$ rpki-client -vvf rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/040A99E102503B9DD68DAF74A5564601C25CBFF1.mft File: 040A99E102503B9DD68DAF74A5564601C25CBFF1.mft (raw, json) Hash identifier: HWGQx/SKA7aWaVNkhRxCU9rV5f6PpR/gfY4aUpwkM5Q= Subject key identifier: 65:56:7F:26:D4:6C:C3:A7:46:E2:80:6A:40:85:0B:9B:25:08:81:87 Authority key identifier: 04:0A:99:E1:02:50:3B:9D:D6:8D:AF:74:A5:56:46:01:C2:5C:BF:F1 Certificate issuer: /CN=040A99E102503B9DD68DAF74A5564601C25CBFF1 Certificate serial: 43BDFB2BFEF64ADE5F51AE776B6E5E9D777A13BC Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/040A99E102503B9DD68DAF74A5564601C25CBFF1.cer Subject info access: rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/040A99E102503B9DD68DAF74A5564601C25CBFF1.mft Manifest number: 07 Signing time: Wed 25 Mar 2026 10:24:59 +0000 Manifest this update: Wed 25 Mar 2026 10:19:59 +0000 Manifest next update: Thu 26 Mar 2026 13:53:59 +0000 Files and hashes: 1: 3139312e33362e3136302e302f32312d3234203d3e203238313235.roa (hash: VA8pzE5OVgeOHI4/E96ByKMfrJmZfBV0/FG8eshvKiU=) 2: 040A99E102503B9DD68DAF74A5564601C25CBFF1.crl (hash: iwKllnEtYAD0rGn5/7f/uHn3VaSZX31nNjlCx5TJt5E=) 3: 3138372e31392e31362e302f32302d3234203d3e203238313235.roa (hash: /ot4KGpH/tqmwpJyx6ouOrTL20ouW0YqcaUdIRGnRl8=) 4: 323830343a313438383a3a2f33322d3438203d3e203238313235.roa (hash: iheHSONNJOEjggcGLOV6jXrer/mL/4x7e0+XiFwoJmM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/040A99E102503B9DD68DAF74A5564601C25CBFF1.crl rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/040A99E102503B9DD68DAF74A5564601C25CBFF1.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/040A99E102503B9DD68DAF74A5564601C25CBFF1.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 26 Mar 2026 13:53:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:bd:fb:2b:fe:f6:4a:de:5f:51:ae:77:6b:6e:5e:9d:77:7a:13:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=040A99E102503B9DD68DAF74A5564601C25CBFF1 Validity Not Before: Mar 25 10:19:59 2026 GMT Not After : Mar 26 13:53:59 2026 GMT Subject: CN=65567F26D46CC3A746E2806A40850B9B25088187 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:23:54:0f:c7:3c:2e:5f:4d:47:6d:9a:70:4e: 56:bc:d7:13:fc:27:67:77:36:38:f9:1b:8f:e5:a3: 03:61:de:e8:59:2c:59:32:b9:f7:90:9a:32:fe:ac: 0b:b2:c4:fd:cc:7f:5f:4e:35:aa:80:17:cf:4d:b0: b3:5b:b7:87:65:fa:e4:47:85:68:80:0f:25:9b:99: 52:0c:be:22:0e:ac:fc:2a:c0:13:8c:af:89:13:ee: e7:0f:67:da:d4:87:9a:d2:25:81:1e:d9:a4:92:17: f0:72:98:76:82:31:79:a9:ea:81:30:ce:ec:ba:34: 60:09:23:8f:d1:97:c7:3d:41:0d:d4:11:55:22:58: d0:f6:6a:62:af:1f:31:ca:7d:71:d9:41:2c:53:33: 71:36:d2:74:4e:71:43:ac:6d:5f:31:c3:74:09:01: e5:79:18:55:f6:c3:32:fc:e7:87:5a:c7:26:9e:ce: af:c0:41:1c:1e:5d:17:1d:34:e8:2a:80:b6:90:a7: c7:71:55:4c:83:29:f4:49:eb:e7:e4:d1:f8:30:c1: 44:3f:57:4f:fc:f9:98:51:2a:4c:4a:98:e5:99:2e: b9:1f:02:e2:69:a9:1a:27:5f:2e:21:13:f5:5d:7e: 69:06:bf:ac:79:41:5f:d0:db:59:ae:a3:b5:1a:40: 34:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:56:7F:26:D4:6C:C3:A7:46:E2:80:6A:40:85:0B:9B:25:08:81:87 X509v3 Authority Key Identifier: keyid:04:0A:99:E1:02:50:3B:9D:D6:8D:AF:74:A5:56:46:01:C2:5C:BF:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/040A99E102503B9DD68DAF74A5564601C25CBFF1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/040A99E102503B9DD68DAF74A5564601C25CBFF1.