$ rpki-client -vvf rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/03D8B16C2417C68C7325B3DF2EAD45A1208FA243.mft File: 03D8B16C2417C68C7325B3DF2EAD45A1208FA243.mft (raw, json) Hash identifier: 9J7AHY+bdRMzgv6r7lumpoO1ksTxLvyuSp/zRtCxiDg= Subject key identifier: 02:21:B7:7A:FC:5B:B7:70:C7:95:1C:7D:3F:AB:0B:1E:30:1A:0C:8D Authority key identifier: 03:D8:B1:6C:24:17:C6:8C:73:25:B3:DF:2E:AD:45:A1:20:8F:A2:43 Certificate issuer: /CN=03D8B16C2417C68C7325B3DF2EAD45A1208FA243 Certificate serial: 06FD9859F33878A759D93C1FA25B1FAED5D5D8D0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03D8B16C2417C68C7325B3DF2EAD45A1208FA243.cer Subject info access: rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/03D8B16C2417C68C7325B3DF2EAD45A1208FA243.mft Manifest number: 4D Signing time: Wed 13 May 2026 12:29:46 +0000 Manifest this update: Wed 13 May 2026 12:24:46 +0000 Manifest next update: Thu 14 May 2026 12:39:46 +0000 Files and hashes: 1: 323830343a3937383a3a2f33322d313238203d3e20323633303837.roa (hash: DAOPSVl3VjIiB/gugA2mB5ffypy61TmAdTW/kGDMNKg=) 2: 3137372e3133372e3230382e302f32302d3332203d3e20323633303837.roa (hash: T0Uz/Sk34aQgcSOQm+RkjvRwBySKQ/8Q27JSs8zyBXQ=) 3: 03D8B16C2417C68C7325B3DF2EAD45A1208FA243.crl (hash: JdVwtsYTqgVg4owdYnNiOkXvPbkf5gYYbcEsNUapMbQ=) 4: 3137392e3130392e3136302e302f32302d3332203d3e20323633303837.roa (hash: 9009pfqHHSDfQmA16n3BSiSnUou3SNM0grpR12t1Qj4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/03D8B16C2417C68C7325B3DF2EAD45A1208FA243.crl rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/03D8B16C2417C68C7325B3DF2EAD45A1208FA243.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03D8B16C2417C68C7325B3DF2EAD45A1208FA243.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 14 May 2026 12:39:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:fd:98:59:f3:38:78:a7:59:d9:3c:1f:a2:5b:1f:ae:d5:d5:d8:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03D8B16C2417C68C7325B3DF2EAD45A1208FA243 Validity Not Before: May 13 12:24:46 2026 GMT Not After : May 14 12:39:46 2026 GMT Subject: CN=0221B77AFC5BB770C7951C7D3FAB0B1E301A0C8D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:29:2d:59:4c:3f:83:8a:23:59:3a:72:10:65: e1:52:51:db:b0:91:57:2f:6b:5b:f6:db:eb:8d:76: a1:c6:da:72:12:ed:38:c1:03:70:bd:8d:85:2a:b5: 53:46:81:38:2a:c3:f1:12:06:fa:39:c2:3a:27:18: 44:18:88:99:fa:8d:02:e1:da:a5:6f:18:eb:72:d8: d5:26:75:23:7a:cd:c9:06:c1:7a:8d:49:26:79:cd: f5:c8:6e:20:3d:bb:e8:6f:84:c8:4f:ce:91:82:b9: 21:66:5e:4c:32:59:3c:79:16:f7:c5:92:b5:22:c2: 1c:0e:50:84:52:87:6a:24:e2:0d:26:0b:65:ec:c0: eb:cf:03:5c:f8:cd:4a:46:62:e4:83:40:19:1a:c2: 48:db:13:50:d0:b8:0f:4c:a3:75:d7:df:11:3a:2f: ce:7c:7e:9c:0e:23:b3:05:03:98:fc:6c:c0:d6:a4: 08:69:d0:62:1b:73:6e:6e:f7:90:69:be:ae:38:f2: f4:e4:91:13:87:91:56:39:56:45:bf:b4:c5:91:8b: e8:83:c3:3e:7c:70:51:65:61:81:ca:2f:65:ce:bf: 39:2b:f3:bc:f8:40:a4:98:ae:ef:31:0e:0a:ec:15: f8:9a:35:b5:78:61:9d:dc:56:b1:bd:94:66:6e:9c: d9:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:21:B7:7A:FC:5B:B7:70:C7:95:1C:7D:3F:AB:0B:1E:30:1A:0C:8D X509v3 Authority Key Identifier: keyid:03:D8:B1:6C:24:17:C6:8C:73:25:B3:DF:2E:AD:45:A1:20:8F:A2:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/03D8B16C2417C68C7325B3DF2EAD45A1208FA243.