$ rpki-client -vvf rpki-repo.registro.br/repo/2CMzwVakW37om5XPSrEQcuPGZ1CQFNzw6yvtmoRSGoLw/0/470AE1EB9714E43320F9D361336505142D7D836B.mft File: 470AE1EB9714E43320F9D361336505142D7D836B.mft (raw, json) Hash identifier: kkzXbU3BLzHXXZfe1GwnjzCGCwxw/ikdJ9oHwym5S7k= Subject key identifier: 84:D7:54:37:6F:46:76:B1:F7:3C:95:A4:98:42:99:75:14:56:B3:8E Authority key identifier: 47:0A:E1:EB:97:14:E4:33:20:F9:D3:61:33:65:05:14:2D:7D:83:6B Certificate issuer: /CN=470AE1EB9714E43320F9D361336505142D7D836B Certificate serial: 5C39220404603F70643B6D73AE588F93779DCB88 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/470AE1EB9714E43320F9D361336505142D7D836B.cer Subject info access: rsync://rpki-repo.registro.br/repo/2CMzwVakW37om5XPSrEQcuPGZ1CQFNzw6yvtmoRSGoLw/0/470AE1EB9714E43320F9D361336505142D7D836B.mft Manifest number: 0173 Signing time: Thu 26 Mar 2026 17:40:15 +0000 Manifest this update: Thu 26 Mar 2026 17:35:15 +0000 Manifest next update: Fri 27 Mar 2026 17:59:15 +0000 Files and hashes: 1: 470AE1EB9714E43320F9D361336505142D7D836B.crl (hash: ytgfnfT2DqPJn7euwW3UU9kAoD0xT/ocGwj4q4apSh4=) 2: 3137372e33392e39362e302f32342d3332203d3e20323731363135.roa (hash: 1vyNuWE5jauLyptTokeHnfrLaNFayN+UWnzSx2Hk+eA=) 3: 3137372e33392e39382e302f32332d3332203d3e20323731363135.roa (hash: BdLrbEU7II3NX1HsAT1F9Ah5WD1IUR9s5CyZjRaEy4Y=) 4: 323830343a376534633a3a2f33322d313238203d3e20323731363135.roa (hash: OdU9UEZt02QpSGkR3fyYMJem0AChe2we0Z/o1VOpO5k=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2CMzwVakW37om5XPSrEQcuPGZ1CQFNzw6yvtmoRSGoLw/0/470AE1EB9714E43320F9D361336505142D7D836B.crl rsync://rpki-repo.registro.br/repo/2CMzwVakW37om5XPSrEQcuPGZ1CQFNzw6yvtmoRSGoLw/0/470AE1EB9714E43320F9D361336505142D7D836B.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/470AE1EB9714E43320F9D361336505142D7D836B.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 27 Mar 2026 17:59:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:39:22:04:04:60:3f:70:64:3b:6d:73:ae:58:8f:93:77:9d:cb:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=470AE1EB9714E43320F9D361336505142D7D836B Validity Not Before: Mar 26 17:35:15 2026 GMT Not After : Mar 27 17:59:15 2026 GMT Subject: CN=84D754376F4676B1F73C95A4984299751456B38E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:cf:a9:8f:12:b1:c4:55:93:ca:45:51:1f:d1: b0:96:d0:77:53:6d:9b:1c:a9:59:de:fd:46:81:b2: e3:68:fb:5d:80:8a:d6:6c:24:a0:cf:5e:56:59:8c: bf:65:f1:33:23:a2:ab:4d:e1:18:1a:16:04:ce:dd: bc:29:be:64:a2:18:ac:3d:3f:e3:ce:26:8c:2e:c8: d4:d8:8d:1b:b6:69:75:61:dc:23:5d:ac:a7:e7:1e: a6:e5:5d:96:33:37:d5:7c:ba:2c:8a:d5:e7:c0:fc: 54:8c:12:0c:aa:68:f9:9a:d5:3d:7f:ab:85:45:1b: f7:de:a0:c0:a8:24:b3:a7:32:38:8b:02:47:97:a5: 59:87:16:24:15:8d:b8:04:ec:46:03:55:0d:82:f0: 67:8f:16:15:9a:fd:76:06:f0:7d:e8:c0:b5:3c:8d: ed:64:b3:1c:71:1c:57:c7:51:48:19:99:71:63:85: 5f:e9:5f:88:dc:c3:42:d2:b4:b1:95:bf:51:b1:69: 9b:64:e8:2c:fe:49:06:10:b7:2b:e6:b9:c9:00:bd: 97:e5:22:9a:a4:0e:12:79:e3:a1:16:c0:59:41:31: 54:78:15:5e:26:fe:ea:5d:cd:fd:d7:78:03:f2:19: a3:ab:57:b7:9d:5a:62:65:9e:38:70:e1:77:b9:2f: 76:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:D7:54:37:6F:46:76:B1:F7:3C:95:A4:98:42:99:75:14:56:B3:8E X509v3 Authority Key Identifier: keyid:47:0A:E1:EB:97:14:E4:33:20:F9:D3:61:33:65:05:14:2D:7D:83:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2CMzwVakW37om5XPSrEQcuPGZ1CQFNzw6yvtmoRSGoLw/0/470AE1EB9714E43320F9D361336505142D7D836B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/470AE1EB9714E43320F9D361336505142D7D836B.