$ rpki-client -vvf rpki-repo.registro.br/repo/EiTM3waSQRuwdw4sDqvygGB2GD97bMXhuP4GsJ5eqZNW/0/04FD2ADDA98E9E5E0B61892E0CD623E04D9F50B7.mft File: 04FD2ADDA98E9E5E0B61892E0CD623E04D9F50B7.mft (raw, json) Hash identifier: swM9ZO+8Hhls8lDrjClf/sayY/M2x6k8odtruK4ej7Y= Subject key identifier: 98:5F:A9:A2:FA:0F:C0:A5:9E:5E:CC:AE:D8:79:08:0D:FA:E2:29:22 Authority key identifier: 04:FD:2A:DD:A9:8E:9E:5E:0B:61:89:2E:0C:D6:23:E0:4D:9F:50:B7 Certificate issuer: /CN=04FD2ADDA98E9E5E0B61892E0CD623E04D9F50B7 Certificate serial: 25565C045A5E421B9539642CA7C37A9613ECEB4C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04FD2ADDA98E9E5E0B61892E0CD623E04D9F50B7.cer Subject info access: rsync://rpki-repo.registro.br/repo/EiTM3waSQRuwdw4sDqvygGB2GD97bMXhuP4GsJ5eqZNW/0/04FD2ADDA98E9E5E0B61892E0CD623E04D9F50B7.mft Manifest number: 2A Signing time: Wed 25 Mar 2026 17:02:40 +0000 Manifest this update: Wed 25 Mar 2026 16:57:40 +0000 Manifest next update: Thu 26 Mar 2026 20:03:40 +0000 Files and hashes: 1: 04FD2ADDA98E9E5E0B61892E0CD623E04D9F50B7.crl (hash: 61jPV/FT8NW/5A6dP86AG8S2OiPAxSWsJI3aQTgg9z8=) 2: 3137302e38342e3134342e302f32322d3332203d3e20323634393937.roa (hash: Mnbcp40p1T4DwQvct3Vrhd4voh3X9IBODaagxlsBmMk=) 3: 3137372e31322e3134342e302f32312d3332203d3e20323634393937.roa (hash: g8nWIeO/DPdjyU3LaUG9bo4tvvIe/kVvbhNJu6wpB7M=) 4: 323830343a333132383a3a2f33322d313238203d3e20323634393937.roa (hash: 92PQmrrRMkeyZZvx2FPmzuZrKcDZX1F0DkmPlO2niyI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/EiTM3waSQRuwdw4sDqvygGB2GD97bMXhuP4GsJ5eqZNW/0/04FD2ADDA98E9E5E0B61892E0CD623E04D9F50B7.crl rsync://rpki-repo.registro.br/repo/EiTM3waSQRuwdw4sDqvygGB2GD97bMXhuP4GsJ5eqZNW/0/04FD2ADDA98E9E5E0B61892E0CD623E04D9F50B7.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04FD2ADDA98E9E5E0B61892E0CD623E04D9F50B7.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 26 Mar 2026 20:03:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:56:5c:04:5a:5e:42:1b:95:39:64:2c:a7:c3:7a:96:13:ec:eb:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04FD2ADDA98E9E5E0B61892E0CD623E04D9F50B7 Validity Not Before: Mar 25 16:57:40 2026 GMT Not After : Mar 26 20:03:40 2026 GMT Subject: CN=985FA9A2FA0FC0A59E5ECCAED879080DFAE22922 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:1f:8b:0b:2c:af:35:25:52:f1:31:65:f4:fc: 02:85:5c:48:1a:d0:73:57:3b:32:98:70:33:14:93: 5b:ed:a1:6c:c3:28:e3:c8:c7:3d:45:cf:62:03:cf: b1:47:a4:5f:d8:4a:37:27:9f:64:dc:24:5d:26:bf: 1e:66:6f:13:ae:60:a9:de:e8:b2:ce:03:22:70:9f: 3a:0c:e4:68:a9:41:a3:77:48:77:6d:94:a2:44:0c: db:07:a8:e0:69:c5:c7:9c:4a:fd:6c:de:76:b7:35: 21:5a:0c:a8:18:ca:78:d9:5e:d0:7b:19:4d:d4:f5: 8f:2a:a1:a7:1b:8e:0e:f4:2c:5d:ce:29:de:20:8c: 8a:26:c2:a3:f2:d1:a2:aa:a0:e3:ed:96:29:86:1e: c1:c9:94:cf:f9:77:95:58:3a:aa:f0:c2:80:77:75: 3c:1c:e6:87:11:6e:0c:de:ea:a9:b8:57:26:67:60: 85:c4:22:94:f1:c4:a6:d7:06:cd:4c:31:c3:e4:ce: 32:88:2e:a0:42:10:ce:e1:93:1a:37:cb:47:47:e3: 23:7a:bb:c1:05:93:88:46:58:46:a7:37:8c:e8:05: 75:07:0b:06:af:0e:68:13:a0:98:30:d2:39:de:95: dd:26:93:41:d3:e7:58:87:f5:6b:6b:21:a4:20:44: 7d:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:5F:A9:A2:FA:0F:C0:A5:9E:5E:CC:AE:D8:79:08:0D:FA:E2:29:22 X509v3 Authority Key Identifier: keyid:04:FD:2A:DD:A9:8E:9E:5E:0B:61:89:2E:0C:D6:23:E0:4D:9F:50:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/EiTM3waSQRuwdw4sDqvygGB2GD97bMXhuP4GsJ5eqZNW/0/04FD2ADDA98E9E5E0B61892E0CD623E04D9F50B7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04FD2ADDA98E9E5E0B61892E0CD623E04D9F50B7.