ACDJRqNmPSE3oSqnNkiJQ=) 4: 34352e3137312e3138382e302f32342d3234203d3e20323638373237.roa (hash: WoMHGLPz9m8WHyv/c8eqB/ZBTGVzLYTCYHFQS4BRiVA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/kyWpGA2vP9UEDYfVNXwDktBCNDgsTRrJkxzQ5Bjm237/2/67A81E20D9B7972AADDB1C394778320F56BE023B.crl rsync://rpki-repo.registro.br/repo/kyWpGA2vP9UEDYfVNXwDktBCNDgsTRrJkxzQ5Bjm237/2/67A81E20D9B7972AADDB1C394778320F56BE023B.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67A81E20D9B7972AADDB1C394778320F56BE023B.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 03 Mar 2026 17:03:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:f5:34:02:2e:d2:af:85:39:0f:4d:d2:ed:a4:1d:2d:db:f5:a0:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67A81E20D9B7972AADDB1C394778320F56BE023B Validity Not Before: Mar 2 13:35:22 2026 GMT Not After : Mar 3 17:15:22 2026 GMT Subject: CN=52AFA872C9566ABBAAEA1B96919EB103604BBFFB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:57:b5:bf:11:3d:2c:71:98:76:91:2a:9b:d0: bd:59:c5:8d:1a:bf:92:a9:02:fc:71:eb:0a:9d:54: 55:4a:c2:2d:d0:b9:96:de:ee:e5:ce:f4:c2:b3:92: 75:77:1d:34:d8:72:e7:7b:fe:f4:bf:43:f6:fa:4d: 86:ad:80:fb:08:29:86:c4:cf:cd:6e:e5:8a:6f:19: 88:18:50:ce:07:33:e6:51:cd:cb:3f:38:1b:22:5e: 0a:34:2f:5a:ce:62:ba:9d:d5:8c:da:05:d5:8e:d9: 01:7f:9c:49:70:12:4e:36:7a:a7:0a:63:41:11:52: 5f:88:0e:ad:82:07:6b:4c:a4:f9:62:09:d0:7f:88: 73:2a:32:3a:a2:5d:eb:db:06:22:11:cf:4f:21:aa: a2:57:34:62:96:96:2e:c9:46:73:54:be:73:1c:66: 39:f3:34:a3:59:c8:9a:63:ac:a2:3b:7e:32:d1:db: de:16:5e:9c:90:00:ee:a7:a1:ba:88:09:93:c8:79: 64:43:4d:7c:be:0e:24:ed:8d:d1:fb:4a:94:ca:c1: df:76:15:ad:91:dc:ad:38:0e:ad:b3:02:c4:11:b2: 6c:4c:b9:0a:b8:dd:66:cf:84:64:02:dc:92:a7:b0: 2f:38:e6:39:d6:e2:2b:e1:5a:5e:6e:8d:d6:b3:87: 9d:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:AF:A8:72:C9:56:6A:BB:AA:EA:1B:96:91:9E:B1:03:60:4B:BF:FB X509v3 Authority Key Identifier: keyid:67:A8:1E:20:D9:B7:97:2A:AD:DB:1C:39:47:78:32:0F:56:BE:02:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/kyWpGA2vP9UEDYfVNXwDktBCNDgsTRrJkxzQ5Bjm237/2/67A81E20D9B7972AADDB1C394778320F56BE023B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67A81E20D9B7972AADDB1C394778320F56BE023B.