$ rpki-client -vvf rpki-repo.registro.br/repo/948iD2h8XvwkiBNCCTMxW71LCSUEHmYP41H8qdB943ti/0/8E596F31F6CFE57078B1303E68FEBDEEEAF96DDE.mft File: 8E596F31F6CFE57078B1303E68FEBDEEEAF96DDE.mft (raw, json) Hash identifier: TeEso6HoZHT+AsHhYTJ8hnAkzIgyTnxV4JdKoTmFLMw= Subject key identifier: B0:90:F9:A1:8C:A9:58:B0:BC:F1:8A:00:A5:54:B5:C2:19:8E:A1:97 Authority key identifier: 8E:59:6F:31:F6:CF:E5:70:78:B1:30:3E:68:FE:BD:EE:EA:F9:6D:DE Certificate issuer: /CN=8E596F31F6CFE57078B1303E68FEBDEEEAF96DDE Certificate serial: 157F520E38740118539ADCF003882980DC87CB81 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E596F31F6CFE57078B1303E68FEBDEEEAF96DDE.cer Subject info access: rsync://rpki-repo.registro.br/repo/948iD2h8XvwkiBNCCTMxW71LCSUEHmYP41H8qdB943ti/0/8E596F31F6CFE57078B1303E68FEBDEEEAF96DDE.mft Manifest number: 4F Signing time: Wed 25 Mar 2026 16:22:58 +0000 Manifest this update: Wed 25 Mar 2026 16:17:58 +0000 Manifest next update: Thu 26 Mar 2026 19:58:58 +0000 Files and hashes: 1: 8E596F31F6CFE57078B1303E68FEBDEEEAF96DDE.crl (hash: IhTNUArZcqM281Sy7DDCLLbk6Y9xB/KAYRNE++OSYMo=) 2: 3230302e332e31362e302f32302d3234203d3e203532363839.roa (hash: kx9GvgSHREQhYCuJOxuhkPkGY+YqfYlpfutFW2U46Wg=) 3: 3230302e3138392e382e302f32312d3234203d3e203532363839.roa (hash: TGa9bzbL5azUHfrojfM+b3lrJZ7G37Fe7+hT6qC40TQ=) 4: 3230302e392e38382e302f32322d3234203d3e203532363839.roa (hash: 3EFXWI8z99LFls8jbSEzmfbmJqCYOLGCDz3xMDvscu8=) 5: 323830343a6334633a3a2f33322d3438203d3e203532363839.roa (hash: LDkpv4I1xAk+Tuw+qCa83wdlDQXGNnDlBmt6F4kai7o=) 6: 3137372e37332e3132302e302f32322d3234203d3e203532363839.roa (hash: /YqVI3dm0izJ22/WvkZ3foHDT11+CifANbTBo8IDrNE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/948iD2h8XvwkiBNCCTMxW71LCSUEHmYP41H8qdB943ti/0/8E596F31F6CFE57078B1303E68FEBDEEEAF96DDE.crl rsync://rpki-repo.registro.br/repo/948iD2h8XvwkiBNCCTMxW71LCSUEHmYP41H8qdB943ti/0/8E596F31F6CFE57078B1303E68FEBDEEEAF96DDE.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E596F31F6CFE57078B1303E68FEBDEEEAF96DDE.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 26 Mar 2026 19:58:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:7f:52:0e:38:74:01:18:53:9a:dc:f0:03:88:29:80:dc:87:cb:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E596F31F6CFE57078B1303E68FEBDEEEAF96DDE Validity Not Before: Mar 25 16:17:58 2026 GMT Not After : Mar 26 19:58:58 2026 GMT Subject: CN=B090F9A18CA958B0BCF18A00A554B5C2198EA197 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:19:7f:47:65:ef:57:05:83:d7:78:2c:6a:12: dc:a8:67:64:9e:eb:24:79:ed:e4:6c:05:3a:bc:8f: ee:89:8d:d2:02:56:91:f4:fc:d3:b8:aa:da:ce:27: f0:3e:33:da:99:9c:b5:0c:9a:0c:e5:d4:ff:16:3a: 16:23:a4:54:4d:70:d1:6d:92:34:32:aa:1a:82:86: 67:9c:09:fc:74:eb:a2:e1:75:bb:dc:30:b1:3b:da: f4:c8:81:14:9f:8b:f3:51:10:dd:fa:c3:64:98:df: c1:79:b6:a7:aa:90:66:79:87:d1:29:fc:b8:38:88: a4:cd:a0:3c:37:21:f0:34:64:ea:7c:2b:eb:d9:71: 0c:33:bb:77:24:4d:b5:54:3a:5b:9b:48:03:07:23: fa:cc:49:c8:d7:e3:87:7e:8b:e4:3c:02:c5:79:7f: ab:15:35:eb:ac:d5:17:99:2b:cf:01:b8:7e:4d:c1: c3:75:06:09:73:eb:ff:7b:3e:5d:41:8f:cc:21:bd: 53:6f:f2:db:08:17:9d:b3:69:26:19:8e:1f:98:0e: 04:0d:ce:d7:b0:a7:56:76:d1:7c:0d:85:da:cd:a1: 93:bd:9b:21:5b:bd:84:da:29:5a:a0:ce:14:87:3f: 