$ rpki-client -vvf rpki-repo.registro.br/repo/97swh38pTCzSg8x5bLps7YB6AAxyHr5owaVHFsRb2LDp/1/85EE0CD661887CC88F64F6B4BE9D420426E200DB.mft File: 85EE0CD661887CC88F64F6B4BE9D420426E200DB.mft (raw, json) Hash identifier: QP7oNOiNsEYMa5ihuz1nKAHxo2E5YuYRQdojjKTJuw0= Subject key identifier: 53:5E:FF:42:B0:63:F1:21:56:63:DE:99:F8:BC:D5:CC:EF:ED:0F:26 Authority key identifier: 85:EE:0C:D6:61:88:7C:C8:8F:64:F6:B4:BE:9D:42:04:26:E2:00:DB Certificate issuer: /CN=85EE0CD661887CC88F64F6B4BE9D420426E200DB Certificate serial: 58FF0D77DB7A9C3256431FD43EBCEA93C13E72E4 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85EE0CD661887CC88F64F6B4BE9D420426E200DB.cer Subject info access: rsync://rpki-repo.registro.br/repo/97swh38pTCzSg8x5bLps7YB6AAxyHr5owaVHFsRb2LDp/1/85EE0CD661887CC88F64F6B4BE9D420426E200DB.mft Manifest number: 03C3 Signing time: Thu 26 Mar 2026 13:53:19 +0000 Manifest this update: Thu 26 Mar 2026 13:48:19 +0000 Manifest next update: Fri 27 Mar 2026 13:54:19 +0000 Files and hashes: 1: 323830343a383532303a3a2f33322d3334203d3e20323732353539.roa (hash: 62LOMhvbmOJdbTGkjcygK0r0w7DTO+g8VM0cQfmxQ4g=) 2: 85EE0CD661887CC88F64F6B4BE9D420426E200DB.crl (hash: AJX/cBXOVoyNeuY4rJOj6Sjb2pVLqzN67HU4jZFiZ/o=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/97swh38pTCzSg8x5bLps7YB6AAxyHr5owaVHFsRb2LDp/1/85EE0CD661887CC88F64F6B4BE9D420426E200DB.crl rsync://rpki-repo.registro.br/repo/97swh38pTCzSg8x5bLps7YB6AAxyHr5owaVHFsRb2LDp/1/85EE0CD661887CC88F64F6B4BE9D420426E200DB.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85EE0CD661887CC88F64F6B4BE9D420426E200DB.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 27 Mar 2026 13:54:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:ff:0d:77:db:7a:9c:32:56:43:1f:d4:3e:bc:ea:93:c1:3e:72:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85EE0CD661887CC88F64F6B4BE9D420426E200DB Validity Not Before: Mar 26 13:48:19 2026 GMT Not After : Mar 27 13:54:19 2026 GMT Subject: CN=535EFF42B063F1215663DE99F8BCD5CCEFED0F26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c4:ee:b6:d2:16:57:d2:8f:d2:91:a0:77:11: 45:2b:e1:69:67:fa:98:f1:4c:b3:2a:89:96:88:a4: ff:47:13:e8:a3:d8:b4:3a:47:f4:6c:27:75:40:71: 08:3d:55:12:c0:55:d2:41:ee:1a:86:7f:64:ea:2c: b2:7b:0d:a6:0f:24:ff:70:cd:79:2c:c1:5c:c1:3a: 32:ed:3f:a0:68:ed:69:9e:67:61:cb:d6:f8:61:06: 11:68:a3:a3:ab:fe:85:8c:cf:02:c6:62:95:b4:a9: 23:02:47:65:f9:28:a3:ef:b2:d6:f7:5d:7b:02:bf: 58:3d:97:61:e0:9b:8c:fe:cb:34:a4:ea:e6:f5:c0: 78:68:d3:78:5c:ee:36:11:7a:38:11:e6:77:7a:7e: 93:c1:43:7a:5e:2d:d3:3e:55:d2:8d:5b:2c:f0:d5: fd:e2:c1:35:3c:c1:ca:77:3c:ce:ef:35:8b:56:73: 48:60:94:f6:44:4a:0b:8c:ed:89:4a:64:f4:e5:86: 79:35:8b:3a:f3:cc:88:5e:13:69:1d:8e:1d:eb:17: f5:50:a1:16:08:5a:bf:5b:f6:75:86:47:1d:7a:29: 7b:cf:4f:50:33:1c:06:fa:89:40:77:c3:75:5a:ba: e3:d1:10:a1:54:8e:3e:ac:6b:23:72:17:1a:1e:a0: 43:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:5E:FF:42:B0:63:F1:21:56:63:DE:99:F8:BC:D5:CC:EF:ED:0F:26 X509v3 Authority Key Identifier: keyid:85:EE:0C:D6:61:88:7C:C8:8F:64:F6:B4:BE:9D:42:04:26:E2:00:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/97swh38pTCzSg8x5bLps7YB6AAxyHr5owaVHFsRb2LDp/1/85EE0CD661887CC88F64F6B4BE9D420426E200DB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85EE0CD661887CC88F64F6B4BE9D420426E200DB.