$ rpki-client -vvf rpki-repo.registro.br/repo/Hfqb3R5gK2SQ3Kvgxz6DhnH3nL125Sw3Ajj2wMXmfof2/1/686F0BBFEFAB24C90DCC45D743C92337251B2CA7.mft File: 686F0BBFEFAB24C90DCC45D743C92337251B2CA7.mft (raw, json) Hash identifier: fOYEJSfu1FlUARDByjHEMdGaOvdXkbcoKiP+Vj3Fbj8= Subject key identifier: 14:DF:FF:EB:12:5F:62:40:10:3B:11:BD:F8:C8:8D:97:57:F8:0C:13 Authority key identifier: 68:6F:0B:BF:EF:AB:24:C9:0D:CC:45:D7:43:C9:23:37:25:1B:2C:A7 Certificate issuer: /CN=686F0BBFEFAB24C90DCC45D743C92337251B2CA7 Certificate serial: 5EDBF5AA3EEDA384BED38E9E88D14745CD94C0F9 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/686F0BBFEFAB24C90DCC45D743C92337251B2CA7.cer Subject info access: rsync://rpki-repo.registro.br/repo/Hfqb3R5gK2SQ3Kvgxz6DhnH3nL125Sw3Ajj2wMXmfof2/1/686F0BBFEFAB24C90DCC45D743C92337251B2CA7.mft Manifest number: 038D Signing time: Thu 26 Mar 2026 13:32:10 +0000 Manifest this update: Thu 26 Mar 2026 13:27:10 +0000 Manifest next update: Fri 27 Mar 2026 14:12:10 +0000 Files and hashes: 1: 3133312e3130382e39322e302f32322d3234203d3e20323634333530.roa (hash: YEpIAjcyJ7k1L6Ogb0wjzj9MU+wc8ir4fkvnNS0jG+c=) 2: 686F0BBFEFAB24C90DCC45D743C92337251B2CA7.crl (hash: IQ/9xcY+VA+YqDG/E1KfYEsljV+XM57JT8W31R9GmC8=) 3: 323830343a316432343a3a2f33322d3438203d3e20323634333530.roa (hash: T2S/jPoysHz/jvNREo8+4cMIZTsQXLzIo/A7kF2mrN8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Hfqb3R5gK2SQ3Kvgxz6DhnH3nL125Sw3Ajj2wMXmfof2/1/686F0BBFEFAB24C90DCC45D743C92337251B2CA7.crl rsync://rpki-repo.registro.br/repo/Hfqb3R5gK2SQ3Kvgxz6DhnH3nL125Sw3Ajj2wMXmfof2/1/686F0BBFEFAB24C90DCC45D743C92337251B2CA7.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/686F0BBFEFAB24C90DCC45D743C92337251B2CA7.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 27 Mar 2026 14:12:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:db:f5:aa:3e:ed:a3:84:be:d3:8e:9e:88:d1:47:45:cd:94:c0:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=686F0BBFEFAB24C90DCC45D743C92337251B2CA7 Validity Not Before: Mar 26 13:27:10 2026 GMT Not After : Mar 27 14:12:10 2026 GMT Subject: CN=14DFFFEB125F6240103B11BDF8C88D9757F80C13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ac:20:56:e2:e0:64:50:ee:71:43:d0:19:fe: b8:49:b2:36:7d:78:62:1a:8f:a4:3d:c1:ea:05:e9: f2:21:06:80:e1:86:b8:7d:59:cd:9e:3b:e7:27:ca: 7d:e4:de:8c:18:ce:fa:ce:aa:db:90:d5:52:f5:8f: 3e:40:ac:8e:66:92:a1:0d:04:c1:42:3e:00:66:f4: a8:08:d9:4c:68:14:43:52:00:a0:3f:9d:cb:68:8c: fc:a8:19:42:4b:e9:6a:ff:d2:6c:f3:0b:d7:fd:ad: 09:16:5d:8e:f8:72:a7:2e:47:f7:3b:c4:87:65:c6: 73:07:75:71:ed:88:a5:36:d6:14:7f:46:6e:d6:af: b1:d1:83:f5:d0:62:39:ba:45:ea:45:b8:cd:b2:f1: 4d:2f:81:f3:76:ae:33:96:b8:aa:c5:b4:cb:64:a2: 8b:bf:34:38:ac:8c:2a:cf:eb:f3:56:17:3e:aa:a6: 7e:72:1c:cb:e6:3a:db:df:70:51:08:06:ef:62:29: 57:17:8b:d2:ec:5c:cf:c9:77:1d:78:c4:a4:fd:1a: 90:57:68:b4:8d:3a:6b:18:d7:85:11:b4:79:a8:d4: 7f:95:70:72:57:a9:ad:bf:38:f3:b2:86:5f:61:5d: ee:4d:8d:c1:56:09:57:47:ac:d6:36:f0:c1:9a:05: ca:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:DF:FF:EB:12:5F:62:40:10:3B:11:BD:F8:C8:8D:97:57:F8:0C:13 X509v3 Authority Key Identifier: keyid:68:6F:0B:BF:EF:AB:24:C9:0D:CC:45:D7:43:C9:23:37:25:1B:2C:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Hfqb3R5gK2SQ3Kvgxz6DhnH3nL125Sw3Ajj2wMXmfof2/1/686F0BBFEFAB24C90DCC45D743C92337251B2CA7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/686F0BBFEFAB24C90DCC45D743C92337251B2CA7.