$ rpki-client -vvf rpki-repo.registro.br/repo/EsQE87pvLo2B2YGPSYHzVkh6AjKta7r5ffABNY5FjFNQ/0/4B2D308A10AC4264B7DC7D903FFE478F2A400E1D.mft File: 4B2D308A10AC4264B7DC7D903FFE478F2A400E1D.mft (raw, json) Hash identifier: gfD/h1DA7iR4TelS2hxRls2hBbPeu6/iFmEOhe/pnFA= Subject key identifier: 04:39:60:E7:43:56:C8:82:A5:CE:D8:A0:9F:DB:46:FC:09:8D:3D:4D Authority key identifier: 4B:2D:30:8A:10:AC:42:64:B7:DC:7D:90:3F:FE:47:8F:2A:40:0E:1D Certificate issuer: /CN=4B2D308A10AC4264B7DC7D903FFE478F2A400E1D Certificate serial: 22F582324256F2D4014E31BFFF4937FC3D3BF99D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B2D308A10AC4264B7DC7D903FFE478F2A400E1D.cer Subject info access: rsync://rpki-repo.registro.br/repo/EsQE87pvLo2B2YGPSYHzVkh6AjKta7r5ffABNY5FjFNQ/0/4B2D308A10AC4264B7DC7D903FFE478F2A400E1D.mft Manifest number: 014A Signing time: Thu 26 Mar 2026 08:52:01 +0000 Manifest this update: Thu 26 Mar 2026 08:47:01 +0000 Manifest next update: Fri 27 Mar 2026 11:14:01 +0000 Files and hashes: 1: 323830343a316537303a3a2f33322d313238203d3e20323634343239.roa (hash: 6ObJH/Yn0OhNlenVZChDhjf8OzouFK3QjeWFSU2/I54=) 2: 4B2D308A10AC4264B7DC7D903FFE478F2A400E1D.crl (hash: d/92yij0p8TSPwg87YlFsD+qsrDQhE+jUrJwu/4lL/g=) 3: 3133312e3232312e3133322e302f32322d3332203d3e20323634343239.roa (hash: 4kjU7jzExWeoE5Ul09K/8oKzzSaEzcW2EMczGqlS9Wk=) 4: 3137302e3234352e3131362e302f32322d3332203d3e20323634343239.roa (hash: bdYqLTrmyZVtnX3hQzjggcKDrPInm/SX7ouRHDPAjqE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/EsQE87pvLo2B2YGPSYHzVkh6AjKta7r5ffABNY5FjFNQ/0/4B2D308A10AC4264B7DC7D903FFE478F2A400E1D.crl rsync://rpki-repo.registro.br/repo/EsQE87pvLo2B2YGPSYHzVkh6AjKta7r5ffABNY5FjFNQ/0/4B2D308A10AC4264B7DC7D903FFE478F2A400E1D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B2D308A10AC4264B7DC7D903FFE478F2A400E1D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 27 Mar 2026 11:14:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:f5:82:32:42:56:f2:d4:01:4e:31:bf:ff:49:37:fc:3d:3b:f9:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4B2D308A10AC4264B7DC7D903FFE478F2A400E1D Validity Not Before: Mar 26 08:47:01 2026 GMT Not After : Mar 27 11:14:01 2026 GMT Subject: CN=043960E74356C882A5CED8A09FDB46FC098D3D4D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:53:5c:b8:24:58:bd:b8:30:25:14:a0:b8:d5: 68:9a:04:e7:4d:09:5a:4d:d2:c0:67:a7:5a:ed:58: 06:56:c7:a4:bb:52:d3:39:43:e8:43:72:5b:9e:df: 5f:68:28:61:9d:44:05:61:a4:a4:76:00:54:59:cb: 9f:f4:1d:a8:25:3d:0e:92:05:b0:54:5f:52:c9:1a: 29:87:55:f9:99:be:20:cf:52:77:77:1b:07:b8:84: 68:89:c3:53:9a:c3:3e:0e:2f:88:e2:1a:43:7b:80: a3:cc:95:98:88:64:66:57:fb:0a:3b:a6:fa:fc:eb: 08:4e:bb:22:5f:26:93:5e:7f:d1:93:74:c5:6b:d3: 63:31:84:91:a0:81:b1:9f:98:8c:df:2e:c5:38:28: 9c:e6:19:ce:fa:10:99:d1:0f:16:59:a2:78:a8:88: ca:1d:93:12:ff:f6:cd:fb:19:17:84:aa:9c:9d:3d: d7:06:63:85:b7:08:18:47:34:16:ca:67:c7:30:b9: 07:09:8d:68:1a:96:f3:ca:9b:0c:ba:fb:3f:32:dd: 35:76:02:38:c8:de:fd:b5:fe:22:09:3d:90:7a:f4: cd:33:f8:a0:a7:30:ad:90:45:61:94:50:9e:b3:3f: 33:b1:44:3d:7d:c5:72:f8:b2:56:da:b2:74:fd:ba: d7:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:39:60:E7:43:56:C8:82:A5:CE:D8:A0:9F:DB:46:FC:09:8D:3D:4D