$ rpki-client -vvf rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/0/A2A41D637E871BA0DCD8B3DB98BD91BCAB7CE398.mft File: A2A41D637E871BA0DCD8B3DB98BD91BCAB7CE398.mft (raw, json) Hash identifier: e2UzVRvzfaGUhwmJrAsyAVAHaVQdbPm/rcwcMwiuHJU= Subject key identifier: 61:82:25:96:C9:0F:36:9A:9D:3F:59:E6:6B:B7:7E:86:AC:C3:FD:09 Authority key identifier: A2:A4:1D:63:7E:87:1B:A0:DC:D8:B3:DB:98:BD:91:BC:AB:7C:E3:98 Certificate issuer: /CN=A2A41D637E871BA0DCD8B3DB98BD91BCAB7CE398 Certificate serial: 0FC01F4D167438CF23001BD863E5EA37EEA09115 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2A41D637E871BA0DCD8B3DB98BD91BCAB7CE398.cer Subject info access: rsync://rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/0/A2A41D637E871BA0DCD8B3DB98BD91BCAB7CE398.mft Manifest number: C7 Signing time: Thu 26 Mar 2026 15:06:07 +0000 Manifest this update: Thu 26 Mar 2026 15:01:07 +0000 Manifest next update: Fri 27 Mar 2026 17:13:07 +0000 Files and hashes: 1: 323830343a343764343a3a2f33322d313238203d3e20323637303739.roa (hash: wfbIrO8fUPQmPXhjdkIW/u7BhFUAMK+Xv16j8Z/YqI4=) 2: A2A41D637E871BA0DCD8B3DB98BD91BCAB7CE398.crl (hash: xxV0Hd79/jwxO4u47mHq7c+tqIiNekJvGh/qjRUxHI8=) 3: 34352e3232372e34342e302f32322d3332203d3e20323637303739.roa (hash: JP1Y9LYpuRWfEzukF0G2CvCBFL51v4L+9Xnobddx81M=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/0/A2A41D637E871BA0DCD8B3DB98BD91BCAB7CE398.crl rsync://rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/0/A2A41D637E871BA0DCD8B3DB98BD91BCAB7CE398.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2A41D637E871BA0DCD8B3DB98BD91BCAB7CE398.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 27 Mar 2026 17:13:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:c0:1f:4d:16:74:38:cf:23:00:1b:d8:63:e5:ea:37:ee:a0:91:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A2A41D637E871BA0DCD8B3DB98BD91BCAB7CE398 Validity Not Before: Mar 26 15:01:07 2026 GMT Not After : Mar 27 17:13:07 2026 GMT Subject: CN=61822596C90F369A9D3F59E66BB77E86ACC3FD09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:3d:ec:fa:f4:2b:90:31:9f:1f:62:55:d1:0d: 5d:d9:48:47:95:96:1d:b5:66:9b:fc:d2:76:bd:87: 5c:aa:40:5b:09:fe:0e:bc:9f:ce:08:90:af:e6:ab: 4e:b3:ec:46:18:20:52:3b:f9:4a:2d:cd:a1:71:e8: 40:65:14:0a:88:30:fc:30:17:ba:3d:0a:1e:12:9f: 7c:98:fc:e7:c7:bb:20:0e:28:dc:57:d0:07:b9:9e: 76:bb:ce:a9:8c:1b:b5:d6:d1:61:e7:b4:8b:08:c6: 21:39:32:88:4d:cc:6e:6a:02:b5:f9:f4:52:49:b8: 18:8f:51:17:db:53:c0:a1:09:eb:76:7b:72:a3:d7: b5:33:55:9f:96:06:56:48:81:24:a9:be:c8:73:23: 5b:32:b0:4b:32:6e:1d:7e:d7:1b:39:ff:0e:25:53: 19:91:9a:0f:9f:02:eb:50:11:56:5c:6c:48:bd:50: f7:8d:f0:2d:09:7d:08:10:8e:0c:39:0c:64:65:94: b3:88:7d:32:16:90:63:8d:2d:b1:05:c8:79:72:d8: b1:d9:37:61:47:4d:ac:ef:c3:88:bc:61:c6:c8:f7: d3:51:08:85:d6:3d:f4:d5:bf:77:6a:55:8f:47:5b: 5f:05:8f:cf:75:b7:15:30:0b:c0:53:ab:be:cb:59: ad:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:82:25:96:C9:0F:36:9A:9D:3F:59:E6:6B:B7:7E:86:AC:C3:FD:09 X509v3 Authority Key Identifier: keyid:A2:A4:1D:63:7E:87:1B:A0:DC:D8:B3:DB:98:BD:91:BC:AB:7C:E3:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/0/A2A41D637E871BA0DCD8B3DB98BD91BCAB7CE398.