$ rpki-client -vvf rpki-repo.registro.br/repo/AshjTbxxikcwvN2KExwCFhdDhBtV7DWJJLc65C11AThu/0/9397C28E3065FBE481254AA8C0CEF6906F66ABE9.mft File: 9397C28E3065FBE481254AA8C0CEF6906F66ABE9.mft (raw, json) Hash identifier: v9A2POPi7I2jC8i21rtrAurA6c4NesMBIWszfOClUJ8= Subject key identifier: 5A:D7:1B:8D:12:35:AF:90:B8:90:D7:CF:9B:C5:20:AB:DC:75:9B:A1 Authority key identifier: 93:97:C2:8E:30:65:FB:E4:81:25:4A:A8:C0:CE:F6:90:6F:66:AB:E9 Certificate issuer: /CN=9397C28E3065FBE481254AA8C0CEF6906F66ABE9 Certificate serial: 4DF7CA5984FD86D4A16D3598FBD18F0C8BFFC2CE Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9397C28E3065FBE481254AA8C0CEF6906F66ABE9.cer Subject info access: rsync://rpki-repo.registro.br/repo/AshjTbxxikcwvN2KExwCFhdDhBtV7DWJJLc65C11AThu/0/9397C28E3065FBE481254AA8C0CEF6906F66ABE9.mft Manifest number: 02FB Signing time: Thu 26 Mar 2026 11:21:52 +0000 Manifest this update: Thu 26 Mar 2026 11:16:52 +0000 Manifest next update: Fri 27 Mar 2026 15:11:52 +0000 Files and hashes: 1: 9397C28E3065FBE481254AA8C0CEF6906F66ABE9.crl (hash: 1Y3auqqM99Z2f5vuHjoFqCg9KR+1CofMkMv5T00hVlk=) 2: 3137392e3130392e36342e302f32302d3332203d3e20323633353738.roa (hash: Q1uNYyBjGbyIhtDBLHYu22N+qGJlESCPootyri/UJWg=) 3: 323830343a6634633a3a2f33322d313238203d3e20323633353738.roa (hash: tnjJpaX42qhrNEfwxFNIHRMECda6natWe4mEIY7HkLY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/AshjTbxxikcwvN2KExwCFhdDhBtV7DWJJLc65C11AThu/0/9397C28E3065FBE481254AA8C0CEF6906F66ABE9.crl rsync://rpki-repo.registro.br/repo/AshjTbxxikcwvN2KExwCFhdDhBtV7DWJJLc65C11AThu/0/9397C28E3065FBE481254AA8C0CEF6906F66ABE9.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9397C28E3065FBE481254AA8C0CEF6906F66ABE9.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 27 Mar 2026 15:11:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:f7:ca:59:84:fd:86:d4:a1:6d:35:98:fb:d1:8f:0c:8b:ff:c2:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9397C28E3065FBE481254AA8C0CEF6906F66ABE9 Validity Not Before: Mar 26 11:16:52 2026 GMT Not After : Mar 27 15:11:52 2026 GMT Subject: CN=5AD71B8D1235AF90B890D7CF9BC520ABDC759BA1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ba:70:a2:08:9d:29:e9:a3:64:66:8a:54:de: 7f:25:5f:12:b3:e5:51:f8:68:e0:48:b1:32:69:4d: c0:92:3a:a4:af:d9:e1:7b:ff:36:0e:d1:00:f4:1e: 1d:2d:0f:e0:57:af:ac:4d:7e:0a:66:20:ec:18:47: f0:5c:a6:b9:66:65:27:fa:b0:96:1f:53:1c:ea:a7: e4:63:6e:6b:6f:18:79:ad:ca:c5:54:4e:e0:11:e7: 87:95:d3:31:44:55:94:5d:fe:c2:b2:4f:00:30:82: 41:2c:a9:82:78:b7:28:ac:ad:ba:a1:73:65:56:76: 74:16:4c:f4:15:88:05:2a:a1:90:1a:a2:89:f2:0a: 14:15:a9:34:db:6e:b9:cb:88:69:e1:e6:a3:7e:dd: 97:8a:21:7d:e2:2d:f6:af:94:dd:a5:36:c4:e5:81: e8:0a:89:ff:fb:4b:06:54:f5:64:d0:33:52:a6:3e: 9f:e5:c6:c1:1e:9f:b3:f6:ba:fb:ac:a6:60:da:73: 7d:98:d9:c4:c4:09:1d:04:47:df:4f:b0:2f:d2:5d: 61:07:63:23:3c:d4:18:99:ff:1f:16:47:dc:c4:a4: 9a:ac:06:17:f5:fb:eb:b3:ba:7f:ad:a8:33:98:ba: f1:b3:ca:fe:ef:c7:50:97:ba:cf:1a:c6:67:f8:26: 32:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:D7:1B:8D:12:35:AF:90:B8:90:D7:CF:9B:C5:20:AB:DC:75:9B:A1 X509v3 Authority Key Identifier: keyid:93:97:C2:8E:30:65:FB:E4:81:25:4A:A8:C0:CE:F6:90:6F:66:AB:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/AshjTbxxikcwvN2KExwCFhdDhBtV7DWJJLc65C11AThu/0/9397C28E3065FBE481254AA8C0CEF6906F66ABE9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9397C28E3065FBE481254AA8C0CEF6906F66ABE9.