$ rpki-client -vvf rpki-repo.registro.br/repo/3hZndVs1SVsAepdyPw2uiEDXQWS5M6z4yeYRx6FZg4WS/0/085A4379FC02066399A7BABE986F2B930711F0E0.mft File: 085A4379FC02066399A7BABE986F2B930711F0E0.mft (raw, json) Hash identifier: TwvrAjRsV3HG8VDk4AwkMv7E0S2Qq+9tbBRE1j1F3Tg= Subject key identifier: 23:E0:37:D6:E3:23:7F:21:AA:2D:F7:2B:54:BD:3A:D3:03:7B:E1:03 Authority key identifier: 08:5A:43:79:FC:02:06:63:99:A7:BA:BE:98:6F:2B:93:07:11:F0:E0 Certificate issuer: /CN=085A4379FC02066399A7BABE986F2B930711F0E0 Certificate serial: 254C04E2D44C159E3B28FCBE0A0ED1B1EF7A02F3 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/085A4379FC02066399A7BABE986F2B930711F0E0.cer Subject info access: rsync://rpki-repo.registro.br/repo/3hZndVs1SVsAepdyPw2uiEDXQWS5M6z4yeYRx6FZg4WS/0/085A4379FC02066399A7BABE986F2B930711F0E0.mft Manifest number: 020E Signing time: Thu 26 Mar 2026 12:49:16 +0000 Manifest this update: Thu 26 Mar 2026 12:44:16 +0000 Manifest next update: Fri 27 Mar 2026 13:33:16 +0000 Files and hashes: 1: 323830343a336262633a3a2f33322d313238203d3e20323636313638.roa (hash: RMxzWTzNde7mg7vjEKG+Ja5QneH6z2ZAUqF+ftNaFuA=) 2: 085A4379FC02066399A7BABE986F2B930711F0E0.crl (hash: 3NucDnJBwZz73rUuxXJvrJpzxZDIDf7dra5HkvZQg9E=) 3: 3136302e31392e3234342e302f32322d3332203d3e20323636313638.roa (hash: YMO1AAaKddSx4wsxtUWpW6YFZK1PI1b4AKJgiHYgwMk=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3hZndVs1SVsAepdyPw2uiEDXQWS5M6z4yeYRx6FZg4WS/0/085A4379FC02066399A7BABE986F2B930711F0E0.crl rsync://rpki-repo.registro.br/repo/3hZndVs1SVsAepdyPw2uiEDXQWS5M6z4yeYRx6FZg4WS/0/085A4379FC02066399A7BABE986F2B930711F0E0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/085A4379FC02066399A7BABE986F2B930711F0E0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 27 Mar 2026 13:33:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:4c:04:e2:d4:4c:15:9e:3b:28:fc:be:0a:0e:d1:b1:ef:7a:02:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=085A4379FC02066399A7BABE986F2B930711F0E0 Validity Not Before: Mar 26 12:44:16 2026 GMT Not After : Mar 27 13:33:16 2026 GMT Subject: CN=23E037D6E3237F21AA2DF72B54BD3AD3037BE103 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:5e:3b:20:45:f8:e3:b1:fa:22:fe:61:f1:6d: e3:be:19:3c:29:3a:6b:b4:ab:2c:e0:98:11:99:b4: c7:c7:b8:fe:0b:f4:29:c4:e7:b9:6a:d6:67:3f:7e: 2c:40:c6:23:d5:87:90:07:88:8f:1c:1a:1d:51:53: 2c:00:8a:2d:5e:c1:46:cf:4d:1d:a0:1d:fd:8a:53: f7:b3:49:fa:b9:e9:f6:45:30:6a:10:9c:36:5a:c4: 44:d7:a4:91:b2:79:a6:5e:c8:37:d5:da:29:1b:c7: 51:cb:be:61:ca:1f:e3:6c:39:b6:e2:b3:bb:b7:8d: dd:59:1e:a1:8a:52:4f:d0:4a:3a:f8:4f:cd:1d:9a: 5b:6e:47:9b:17:21:b5:be:56:83:6f:43:ae:d0:77: 6d:44:bb:69:d2:03:57:90:5d:83:e8:bb:03:6c:38: b2:2a:9a:c0:f9:33:da:f5:d2:56:7a:25:2d:df:44: e7:1d:23:52:8d:85:61:47:a1:a4:db:b6:6e:84:eb: da:43:77:d6:e8:72:78:5c:f4:90:c5:4a:c8:7b:fa: 4f:04:72:4a:cb:42:e0:66:77:19:f5:f1:14:da:a2: 1c:51:63:0c:81:96:2e:12:0a:8f:6e:f3:14:5a:fc: 4b:24:35:9c:81:99:9f:d3:38:51:b9:8c:fc:00:fa: b7:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:E0:37:D6:E3:23:7F:21:AA:2D:F7:2B:54:BD:3A:D3:03:7B:E1:03 X509v3 