$ rpki-client -vvf rpki-repo.registro.br/repo/67BFvffteLmRFNrTdg3PMkpsmV1PdrAntwwtMCFGqdov/0/5ED394D0E587E9DDF89033FC8022DAB74DF90EFE.mft File: 5ED394D0E587E9DDF89033FC8022DAB74DF90EFE.mft (raw, json) Hash identifier: irIGG4BlA1CLwcV4XaaOm94Rr66/wiYubRh9unVfA/U= Subject key identifier: 3E:49:E6:A5:75:02:BF:1A:FF:E6:50:11:F3:21:7E:D6:E4:AF:E8:AB Authority key identifier: 5E:D3:94:D0:E5:87:E9:DD:F8:90:33:FC:80:22:DA:B7:4D:F9:0E:FE Certificate issuer: /CN=5ED394D0E587E9DDF89033FC8022DAB74DF90EFE Certificate serial: 49E76C1688E88EF21B09F8AF2D63EA38C06F378C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5ED394D0E587E9DDF89033FC8022DAB74DF90EFE.cer Subject info access: rsync://rpki-repo.registro.br/repo/67BFvffteLmRFNrTdg3PMkpsmV1PdrAntwwtMCFGqdov/0/5ED394D0E587E9DDF89033FC8022DAB74DF90EFE.mft Manifest number: 9F Signing time: Wed 25 Mar 2026 12:47:14 +0000 Manifest this update: Wed 25 Mar 2026 12:42:14 +0000 Manifest next update: Thu 26 Mar 2026 14:51:14 +0000 Files and hashes: 1: 3137372e31322e302e302f31382d3234203d3e203238363635.roa (hash: TQb3lzwk+rMlFTHDn++OSM8a3b/qc2hsPMXimmgc8KI=) 2: 3138392e312e3132382e302f32302d3234203d3e203238363635.roa (hash: pcgfR6oHbTTJfj6Ul0lNR1kYjX1rl8UXECYUkJNZsUM=) 3: 5ED394D0E587E9DDF89033FC8022DAB74DF90EFE.crl (hash: 9rH3MdHbHTEazoSkjiiA1NprOUICDUD56IMSKYdDDok=) 4: 3137372e3133362e3132382e302f31392d3234203d3e203238363635.roa (hash: 5PNI/HMZX6UxDp+VtcSF3SKesm7JZFGDt2xyQkvUeEM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/67BFvffteLmRFNrTdg3PMkpsmV1PdrAntwwtMCFGqdov/0/5ED394D0E587E9DDF89033FC8022DAB74DF90EFE.crl rsync://rpki-repo.registro.br/repo/67BFvffteLmRFNrTdg3PMkpsmV1PdrAntwwtMCFGqdov/0/5ED394D0E587E9DDF89033FC8022DAB74DF90EFE.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5ED394D0E587E9DDF89033FC8022DAB74DF90EFE.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 26 Mar 2026 14:51:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:e7:6c:16:88:e8:8e:f2:1b:09:f8:af:2d:63:ea:38:c0:6f:37:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ED394D0E587E9DDF89033FC8022DAB74DF90EFE Validity Not Before: Mar 25 12:42:14 2026 GMT Not After : Mar 26 14:51:14 2026 GMT Subject: CN=3E49E6A57502BF1AFFE65011F3217ED6E4AFE8AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:0a:ce:30:7e:9e:89:f9:03:5b:8e:cd:b2:85: 44:95:cd:ec:b3:1c:e8:42:f8:1a:ff:e7:b4:c9:b2: 87:59:c1:e1:0a:a9:50:a0:90:bc:46:d7:26:74:cb: ff:9b:c4:36:44:cc:e5:81:82:4f:5c:59:1c:cc:2a: 17:69:27:63:dd:c0:16:33:28:67:32:c7:58:78:44: 1d:b9:18:9f:fd:7f:60:d3:ac:bd:f8:a6:b9:a4:bd: 01:10:e9:83:cc:da:91:63:9e:08:1a:c5:64:92:55: 4f:bb:88:5b:8d:f6:c3:4d:a4:ab:f0:74:97:b6:04: e3:a5:f4:21:12:90:8e:5e:7e:2b:3d:78:a5:7f:28: 2f:41:66:16:87:aa:2b:92:2d:d1:7e:ab:0f:82:4d: 79:03:20:4e:c7:7f:98:28:d0:9b:c4:5c:f2:9c:c5: ea:de:17:ee:82:2d:c4:c6:38:f3:07:32:c5:07:85: 09:3c:d2:13:ee:26:ac:13:a3:04:c7:6f:e0:fe:20: 0e:16:31:16:87:cc:ff:04:e1:13:55:ce:f3:0d:8b: 00:e4:33:55:12:31:7d:df:46:19:0d:f3:e2:d1:9b: 81:fe:30:3f:23:9e:88:91:f5:92:be:30:bd:8e:77: ee:69:a0:6d:2f:3c:6d:76:d9:fe:ff:f9:da:cc:21: e3:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:49:E6:A5:75:02:BF:1A:FF:E6:50:11:F3:21:7E:D6:E4:AF:E8:AB X509v3 Authority Key Identifier: keyid:5E:D3:94:D0:E5:87:E9:DD:F8:90:33:FC:80:22:DA:B7:4D:F9:0E:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/67BFvffteLmRFNrTdg3PMkpsmV1PdrAntwwtMCFGqdov/0/5ED394D0E587E9DDF89033FC8022DAB74DF90EFE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5ED394D0E587E9DDF89033FC8022DAB74DF90EFE.