$ rpki-client -vvf rpki-repo.registro.br/repo/5NWgGTnyPJTvvhBYW48ViTn1WKh8icyStVecxq7yTzVt/0/D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.mft File: D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.mft (raw, json) Hash identifier: aRSUgU67gZM0qipaKcY5XkBDK8f+5huiBoZYj+Q5Q3Q= Subject key identifier: 7D:C8:7E:CE:C1:A9:B2:04:E4:2A:BD:8C:20:C8:3E:51:EA:BD:5C:F2 Authority key identifier: D8:BA:7C:35:A5:C2:42:05:89:B3:0C:33:D9:CF:13:74:50:5F:3D:BC Certificate issuer: /CN=D8BA7C35A5C2420589B30C33D9CF1374505F3DBC Certificate serial: 23D6DE62064898206AA19D4152ADD7A8BCB2F5E3 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.cer Subject info access: rsync://rpki-repo.registro.br/repo/5NWgGTnyPJTvvhBYW48ViTn1WKh8icyStVecxq7yTzVt/0/D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.mft Manifest number: 021B Signing time: Wed 25 Mar 2026 19:13:24 +0000 Manifest this update: Wed 25 Mar 2026 19:08:24 +0000 Manifest next update: Thu 26 Mar 2026 22:03:24 +0000 Files and hashes: 1: D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.crl (hash: w0Adkcw0ai9O98bwoUul1H9QfazZ9exqy65fA0P6ZRY=) 2: 3137302e3233332e32302e302f32322d3234203d3e20323638323839.roa (hash: nJHKWcaMdxBbjOC5bhFit9A5idnCknzOdY01So/X9KM=) 3: 323830343a346565343a3a2f33322d3438203d3e20323638323839.roa (hash: CpJuHDvAI+/wiKeDtSMafBkRDb76lm4oyzY5Bieg4T4=) 4: 34352e3233372e3230302e302f32322d3234203d3e20323638323839.roa (hash: E0joDVbK7d76B68vuV8WXolFT2AAlH6oKz3TDd96iqs=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5NWgGTnyPJTvvhBYW48ViTn1WKh8icyStVecxq7yTzVt/0/D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.crl rsync://rpki-repo.registro.br/repo/5NWgGTnyPJTvvhBYW48ViTn1WKh8icyStVecxq7yTzVt/0/D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 26 Mar 2026 22:03:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:d6:de:62:06:48:98:20:6a:a1:9d:41:52:ad:d7:a8:bc:b2:f5:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D8BA7C35A5C2420589B30C33D9CF1374505F3DBC Validity Not Before: Mar 25 19:08:24 2026 GMT Not After : Mar 26 22:03:24 2026 GMT Subject: CN=7DC87ECEC1A9B204E42ABD8C20C83E51EABD5CF2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:34:a2:79:10:8f:63:2d:c9:20:7f:52:1e:3d: f3:72:ec:44:f9:23:23:eb:3e:ee:59:02:ad:bc:05: fe:f8:2d:fe:1b:02:d9:43:56:89:04:16:55:19:3f: c0:c3:85:de:5d:09:fc:35:b3:e4:58:dc:27:0a:bd: ad:d6:f2:76:2a:c9:39:e6:05:d9:9b:56:b5:67:aa: c7:87:73:ff:9b:df:fb:98:f2:52:a2:d9:32:05:f4: a6:a3:81:8a:1d:c4:88:e5:dd:d4:98:7f:bf:69:55: eb:76:7e:ea:aa:3d:cb:dc:2d:95:a6:73:88:f4:39: cf:c8:0f:41:85:90:3e:15:1e:4f:6d:d5:64:d8:8b: 36:56:ef:78:3c:e1:ea:d1:f7:c5:eb:0e:06:2b:0c: 13:3a:50:d1:37:f2:0d:15:27:48:c6:45:78:64:4e: cd:05:ca:c2:ce:f9:08:ab:a8:93:fa:8d:7f:e6:5a: 1f:f3:fa:4a:ce:6e:69:f8:ee:49:2e:c9:1d:b8:0b: 7e:86:67:b4:d4:09:99:4e:72:86:33:c7:09:e5:2d: 22:f7:4c:cc:59:7f:3e:59:38:87:15:4f:cd:d0:30: 3d:6f:a5:c4:a1:11:a9:59:be:ac:ef:bf:aa:c5:ad: 81:c8:a4:3e:88:ec:47:cc:ec:f6:a1:45:14:56:90: 86:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:C8:7E:CE:C1:A9:B2:04:E4:2A:BD:8C:20:C8:3E:51:EA:BD:5C:F2 X509v3 Authority Key Identifier: keyid:D8:BA:7C:35:A5:C2:42:05:89:B3:0C:33:D9:CF:13:74:50:5F:3D:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5NWgGTnyPJTvvhBYW48ViTn1WKh8icyStVecxq7yTzVt/0/D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5NWgGTnyPJTvvhBYW48ViTn1WKh8icyStVecxq7yTzVt/0/D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:08:c2:d7:1e:76:bd:5e:56:51:96:69:5a:c1:b2:9f:d4:48: 36:f0:97:c8:97:60:b9:dd:20:65:16:14:97:4b:f2:a3:53:16: b7:61:51:9f:24:87:22:3b:85:bd:0a:b1:c4:4e:02:72:06:18: b0:ca:da:eb:ec:0f:86:3f:8e:33:6a:39:05:72:2d:31:37:e8: 86:2d:cf:40:56:cc:c8:13:2b:2b:36:d8:9e:21:50:6e:bd:e1: 5d:83:ce:04:46:d3:7b:cd:3a:28:ce:ac:34:ad:5b:b3:d3:13: 42:87:a3:94:18:cc:f4:f5:4e:d9:96:77:78:81:e2:63:49:08: 4f:9c:57:45:98:b8:15:e1:ef:87:b9:7d:ea:1c:9d:64:2b:86: 89:7e:e1:70:fd:6d:09:d0:e7:dc:a8:bf:5d:64:b5:c2:40:8b: 4c:d3:50:b6:1e:ef:9e:0b:7a:03:1c:4a:a7:bc:cd:96:03:21: 64:da:89:5f:c0:88:06:22:d8:ac:00:e5:bf:31:54:4f:d7:c8: a0:41:a9:e7:8b:22:1b:69:c8:b6:1c:85:31:3a:0e:7c:ed:4d: 94:0d:45:c4:49:92:a2:6d:ec:95:62:ff:9e:c2:41:19:1c:e3: c6:5b:93:83:5d:bc:d3:32:00:0a:42:52:6a:07:94:ec:81:4a: f4:c6:98:cd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUI9beYgZImCBqoZ1BUq3XqLyy9eMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDhCQTdDMzVBNUMyNDIwNTg5QjMwQzMzRDlDRjEzNzQ1 MDVGM0RCQzAeFw0yNjAzMjUxOTA4MjRaFw0yNjAzMjYyMjAzMjRaMDMxMTAvBgNV BAMTKDdEQzg3RUNFQzFBOUIyMDRFNDJBQkQ4QzIwQzgzRTUxRUFCRDVDRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3NKJ5EI9jLckgf1IePfNy7ET5 IyPrPu5ZAq28Bf74Lf4bAtlDVokEFlUZP8DDhd5dCfw1s+RY3CcKva3W8nYqyTnm BdmbVrVnqseHc/+b3/uY8lKi2TIF9KajgYodxIjl3dSYf79pVet2fuqqPcvcLZWm c4j0Oc/ID0GFkD4VHk9t1WTYizZW73g84erR98XrDgYrDBM6UNE38g0VJ0jGRXhk Ts0FysLO+QirqJP6jX/mWh/z+krObmn47kkuyR24C36GZ7TUCZlOcoYzxwnlLSL3 TMxZfz5ZOIcVT83QMD1vpcShEalZvqzvv6rFrYHIpD6I7EfM7PahRRRWkIb5AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUfch+zsGpsgTkKr2MIMg+Ueq9XPIwHwYDVR0j BBgwFoAU2Lp8NaXCQgWJswwz2c8TdFBfPbwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNU5XZ0dUbnlQSlR2dmhCWVc0OFZpVG4xV0toOGljeVN0VmVjeHE3eVR6 VnQvMC9EOEJBN0MzNUE1QzI0MjA1ODlCMzBDMzNEOUNGMTM3NDUwNUYzREJDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q4QkE3QzM1QTVDMjQyMDU4 OUIzMEMzM0Q5Q0YxMzc0NTA1RjNEQkMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NU5XZ0dUbnlQSlR2dmhCWVc0OFZpVG4xV0toOGljeVN0VmVjeHE3eVR6VnQvMC9E OEJBN0MzNUE1QzI0MjA1ODlCMzBDMzNEOUNGMTM3NDUwNUYzREJDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbQjC1x52vV5WUZZpWsGyn9RINvCXyJdgud0gZRYUl0vyo1MWt2FRnySHIjuF vQqxxE4CcgYYsMra6+wPhj+OM2o5BXItMTfohi3PQFbMyBMrKzbYniFQbr3hXYPO BEbTe806KM6sNK1bs9MTQoejlBjM9PVO2ZZ3eIHiY0kIT5xXRZi4FeHvh7l96hyd ZCuGiX7hcP1tCdDn3Ki/XWS1wkCLTNNQth7vngt6AxxKp7zNlgMhZNqJX8CIBiLY rADlvzFUT9fIoEGp54siG2nIthyFMToOfO1NlA1FxEmSom3slWL/nsJBGRzjxluT g1280zIACkJSageU7IFK9MaYzQ== -----END CERTIFICATE-----Generated at Thu Mar 26 01:20:59 2026 by rpki-client