$ rpki-client -vvf rpki-repo.registro.br/repo/4oWon9ukj5YKgYfECdsH4rb97JUFpcX2tZF2qS6M9662/0/40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.mft File: 40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.mft (raw, json) Hash identifier: qBoEjcIHLBOJXbQ73hQZC+7e80DOxIyzOB869zmTzdg= Subject key identifier: 3D:39:87:7D:2C:F2:70:46:1E:5F:30:DE:02:50:5E:ED:A5:99:D1:04 Authority key identifier: 40:BB:14:A2:FD:8B:81:10:30:42:BF:32:FA:C9:B2:D9:0A:CF:8A:FE Certificate issuer: /CN=40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE Certificate serial: 7F1D1E76F5B75C0F2E601D5B0479D7A9FBBD012C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.cer Subject info access: rsync://rpki-repo.registro.br/repo/4oWon9ukj5YKgYfECdsH4rb97JUFpcX2tZF2qS6M9662/0/40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.mft Manifest number: 01B8 Signing time: Wed 25 Mar 2026 05:49:59 +0000 Manifest this update: Wed 25 Mar 2026 05:44:59 +0000 Manifest next update: Thu 26 Mar 2026 07:00:59 +0000 Files and hashes: 1: 34352e3138392e33352e302f32342d3234203d3e20323734373633.roa (hash: GUnuNUq25OqK8U34niiFHmYG8FgYW5BaLNMMEqea2oU=) 2: 34352e3138392e33332e302f32342d3234203d3e20323734373633.roa (hash: 94RYiufY7USp0r1Hhmx7uAPsAj5eXGZhHiDHteIZcag=) 3: 40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.crl (hash: 08oOy0PupCBjDzXpUAQQunLs73wcVWetrtgZh1Rxv6g=) 4: 34352e3138392e33322e302f32342d3234203d3e20323734373633.roa (hash: dVjcviFWXYeWBqHTTFPwdaZwhjw7qRSb+GF5EQiZphc=) 5: 34352e3138392e33342e302f32342d3234203d3e20323734373633.roa (hash: eKMv22IVOxxguiqksCRMXS9NAY1MhABH5nL+QkbIqCg=) 6: 323830343a393333343a666630303a3a2f34302d3430203d3e20323734373633.roa (hash: Y/91UtAKoquFsWubq6LOKvQldnEvym4LP9Ysec9nxMw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4oWon9ukj5YKgYfECdsH4rb97JUFpcX2tZF2qS6M9662/0/40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.crl rsync://rpki-repo.registro.br/repo/4oWon9ukj5YKgYfECdsH4rb97JUFpcX2tZF2qS6M9662/0/40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 26 Mar 2026 07:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:1d:1e:76:f5:b7:5c:0f:2e:60:1d:5b:04:79:d7:a9:fb:bd:01:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE Validity Not Before: Mar 25 05:44:59 2026 GMT Not After : Mar 26 07:00:59 2026 GMT Subject: CN=3D39877D2CF270461E5F30DE02505EEDA599D104 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:7f:7d:81:f7:d5:d6:e1:b3:6d:6d:69:c6:9b: 2e:b8:e3:39:a7:82:6a:84:ad:6e:9a:33:85:01:c7: 97:be:d4:11:4d:3d:f7:5f:14:97:c3:f0:77:d3:a8: f3:66:29:51:ac:a7:b3:24:b0:14:97:15:14:21:b4: 78:f0:e0:ae:e5:70:71:9c:9d:e2:cd:6d:c8:d4:6a: 43:87:e5:71:d9:9e:ed:9a:0b:e8:e8:db:f5:79:20: cb:a3:c0:f4:b0:c2:d2:a0:e8:7a:df:70:40:00:56: 60:da:01:90:dd:de:93:68:0d:cb:73:21:fa:46:09: 01:9f:60:13:33:ca:ce:2c:17:54:ba:10:18:09:59: 9c:da:7c:36:cd:d2:a4:2d:ab:60:20:dc:db:d8:22: 01:bf:66:b3:5f:3a:55:15:53:72:6c:77:7e:2b:81: bf:74:31:ab:89:84:d9:68:c7:9d:51:ef:40:ca:36: 1e:99:89:34:8f:85:7b:39:e1:ec:fc:3d:7c:61:a1: eb:57:53:b1:02:28:6e:83:9c:71:30:5d:7c:20:44: 4b:2f:7a:33:7d:7d:05:1c:f8:da:0c:d3:7a:dc:88: 