$ rpki-client -vvf rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.mft File: 653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.mft (raw, json) Hash identifier: XcUmrGujNcMpBpNz46G4Z5OGoMobxMPUiR914mJz1X8= Subject key identifier: 44:E9:22:79:28:0E:97:71:33:98:20:2C:E7:FB:81:5F:A8:EA:E4:E5 Authority key identifier: 65:38:37:D7:EC:A1:FE:11:45:D0:CE:15:E0:BF:89:5E:E0:6A:27:E2 Certificate issuer: /CN=653837D7ECA1FE1145D0CE15E0BF895EE06A27E2 Certificate serial: 66D92D8197C1C3DB90BDEF5ACDC38DFB946686CB Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.cer Subject info access: rsync://rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.mft Manifest number: 038A Signing time: Wed 25 Mar 2026 11:25:19 +0000 Manifest this update: Wed 25 Mar 2026 11:20:19 +0000 Manifest next update: Thu 26 Mar 2026 11:28:19 +0000 Files and hashes: 1: 3138372e39352e3132382e302f32322d3332203d3e20323635323634.roa (hash: 87KSQKhyOaz4BUhIfdPsHtVz1luy0xMKpTqPd6HwZV8=) 2: 3136382e39302e34382e302f32322d3332203d3e20323635323634.roa (hash: 0t+krdLaLLO1PS1HNXqlm8C8jvWQMEbdSWgBhuKWTEE=) 3: 323830343a326432383a3a2f33322d313238203d3e20323635323634.roa (hash: ETvkOo5GFk96k4J+OJe/boHp2fy3fAAB3jwF59vvq8I=) 4: 653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.crl (hash: 6YJb4tvHcfslYno57jrK+UwKbaaGtLA/B8FmhNa2Nck=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.crl rsync://rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 26 Mar 2026 11:28:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:d9:2d:81:97:c1:c3:db:90:bd:ef:5a:cd:c3:8d:fb:94:66:86:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=653837D7ECA1FE1145D0CE15E0BF895EE06A27E2 Validity Not Before: Mar 25 11:20:19 2026 GMT Not After : Mar 26 11:28:19 2026 GMT Subject: CN=44E92279280E97713398202CE7FB815FA8EAE4E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d5:bb:00:7e:6f:6f:e0:f9:12:00:97:e7:0a: 89:00:26:07:fb:d1:9f:e8:43:0b:2e:f4:59:cd:45: f8:3a:83:e3:e0:49:ea:49:7b:7d:ce:3d:ba:90:28: e7:e9:5e:59:62:c6:ca:58:fb:d7:de:40:37:28:01: cb:01:01:5d:1a:1c:c0:e0:72:88:c0:7e:b7:aa:17: fa:ab:76:81:90:ce:06:98:34:45:74:52:82:59:d3: 68:81:af:0f:13:64:be:7b:77:be:17:88:ad:90:5f: fc:62:e4:8f:cf:b1:7d:ba:46:c5:09:65:b8:29:b9: c0:4b:99:64:c0:3f:7a:2d:30:a9:82:45:ce:b0:8d: 35:dd:35:7d:93:6c:e1:cb:94:05:0f:ab:fb:2d:f2: 50:98:23:97:ff:58:ea:da:23:61:7b:d2:1a:23:d2: 80:64:b5:df:e7:b4:55:2f:c5:b3:88:8d:9c:75:b9: b8:9b:48:95:75:da:71:21:f8:db:98:fe:9b:4a:04: 9f:dc:8a:33:17:29:f4:71:e9:26:3a:1e:b7:c9:bf: 28:d2:18:be:0b:a5:a8:55:e2:26:69:d2:96:ca:08: 00:9f:83:49:2c:df:76:2f:ec:5d:e2:aa:b5:e7:b3: 33:3d:9e:6e:6e:13:6a:d2:d2:3c:6b:a9:68:66:35: cc:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:E9:22:79:28:0E:97:71:33:98:20:2C:E7:FB:81:5F:A8:EA:E4:E5 