X509v3 Authority Key Identifier: keyid:4B:2D:30:8A:10:AC:42:64:B7:DC:7D:90:3F:FE:47:8F:2A:40:0E:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/EsQE87pvLo2B2YGPSYHzVkh6AjKta7r5ffABNY5FjFNQ/0/4B2D308A10AC4264B7DC7D903FFE478F2A400E1D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B2D308A10AC4264B7DC7D903FFE478F2A400E1D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/EsQE87pvLo2B2YGPSYHzVkh6AjKta7r5ffABNY5FjFNQ/0/4B2D308A10AC4264B7DC7D903FFE478F2A400E1D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:9a:bf:12:da:0b:73:39:7e:1f:6c:27:c2:e9:78:50:95:a8: b0:ca:d5:89:be:45:e8:76:b5:0f:c3:70:a5:62:f0:b4:17:c9: 4e:10:2d:82:c9:13:90:30:bf:0f:b4:e2:5c:cd:96:00:da:13: d4:92:6b:70:1d:2c:d2:d5:61:a7:43:a2:46:89:30:d2:08:ad: 7b:81:5c:a1:f0:7b:ea:51:b0:fe:52:4c:af:4f:0e:69:56:a3: 34:ce:ea:41:df:b3:e5:d3:aa:e4:80:28:6e:d9:f8:a7:69:81: 5f:23:67:46:bd:72:c1:e0:6d:71:d0:c2:7f:55:82:79:81:a2: ca:e2:a4:9e:7d:e1:48:31:a1:db:c4:8f:f2:85:7c:a9:9f:ca: 0f:54:51:03:57:7c:68:ed:4c:cf:1d:a0:7b:02:c6:af:be:c5: ca:cb:48:32:53:80:41:a9:ac:c0:a4:86:7f:07:e6:1c:17:a6: f7:02:06:cb:07:ee:15:bf:89:1b:63:b3:3e:2f:2d:cc:bf:41: a7:df:24:09:d4:4f:39:a5:67:89:07:bf:bc:9d:88:69:26:c8: 90:3a:49:24:bc:54:dc:eb:da:06:19:45:25:14:76:26:c9:80: 3f:2c:47:76:20:2b:54:eb:89:1c:c8:28:8f:5e:d2:24:d4:04: 73:c6:5b:bb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUIvWCMkJW8tQBTjG//0k3/D07+Z0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEIyRDMwOEExMEFDNDI2NEI3REM3RDkwM0ZGRTQ3OEYy QTQwMEUxRDAeFw0yNjAzMjYwODQ3MDFaFw0yNjAzMjcxMTE0MDFaMDMxMTAvBgNV BAMTKDA0Mzk2MEU3NDM1NkM4ODJBNUNFRDhBMDlGREI0NkZDMDk4RDNENEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOU1y4JFi9uDAlFKC41WiaBOdN CVpN0sBnp1rtWAZWx6S7UtM5Q+hDclue319oKGGdRAVhpKR2AFRZy5/0HaglPQ6S BbBUX1LJGimHVfmZviDPUnd3Gwe4hGiJw1Oawz4OL4jiGkN7gKPMlZiIZGZX+wo7 pvr86whOuyJfJpNef9GTdMVr02MxhJGggbGfmIzfLsU4KJzmGc76EJnRDxZZonio iModkxL/9s37GReEqpydPdcGY4W3CBhHNBbKZ8cwuQcJjWgalvPKmwy6+z8y3TV2 AjjI3v21/iIJPZB69M0z+KCnMK2QRWGUUJ6zPzOxRD19xXL4slbasnT9utfzAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUBDlg50NWyIKlztign9tG/AmNPU0wHwYDVR0j BBgwFoAUSy0wihCsQmS33H2QP/5HjypADh0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRXNRRTg3cHZMbzJCMllHUFNZSHpWa2g2QWpLdGE3cjVmZkFCTlk1RmpG TlEvMC80QjJEMzA4QTEwQUM0MjY0QjdEQzdEOTAzRkZFNDc4RjJBNDAwRTFELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRCMkQzMDhBMTBBQzQyNjRC N0RDN0Q5MDNGRkU0NzhGMkE0MDBFMUQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RXNRRTg3cHZMbzJCMllHUFNZSHpWa2g2QWpLdGE3cjVmZkFCTlk1RmpGTlEvMC80 QjJEMzA4QTEwQUM0MjY0QjdEQzdEOTAzRkZFNDc4RjJBNDAwRTFELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAY5q/EtoLczl+H2wnwul4UJWosMrVib5F6Ha1D8NwpWLwtBfJThAtgskTkDC/ D7TiXM2WANoT1JJrcB0s0tVhp0OiRokw0gite4FcofB76lGw/lJMr08OaVajNM7q Qd+z5dOq5IAobtn4p2mBXyNnRr1yweBtcdDCf1WCeYGiyuKknn3hSDGh28SP8oV8 qZ/KD1RRA1d8aO1Mzx2gewLGr77FystIMlOAQamswKSGfwfmHBem9wIGywfuFb+J G2OzPi8tzL9Bp98kCdRPOaVniQe/vJ2IaSbIkDpJJLxU3OvaBhlFJRR2JsmAPyxH diArVOuJHMgoj17SJNQEc8Zbuw== -----END CERTIFICATE-----Generated at Fri Mar 27 01:32:38 2026 by rpki-client