$ rpki-client -vvf rpki-repo.registro.br/repo/8ZaUJAgMXjYtZ8peoK2yBcHdxjJSAY2b9SzXs4763K1J/0/425E728AE1FAE85A5D6D17CC53D68CDE21FA639D.mft File: 425E728AE1FAE85A5D6D17CC53D68CDE21FA639D.mft (raw, json) Hash identifier: ofEqvsXJhSLiiPnySdmg1PdYP7T7CChbjzwEP12BgSc= Subject key identifier: BC:A7:8E:3D:41:23:83:0A:A3:13:8E:02:86:68:3E:04:3F:23:96:9F Authority key identifier: 42:5E:72:8A:E1:FA:E8:5A:5D:6D:17:CC:53:D6:8C:DE:21:FA:63:9D Certificate issuer: /CN=425E728AE1FAE85A5D6D17CC53D68CDE21FA639D Certificate serial: 48ECFF61AD22F0E31C773FA2A7597F001303EB5E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/425E728AE1FAE85A5D6D17CC53D68CDE21FA639D.cer Subject info access: rsync://rpki-repo.registro.br/repo/8ZaUJAgMXjYtZ8peoK2yBcHdxjJSAY2b9SzXs4763K1J/0/425E728AE1FAE85A5D6D17CC53D68CDE21FA639D.mft Manifest number: 68 Signing time: Thu 26 Mar 2026 11:23:02 +0000 Manifest this update: Thu 26 Mar 2026 11:18:02 +0000 Manifest next update: Fri 27 Mar 2026 12:12:02 +0000 Files and hashes: 1: 425E728AE1FAE85A5D6D17CC53D68CDE21FA639D.crl (hash: aBTlbJX47WWT9tE3frDhG7XauOaGZMqTWHCtU1pHDlc=) 2: 323830343a343763633a3a2f33322d313238203d3e20323637303737.roa (hash: Zb565rDHy7WtypXGVJ40AUrNMbJgCT2lb99PVr98XvA=) 3: 34352e3232382e3130342e302f32322d3332203d3e20323637303737.roa (hash: EXEgFqBvttmF5ktT401dLdibdAL47+eANSkTz2upTnU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8ZaUJAgMXjYtZ8peoK2yBcHdxjJSAY2b9SzXs4763K1J/0/425E728AE1FAE85A5D6D17CC53D68CDE21FA639D.crl rsync://rpki-repo.registro.br/repo/8ZaUJAgMXjYtZ8peoK2yBcHdxjJSAY2b9SzXs4763K1J/0/425E728AE1FAE85A5D6D17CC53D68CDE21FA639D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/425E728AE1FAE85A5D6D17CC53D68CDE21FA639D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 27 Mar 2026 12:12:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:ec:ff:61:ad:22:f0:e3:1c:77:3f:a2:a7:59:7f:00:13:03:eb:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=425E728AE1FAE85A5D6D17CC53D68CDE21FA639D Validity Not Before: Mar 26 11:18:02 2026 GMT Not After : Mar 27 12:12:02 2026 GMT Subject: CN=BCA78E3D4123830AA3138E0286683E043F23969F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:58:7f:b7:3c:f4:eb:f2:41:16:d6:9c:78:19: 14:c8:49:d9:54:fb:f7:ce:15:00:cf:d1:ec:37:e1: 9e:58:84:12:63:b6:19:87:68:cc:1d:56:6b:88:b0: 53:5e:8f:33:a6:dd:41:95:f4:6a:ae:da:cb:ad:68: a1:59:64:95:44:39:3f:5d:ee:9e:22:f5:2b:75:c1: cc:8f:13:28:b8:5f:b6:08:2b:77:79:43:1d:15:19: 67:a8:96:ec:1a:f5:a3:a4:a6:53:27:54:d7:ad:2c: 69:16:b1:ff:11:80:fe:37:50:65:f5:79:09:df:b3: 7c:93:49:80:14:4e:77:0c:ef:aa:1b:31:24:4b:40: 78:76:48:a9:2a:1f:9d:8a:88:01:17:04:b7:cf:6f: 4d:94:ef:0f:0e:97:46:ce:00:37:85:f2:18:30:ee: 2b:7d:4f:06:7b:a5:27:4a:f8:5f:b9:5c:07:a0:9a: 22:99:59:26:dc:a7:d9:33:3a:99:62:d0:82:8d:43: 52:a9:ca:71:03:86:3d:f9:aa:ec:aa:e2:20:76:29: 04:82:14:cd:18:27:cf:6d:31:ac:4c:8c:79:e2:55: 88:e0:bb:3c:8f:af:a4:88:9c:42:0b:d8:6a:6e:bf: 7e:65:72:77:46:c5:14:a6:df:dd:1a:af:4e:80:9c: e4:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:A7:8E:3D:41:23:83:0A:A3:13:8E:02:86:68:3E:04:3F:23:96:9F X509v3 