$ rpki-client -vvf rpki-repo.registro.br/repo/2aPCngLkcLockrANsKXuutUoNrd4No5DVx63BfhCL6MG/0/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.mft File: 9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.mft (raw, json) Hash identifier: 40fIkPMngpo1BEmE0qQLrfSifhh3yRgDgl8eP8yj/98= Subject key identifier: CF:A3:EC:BF:A2:EB:58:E7:89:B9:F6:80:48:50:05:EA:EA:67:B6:50 Authority key identifier: 9D:4F:99:C5:0B:CE:62:2C:25:F6:CF:40:83:B3:CB:E3:64:C8:BA:1D Certificate issuer: /CN=9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D Certificate serial: 6B1B7F7A2ECB3C5FA4BC041A1EB8B75F76C0BCE3 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.cer Subject info access: rsync://rpki-repo.registro.br/repo/2aPCngLkcLockrANsKXuutUoNrd4No5DVx63BfhCL6MG/0/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.mft Manifest number: 026A Signing time: Thu 26 Mar 2026 10:01:46 +0000 Manifest this update: Thu 26 Mar 2026 09:56:46 +0000 Manifest next update: Fri 27 Mar 2026 13:35:46 +0000 Files and hashes: 1: 323830343a363861383a3a2f33322d313238203d3e20323639373037.roa (hash: rBkVsA9Vp1/erFkNnm/hXpS9EC37BBs3SUgY7oXf1XU=) 2: 9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.crl (hash: Fy9vH8oTClbkCnWi8oEVNCmnE708ZirN4imWj4/BlmM=) 3: 34352e3139312e3136302e302f32322d3332203d3e20323639373037.roa (hash: SxT4+8bwDyslr/ELPBveI7psEIHeQZ+ahxmv2aAsD38=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2aPCngLkcLockrANsKXuutUoNrd4No5DVx63BfhCL6MG/0/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.crl rsync://rpki-repo.registro.br/repo/2aPCngLkcLockrANsKXuutUoNrd4No5DVx63BfhCL6MG/0/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 27 Mar 2026 13:35:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:1b:7f:7a:2e:cb:3c:5f:a4:bc:04:1a:1e:b8:b7:5f:76:c0:bc:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D Validity Not Before: Mar 26 09:56:46 2026 GMT Not After : Mar 27 13:35:46 2026 GMT Subject: CN=CFA3ECBFA2EB58E789B9F680485005EAEA67B650 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:8c:2a:94:84:27:d4:09:70:f6:aa:92:50:98: 09:fd:83:40:c2:38:12:1b:83:49:8f:05:93:6a:90: f0:bc:43:82:39:3a:40:67:16:5c:dc:6c:c8:d3:44: 99:6a:5a:bc:fc:7b:14:4c:71:e8:9d:bf:2e:87:22: 9b:76:8d:49:c5:06:82:24:40:c3:63:ee:20:5d:4a: 64:af:49:88:af:80:e8:e1:21:50:f4:6d:9f:5d:36: 5f:4e:61:9f:a1:f6:0b:9c:a3:5c:aa:eb:71:3d:df: f6:ab:0c:4b:56:b2:17:09:cb:2d:55:b3:7e:b4:cb: d4:60:c6:6d:68:2c:99:22:46:07:03:dc:8f:e8:a0: 07:61:a7:e6:45:ab:bf:fe:29:e1:25:bc:6d:6f:db: 2b:2c:0a:23:c5:1b:e3:c2:18:96:23:e7:eb:9a:50: f3:57:7e:3a:4a:00:fd:07:1b:a3:81:57:53:7d:80: fd:b5:d6:8d:f1:df:e7:9e:b9:ff:a7:c6:c3:fe:92: d9:75:3f:6f:6d:f7:d8:b4:62:78:c8:b0:e3:2f:01: 73:73:98:37:79:e3:9c:aa:95:4f:e0:7d:42:21:d7: 1b:1d:f8:19:29:60:51:fc:d1:90:01:7e:8a:dc:42: ea:ba:c7:6d:34:09:7d:fe:57:e4:69:64:8c:0e:30: 51:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:A3:EC:BF:A2:EB:58:E7:89:B9:F6:80:48:50:05:EA:EA:67:B6:50 