$ rpki-client -vvf rpki-repo.registro.br/repo/HaKUkmgiHFXBBkQzGVmysuKrQs6yFtqoytzVXc8RTRhK/0/405BC1D1FF7A6457E2EEE8FF4C05D35F913EDBE5.mft File: 405BC1D1FF7A6457E2EEE8FF4C05D35F913EDBE5.mft (raw, json) Hash identifier: R6hvIyjQvwBfe8rxFxv4riwxpInBT3LzGRk49RhRwPY= Subject key identifier: 16:9C:E8:7A:4F:FF:F2:48:22:81:AC:61:53:0A:F2:29:74:51:54:05 Authority key identifier: 40:5B:C1:D1:FF:7A:64:57:E2:EE:E8:FF:4C:05:D3:5F:91:3E:DB:E5 Certificate issuer: /CN=405BC1D1FF7A6457E2EEE8FF4C05D35F913EDBE5 Certificate serial: 4B6085AEF902715FAF6E6E6BC5C228632E1D345B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/405BC1D1FF7A6457E2EEE8FF4C05D35F913EDBE5.cer Subject info access: rsync://rpki-repo.registro.br/repo/HaKUkmgiHFXBBkQzGVmysuKrQs6yFtqoytzVXc8RTRhK/0/405BC1D1FF7A6457E2EEE8FF4C05D35F913EDBE5.mft Manifest number: 18 Signing time: Thu 26 Mar 2026 12:45:55 +0000 Manifest this update: Thu 26 Mar 2026 12:40:55 +0000 Manifest next update: Fri 27 Mar 2026 15:19:55 +0000 Files and hashes: 1: 405BC1D1FF7A6457E2EEE8FF4C05D35F913EDBE5.crl (hash: /ZSO73DwJ4lub2peLdvasnO7pGqoWTYJxmMIqYkALBQ=) 2: 323830343a343336383a3a2f33322d3438203d3e20323637353638.roa (hash: T97wLKhfUJH8b25sNKCUj7MeOZ0Ctwa3FVwUmKeivw8=) 3: 34352e37302e3134342e302f32322d3235203d3e20323637353638.roa (hash: PZwQ7o3LRlRcwxzfCw9EwAigUS5fYBFn/K1kT6L20G4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HaKUkmgiHFXBBkQzGVmysuKrQs6yFtqoytzVXc8RTRhK/0/405BC1D1FF7A6457E2EEE8FF4C05D35F913EDBE5.crl rsync://rpki-repo.registro.br/repo/HaKUkmgiHFXBBkQzGVmysuKrQs6yFtqoytzVXc8RTRhK/0/405BC1D1FF7A6457E2EEE8FF4C05D35F913EDBE5.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/405BC1D1FF7A6457E2EEE8FF4C05D35F913EDBE5.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 27 Mar 2026 15:19:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:60:85:ae:f9:02:71:5f:af:6e:6e:6b:c5:c2:28:63:2e:1d:34:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=405BC1D1FF7A6457E2EEE8FF4C05D35F913EDBE5 Validity Not Before: Mar 26 12:40:55 2026 GMT Not After : Mar 27 15:19:55 2026 GMT Subject: CN=169CE87A4FFFF2482281AC61530AF22974515405 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:af:e5:8d:da:64:5a:aa:b1:30:1d:e1:27:6d: 1a:55:3d:82:11:0e:fc:a2:f7:e5:4b:7c:ab:23:ef: 0b:93:1d:1b:07:ad:eb:69:22:f1:a7:25:d1:4b:fb: 28:9a:e6:10:8a:2f:68:ea:25:0d:91:e8:12:ee:52: 7b:07:69:6c:d0:39:4f:9e:f6:2b:dd:4e:95:f4:d3: 32:3d:7c:a0:ec:91:ea:0a:f8:12:99:9f:19:00:c5: 73:a1:ec:5d:90:5b:cf:50:54:da:9e:67:0d:d3:24: 4e:95:28:ff:83:b8:b7:40:fd:f5:bd:e2:1d:05:41: 02:2d:58:ad:30:4c:c6:63:3b:bc:de:21:48:13:cd: 5f:90:33:69:7a:30:1e:a8:f6:be:fe:c8:93:ee:d3: 02:c6:7d:ce:21:6a:80:6a:b1:35:e2:d6:a4:23:6a: 5c:fc:bf:6c:a1:6c:5d:5c:2f:56:e4:7e:66:2d:3a: 3d:1a:e1:15:eb:da:cd:fa:96:fa:48:9f:04:9d:54: 50:e8:7f:15:b3:da:97:c6:61:89:63:fb:c7:7f:ea: 62:a8:4b:ae:d1:4d:5a:dc:32:3e:3d:9c:00:33:5b: c4:20:1a:9b:dd:7d:ee:94:a5:62:4a:7b:e1:e6:6a: f1:07:f8:ae:a3:c2:72:7b:c0:17:fe:fe:25:0e:e7: f7:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:9C:E8:7A:4F:FF:F2:48:22:81:AC:61:53:0A:F2:29:74:51:54:05 X509v3 Authority Key Identifier: keyid:40:5B:C1:D1:FF:7A:64:57:E2:EE:E8:FF:4C:05:D3:5F:91:3E:DB:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HaKUkmgiHFXBBkQzGVmysuKrQs6yFtqoytzVXc8RTRhK/0/405BC1D1FF7A6457E2EEE8FF4C05D35F913EDBE5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/405BC1D1FF7A6457E2EEE8FF4C05D35F913EDBE5.