$ rpki-client -vvf rpki-repo.registro.br/repo/A7ATUe4RD51YqLyvCGuHSvS63iAtrrXaExJjRjrv96Db/1/CA9F7609986EAF1A517249B9120F2B69069A604A.mft File: CA9F7609986EAF1A517249B9120F2B69069A604A.mft (raw, json) Hash identifier: d/SXUAxNBEm7Qnjb8h+PZTR3xfMYhFbvDqmcRLMqozI= Subject key identifier: 7A:27:F2:27:E6:07:2B:91:27:0C:80:59:AC:BE:57:A0:EB:C1:D8:06 Authority key identifier: CA:9F:76:09:98:6E:AF:1A:51:72:49:B9:12:0F:2B:69:06:9A:60:4A Certificate issuer: /CN=CA9F7609986EAF1A517249B9120F2B69069A604A Certificate serial: 6588AEBA438E2031B2BF76A1ABE11CEB86ABB316 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA9F7609986EAF1A517249B9120F2B69069A604A.cer Subject info access: rsync://rpki-repo.registro.br/repo/A7ATUe4RD51YqLyvCGuHSvS63iAtrrXaExJjRjrv96Db/1/CA9F7609986EAF1A517249B9120F2B69069A604A.mft Manifest number: 03C4 Signing time: Thu 26 Mar 2026 10:40:00 +0000 Manifest this update: Thu 26 Mar 2026 10:35:00 +0000 Manifest next update: Fri 27 Mar 2026 11:47:00 +0000 Files and hashes: 1: 3137302e3234342e37362e302f32322d3232203d3e20323636353035.roa (hash: gAPt5dRI9IwetJHsjdslwCmQX3gZpeuC4kmOGPa4pxk=) 2: CA9F7609986EAF1A517249B9120F2B69069A604A.crl (hash: /Bs48sPmchuoooGhvN5ormpL++KXw4nRguL2bj/efA0=) 3: 3137302e3234342e37362e302f32342d3234203d3e20323636353035.roa (hash: 7CgMlPI5NkXfnTfF8bmjHzj3skIcY5kXMqJDCd+mdNQ=) 4: 3137302e3234342e37372e302f32342d3234203d3e20323636353035.roa (hash: SVMYJXynfv87AXlEW7TNb+y3TP471xT09MLnDVBNR/k=) 5: 323830343a333864383a3a2f33322d3334203d3e20323636353035.roa (hash: /LYIeHjNHEhVM6vzPNl3LwUR96AdM7f3ii7FkpGu+7Y=) 6: 3137302e3234342e37392e302f32342d3234203d3e20323636353035.roa (hash: oVjkWrrksQDTmQnIhFyWwnTS+0QPnAfpN9MqC2NdxiI=) 7: 3137302e3234342e37362e302f32332d3233203d3e20323636353035.roa (hash: NfghlM1Tn1rgHybT8ZK1hsL/Go4y2zhmIuCmi5ZV9TM=) 8: 3137302e3234342e37382e302f32332d3233203d3e20323636353035.roa (hash: MXNzkeTRcv37apFSm9jC4z3Y9LUjsdpL0TjEmM5iS9c=) 9: 3137302e3234342e37382e302f32342d3234203d3e20323636353035.roa (hash: Wx7PzuS1Sl7teiMTM+5l4UsDuMI2xNhT1efxkpaF5uw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/A7ATUe4RD51YqLyvCGuHSvS63iAtrrXaExJjRjrv96Db/1/CA9F7609986EAF1A517249B9120F2B69069A604A.crl rsync://rpki-repo.registro.br/repo/A7ATUe4RD51YqLyvCGuHSvS63iAtrrXaExJjRjrv96Db/1/CA9F7609986EAF1A517249B9120F2B69069A604A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA9F7609986EAF1A517249B9120F2B69069A604A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 27 Mar 2026 11:47:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:88:ae:ba:43:8e:20:31:b2:bf:76:a1:ab:e1:1c:eb:86:ab:b3:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA9F7609986EAF1A517249B9120F2B69069A604A Validity Not Before: Mar 26 10:35:00 2026 GMT Not After : Mar 27 11:47:00 2026 GMT Subject: CN=7A27F227E6072B91270C8059ACBE57A0EBC1D806 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:b7:59:fa:f4:50:90:09:e7:4c:8b:03:60:1f: 92:e8:f2:17:2d:4e:56:2e:22:3b:38:49:60:83:07: 28:55:4e:b7:8b:53:de:15:b3:09:28:1d:0e:38:10: bc:00:01:e5:ab:58:18:b4:2c:47:0d:cc:8b:e3:32: 06:3a:7f:7c:46:68:0c:88:35:1e:52:05:de:31:74: 51:6b:25:f6:90:8c:d8:52:a4:55:45:f6:1e:1e:07: e4:2a:6a:e7:ad:75:7c:fd:9e:e4:66:d0:0a:e3:6a: ba:3f:3a:7c:6e:ce:78:f3:4e:89:a9:f8:e4:0a:6e: 54:89:cc:0a:41:30:7f:bd:a2:85:be:0d:6e:8e:c1: cd:26:d8:ba:e7:10:a4:56:7f:68:74:b8:21:92:bf: fa:56:b6:20:43:7e:49:91:07:f0:c4:d7:be:3f:2d: e8:65:23:06:e1:f2:12:63:38:5a:b7:ba:dc:98:61: 