11:2e:d5:90:78:56:7d:7c:cb:57:f3:38:2a:78:80: f0:a2:26:bb:c8:99:a5:ad:3e:b2:9c:63:a1:ba:bb: 54:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:39:87:7D:2C:F2:70:46:1E:5F:30:DE:02:50:5E:ED:A5:99:D1:04 X509v3 Authority Key Identifier: keyid:40:BB:14:A2:FD:8B:81:10:30:42:BF:32:FA:C9:B2:D9:0A:CF:8A:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4oWon9ukj5YKgYfECdsH4rb97JUFpcX2tZF2qS6M9662/0/40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4oWon9ukj5YKgYfECdsH4rb97JUFpcX2tZF2qS6M9662/0/40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:ba:35:1c:7f:f9:d9:bd:51:bc:cf:ec:50:c8:61:a2:06:bd: f8:c0:10:a1:1b:83:92:7b:cf:3c:57:78:58:ce:03:09:37:28: 9d:52:3a:55:4c:42:33:f6:0c:45:de:e8:07:2f:30:cb:ee:ba: f1:11:c0:d8:52:c8:d9:92:45:bd:4f:6b:b6:8a:a7:07:16:1c: 7e:c3:43:b6:8e:15:5e:c2:75:c2:b5:71:a8:34:4e:fa:c2:e2: 60:c0:51:dc:38:70:12:c2:1e:73:04:8a:f8:db:05:09:1b:7d: 92:f0:e1:d5:9b:ac:dc:8a:20:fd:95:94:51:2e:c4:66:84:84: 46:4a:e3:dd:a8:94:17:97:24:9b:34:4a:a7:97:16:38:93:ed: ac:31:dc:32:d6:5a:73:20:f9:af:2b:4b:3f:01:df:24:3a:99: d2:33:d4:4f:97:12:6b:f5:dc:b8:6b:bc:b4:ab:ad:a0:fb:bc: ff:fc:88:f0:94:a7:b7:2b:55:89:d9:c0:47:a0:a2:18:65:f6: 58:74:71:05:ef:4e:21:68:99:e4:f1:70:d1:71:e9:ab:33:90: 01:c7:ad:53:c5:6f:62:f6:dd:af:cd:4c:c8:bf:52:e7:42:c3: 07:4e:3f:6e:fd:db:91:c2:0f:3d:ed:aa:d8:94:43:02:49:a2: 9e:bc:d5:78 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUfx0edvW3XA8uYB1bBHnXqfu9ASwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDBCQjE0QTJGRDhCODExMDMwNDJCRjMyRkFDOUIyRDkw QUNGOEFGRTAeFw0yNjAzMjUwNTQ0NTlaFw0yNjAzMjYwNzAwNTlaMDMxMTAvBgNV BAMTKDNEMzk4NzdEMkNGMjcwNDYxRTVGMzBERTAyNTA1RUVEQTU5OUQxMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKf32B99XW4bNtbWnGmy644zmn gmqErW6aM4UBx5e+1BFNPfdfFJfD8HfTqPNmKVGsp7MksBSXFRQhtHjw4K7lcHGc neLNbcjUakOH5XHZnu2aC+jo2/V5IMujwPSwwtKg6HrfcEAAVmDaAZDd3pNoDctz IfpGCQGfYBMzys4sF1S6EBgJWZzafDbN0qQtq2Ag3NvYIgG/ZrNfOlUVU3Jsd34r gb90MauJhNlox51R70DKNh6ZiTSPhXs54ez8PXxhoetXU7ECKG6DnHEwXXwgREsv ejN9fQUc+NoM03rciBEu1ZB4Vn18y1fzOCp4gPCiJrvImaWtPrKcY6G6u1Q1AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUPTmHfSzycEYeXzDeAlBe7aWZ0QQwHwYDVR0j BBgwFoAUQLsUov2LgRAwQr8y+smy2QrPiv4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNG9Xb245dWtqNVlLZ1lmRUNkc0g0cmI5N0pVRnBjWDJ0WkYycVM2TTk2 NjIvMC80MEJCMTRBMkZEOEI4MTEwMzA0MkJGMzJGQUM5QjJEOTBBQ0Y4QUZFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQwQkIxNEEyRkQ4QjgxMTAz MDQyQkYzMkZBQzlCMkQ5MEFDRjhBRkUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NG9Xb245dWtqNVlLZ1lmRUNkc0g0cmI5N0pVRnBjWDJ0WkYycVM2TTk2NjIvMC80 MEJCMTRBMkZEOEI4MTEwMzA0MkJGMzJGQUM5QjJEOTBBQ0Y4QUZFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAA7o1HH/52b1RvM/sUMhhoga9+MAQoRuDknvPPFd4WM4DCTconVI6VUxCM/YM Rd7oBy8wy+668RHA2FLI2ZJFvU9rtoqnBxYcfsNDto4VXsJ1wrVxqDRO+sLiYMBR 3DhwEsIecwSK+NsFCRt9kvDh1Zus3Iog/ZWUUS7EZoSERkrj3aiUF5ckmzRKp5cW OJPtrDHcMtZacyD5rytLPwHfJDqZ0jPUT5cSa/XcuGu8tKutoPu8//yI8JSntytV idnAR6CiGGX2WHRxBe9OIWiZ5PFw0XHpqzOQAcetU8VvYvbdr81MyL9S50LDB04/ bv3bkcIPPe2q2JRDAkminrzVeA== -----END CERTIFICATE-----Generated at Thu Mar 26 01:16:26 2026 by rpki-client