$ rpki-client -vvf rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/1/2AADFACED9C75E320914697A02E254A3D463839A.mft File: 2AADFACED9C75E320914697A02E254A3D463839A.mft (raw, json) Hash identifier: MUPLd1DfGk/gSrAnEJiS8khSfgjzWr4Sq9gsW+9WXE4= Subject key identifier: F2:12:2E:34:72:C6:F1:D7:ED:FE:DF:19:A5:6E:8B:EB:3B:C5:80:A2 Authority key identifier: 2A:AD:FA:CE:D9:C7:5E:32:09:14:69:7A:02:E2:54:A3:D4:63:83:9A Certificate issuer: /CN=2AADFACED9C75E320914697A02E254A3D463839A Certificate serial: 139DFEF9D9A5B0866FAA4D7149E7F86102AF49A0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AADFACED9C75E320914697A02E254A3D463839A.cer Subject info access: rsync://rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/1/2AADFACED9C75E320914697A02E254A3D463839A.mft Manifest number: 03BE Signing time: Thu 26 Mar 2026 16:37:04 +0000 Manifest this update: Thu 26 Mar 2026 16:32:04 +0000 Manifest next update: Fri 27 Mar 2026 17:29:04 +0000 Files and hashes: 1: 3134312e3139332e3135312e302f32342d3234203d3e203533313230.roa (hash: yzKUpRe3y8LUWcm83z69Jaw9iWkJf+qC/m+2IVHZxlc=) 2: 323830343a316465383a3a2f33322d3434203d3e203533313230.roa (hash: Nr+GaVgOM2KaxkMsqzw8YASCuxHUI3aExeAauUF/zmg=) 3: 2AADFACED9C75E320914697A02E254A3D463839A.crl (hash: KaBtMF32AnXTjMVifPXp40CRzV2hUuS1llmFpYpX5yk=) 4: 3138372e3131312e31362e302f32302d3234203d3e203533313230.roa (hash: Wl3NM8LcidtB9ABien1wpKt4MxmMwZ7mN01Y9qxRLP8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/1/2AADFACED9C75E320914697A02E254A3D463839A.crl rsync://rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/1/2AADFACED9C75E320914697A02E254A3D463839A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AADFACED9C75E320914697A02E254A3D463839A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 27 Mar 2026 17:29:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:9d:fe:f9:d9:a5:b0:86:6f:aa:4d:71:49:e7:f8:61:02:af:49:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2AADFACED9C75E320914697A02E254A3D463839A Validity Not Before: Mar 26 16:32:04 2026 GMT Not After : Mar 27 17:29:04 2026 GMT Subject: CN=F2122E3472C6F1D7EDFEDF19A56E8BEB3BC580A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:00:97:be:84:ba:1e:70:9a:a2:5d:e3:c9:f5: f9:3a:cb:6f:c5:84:e2:0a:b6:27:37:d4:24:94:01: 4f:7c:e4:16:94:57:ac:fe:fc:a4:7e:6c:00:3e:5b: 88:33:dc:60:05:c2:1f:eb:18:52:0e:66:ed:ad:59: d8:da:bc:bd:5d:87:57:b4:b0:56:fd:f3:82:8b:fe: d7:63:ab:ae:a8:c6:2f:24:47:25:75:92:9e:01:e9: df:48:c7:f8:6b:dd:7a:73:40:59:98:31:0a:07:79: ef:12:db:98:7e:96:de:92:da:31:e6:f7:3f:d2:83: 0e:4f:4d:a5:67:32:ea:c0:1f:0c:c9:ba:13:a4:f1: 78:35:38:d7:86:59:03:2c:49:f2:a5:8b:2c:68:1f: c6:88:eb:d8:35:c3:6a:f7:c8:69:a2:32:f1:06:91: 7c:43:c4:1e:ca:7f:3d:d4:8d:10:5a:54:d8:4d:c1: 61:7c:a7:1e:cf:02:12:7e:16:91:1d:a6:7e:61:39: 00:e3:27:84:28:e5:e4:66:d0:8a:6b:fa:2a:4a:41: de:71:05:5b:3f:a4:0e:50:cd:6c:b2:28:01:45:2f: 3e:d5:87:ab:d6:60:e8:da:9b:44:68:ee:f8:71:34: ec:27:54:9a:8c:be:65:73:87:3b:a4:67:3b:4c:a6: 09:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:12:2E:34:72:C6:F1:D7:ED:FE:DF:19:A5:6E:8B:EB:3B:C5:80:A2 