$ rpki-client -vvf rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.mft File: 89F33609E2B118C8ED9A105548D2D01FD6E38729.mft (raw, json) Hash identifier: hf+Aym2xlh+g8OL8slfqhZrLGlawJQQaEJaubBouocc= Subject key identifier: A3:3B:9C:78:6B:85:B6:54:7B:2C:11:4E:0A:46:EC:44:75:06:12:F2 Authority key identifier: 89:F3:36:09:E2:B1:18:C8:ED:9A:10:55:48:D2:D0:1F:D6:E3:87:29 Certificate issuer: /CN=89F33609E2B118C8ED9A105548D2D01FD6E38729 Certificate serial: 7CB5E06F32AA07DB8C288666D6CEED4C65E2C35F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.cer Subject info access: rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.mft Manifest number: 03BE Signing time: Thu 26 Mar 2026 14:55:46 +0000 Manifest this update: Thu 26 Mar 2026 14:50:46 +0000 Manifest next update: Fri 27 Mar 2026 15:32:46 +0000 Files and hashes: 1: 3139312e3234332e35362e302f32312d3234203d3e20323633343936.roa (hash: wOOB4o7vIgPKPMxhgj52s0DYqn7UcJh+r6LIBZUHAog=) 2: 323830343a313263303a3a2f33322d3438203d3e20323633343936.roa (hash: lQMvzGKTexKr11ZtKxbyzWnk1sR3ocinG38SpRXYKuU=) 3: 3137302e3234342e3231362e302f32322d3234203d3e20323633343936.roa (hash: ew5NkdN8Fi3KObAuy97z4lSLJTedaWh5168q9DGgY3w=) 4: 89F33609E2B118C8ED9A105548D2D01FD6E38729.crl (hash: oQPv/9KdXVAyJgHTPhjJld3NrFCJ5ZpgqPHM2wwWMeM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.crl rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 27 Mar 2026 15:32:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:b5:e0:6f:32:aa:07:db:8c:28:86:66:d6:ce:ed:4c:65:e2:c3:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89F33609E2B118C8ED9A105548D2D01FD6E38729 Validity Not Before: Mar 26 14:50:46 2026 GMT Not After : Mar 27 15:32:46 2026 GMT Subject: CN=A33B9C786B85B6547B2C114E0A46EC44750612F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:ea:7b:90:e0:e1:ee:74:1e:66:12:a1:ed:08: 01:d1:02:fe:72:3d:5f:67:d4:cf:51:4a:df:04:71: 2f:56:4b:30:e9:47:c4:be:d6:84:7e:94:e7:ef:9c: d6:ee:4d:22:d9:1c:06:a4:30:e5:46:d6:21:a3:5f: 5b:c4:d6:03:64:cf:c4:bf:e6:ea:5a:d6:7e:8f:25: c0:d8:08:95:a6:8c:3a:fb:8a:f7:9f:5b:74:ca:47: 4e:d6:cb:44:df:f2:96:b6:9a:e6:c0:f5:32:1d:e8: 93:d5:94:eb:02:d4:ec:e7:72:fd:a5:34:52:f7:9c: ce:57:ac:7f:b6:0b:e5:0c:f0:4b:62:cf:61:32:88: b9:4d:b3:e9:cc:a5:3c:7f:19:f5:19:62:19:17:d4: 8a:83:86:a5:9d:ea:c7:ea:9f:33:c0:83:c8:e8:df: c2:8b:26:ff:10:d7:63:0e:75:2d:24:5b:54:ab:49: 00:63:7b:69:88:31:b1:d9:c3:69:e3:5c:3d:26:98: 3f:2e:d2:69:59:4f:34:57:1c:0b:8e:50:d5:f5:fc: 73:4e:d1:b5:7b:1d:8f:f7:16:a7:70:21:98:ce:d2: d6:fd:fb:4b:01:a3:b8:08:00:03:c7:51:33:e3:2b: 25:20:8c:74:cf:f1:93:52:c8:78:d9:05:77:2b:60: 8f:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:3B:9C:78:6B:85:B6:54:7B:2C:11:4E:0A:46:EC:44:75:06:12:F2 