$ rpki-client -vvf rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/D95738A14AD98B305087E048FD2E4821E5E2299A.mft File: D95738A14AD98B305087E048FD2E4821E5E2299A.mft (raw, json) Hash identifier: /WZwr82XHI5mrZoKMR9tdwgafpxeHxyIgsUqKc8jGF4= Subject key identifier: 7C:4E:4D:AE:C1:D1:18:F8:A7:31:51:E7:D3:46:F6:30:ED:C4:9D:07 Authority key identifier: D9:57:38:A1:4A:D9:8B:30:50:87:E0:48:FD:2E:48:21:E5:E2:29:9A Certificate issuer: /CN=D95738A14AD98B305087E048FD2E4821E5E2299A Certificate serial: 4905E3C36EF25730B7626E11922F1FA3B6F16325 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D95738A14AD98B305087E048FD2E4821E5E2299A.cer Subject info access: rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/D95738A14AD98B305087E048FD2E4821E5E2299A.mft Manifest number: 01D4 Signing time: Thu 26 Mar 2026 14:35:46 +0000 Manifest this update: Thu 26 Mar 2026 14:30:46 +0000 Manifest next update: Fri 27 Mar 2026 17:46:46 +0000 Files and hashes: 1: D95738A14AD98B305087E048FD2E4821E5E2299A.crl (hash: cxHq/v4tqsBe1Is6hN3NWtDI8+aVS7WrLc1t7oCMlkg=) 2: 3139312e3234322e34382e302f32312d3234203d3e20323633343730.roa (hash: sw3oEatXepjwQCpuqahj/6Vt7v30jl4t1qqftgBJOXw=) 3: 323830343a313235343a3a2f33322d3332203d3e20323633343730.roa (hash: VhHJJ2edhKn4ftHIdPaNolc4MCx5oZKkJHFr3E+rItk=) 4: 3137302e38332e3230302e302f32322d3234203d3e20323633343730.roa (hash: 3dEyGzKHFOd9LeZVxU1UzcBmIS+t2RbJviuI4dC12Lk=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/D95738A14AD98B305087E048FD2E4821E5E2299A.crl rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/D95738A14AD98B305087E048FD2E4821E5E2299A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D95738A14AD98B305087E048FD2E4821E5E2299A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 27 Mar 2026 17:46:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:05:e3:c3:6e:f2:57:30:b7:62:6e:11:92:2f:1f:a3:b6:f1:63:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D95738A14AD98B305087E048FD2E4821E5E2299A Validity Not Before: Mar 26 14:30:46 2026 GMT Not After : Mar 27 17:46:46 2026 GMT Subject: CN=7C4E4DAEC1D118F8A73151E7D346F630EDC49D07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:99:eb:8b:32:58:e7:49:14:5e:21:f9:86:71: 32:67:96:ab:44:15:21:07:4e:9b:25:11:25:94:d6: df:c3:55:b5:0f:7a:4c:19:c5:5c:70:9e:08:11:9b: 20:ba:6a:e2:9f:33:d8:30:1c:04:55:97:c2:61:03: 19:ee:27:8d:83:d1:21:80:18:86:f5:9f:a7:4e:42: d1:0f:92:d6:1b:63:ba:b8:19:f1:97:ac:c4:c2:64: 82:fe:77:ba:e0:1c:92:ea:12:ef:8d:1d:08:98:a8: d8:e5:7d:25:16:7a:35:71:7f:02:8d:83:f2:52:c1: df:67:d5:e7:f2:bb:e7:0a:a8:df:2a:0a:9b:fe:18: 75:70:64:f1:26:8a:39:07:c3:5c:b1:82:80:85:e6: 00:54:2a:be:26:c5:a7:1a:9f:58:32:c2:62:2b:1f: a8:6f:e6:58:f0:b0:9e:87:18:3d:96:23:fe:5c:53: 70:59:46:da:ea:ea:62:c3:75:51:8d:2d:0a:4c:9a: bd:dc:a8:54:de:6d:c4:34:72:21:fe:27:20:26:ef: d3:49:8e:d7:db:7b:98:b2:c3:ab:b4:93:9f:20:79: 31:23:a4:5e:1a:c4:6e:b9:3a:89:8a:d9:23:78:51: 73:54:37:8a:4a:7a:dc:bb:30:f8:a1:4d:1a:13:13: e9:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:4E:4D:AE:C1:D1:18:F8:A7:31:51:E7:D3:46:F6:30:ED:C4:9D:07 