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/97swh38pTCzSg8x5bLps7YB6AAxyHr5owaVHFsRb2LDp/1/85EE0CD661887CC88F64F6B4BE9D420426E200DB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:a8:6a:fc:a7:33:ef:a6:81:81:91:35:7e:23:c3:34:41:d7: 03:58:49:b4:79:7c:45:2a:0f:83:9f:1a:9c:38:9b:de:4d:e3: ce:f8:c4:5f:ce:3b:97:70:df:5b:bc:54:dc:7c:b1:f9:7a:5e: e6:2c:7c:25:1c:06:58:e3:cf:68:07:a7:b4:97:ae:43:cb:85: e5:0f:f3:90:7a:50:cd:00:05:38:55:74:da:c2:9d:c3:18:bd: 94:7e:bd:94:a4:db:e4:a6:39:0b:16:36:52:4d:b0:fe:1d:b4: 72:9b:7b:94:0e:3f:16:83:6e:e5:15:04:4d:15:b5:1b:e7:19: ae:a0:7f:34:56:78:ec:30:cb:4d:2b:f6:aa:0a:74:f8:47:72: 29:8f:af:77:8e:27:6a:4a:42:ee:69:fb:de:e2:77:62:6d:13: f3:28:cd:d5:9c:7d:55:38:4c:68:2c:bc:5a:c5:c4:67:76:33: 89:15:84:60:f8:9c:67:89:dc:03:00:95:26:98:b6:5e:57:8a: 56:6a:26:69:0a:1b:b4:49:54:f3:9f:7b:91:f5:ba:27:3d:0b: e2:4d:f9:6c:26:5e:78:a7:c6:f3:a0:99:c0:35:1e:f0:e8:3c: 86:bd:10:7d:57:2b:d0:a2:b0:26:f7:b6:21:bd:93:25:1e:19: 3c:d8:ad:53 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUWP8Nd9t6nDJWQx/UPrzqk8E+cuQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODVFRTBDRDY2MTg4N0NDODhGNjRGNkI0QkU5RDQyMDQy NkUyMDBEQjAeFw0yNjAzMjYxMzQ4MTlaFw0yNjAzMjcxMzU0MTlaMDMxMTAvBgNV BAMTKDUzNUVGRjQyQjA2M0YxMjE1NjYzREU5OUY4QkNENUNDRUZFRDBGMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7xO620hZX0o/SkaB3EUUr4Wln +pjxTLMqiZaIpP9HE+ij2LQ6R/RsJ3VAcQg9VRLAVdJB7hqGf2TqLLJ7DaYPJP9w zXkswVzBOjLtP6Bo7WmeZ2HL1vhhBhFoo6Or/oWMzwLGYpW0qSMCR2X5KKPvstb3 XXsCv1g9l2Hgm4z+yzSk6ub1wHho03hc7jYRejgR5nd6fpPBQ3peLdM+VdKNWyzw 1f3iwTU8wcp3PM7vNYtWc0hglPZESguM7YlKZPTlhnk1izrzzIheE2kdjh3rF/VQ oRYIWr9b9nWGRx16KXvPT1AzHAb6iUB3w3VauuPREKFUjj6sayNyFxoeoEPNAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUU17/QrBj8SFWY96Z+LzVzO/tDyYwHwYDVR0j BBgwFoAUhe4M1mGIfMiPZPa0vp1CBCbiANswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOTdzd2gzOHBUQ3pTZzh4NWJMcHM3WUI2QUF4eUhyNW93YVZIRnNSYjJM RHAvMS84NUVFMENENjYxODg3Q0M4OEY2NEY2QjRCRTlENDIwNDI2RTIwMERCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg1RUUwQ0Q2NjE4ODdDQzg4 RjY0RjZCNEJFOUQ0MjA0MjZFMjAwREIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OTdzd2gzOHBUQ3pTZzh4NWJMcHM3WUI2QUF4eUhyNW93YVZIRnNSYjJMRHAvMS84 NUVFMENENjYxODg3Q0M4OEY2NEY2QjRCRTlENDIwNDI2RTIwMERCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEARKhq/Kcz76aBgZE1fiPDNEHXA1hJtHl8RSoPg58anDib3k3jzvjEX847l3Df W7xU3Hyx+Xpe5ix8JRwGWOPPaAentJeuQ8uF5Q/zkHpQzQAFOFV02sKdwxi9lH69 lKTb5KY5CxY2Uk2w/h20cpt7lA4/FoNu5RUETRW1G+cZrqB/NFZ47DDLTSv2qgp0 +EdyKY+vd44nakpC7mn73uJ3Ym0T8yjN1Zx9VThMaCy8WsXEZ3YziRWEYPicZ4nc AwCVJpi2XleKVmomaQobtElU8597kfW6Jz0L4k35bCZeeKfG86CZwDUe8Og8hr0Q fVcr0KKwJve2Ib2TJR4ZPNitUw== -----END CERTIFICATE-----Generated at Thu Mar 26 21:41:14 2026 by rpki-client