$ rpki-client -vvf rpki-repo.registro.br/repo/5vfhd2kEoxEivgSho5UnJiYBtXAWBx7ebFY1meZDM1gt/0/CFDE24864395D54B821566D55DFAD56DC2717A4F.mft File: CFDE24864395D54B821566D55DFAD56DC2717A4F.mft (raw, json) Hash identifier: 2Z/HPdiaYGkAYLT6tGSiA5hrbjOLO+2S43vR4u9nwvQ= Subject key identifier: BE:F7:BD:5F:F1:60:B7:C4:51:2D:2B:32:6C:C6:3F:0F:5B:84:05:81 Authority key identifier: CF:DE:24:86:43:95:D5:4B:82:15:66:D5:5D:FA:D5:6D:C2:71:7A:4F Certificate issuer: /CN=CFDE24864395D54B821566D55DFAD56DC2717A4F Certificate serial: 1C6BC090C97B8FE32CAFC7206136F07963AD3885 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFDE24864395D54B821566D55DFAD56DC2717A4F.cer Subject info access: rsync://rpki-repo.registro.br/repo/5vfhd2kEoxEivgSho5UnJiYBtXAWBx7ebFY1meZDM1gt/0/CFDE24864395D54B821566D55DFAD56DC2717A4F.mft Manifest number: 83 Signing time: Wed 25 Mar 2026 07:09:06 +0000 Manifest this update: Wed 25 Mar 2026 07:04:06 +0000 Manifest next update: Thu 26 Mar 2026 07:54:06 +0000 Files and hashes: 1: 323830343a383961633a3a2f33332d3333203d3e20323733363139.roa (hash: eySNpXWtJeR5WEHH6D9gUUrO/py+gmj0uFyjGnCwR4k=) 2: 323830343a383961633a383030303a3a2f33342d3334203d3e20323733363139.roa (hash: sCs5I/xxKnSn71/ptroWwjucZGA918ogCEIyQMRWm40=) 3: 323830343a383961633a3a2f33322d3332203d3e20323733363139.roa (hash: 6YR6ZiSGc7CxTkzhcIGVaCU+A/kiB1EQ85pD9gUP53k=) 4: CFDE24864395D54B821566D55DFAD56DC2717A4F.crl (hash: PLEncEvXDVocD1eSE2V5VOl4XslUpIdGeuC723b8tgI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5vfhd2kEoxEivgSho5UnJiYBtXAWBx7ebFY1meZDM1gt/0/CFDE24864395D54B821566D55DFAD56DC2717A4F.crl rsync://rpki-repo.registro.br/repo/5vfhd2kEoxEivgSho5UnJiYBtXAWBx7ebFY1meZDM1gt/0/CFDE24864395D54B821566D55DFAD56DC2717A4F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFDE24864395D54B821566D55DFAD56DC2717A4F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 26 Mar 2026 07:54:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:6b:c0:90:c9:7b:8f:e3:2c:af:c7:20:61:36:f0:79:63:ad:38:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFDE24864395D54B821566D55DFAD56DC2717A4F Validity Not Before: Mar 25 07:04:06 2026 GMT Not After : Mar 26 07:54:06 2026 GMT Subject: CN=BEF7BD5FF160B7C4512D2B326CC63F0F5B840581 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:4d:62:c2:db:66:c2:26:bc:9f:07:d7:cf:ec: 24:03:72:fb:e2:28:83:4a:c1:c1:60:ee:15:61:3e: ab:f0:39:37:19:97:3f:d7:63:f1:30:44:e1:c3:9d: c9:39:1b:be:c4:62:c4:be:1f:50:4f:f2:cf:b8:2b: a6:7e:13:57:13:72:0c:4f:7e:ba:bb:e1:08:f5:a1: b3:da:e8:f2:a1:40:75:9b:b0:40:e3:be:95:13:d9: 16:62:2c:0a:ac:21:66:68:cb:b6:9a:f6:5f:0b:66: bf:d5:c7:87:24:b8:37:0c:b4:73:a1:77:5f:27:40: e4:54:0e:c9:95:3a:df:fe:e5:7f:0f:8b:83:1a:f9: 65:04:5c:85:5a:e5:c1:9c:fa:36:2c:db:ab:ec:8c: 55:46:79:4e:46:4f:d9:15:9e:0f:14:7e:94:cc:bb: 1c:9d:f3:31:2f:d5:a1:96:bf:cc:ac:86:d7:94:00: eb:0b:67:6c:95:3a:4a:0e:fa:47:55:c9:70:b0:5c: ec:74:18:8d:40:f2:3d:49:91:81:c5:1a:db:ee:6e: 34:38:30:ff:55:5d:f9:75:e0:bd:5e:c3:6e:e9:7c: ba:15:09:d1:5f:50:db:5d:74:42:13:44:12:4a:ed: f3:92:8c:03:c7:c1:19:46:e9:62:92:ea:ca:ba:89: 48:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:F7:BD:5F:F1:60:B7:C4:51:2D:2B:32:6C:C6:3F:0F:5B:84:05:81 