$ rpki-client -vvf rpki-repo.registro.br/repo/ZRi9J7cJMUBmsyBsaBLaRtRRSgFPZQ4fDwkkGekxqUC/0/7958C661EB8D493DABCAD14C921B052049BB4E87.mft File: 7958C661EB8D493DABCAD14C921B052049BB4E87.mft (raw, json) Hash identifier: 3+Oa+1fLEUSlIG3hbGW7Mco8LOai8W9o0+ODL3Xd+Ag= Subject key identifier: 99:8D:17:C6:8A:FA:CC:84:13:8F:45:4E:F3:A1:18:72:1E:1C:4A:44 Authority key identifier: 79:58:C6:61:EB:8D:49:3D:AB:CA:D1:4C:92:1B:05:20:49:BB:4E:87 Certificate issuer: /CN=7958C661EB8D493DABCAD14C921B052049BB4E87 Certificate serial: 2A9135628FB58342AD3BD85EA667D9A5186998FD Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7958C661EB8D493DABCAD14C921B052049BB4E87.cer Subject info access: rsync://rpki-repo.registro.br/repo/ZRi9J7cJMUBmsyBsaBLaRtRRSgFPZQ4fDwkkGekxqUC/0/7958C661EB8D493DABCAD14C921B052049BB4E87.mft Manifest number: 0C Signing time: Thu 26 Mar 2026 16:58:17 +0000 Manifest this update: Thu 26 Mar 2026 16:53:17 +0000 Manifest next update: Fri 27 Mar 2026 19:25:17 +0000 Files and hashes: 1: 7958C661EB8D493DABCAD14C921B052049BB4E87.crl (hash: G5zgVBTVhPbje2cmX4XdAP2MQjlTcrTegadUE033ZzY=) 2: 3136382e3233322e3135362e302f32322d3332203d3e20323633343530.roa (hash: 5fwxo/xLeZgxGg/to0pXx+X1QYz2KKyEzx6SM8UbjD0=) 3: 3137372e39312e3233322e302f32322d3332203d3e20323633343530.roa (hash: FDWZsrswWJMiRi/BlnaWSwQH1z378Oxjb/Q+RbLjMYM=) 4: 323830343a313230303a3a2f33322d313238203d3e20323633343530.roa (hash: 5liD75jr140pbUO+1Mv7V8ehHnjltZBcNMhknf2Zru8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/ZRi9J7cJMUBmsyBsaBLaRtRRSgFPZQ4fDwkkGekxqUC/0/7958C661EB8D493DABCAD14C921B052049BB4E87.crl rsync://rpki-repo.registro.br/repo/ZRi9J7cJMUBmsyBsaBLaRtRRSgFPZQ4fDwkkGekxqUC/0/7958C661EB8D493DABCAD14C921B052049BB4E87.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7958C661EB8D493DABCAD14C921B052049BB4E87.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 27 Mar 2026 19:25:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:91:35:62:8f:b5:83:42:ad:3b:d8:5e:a6:67:d9:a5:18:69:98:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7958C661EB8D493DABCAD14C921B052049BB4E87 Validity Not Before: Mar 26 16:53:17 2026 GMT Not After : Mar 27 19:25:17 2026 GMT Subject: CN=998D17C68AFACC84138F454EF3A118721E1C4A44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:3d:dd:e0:9f:25:a9:52:97:0e:60:de:54:10: bd:40:3b:6a:2e:66:9d:1d:97:30:b7:c7:fb:ae:0b: 34:a3:b0:c5:38:c2:d6:b2:b6:85:7f:d3:e7:dd:d1: 42:93:43:32:8f:11:36:f2:d9:d0:37:74:da:d3:e3: 5f:a3:9e:1b:82:64:2f:68:3e:fb:11:12:cd:a4:f3: 5f:23:f9:0e:5f:b7:a1:19:6d:6f:55:c7:e2:60:3b: ec:23:2a:a2:f4:dd:22:1e:aa:34:a5:35:1a:75:9a: 5a:74:52:08:a2:8d:7f:6c:19:6f:fa:22:51:ac:b7: 80:a5:9b:a1:17:c4:5e:b0:47:a6:c3:23:0b:dc:dc: fd:fc:ce:73:cb:ab:da:2c:0f:ee:db:48:2e:5d:b8: 1f:ba:ca:ee:65:83:6e:30:2b:54:72:49:7a:6e:94: 88:57:df:4e:20:fa:59:64:7d:5a:02:22:45:64:90: dc:fd:eb:75:7f:70:0d:45:d2:46:dd:f9:0f:d1:6a: 08:cf:5a:05:23:d3:ac:84:15:e3:b9:1c:48:4f:2f: 8b:11:e2:35:c0:f7:8d:b3:ea:a2:f1:99:06:72:ff: ee:61:9d:e6:f8:28:da:65:02:49:5f:af:d1:f4:04: b6:5c:bb:29:7f:2d:90:af:b1:1e:13:96:5e:3f:a0: 1d:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:8D:17:C6:8A:FA:CC:84:13:8F:45:4E:F3:A1:18:72:1E:1C:4A:44 X509v3 Authority Key Identifier: keyid:79:58:C6:61:EB:8D:49:3D:AB:CA:D1:4C:92:1B:05:20:49:BB:4E:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/ZRi9J7cJMUBmsyBsaBLaRtRRSgFPZQ4fDwkkGekxqUC/0/7958C661EB8D493DABCAD14C921B052049BB4E87.