$ rpki-client -vvf rpki-repo.registro.br/repo/CPxhNqg5EAcghUDjU4YBeesmmKaFdqnvE3r5GK5fnyFF/1/84210C699884A23E38D45F40B27833D84A440F91.mft File: 84210C699884A23E38D45F40B27833D84A440F91.mft (raw, json) Hash identifier: EXU2rfMsGF+A58N7y9PM+EWll9TkJKWjXZphbZruNPY= Subject key identifier: 60:3F:A6:6A:CF:88:C0:78:AF:31:51:40:E6:0D:F5:A1:3F:AD:33:D6 Authority key identifier: 84:21:0C:69:98:84:A2:3E:38:D4:5F:40:B2:78:33:D8:4A:44:0F:91 Certificate issuer: /CN=84210C699884A23E38D45F40B27833D84A440F91 Certificate serial: 6A4B7DC8127BF94A250848BE401A21FD7516C4AB Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84210C699884A23E38D45F40B27833D84A440F91.cer Subject info access: rsync://rpki-repo.registro.br/repo/CPxhNqg5EAcghUDjU4YBeesmmKaFdqnvE3r5GK5fnyFF/1/84210C699884A23E38D45F40B27833D84A440F91.mft Manifest number: 03C9 Signing time: Thu 26 Mar 2026 07:10:01 +0000 Manifest this update: Thu 26 Mar 2026 07:05:01 +0000 Manifest next update: Fri 27 Mar 2026 07:48:01 +0000 Files and hashes: 1: 3133382e33362e38302e302f32322d3234203d3e20323634353731.roa (hash: W9cuh6TY+DbzNPDLc450PMX/lZENV+B6iA3ixoKigao=) 2: 84210C699884A23E38D45F40B27833D84A440F91.crl (hash: 3NHmHUtXLyUEQ9hSeZcKQEIaSDy2O+msUKNzk809SHs=) 3: 323830343a323163303a3a2f33322d3332203d3e20323634353731.roa (hash: JQkS3aVjRYIUrDrcqdT2yRUNgeAwc+sxOIedWxAMUJI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CPxhNqg5EAcghUDjU4YBeesmmKaFdqnvE3r5GK5fnyFF/1/84210C699884A23E38D45F40B27833D84A440F91.crl rsync://rpki-repo.registro.br/repo/CPxhNqg5EAcghUDjU4YBeesmmKaFdqnvE3r5GK5fnyFF/1/84210C699884A23E38D45F40B27833D84A440F91.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84210C699884A23E38D45F40B27833D84A440F91.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 27 Mar 2026 07:48:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:4b:7d:c8:12:7b:f9:4a:25:08:48:be:40:1a:21:fd:75:16:c4:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84210C699884A23E38D45F40B27833D84A440F91 Validity Not Before: Mar 26 07:05:01 2026 GMT Not After : Mar 27 07:48:01 2026 GMT Subject: CN=603FA66ACF88C078AF315140E60DF5A13FAD33D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:e5:71:a9:cd:ca:de:e9:52:6c:68:57:ec:41: f5:88:5b:18:fb:59:54:10:de:fc:a6:20:15:c8:7e: 5e:a4:7f:20:4d:96:3d:72:cd:e5:7e:03:0e:23:f5: be:92:30:db:ce:f6:a7:d5:f7:cd:be:b0:ef:c8:5e: 7a:5d:16:17:dd:4f:5b:ba:9c:62:cc:60:0c:e4:c6: 7d:d5:d4:4d:21:34:81:e2:14:65:17:fc:9e:51:e8: 4b:b4:8a:50:eb:fb:08:3b:ea:e1:61:c1:2d:fd:1a: 16:94:5e:09:73:74:25:ad:6f:ad:23:f5:64:f1:b0: 81:93:fe:e6:a9:84:1f:9e:5e:ef:b2:5e:fe:d3:17: 33:a5:1b:d8:38:51:dc:a7:93:d0:59:73:77:4a:16: 06:19:54:49:4b:a0:98:04:41:0b:4c:3c:a2:3f:01: d9:f7:27:07:32:20:ed:6e:96:ac:c9:55:e1:4b:45: bf:a9:96:d0:bf:a6:a0:7a:43:b6:1a:0e:b2:af:ff: 56:ce:3f:ae:f9:ae:c3:3d:f9:29:6d:a1:11:38:ca: e4:b7:47:5a:26:02:ec:b9:79:b6:26:61:0d:ea:6e: 08:cd:aa:e0:8f:ce:45:2f:0f:bd:86:7e:a7:a9:bb: db:97:a0:b0:76:ea:9a:0a:6e:03:0a:9a:1c:28:e6: fd:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:3F:A6:6A:CF:88:C0:78:AF:31:51:40:E6:0D:F5:A1:3F:AD:33:D6 X509v3 Authority Key Identifier: keyid:84:21:0C:69:98:84:A2:3E:38:D4:5F:40:B2:78:33:D8:4A:44:0F:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CPxhNqg5EAcghUDjU4YBeesmmKaFdqnvE3r5GK5fnyFF/1/84210C699884A23E38D45F40B27833D84A440F91.