$ rpki-client -vvf rpki-repo.registro.br/repo/Bd8gwAan3LfKUhLBNpaAxDkGFGeWrxUdLctnJweVHPfp/0/632195B67DF3AC7E3E0CCC2BF83AFA55DB42D408.mft File: 632195B67DF3AC7E3E0CCC2BF83AFA55DB42D408.mft (raw, json) Hash identifier: 8IgBRJlf67R1/SyRUpfmnHoxOfTjOBcT1+D9yOKJ0Vs= Subject key identifier: 97:1E:BD:25:7E:26:29:4E:A7:C9:EC:20:EB:EC:BD:D8:C1:82:CF:07 Authority key identifier: 63:21:95:B6:7D:F3:AC:7E:3E:0C:CC:2B:F8:3A:FA:55:DB:42:D4:08 Certificate issuer: /CN=632195B67DF3AC7E3E0CCC2BF83AFA55DB42D408 Certificate serial: 71F3B2D3B815CA0960FB3CF3430274145BFA3578 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632195B67DF3AC7E3E0CCC2BF83AFA55DB42D408.cer Subject info access: rsync://rpki-repo.registro.br/repo/Bd8gwAan3LfKUhLBNpaAxDkGFGeWrxUdLctnJweVHPfp/0/632195B67DF3AC7E3E0CCC2BF83AFA55DB42D408.mft Manifest number: 1A Signing time: Wed 25 Mar 2026 18:22:45 +0000 Manifest this update: Wed 25 Mar 2026 18:17:45 +0000 Manifest next update: Thu 26 Mar 2026 21:43:45 +0000 Files and hashes: 1: 323830343a383433303a3a2f33322d3332203d3e20323732323435.roa (hash: wI2lNXyeByTqmLKMwpuBJoCZPtbEbdQChyaVV7GQAPg=) 2: 323830343a383433303a3a2f33342d3334203d3e20323732323435.roa (hash: j1/+6Yk0br7IvjjZUrPe4aTYPrZLk3gxWmBInpWLJdQ=) 3: 323830343a383433303a633030303a3a2f33342d3334203d3e20323732323435.roa (hash: Gei1DA7/7nENIjNvHyzkMODvFsSBBjdlpD9hv3F1unw=) 4: 323830343a383433303a383030303a3a2f33342d3334203d3e20323732323435.roa (hash: 4YRxIw1lpdNUIlpzLzHg/tvL92QbTHviOT6IPCFGjLA=) 5: 632195B67DF3AC7E3E0CCC2BF83AFA55DB42D408.crl (hash: AEJ1ODP/3acEyc8POCwLC1ZMD4HPJ8oHPG/seZtS4vI=) 6: 323830343a383433303a343030303a3a2f33342d3334203d3e20323732323435.roa (hash: RUk5/WPYiHJlLoRehPkwo+2ak6qdzM2DZqYWI3WU6+M=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Bd8gwAan3LfKUhLBNpaAxDkGFGeWrxUdLctnJweVHPfp/0/632195B67DF3AC7E3E0CCC2BF83AFA55DB42D408.crl rsync://rpki-repo.registro.br/repo/Bd8gwAan3LfKUhLBNpaAxDkGFGeWrxUdLctnJweVHPfp/0/632195B67DF3AC7E3E0CCC2BF83AFA55DB42D408.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632195B67DF3AC7E3E0CCC2BF83AFA55DB42D408.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 26 Mar 2026 21:43:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:f3:b2:d3:b8:15:ca:09:60:fb:3c:f3:43:02:74:14:5b:fa:35:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=632195B67DF3AC7E3E0CCC2BF83AFA55DB42D408 Validity Not Before: Mar 25 18:17:45 2026 GMT Not After : Mar 26 21:43:45 2026 GMT Subject: CN=971EBD257E26294EA7C9EC20EBECBDD8C182CF07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:dd:10:fa:e9:09:8c:41:fe:35:2b:a5:d6:41: b7:8a:bc:57:17:81:ad:57:92:0f:3a:d5:5e:1a:25: cc:ae:cb:f2:9e:c2:2b:83:da:40:23:b0:3b:c2:69: 58:fa:da:09:c7:62:2e:73:c1:59:05:b7:52:42:b8: 9e:93:37:66:1e:32:17:a2:bd:4e:e1:1e:fa:23:61: 76:ba:c4:d8:87:e2:c9:4d:f2:9a:95:2c:cf:4a:2c: 00:45:08:14:09:50:2b:43:ed:fe:1e:f7:02:5c:61: 03:a6:db:14:58:99:57:1c:5b:fb:05:84:16:09:98: 63:65:40:ff:c3:c1:f9:da:04:b0:34:3d:f1:ba:15: 4b:89:80:1d:01:36:c1:e4:8c:5d:af:01:23:23:d3: 62:71:8d:b7:b4:5d:ad:5e:c1:98:90:a0:09:ae:51: 71:b2:d4:71:b3:da:2b:a8:0a:a9:0e:e8:8b:bf:0e: cc:05:56:97:30:e1:22:80:aa:87:cb:4b:97:fc:c3: d0:f7:fc:9d:7d:6e:da:cc:e8:a3:cd:22:14:32:a4: da:c7:c3:0f:f4:4a:7c:c8:b6:fb:e8:e0:dd:44:8f: 4e:4b:dd:c4:e3:a9:7f:04:36:27:98:f7:0a:1e:56: 67:32:95:de:5d:f3:34:ec:29:7d:52:3d:17:1b:12: c8:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:1E:BD:25:7E:26:29:4E:A7:C9:EC:20:EB:EC:BD:D8:C1:82:CF:07 X509v3 Authority Key Identifier: keyid:63:21:95:B6:7D:F3:AC:7E:3E:0C:CC:2B:F8:3A:FA:55:DB:42:D4:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Bd8gwAan3LfKUhLBNpaAxDkGFGeWrxUdLctnJweVHPfp/0/632195B67DF3AC7E3E0CCC2BF83AFA55DB42D408.