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2CMzwVakW37om5XPSrEQcuPGZ1CQFNzw6yvtmoRSGoLw/0/470AE1EB9714E43320F9D361336505142D7D836B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:56:ee:c3:9d:8b:ee:23:67:b6:1d:e3:e5:d8:70:9d:15:1a: ed:db:13:5a:2e:a0:75:57:ff:44:3f:b1:d8:46:8e:58:18:e5: 5f:22:19:7a:ab:c4:c9:8c:67:5b:be:0f:ea:77:81:83:70:2d: 22:4a:a2:ad:d0:bd:3c:d6:22:c2:11:6d:ce:af:dc:ac:79:42: b3:f3:1f:8b:e4:ac:d1:bb:9e:5c:5b:d3:70:b7:8d:8f:9c:35: 70:05:b6:37:9c:35:24:97:4c:1f:af:5c:b8:36:82:f9:3e:4a: 97:07:6c:d0:a9:38:9e:0b:e7:47:fe:9c:6a:d2:1e:37:7c:93: 43:e9:ae:be:8d:42:e5:b9:18:c6:03:ba:66:63:8a:bd:e8:bf: 3c:f9:30:ae:ec:45:d7:5a:c1:5b:88:02:55:3b:b9:3d:1c:b0: cf:38:33:e5:22:a8:70:7e:58:97:db:17:8f:d1:05:55:db:a9: 79:0e:9a:e8:d8:18:eb:6c:4b:a4:ce:a4:f1:d9:8e:3c:73:e6: d7:e3:40:b4:af:fc:97:a4:8e:0c:46:99:da:86:31:48:ef:e2: ef:bf:7b:66:ab:08:f4:f3:c9:dc:6b:7d:6a:b2:9b:3a:2a:c2: 67:41:71:50:b8:c6:51:b2:1e:4b:1e:2f:59:00:5f:00:d5:bb: f4:97:94:73 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUXDkiBARgP3BkO21zrliPk3edy4gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDcwQUUxRUI5NzE0RTQzMzIwRjlEMzYxMzM2NTA1MTQy RDdEODM2QjAeFw0yNjAzMjYxNzM1MTVaFw0yNjAzMjcxNzU5MTVaMDMxMTAvBgNV BAMTKDg0RDc1NDM3NkY0Njc2QjFGNzNDOTVBNDk4NDI5OTc1MTQ1NkIzOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBz6mPErHEVZPKRVEf0bCW0HdT bZscqVne/UaBsuNo+12AitZsJKDPXlZZjL9l8TMjoqtN4RgaFgTO3bwpvmSiGKw9 P+POJowuyNTYjRu2aXVh3CNdrKfnHqblXZYzN9V8uiyK1efA/FSMEgyqaPma1T1/ q4VFG/feoMCoJLOnMjiLAkeXpVmHFiQVjbgE7EYDVQ2C8GePFhWa/XYG8H3owLU8 je1ksxxxHFfHUUgZmXFjhV/pX4jcw0LStLGVv1GxaZtk6Cz+SQYQtyvmuckAvZfl IpqkDhJ546EWwFlBMVR4FV4m/updzf3XeAPyGaOrV7edWmJlnjhw4Xe5L3a/AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUhNdUN29GdrH3PJWkmEKZdRRWs44wHwYDVR0j BBgwFoAURwrh65cU5DMg+dNhM2UFFC19g2swDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMkNNendWYWtXMzdvbTVYUFNyRVFjdVBHWjFDUUZOenc2eXZ0bW9SU0dv THcvMC80NzBBRTFFQjk3MTRFNDMzMjBGOUQzNjEzMzY1MDUxNDJEN0Q4MzZCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ3MEFFMUVCOTcxNEU0MzMy MEY5RDM2MTMzNjUwNTE0MkQ3RDgzNkIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MkNNendWYWtXMzdvbTVYUFNyRVFjdVBHWjFDUUZOenc2eXZ0bW9SU0dvTHcvMC80 NzBBRTFFQjk3MTRFNDMzMjBGOUQzNjEzMzY1MDUxNDJEN0Q4MzZCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEABlbuw52L7iNnth3j5dhwnRUa7dsTWi6gdVf/RD+x2EaOWBjlXyIZeqvEyYxn W74P6neBg3AtIkqirdC9PNYiwhFtzq/crHlCs/Mfi+Ss0bueXFvTcLeNj5w1cAW2 N5w1JJdMH69cuDaC+T5Klwds0Kk4ngvnR/6catIeN3yTQ+muvo1C5bkYxgO6ZmOK vei/PPkwruxF11rBW4gCVTu5PRywzzgz5SKocH5Yl9sXj9EFVdupeQ6a6NgY62xL pM6k8dmOPHPm1+NAtK/8l6SODEaZ2oYxSO/i7797ZqsI9PPJ3Gt9arKbOirCZ0Fx ULjGUbIeSx4vWQBfANW79JeUcw== -----END CERTIFICATE-----Generated at Fri Mar 27 00:45:17 2026 by rpki-client