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/kyWpGA2vP9UEDYfVNXwDktBCNDgsTRrJkxzQ5Bjm237/2/67A81E20D9B7972AADDB1C394778320F56BE023B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:63:5a:10:69:38:8f:4d:40:bd:3d:cd:2d:c9:13:3a:7a:7a: d7:df:f2:bb:8f:02:01:51:1c:81:76:3f:20:c5:f4:22:76:36: 31:51:50:e3:0c:bd:79:c0:94:22:d7:7b:88:36:dc:25:3e:d2: e8:35:be:ee:df:ff:e2:44:dc:af:10:6b:57:1d:3d:96:bb:67: 38:ff:14:ef:88:49:d6:03:95:1c:64:ca:b9:d6:dc:1d:2e:c0: f9:0e:69:b2:72:9a:6e:77:e8:e7:12:4a:d4:6e:b9:0a:98:76: 95:24:ed:eb:ac:59:ad:36:ad:90:06:91:4b:80:ea:93:32:69: f1:f6:bc:07:87:d1:75:b9:0e:0f:e0:f5:2a:b1:18:03:24:99: e6:76:39:d2:3b:77:8e:f5:51:6f:70:70:32:56:80:e8:df:6e: 8e:e0:62:ee:7c:b8:94:6f:e7:53:06:c7:f7:77:5c:ec:a0:9c: cd:9b:33:10:54:da:d0:c3:94:6f:b6:ac:50:da:ff:20:64:78: c3:c5:56:25:8c:b0:57:39:8c:94:5e:9c:32:86:9f:5a:d4:4f: cf:60:10:b0:80:fa:53:66:65:ec:6a:50:be:d8:07:d6:23:a4: b4:68:53:42:0c:34:ed:bb:4f:05:5f:7d:cf:4a:a0:ff:5b:ff: 1d:65:84:24 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUTPU0Ai7Sr4U5D03S7aQdLdv1oF0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjdBODFFMjBEOUI3OTcyQUFEREIxQzM5NDc3ODMyMEY1 NkJFMDIzQjAeFw0yNjAzMDIxMzM1MjJaFw0yNjAzMDMxNzE1MjJaMDMxMTAvBgNV BAMTKDUyQUZBODcyQzk1NjZBQkJBQUVBMUI5NjkxOUVCMTAzNjA0QkJGRkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkV7W/ET0scZh2kSqb0L1ZxY0a v5KpAvxx6wqdVFVKwi3QuZbe7uXO9MKzknV3HTTYcud7/vS/Q/b6TYatgPsIKYbE z81u5YpvGYgYUM4HM+ZRzcs/OBsiXgo0L1rOYrqd1YzaBdWO2QF/nElwEk42eqcK Y0ERUl+IDq2CB2tMpPliCdB/iHMqMjqiXevbBiIRz08hqqJXNGKWli7JRnNUvnMc ZjnzNKNZyJpjrKI7fjLR294WXpyQAO6nobqICZPIeWRDTXy+DiTtjdH7SpTKwd92 Fa2R3K04Dq2zAsQRsmxMuQq43WbPhGQC3JKnsC845jnW4ivhWl5ujdazh50BAgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUUq+ocslWaruq6huWkZ6xA2BLv/swHwYDVR0j BBgwFoAUZ6geINm3lyqt2xw5R3gyD1a+AjswDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9reVdwR0EydlA5VUVEWWZWTlh3RGt0QkNORGdzVFJySmt4elE1QmptMjM3 LzIvNjdBODFFMjBEOUI3OTcyQUFEREIxQzM5NDc3ODMyMEY1NkJFMDIzQi5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS82N0E4MUUyMEQ5Qjc5NzJBQURE QjFDMzk0Nzc4MzIwRjU2QkUwMjNCLmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL2t5 V3BHQTJ2UDlVRURZZlZOWHdEa3RCQ05EZ3NUUnJKa3h6UTVCam0yMzcvMi82N0E4 MUUyMEQ5Qjc5NzJBQUREQjFDMzk0Nzc4MzIwRjU2QkUwMjNCLm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA mmNaEGk4j01AvT3NLckTOnp619/yu48CAVEcgXY/IMX0InY2MVFQ4wy9ecCUItd7 iDbcJT7S6DW+7t//4kTcrxBrVx09lrtnOP8U74hJ1gOVHGTKudbcHS7A+Q5psnKa bnfo5xJK1G65Cph2lSTt66xZrTatkAaRS4DqkzJp8fa8B4fRdbkOD+D1KrEYAySZ 5nY50jt3jvVRb3BwMlaA6N9ujuBi7ny4lG/nUwbH93dc7KCczZszEFTa0MOUb7as UNr/IGR4w8VWJYywVzmMlF6cMoafWtRPz2AQsID6U2Zl7GpQvtgH1iOktGhTQgw0 7btPBV99z0qg/1v/HWWEJA== -----END CERTIFICATE-----Generated at Mon Mar 2 16:15:11 2026 by rpki-client