$ rpki-client -vvf rpki-repo.registro.br/repo/4iMmpJAa29uzskingN42njv5Md7UZB3rSimA2kYrF4RV/0/ACE8E081BB2525CDB1FC85C9CE1C3667C83EAC1F.mft File: ACE8E081BB2525CDB1FC85C9CE1C3667C83EAC1F.mft (raw, json) Hash identifier: /KHaMq5ZqhmgnNuTvmD84PvqKN+wHPSqK7Uw2vKRBOg= Subject key identifier: E4:2D:B5:2F:4A:64:CF:84:09:85:7A:96:7A:4D:F9:1B:EC:2A:90:B9 Authority key identifier: AC:E8:E0:81:BB:25:25:CD:B1:FC:85:C9:CE:1C:36:67:C8:3E:AC:1F Certificate issuer: /CN=ACE8E081BB2525CDB1FC85C9CE1C3667C83EAC1F Certificate serial: 2D216FC33F46D260487D11E19FEFDF94E4845385 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACE8E081BB2525CDB1FC85C9CE1C3667C83EAC1F.cer Subject info access: rsync://rpki-repo.registro.br/repo/4iMmpJAa29uzskingN42njv5Md7UZB3rSimA2kYrF4RV/0/ACE8E081BB2525CDB1FC85C9CE1C3667C83EAC1F.mft Manifest number: 016D Signing time: Thu 26 Mar 2026 02:06:52 +0000 Manifest this update: Thu 26 Mar 2026 02:01:52 +0000 Manifest next update: Fri 27 Mar 2026 04:25:52 +0000 Files and hashes: 1: ACE8E081BB2525CDB1FC85C9CE1C3667C83EAC1F.crl (hash: xzbQHWM3rvbBnn3W5JlPOAGvc6kNwf3uy3N+VECr1wg=) 2: 323830343a323936303a3a2f33322d3332203d3e20323634303131.roa (hash: uwtntgDhZ8NLwZsO5HmD9mt3dlpHQTwDXJ+5+Ywo8ss=) 3: 3134332e302e3133362e302f32322d3232203d3e20323634303131.roa (hash: yLdeTcnv1NdbuM/lnH5oQE82RG04eOyAcuE+WQNkhJc=) 4: 3134332e302e3133362e302f32332d3233203d3e20323634303131.roa (hash: oCCbozumKWHZNHnsrflEH8CMEBxq5kK+7kdgsxrCOpk=) 5: AS264011.asa (hash: aKti5PO3+eKPGpfYq1y92FXs+uyIvP6QJNFiJe6BX4M=) 6: 3134332e302e3133382e302f32332d3233203d3e20323634303131.roa (hash: a5waSVlquwcNa0Nsm6dZUKIcH/5Vp01v3948d0ByAhc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4iMmpJAa29uzskingN42njv5Md7UZB3rSimA2kYrF4RV/0/ACE8E081BB2525CDB1FC85C9CE1C3667C83EAC1F.crl rsync://rpki-repo.registro.br/repo/4iMmpJAa29uzskingN42njv5Md7UZB3rSimA2kYrF4RV/0/ACE8E081BB2525CDB1FC85C9CE1C3667C83EAC1F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACE8E081BB2525CDB1FC85C9CE1C3667C83EAC1F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 27 Mar 2026 04:25:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:21:6f:c3:3f:46:d2:60:48:7d:11:e1:9f:ef:df:94:e4:84:53:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ACE8E081BB2525CDB1FC85C9CE1C3667C83EAC1F Validity Not Before: Mar 26 02:01:52 2026 GMT Not After : Mar 27 04:25:52 2026 GMT Subject: CN=E42DB52F4A64CF8409857A967A4DF91BEC2A90B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:00:61:2a:a2:bf:64:3c:80:2b:d6:47:70:25: 3e:73:07:5a:9f:8a:8d:12:28:54:81:0d:f7:25:36: a9:f2:41:45:b0:9a:38:50:b7:78:28:99:0d:0a:c2: 35:b8:e7:71:fa:92:70:20:f1:ca:36:aa:18:0a:1c: 99:56:88:88:6d:3e:1c:c4:c3:77:f2:b8:c2:16:56: 00:03:74:f1:23:6d:8b:81:cd:07:d6:1e:57:04:02: c8:92:0d:1e:2f:cb:b1:00:99:45:62:46:b7:f1:fa: 87:07:73:10:27:60:ad:0c:c7:4d:d7:43:f7:b3:da: d7:1d:02:71:dc:8c:18:02:9c:1a:64:2b:57:fe:7b: e0:33:05:b4:a7:cd:55:70:b8:d0:df:02:d1:78:a2: c3:e4:80:0b:04:2f:2a:98:84:57:46:b9:d6:03:e4: 30:6a:85:8a:18:40:2a:fd:85:52:1f:cb:80:ad:a0: 71:fa:99:86:23:3c:92:13:0b:32:bd:6d:19:df:0a: 7f:61:d8:32:16:2f:1a:07:f6:4c:8b:df:e5:7a:40: 49:37:f6:2d:bb:68:2a:c8:fa:3f:00:45:a5:a0:2b: f8:c9:73:a7:ee:56:64:64:02:1e:ed:20:e4:88:96: 