$ rpki-client -vvf rpki-repo.registro.br/repo/8MsaFtuPntCFCqg6hfpSgVmqy2whrJeCY8AJPv4enV6P/0/86864B7419B870C1E8E0A4BEA9E38FC483637AD0.mft File: 86864B7419B870C1E8E0A4BEA9E38FC483637AD0.mft (raw, json) Hash identifier: uwQwS32dW9bTsc/H9P0mwCfTtbnOLA9LVZOkNJqrwGw= Subject key identifier: 97:F5:9A:23:60:31:BC:60:10:4A:81:4F:BF:EC:5C:47:EC:FE:B4:A2 Authority key identifier: 86:86:4B:74:19:B8:70:C1:E8:E0:A4:BE:A9:E3:8F:C4:83:63:7A:D0 Certificate issuer: /CN=86864B7419B870C1E8E0A4BEA9E38FC483637AD0 Certificate serial: 6387EC55B6E5B175AA8BA5D2FBE67A63203384A1 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86864B7419B870C1E8E0A4BEA9E38FC483637AD0.cer Subject info access: rsync://rpki-repo.registro.br/repo/8MsaFtuPntCFCqg6hfpSgVmqy2whrJeCY8AJPv4enV6P/0/86864B7419B870C1E8E0A4BEA9E38FC483637AD0.mft Manifest number: 03A5 Signing time: Thu 26 Mar 2026 10:09:59 +0000 Manifest this update: Thu 26 Mar 2026 10:04:59 +0000 Manifest next update: Fri 27 Mar 2026 12:16:59 +0000 Files and hashes: 1: 3133382e3138352e3231322e302f32322d3234203d3e20323632343832.roa (hash: xtY9QWt7T6w5HnwQncN+dv6Ov2L/n+R17LFJvJHr9ho=) 2: 323830343a323638383a3a2f33322d3438203d3e20323632343832.roa (hash: FE+/LhWzgs6/8u7xni4X7XMQNGvzfOnmYGtcz3qODSU=) 3: 86864B7419B870C1E8E0A4BEA9E38FC483637AD0.crl (hash: rNDap9JNuxtfMUvIgpskH+BU7vhGxUyYgsAfyZxOX3o=) 4: 3137372e35352e33322e302f32302d3234203d3e20323632343832.roa (hash: lLNB2cBPThclys7QPsArqC9me72DMbdsI4Zz8WzSw64=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8MsaFtuPntCFCqg6hfpSgVmqy2whrJeCY8AJPv4enV6P/0/86864B7419B870C1E8E0A4BEA9E38FC483637AD0.crl rsync://rpki-repo.registro.br/repo/8MsaFtuPntCFCqg6hfpSgVmqy2whrJeCY8AJPv4enV6P/0/86864B7419B870C1E8E0A4BEA9E38FC483637AD0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86864B7419B870C1E8E0A4BEA9E38FC483637AD0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 27 Mar 2026 12:16:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:87:ec:55:b6:e5:b1:75:aa:8b:a5:d2:fb:e6:7a:63:20:33:84:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86864B7419B870C1E8E0A4BEA9E38FC483637AD0 Validity Not Before: Mar 26 10:04:59 2026 GMT Not After : Mar 27 12:16:59 2026 GMT Subject: CN=97F59A236031BC60104A814FBFEC5C47ECFEB4A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:5d:5d:eb:f9:e5:21:60:2e:a6:df:a2:8b:c1: 60:63:54:e9:f7:f7:d8:10:b3:d2:a9:04:88:b6:82: 99:a5:c7:72:85:aa:57:9d:2f:9b:82:0e:b8:df:7f: b0:bc:92:f1:cc:d3:5c:70:64:b9:d3:b5:26:8a:98: ab:06:fa:7a:92:8e:b1:47:3a:bd:2c:cc:d2:54:85: db:ed:74:0d:57:9f:1d:7a:ae:e7:2a:60:c6:66:fc: b0:13:3b:ae:50:43:c0:4d:09:cc:b3:ec:db:bb:27: d5:51:b8:ee:28:a7:ab:3d:5c:db:51:28:de:81:09: 6b:57:b0:43:0c:a5:ee:0f:3d:73:df:46:d7:f7:a8: 97:c1:ce:a9:37:e6:10:47:71:80:dc:0e:b3:55:81: 50:d6:e3:70:4c:52:d9:8a:a1:08:53:b8:ca:83:57: 75:1a:a6:63:0f:24:62:17:13:41:f6:fc:1c:f9:ae: de:f0:a0:af:1a:18:18:bf:85:27:d1:20:52:c9:c9: a2:2c:c5:d0:6a:1a:46:05:0e:ce:e2:0f:2e:48:86: f9:95:71:d3:dc:d8:17:12:b3:d8:a5:b0:3c:57:24: 5e:5b:95:a3:ba:d0:95:5a:fd:ab:ee:01:60:54:b3: de:e5:d4:73:82:23:91:ac:13:25:a4:17:55:0e:88: 7d:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:F5:9A:23:60:31:BC:60:10:4A:81:4F:BF:EC:5C:47:EC:FE:B4:A2 