Authority Key Identifier: keyid:42:5E:72:8A:E1:FA:E8:5A:5D:6D:17:CC:53:D6:8C:DE:21:FA:63:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8ZaUJAgMXjYtZ8peoK2yBcHdxjJSAY2b9SzXs4763K1J/0/425E728AE1FAE85A5D6D17CC53D68CDE21FA639D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/425E728AE1FAE85A5D6D17CC53D68CDE21FA639D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ZaUJAgMXjYtZ8peoK2yBcHdxjJSAY2b9SzXs4763K1J/0/425E728AE1FAE85A5D6D17CC53D68CDE21FA639D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:c3:55:e5:ae:0f:d1:3e:8b:ad:4c:d0:2e:a5:8e:d7:68:2a: 51:d6:83:0c:74:b6:d8:68:b7:c0:39:24:8f:05:50:14:8f:cd: dd:ad:58:ba:c8:42:85:5c:3c:9b:4b:56:50:f4:d9:28:bf:de: 64:c2:ac:de:d1:c4:61:9f:f6:5f:2a:81:6f:34:ca:69:af:d8: 62:fd:aa:26:72:12:a7:02:f0:c9:a5:67:ed:fc:41:73:04:1a: 9e:cf:68:24:9c:77:5b:ed:95:d4:b6:ca:09:fc:e3:a1:b7:1f: 55:ea:7c:22:db:03:57:05:13:09:aa:1e:1e:5b:ac:40:b4:67: 30:75:ef:00:c7:24:7b:fa:21:8a:86:f5:45:0b:1f:0d:87:42: 29:24:11:54:01:fe:f6:f9:81:ff:d5:57:af:fa:ab:b7:e1:ee: ef:53:62:5d:79:0d:ed:05:43:9c:bd:3c:9f:6a:4a:d5:a3:b2: fe:84:a6:53:62:f8:bd:0a:d4:72:e5:35:6c:bc:15:78:99:ce: 90:e7:62:83:4c:b1:fd:8f:40:91:92:53:a3:4c:7b:64:23:1a: e1:54:85:2d:a7:55:d9:d6:bf:ae:db:d4:fe:30:74:bb:0b:7d: 89:c1:13:7d:bc:f6:2f:2d:89:64:c6:94:db:ac:b4:5a:12:86: 9b:4e:45:89 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUSOz/Ya0i8OMcdz+ip1l/ABMD614wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDI1RTcyOEFFMUZBRTg1QTVENkQxN0NDNTNENjhDREUy MUZBNjM5RDAeFw0yNjAzMjYxMTE4MDJaFw0yNjAzMjcxMjEyMDJaMDMxMTAvBgNV BAMTKEJDQTc4RTNENDEyMzgzMEFBMzEzOEUwMjg2NjgzRTA0M0YyMzk2OUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTWH+3PPTr8kEW1px4GRTISdlU +/fOFQDP0ew34Z5YhBJjthmHaMwdVmuIsFNejzOm3UGV9Gqu2sutaKFZZJVEOT9d 7p4i9St1wcyPEyi4X7YIK3d5Qx0VGWeoluwa9aOkplMnVNetLGkWsf8RgP43UGX1 eQnfs3yTSYAUTncM76obMSRLQHh2SKkqH52KiAEXBLfPb02U7w8Ol0bOADeF8hgw 7it9TwZ7pSdK+F+5XAegmiKZWSbcp9kzOpli0IKNQ1KpynEDhj35quyq4iB2KQSC FM0YJ89tMaxMjHniVYjguzyPr6SInEIL2Gpuv35lcndGxRSm390ar06AnOQfAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUvKeOPUEjgwqjE44Chmg+BD8jlp8wHwYDVR0j BBgwFoAUQl5yiuH66FpdbRfMU9aM3iH6Y50wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOFphVUpBZ01Yall0WjhwZW9LMnlCY0hkeGpKU0FZMmI5U3pYczQ3NjNL MUovMC80MjVFNzI4QUUxRkFFODVBNUQ2RDE3Q0M1M0Q2OENERTIxRkE2MzlELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQyNUU3MjhBRTFGQUU4NUE1 RDZEMTdDQzUzRDY4Q0RFMjFGQTYzOUQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OFphVUpBZ01Yall0WjhwZW9LMnlCY0hkeGpKU0FZMmI5U3pYczQ3NjNLMUovMC80 MjVFNzI4QUUxRkFFODVBNUQ2RDE3Q0M1M0Q2OENERTIxRkE2MzlELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEABsNV5a4P0T6LrUzQLqWO12gqUdaDDHS22Gi3wDkkjwVQFI/N3a1YushChVw8 m0tWUPTZKL/eZMKs3tHEYZ/2XyqBbzTKaa/YYv2qJnISpwLwyaVn7fxBcwQans9o JJx3W+2V1LbKCfzjobcfVep8ItsDVwUTCaoeHlusQLRnMHXvAMcke/ohiob1RQsf DYdCKSQRVAH+9vmB/9VXr/qrt+Hu71NiXXkN7QVDnL08n2pK1aOy/oSmU2L4vQrU cuU1bLwVeJnOkOdig0yx/Y9AkZJTo0x7ZCMa4VSFLadV2da/rtvU/jB0uwt9icET fbz2Ly2JZMaU26y0WhKGm05FiQ== -----END CERTIFICATE-----Generated at Thu Mar 26 23:58:08 2026 by rpki-client