$ rpki-client -vvf rpki-repo.registro.br/repo/5cheyxTnGDnvuwzxM38F4toYC73UHZ6U6izUyoRrGsgt/0/4856F1A3B30D5C7881DA87018005E5D420414FCA.mft File: 4856F1A3B30D5C7881DA87018005E5D420414FCA.mft (raw, json) Hash identifier: iHajia6qACaQEOaBIpx4XBUmeBvW4dZJwSSScTI6xVM= Subject key identifier: C7:E1:88:14:E9:60:65:7E:B1:93:0E:5E:4C:75:A1:DD:FA:56:CA:2D Authority key identifier: 48:56:F1:A3:B3:0D:5C:78:81:DA:87:01:80:05:E5:D4:20:41:4F:CA Certificate issuer: /CN=4856F1A3B30D5C7881DA87018005E5D420414FCA Certificate serial: 6DC151F64C758F948492E245CFDB52A5E8042994 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4856F1A3B30D5C7881DA87018005E5D420414FCA.cer Subject info access: rsync://rpki-repo.registro.br/repo/5cheyxTnGDnvuwzxM38F4toYC73UHZ6U6izUyoRrGsgt/0/4856F1A3B30D5C7881DA87018005E5D420414FCA.mft Manifest number: 01E7 Signing time: Wed 25 Mar 2026 13:21:29 +0000 Manifest this update: Wed 25 Mar 2026 13:16:29 +0000 Manifest next update: Thu 26 Mar 2026 16:14:29 +0000 Files and hashes: 1: 3137372e32312e38302e302f32302d3332203d3e203533303838.roa (hash: tFuHKz/s3BdjJM4pioXyxGPu891yBfBk8UFhPUldP30=) 2: 3138372e33332e3230382e302f32302d3332203d3e203533303838.roa (hash: A23b5UkF2jEVo2OGAZ7Hi0+sfgnbV7WaHxabvCl9A8E=) 3: 4856F1A3B30D5C7881DA87018005E5D420414FCA.crl (hash: R4Sj2eXSMHI8S3OMPe6B2VRCB4JSciXjik5M01nKNJs=) 4: 323830343a3336303a3a2f33322d313238203d3e203533303838.roa (hash: Fzkbt6+bDg45FHge4eVjFdmeR+Zts5Y2bHYh8Nn0uwQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5cheyxTnGDnvuwzxM38F4toYC73UHZ6U6izUyoRrGsgt/0/4856F1A3B30D5C7881DA87018005E5D420414FCA.crl rsync://rpki-repo.registro.br/repo/5cheyxTnGDnvuwzxM38F4toYC73UHZ6U6izUyoRrGsgt/0/4856F1A3B30D5C7881DA87018005E5D420414FCA.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4856F1A3B30D5C7881DA87018005E5D420414FCA.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 26 Mar 2026 16:14:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:c1:51:f6:4c:75:8f:94:84:92:e2:45:cf:db:52:a5:e8:04:29:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4856F1A3B30D5C7881DA87018005E5D420414FCA Validity Not Before: Mar 25 13:16:29 2026 GMT Not After : Mar 26 16:14:29 2026 GMT Subject: CN=C7E18814E960657EB1930E5E4C75A1DDFA56CA2D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:43:c0:14:99:86:dd:ce:e9:fa:fd:bd:b3:f1: a6:9c:bc:dc:c6:8b:71:ae:f4:3f:d4:89:a0:ec:b9: 69:f2:aa:7b:86:86:e4:e9:b2:99:e0:8c:6f:23:e4: 81:f4:e3:3a:6f:bf:eb:4a:0a:e6:23:79:3f:ef:4f: 5a:73:97:46:24:c1:bd:85:75:79:a3:c2:26:bf:37: a5:01:e9:27:9c:c7:bb:88:42:a1:13:45:d8:cc:84: cc:f5:30:53:aa:66:b8:2b:18:9c:9c:f6:0f:53:48: 5c:20:29:df:24:ad:cd:57:b3:47:81:9e:f4:51:e2: b3:42:fc:d4:2a:e3:5d:db:13:7b:b5:45:14:a3:5e: b3:22:98:ad:98:2f:93:7f:f3:c0:58:b1:62:04:9e: 53:26:3e:0e:a1:4d:5a:b4:8f:81:8c:95:7a:bb:89: 4f:1c:fd:d5:1a:27:75:87:a2:59:ab:b6:be:2f:05: f1:1b:f8:86:4f:ca:77:83:81:e0:70:45:c8:4f:41: f4:1e:48:b6:23:44:ec:fb:e3:cd:77:a9:10:cd:35: 72:5a:65:63:00:d4:85:36:5e:f9:67:95:52:c8:fd: da:22:e2:ed:c5:89:c4:99:4c:0d:f2:45:ec:d2:04: 24:af:06:7f:e1:e5:1e:c2:b1:73:9d:83:b6:83:dc: c6:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:E1:88:14:E9:60:65:7E:B1:93:0E:5E:4C:75:A1:DD:FA:56:CA:2D X509v3 Authority Key Identifier: keyid:48:56:F1:A3:B3:0D:5C:78:81:DA:87:01:80:05:E5:D4:20:41:4F:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5cheyxTnGDnvuwzxM38F4toYC73UHZ6U6izUyoRrGsgt/0/4856F1A3B30D5C7881DA87018005E5D420414FCA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4856F1A3B30D5C7881DA87018005E5D420414FCA.