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84210C699884A23E38D45F40B27833D84A440F91.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CPxhNqg5EAcghUDjU4YBeesmmKaFdqnvE3r5GK5fnyFF/1/84210C699884A23E38D45F40B27833D84A440F91.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:20:4a:71:bf:9a:cb:39:b3:d4:fe:b1:d1:0e:e8:64:4e:1c: a9:f9:5b:b8:06:65:0e:03:41:dd:30:5b:1e:9b:e1:19:38:64: 29:5d:bc:34:57:26:d8:eb:03:fc:da:86:f4:a9:6c:cb:e6:8f: 97:7f:81:a6:f9:ac:42:51:a4:72:78:37:a9:dc:0c:e7:70:22: 67:a1:eb:1c:01:00:21:5f:0e:1c:3a:91:e7:db:ef:70:03:a3: 73:18:0f:5d:26:d7:e1:90:7a:49:c8:56:e9:3d:68:3a:c1:94: 8c:db:2c:34:34:9f:45:33:99:a7:d8:33:22:2c:13:c9:d2:d3: 1f:c0:8f:a2:aa:5c:a7:1d:f0:4f:bb:1d:e2:6d:20:35:62:30: be:fc:a2:26:fa:09:c4:c9:59:df:f2:ba:c5:92:5c:58:47:d5: ea:e4:24:c7:b1:53:4b:d0:0a:7d:bd:89:42:b8:b6:3b:f4:65: fc:60:d9:2f:c1:73:6b:ef:77:10:e3:fa:c6:29:2e:b0:47:54: 37:d3:e9:fd:33:b3:4e:66:d3:a8:40:f2:d1:da:f8:f4:06:a1: 1b:62:63:24:76:f0:64:a0:c8:54:2d:3c:b4:15:41:5f:5d:fc: ae:f6:5e:b7:58:04:87:cb:9d:f7:fe:8a:06:72:eb:8d:d2:40: 01:27:4b:53 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUakt9yBJ7+UolCEi+QBoh/XUWxKswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQyMTBDNjk5ODg0QTIzRTM4RDQ1RjQwQjI3ODMzRDg0 QTQ0MEY5MTAeFw0yNjAzMjYwNzA1MDFaFw0yNjAzMjcwNzQ4MDFaMDMxMTAvBgNV BAMTKDYwM0ZBNjZBQ0Y4OEMwNzhBRjMxNTE0MEU2MERGNUExM0ZBRDMzRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDy5XGpzcre6VJsaFfsQfWIWxj7 WVQQ3vymIBXIfl6kfyBNlj1yzeV+Aw4j9b6SMNvO9qfV982+sO/IXnpdFhfdT1u6 nGLMYAzkxn3V1E0hNIHiFGUX/J5R6Eu0ilDr+wg76uFhwS39GhaUXglzdCWtb60j 9WTxsIGT/uaphB+eXu+yXv7TFzOlG9g4Udynk9BZc3dKFgYZVElLoJgEQQtMPKI/ Adn3JwcyIO1ulqzJVeFLRb+pltC/pqB6Q7YaDrKv/1bOP675rsM9+SltoRE4yuS3 R1omAuy5ebYmYQ3qbgjNquCPzkUvD72Gfqepu9uXoLB26poKbgMKmhwo5v2/AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUYD+mas+IwHivMVFA5g31oT+tM9YwHwYDVR0j BBgwFoAUhCEMaZiEoj441F9Asngz2EpED5EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ1B4aE5xZzVFQWNnaFVEalU0WUJlZXNtbUthRmRxbnZFM3I1R0s1Zm55 RkYvMS84NDIxMEM2OTk4ODRBMjNFMzhENDVGNDBCMjc4MzNEODRBNDQwRjkxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg0MjEwQzY5OTg4NEEyM0Uz OEQ0NUY0MEIyNzgzM0Q4NEE0NDBGOTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q1B4aE5xZzVFQWNnaFVEalU0WUJlZXNtbUthRmRxbnZFM3I1R0s1Zm55RkYvMS84 NDIxMEM2OTk4ODRBMjNFMzhENDVGNDBCMjc4MzNEODRBNDQwRjkxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFCBKcb+ayzmz1P6x0Q7oZE4cqflbuAZlDgNB3TBbHpvhGThkKV28NFcm2OsD /NqG9Klsy+aPl3+BpvmsQlGkcng3qdwM53AiZ6HrHAEAIV8OHDqR59vvcAOjcxgP XSbX4ZB6SchW6T1oOsGUjNssNDSfRTOZp9gzIiwTydLTH8CPoqpcpx3wT7sd4m0g NWIwvvyiJvoJxMlZ3/K6xZJcWEfV6uQkx7FTS9AKfb2JQri2O/Rl/GDZL8Fza+93 EOP6xikusEdUN9Pp/TOzTmbTqEDy0dr49AahG2JjJHbwZKDIVC08tBVBX138rvZe t1gEh8ud9/6KBnLrjdJAASdLUw== -----END CERTIFICATE-----Generated at Thu Mar 26 20:51:43 2026 by rpki-client