X509v3 Authority Key Identifier: keyid:89:F3:36:09:E2:B1:18:C8:ED:9A:10:55:48:D2:D0:1F:D6:E3:87:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:e5:2f:31:53:a1:99:d7:fe:b7:b9:ca:82:9a:c8:dc:10:e3: 55:8e:b5:6c:e3:09:7a:1f:7e:47:54:6c:64:66:02:46:bc:62: c9:66:87:8e:46:a4:f6:87:4c:ac:9c:3e:a2:10:c1:6a:3a:a6: ce:d5:ad:40:9e:41:fd:16:4b:56:9f:a5:e8:df:28:e5:e0:8e: a5:24:36:2b:5c:b8:12:05:d5:40:a0:b9:00:78:f3:65:44:4a: cb:f4:74:97:b4:02:12:14:59:68:8d:dd:9b:48:7a:e0:2b:9c: 90:71:2c:9e:7d:5a:20:29:26:65:76:d9:4a:2d:b4:9d:f4:ed: 2a:8c:b1:aa:90:fe:ad:b8:6f:a9:84:60:69:95:a8:0c:f3:27: a8:4f:46:20:23:a8:62:00:97:73:2d:68:17:9f:c0:07:6b:e6: 3e:38:fb:bf:91:19:fd:a7:bc:01:7f:16:6f:51:5c:88:55:f7: 22:7a:bc:0b:78:4a:59:f9:93:41:95:21:b9:4f:ad:01:6f:0c: 11:d4:e9:10:93:84:0a:fe:d8:e2:34:ec:49:b3:96:dd:19:d5: a6:ec:8f:50:1a:2c:41:4e:87:fd:88:d1:4f:ab:95:9a:05:d8: 43:22:59:5f:2d:c9:5a:57:1a:21:9d:6e:58:9b:d0:bb:7f:d3: 29:f0:99:65 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUfLXgbzKqB9uMKIZm1s7tTGXiw18wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODlGMzM2MDlFMkIxMThDOEVEOUExMDU1NDhEMkQwMUZE NkUzODcyOTAeFw0yNjAzMjYxNDUwNDZaFw0yNjAzMjcxNTMyNDZaMDMxMTAvBgNV BAMTKEEzM0I5Qzc4NkI4NUI2NTQ3QjJDMTE0RTBBNDZFQzQ0NzUwNjEyRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDc6nuQ4OHudB5mEqHtCAHRAv5y PV9n1M9RSt8EcS9WSzDpR8S+1oR+lOfvnNbuTSLZHAakMOVG1iGjX1vE1gNkz8S/ 5upa1n6PJcDYCJWmjDr7ivefW3TKR07Wy0Tf8pa2mubA9TId6JPVlOsC1Ozncv2l NFL3nM5XrH+2C+UM8Etiz2EyiLlNs+nMpTx/GfUZYhkX1IqDhqWd6sfqnzPAg8jo 38KLJv8Q12MOdS0kW1SrSQBje2mIMbHZw2njXD0mmD8u0mlZTzRXHAuOUNX1/HNO 0bV7HY/3FqdwIZjO0tb9+0sBo7gIAAPHUTPjKyUgjHTP8ZNSyHjZBXcrYI/NAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUozuceGuFtlR7LBFOCkbsRHUGEvIwHwYDVR0j BBgwFoAUifM2CeKxGMjtmhBVSNLQH9bjhykwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRXBlY2JlcUNKUDVSUWFoaFprejZNWUZoazVRQkNIQUxXSkNLTEw5N1Y4 ekUvMS84OUYzMzYwOUUyQjExOEM4RUQ5QTEwNTU0OEQyRDAxRkQ2RTM4NzI5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg5RjMzNjA5RTJCMTE4QzhF RDlBMTA1NTQ4RDJEMDFGRDZFMzg3MjkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RXBlY2JlcUNKUDVSUWFoaFprejZNWUZoazVRQkNIQUxXSkNLTEw5N1Y4ekUvMS84 OUYzMzYwOUUyQjExOEM4RUQ5QTEwNTU0OEQyRDAxRkQ2RTM4NzI5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIOUvMVOhmdf+t7nKgprI3BDjVY61bOMJeh9+R1RsZGYCRrxiyWaHjkak9odM rJw+ohDBajqmztWtQJ5B/RZLVp+l6N8o5eCOpSQ2K1y4EgXVQKC5AHjzZURKy/R0 l7QCEhRZaI3dm0h64CuckHEsnn1aICkmZXbZSi20nfTtKoyxqpD+rbhvqYRgaZWo DPMnqE9GICOoYgCXcy1oF5/AB2vmPjj7v5EZ/ae8AX8Wb1FciFX3Inq8C3hKWfmT QZUhuU+tAW8MEdTpEJOECv7Y4jTsSbOW3RnVpuyPUBosQU6H/YjRT6uVmgXYQyJZ Xy3JWlcaIZ1uWJvQu3/TKfCZZQ== -----END CERTIFICATE-----Generated at Thu Mar 26 19:59:07 2026 by rpki-client