$ rpki-client -vvf rpki-repo.registro.br/repo/G5G9HcUzPADcdaxNyCTNJKTaMH6SCxyci91PVX5XamCX/0/1CEFDCA70329B9DCD217609BD9CE5942FE1C6A2F.mft File: 1CEFDCA70329B9DCD217609BD9CE5942FE1C6A2F.mft (raw, json) Hash identifier: o+mNb/Hq64dRfDKwlsNrwj83Te3HH8kNV3RqWrkKHPg= Subject key identifier: 3F:66:C9:41:9F:CC:CD:FC:9C:D9:D1:C3:8B:6B:69:76:EA:3A:D7:0E Authority key identifier: 1C:EF:DC:A7:03:29:B9:DC:D2:17:60:9B:D9:CE:59:42:FE:1C:6A:2F Certificate issuer: /CN=1CEFDCA70329B9DCD217609BD9CE5942FE1C6A2F Certificate serial: 4E5EB14E82269E211C2252C10B7E5082009EFAB9 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CEFDCA70329B9DCD217609BD9CE5942FE1C6A2F.cer Subject info access: rsync://rpki-repo.registro.br/repo/G5G9HcUzPADcdaxNyCTNJKTaMH6SCxyci91PVX5XamCX/0/1CEFDCA70329B9DCD217609BD9CE5942FE1C6A2F.mft Manifest number: 01FC Signing time: Thu 26 Mar 2026 14:38:31 +0000 Manifest this update: Thu 26 Mar 2026 14:33:31 +0000 Manifest next update: Fri 27 Mar 2026 20:06:31 +0000 Files and hashes: 1: 323830343a386534343a3a2f33322d3438203d3e20323733343134.roa (hash: NpcxWvXzal1YKXgip4gJbMKKp8E5cO//NlFEyag8Gr0=) 2: 1CEFDCA70329B9DCD217609BD9CE5942FE1C6A2F.crl (hash: x3nocAKYJtFPckHA7xRTuKAQbdfzNLHb2ZmmTd3JSLU=) 3: 34352e3138322e3134382e302f32322d3234203d3e20323733343134.roa (hash: dbbmdVzbgg93YC+/yC7kPmE+pyR0GJJ9WJLl+Jcl/IY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/G5G9HcUzPADcdaxNyCTNJKTaMH6SCxyci91PVX5XamCX/0/1CEFDCA70329B9DCD217609BD9CE5942FE1C6A2F.crl rsync://rpki-repo.registro.br/repo/G5G9HcUzPADcdaxNyCTNJKTaMH6SCxyci91PVX5XamCX/0/1CEFDCA70329B9DCD217609BD9CE5942FE1C6A2F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CEFDCA70329B9DCD217609BD9CE5942FE1C6A2F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 27 Mar 2026 20:06:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:5e:b1:4e:82:26:9e:21:1c:22:52:c1:0b:7e:50:82:00:9e:fa:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1CEFDCA70329B9DCD217609BD9CE5942FE1C6A2F Validity Not Before: Mar 26 14:33:31 2026 GMT Not After : Mar 27 20:06:31 2026 GMT Subject: CN=3F66C9419FCCCDFC9CD9D1C38B6B6976EA3AD70E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:1c:f5:fa:b5:3d:d5:48:a3:7f:b5:f8:b6:d2: bf:6c:74:aa:fd:fe:a8:2e:38:5a:0f:2e:f3:96:e6: 13:a6:00:60:29:72:9b:de:87:09:f2:74:d6:40:15: bd:14:a5:68:18:93:fb:84:97:80:9c:4b:56:64:df: 44:ce:f6:89:47:5e:2f:cc:c7:8a:ab:6f:a8:60:0a: 31:30:6b:b7:8a:72:d2:f6:0d:8f:a2:11:6d:25:90: f9:7c:41:4d:52:9b:8a:a4:cb:09:c3:29:1b:57:3f: 4c:f1:7d:98:87:d7:7d:62:47:86:4b:17:db:6c:06: a8:f1:49:bb:4d:fc:46:88:e3:6b:a7:a1:4a:4b:e4: 86:cc:c4:26:27:c9:40:b6:31:7e:ff:73:c8:f3:e7: f2:47:f5:8f:55:a3:a7:5f:34:1a:5f:23:77:2e:db: d9:39:96:1f:e0:50:00:11:5b:5e:1e:25:01:0b:b9: ca:f0:ae:de:bb:bf:e9:dd:4b:0a:20:7d:fd:3c:d5: 8c:59:08:76:d5:b5:48:bb:46:61:37:2b:10:e0:29: 74:81:fe:64:eb:38:46:76:9a:59:ad:29:2b:b7:e6: 28:1d:5a:0e:e6:4e:b0:c6:40:4a:26:da:70:d3:95: 1a:f5:74:e1:89:bb:1e:e2:b2:92:df:95:91:0a:e8: db:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:66:C9:41:9F:CC:CD:FC:9C:D9:D1:C3:8B:6B:69:76:EA:3A:D7:0E X509v3 