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7958C661EB8D493DABCAD14C921B052049BB4E87.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/ZRi9J7cJMUBmsyBsaBLaRtRRSgFPZQ4fDwkkGekxqUC/0/7958C661EB8D493DABCAD14C921B052049BB4E87.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:43:3a:fe:83:5d:0b:46:71:0c:cf:a1:54:b0:ac:8e:a3:ec: 37:03:2a:7b:ba:35:27:de:94:bc:c4:df:17:3c:2b:6c:f2:75: a2:89:7d:71:9d:5d:7d:6b:95:7b:e4:16:cd:27:12:b8:3a:29: 76:2a:7e:cb:c2:27:fd:40:be:70:8c:aa:30:29:94:3b:34:75: c5:35:56:7b:9d:45:78:c9:8f:07:2d:23:dc:c3:39:0e:e3:64: 38:cf:e6:98:cc:04:cc:99:33:ca:55:75:0b:f6:c8:8c:e2:ed: 55:77:6a:1d:af:8d:df:98:0b:67:a7:8a:f9:e3:e8:35:6a:15: 33:67:1f:31:a7:64:ef:75:e0:23:02:bb:17:11:fb:24:ce:c7: 04:a8:4f:64:f8:b8:32:df:88:b8:ef:b9:77:3a:49:a6:41:f0: 3d:17:3f:4b:54:d7:13:50:a2:ba:ac:35:ff:35:54:c6:b6:00: e7:f6:6c:f1:bc:f9:c3:4b:44:5c:32:f4:f2:6a:17:ac:d8:d7: 27:ed:1c:33:e7:12:ad:66:12:29:69:88:af:2d:32:42:58:cf: 99:86:c3:1d:ff:ce:de:d1:24:94:b4:d1:0c:66:c9:7c:dd:85: 34:a5:56:4d:7e:9d:fd:83:fe:93:e5:8a:f7:a2:d3:b1:92:46: 75:0c:0c:99 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUKpE1Yo+1g0KtO9hepmfZpRhpmP0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzk1OEM2NjFFQjhENDkzREFCQ0FEMTRDOTIxQjA1MjA0 OUJCNEU4NzAeFw0yNjAzMjYxNjUzMTdaFw0yNjAzMjcxOTI1MTdaMDMxMTAvBgNV BAMTKDk5OEQxN0M2OEFGQUNDODQxMzhGNDU0RUYzQTExODcyMUUxQzRBNDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtPd3gnyWpUpcOYN5UEL1AO2ou Zp0dlzC3x/uuCzSjsMU4wtaytoV/0+fd0UKTQzKPETby2dA3dNrT41+jnhuCZC9o PvsREs2k818j+Q5ft6EZbW9Vx+JgO+wjKqL03SIeqjSlNRp1mlp0UgiijX9sGW/6 IlGst4Clm6EXxF6wR6bDIwvc3P38znPLq9osD+7bSC5duB+6yu5lg24wK1RySXpu lIhX304g+llkfVoCIkVkkNz963V/cA1F0kbd+Q/RagjPWgUj06yEFeO5HEhPL4sR 4jXA942z6qLxmQZy/+5hneb4KNplAklfr9H0BLZcuyl/LZCvsR4Tll4/oB1XAgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUmY0Xxor6zIQTj0VO86EYch4cSkQwHwYDVR0j BBgwFoAUeVjGYeuNST2rytFMkhsFIEm7TocwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9aUmk5SjdjSk1VQm1zeUJzYUJMYVJ0UlJTZ0ZQWlE0ZkR3a2tHZWt4cVVD LzAvNzk1OEM2NjFFQjhENDkzREFCQ0FEMTRDOTIxQjA1MjA0OUJCNEU4Ny5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS83OTU4QzY2MUVCOEQ0OTNEQUJD QUQxNEM5MjFCMDUyMDQ5QkI0RTg3LmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL1pS aTlKN2NKTVVCbXN5QnNhQkxhUnRSUlNnRlBaUTRmRHdra0dla3hxVUMvMC83OTU4 QzY2MUVCOEQ0OTNEQUJDQUQxNEM5MjFCMDUyMDQ5QkI0RTg3Lm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA QUM6/oNdC0ZxDM+hVLCsjqPsNwMqe7o1J96UvMTfFzwrbPJ1ool9cZ1dfWuVe+QW zScSuDopdip+y8In/UC+cIyqMCmUOzR1xTVWe51FeMmPBy0j3MM5DuNkOM/mmMwE zJkzylV1C/bIjOLtVXdqHa+N35gLZ6eK+ePoNWoVM2cfMadk73XgIwK7FxH7JM7H BKhPZPi4Mt+IuO+5dzpJpkHwPRc/S1TXE1Ciuqw1/zVUxrYA5/Zs8bz5w0tEXDL0 8moXrNjXJ+0cM+cSrWYSKWmIry0yQljPmYbDHf/O3tEklLTRDGbJfN2FNKVWTX6d /YP+k+WK96LTsZJGdQwMmQ== -----END CERTIFICATE-----Generated at Thu Mar 26 19:52:28 2026 by rpki-client