$ rpki-client -vvf rpki-repo.registro.br/repo/2zVR29nhkFArjm3boG6xrJCVPQ36b5DaeVsyn44SZtAB/0/8F327FEFA4E8788FFCFDCD7C6D190640F8A62810.mft File: 8F327FEFA4E8788FFCFDCD7C6D190640F8A62810.mft (raw, json) Hash identifier: C2A/6kZiN4aQaYwHUh/8vstvJzkqxZE7Es+pXFSj+64= Subject key identifier: 64:0C:72:24:38:46:4E:72:73:BF:7E:23:F1:15:3B:4A:B1:2E:32:80 Authority key identifier: 8F:32:7F:EF:A4:E8:78:8F:FC:FD:CD:7C:6D:19:06:40:F8:A6:28:10 Certificate issuer: /CN=8F327FEFA4E8788FFCFDCD7C6D190640F8A62810 Certificate serial: 7888832C1690EB18384E69DF4F9C54448468B045 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F327FEFA4E8788FFCFDCD7C6D190640F8A62810.cer Subject info access: rsync://rpki-repo.registro.br/repo/2zVR29nhkFArjm3boG6xrJCVPQ36b5DaeVsyn44SZtAB/0/8F327FEFA4E8788FFCFDCD7C6D190640F8A62810.mft Manifest number: 033F Signing time: Wed 25 Mar 2026 22:34:45 +0000 Manifest this update: Wed 25 Mar 2026 22:29:45 +0000 Manifest next update: Fri 27 Mar 2026 00:10:45 +0000 Files and hashes: 1: 8F327FEFA4E8788FFCFDCD7C6D190640F8A62810.crl (hash: q4MpDBr50FnuKi+agWzVt8U3oD/iWZaZpQqGKGt23tM=) 2: 323830343a313735633a3a2f33322d313238203d3e20323633313430.roa (hash: LcxgBvhys26dh3eN+AkNblIZ169BBg5L/bmL0RHyz5I=) 3: 3139312e362e3134302e302f32322d3332203d3e20323633313430.roa (hash: YR3iwTv8fmQASNA9FOgQAa+ECLErkEz/btJcdJNxQ2k=) 4: 3136382e3230352e3134342e302f32322d3332203d3e20323633313430.roa (hash: bg8Dvb5gyNofKjWKDnAjbZaTOGuSl+Au6niFij0wNQI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2zVR29nhkFArjm3boG6xrJCVPQ36b5DaeVsyn44SZtAB/0/8F327FEFA4E8788FFCFDCD7C6D190640F8A62810.crl rsync://rpki-repo.registro.br/repo/2zVR29nhkFArjm3boG6xrJCVPQ36b5DaeVsyn44SZtAB/0/8F327FEFA4E8788FFCFDCD7C6D190640F8A62810.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F327FEFA4E8788FFCFDCD7C6D190640F8A62810.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 27 Mar 2026 00:10:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:88:83:2c:16:90:eb:18:38:4e:69:df:4f:9c:54:44:84:68:b0:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F327FEFA4E8788FFCFDCD7C6D190640F8A62810 Validity Not Before: Mar 25 22:29:45 2026 GMT Not After : Mar 27 00:10:45 2026 GMT Subject: CN=640C722438464E7273BF7E23F1153B4AB12E3280 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:92:a2:d9:87:c3:e8:bf:34:b7:88:8e:b6:5c: 57:e2:79:5c:c7:ed:52:f5:ba:ab:25:b5:de:83:f2: 08:fd:3f:1b:84:94:d5:b6:58:67:04:28:59:ac:15: fb:bc:bc:aa:59:42:6f:d7:40:7f:e9:75:37:f7:63: 6a:e6:4c:8b:19:d8:bd:e7:14:3e:a2:91:77:64:68: 56:9e:26:6f:fa:83:9e:a6:ca:86:21:c7:d4:08:57: a8:9a:83:10:c7:83:e8:4d:ef:96:71:04:6d:2c:87: be:10:2d:6c:1d:c7:15:07:9a:83:dc:99:e3:7e:42: ca:75:3d:75:db:77:69:02:f9:cd:1b:d9:42:8f:bd: 76:35:26:e0:69:0a:ad:df:9e:97:bd:76:bf:78:69: bc:48:46:58:61:e9:b9:45:df:d9:26:58:41:47:e1: 95:44:09:7e:5b:8e:48:e5:d6:b5:5e:99:48:4a:dd: ee:fa:21:7a:c0:c4:c2:cd:7d:e3:ad:ea:68:61:9a: fa:c7:95:58:96:b4:b9:5d:d0:18:61:db:f9:1d:a9: d5:6b:29:67:3d:a7:76:e1:5f:66:35:9f:78:e8:5a: d0:34:61:0f:47:91:4e:8e:f6:b2:1a:c6:aa:62:8b: 8d:10:e0:01:56:c4:68:d4:25:84:0d:2e:a4:72:70: d9:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:0C:72:24:38:46:4E:72:73:BF:7E:23:F1:15:3B:4A:B1:2E:32:80 X509v3 Authority Key Identifier: keyid:8F:32:7F:EF:A4:E8:78:8F:FC:FD:CD:7C:6D:19:06:40:F8:A6:28:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2zVR29nhkFArjm3boG6xrJCVPQ36b5DaeVsyn44SZtAB/0/8F327FEFA4E8788FFCFDCD7C6D190640F8A62810.