$ rpki-client -vvf rpki-repo.registro.br/repo/9XFzedyrYLLAHmXBafK7CK3jptMofo7H1mSCWQPR5MaC/0/8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F.mft File: 8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F.mft (raw, json) Hash identifier: D5Se5kVppYQO35WEjAHZNO2ilxxhb7vnFgab1WDHAPg= Subject key identifier: 8C:1C:5B:14:DC:59:E9:0A:72:93:FE:8F:DF:D6:25:85:2A:AD:56:0D Authority key identifier: 8C:B5:A2:51:6F:71:3C:FF:E9:D1:50:4E:79:A4:BD:3B:9A:FB:0A:0F Certificate issuer: /CN=8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F Certificate serial: 2D5B3C55A3BDB286CA208F8158823BC30D2E77B9 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F.cer Subject info access: rsync://rpki-repo.registro.br/repo/9XFzedyrYLLAHmXBafK7CK3jptMofo7H1mSCWQPR5MaC/0/8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F.mft Manifest number: 019C Signing time: Wed 25 Mar 2026 18:01:31 +0000 Manifest this update: Wed 25 Mar 2026 17:56:31 +0000 Manifest next update: Thu 26 Mar 2026 21:10:31 +0000 Files and hashes: 1: 3133382e3235352e37322e302f32322d3332203d3e20323633393539.roa (hash: waEFhBe+SjRSqQswDzUJGqZm7m+XO9yIfZZm4YTlyYw=) 2: 323830343a323836303a3a2f33322d313238203d3e20323633393539.roa (hash: oVXD5VaDUqeD9Go0IkrJ158heEh4rOl0USTusw94FRI=) 3: 8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F.crl (hash: vrEn/APYUZ4K5Yp8ni25lgCMxMi+JsGp4qrlYkcHoPY=) 4: 3137302e3233382e3234382e302f32322d3332203d3e20323633393539.roa (hash: 9vkM44Why6sGQcMypDT8T8Q9VtBz4wbE97cshJxXhpQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9XFzedyrYLLAHmXBafK7CK3jptMofo7H1mSCWQPR5MaC/0/8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F.crl rsync://rpki-repo.registro.br/repo/9XFzedyrYLLAHmXBafK7CK3jptMofo7H1mSCWQPR5MaC/0/8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 26 Mar 2026 21:10:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:5b:3c:55:a3:bd:b2:86:ca:20:8f:81:58:82:3b:c3:0d:2e:77:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F Validity Not Before: Mar 25 17:56:31 2026 GMT Not After : Mar 26 21:10:31 2026 GMT Subject: CN=8C1C5B14DC59E90A7293FE8FDFD625852AAD560D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:2c:4e:98:22:18:33:99:c1:f8:92:55:51:0e: b2:f9:44:20:81:54:86:92:3f:cd:43:92:ad:5e:5b: e5:cd:ad:79:6f:37:48:8b:97:05:de:5a:97:ee:6a: 93:dd:dd:b7:f0:ba:88:cb:03:e5:a0:0d:de:f4:f4: ba:51:5a:30:5e:09:aa:98:d2:a7:30:9b:11:02:0f: 2d:cb:a4:a2:4b:fc:7d:49:a1:9b:3a:f3:e2:1e:49: 84:0d:a6:fa:ed:38:71:bb:b0:e1:9e:2d:b5:f4:4f: e8:b7:06:78:31:7b:c1:27:27:60:b9:f2:fb:6b:39: e1:99:4a:17:f5:4f:e1:a2:e9:31:a3:b0:b7:9c:07: 47:71:eb:6f:90:c1:72:88:5c:bb:ca:50:dd:8b:19: 71:c1:d4:22:ed:82:0a:a2:3f:20:b1:e7:28:85:2f: 8c:a7:35:3a:7e:8d:eb:1b:77:5a:51:a8:29:00:ef: 51:9d:ef:34:5b:91:d6:b3:a3:ff:3b:06:c1:45:e8: 8d:f7:e8:04:97:a7:7a:b2:28:03:d1:3d:44:43:fd: 0a:82:df:2a:71:92:20:9b:8f:b3:2d:0c:21:c0:1f: 96:38:dd:69:d9:5f:79:c9:6a:2a:11:8f:eb:4a:a0: 1c:7f:39:1c:cb:ba:5e:2e:43:7d:d0:60:e0:bc:0d: 45:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:1C:5B:14:DC:59:E9:0A:72:93:FE:8F:DF:D6:25:85:2A:AD:56:0D X509v3 Authority Key Identifier: keyid:8C:B5:A2:51:6F:71:3C:FF:E9:D1:50:4E:79:A4:BD:3B:9A:FB:0A:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9XFzedyrYLLAHmXBafK7CK3jptMofo7H1mSCWQPR5MaC/0/8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9XFzedyrYLLAHmXBafK7CK3jptMofo7H1mSCWQPR5MaC/0/8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:d1:c8:75:89:0e:2a:cb:d0:bd:60:8e:9c:0b:9c:d3:26:7d: 9b:96:8a:48:97:ee:cb:40:fb:a7:ef:21:a7:15:01:42:16:d1: 33:91:4d:15:44:e5:71:23:e7:20:6e:5e:1a:09:44:05:43:e9: 41:16:64:6b:e6:69:15:1f:f1:0c:f9:a7:76:6c:a0:91:5d:d3: 76:2a:26:e8:43:df:3a:97:ae:35:20:03:18:76:f2:4b:80:a3: a5:d6:f1:2d:97:01:33:66:17:5a:f2:38:b1:1d:5b:cb:c0:a8: 61:6b:6c:b1:8b:3d:8f:4a:04:7e:3e:92:25:b8:31:0d:85:43: bf:5b:da:76:6b:03:d7:7e:e5:04:c8:5d:9a:7a:73:80:8c:f5: a1:73:67:b4:ef:02:02:30:50:f2:9c:cb:19:98:f6:ab:ad:cb: dd:e5:7a:3a:48:ee:86:49:07:ed:74:d2:d1:21:47:22:76:c2: 6b:53:b8:21:ad:1f:49:64:86:c1:30:0c:08:a0:03:99:d6:71: 81:3a:b1:18:9e:5c:12:7e:81:50:31:aa:59:78:be:d0:25:59: d5:ed:db:d9:dd:dd:79:5b:03:79:af:f7:b6:e9:d1:51:20:f4: c6:86:56:18:11:23:15:5b:d0:29:a4:83:51:36:44:27:06:79: ae:de:62:b0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIULVs8VaO9sobKII+BWII7ww0ud7kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOENCNUEyNTE2RjcxM0NGRkU5RDE1MDRFNzlBNEJEM0I5 QUZCMEEwRjAeFw0yNjAzMjUxNzU2MzFaFw0yNjAzMjYyMTEwMzFaMDMxMTAvBgNV BAMTKDhDMUM1QjE0REM1OUU5MEE3MjkzRkU4RkRGRDYyNTg1MkFBRDU2MEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYLE6YIhgzmcH4klVRDrL5RCCB VIaSP81Dkq1eW+XNrXlvN0iLlwXeWpfuapPd3bfwuojLA+WgDd709LpRWjBeCaqY 0qcwmxECDy3LpKJL/H1JoZs68+IeSYQNpvrtOHG7sOGeLbX0T+i3Bngxe8EnJ2C5 8vtrOeGZShf1T+Gi6TGjsLecB0dx62+QwXKIXLvKUN2LGXHB1CLtggqiPyCx5yiF L4ynNTp+jesbd1pRqCkA71Gd7zRbkdazo/87BsFF6I336ASXp3qyKAPRPURD/QqC 3ypxkiCbj7MtDCHAH5Y43WnZX3nJaioRj+tKoBx/ORzLul4uQ33QYOC8DUU3AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUjBxbFNxZ6Qpyk/6P39YlhSqtVg0wHwYDVR0j BBgwFoAUjLWiUW9xPP/p0VBOeaS9O5r7Cg8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOVhGemVkeXJZTExBSG1YQmFmSzdDSzNqcHRNb2ZvN0gxbVNDV1FQUjVN YUMvMC84Q0I1QTI1MTZGNzEzQ0ZGRTlEMTUwNEU3OUE0QkQzQjlBRkIwQTBGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhDQjVBMjUxNkY3MTNDRkZF OUQxNTA0RTc5QTRCRDNCOUFGQjBBMEYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OVhGemVkeXJZTExBSG1YQmFmSzdDSzNqcHRNb2ZvN0gxbVNDV1FQUjVNYUMvMC84 Q0I1QTI1MTZGNzEzQ0ZGRTlEMTUwNEU3OUE0QkQzQjlBRkIwQTBGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVdHIdYkOKsvQvWCOnAuc0yZ9m5aKSJfuy0D7p+8hpxUBQhbRM5FNFUTlcSPn IG5eGglEBUPpQRZka+ZpFR/xDPmndmygkV3Tdiom6EPfOpeuNSADGHbyS4Cjpdbx LZcBM2YXWvI4sR1by8CoYWtssYs9j0oEfj6SJbgxDYVDv1vadmsD137lBMhdmnpz gIz1oXNntO8CAjBQ8pzLGZj2q63L3eV6OkjuhkkH7XTS0SFHInbCa1O4Ia0fSWSG wTAMCKADmdZxgTqxGJ5cEn6BUDGqWXi+0CVZ1e3b2d3deVsDea/3tunRUSD0xoZW GBEjFVvQKaSDUTZEJwZ5rt5isA== -----END CERTIFICATE-----Generated at Thu Mar 26 03:48:21 2026 by rpki-client