X509v3 Authority Key Identifier: keyid:CF:DE:24:86:43:95:D5:4B:82:15:66:D5:5D:FA:D5:6D:C2:71:7A:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5vfhd2kEoxEivgSho5UnJiYBtXAWBx7ebFY1meZDM1gt/0/CFDE24864395D54B821566D55DFAD56DC2717A4F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFDE24864395D54B821566D55DFAD56DC2717A4F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5vfhd2kEoxEivgSho5UnJiYBtXAWBx7ebFY1meZDM1gt/0/CFDE24864395D54B821566D55DFAD56DC2717A4F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:c0:3a:6a:ce:8a:35:58:fa:6c:fa:bc:e9:3b:6e:35:e4:e7: 05:ed:4a:48:ef:fb:0c:1b:63:86:21:0a:7a:f0:f7:a0:d3:65: 5c:63:df:b3:b5:2c:9a:ca:0f:b3:14:4a:ce:b8:0e:46:7a:58: 7c:9f:04:28:aa:e4:51:d2:f2:12:e2:26:76:78:87:a3:fd:11: 20:91:3f:e2:06:57:00:d4:1d:d1:54:31:7f:5d:b2:46:49:25: 29:5f:49:f5:3a:fd:c0:91:58:99:42:77:ce:cb:64:18:d8:24: 9c:43:da:94:ce:0d:f4:e8:6c:fa:8e:0b:8a:39:69:04:8c:a4: 79:05:64:56:db:1a:8a:56:01:05:d7:10:6c:aa:ee:af:f7:48: 42:67:4b:9f:86:29:a7:61:23:fd:d8:1a:68:9e:f6:2c:33:80: d3:6c:88:4c:44:88:16:72:06:fa:19:41:c9:72:e0:11:f3:12: b0:01:1c:65:af:61:1f:91:30:ea:03:2f:a6:3e:84:19:01:7c: ea:e8:6a:0e:7a:1a:03:64:cd:23:f2:cf:49:ab:58:ae:5c:10: 9a:f7:a4:00:00:bf:77:c0:86:49:6c:2f:42:57:fb:34:8a:2f: a9:de:fe:79:86:65:35:e7:58:9c:35:b4:53:b1:5d:22:52:ac: b1:5d:1f:6b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUHGvAkMl7j+Msr8cgYTbweWOtOIUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZERTI0ODY0Mzk1RDU0QjgyMTU2NkQ1NURGQUQ1NkRD MjcxN0E0RjAeFw0yNjAzMjUwNzA0MDZaFw0yNjAzMjYwNzU0MDZaMDMxMTAvBgNV BAMTKEJFRjdCRDVGRjE2MEI3QzQ1MTJEMkIzMjZDQzYzRjBGNUI4NDA1ODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzTWLC22bCJryfB9fP7CQDcvvi KINKwcFg7hVhPqvwOTcZlz/XY/EwROHDnck5G77EYsS+H1BP8s+4K6Z+E1cTcgxP frq74Qj1obPa6PKhQHWbsEDjvpUT2RZiLAqsIWZoy7aa9l8LZr/Vx4ckuDcMtHOh d18nQORUDsmVOt/+5X8Pi4Ma+WUEXIVa5cGc+jYs26vsjFVGeU5GT9kVng8UfpTM uxyd8zEv1aGWv8yshteUAOsLZ2yVOkoO+kdVyXCwXOx0GI1A8j1JkYHFGtvubjQ4 MP9VXfl14L1ew27pfLoVCdFfUNtddEITRBJK7fOSjAPHwRlG6WKS6sq6iUhVAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUvve9X/Fgt8RRLSsybMY/D1uEBYEwHwYDVR0j BBgwFoAUz94khkOV1UuCFWbVXfrVbcJxek8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNXZmaGQya0VveEVpdmdTaG81VW5KaVlCdFhBV0J4N2ViRlkxbWVaRE0x Z3QvMC9DRkRFMjQ4NjQzOTVENTRCODIxNTY2RDU1REZBRDU2REMyNzE3QTRGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NGREUyNDg2NDM5NUQ1NEI4 MjE1NjZENTVERkFENTZEQzI3MTdBNEYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NXZmaGQya0VveEVpdmdTaG81VW5KaVlCdFhBV0J4N2ViRlkxbWVaRE0xZ3QvMC9D RkRFMjQ4NjQzOTVENTRCODIxNTY2RDU1REZBRDU2REMyNzE3QTRGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmsA6as6KNVj6bPq86TtuNeTnBe1KSO/7DBtjhiEKevD3oNNlXGPfs7UsmsoP sxRKzrgORnpYfJ8EKKrkUdLyEuImdniHo/0RIJE/4gZXANQd0VQxf12yRkklKV9J 9Tr9wJFYmUJ3zstkGNgknEPalM4N9Ohs+o4LijlpBIykeQVkVtsailYBBdcQbKru r/dIQmdLn4Ypp2Ej/dgaaJ72LDOA02yITESIFnIG+hlByXLgEfMSsAEcZa9hH5Ew 6gMvpj6EGQF86uhqDnoaA2TNI/LPSatYrlwQmvekAAC/d8CGSWwvQlf7NIovqd7+ eYZlNedYnDW0U7FdIlKssV0faw== -----END CERTIFICATE-----Generated at Thu Mar 26 01:24:54 2026 by rpki-client