$ rpki-client -vvf rpki-repo.registro.br/repo/F49S9pxJSsVQMnpg84cZCRRHud3W3iTgfYKpNFaoSs9H/0/2A402458A400ED074E76D8C820FBA439A0893E31.mft File: 2A402458A400ED074E76D8C820FBA439A0893E31.mft (raw, json) Hash identifier: w8LS/dmLpL/TIXkTRvPr3YE1lqOpABtX9QL+ygrRMmU= Subject key identifier: A8:68:7B:32:16:4C:D7:FA:A3:0B:F5:37:80:88:94:B5:B3:ED:CE:E8 Authority key identifier: 2A:40:24:58:A4:00:ED:07:4E:76:D8:C8:20:FB:A4:39:A0:89:3E:31 Certificate issuer: /CN=2A402458A400ED074E76D8C820FBA439A0893E31 Certificate serial: 51590A7F0BE2A0DEAA512C83529FB5A4E047CF27 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A402458A400ED074E76D8C820FBA439A0893E31.cer Subject info access: rsync://rpki-repo.registro.br/repo/F49S9pxJSsVQMnpg84cZCRRHud3W3iTgfYKpNFaoSs9H/0/2A402458A400ED074E76D8C820FBA439A0893E31.mft Manifest number: 3D Signing time: Wed 25 Mar 2026 10:45:16 +0000 Manifest this update: Wed 25 Mar 2026 10:40:16 +0000 Manifest next update: Thu 26 Mar 2026 14:18:16 +0000 Files and hashes: 1: 323830343a363633343a3a2f33322d313238203d3e20323639353431.roa (hash: mdz+k25Yl69fWCwPtCoh7Kmxpkya5lWd9YY+ZK4ogXk=) 2: 2A402458A400ED074E76D8C820FBA439A0893E31.crl (hash: piFwzy/4VWITzLtuJa2YB1+o95Rs8QT5SquSBirdIUM=) 3: 34352e3138382e3232302e302f32322d3332203d3e20323639353431.roa (hash: Td8vg9iZ4YWg/CcSCWLey2C9OPshGj04LaOjDPOMSGc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/F49S9pxJSsVQMnpg84cZCRRHud3W3iTgfYKpNFaoSs9H/0/2A402458A400ED074E76D8C820FBA439A0893E31.crl rsync://rpki-repo.registro.br/repo/F49S9pxJSsVQMnpg84cZCRRHud3W3iTgfYKpNFaoSs9H/0/2A402458A400ED074E76D8C820FBA439A0893E31.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A402458A400ED074E76D8C820FBA439A0893E31.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 26 Mar 2026 14:18:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:59:0a:7f:0b:e2:a0:de:aa:51:2c:83:52:9f:b5:a4:e0:47:cf:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A402458A400ED074E76D8C820FBA439A0893E31 Validity Not Before: Mar 25 10:40:16 2026 GMT Not After : Mar 26 14:18:16 2026 GMT Subject: CN=A8687B32164CD7FAA30BF537808894B5B3EDCEE8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ac:4d:f8:6e:e7:d2:cd:9f:4e:07:a1:c3:91: b5:8f:d5:f1:ee:03:84:ec:ed:88:58:19:62:99:f1: fd:96:8d:e4:73:6e:dc:4f:9e:b6:bc:3c:c1:36:4c: 44:78:de:e4:08:d6:e7:02:3b:57:24:cf:38:2e:ea: 26:4a:b6:be:5a:19:ae:df:4a:10:c3:e2:33:a4:2e: fa:20:ab:d3:ad:25:c5:6e:fe:c0:7d:6a:06:cb:db: ed:3d:43:bd:57:71:73:ca:6e:fe:af:b4:14:6d:1a: 99:40:a0:2f:2d:8f:2a:0b:fc:41:ad:5e:ae:c5:a8: 76:39:f1:12:60:23:1f:61:66:bc:e4:d7:76:13:73: 65:ee:e8:02:82:57:bb:33:e0:c5:2c:8c:8b:f5:68: e2:50:82:f9:f2:95:a6:bf:ed:94:4b:0b:1a:a4:1b: fb:cf:96:31:24:aa:e6:37:ff:63:bc:a0:f9:a1:47: 7b:97:86:10:72:27:e6:ce:9e:3c:4b:bb:d9:3f:70: 76:25:59:9c:1e:35:f9:f5:0a:d9:6e:4a:ae:52:68: 95:de:d7:f9:d8:cd:7c:62:a1:e8:9a:73:46:96:60: 1a:6f:44:e7:f6:5c:cc:72:5a:ae:ac:c7:f6:3c:45: 8e:f3:8c:7b:9e:85:1a:eb:03:fc:a4:75:da:43:d2: 1d:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:68:7B:32:16:4C:D7:FA:A3:0B:F5:37:80:88:94:B5:B3:ED:CE:E8 X509v3 Authority Key Identifier: keyid:2A:40:24:58:A4:00:ED:07:4E:76:D8:C8:20:FB:A4:39:A0:89:3E:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/F49S9pxJSsVQMnpg84cZCRRHud3W3iTgfYKpNFaoSs9H/0/2A402458A400ED074E76D8C820FBA439A0893E31.