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5cheyxTnGDnvuwzxM38F4toYC73UHZ6U6izUyoRrGsgt/0/4856F1A3B30D5C7881DA87018005E5D420414FCA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:89:ff:ed:d6:6f:c1:6e:90:cd:b7:ab:b2:19:1c:90:26:38: ab:26:55:54:68:c9:fe:a3:90:66:2a:a3:02:1b:94:3c:b5:9a: 9c:80:7d:db:a2:35:fe:9d:b6:79:9c:34:dc:af:39:f7:ca:b3: b4:75:71:96:90:83:d0:c9:78:7e:6a:08:02:21:93:b4:c5:f5: 4c:1c:ee:79:a6:bc:88:5b:60:a7:b1:2e:4d:f7:e0:10:52:fe: d7:2e:94:1e:ab:99:a4:f9:db:87:db:9e:77:f5:4f:df:28:4d: f8:e8:f1:6c:cc:aa:2b:2b:79:a1:34:32:29:aa:c7:b9:f8:c4: 49:79:69:a1:44:75:94:d7:6b:1e:bf:01:27:28:14:c3:33:64: 0c:b8:bf:6a:2e:9a:b8:06:e6:e5:44:f3:f5:e9:1f:1f:d1:68: 49:dd:b6:2f:e3:ab:a4:67:84:4e:8a:4b:d7:77:8c:84:c0:14: da:91:85:f0:82:aa:b6:f7:23:39:4d:a1:2a:0d:56:e8:42:1f: 5d:bf:c8:e2:4e:95:95:eb:d4:1e:83:fb:1f:49:37:aa:6d:99: fe:d1:c9:c1:9d:8a:32:cf:dc:9a:aa:8f:e8:16:da:bf:c5:bc: cf:1a:06:45:5a:a6:ca:e3:23:52:d2:22:3a:cc:d1:db:2e:25: 5d:31:89:2a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUbcFR9kx1j5SEkuJFz9tSpegEKZQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDg1NkYxQTNCMzBENUM3ODgxREE4NzAxODAwNUU1RDQy MDQxNEZDQTAeFw0yNjAzMjUxMzE2MjlaFw0yNjAzMjYxNjE0MjlaMDMxMTAvBgNV BAMTKEM3RTE4ODE0RTk2MDY1N0VCMTkzMEU1RTRDNzVBMURERkE1NkNBMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtQ8AUmYbdzun6/b2z8aacvNzG i3Gu9D/UiaDsuWnyqnuGhuTpspngjG8j5IH04zpvv+tKCuYjeT/vT1pzl0Ykwb2F dXmjwia/N6UB6Secx7uIQqETRdjMhMz1MFOqZrgrGJyc9g9TSFwgKd8krc1Xs0eB nvRR4rNC/NQq413bE3u1RRSjXrMimK2YL5N/88BYsWIEnlMmPg6hTVq0j4GMlXq7 iU8c/dUaJ3WHolmrtr4vBfEb+IZPyneDgeBwRchPQfQeSLYjROz74813qRDNNXJa ZWMA1IU2XvlnlVLI/doi4u3FicSZTA3yRezSBCSvBn/h5R7CsXOdg7aD3MaPAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUx+GIFOlgZX6xkw5eTHWh3fpWyi0wHwYDVR0j BBgwFoAUSFbxo7MNXHiB2ocBgAXl1CBBT8owDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNWNoZXl4VG5HRG52dXd6eE0zOEY0dG9ZQzczVUhaNlU2aXpVeW9Sckdz Z3QvMC80ODU2RjFBM0IzMEQ1Qzc4ODFEQTg3MDE4MDA1RTVENDIwNDE0RkNBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ4NTZGMUEzQjMwRDVDNzg4 MURBODcwMTgwMDVFNUQ0MjA0MTRGQ0EuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NWNoZXl4VG5HRG52dXd6eE0zOEY0dG9ZQzczVUhaNlU2aXpVeW9SckdzZ3QvMC80 ODU2RjFBM0IzMEQ1Qzc4ODFEQTg3MDE4MDA1RTVENDIwNDE0RkNBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEADIn/7dZvwW6QzbershkckCY4qyZVVGjJ/qOQZiqjAhuUPLWanIB926I1/p22 eZw03K8598qztHVxlpCD0Ml4fmoIAiGTtMX1TBzueaa8iFtgp7EuTffgEFL+1y6U HquZpPnbh9ued/VP3yhN+OjxbMyqKyt5oTQyKarHufjESXlpoUR1lNdrHr8BJygU wzNkDLi/ai6auAbm5UTz9ekfH9FoSd22L+OrpGeETopL13eMhMAU2pGF8IKqtvcj OU2hKg1W6EIfXb/I4k6VlevUHoP7H0k3qm2Z/tHJwZ2KMs/cmqqP6Bbav8W8zxoG RVqmyuMjUtIiOszR2y4lXTGJKg== -----END CERTIFICATE-----Generated at Thu Mar 26 02:56:18 2026 by rpki-client