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/040A99E102503B9DD68DAF74A5564601C25CBFF1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:88:b6:d2:41:42:a3:7e:52:59:20:54:0b:e0:fd:b6:5a:2d: 1c:42:78:e2:51:8d:95:7a:a3:4f:7b:42:53:5a:a2:41:52:57: 8e:83:e4:31:fd:fc:57:c1:66:9a:27:a5:aa:36:7a:9e:88:a9: 91:e8:8a:3f:e1:77:92:8e:48:52:be:12:e9:c2:51:45:90:19: 14:7f:2c:f0:df:48:4b:db:42:ec:6f:30:42:af:ea:63:d4:2a: 8e:bc:5e:7b:0f:43:8c:b5:e3:7f:12:3d:1e:a5:2f:a3:a3:e8: ad:4d:41:5b:50:1f:74:93:c8:cf:13:44:2b:47:bb:80:60:34: 15:de:14:5d:c1:16:e5:80:d9:48:75:29:fa:8b:96:11:cb:8d: 2c:0d:b7:8c:29:d5:31:d6:03:d8:41:84:ad:fe:74:ec:78:f1: 66:0b:99:4c:f8:51:1d:10:ec:84:98:f5:6e:c1:ff:b4:66:47: 7f:e2:dd:e9:60:d1:fa:1f:21:a9:36:28:7c:28:0a:19:4a:00: e2:0e:c8:5b:dd:e4:21:57:b5:51:ef:54:24:d3:37:eb:5d:34: 22:99:03:24:03:ee:62:ba:49:95:64:ba:ec:9b:c7:22:7a:7a: 42:6f:fa:a3:40:a5:ed:94:0a:ca:23:f3:31:c8:9b:fd:45:5f: d2:69:31:7c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUQ737K/72St5fUa53a25enXd6E7wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQwQTk5RTEwMjUwM0I5REQ2OERBRjc0QTU1NjQ2MDFD MjVDQkZGMTAeFw0yNjAzMjUxMDE5NTlaFw0yNjAzMjYxMzUzNTlaMDMxMTAvBgNV BAMTKDY1NTY3RjI2RDQ2Q0MzQTc0NkUyODA2QTQwODUwQjlCMjUwODgxODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwI1QPxzwuX01HbZpwTla81xP8 J2d3Njj5G4/lowNh3uhZLFkyufeQmjL+rAuyxP3Mf19ONaqAF89NsLNbt4dl+uRH hWiADyWbmVIMviIOrPwqwBOMr4kT7ucPZ9rUh5rSJYEe2aSSF/BymHaCMXmp6oEw zuy6NGAJI4/Rl8c9QQ3UEVUiWND2amKvHzHKfXHZQSxTM3E20nROcUOsbV8xw3QJ AeV5GFX2wzL854daxyaezq/AQRweXRcdNOgqgLaQp8dxVUyDKfRJ6+fk0fgwwUQ/ V0/8+ZhRKkxKmOWZLrkfAuJpqRonXy4hE/VdfmkGv6x5QV/Q21muo7UaQDRlAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUZVZ/JtRsw6dG4oBqQIULmyUIgYcwHwYDVR0j BBgwFoAUBAqZ4QJQO53Wja90pVZGAcJcv/EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSkJYeDFtWmJSZ3dEcTF3Qjk5SkJjRmRzWVJZOGFKNmFMS1h4MldxNnRl aE4vMC8wNDBBOTlFMTAyNTAzQjlERDY4REFGNzRBNTU2NDYwMUMyNUNCRkYxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA0MEE5OUUxMDI1MDNCOURE NjhEQUY3NEE1NTY0NjAxQzI1Q0JGRjEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SkJYeDFtWmJSZ3dEcTF3Qjk5SkJjRmRzWVJZOGFKNmFMS1h4MldxNnRlaE4vMC8w NDBBOTlFMTAyNTAzQjlERDY4REFGNzRBNTU2NDYwMUMyNUNCRkYxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEARoi20kFCo35SWSBUC+D9tlotHEJ44lGNlXqjT3tCU1qiQVJXjoPkMf38V8Fm mielqjZ6noipkeiKP+F3ko5IUr4S6cJRRZAZFH8s8N9IS9tC7G8wQq/qY9Qqjrxe ew9DjLXjfxI9HqUvo6PorU1BW1AfdJPIzxNEK0e7gGA0Fd4UXcEW5YDZSHUp+ouW EcuNLA23jCnVMdYD2EGErf507HjxZguZTPhRHRDshJj1bsH/tGZHf+Ld6WDR+h8h qTYofCgKGUoA4g7IW93kIVe1Ue9UJNM36100IpkDJAPuYrpJlWS67JvHInp6Qm/6 o0Cl7ZQKyiPzMcib/UVf0mkxfA== -----END CERTIFICATE-----Generated at Thu Mar 26 01:20:45 2026 by rpki-client