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaKUkmgiHFXBBkQzGVmysuKrQs6yFtqoytzVXc8RTRhK/0/405BC1D1FF7A6457E2EEE8FF4C05D35F913EDBE5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:7a:42:0e:61:e9:ae:8d:dc:10:75:e8:d0:5b:d1:31:ad:2f: c0:92:59:76:10:25:31:7c:94:2b:e5:af:94:ea:21:a0:fb:f1: 52:1d:84:52:99:01:3d:14:12:1e:b1:19:c5:0e:a3:49:0e:d9: a5:43:32:be:20:78:ca:8a:09:5a:85:f6:8b:3d:3e:ab:5d:ea: b1:00:fc:ab:7f:d9:0c:87:88:61:48:de:50:5e:11:2c:3d:83: 2f:c7:96:3d:0a:6b:d9:4f:da:9d:0a:4a:d1:86:76:ce:e5:10: f6:c4:eb:fd:d1:27:f3:66:56:70:96:57:be:09:28:45:e0:b0: 7f:f9:af:97:97:e4:2a:0f:ed:b0:c7:ea:27:13:08:76:ba:be: 67:84:4f:57:7a:17:ef:57:a1:77:11:a5:9a:be:f5:b8:41:36: f7:9b:28:9d:36:4e:f1:62:e8:1c:49:c6:c6:1e:b8:4a:b6:86: 30:9f:cf:54:31:72:24:08:bf:28:08:eb:6c:55:5b:bd:6d:04: 0b:f3:b3:54:40:3d:39:13:e7:54:6d:e6:a7:b9:b0:18:c3:be: a9:a3:93:07:92:b7:c0:90:f9:c0:61:f1:fa:d0:bf:64:26:74: 59:6e:7f:63:7c:f6:57:c1:c3:12:98:c9:66:17:44:3b:4d:54: 45:14:a5:94 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUS2CFrvkCcV+vbm5rxcIoYy4dNFswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA1QkMxRDFGRjdBNjQ1N0UyRUVFOEZGNEMwNUQzNUY5 MTNFREJFNTAeFw0yNjAzMjYxMjQwNTVaFw0yNjAzMjcxNTE5NTVaMDMxMTAvBgNV BAMTKDE2OUNFODdBNEZGRkYyNDgyMjgxQUM2MTUzMEFGMjI5NzQ1MTU0MDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHr+WN2mRaqrEwHeEnbRpVPYIR Dvyi9+VLfKsj7wuTHRsHretpIvGnJdFL+yia5hCKL2jqJQ2R6BLuUnsHaWzQOU+e 9ivdTpX00zI9fKDskeoK+BKZnxkAxXOh7F2QW89QVNqeZw3TJE6VKP+DuLdA/fW9 4h0FQQItWK0wTMZjO7zeIUgTzV+QM2l6MB6o9r7+yJPu0wLGfc4haoBqsTXi1qQj alz8v2yhbF1cL1bkfmYtOj0a4RXr2s36lvpInwSdVFDofxWz2pfGYYlj+8d/6mKo S67RTVrcMj49nAAzW8QgGpvdfe6UpWJKe+HmavEH+K6jwnJ7wBf+/iUO5/cjAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUFpzoek//8kgigaxhUwryKXRRVAUwHwYDVR0j BBgwFoAUQFvB0f96ZFfi7uj/TAXTX5E+2+UwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSGFLVWttZ2lIRlhCQmtRekdWbXlzdUtyUXM2eUZ0cW95dHpWWGM4UlRS aEsvMC80MDVCQzFEMUZGN0E2NDU3RTJFRUU4RkY0QzA1RDM1RjkxM0VEQkU1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQwNUJDMUQxRkY3QTY0NTdF MkVFRThGRjRDMDVEMzVGOTEzRURCRTUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SGFLVWttZ2lIRlhCQmtRekdWbXlzdUtyUXM2eUZ0cW95dHpWWGM4UlRSaEsvMC80 MDVCQzFEMUZGN0E2NDU3RTJFRUU4RkY0QzA1RDM1RjkxM0VEQkU1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFHpCDmHpro3cEHXo0FvRMa0vwJJZdhAlMXyUK+WvlOohoPvxUh2EUpkBPRQS HrEZxQ6jSQ7ZpUMyviB4yooJWoX2iz0+q13qsQD8q3/ZDIeIYUjeUF4RLD2DL8eW PQpr2U/anQpK0YZ2zuUQ9sTr/dEn82ZWcJZXvgkoReCwf/mvl5fkKg/tsMfqJxMI drq+Z4RPV3oX71ehdxGlmr71uEE295sonTZO8WLoHEnGxh64SraGMJ/PVDFyJAi/ KAjrbFVbvW0EC/OzVEA9ORPnVG3mp7mwGMO+qaOTB5K3wJD5wGHx+tC/ZCZ0WW5/ Y3z2V8HDEpjJZhdEO01URRSllA== -----END CERTIFICATE-----Generated at Thu Mar 26 19:52:11 2026 by rpki-client