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/67BFvffteLmRFNrTdg3PMkpsmV1PdrAntwwtMCFGqdov/0/5ED394D0E587E9DDF89033FC8022DAB74DF90EFE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:c3:33:79:9b:97:c0:c2:99:1a:eb:0c:bb:37:f6:c7:90:4c: 8a:0e:5b:51:ed:db:27:ce:9e:90:a4:7c:b7:40:9e:a3:e3:4e: 0b:34:62:31:97:7a:06:cb:05:d4:03:a8:b0:cd:77:d0:77:a9: ec:5c:27:5e:ae:92:19:13:ea:e1:a9:ce:ce:b5:83:85:d4:be: 48:45:a8:90:53:43:d8:2e:72:7a:af:1e:f9:55:cd:dd:22:e6: 42:bb:f1:87:53:a9:15:9c:58:63:98:fe:a5:73:bf:28:4a:47: ea:3c:45:d4:63:96:07:f4:6f:5a:92:9d:64:a0:01:a9:ed:03: 4e:39:32:f0:4a:db:fd:74:65:a2:48:e9:13:36:d2:13:11:20: 3b:14:f1:cd:7a:2d:04:fa:0e:7f:c5:10:2f:a2:70:31:79:31: 35:5f:16:c2:95:3a:e4:09:af:d1:52:f7:20:5c:2c:71:a5:80: e2:b9:7f:30:82:40:53:48:c0:9d:c4:e5:64:3f:0d:0a:ea:b3: 6d:e4:10:a8:b2:b2:9d:bd:dd:2b:ab:01:2e:d1:d0:a9:44:6a: 80:7d:30:bc:08:ca:05:a8:fd:2f:bb:bb:12:64:17:8b:7a:d5: 92:b1:b7:ec:3a:d7:a1:dd:30:e8:97:16:69:4d:0d:a1:fd:18: 48:06:ac:0d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUSedsFojojvIbCfivLWPqOMBvN4wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUVEMzk0RDBFNTg3RTlEREY4OTAzM0ZDODAyMkRBQjc0 REY5MEVGRTAeFw0yNjAzMjUxMjQyMTRaFw0yNjAzMjYxNDUxMTRaMDMxMTAvBgNV BAMTKDNFNDlFNkE1NzUwMkJGMUFGRkU2NTAxMUYzMjE3RUQ2RTRBRkU4QUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD6Cs4wfp6J+QNbjs2yhUSVzeyz HOhC+Br/57TJsodZweEKqVCgkLxG1yZ0y/+bxDZEzOWBgk9cWRzMKhdpJ2PdwBYz KGcyx1h4RB25GJ/9f2DTrL34prmkvQEQ6YPM2pFjnggaxWSSVU+7iFuN9sNNpKvw dJe2BOOl9CESkI5efis9eKV/KC9BZhaHqiuSLdF+qw+CTXkDIE7Hf5go0JvEXPKc xereF+6CLcTGOPMHMsUHhQk80hPuJqwTowTHb+D+IA4WMRaHzP8E4RNVzvMNiwDk M1USMX3fRhkN8+LRm4H+MD8jnoiR9ZK+ML2Od+5poG0vPG122f7/+drMIeMPAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUPknmpXUCvxr/5lAR8yF+1uSv6KswHwYDVR0j BBgwFoAUXtOU0OWH6d34kDP8gCLat035Dv4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNjdCRnZmZnRlTG1SRk5yVGRnM1BNa3BzbVYxUGRyQW50d3d0TUNGR3Fk b3YvMC81RUQzOTREMEU1ODdFOURERjg5MDMzRkM4MDIyREFCNzRERjkwRUZFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVFRDM5NEQwRTU4N0U5RERG ODkwMzNGQzgwMjJEQUI3NERGOTBFRkUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NjdCRnZmZnRlTG1SRk5yVGRnM1BNa3BzbVYxUGRyQW50d3d0TUNGR3Fkb3YvMC81 RUQzOTREMEU1ODdFOURERjg5MDMzRkM4MDIyREFCNzRERjkwRUZFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAG8MzeZuXwMKZGusMuzf2x5BMig5bUe3bJ86ekKR8t0Ceo+NOCzRiMZd6BssF 1AOosM130Hep7FwnXq6SGRPq4anOzrWDhdS+SEWokFND2C5yeq8e+VXN3SLmQrvx h1OpFZxYY5j+pXO/KEpH6jxF1GOWB/RvWpKdZKABqe0DTjky8Erb/XRlokjpEzbS ExEgOxTxzXotBPoOf8UQL6JwMXkxNV8WwpU65Amv0VL3IFwscaWA4rl/MIJAU0jA ncTlZD8NCuqzbeQQqLKynb3dK6sBLtHQqURqgH0wvAjKBaj9L7u7EmQXi3rVkrG3 7DrXod0w6JcWaU0Nof0YSAasDQ== -----END CERTIFICATE-----Generated at Wed Mar 25 23:59:28 2026 by rpki-client