X509v3 Authority Key Identifier: keyid:2A:AD:FA:CE:D9:C7:5E:32:09:14:69:7A:02:E2:54:A3:D4:63:83:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/1/2AADFACED9C75E320914697A02E254A3D463839A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AADFACED9C75E320914697A02E254A3D463839A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/1/2AADFACED9C75E320914697A02E254A3D463839A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:90:aa:16:cf:81:b3:45:9e:6e:89:17:77:70:1a:5a:b6:1a: 7d:b8:9d:24:d5:8b:8c:52:67:2e:c9:00:cc:45:d3:91:a8:6c: e5:eb:6b:92:ab:80:1f:3b:b9:05:0e:45:a4:40:ac:e0:a2:43: af:ec:fc:45:26:54:d8:b7:02:f2:fd:6b:e6:1a:91:e0:b0:ff: 6c:56:ad:7b:2d:d5:d7:55:ca:bc:01:20:31:32:ee:c7:d2:6f: be:26:a0:92:4d:55:5f:23:f7:52:7c:1c:f2:a6:40:33:04:cd: 49:6b:0b:5f:f0:a5:a8:69:56:0a:63:36:bc:1e:94:49:44:a8: 6c:a0:d8:55:93:ff:82:77:a6:31:41:ef:4e:74:80:d4:88:38: 88:d3:86:93:17:cb:a3:45:47:4a:ec:7c:6c:43:c7:07:68:40: 8d:e8:91:19:35:b5:44:87:70:2d:67:53:86:e4:a3:f2:01:21: 1e:0c:6b:88:59:4d:eb:8b:f1:14:45:4f:fe:53:9b:a5:ce:2e: 5e:47:ce:e2:c9:ad:b4:c6:68:3c:f3:1e:be:a8:18:84:c3:6b: fb:ed:0a:84:1e:24:30:cd:14:9f:04:6b:bc:16:63:8b:0f:21: 3f:3b:fc:a3:0d:63:19:4b:6c:14:7c:9d:b6:9f:c8:4e:3e:52: 34:6d:90:02 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUE53++dmlsIZvqk1xSef4YQKvSaAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFBREZBQ0VEOUM3NUUzMjA5MTQ2OTdBMDJFMjU0QTNE NDYzODM5QTAeFw0yNjAzMjYxNjMyMDRaFw0yNjAzMjcxNzI5MDRaMDMxMTAvBgNV BAMTKEYyMTIyRTM0NzJDNkYxRDdFREZFREYxOUE1NkU4QkVCM0JDNTgwQTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIAJe+hLoecJqiXePJ9fk6y2/F hOIKtic31CSUAU985BaUV6z+/KR+bAA+W4gz3GAFwh/rGFIOZu2tWdjavL1dh1e0 sFb984KL/tdjq66oxi8kRyV1kp4B6d9Ix/hr3XpzQFmYMQoHee8S25h+lt6S2jHm 9z/Sgw5PTaVnMurAHwzJuhOk8Xg1ONeGWQMsSfKliyxoH8aI69g1w2r3yGmiMvEG kXxDxB7Kfz3UjRBaVNhNwWF8px7PAhJ+FpEdpn5hOQDjJ4Qo5eRm0Ipr+ipKQd5x BVs/pA5QzWyyKAFFLz7Vh6vWYOjam0Ro7vhxNOwnVJqMvmVzhzukZztMpglLAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU8hIuNHLG8dft/t8ZpW6L6zvFgKIwHwYDVR0j BBgwFoAUKq36ztnHXjIJFGl6AuJUo9Rjg5owDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSHVyY0FKek1GTEY4ZTRncEg2SmVqUkRxM2p2UEpqYmttMW05bVJCU0Ru eW8vMS8yQUFERkFDRUQ5Qzc1RTMyMDkxNDY5N0EwMkUyNTRBM0Q0NjM4MzlBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJBQURGQUNFRDlDNzVFMzIw OTE0Njk3QTAyRTI1NEEzRDQ2MzgzOUEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SHVyY0FKek1GTEY4ZTRncEg2SmVqUkRxM2p2UEpqYmttMW05bVJCU0RueW8vMS8y QUFERkFDRUQ5Qzc1RTMyMDkxNDY5N0EwMkUyNTRBM0Q0NjM4MzlBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGpCqFs+Bs0WebokXd3AaWrYafbidJNWLjFJnLskAzEXTkahs5etrkquAHzu5 BQ5FpECs4KJDr+z8RSZU2LcC8v1r5hqR4LD/bFatey3V11XKvAEgMTLux9Jvviag kk1VXyP3Unwc8qZAMwTNSWsLX/ClqGlWCmM2vB6USUSobKDYVZP/gnemMUHvTnSA 1Ig4iNOGkxfLo0VHSux8bEPHB2hAjeiRGTW1RIdwLWdThuSj8gEhHgxriFlN64vx FEVP/lObpc4uXkfO4smttMZoPPMevqgYhMNr++0KhB4kMM0UnwRrvBZjiw8hPzv8 ow1jGUtsFHydtp/ITj5SNG2QAg== -----END CERTIFICATE-----Generated at Thu Mar 26 21:43:18 2026 by rpki-client