X509v3 Authority Key Identifier: keyid:D9:57:38:A1:4A:D9:8B:30:50:87:E0:48:FD:2E:48:21:E5:E2:29:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/D95738A14AD98B305087E048FD2E4821E5E2299A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D95738A14AD98B305087E048FD2E4821E5E2299A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/D95738A14AD98B305087E048FD2E4821E5E2299A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:65:b3:bc:68:f5:13:96:9f:c8:96:1f:02:5f:59:a5:f7:b3: 1b:a7:a0:6d:9b:1a:4b:c6:6a:b2:3b:2d:53:77:c6:fe:4d:28: 42:74:b8:ad:98:12:34:3b:0d:82:d8:de:e1:d2:3c:f3:9b:6d: 0d:8d:6f:19:07:14:32:8c:87:1c:43:81:9b:dd:57:70:58:fc: 16:c5:10:f4:85:09:5a:7a:23:0e:41:14:92:ad:bf:92:9a:32: 2a:49:90:b0:75:74:8b:2c:b9:c9:8f:14:d8:40:84:f4:be:f7: c2:e6:cf:ae:ee:46:a8:ff:f8:22:fd:78:19:67:84:d7:1c:a5: c2:20:9d:9f:de:9e:45:66:78:77:f9:9a:81:d8:0c:82:c9:69: e0:bb:27:5e:3d:6f:28:cd:24:4d:2a:ee:33:66:7d:21:6b:7f: 0e:1c:5e:9d:6d:62:fe:e7:78:00:e2:be:1f:f8:a6:1b:40:fb: e1:7d:e9:05:91:27:af:b6:3a:29:9b:c3:9b:8b:f0:91:f6:13: bf:42:39:6d:9e:4d:a9:bf:0f:1f:17:38:0b:01:1a:28:20:53: 87:3f:0c:7b:19:41:40:62:91:be:77:c2:20:53:1f:22:08:79: 31:9b:ac:56:b2:4b:4f:fb:c9:82:b7:eb:00:ef:87:ad:7f:68: 93:d3:62:02 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUSQXjw27yVzC3Ym4Rki8fo7bxYyUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDk1NzM4QTE0QUQ5OEIzMDUwODdFMDQ4RkQyRTQ4MjFF NUUyMjk5QTAeFw0yNjAzMjYxNDMwNDZaFw0yNjAzMjcxNzQ2NDZaMDMxMTAvBgNV BAMTKDdDNEU0REFFQzFEMTE4RjhBNzMxNTFFN0QzNDZGNjMwRURDNDlEMDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnmeuLMljnSRReIfmGcTJnlqtE FSEHTpslESWU1t/DVbUPekwZxVxwnggRmyC6auKfM9gwHARVl8JhAxnuJ42D0SGA GIb1n6dOQtEPktYbY7q4GfGXrMTCZIL+d7rgHJLqEu+NHQiYqNjlfSUWejVxfwKN g/JSwd9n1efyu+cKqN8qCpv+GHVwZPEmijkHw1yxgoCF5gBUKr4mxacan1gywmIr H6hv5ljwsJ6HGD2WI/5cU3BZRtrq6mLDdVGNLQpMmr3cqFTebcQ0ciH+JyAm79NJ jtfbe5iyw6u0k58geTEjpF4axG65OomK2SN4UXNUN4pKety7MPihTRoTE+kbAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUfE5NrsHRGPinMVHn00b2MO3EnQcwHwYDVR0j BBgwFoAU2Vc4oUrZizBQh+BI/S5IIeXiKZowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR3hTMUhrYk1VSjc0SHFhZnNqYktuM1dyUkxyblVtTWIyYVBmRFExR3g2 UFkvMC9EOTU3MzhBMTRBRDk4QjMwNTA4N0UwNDhGRDJFNDgyMUU1RTIyOTlBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q5NTczOEExNEFEOThCMzA1 MDg3RTA0OEZEMkU0ODIxRTVFMjI5OUEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R3hTMUhrYk1VSjc0SHFhZnNqYktuM1dyUkxyblVtTWIyYVBmRFExR3g2UFkvMC9E OTU3MzhBMTRBRDk4QjMwNTA4N0UwNDhGRDJFNDgyMUU1RTIyOTlBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVGWzvGj1E5afyJYfAl9ZpfezG6egbZsaS8ZqsjstU3fG/k0oQnS4rZgSNDsN gtje4dI885ttDY1vGQcUMoyHHEOBm91XcFj8FsUQ9IUJWnojDkEUkq2/kpoyKkmQ sHV0iyy5yY8U2ECE9L73wubPru5GqP/4Iv14GWeE1xylwiCdn96eRWZ4d/magdgM gslp4LsnXj1vKM0kTSruM2Z9IWt/DhxenW1i/ud4AOK+H/imG0D74X3pBZEnr7Y6 KZvDm4vwkfYTv0I5bZ5Nqb8PHxc4CwEaKCBThz8MexlBQGKRvnfCIFMfIgh5MZus VrJLT/vJgrfrAO+HrX9ok9NiAg== -----END CERTIFICATE-----Generated at Thu Mar 26 23:12:47 2026 by rpki-client