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F327FEFA4E8788FFCFDCD7C6D190640F8A62810.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2zVR29nhkFArjm3boG6xrJCVPQ36b5DaeVsyn44SZtAB/0/8F327FEFA4E8788FFCFDCD7C6D190640F8A62810.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:1f:ed:18:57:72:14:fb:39:bf:b0:fb:00:0c:ed:8e:eb:0c: cf:07:7e:27:9b:df:52:e9:40:6f:4e:75:75:45:c0:75:8c:4a: b7:d6:e9:3f:17:44:0d:25:8b:a0:9e:56:1f:95:f1:93:53:6a: 90:a8:64:cc:a7:16:f3:6e:00:07:63:fa:92:ab:7b:cd:d7:70: c5:17:fc:0f:fa:49:0a:47:c0:a5:9a:61:2f:5c:4b:f3:53:3f: 9d:ab:1b:2a:e2:e7:ce:12:66:b8:ff:f9:ff:86:4f:94:df:35: 13:54:de:17:7c:1e:af:6f:9d:0a:9e:5d:34:76:8b:02:5c:4f: 03:11:20:73:2e:e0:f9:fb:3b:c3:55:24:c6:74:4d:85:0c:50: e6:4e:5a:d3:ae:f7:31:1f:e7:7f:f5:f1:82:38:27:20:d3:01: eb:b7:a7:b6:93:5c:4d:7d:f2:ce:55:e7:e0:3a:e7:41:dd:a9: 3b:31:d4:af:be:52:45:25:b6:c1:26:6a:2c:e6:b2:f9:84:e3: 9c:38:1e:f3:cb:ac:2e:18:5e:c9:bb:73:19:e9:0d:f7:61:89: 4d:4a:15:d9:32:80:ec:5e:5c:da:fc:c3:66:66:7b:78:d3:9d: 21:e7:93:ac:c9:09:13:ac:45:c7:35:58:c6:bb:5c:2b:92:32: 32:4d:cb:d3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUeIiDLBaQ6xg4TmnfT5xURIRosEUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEYzMjdGRUZBNEU4Nzg4RkZDRkRDRDdDNkQxOTA2NDBG OEE2MjgxMDAeFw0yNjAzMjUyMjI5NDVaFw0yNjAzMjcwMDEwNDVaMDMxMTAvBgNV BAMTKDY0MEM3MjI0Mzg0NjRFNzI3M0JGN0UyM0YxMTUzQjRBQjEyRTMyODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUkqLZh8PovzS3iI62XFfieVzH 7VL1uqsltd6D8gj9PxuElNW2WGcEKFmsFfu8vKpZQm/XQH/pdTf3Y2rmTIsZ2L3n FD6ikXdkaFaeJm/6g56myoYhx9QIV6iagxDHg+hN75ZxBG0sh74QLWwdxxUHmoPc meN+Qsp1PXXbd2kC+c0b2UKPvXY1JuBpCq3fnpe9dr94abxIRlhh6blF39kmWEFH 4ZVECX5bjkjl1rVemUhK3e76IXrAxMLNfeOt6mhhmvrHlViWtLld0Bhh2/kdqdVr KWc9p3bhX2Y1n3joWtA0YQ9HkU6O9rIaxqpii40Q4AFWxGjUJYQNLqRycNknAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUZAxyJDhGTnJzv34j8RU7SrEuMoAwHwYDVR0j BBgwFoAUjzJ/76ToeI/8/c18bRkGQPimKBAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMnpWUjI5bmhrRkFyam0zYm9HNnhySkNWUFEzNmI1RGFlVnN5bjQ0U1p0 QUIvMC84RjMyN0ZFRkE0RTg3ODhGRkNGRENEN0M2RDE5MDY0MEY4QTYyODEwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhGMzI3RkVGQTRFODc4OEZG Q0ZEQ0Q3QzZEMTkwNjQwRjhBNjI4MTAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MnpWUjI5bmhrRkFyam0zYm9HNnhySkNWUFEzNmI1RGFlVnN5bjQ0U1p0QUIvMC84 RjMyN0ZFRkE0RTg3ODhGRkNGRENEN0M2RDE5MDY0MEY4QTYyODEwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEATh/tGFdyFPs5v7D7AAztjusMzwd+J5vfUulAb051dUXAdYxKt9bpPxdEDSWL oJ5WH5Xxk1NqkKhkzKcW824AB2P6kqt7zddwxRf8D/pJCkfApZphL1xL81M/nasb KuLnzhJmuP/5/4ZPlN81E1TeF3wer2+dCp5dNHaLAlxPAxEgcy7g+fs7w1UkxnRN hQxQ5k5a0673MR/nf/XxgjgnINMB67entpNcTX3yzlXn4DrnQd2pOzHUr75SRSW2 wSZqLOay+YTjnDge88usLhheybtzGekN92GJTUoV2TKA7F5c2vzDZmZ7eNOdIeeT rMkJE6xFxzVYxrtcK5IyMk3L0w== -----END CERTIFICATE-----Generated at Thu Mar 26 01:38:47 2026 by rpki-client