Authority Key Identifier: keyid:1C:EF:DC:A7:03:29:B9:DC:D2:17:60:9B:D9:CE:59:42:FE:1C:6A:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/G5G9HcUzPADcdaxNyCTNJKTaMH6SCxyci91PVX5XamCX/0/1CEFDCA70329B9DCD217609BD9CE5942FE1C6A2F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CEFDCA70329B9DCD217609BD9CE5942FE1C6A2F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/G5G9HcUzPADcdaxNyCTNJKTaMH6SCxyci91PVX5XamCX/0/1CEFDCA70329B9DCD217609BD9CE5942FE1C6A2F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:4b:d2:8b:f8:97:04:db:b4:0a:92:b0:88:63:6d:a3:e5:48: 8e:8d:36:8e:54:78:95:d9:c0:62:5e:db:c8:6d:b9:e5:ed:8c: ec:d9:58:e5:34:b6:26:6c:3b:44:32:9e:f4:80:2a:2e:8f:f1: 35:0c:69:a9:64:6a:0f:0a:2b:69:07:c1:a9:ae:28:f3:fc:8e: f0:49:b4:7c:ad:52:c9:cb:e3:6f:9f:08:a7:78:95:84:c5:bd: ad:46:d0:50:0e:7f:8b:c8:b9:83:62:64:6a:73:69:33:62:38: d9:71:2d:d0:8f:bb:39:2c:af:46:80:bf:28:12:e2:d3:e9:e5: eb:b0:ab:64:db:db:43:c2:06:2b:0a:ce:07:94:b7:a2:6d:20: 24:fc:8d:81:e3:c1:79:62:46:71:29:03:5c:b4:45:05:49:e7: 86:17:aa:b7:cb:dd:0b:20:57:0c:b2:6a:9a:da:45:23:a0:40: f6:c0:6a:96:46:80:14:93:1c:3d:ff:cc:2d:62:c3:0a:3c:3a: ed:f1:f7:6a:87:50:ad:4a:53:d9:78:03:13:4f:56:44:9e:31: b2:b4:23:4c:41:1a:1f:92:bf:6c:61:33:a9:d8:33:d5:ac:53: 94:be:71:b9:4d:7d:b6:52:02:04:5a:1f:3f:88:e9:57:71:a4: 77:3d:f2:f1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUTl6xToImniEcIlLBC35QggCe+rkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUNFRkRDQTcwMzI5QjlEQ0QyMTc2MDlCRDlDRTU5NDJG RTFDNkEyRjAeFw0yNjAzMjYxNDMzMzFaFw0yNjAzMjcyMDA2MzFaMDMxMTAvBgNV BAMTKDNGNjZDOTQxOUZDQ0NERkM5Q0Q5RDFDMzhCNkI2OTc2RUEzQUQ3MEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0HPX6tT3VSKN/tfi20r9sdKr9 /qguOFoPLvOW5hOmAGApcpvehwnydNZAFb0UpWgYk/uEl4CcS1Zk30TO9olHXi/M x4qrb6hgCjEwa7eKctL2DY+iEW0lkPl8QU1Sm4qkywnDKRtXP0zxfZiH131iR4ZL F9tsBqjxSbtN/EaI42unoUpL5IbMxCYnyUC2MX7/c8jz5/JH9Y9Vo6dfNBpfI3cu 29k5lh/gUAARW14eJQELucrwrt67v+ndSwogff081YxZCHbVtUi7RmE3KxDgKXSB /mTrOEZ2mlmtKSu35igdWg7mTrDGQEom2nDTlRr1dOGJux7ispLflZEK6NuvAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUP2bJQZ/Mzfyc2dHDi2tpduo61w4wHwYDVR0j BBgwFoAUHO/cpwMpudzSF2Cb2c5ZQv4cai8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRzVHOUhjVXpQQURjZGF4TnlDVE5KS1RhTUg2U0N4eWNpOTFQVlg1WGFt Q1gvMC8xQ0VGRENBNzAzMjlCOURDRDIxNzYwOUJEOUNFNTk0MkZFMUM2QTJGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFDRUZEQ0E3MDMyOUI5RENE MjE3NjA5QkQ5Q0U1OTQyRkUxQzZBMkYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RzVHOUhjVXpQQURjZGF4TnlDVE5KS1RhTUg2U0N4eWNpOTFQVlg1WGFtQ1gvMC8x Q0VGRENBNzAzMjlCOURDRDIxNzYwOUJEOUNFNTk0MkZFMUM2QTJGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEArUvSi/iXBNu0CpKwiGNto+VIjo02jlR4ldnAYl7byG255e2M7NlY5TS2Jmw7 RDKe9IAqLo/xNQxpqWRqDworaQfBqa4o8/yO8Em0fK1Sycvjb58Ip3iVhMW9rUbQ UA5/i8i5g2JkanNpM2I42XEt0I+7OSyvRoC/KBLi0+nl67CrZNvbQ8IGKwrOB5S3 om0gJPyNgePBeWJGcSkDXLRFBUnnhheqt8vdCyBXDLJqmtpFI6BA9sBqlkaAFJMc Pf/MLWLDCjw67fH3aodQrUpT2XgDE09WRJ4xsrQjTEEaH5K/bGEzqdgz1axTlL5x uU19tlICBFofP4jpV3Gkdz3y8Q== -----END CERTIFICATE-----Generated at Thu Mar 26 21:40:59 2026 by rpki-client