$ rpki-client -vvf rpki-repo.registro.br/repo/HAF1Wj4KgVQpjzyojmhTbekjdmXKknvESETzuona3KoR/1/CB601D115CEB36F637ECADD253ADEDD3C59DFDC3.mft File: CB601D115CEB36F637ECADD253ADEDD3C59DFDC3.mft (raw, json) Hash identifier: IX8ESTZTz7FoZ1s6aujWeLJJJ9RktJgGtioFRtYNrBo= Subject key identifier: 1B:60:4E:10:F2:7D:7E:A3:72:E0:BA:73:38:CE:A6:6D:7B:0C:6E:B4 Authority key identifier: CB:60:1D:11:5C:EB:36:F6:37:EC:AD:D2:53:AD:ED:D3:C5:9D:FD:C3 Certificate issuer: /CN=CB601D115CEB36F637ECADD253ADEDD3C59DFDC3 Certificate serial: 4D58F1B4BEA9B687E4F6DA2ABDB51257B7F8CB41 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB601D115CEB36F637ECADD253ADEDD3C59DFDC3.cer Subject info access: rsync://rpki-repo.registro.br/repo/HAF1Wj4KgVQpjzyojmhTbekjdmXKknvESETzuona3KoR/1/CB601D115CEB36F637ECADD253ADEDD3C59DFDC3.mft Manifest number: 14 Signing time: Wed 25 Mar 2026 09:47:58 +0000 Manifest this update: Wed 25 Mar 2026 09:42:58 +0000 Manifest next update: Thu 26 Mar 2026 10:57:58 +0000 Files and hashes: 1: 323830343a346437303a3a2f33322d3332203d3e20323638313936.roa (hash: jjnOlvB47Hzgv6yYH/Zmqyb0OuU5qpylAf3gXD2B+LE=) 2: 34352e3233352e3132342e302f32342d3234203d3e20323638313936.roa (hash: ISeRK1FWIx5z8dIgaTS3diy3PwlzLJ8QR9PKV8/8RZY=) 3: CB601D115CEB36F637ECADD253ADEDD3C59DFDC3.crl (hash: HvDkC+TPZ4eOaAnehzZ5jGRlFpbd7EoEzBx3mgocXKQ=) 4: 34352e3233352e3132342e302f32332d3233203d3e20323638313936.roa (hash: l6ifbg71nl28gRhuHFkI3PD4RpPZa+G/rE4zfZ+AYCA=) 5: 34352e3233352e3132352e302f32342d3234203d3e20323638313936.roa (hash: GbR1BcgdN/xT89OqP6vmVkTpjNAwafikJ9KzVt68vec=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HAF1Wj4KgVQpjzyojmhTbekjdmXKknvESETzuona3KoR/1/CB601D115CEB36F637ECADD253ADEDD3C59DFDC3.crl rsync://rpki-repo.registro.br/repo/HAF1Wj4KgVQpjzyojmhTbekjdmXKknvESETzuona3KoR/1/CB601D115CEB36F637ECADD253ADEDD3C59DFDC3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB601D115CEB36F637ECADD253ADEDD3C59DFDC3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 26 Mar 2026 10:57:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:58:f1:b4:be:a9:b6:87:e4:f6:da:2a:bd:b5:12:57:b7:f8:cb:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CB601D115CEB36F637ECADD253ADEDD3C59DFDC3 Validity Not Before: Mar 25 09:42:58 2026 GMT Not After : Mar 26 10:57:58 2026 GMT Subject: CN=1B604E10F27D7EA372E0BA7338CEA66D7B0C6EB4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:58:db:57:5b:b2:da:c7:a3:73:86:65:a6:8c: 0f:f0:06:66:eb:bb:46:2b:c1:35:a2:15:dd:aa:c8: e5:37:3d:d9:67:f8:62:0c:ef:b2:51:0f:87:c2:9e: 08:f8:25:93:1a:15:22:52:6d:59:8d:90:2a:cb:fc: 70:48:a7:68:45:34:c3:24:a3:23:63:42:da:de:fe: 27:81:39:d1:45:20:55:5a:ff:5a:4b:31:87:3e:44: 34:87:4a:d3:86:ab:24:88:ff:91:8d:82:35:7a:d3: ab:6d:1e:0f:67:23:b4:55:fe:7e:28:12:14:09:5d: 39:b0:0f:ad:c6:e8:ab:2d:8a:b9:1c:c5:8e:6c:3e: 9a:e6:36:0b:ce:6a:4e:fd:75:bb:80:15:b1:92:0f: 8b:c8:c1:9b:4a:13:be:22:73:fd:5f:92:31:70:4f: ce:61:58:d3:fb:61:00:18:82:6d:f4:32:d8:6e:6e: 6d:57:b9:6a:e4:af:1d:b9:6b:18:cf:e0:01:cc:2e: 5e:5d:d0:b7:90:a5:7e:39:9b:6a:f4:09:8e:e9:2c: 97:6b:f0:4a:85:d3:58:1a:3f:46:ae:66:92:d2:e3: 86:e2:69:66:fa:d4:0f:51:ae:c9:f0:f4:18:10:48: 54:82:2f:51:7e:47:71:9d:e4:25:0c:82:1c:bb:bc: 55:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:60:4E:10:F2:7D:7E:A3:72:E0:BA:73:38:CE:A6:6D:7B:0C:6E:B4 X509v3 Authority Key Identifier: keyid:CB:60:1D:11:5C:EB:36:F6:37:EC:AD:D2:53:AD:ED:D3:C5:9D:FD:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HAF1Wj4KgVQpjzyojmhTbekjdmXKknvESETzuona3KoR/1/CB601D115CEB36F637ECADD253ADEDD3C59DFDC3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB601D115CEB36F637ECADD253ADEDD3C59DFDC3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HAF1Wj4KgVQpjzyojmhTbekjdmXKknvESETzuona3KoR/1/CB601D115CEB36F637ECADD253ADEDD3C59DFDC3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:44:b9:91:90:8f:af:cc:2d:e1:8b:83:18:38:5d:2e:c8:2e: f2:b2:27:50:81:92:02:cf:f2:76:ee:b4:ba:38:e7:e9:b5:c5: d8:e8:b1:57:2a:fd:78:91:2f:9a:2b:e3:f1:94:75:be:98:9a: 36:9b:03:0d:9c:59:ad:d5:1d:43:c8:45:33:00:7e:7f:09:cf: 37:7d:1b:e8:b1:df:21:b5:44:de:6b:a1:7b:ec:76:6a:67:53: 75:f0:d0:f8:86:04:67:5d:10:23:72:3b:f4:37:09:17:08:fc: 91:d5:3a:f2:2a:44:b1:c0:b9:45:a9:21:ee:1c:7f:ca:3c:38: 9f:df:13:fd:71:c3:fd:cb:78:67:95:79:43:58:d2:85:fb:f9: 99:78:1c:79:bc:d0:1d:51:0b:c9:15:14:96:16:0f:d0:b8:a5: 0c:a8:1e:ac:5f:74:d9:4c:55:a8:c4:25:55:b3:f4:82:c3:13: e3:cb:34:2a:76:cb:11:a4:22:0a:54:56:25:06:d3:b1:4f:2a: e4:d6:68:7e:93:e8:f6:c8:db:75:70:ee:22:94:a5:54:4b:2c: 4c:31:74:e6:84:ee:f9:d9:54:b3:0b:54:b2:05:7e:46:8b:96: bd:98:c5:d0:4b:e5:10:6c:38:a4:0c:b5:42:53:ba:30:cc:cb: eb:ed:19:aa -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUTVjxtL6ptofk9toqvbUSV7f4y0EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0I2MDFEMTE1Q0VCMzZGNjM3RUNBREQyNTNBREVERDND NTlERkRDMzAeFw0yNjAzMjUwOTQyNThaFw0yNjAzMjYxMDU3NThaMDMxMTAvBgNV BAMTKDFCNjA0RTEwRjI3RDdFQTM3MkUwQkE3MzM4Q0VBNjZEN0IwQzZFQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDWNtXW7Lax6NzhmWmjA/wBmbr u0YrwTWiFd2qyOU3Pdln+GIM77JRD4fCngj4JZMaFSJSbVmNkCrL/HBIp2hFNMMk oyNjQtre/ieBOdFFIFVa/1pLMYc+RDSHStOGqySI/5GNgjV606ttHg9nI7RV/n4o EhQJXTmwD63G6KstirkcxY5sPprmNgvOak79dbuAFbGSD4vIwZtKE74ic/1fkjFw T85hWNP7YQAYgm30Mthubm1XuWrkrx25axjP4AHMLl5d0LeQpX45m2r0CY7pLJdr 8EqF01gaP0auZpLS44biaWb61A9Rrsnw9BgQSFSCL1F+R3Gd5CUMghy7vFWfAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUG2BOEPJ9fqNy4LpzOM6mbXsMbrQwHwYDVR0j BBgwFoAUy2AdEVzrNvY37K3SU63t08Wd/cMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSEFGMVdqNEtnVlFwanp5b2ptaFRiZWtqZG1YS2tudkVTRVR6dW9uYTNL b1IvMS9DQjYwMUQxMTVDRUIzNkY2MzdFQ0FERDI1M0FERUREM0M1OURGREMzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NCNjAxRDExNUNFQjM2RjYz N0VDQUREMjUzQURFREQzQzU5REZEQzMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SEFGMVdqNEtnVlFwanp5b2ptaFRiZWtqZG1YS2tudkVTRVR6dW9uYTNLb1IvMS9D QjYwMUQxMTVDRUIzNkY2MzdFQ0FERDI1M0FERUREM0M1OURGREMzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsUS5kZCPr8wt4YuDGDhdLsgu8rInUIGSAs/ydu60ujjn6bXF2OixVyr9eJEv mivj8ZR1vpiaNpsDDZxZrdUdQ8hFMwB+fwnPN30b6LHfIbVE3muhe+x2amdTdfDQ +IYEZ10QI3I79DcJFwj8kdU68ipEscC5Rakh7hx/yjw4n98T/XHD/ct4Z5V5Q1jS hfv5mXgcebzQHVELyRUUlhYP0LilDKgerF902UxVqMQlVbP0gsMT48s0KnbLEaQi ClRWJQbTsU8q5NZofpPo9sjbdXDuIpSlVEssTDF05oTu+dlUswtUsgV+RouWvZjF 0EvlEGw4pAy1QlO6MMzL6+0Zqg== -----END CERTIFICATE-----Generated at Wed Mar 25 23:58:35 2026 by rpki-client