$ rpki-client -vvf rpki-repo.registro.br/repo/HqvBULHkPLbj15FkukAoAxQnEjkYSj9XTopqfd5GJjrg/0/FD9B1F96040398EB4A95F392D33F09CA8B1135A8.mft File: FD9B1F96040398EB4A95F392D33F09CA8B1135A8.mft (raw, json) Hash identifier: qxfDu6u5817G2DIvrLdCS0KKrXf5PBSn1N1U/0g3Hfc= Subject key identifier: 7C:80:C6:CC:3C:C2:70:1D:BC:73:EE:99:ED:0A:54:B0:75:61:EE:48 Authority key identifier: FD:9B:1F:96:04:03:98:EB:4A:95:F3:92:D3:3F:09:CA:8B:11:35:A8 Certificate issuer: /CN=FD9B1F96040398EB4A95F392D33F09CA8B1135A8 Certificate serial: 499461554186942C07F8C38B767257F64EFCE358 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD9B1F96040398EB4A95F392D33F09CA8B1135A8.cer Subject info access: rsync://rpki-repo.registro.br/repo/HqvBULHkPLbj15FkukAoAxQnEjkYSj9XTopqfd5GJjrg/0/FD9B1F96040398EB4A95F392D33F09CA8B1135A8.mft Manifest number: CA Signing time: Thu 26 Mar 2026 17:24:35 +0000 Manifest this update: Thu 26 Mar 2026 17:19:35 +0000 Manifest next update: Fri 27 Mar 2026 19:31:35 +0000 Files and hashes: 1: 323830343a356439303a3a2f33322d3438203d3e203133373836.roa (hash: ydjZqPe6zeZ89ufkdlT/438yc1ftpXM6DIsOtg9D5VI=) 2: 34352e3137372e3130302e302f32322d3234203d3e203133373836.roa (hash: 4EtPtNdD6e6pjiJ7Qz0LiWXvNC5QHHTaMg/zUwhaxTg=) 3: FD9B1F96040398EB4A95F392D33F09CA8B1135A8.crl (hash: J8nCwk7HdDhc5KPGtfzz4MLBqX5InlaaG8laXh/4CsM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HqvBULHkPLbj15FkukAoAxQnEjkYSj9XTopqfd5GJjrg/0/FD9B1F96040398EB4A95F392D33F09CA8B1135A8.crl rsync://rpki-repo.registro.br/repo/HqvBULHkPLbj15FkukAoAxQnEjkYSj9XTopqfd5GJjrg/0/FD9B1F96040398EB4A95F392D33F09CA8B1135A8.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD9B1F96040398EB4A95F392D33F09CA8B1135A8.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 27 Mar 2026 19:31:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:94:61:55:41:86:94:2c:07:f8:c3:8b:76:72:57:f6:4e:fc:e3:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FD9B1F96040398EB4A95F392D33F09CA8B1135A8 Validity Not Before: Mar 26 17:19:35 2026 GMT Not After : Mar 27 19:31:35 2026 GMT Subject: CN=7C80C6CC3CC2701DBC73EE99ED0A54B07561EE48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ce:4f:9a:36:f8:a3:04:20:f7:f6:08:6b:13: 1b:1d:04:b2:cf:69:98:23:e3:95:36:3c:44:c9:ec: 52:78:9f:bc:b2:db:40:f7:52:0f:9e:e0:88:c8:ea: 1e:07:a8:f0:de:fa:23:f5:ca:6b:91:ca:9b:8f:9e: 8b:5e:10:de:f2:5b:e0:0e:0f:1c:ca:a6:59:db:60: 81:24:05:64:1b:7a:2d:64:67:f6:10:e7:d0:b6:f1: c3:63:bd:bf:5f:46:cd:e6:d4:92:e7:b7:c7:4a:67: 4d:c2:4d:86:d4:50:91:56:4b:83:63:8d:89:85:53: 61:cc:e8:22:76:71:fd:76:21:88:63:15:84:62:e2: a9:d7:ea:51:ac:36:f6:e3:55:88:b1:2c:db:bc:95: ca:d1:75:bb:57:8f:63:65:c0:3e:14:e0:90:0b:39: 77:32:b5:34:57:f6:16:9e:38:47:7c:44:ed:b1:35: 88:4c:c2:26:67:bb:8e:a0:62:dd:02:49:d4:f8:72: c0:52:25:09:f0:88:7f:cb:26:d8:2f:2e:3b:9e:50: b6:5f:73:91:72:22:ae:ec:be:2a:ab:25:56:95:0c: b8:8b:3c:67:6c:cc:b1:cd:16:c8:b1:f8:02:66:a5: f5:eb:aa:c6:bb:e0:c7:09:ac:81:3c:9a:f5:ac:4e: 00:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:80:C6:CC:3C:C2:70:1D:BC:73:EE:99:ED:0A:54:B0:75:61:EE:48 X509v3 Authority