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2A41D637E871BA0DCD8B3DB98BD91BCAB7CE398.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/0/A2A41D637E871BA0DCD8B3DB98BD91BCAB7CE398.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:ea:e4:ce:a8:02:4c:dc:fc:02:fe:38:7d:4a:f9:cf:5a:c5: 8c:6d:ab:a3:82:81:53:32:c4:6b:0f:a4:ce:f6:53:d8:1c:cc: d7:2a:a2:3e:e7:ba:8a:71:5a:98:0c:44:a7:3b:c2:b6:a9:56: 66:a3:f1:74:51:9c:92:a6:84:f7:ce:09:82:35:8e:58:94:d4: e6:93:aa:39:18:ab:a3:ba:cc:7a:29:04:f7:5c:7c:27:f7:05: 5b:60:de:44:30:1e:dd:e1:c9:3d:fc:51:b9:0f:22:d6:38:9e: 23:b4:8c:79:a7:3c:16:c0:1c:ea:3b:12:9d:ed:f5:1c:a3:22: bf:99:88:df:dc:36:f8:96:22:6a:da:b7:ae:b0:0e:4b:0e:2a: 4f:17:21:bd:08:e5:d6:32:76:83:2a:b7:b5:5e:2d:2e:6a:6a: da:53:b8:51:51:c2:94:54:a2:e6:89:93:a4:25:12:3a:ea:09: 9f:de:16:61:f3:af:40:05:b2:6b:c6:51:d9:a3:3f:85:c5:f6: 86:0e:0f:89:3c:cf:8d:1e:fc:fc:70:da:97:db:32:4a:bb:83: 16:ab:d9:94:e8:37:92:35:3c:59:f1:f4:db:22:8c:06:33:87: f3:75:2c:95:98:ec:7c:c1:08:c1:21:66:64:85:f6:30:a3:1e: dc:bc:c9:38 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUD8AfTRZ0OM8jABvYY+XqN+6gkRUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTJBNDFENjM3RTg3MUJBMERDRDhCM0RCOThCRDkxQkNB QjdDRTM5ODAeFw0yNjAzMjYxNTAxMDdaFw0yNjAzMjcxNzEzMDdaMDMxMTAvBgNV BAMTKDYxODIyNTk2QzkwRjM2OUE5RDNGNTlFNjZCQjc3RTg2QUNDM0ZEMDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuPez69CuQMZ8fYlXRDV3ZSEeV lh21Zpv80na9h1yqQFsJ/g68n84IkK/mq06z7EYYIFI7+UotzaFx6EBlFAqIMPww F7o9Ch4Sn3yY/OfHuyAOKNxX0Ae5nna7zqmMG7XW0WHntIsIxiE5MohNzG5qArX5 9FJJuBiPURfbU8ChCet2e3Kj17UzVZ+WBlZIgSSpvshzI1sysEsybh1+1xs5/w4l UxmRmg+fAutQEVZcbEi9UPeN8C0JfQgQjgw5DGRllLOIfTIWkGONLbEFyHly2LHZ N2FHTazvw4i8YcbI99NRCIXWPfTVv3dqVY9HW18Fj891txUwC8BTq77LWa2/AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUYYIllskPNpqdP1nma7d+hqzD/QkwHwYDVR0j BBgwFoAUoqQdY36HG6Dc2LPbmL2RvKt845gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNndjVVo2eWNHTVo0WENvOWYzUXlkdEppVUdGanBzcm94Y2l1ZldaZmRy QXUvMC9BMkE0MUQ2MzdFODcxQkEwRENEOEIzREI5OEJEOTFCQ0FCN0NFMzk4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0EyQTQxRDYzN0U4NzFCQTBE Q0Q4QjNEQjk4QkQ5MUJDQUI3Q0UzOTguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NndjVVo2eWNHTVo0WENvOWYzUXlkdEppVUdGanBzcm94Y2l1ZldaZmRyQXUvMC9B MkE0MUQ2MzdFODcxQkEwRENEOEIzREI5OEJEOTFCQ0FCN0NFMzk4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhurkzqgCTNz8Av44fUr5z1rFjG2ro4KBUzLEaw+kzvZT2BzM1yqiPue6inFa mAxEpzvCtqlWZqPxdFGckqaE984JgjWOWJTU5pOqORiro7rMeikE91x8J/cFW2De RDAe3eHJPfxRuQ8i1jieI7SMeac8FsAc6jsSne31HKMiv5mI39w2+JYiatq3rrAO Sw4qTxchvQjl1jJ2gyq3tV4tLmpq2lO4UVHClFSi5omTpCUSOuoJn94WYfOvQAWy a8ZR2aM/hcX2hg4PiTzPjR78/HDal9sySruDFqvZlOg3kjU8WfH02yKMBjOH83Us lZjsfMEIwSFmZIX2MKMe3LzJOA== -----END CERTIFICATE-----Generated at Thu Mar 26 23:10:19 2026 by rpki-client