X509v3 Authority Key Identifier: keyid:9D:4F:99:C5:0B:CE:62:2C:25:F6:CF:40:83:B3:CB:E3:64:C8:BA:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2aPCngLkcLockrANsKXuutUoNrd4No5DVx63BfhCL6MG/0/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2aPCngLkcLockrANsKXuutUoNrd4No5DVx63BfhCL6MG/0/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:a2:0c:d0:cd:27:29:c3:c3:2c:81:c8:1b:e4:c5:41:8f:7b: 5a:6d:dd:ac:7d:8d:48:fa:23:14:db:c0:16:4e:a0:c5:03:0d: d7:96:74:6a:03:bb:7a:bd:10:e2:52:db:b6:f6:05:de:fd:dd: c7:3c:c9:03:79:23:38:d8:0c:f9:cb:ea:c1:02:73:90:96:b2: d6:13:28:18:b2:ea:05:53:9e:6b:6e:c7:e9:e2:d7:e6:61:5f: da:14:49:a3:e6:26:61:9d:f0:f9:5a:cc:97:4c:99:1a:89:f4: 69:4e:2a:dd:d1:fd:c5:db:0d:e6:66:d4:1d:79:40:f4:52:6f: 7e:34:a0:44:f6:1c:3f:3e:81:1b:d0:f8:b8:02:04:5f:85:fa: 1b:87:d4:f1:01:4b:0f:2f:d6:7d:8c:fb:6d:5a:ca:26:4b:d6: b7:4c:be:84:f8:c0:30:13:83:e5:d0:9a:14:7c:bb:a5:fc:73: 37:9f:f7:5f:f7:cf:f1:f9:c8:6b:e3:66:bb:24:93:f2:c9:92: be:0a:1a:e4:b5:22:a1:bb:d6:8d:ac:be:c5:dc:e3:fc:fc:be: 49:f5:29:71:1f:18:a4:38:b9:a2:c5:04:05:6c:7b:40:39:0d: d6:ca:ca:e9:8e:62:d9:d9:93:c5:15:f3:e5:40:8e:57:4a:c9: 43:ad:2a:79 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUaxt/ei7LPF+kvAQaHri3X3bAvOMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQ0Rjk5QzUwQkNFNjIyQzI1RjZDRjQwODNCM0NCRTM2 NEM4QkExRDAeFw0yNjAzMjYwOTU2NDZaFw0yNjAzMjcxMzM1NDZaMDMxMTAvBgNV BAMTKENGQTNFQ0JGQTJFQjU4RTc4OUI5RjY4MDQ4NTAwNUVBRUE2N0I2NTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSjCqUhCfUCXD2qpJQmAn9g0DC OBIbg0mPBZNqkPC8Q4I5OkBnFlzcbMjTRJlqWrz8exRMceidvy6HIpt2jUnFBoIk QMNj7iBdSmSvSYivgOjhIVD0bZ9dNl9OYZ+h9guco1yq63E93/arDEtWshcJyy1V s360y9Rgxm1oLJkiRgcD3I/ooAdhp+ZFq7/+KeElvG1v2yssCiPFG+PCGJYj5+ua UPNXfjpKAP0HG6OBV1N9gP211o3x3+eeuf+nxsP+ktl1P29t99i0YnjIsOMvAXNz mDd545yqlU/gfUIh1xsd+BkpYFH80ZABforcQuq6x200CX3+V+RpZIwOMFGLAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUz6Psv6LrWOeJufaASFAF6upntlAwHwYDVR0j BBgwFoAUnU+ZxQvOYiwl9s9Ag7PL42TIuh0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMmFQQ25nTGtjTG9ja3JBTnNLWHV1dFVvTnJkNE5vNURWeDYzQmZoQ0w2 TUcvMC85RDRGOTlDNTBCQ0U2MjJDMjVGNkNGNDA4M0IzQ0JFMzY0QzhCQTFELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlENEY5OUM1MEJDRTYyMkMy NUY2Q0Y0MDgzQjNDQkUzNjRDOEJBMUQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MmFQQ25nTGtjTG9ja3JBTnNLWHV1dFVvTnJkNE5vNURWeDYzQmZoQ0w2TUcvMC85 RDRGOTlDNTBCQ0U2MjJDMjVGNkNGNDA4M0IzQ0JFMzY0QzhCQTFELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkaIM0M0nKcPDLIHIG+TFQY97Wm3drH2NSPojFNvAFk6gxQMN15Z0agO7er0Q 4lLbtvYF3v3dxzzJA3kjONgM+cvqwQJzkJay1hMoGLLqBVOea27H6eLX5mFf2hRJ o+YmYZ3w+VrMl0yZGon0aU4q3dH9xdsN5mbUHXlA9FJvfjSgRPYcPz6BG9D4uAIE X4X6G4fU8QFLDy/WfYz7bVrKJkvWt0y+hPjAMBOD5dCaFHy7pfxzN5/3X/fP8fnI a+NmuyST8smSvgoa5LUiobvWjay+xdzj/Py+SfUpcR8YpDi5osUEBWx7QDkN1srK 6Y5i2dmTxRXz5UCOV0rJQ60qeQ== -----END CERTIFICATE-----Generated at Fri Mar 27 02:14:09 2026 by rpki-client