8d:61:05:82:50:4d:99:f3:e1:b4:8b:26:fd:3f:f9: 2b:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:90:F9:A1:8C:A9:58:B0:BC:F1:8A:00:A5:54:B5:C2:19:8E:A1:97 X509v3 Authority Key Identifier: keyid:8E:59:6F:31:F6:CF:E5:70:78:B1:30:3E:68:FE:BD:EE:EA:F9:6D:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/948iD2h8XvwkiBNCCTMxW71LCSUEHmYP41H8qdB943ti/0/8E596F31F6CFE57078B1303E68FEBDEEEAF96DDE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E596F31F6CFE57078B1303E68FEBDEEEAF96DDE.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/948iD2h8XvwkiBNCCTMxW71LCSUEHmYP41H8qdB943ti/0/8E596F31F6CFE57078B1303E68FEBDEEEAF96DDE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:97:45:6d:3a:ae:97:9b:75:d5:cc:c4:cf:61:21:97:a7:1c: 31:bf:70:82:c5:bf:2f:a7:00:bc:22:43:48:06:01:99:9f:e8: 8b:4e:fe:15:c3:86:36:46:98:22:fc:a9:f0:36:23:65:51:b2: cd:5d:c7:a7:9f:d1:69:d6:d8:2c:ba:ee:e2:5e:df:d8:b6:2d: 16:b2:05:d4:0b:1e:5e:1e:66:c1:94:53:f7:ed:5d:cf:62:f4: 08:86:2f:a2:2b:f2:df:1e:34:53:e3:d8:6c:39:1b:71:9c:d9: 3e:78:3f:d0:44:89:18:76:d1:46:cb:8e:e4:f1:d4:80:16:09: 7f:03:88:f5:8c:dc:11:a9:d1:b8:d4:f4:0d:7f:5c:97:39:b6: 27:7f:78:fc:13:25:a5:74:8d:59:b9:41:9d:d7:e0:ec:9a:cf: ac:0d:81:ed:bb:22:02:64:c4:2f:0d:e8:7f:4d:bd:8a:a1:8b: 71:0f:7d:e6:c0:2f:f5:d2:d6:d6:74:65:08:63:13:84:32:9c: dd:17:c8:24:08:cf:0d:9e:d0:17:8d:58:c4:e7:b3:aa:4e:cf: ea:5a:6f:47:73:74:26:0d:c4:df:73:86:90:26:f8:83:7b:31: 77:d7:58:76:21:a0:c2:e4:9d:dc:62:f7:da:9c:f4:05:4e:a0: 92:71:64:38 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUFX9SDjh0ARhTmtzwA4gpgNyHy4EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEU1OTZGMzFGNkNGRTU3MDc4QjEzMDNFNjhGRUJERUVF QUY5NkRERTAeFw0yNjAzMjUxNjE3NThaFw0yNjAzMjYxOTU4NThaMDMxMTAvBgNV BAMTKEIwOTBGOUExOENBOTU4QjBCQ0YxOEEwMEE1NTRCNUMyMTk4RUExOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuGX9HZe9XBYPXeCxqEtyoZ2Se 6yR57eRsBTq8j+6JjdICVpH0/NO4qtrOJ/A+M9qZnLUMmgzl1P8WOhYjpFRNcNFt kjQyqhqChmecCfx066LhdbvcMLE72vTIgRSfi/NREN36w2SY38F5tqeqkGZ5h9Ep /Lg4iKTNoDw3IfA0ZOp8K+vZcQwzu3ckTbVUOlubSAMHI/rMScjX44d+i+Q8AsV5 f6sVNeus1ReZK88BuH5NwcN1Bglz6/97Pl1Bj8whvVNv8tsIF52zaSYZjh+YDgQN ztewp1Z20XwNhdrNoZO9myFbvYTaKVqgzhSHP41hBYJQTZnz4bSLJv0/+Sv1AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUsJD5oYypWLC88YoApVS1whmOoZcwHwYDVR0j BBgwFoAUjllvMfbP5XB4sTA+aP697ur5bd4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOTQ4aUQyaDhYdndraUJOQ0NUTXhXNzFMQ1NVRUhtWVA0MUg4cWRCOTQz dGkvMC84RTU5NkYzMUY2Q0ZFNTcwNzhCMTMwM0U2OEZFQkRFRUVBRjk2RERFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhFNTk2RjMxRjZDRkU1NzA3 OEIxMzAzRTY4RkVCREVFRUFGOTZEREUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OTQ4aUQyaDhYdndraUJOQ0NUTXhXNzFMQ1NVRUhtWVA0MUg4cWRCOTQzdGkvMC84 RTU5NkYzMUY2Q0ZFNTcwNzhCMTMwM0U2OEZFQkRFRUVBRjk2RERFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtpdFbTqul5t11czEz2Ehl6ccMb9wgsW/L6cAvCJDSAYBmZ/oi07+FcOGNkaY Ivyp8DYjZVGyzV3Hp5/RadbYLLru4l7f2LYtFrIF1AseXh5mwZRT9+1dz2L0CIYv oivy3x40U+PYbDkbcZzZPng/0ESJGHbRRsuO5PHUgBYJfwOI9YzcEanRuNT0DX9c lzm2J394/BMlpXSNWblBndfg7JrPrA2B7bsiAmTELw3of029iqGLcQ995sAv9dLW 1nRlCGMThDKc3RfIJAjPDZ7QF41YxOezqk7P6lpvR3N0Jg3E33OGkCb4g3sxd9dY diGgwuSd3GL32pz0BU6gknFkOA== -----END CERTIFICATE-----Generated at Thu Mar 26 01:20:16 2026 by rpki-client