Authority Key Identifier: keyid:08:5A:43:79:FC:02:06:63:99:A7:BA:BE:98:6F:2B:93:07:11:F0:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3hZndVs1SVsAepdyPw2uiEDXQWS5M6z4yeYRx6FZg4WS/0/085A4379FC02066399A7BABE986F2B930711F0E0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/085A4379FC02066399A7BABE986F2B930711F0E0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3hZndVs1SVsAepdyPw2uiEDXQWS5M6z4yeYRx6FZg4WS/0/085A4379FC02066399A7BABE986F2B930711F0E0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:ab:1d:6e:7b:a7:2a:dc:3f:c0:2a:ec:41:65:68:2b:d2:a2: ea:25:bc:49:c5:d7:93:f2:6b:16:de:96:2e:f0:77:c4:ee:22: e2:72:e4:41:ca:b9:c0:ee:b6:8a:6f:46:60:da:fe:65:a3:2f: 27:a1:93:3c:b9:df:81:69:7c:6c:31:41:63:fe:3a:d9:42:0b: 50:08:22:a6:4b:86:38:63:03:83:ec:21:55:95:e6:5c:76:c8: 02:51:d9:45:bd:1b:1a:f9:78:8b:3e:0d:8f:31:91:79:14:3b: 66:5b:90:d5:1a:f6:09:52:24:d3:e8:1d:5e:ed:2e:42:84:5e: 4e:55:e1:40:c7:93:c9:84:73:b3:e8:ff:7e:2b:c6:7e:7e:4c: 84:40:04:f8:18:47:f9:b4:f2:5f:0a:cb:87:74:a3:00:0a:b7: fa:3c:ff:8c:d9:00:b5:89:56:ac:c6:da:45:07:86:14:3a:70: b8:7f:15:43:35:f5:dc:30:02:80:74:f1:8e:e2:09:d6:f5:97: 3e:d7:e6:4e:7e:82:d3:1d:a9:0d:0c:9b:78:04:cb:18:83:ec: df:17:3d:82:10:f3:b6:f0:1d:6c:8e:a8:4b:ad:5a:b1:9b:2a: cd:d7:b1:89:5f:b4:b8:1d:8e:44:f8:2b:02:eb:fc:5d:dd:64: 94:25:b0:4f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUJUwE4tRMFZ47KPy+Cg7Rse96AvMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDg1QTQzNzlGQzAyMDY2Mzk5QTdCQUJFOTg2RjJCOTMw NzExRjBFMDAeFw0yNjAzMjYxMjQ0MTZaFw0yNjAzMjcxMzMzMTZaMDMxMTAvBgNV BAMTKDIzRTAzN0Q2RTMyMzdGMjFBQTJERjcyQjU0QkQzQUQzMDM3QkUxMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXXjsgRfjjsfoi/mHxbeO+GTwp Omu0qyzgmBGZtMfHuP4L9CnE57lq1mc/fixAxiPVh5AHiI8cGh1RUywAii1ewUbP TR2gHf2KU/ezSfq56fZFMGoQnDZaxETXpJGyeaZeyDfV2ikbx1HLvmHKH+NsObbi s7u3jd1ZHqGKUk/QSjr4T80dmltuR5sXIbW+VoNvQ67Qd21Eu2nSA1eQXYPouwNs OLIqmsD5M9r10lZ6JS3fROcdI1KNhWFHoaTbtm6E69pDd9bocnhc9JDFSsh7+k8E ckrLQuBmdxn18RTaohxRYwyBli4SCo9u8xRa/EskNZyBmZ/TOFG5jPwA+rcHAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUI+A31uMjfyGqLfcrVL060wN74QMwHwYDVR0j BBgwFoAUCFpDefwCBmOZp7q+mG8rkwcR8OAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM2habmRWczFTVnNBZXBkeVB3MnVpRURYUVdTNU02ejR5ZVlSeDZGWmc0 V1MvMC8wODVBNDM3OUZDMDIwNjYzOTlBN0JBQkU5ODZGMkI5MzA3MTFGMEUwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA4NUE0Mzc5RkMwMjA2NjM5 OUE3QkFCRTk4NkYyQjkzMDcxMUYwRTAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M2habmRWczFTVnNBZXBkeVB3MnVpRURYUVdTNU02ejR5ZVlSeDZGWmc0V1MvMC8w ODVBNDM3OUZDMDIwNjYzOTlBN0JBQkU5ODZGMkI5MzA3MTFGMEUwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAv6sdbnunKtw/wCrsQWVoK9Ki6iW8ScXXk/JrFt6WLvB3xO4i4nLkQcq5wO62 im9GYNr+ZaMvJ6GTPLnfgWl8bDFBY/462UILUAgipkuGOGMDg+whVZXmXHbIAlHZ Rb0bGvl4iz4NjzGReRQ7ZluQ1Rr2CVIk0+gdXu0uQoReTlXhQMeTyYRzs+j/fivG fn5MhEAE+BhH+bTyXwrLh3SjAAq3+jz/jNkAtYlWrMbaRQeGFDpwuH8VQzX13DAC gHTxjuIJ1vWXPtfmTn6C0x2pDQybeATLGIPs3xc9ghDztvAdbI6oS61asZsqzdex iV+0uB2ORPgrAuv8Xd1klCWwTw== -----END CERTIFICATE-----Generated at Thu Mar 26 20:46:20 2026 by rpki-client