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/EiTM3waSQRuwdw4sDqvygGB2GD97bMXhuP4GsJ5eqZNW/0/04FD2ADDA98E9E5E0B61892E0CD623E04D9F50B7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:dd:77:3d:73:ee:10:8a:2c:83:96:54:c7:ee:a0:a8:31:5a: 60:05:be:8f:d4:41:54:ec:b3:62:e6:af:7d:84:bb:23:fb:ad: bd:27:a8:fc:5b:8a:4a:e4:a5:0d:55:42:d3:19:f4:aa:11:f2: c5:8d:ea:26:a1:ab:61:a9:26:c1:1a:a4:23:24:70:c6:db:21: e0:98:fc:91:9c:0d:31:c7:77:67:71:e2:16:37:cb:f1:d0:31: 39:49:a5:fc:42:22:e0:50:74:90:db:13:8e:1e:0c:3b:65:bc: b4:ad:6f:f9:16:1c:61:b6:ea:79:e5:6d:b3:a0:22:7e:c9:41: 62:fb:0b:4c:5b:8f:3d:f5:21:6c:c6:76:51:2c:12:86:8f:4e: e6:d8:cb:b9:3d:8c:63:41:94:9f:62:a9:08:5d:61:f0:a5:e6: 3f:1e:9b:64:e1:0b:d0:db:0c:dc:61:82:f7:60:cd:93:41:f1: d3:12:55:4d:84:52:5f:e9:14:e7:35:a1:89:3a:95:d7:7c:82: 34:65:96:ff:70:b3:0e:c8:39:ab:09:af:2b:a1:f1:34:fc:6f: 2e:3e:7b:83:37:eb:60:ab:08:d2:32:4e:83:94:c1:28:13:a4: e9:c1:01:73:3c:a6:39:b0:73:09:c1:2e:29:d3:9c:f0:64:e6: 9b:e8:ee:c2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUJVZcBFpeQhuVOWQsp8N6lhPs60wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDRGRDJBRERBOThFOUU1RTBCNjE4OTJFMENENjIzRTA0 RDlGNTBCNzAeFw0yNjAzMjUxNjU3NDBaFw0yNjAzMjYyMDAzNDBaMDMxMTAvBgNV BAMTKDk4NUZBOUEyRkEwRkMwQTU5RTVFQ0NBRUQ4NzkwODBERkFFMjI5MjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfH4sLLK81JVLxMWX0/AKFXEga 0HNXOzKYcDMUk1vtoWzDKOPIxz1Fz2IDz7FHpF/YSjcnn2TcJF0mvx5mbxOuYKne 6LLOAyJwnzoM5GipQaN3SHdtlKJEDNsHqOBpxcecSv1s3na3NSFaDKgYynjZXtB7 GU3U9Y8qoacbjg70LF3OKd4gjIomwqPy0aKqoOPtlimGHsHJlM/5d5VYOqrwwoB3 dTwc5ocRbgze6qm4VyZnYIXEIpTxxKbXBs1MMcPkzjKILqBCEM7hkxo3y0dH4yN6 u8EFk4hGWEanN4zoBXUHCwavDmgToJgw0jneld0mk0HT51iH9WtrIaQgRH2NAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUmF+povoPwKWeXsyu2HkIDfriKSIwHwYDVR0j BBgwFoAUBP0q3amOnl4LYYkuDNYj4E2fULcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRWlUTTN3YVNRUnV3ZHc0c0RxdnlnR0IyR0Q5N2JNWGh1UDRHc0o1ZXFa TlcvMC8wNEZEMkFEREE5OEU5RTVFMEI2MTg5MkUwQ0Q2MjNFMDREOUY1MEI3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA0RkQyQUREQTk4RTlFNUUw QjYxODkyRTBDRDYyM0UwNEQ5RjUwQjcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RWlUTTN3YVNRUnV3ZHc0c0RxdnlnR0IyR0Q5N2JNWGh1UDRHc0o1ZXFaTlcvMC8w NEZEMkFEREE5OEU5RTVFMEI2MTg5MkUwQ0Q2MjNFMDREOUY1MEI3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXd13PXPuEIosg5ZUx+6gqDFaYAW+j9RBVOyzYuavfYS7I/utvSeo/FuKSuSl DVVC0xn0qhHyxY3qJqGrYakmwRqkIyRwxtsh4Jj8kZwNMcd3Z3HiFjfL8dAxOUml /EIi4FB0kNsTjh4MO2W8tK1v+RYcYbbqeeVts6AifslBYvsLTFuPPfUhbMZ2USwS ho9O5tjLuT2MY0GUn2KpCF1h8KXmPx6bZOEL0NsM3GGC92DNk0Hx0xJVTYRSX+kU 5zWhiTqV13yCNGWW/3CzDsg5qwmvK6HxNPxvLj57gzfrYKsI0jJOg5TBKBOk6cEB czymObBzCcEuKdOc8GTmm+juwg== -----END CERTIFICATE-----Generated at Thu Mar 26 01:22:00 2026 by rpki-client