3e:8b:24:67:7f:22:91:e4:9b:a9:28:79:4e:15:9d: 65:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:2D:B5:2F:4A:64:CF:84:09:85:7A:96:7A:4D:F9:1B:EC:2A:90:B9 X509v3 Authority Key Identifier: keyid:AC:E8:E0:81:BB:25:25:CD:B1:FC:85:C9:CE:1C:36:67:C8:3E:AC:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4iMmpJAa29uzskingN42njv5Md7UZB3rSimA2kYrF4RV/0/ACE8E081BB2525CDB1FC85C9CE1C3667C83EAC1F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACE8E081BB2525CDB1FC85C9CE1C3667C83EAC1F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4iMmpJAa29uzskingN42njv5Md7UZB3rSimA2kYrF4RV/0/ACE8E081BB2525CDB1FC85C9CE1C3667C83EAC1F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:98:4d:c8:2e:85:f2:44:83:04:8a:cd:c1:c3:f6:13:20:00: 72:f6:da:dc:b9:ca:6c:a9:88:43:8f:63:86:71:68:1e:49:cc: a4:c6:ce:bd:51:54:e9:d2:dd:72:d7:12:e4:5d:37:24:1b:71: de:a3:9a:a5:64:2d:e9:ea:c3:aa:25:15:66:4f:4f:a1:83:91: c8:aa:26:14:a8:3b:94:fe:60:4d:55:8a:7a:27:f8:15:ef:df: 89:d4:5b:64:c3:0c:86:70:f4:01:2a:e5:dd:f0:4c:8c:de:66: be:de:ec:bd:40:f3:05:62:f7:d9:2f:70:43:44:45:d1:c8:b7: 7d:c2:0e:9c:2e:d8:c8:2e:91:e5:50:ad:78:08:07:78:97:f4: 87:e4:ee:d8:ac:39:a6:03:b4:2d:79:c3:66:54:b9:a9:d6:e7: 63:b7:73:c1:b7:6c:d8:7e:1e:13:44:0b:6c:23:5d:b1:5d:45: f5:07:86:b3:d2:5f:f2:ec:b4:a1:f0:7c:c3:1f:a9:87:93:93: 36:3f:6e:d9:6f:34:78:9b:0b:6b:ef:1b:80:37:53:1e:76:e7: 95:f7:25:88:38:91:96:45:b3:75:d4:f0:2a:89:08:b2:16:9a: 47:0b:3d:6f:0d:7e:fa:a2:01:d1:55:b9:8e:1a:fc:3c:d4:48: 5d:8f:87:29 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIULSFvwz9G0mBIfRHhn+/flOSEU4UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUNFOEUwODFCQjI1MjVDREIxRkM4NUM5Q0UxQzM2NjdD ODNFQUMxRjAeFw0yNjAzMjYwMjAxNTJaFw0yNjAzMjcwNDI1NTJaMDMxMTAvBgNV BAMTKEU0MkRCNTJGNEE2NENGODQwOTg1N0E5NjdBNERGOTFCRUMyQTkwQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdAGEqor9kPIAr1kdwJT5zB1qf io0SKFSBDfclNqnyQUWwmjhQt3gomQ0KwjW453H6knAg8co2qhgKHJlWiIhtPhzE w3fyuMIWVgADdPEjbYuBzQfWHlcEAsiSDR4vy7EAmUViRrfx+ocHcxAnYK0Mx03X Q/ez2tcdAnHcjBgCnBpkK1f+e+AzBbSnzVVwuNDfAtF4osPkgAsELyqYhFdGudYD 5DBqhYoYQCr9hVIfy4CtoHH6mYYjPJITCzK9bRnfCn9h2DIWLxoH9kyL3+V6QEk3 9i27aCrI+j8ARaWgK/jJc6fuVmRkAh7tIOSIlj6LJGd/IpHkm6koeU4VnWXdAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU5C21L0pkz4QJhXqWek35G+wqkLkwHwYDVR0j BBgwFoAUrOjggbslJc2x/IXJzhw2Z8g+rB8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNGlNbXBKQWEyOXV6c2tpbmdONDJuanY1TWQ3VVpCM3JTaW1BMmtZckY0 UlYvMC9BQ0U4RTA4MUJCMjUyNUNEQjFGQzg1QzlDRTFDMzY2N0M4M0VBQzFGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FDRThFMDgxQkIyNTI1Q0RC MUZDODVDOUNFMUMzNjY3QzgzRUFDMUYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NGlNbXBKQWEyOXV6c2tpbmdONDJuanY1TWQ3VVpCM3JTaW1BMmtZckY0UlYvMC9B Q0U4RTA4MUJCMjUyNUNEQjFGQzg1QzlDRTFDMzY2N0M4M0VBQzFGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMZhNyC6F8kSDBIrNwcP2EyAAcvba3LnKbKmIQ49jhnFoHknMpMbOvVFU6dLd ctcS5F03JBtx3qOapWQt6erDqiUVZk9PoYORyKomFKg7lP5gTVWKeif4Fe/fidRb ZMMMhnD0ASrl3fBMjN5mvt7svUDzBWL32S9wQ0RF0ci3fcIOnC7YyC6R5VCteAgH eJf0h+Tu2Kw5pgO0LXnDZlS5qdbnY7dzwbds2H4eE0QLbCNdsV1F9QeGs9Jf8uy0 ofB8wx+ph5OTNj9u2W80eJsLa+8bgDdTHnbnlfcliDiRlkWzddTwKokIshaaRws9 bw1++qIB0VW5jhr8PNRIXY+HKQ== -----END CERTIFICATE-----Generated at Thu Mar 26 17:41:33 2026 by rpki-client