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hfqb3R5gK2SQ3Kvgxz6DhnH3nL125Sw3Ajj2wMXmfof2/1/686F0BBFEFAB24C90DCC45D743C92337251B2CA7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:d5:e6:65:ff:1a:2e:23:2f:6e:03:09:8a:80:c9:c9:f7:89: b3:2d:6d:d5:85:97:b5:6a:b2:64:69:d5:a9:91:e4:75:79:c5: de:f9:f5:50:59:01:27:fa:b6:da:9b:ab:9b:da:ef:6f:31:5a: b0:55:d2:0c:95:e5:16:0d:f6:29:08:51:73:b8:da:72:9b:64: d8:b3:ba:e9:7a:94:85:f3:f6:cc:07:97:29:00:24:3a:1e:3e: bd:8e:7c:5b:24:ed:3a:8f:ff:41:ed:e9:11:d6:3c:c6:01:f3: eb:2a:3e:42:e8:2e:91:d8:a8:2a:6f:d1:11:0e:34:2b:c5:5c: 7b:d0:84:5a:48:f1:f2:a5:3f:0c:c6:87:13:2a:20:e0:e1:90: f1:5e:cd:1a:a3:52:15:5c:18:56:3e:e7:e4:8b:57:27:af:1e: 81:ce:be:8c:56:d0:e7:fc:1f:12:9b:c9:8f:15:fe:f5:05:17: eb:5a:b2:a1:c7:95:03:ba:ec:ac:7c:cf:c1:87:69:df:fd:ff: a4:fa:7c:b7:d5:73:fb:2e:93:fc:8e:00:20:0d:8c:24:6f:15: f5:b2:84:d3:28:1c:4d:45:86:b7:39:e6:94:a5:14:c9:93:d3: 12:09:58:00:e4:00:2d:db:a6:6c:36:b9:7a:16:57:e5:45:db: 19:83:c2:ff -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUXtv1qj7to4S+046eiNFHRc2UwPkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjg2RjBCQkZFRkFCMjRDOTBEQ0M0NUQ3NDNDOTIzMzcy NTFCMkNBNzAeFw0yNjAzMjYxMzI3MTBaFw0yNjAzMjcxNDEyMTBaMDMxMTAvBgNV BAMTKDE0REZGRkVCMTI1RjYyNDAxMDNCMTFCREY4Qzg4RDk3NTdGODBDMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6rCBW4uBkUO5xQ9AZ/rhJsjZ9 eGIaj6Q9weoF6fIhBoDhhrh9Wc2eO+cnyn3k3owYzvrOqtuQ1VL1jz5ArI5mkqEN BMFCPgBm9KgI2UxoFENSAKA/nctojPyoGUJL6Wr/0mzzC9f9rQkWXY74cqcuR/c7 xIdlxnMHdXHtiKU21hR/Rm7Wr7HRg/XQYjm6RepFuM2y8U0vgfN2rjOWuKrFtMtk oou/NDisjCrP6/NWFz6qpn5yHMvmOtvfcFEIBu9iKVcXi9LsXM/Jdx14xKT9GpBX aLSNOmsY14URtHmo1H+VcHJXqa2/OPOyhl9hXe5NjcFWCVdHrNY28MGaBcrXAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUFN//6xJfYkAQOxG9+MiNl1f4DBMwHwYDVR0j BBgwFoAUaG8Lv++rJMkNzEXXQ8kjNyUbLKcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSGZxYjNSNWdLMlNRM0t2Z3h6NkRobkgzbkwxMjVTdzNBamoyd01YbWZv ZjIvMS82ODZGMEJCRkVGQUIyNEM5MERDQzQ1RDc0M0M5MjMzNzI1MUIyQ0E3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY4NkYwQkJGRUZBQjI0Qzkw RENDNDVENzQzQzkyMzM3MjUxQjJDQTcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SGZxYjNSNWdLMlNRM0t2Z3h6NkRobkgzbkwxMjVTdzNBamoyd01YbWZvZjIvMS82 ODZGMEJCRkVGQUIyNEM5MERDQzQ1RDc0M0M5MjMzNzI1MUIyQ0E3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUdXmZf8aLiMvbgMJioDJyfeJsy1t1YWXtWqyZGnVqZHkdXnF3vn1UFkBJ/q2 2purm9rvbzFasFXSDJXlFg32KQhRc7jacptk2LO66XqUhfP2zAeXKQAkOh4+vY58 WyTtOo//Qe3pEdY8xgHz6yo+QugukdioKm/REQ40K8Vce9CEWkjx8qU/DMaHEyog 4OGQ8V7NGqNSFVwYVj7n5ItXJ68egc6+jFbQ5/wfEpvJjxX+9QUX61qyoceVA7rs rHzPwYdp3/3/pPp8t9Vz+y6T/I4AIA2MJG8V9bKE0ygcTUWGtznmlKUUyZPTEglY AOQALdumbDa5ehZX5UXbGYPC/w== -----END CERTIFICATE-----Generated at Thu Mar 26 23:33:39 2026 by rpki-client