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03D8B16C2417C68C7325B3DF2EAD45A1208FA243.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/03D8B16C2417C68C7325B3DF2EAD45A1208FA243.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:c2:92:8a:a7:1a:23:2a:ba:91:b8:98:a1:b5:3a:8e:ed:0c: 02:05:9b:8b:07:6e:de:d1:b3:c3:a1:e7:34:7c:f9:be:89:33: a3:8d:ac:d1:c1:02:28:a1:99:77:83:19:2a:b9:b1:05:b4:05: a2:00:73:ff:db:6c:ba:26:e8:37:5c:f9:cd:90:52:b4:62:d7: 44:07:95:c8:c3:b9:1f:6c:a6:12:a8:06:57:b7:e5:ff:be:f3: 8a:88:d6:62:d1:88:ab:b1:87:14:b6:1d:4b:a9:43:a5:4c:2b: b9:26:80:a6:3c:b9:5e:12:bc:e7:0b:cd:4f:59:90:1e:53:e8: 9d:34:ce:a3:e2:7f:9d:1e:e6:ad:df:85:33:3f:d7:a1:aa:be: 97:77:3f:1d:6e:e6:21:80:a2:d1:10:7b:ae:fc:fd:13:83:10: 59:7a:5a:1a:74:bd:3e:84:69:19:e6:f9:f6:19:fe:0a:46:18: b5:3f:4a:96:da:ad:28:d2:db:1f:0d:4d:01:13:7e:29:5d:c8: 91:6d:1f:fb:48:8b:87:77:e9:dc:ff:61:b9:c4:8e:04:33:33: a4:8a:87:e6:82:42:c9:f9:d6:89:a8:23:8d:63:1a:37:af:16: f9:cb:6d:c9:9e:f6:78:1a:e2:0e:ce:8a:fe:14:d0:de:36:97: c0:de:59:35 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUBv2YWfM4eKdZ2TwfolsfrtXV2NAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDNEOEIxNkMyNDE3QzY4QzczMjVCM0RGMkVBRDQ1QTEy MDhGQTI0MzAeFw0yNjA1MTMxMjI0NDZaFw0yNjA1MTQxMjM5NDZaMDMxMTAvBgNV BAMTKDAyMjFCNzdBRkM1QkI3NzBDNzk1MUM3RDNGQUIwQjFFMzAxQTBDOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrKS1ZTD+DiiNZOnIQZeFSUduw kVcva1v22+uNdqHG2nIS7TjBA3C9jYUqtVNGgTgqw/ESBvo5wjonGEQYiJn6jQLh 2qVvGOty2NUmdSN6zckGwXqNSSZ5zfXIbiA9u+hvhMhPzpGCuSFmXkwyWTx5FvfF krUiwhwOUIRSh2ok4g0mC2XswOvPA1z4zUpGYuSDQBkawkjbE1DQuA9Mo3XX3xE6 L858fpwOI7MFA5j8bMDWpAhp0GIbc25u95Bpvq448vTkkROHkVY5VkW/tMWRi+iD wz58cFFlYYHKL2XOvzkr87z4QKSYru8xDgrsFfiaNbV4YZ3cVrG9lGZunNk3AgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUAiG3evxbt3DHlRx9P6sLHjAaDI0wHwYDVR0j BBgwFoAUA9ixbCQXxoxzJbPfLq1FoSCPokMwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9LRmU5RkczYXhIWm81R2VIRjNmRkZibVdDMTU3dTVuY1RXZGM2WUFxVm1C LzAvMDNEOEIxNkMyNDE3QzY4QzczMjVCM0RGMkVBRDQ1QTEyMDhGQTI0My5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8wM0Q4QjE2QzI0MTdDNjhDNzMy NUIzREYyRUFENDVBMTIwOEZBMjQzLmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0tG ZTlGRzNheEhabzVHZUhGM2ZGRmJtV0MxNTd1NW5jVFdkYzZZQXFWbUIvMC8wM0Q4 QjE2QzI0MTdDNjhDNzMyNUIzREYyRUFENDVBMTIwOEZBMjQzLm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA QsKSiqcaIyq6kbiYobU6ju0MAgWbiwdu3tGzw6HnNHz5vokzo42s0cECKKGZd4MZ KrmxBbQFogBz/9tsuiboN1z5zZBStGLXRAeVyMO5H2ymEqgGV7fl/77ziojWYtGI q7GHFLYdS6lDpUwruSaApjy5XhK85wvNT1mQHlPonTTOo+J/nR7mrd+FMz/Xoaq+ l3c/HW7mIYCi0RB7rvz9E4MQWXpaGnS9PoRpGeb59hn+CkYYtT9KltqtKNLbHw1N ARN+KV3IkW0f+0iLh3fp3P9hucSOBDMzpIqH5oJCyfnWiagjjWMaN68W+cttyZ72 eBriDs6K/hTQ3jaXwN5ZNQ== -----END CERTIFICATE-----Generated at Wed May 13 16:00:37 2026 by rpki-client