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632195B67DF3AC7E3E0CCC2BF83AFA55DB42D408.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bd8gwAan3LfKUhLBNpaAxDkGFGeWrxUdLctnJweVHPfp/0/632195B67DF3AC7E3E0CCC2BF83AFA55DB42D408.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:bc:1e:91:96:9e:0e:58:5b:ad:c5:44:b0:93:74:ed:f4:a9: cb:c1:61:8d:7d:7a:e3:7d:a6:0b:df:e3:70:2b:94:c6:f8:f3: 9e:e7:e6:1f:02:09:29:08:5f:b6:d2:77:8e:90:86:19:a0:74: 1d:c9:77:61:5e:2a:3a:2c:50:e3:2a:34:aa:25:96:c5:74:ac: 91:c9:8f:d1:d7:b3:4a:55:69:b7:2a:5b:a5:61:96:cd:08:55: 01:fa:e0:28:7e:06:a8:84:7e:a7:24:a9:01:87:2e:69:43:46: 40:ed:77:d6:7d:c9:17:50:a6:4c:20:39:df:11:02:d5:04:e4: a3:96:cb:02:0d:a2:02:56:38:5b:92:1a:d6:8a:ac:7e:25:07: 3f:c1:b1:a5:20:da:86:96:ef:15:ce:a5:2e:df:ef:57:1d:e5: f8:76:03:9f:a2:b8:71:72:e6:59:68:5f:da:3a:bd:01:4c:a8: 6b:01:ad:78:08:20:74:f8:d4:27:12:27:a4:e8:97:a1:f5:b0: 4d:7c:04:fc:49:57:97:8c:23:2d:09:e9:6e:8f:0f:69:aa:d1: 73:44:96:e3:d6:d0:79:82:40:46:64:3d:22:b4:db:83:15:23: 68:23:99:b2:31:17:c8:ac:80:ea:54:f2:d8:bd:0f:f6:59:51: 39:1e:c0:64 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUcfOy07gVyglg+zzzQwJ0FFv6NXgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjMyMTk1QjY3REYzQUM3RTNFMENDQzJCRjgzQUZBNTVE QjQyRDQwODAeFw0yNjAzMjUxODE3NDVaFw0yNjAzMjYyMTQzNDVaMDMxMTAvBgNV BAMTKDk3MUVCRDI1N0UyNjI5NEVBN0M5RUMyMEVCRUNCREQ4QzE4MkNGMDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDv3RD66QmMQf41K6XWQbeKvFcX ga1Xkg861V4aJcyuy/KewiuD2kAjsDvCaVj62gnHYi5zwVkFt1JCuJ6TN2YeMhei vU7hHvojYXa6xNiH4slN8pqVLM9KLABFCBQJUCtD7f4e9wJcYQOm2xRYmVccW/sF hBYJmGNlQP/DwfnaBLA0PfG6FUuJgB0BNsHkjF2vASMj02Jxjbe0Xa1ewZiQoAmu UXGy1HGz2iuoCqkO6Iu/DswFVpcw4SKAqofLS5f8w9D3/J19btrM6KPNIhQypNrH ww/0SnzItvvo4N1Ej05L3cTjqX8ENieY9woeVmcyld5d8zTsKX1SPRcbEsi5AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUlx69JX4mKU6nyewg6+y92MGCzwcwHwYDVR0j BBgwFoAUYyGVtn3zrH4+DMwr+Dr6VdtC1AgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQmQ4Z3dBYW4zTGZLVWhMQk5wYUF4RGtHRkdlV3J4VWRMY3RuSndlVkhQ ZnAvMC82MzIxOTVCNjdERjNBQzdFM0UwQ0NDMkJGODNBRkE1NURCNDJENDA4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYzMjE5NUI2N0RGM0FDN0Uz RTBDQ0MyQkY4M0FGQTU1REI0MkQ0MDguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QmQ4Z3dBYW4zTGZLVWhMQk5wYUF4RGtHRkdlV3J4VWRMY3RuSndlVkhQZnAvMC82 MzIxOTVCNjdERjNBQzdFM0UwQ0NDMkJGODNBRkE1NURCNDJENDA4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdrwekZaeDlhbrcVEsJN07fSpy8FhjX16432mC9/jcCuUxvjznufmHwIJKQhf ttJ3jpCGGaB0Hcl3YV4qOixQ4yo0qiWWxXSskcmP0dezSlVptypbpWGWzQhVAfrg KH4GqIR+pySpAYcuaUNGQO131n3JF1CmTCA53xEC1QTko5bLAg2iAlY4W5Ia1oqs fiUHP8GxpSDahpbvFc6lLt/vVx3l+HYDn6K4cXLmWWhf2jq9AUyoawGteAggdPjU JxInpOiXofWwTXwE/ElXl4wjLQnpbo8PaarRc0SW49bQeYJARmQ9IrTbgxUjaCOZ sjEXyKyA6lTy2L0P9llROR7AZA== -----END CERTIFICATE-----Generated at Wed Mar 25 23:59:04 2026 by rpki-client