$ rpki-client -vvf rpki-repo.registro.br/repo/4VRpQzU7whmKJHtaFqwwkJKr7hzYX3vEDze51rvs6iX2/1/2A4DF9097F97664A00A318EFAE22DC1036E91B5C.mft File: 2A4DF9097F97664A00A318EFAE22DC1036E91B5C.mft (raw, json) Hash identifier: llAYGoCOsFm07orSwb5pSqIHWIrVw8EdYzjtf2pAO9c= Subject key identifier: 69:62:B1:39:58:C1:E5:1A:AD:3E:F2:61:83:DC:CA:BD:F5:54:C7:A5 Authority key identifier: 2A:4D:F9:09:7F:97:66:4A:00:A3:18:EF:AE:22:DC:10:36:E9:1B:5C Certificate issuer: /CN=2A4DF9097F97664A00A318EFAE22DC1036E91B5C Certificate serial: 11040F15AC070908F7DCAB7196D428997A2FE6B4 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A4DF9097F97664A00A318EFAE22DC1036E91B5C.cer Subject info access: rsync://rpki-repo.registro.br/repo/4VRpQzU7whmKJHtaFqwwkJKr7hzYX3vEDze51rvs6iX2/1/2A4DF9097F97664A00A318EFAE22DC1036E91B5C.mft Manifest number: 03B9 Signing time: Wed 25 Mar 2026 00:20:01 +0000 Manifest this update: Wed 25 Mar 2026 00:15:01 +0000 Manifest next update: Thu 26 Mar 2026 04:01:01 +0000 Files and hashes: 1: 323830343a313932383a3a2f33322d313238203d3e203631373735.roa (hash: balLqWtekE7xoXyozNcnhLY0gSCHw8MWCc2OS3afiiI=) 2: 3133382e3230342e33362e302f32322d3332203d3e203631373735.roa (hash: QymnaSDu1ODQfT5ybG3gM6X4xk9jNNtTQ+zkNvj0XzM=) 3: 2A4DF9097F97664A00A318EFAE22DC1036E91B5C.crl (hash: azo4324MM2l+w+uKxmiHL2veQDno06UMf1qRv9xXWZA=) 4: 3230302e3232392e38342e302f32322d3332203d3e203631373735.roa (hash: RZ00+qXW/BPYoY+V3LazcZSeSl7+kD6hzoXFr0qzr8Q=) 5: 3133382e3230342e33372e302f32342d3332203d3e203631373735.roa (hash: UpP12LnX8V9yOeNpWAhngLI5xTreMtmtTfodbgcvkaQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4VRpQzU7whmKJHtaFqwwkJKr7hzYX3vEDze51rvs6iX2/1/2A4DF9097F97664A00A318EFAE22DC1036E91B5C.crl rsync://rpki-repo.registro.br/repo/4VRpQzU7whmKJHtaFqwwkJKr7hzYX3vEDze51rvs6iX2/1/2A4DF9097F97664A00A318EFAE22DC1036E91B5C.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A4DF9097F97664A00A318EFAE22DC1036E91B5C.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 26 Mar 2026 04:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:04:0f:15:ac:07:09:08:f7:dc:ab:71:96:d4:28:99:7a:2f:e6:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A4DF9097F97664A00A318EFAE22DC1036E91B5C Validity Not Before: Mar 25 00:15:01 2026 GMT Not After : Mar 26 04:01:01 2026 GMT Subject: CN=6962B13958C1E51AAD3EF26183DCCABDF554C7A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:48:3a:6b:ed:ad:36:da:d1:f1:a1:22:f9:0b: e8:c1:9d:a0:9f:05:03:98:a9:a6:a3:9f:27:d7:ef: f4:30:e4:e5:e8:b5:40:bc:f0:6c:2b:a7:8e:1a:66: 58:ba:23:14:56:b9:e6:13:5c:80:05:60:f6:42:08: 27:72:dd:9c:66:53:ec:1b:d6:4c:0a:f9:3e:44:fb: e6:7c:d1:4d:3b:0c:13:8a:4c:29:a8:80:19:d7:5b: a0:20:de:a3:e2:5d:79:6c:96:78:9f:3d:ea:15:ec: 3f:13:1c:9a:d8:fe:00:96:96:93:9c:39:e3:c9:6e: de:20:12:ff:00:0f:d1:cd:13:c3:cc:b6:79:66:c6: 6f:02:79:61:3c:3b:c2:2a:c6:84:43:a4:84:a1:ab: b5:d9:73:d0:b5:85:14:65:72:ba:e0:56:c3:e0:e1: 28:c0:7c:56:b6:f4:6d:f5:7e:27:88:7b:38:0e:28: 2c:99:34:97:db:06:f0:37:3f:72:aa:f8:aa:e8:48: df:7d:e2:d6:ef:c4:f5:d7:bf:15:b2:b7:f7:aa:a8: 2d:53:89:f7:2d:5c:2a:c6:5b:ab:e2:f1:45:a8:6f: 07:c6:e7:ba:e6:94:ba:de:fe:20:86:92:2c:ce:b2: 27:a3:3b:e9:af:6c:f3:0d:cf:20:78:69:51:41:c2: 14:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:62:B1:39:58:C1:E5:1A:AD:3E:F2:61:83:DC:CA:BD:F5:54:C7:A5 X509v3 Authority Key Identifier: keyid:2A:4D:F9:09:7F:97:66:4A:00:A3:18:EF:AE:22:DC:10:36:E9:1B:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4VRpQzU7whmKJHtaFqwwkJKr7hzYX3vEDze51rvs6iX2/1/2A4DF9097F97664A00A318EFAE22DC1036E91B5C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A4DF9097F97664A00A318EFAE22DC1036E91B5C.