X509v3 Authority Key Identifier: keyid:86:86:4B:74:19:B8:70:C1:E8:E0:A4:BE:A9:E3:8F:C4:83:63:7A:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8MsaFtuPntCFCqg6hfpSgVmqy2whrJeCY8AJPv4enV6P/0/86864B7419B870C1E8E0A4BEA9E38FC483637AD0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86864B7419B870C1E8E0A4BEA9E38FC483637AD0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8MsaFtuPntCFCqg6hfpSgVmqy2whrJeCY8AJPv4enV6P/0/86864B7419B870C1E8E0A4BEA9E38FC483637AD0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d5:76:56:d4:55:c6:5a:fe:01:8d:7f:c2:08:51:aa:81:52:39: 7f:bc:d7:5f:62:ae:24:4c:41:55:0d:0a:23:d3:cb:db:f4:89: 15:6c:3a:61:f0:b6:5d:18:c9:1a:cf:8b:24:cf:f5:e0:5d:04: db:bf:b0:8b:63:aa:3e:e2:50:c1:64:1a:eb:15:b7:a2:a5:65: e7:82:e3:11:a2:78:71:37:b5:f5:d5:7d:76:1a:b5:4d:51:d1: ba:17:bf:6f:f8:a1:03:ed:c1:15:12:0d:71:f7:9c:ef:eb:0f: 46:30:61:77:8a:47:8f:2f:e5:7c:a3:2e:71:70:27:ab:69:fb: 54:55:25:d8:38:8a:cf:24:6d:a8:4e:44:38:d3:09:7a:a3:b7: 76:36:5f:ad:19:17:13:d0:96:a1:2a:71:2a:d1:5c:11:d3:fb: 70:c8:36:f4:a2:c9:97:47:d2:b5:f9:94:ce:39:9c:96:eb:29: e6:83:ca:32:71:f0:d8:49:1b:8b:ac:b0:4d:1f:a6:a9:b9:d7: 68:00:8f:95:05:14:a8:0a:d2:2e:ca:74:dd:ce:a5:0e:34:41: db:1c:33:50:4e:83:85:85:0a:96:ac:94:f8:bd:ce:1f:aa:5b: b9:16:db:f1:1d:7b:e4:16:e5:74:db:0a:54:bc:9a:d9:94:e9: b1:09:1c:0a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUY4fsVbblsXWqi6XS++Z6YyAzhKEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODY4NjRCNzQxOUI4NzBDMUU4RTBBNEJFQTlFMzhGQzQ4 MzYzN0FEMDAeFw0yNjAzMjYxMDA0NTlaFw0yNjAzMjcxMjE2NTlaMDMxMTAvBgNV BAMTKDk3RjU5QTIzNjAzMUJDNjAxMDRBODE0RkJGRUM1QzQ3RUNGRUI0QTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVXV3r+eUhYC6m36KLwWBjVOn3 99gQs9KpBIi2gpmlx3KFqledL5uCDrjff7C8kvHM01xwZLnTtSaKmKsG+nqSjrFH Or0szNJUhdvtdA1Xnx16rucqYMZm/LATO65QQ8BNCcyz7Nu7J9VRuO4op6s9XNtR KN6BCWtXsEMMpe4PPXPfRtf3qJfBzqk35hBHcYDcDrNVgVDW43BMUtmKoQhTuMqD V3UapmMPJGIXE0H2/Bz5rt7woK8aGBi/hSfRIFLJyaIsxdBqGkYFDs7iDy5IhvmV cdPc2BcSs9ilsDxXJF5blaO60JVa/avuAWBUs97l1HOCI5GsEyWkF1UOiH1PAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUl/WaI2AxvGAQSoFPv+xcR+z+tKIwHwYDVR0j BBgwFoAUhoZLdBm4cMHo4KS+qeOPxINjetAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOE1zYUZ0dVBudENGQ3FnNmhmcFNnVm1xeTJ3aHJKZUNZOEFKUHY0ZW5W NlAvMC84Njg2NEI3NDE5Qjg3MEMxRThFMEE0QkVBOUUzOEZDNDgzNjM3QUQwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg2ODY0Qjc0MTlCODcwQzFF OEUwQTRCRUE5RTM4RkM0ODM2MzdBRDAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OE1zYUZ0dVBudENGQ3FnNmhmcFNnVm1xeTJ3aHJKZUNZOEFKUHY0ZW5WNlAvMC84 Njg2NEI3NDE5Qjg3MEMxRThFMEE0QkVBOUUzOEZDNDgzNjM3QUQwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEA1XZW1FXGWv4BjX/CCFGqgVI5f7zXX2KuJExBVQ0KI9PL2/SJFWw6YfC2XRjJ Gs+LJM/14F0E27+wi2OqPuJQwWQa6xW3oqVl54LjEaJ4cTe19dV9dhq1TVHRuhe/ b/ihA+3BFRINcfec7+sPRjBhd4pHjy/lfKMucXAnq2n7VFUl2DiKzyRtqE5EONMJ eqO3djZfrRkXE9CWoSpxKtFcEdP7cMg29KLJl0fStfmUzjmclusp5oPKMnHw2Ekb i6ywTR+mqbnXaACPlQUUqArSLsp03c6lDjRB2xwzUE6DhYUKlqyU+L3OH6pbuRbb 8R175BbldNsKVLya2ZTpsQkcCg== -----END CERTIFICATE-----Generated at Fri Mar 27 03:51:45 2026 by rpki-client