Key Identifier: keyid:FD:9B:1F:96:04:03:98:EB:4A:95:F3:92:D3:3F:09:CA:8B:11:35:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HqvBULHkPLbj15FkukAoAxQnEjkYSj9XTopqfd5GJjrg/0/FD9B1F96040398EB4A95F392D33F09CA8B1135A8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD9B1F96040398EB4A95F392D33F09CA8B1135A8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HqvBULHkPLbj15FkukAoAxQnEjkYSj9XTopqfd5GJjrg/0/FD9B1F96040398EB4A95F392D33F09CA8B1135A8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:1b:44:bc:13:80:2d:5c:71:a0:c0:66:ab:9b:51:0d:e9:3f: 5e:3e:14:d5:c2:dd:c4:1c:60:3b:09:9f:5a:e7:79:ba:31:b1: b9:ae:e7:e9:a0:c3:6c:55:1d:61:c0:06:7c:91:ad:64:69:8d: de:47:67:5a:31:e6:b1:04:7a:31:71:2a:7a:cf:2b:22:bf:c6: e5:54:f4:2f:ef:57:f2:95:e1:e5:65:6c:c1:0f:8e:01:09:cd: 62:15:20:3f:ac:2a:15:07:82:8e:c2:60:c3:e9:2b:4c:dd:0c: 45:4a:21:0a:5e:3e:cb:3d:7b:9d:d9:b3:b4:ee:b9:cb:89:de: 22:e4:f0:13:b7:59:9a:d8:1e:97:26:9e:e0:76:b7:85:c2:95: 9c:59:4d:b7:35:22:db:19:f6:4f:8b:bd:0a:8d:46:37:b3:7c: ec:0b:ca:a1:0d:6a:40:26:81:83:a3:4a:a8:f3:3c:a5:8d:dc: c8:bf:e7:84:bb:1e:64:8d:d9:96:b8:f7:b0:f9:a6:35:20:e4: 41:0d:8f:fe:99:24:d7:29:f9:20:b7:58:cf:4e:71:93:63:63: 9a:b5:e0:94:10:1d:4e:07:a3:70:7d:c7:94:fe:34:d4:85:b5: f0:bb:4b:4f:c0:fe:c4:95:d4:d4:51:e3:1c:25:cd:2e:d2:30: cc:ab:d5:07 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUSZRhVUGGlCwH+MOLdnJX9k7841gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkQ5QjFGOTYwNDAzOThFQjRBOTVGMzkyRDMzRjA5Q0E4 QjExMzVBODAeFw0yNjAzMjYxNzE5MzVaFw0yNjAzMjcxOTMxMzVaMDMxMTAvBgNV BAMTKDdDODBDNkNDM0NDMjcwMURCQzczRUU5OUVEMEE1NEIwNzU2MUVFNDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnzk+aNvijBCD39ghrExsdBLLP aZgj45U2PETJ7FJ4n7yy20D3Ug+e4IjI6h4HqPDe+iP1ymuRypuPnoteEN7yW+AO DxzKplnbYIEkBWQbei1kZ/YQ59C28cNjvb9fRs3m1JLnt8dKZ03CTYbUUJFWS4Nj jYmFU2HM6CJ2cf12IYhjFYRi4qnX6lGsNvbjVYixLNu8lcrRdbtXj2NlwD4U4JAL OXcytTRX9haeOEd8RO2xNYhMwiZnu46gYt0CSdT4csBSJQnwiH/LJtgvLjueULZf c5FyIq7sviqrJVaVDLiLPGdszLHNFsix+AJmpfXrqsa74McJrIE8mvWsTgBdAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUfIDGzDzCcB28c+6Z7QpUsHVh7kgwHwYDVR0j BBgwFoAU/ZsflgQDmOtKlfOS0z8JyosRNagwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSHF2QlVMSGtQTGJqMTVGa3VrQW9BeFFuRWprWVNqOVhUb3BxZmQ1R0pq cmcvMC9GRDlCMUY5NjA0MDM5OEVCNEE5NUYzOTJEMzNGMDlDQThCMTEzNUE4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZEOUIxRjk2MDQwMzk4RUI0 QTk1RjM5MkQzM0YwOUNBOEIxMTM1QTguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SHF2QlVMSGtQTGJqMTVGa3VrQW9BeFFuRWprWVNqOVhUb3BxZmQ1R0pqcmcvMC9G RDlCMUY5NjA0MDM5OEVCNEE5NUYzOTJEMzNGMDlDQThCMTEzNUE4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcBtEvBOALVxxoMBmq5tRDek/Xj4U1cLdxBxgOwmfWud5ujGxua7n6aDDbFUd YcAGfJGtZGmN3kdnWjHmsQR6MXEqes8rIr/G5VT0L+9X8pXh5WVswQ+OAQnNYhUg P6wqFQeCjsJgw+krTN0MRUohCl4+yz17ndmztO65y4neIuTwE7dZmtgelyae4Ha3 hcKVnFlNtzUi2xn2T4u9Co1GN7N87AvKoQ1qQCaBg6NKqPM8pY3cyL/nhLseZI3Z lrj3sPmmNSDkQQ2P/pkk1yn5ILdYz05xk2NjmrXglBAdTgejcH3HlP401IW18LtL T8D+xJXU1FHjHCXNLtIwzKvVBw== -----END CERTIFICATE-----Generated at Thu Mar 26 21:59:40 2026 by rpki-client