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4VRpQzU7whmKJHtaFqwwkJKr7hzYX3vEDze51rvs6iX2/1/2A4DF9097F97664A00A318EFAE22DC1036E91B5C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:ef:fa:c2:72:a2:2d:b0:4a:23:ac:e9:08:05:95:40:db:c2: 92:cc:f0:25:34:2f:8b:3e:68:a3:e8:d7:4c:ea:90:48:22:90: 21:4b:da:85:a5:0c:31:0b:6f:4f:7a:42:cc:f1:dd:3d:46:dd: 28:2d:05:e0:e4:df:42:fd:59:34:ce:c2:69:e3:41:7d:40:3e: 74:89:e9:de:0a:bc:aa:de:cc:d1:cc:b3:20:b0:b1:46:c7:3b: 39:af:27:7e:79:a4:48:57:ef:3b:19:e5:77:e5:17:ae:8e:00: 29:39:3f:ef:37:1b:07:38:25:99:4d:bb:c4:1a:62:7b:88:a0: 4e:94:f2:dc:27:c2:cb:5f:fd:43:7b:9d:c6:08:70:f4:b5:59: d3:e0:e7:c9:3e:83:18:b2:39:b6:25:89:ab:e1:ee:e4:d2:94: 0c:cd:5e:02:48:fc:0e:6e:2f:f0:44:b9:d2:c8:84:16:91:51: 63:d6:7b:8f:f5:7c:c9:20:e5:67:16:a2:02:2b:4b:53:82:f5: c7:36:47:c1:70:a9:46:ba:aa:3a:0f:2d:78:cc:bf:71:6f:3b: 9f:a9:d9:b6:56:e3:57:41:68:30:5e:f9:60:c2:46:aa:6d:08: ea:b0:6f:fa:88:77:4f:71:2e:b8:55:9e:ce:6b:cd:d8:33:7d: 67:9d:9d:94 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUEQQPFawHCQj33KtxltQomXov5rQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkE0REY5MDk3Rjk3NjY0QTAwQTMxOEVGQUUyMkRDMTAz NkU5MUI1QzAeFw0yNjAzMjUwMDE1MDFaFw0yNjAzMjYwNDAxMDFaMDMxMTAvBgNV BAMTKDY5NjJCMTM5NThDMUU1MUFBRDNFRjI2MTgzRENDQUJERjU1NEM3QTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmSDpr7a022tHxoSL5C+jBnaCf BQOYqaajnyfX7/Qw5OXotUC88Gwrp44aZli6IxRWueYTXIAFYPZCCCdy3ZxmU+wb 1kwK+T5E++Z80U07DBOKTCmogBnXW6Ag3qPiXXlslnifPeoV7D8THJrY/gCWlpOc OePJbt4gEv8AD9HNE8PMtnlmxm8CeWE8O8IqxoRDpIShq7XZc9C1hRRlcrrgVsPg 4SjAfFa29G31fieIezgOKCyZNJfbBvA3P3Kq+KroSN994tbvxPXXvxWyt/eqqC1T ifctXCrGW6vi8UWobwfG57rmlLre/iCGkizOsiejO+mvbPMNzyB4aVFBwhT9AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUaWKxOVjB5RqtPvJhg9zKvfVUx6UwHwYDVR0j BBgwFoAUKk35CX+XZkoAoxjvriLcEDbpG1wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNFZScFF6VTd3aG1LSkh0YUZxd3drSktyN2h6WVgzdkVEemU1MXJ2czZp WDIvMS8yQTRERjkwOTdGOTc2NjRBMDBBMzE4RUZBRTIyREMxMDM2RTkxQjVDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJBNERGOTA5N0Y5NzY2NEEw MEEzMThFRkFFMjJEQzEwMzZFOTFCNUMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NFZScFF6VTd3aG1LSkh0YUZxd3drSktyN2h6WVgzdkVEemU1MXJ2czZpWDIvMS8y QTRERjkwOTdGOTc2NjRBMDBBMzE4RUZBRTIyREMxMDM2RTkxQjVDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXe/6wnKiLbBKI6zpCAWVQNvCkszwJTQviz5oo+jXTOqQSCKQIUvahaUMMQtv T3pCzPHdPUbdKC0F4OTfQv1ZNM7CaeNBfUA+dInp3gq8qt7M0cyzILCxRsc7Oa8n fnmkSFfvOxnld+UXro4AKTk/7zcbBzglmU27xBpie4igTpTy3CfCy1/9Q3udxghw 9LVZ0+DnyT6DGLI5tiWJq+Hu5NKUDM1eAkj8Dm4v8ES50siEFpFRY9Z7j/V8ySDl ZxaiAitLU4L1xzZHwXCpRrqqOg8teMy/cW87n6nZtlbjV0FoMF75YMJGqm0I6rBv +oh3T3EuuFWezmvN2DN9Z52dlA== -----END CERTIFICATE-----Generated at Thu Mar 26 01:21:11 2026 by rpki-client