63:80:b8:12:e5:0b:9f:38:da:d8:e0:55:65:de:1e: 44:de:9e:b2:35:c4:3c:c4:38:08:5f:64:e9:ea:09: 6a:a2:c0:57:5c:f8:fd:0c:6a:fd:d5:43:f8:9e:e9: 51:06:65:30:83:64:89:f7:db:3b:16:b0:e2:b7:7e: ed:cc:c9:da:53:e3:02:d0:7a:09:76:63:b2:5c:07: ab:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:27:F2:27:E6:07:2B:91:27:0C:80:59:AC:BE:57:A0:EB:C1:D8:06 X509v3 Authority Key Identifier: keyid:CA:9F:76:09:98:6E:AF:1A:51:72:49:B9:12:0F:2B:69:06:9A:60:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/A7ATUe4RD51YqLyvCGuHSvS63iAtrrXaExJjRjrv96Db/1/CA9F7609986EAF1A517249B9120F2B69069A604A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA9F7609986EAF1A517249B9120F2B69069A604A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/A7ATUe4RD51YqLyvCGuHSvS63iAtrrXaExJjRjrv96Db/1/CA9F7609986EAF1A517249B9120F2B69069A604A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:85:96:1d:1e:53:4b:ef:f4:93:9a:9f:f7:27:fc:cb:b3:fe: 1b:c3:0f:fa:3a:20:95:fc:dc:1d:40:70:5d:c2:9e:ce:4a:8c: 10:b6:b8:a5:2c:f5:46:93:f7:14:3a:e1:5a:04:06:8c:2a:50: d5:db:aa:d4:9b:1f:e7:b7:de:0c:e9:b7:9a:87:0e:be:99:6f: f6:62:c7:48:2f:5f:a1:bc:41:19:15:91:36:f4:b9:4e:cc:77: 61:7b:d4:d0:6b:e0:70:d3:9b:1d:0c:d6:0c:35:20:56:b2:49: d7:9e:82:5e:4a:8a:55:9f:f6:8b:7f:98:35:ff:9b:44:0a:9a: cc:0a:2d:05:9a:39:74:63:76:20:6d:ec:d5:c0:7f:92:9b:03: 9c:93:fa:64:5b:b9:55:d8:12:06:0b:79:1e:e9:ec:b1:db:51: 34:80:f3:8b:c4:a2:42:3a:73:43:44:97:dd:aa:68:e2:52:e2: 4c:e9:1b:32:a4:9b:0c:bc:08:3f:d4:ee:94:01:ea:6f:f8:35: 66:ef:5d:1e:75:19:43:b8:52:1d:5c:7f:3d:79:7b:12:60:d3: e7:ba:55:a0:ec:73:c2:e8:bc:f8:ef:ec:43:0b:8c:9c:43:84: 36:12:99:d5:b4:08:31:3d:e4:fa:27:a4:b4:ca:eb:02:7a:71: 7b:3e:9f:e0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUZYiuukOOIDGyv3ahq+Ec64arsxYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0E5Rjc2MDk5ODZFQUYxQTUxNzI0OUI5MTIwRjJCNjkw NjlBNjA0QTAeFw0yNjAzMjYxMDM1MDBaFw0yNjAzMjcxMTQ3MDBaMDMxMTAvBgNV BAMTKDdBMjdGMjI3RTYwNzJCOTEyNzBDODA1OUFDQkU1N0EwRUJDMUQ4MDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLt1n69FCQCedMiwNgH5Lo8hct TlYuIjs4SWCDByhVTreLU94VswkoHQ44ELwAAeWrWBi0LEcNzIvjMgY6f3xGaAyI NR5SBd4xdFFrJfaQjNhSpFVF9h4eB+QqauetdXz9nuRm0Arjaro/OnxuznjzTomp +OQKblSJzApBMH+9ooW+DW6Owc0m2LrnEKRWf2h0uCGSv/pWtiBDfkmRB/DE174/ LehlIwbh8hJjOFq3utyYYWOAuBLlC5842tjgVWXeHkTenrI1xDzEOAhfZOnqCWqi wFdc+P0Mav3VQ/ie6VEGZTCDZIn32zsWsOK3fu3MydpT4wLQegl2Y7JcB6uPAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUeifyJ+YHK5EnDIBZrL5XoOvB2AYwHwYDVR0j BBgwFoAUyp92CZhurxpRckm5Eg8raQaaYEowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQTdBVFVlNFJENTFZcUx5dkNHdUhTdlM2M2lBdHJyWGFFeEpqUmpydjk2 RGIvMS9DQTlGNzYwOTk4NkVBRjFBNTE3MjQ5QjkxMjBGMkI2OTA2OUE2MDRBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NBOUY3NjA5OTg2RUFGMUE1 MTcyNDlCOTEyMEYyQjY5MDY5QTYwNEEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QTdBVFVlNFJENTFZcUx5dkNHdUhTdlM2M2lBdHJyWGFFeEpqUmpydjk2RGIvMS9D QTlGNzYwOTk4NkVBRjFBNTE3MjQ5QjkxMjBGMkI2OTA2OUE2MDRBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfYWWHR5TS+/0k5qf9yf8y7P+G8MP+joglfzcHUBwXcKezkqMELa4pSz1RpP3 FDrhWgQGjCpQ1duq1Jsf57feDOm3mocOvplv9mLHSC9fobxBGRWRNvS5Tsx3YXvU 0GvgcNObHQzWDDUgVrJJ156CXkqKVZ/2i3+YNf+bRAqazAotBZo5dGN2IG3s1cB/ kpsDnJP6ZFu5VdgSBgt5HunssdtRNIDzi8SiQjpzQ0SX3apo4lLiTOkbMqSbDLwI P9TulAHqb/g1Zu9dHnUZQ7hSHVx/PXl7EmDT57pVoOxzwui8+O/sQwuMnEOENhKZ 1bQIMT3k+iektMrrAnpxez6f4A== -----END CERTIFICATE-----Generated at Thu Mar 26 23:10:07 2026 by rpki-client