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/AshjTbxxikcwvN2KExwCFhdDhBtV7DWJJLc65C11AThu/0/9397C28E3065FBE481254AA8C0CEF6906F66ABE9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:87:5d:87:94:8b:a6:63:6e:bb:e7:bc:79:e3:51:93:bc:f1: b2:be:f5:72:82:27:e1:8a:70:2f:6f:7b:7f:c4:86:97:47:33: c4:6e:a7:a6:38:9d:f3:f5:35:2b:8f:9e:1c:ea:96:31:bd:3c: 6a:b1:8a:9a:4e:2a:ce:63:b8:f5:59:de:eb:3b:18:e1:05:e1: 94:53:92:ad:a8:2f:7a:d9:44:03:1e:52:4d:b0:de:1b:b1:80: 24:c9:9f:ee:22:0a:e7:d3:53:fc:2a:43:6a:a2:54:64:65:1e: 07:26:59:bf:83:78:92:54:93:62:bc:27:b4:b1:b4:f7:dc:d8: 18:81:b5:b9:a4:29:be:d5:64:a1:0a:ea:c7:66:10:14:ed:25: eb:12:0f:98:b2:27:15:c2:8b:20:d7:7b:26:d7:18:b2:80:79: 2d:bc:f4:2a:dd:09:a4:92:37:79:7b:f9:f7:e0:23:a0:f4:35: 0d:47:79:fa:c2:54:bd:be:7c:9f:c5:22:2a:63:46:1d:3d:31: 7c:95:44:b1:b9:7c:06:5f:bd:80:35:a4:47:af:0f:e5:19:12: dd:d0:54:fd:74:9a:c3:8f:92:b3:6b:06:8a:82:96:37:a6:b0: 67:96:c1:fe:5c:6d:fd:9b:77:2c:5a:66:7c:8c:17:52:c1:92: 5c:cd:8a:1c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUTffKWYT9htShbTWY+9GPDIv/ws4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTM5N0MyOEUzMDY1RkJFNDgxMjU0QUE4QzBDRUY2OTA2 RjY2QUJFOTAeFw0yNjAzMjYxMTE2NTJaFw0yNjAzMjcxNTExNTJaMDMxMTAvBgNV BAMTKDVBRDcxQjhEMTIzNUFGOTBCODkwRDdDRjlCQzUyMEFCREM3NTlCQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0unCiCJ0p6aNkZopU3n8lXxKz 5VH4aOBIsTJpTcCSOqSv2eF7/zYO0QD0Hh0tD+BXr6xNfgpmIOwYR/BcprlmZSf6 sJYfUxzqp+RjbmtvGHmtysVUTuAR54eV0zFEVZRd/sKyTwAwgkEsqYJ4tyisrbqh c2VWdnQWTPQViAUqoZAaoonyChQVqTTbbrnLiGnh5qN+3ZeKIX3iLfavlN2lNsTl gegKif/7SwZU9WTQM1KmPp/lxsEen7P2uvuspmDac32Y2cTECR0ER99PsC/SXWEH YyM81BiZ/x8WR9zEpJqsBhf1++uzun+tqDOYuvGzyv7vx1CXus8axmf4JjI5AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUWtcbjRI1r5C4kNfPm8Ugq9x1m6EwHwYDVR0j BBgwFoAUk5fCjjBl++SBJUqowM72kG9mq+kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQXNoalRieHhpa2N3dk4yS0V4d0NGaGREaEJ0VjdEV0pKTGM2NUMxMUFU aHUvMC85Mzk3QzI4RTMwNjVGQkU0ODEyNTRBQThDMENFRjY5MDZGNjZBQkU5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkzOTdDMjhFMzA2NUZCRTQ4 MTI1NEFBOEMwQ0VGNjkwNkY2NkFCRTkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QXNoalRieHhpa2N3dk4yS0V4d0NGaGREaEJ0VjdEV0pKTGM2NUMxMUFUaHUvMC85 Mzk3QzI4RTMwNjVGQkU0ODEyNTRBQThDMENFRjY5MDZGNjZBQkU5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXoddh5SLpmNuu+e8eeNRk7zxsr71coIn4YpwL297f8SGl0czxG6npjid8/U1 K4+eHOqWMb08arGKmk4qzmO49Vne6zsY4QXhlFOSragvetlEAx5STbDeG7GAJMmf 7iIK59NT/CpDaqJUZGUeByZZv4N4klSTYrwntLG099zYGIG1uaQpvtVkoQrqx2YQ FO0l6xIPmLInFcKLINd7JtcYsoB5Lbz0Kt0JpJI3eXv59+AjoPQ1DUd5+sJUvb58 n8UiKmNGHT0xfJVEsbl8Bl+9gDWkR68P5RkS3dBU/XSaw4+Ss2sGioKWN6awZ5bB /lxt/Zt3LFpmfIwXUsGSXM2KHA== -----END CERTIFICATE-----Generated at Thu Mar 26 21:57:09 2026 by rpki-client