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A402458A400ED074E76D8C820FBA439A0893E31.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/F49S9pxJSsVQMnpg84cZCRRHud3W3iTgfYKpNFaoSs9H/0/2A402458A400ED074E76D8C820FBA439A0893E31.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:ad:27:e6:31:4a:ec:ce:ca:db:4c:b6:9e:88:97:52:40:93: 0d:7d:1b:41:8d:3e:26:a9:57:5b:3a:e9:ef:1e:42:d2:1d:4e: ea:9f:40:93:96:1a:4c:c9:87:43:a9:ea:3a:38:07:d5:e4:a1: a7:31:51:00:ac:6b:c3:0c:44:fd:54:e3:45:8e:a3:77:31:ee: 89:3f:73:8b:e1:9e:a4:46:8e:c7:5a:0a:dc:26:4a:44:63:50: f9:9c:c5:db:6b:eb:d4:b2:0f:b3:a5:b1:35:fc:ba:bc:f1:9d: be:2d:67:05:ef:f3:02:05:dc:45:5c:3f:3d:d3:34:cf:27:c1: 86:75:20:41:a3:15:6e:7f:d0:07:bc:2e:49:a8:ff:c3:54:77: 95:28:a5:00:02:b2:05:79:48:d4:2f:88:d7:05:57:c0:da:ad: 1a:3c:d5:ed:fa:0b:28:58:ae:59:e4:dd:96:8c:ef:2e:fb:3e: 54:30:6d:c7:58:4e:45:c8:8a:da:c3:7f:cf:51:c3:79:b5:64: 4b:bb:07:c5:bd:0b:04:3a:84:b8:1f:92:cc:b7:04:66:0d:5a: ca:8e:9e:bb:24:b2:37:9d:d2:8f:96:eb:f3:55:ef:3c:ce:c0: 17:c8:9a:07:56:13:c3:ee:c6:b2:2f:cc:4c:8b:85:a3:cb:8c: 92:cc:0a:90 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUUVkKfwvioN6qUSyDUp+1pOBHzycwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkE0MDI0NThBNDAwRUQwNzRFNzZEOEM4MjBGQkE0MzlB MDg5M0UzMTAeFw0yNjAzMjUxMDQwMTZaFw0yNjAzMjYxNDE4MTZaMDMxMTAvBgNV BAMTKEE4Njg3QjMyMTY0Q0Q3RkFBMzBCRjUzNzgwODg5NEI1QjNFRENFRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvrE34bufSzZ9OB6HDkbWP1fHu A4Ts7YhYGWKZ8f2WjeRzbtxPnra8PME2TER43uQI1ucCO1ckzzgu6iZKtr5aGa7f ShDD4jOkLvogq9OtJcVu/sB9agbL2+09Q71XcXPKbv6vtBRtGplAoC8tjyoL/EGt Xq7FqHY58RJgIx9hZrzk13YTc2Xu6AKCV7sz4MUsjIv1aOJQgvnylaa/7ZRLCxqk G/vPljEkquY3/2O8oPmhR3uXhhByJ+bOnjxLu9k/cHYlWZweNfn1CtluSq5SaJXe 1/nYzXxioeiac0aWYBpvROf2XMxyWq6sx/Y8RY7zjHuehRrrA/ykddpD0h1NAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUqGh7MhZM1/qjC/U3gIiUtbPtzugwHwYDVR0j BBgwFoAUKkAkWKQA7QdOdtjIIPukOaCJPjEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRjQ5UzlweEpTc1ZRTW5wZzg0Y1pDUlJIdWQzVzNpVGdmWUtwTkZhb1Nz OUgvMC8yQTQwMjQ1OEE0MDBFRDA3NEU3NkQ4QzgyMEZCQTQzOUEwODkzRTMxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJBNDAyNDU4QTQwMEVEMDc0 RTc2RDhDODIwRkJBNDM5QTA4OTNFMzEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RjQ5UzlweEpTc1ZRTW5wZzg0Y1pDUlJIdWQzVzNpVGdmWUtwTkZhb1NzOUgvMC8y QTQwMjQ1OEE0MDBFRDA3NEU3NkQ4QzgyMEZCQTQzOUEwODkzRTMxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEALq0n5jFK7M7K20y2noiXUkCTDX0bQY0+JqlXWzrp7x5C0h1O6p9Ak5YaTMmH Q6nqOjgH1eShpzFRAKxrwwxE/VTjRY6jdzHuiT9zi+GepEaOx1oK3CZKRGNQ+ZzF 22vr1LIPs6WxNfy6vPGdvi1nBe/zAgXcRVw/PdM0zyfBhnUgQaMVbn/QB7wuSaj/ w1R3lSilAAKyBXlI1C+I1wVXwNqtGjzV7foLKFiuWeTdlozvLvs+VDBtx1hORciK 2sN/z1HDebVkS7sHxb0LBDqEuB+SzLcEZg1ayo6euySyN53Sj5br81XvPM7AF8ia B1YTw+7Gsi/MTIuFo8uMkswKkA== -----END CERTIFICATE-----Generated at Thu Mar 26 01:20:36 2026 by rpki-client