X509v3 Authority Key Identifier: keyid:65:38:37:D7:EC:A1:FE:11:45:D0:CE:15:E0:BF:89:5E:E0:6A:27:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:47:9d:f2:1b:47:0c:a9:f1:83:69:48:f7:6b:e9:a2:24:3b: 5d:78:58:a9:04:e3:78:28:e3:c6:cb:e3:00:3e:56:fc:b0:0d: 0d:82:14:c5:b3:b4:0a:f2:2b:4c:38:3f:61:b9:c1:03:d2:a7: 57:e8:42:a7:4c:9d:69:f2:25:f4:c6:5d:40:29:2f:bf:ff:af: 17:ae:50:c5:b9:1c:6f:9b:5b:d2:b5:48:60:6a:3f:8a:79:7f: c9:e5:ae:01:cf:3a:a4:03:b7:3b:86:48:27:5a:3d:c5:e3:6a: e1:2f:bb:77:42:e8:03:9b:c9:c0:5d:a4:cf:a8:ce:83:96:96: 6e:2b:ad:7b:65:5d:6b:15:6b:63:51:5d:f1:7e:a5:67:1f:85: 25:16:cc:2f:32:bd:cb:5a:65:19:7b:af:f0:03:37:1e:88:bd: f2:94:9b:46:41:7e:44:c8:da:9a:ab:e3:54:d1:82:d3:26:95: b3:fc:90:8d:83:19:c1:4a:ce:1e:74:98:53:f2:a2:d7:1b:55: 7b:55:f1:02:52:fc:53:b7:64:05:3d:3c:39:45:ac:28:d0:73: b7:42:a2:99:f8:5f:51:9e:3e:44:ba:a6:b6:86:5d:d0:18:02: cb:56:c6:91:b3:22:2d:00:a1:16:da:82:b4:90:5f:a6:86:15: f3:11:34:52 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUZtktgZfBw9uQve9azcON+5RmhsswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjUzODM3RDdFQ0ExRkUxMTQ1RDBDRTE1RTBCRjg5NUVF MDZBMjdFMjAeFw0yNjAzMjUxMTIwMTlaFw0yNjAzMjYxMTI4MTlaMDMxMTAvBgNV BAMTKDQ0RTkyMjc5MjgwRTk3NzEzMzk4MjAyQ0U3RkI4MTVGQThFQUU0RTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+1bsAfm9v4PkSAJfnCokAJgf7 0Z/oQwsu9FnNRfg6g+PgSepJe33OPbqQKOfpXllixspY+9feQDcoAcsBAV0aHMDg cojAfreqF/qrdoGQzgaYNEV0UoJZ02iBrw8TZL57d74XiK2QX/xi5I/PsX26RsUJ ZbgpucBLmWTAP3otMKmCRc6wjTXdNX2TbOHLlAUPq/st8lCYI5f/WOraI2F70hoj 0oBktd/ntFUvxbOIjZx1ubibSJV12nEh+NuY/ptKBJ/cijMXKfRx6SY6HrfJvyjS GL4LpahV4iZp0pbKCACfg0ks33Yv7F3iqrXnszM9nm5uE2rS0jxrqWhmNcyvAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUROkieSgOl3EzmCAs5/uBX6jq5OUwHwYDVR0j BBgwFoAUZTg31+yh/hFF0M4V4L+JXuBqJ+IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNUxwZUpHOWZmVDVDbmhEYmhuN0FkdXl1TGJFQTlBaFdXNXdpUG9IYUZl UFMvMC82NTM4MzdEN0VDQTFGRTExNDVEMENFMTVFMEJGODk1RUUwNkEyN0UyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY1MzgzN0Q3RUNBMUZFMTE0 NUQwQ0UxNUUwQkY4OTVFRTA2QTI3RTIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NUxwZUpHOWZmVDVDbmhEYmhuN0FkdXl1TGJFQTlBaFdXNXdpUG9IYUZlUFMvMC82 NTM4MzdEN0VDQTFGRTExNDVEMENFMTVFMEJGODk1RUUwNkEyN0UyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAF0ed8htHDKnxg2lI92vpoiQ7XXhYqQTjeCjjxsvjAD5W/LANDYIUxbO0CvIr TDg/YbnBA9KnV+hCp0ydafIl9MZdQCkvv/+vF65Qxbkcb5tb0rVIYGo/inl/yeWu Ac86pAO3O4ZIJ1o9xeNq4S+7d0LoA5vJwF2kz6jOg5aWbiute2VdaxVrY1Fd8X6l Zx+FJRbMLzK9y1plGXuv8AM3Hoi98pSbRkF+RMjamqvjVNGC0yaVs/yQjYMZwUrO HnSYU/Ki1xtVe1XxAlL8U7dkBT08OUWsKNBzt0KimfhfUZ4+RLqmtoZd0BgCy1bG kbMiLQChFtqCtJBfpoYV8xE0Ug== -----END CERTIFICATE-----Generated at Thu Mar 26 01:26:52 2026 by rpki-client