$ rpki-client -vvf rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/41FD3329BAEE7FDE9FA6AE86AE4025B1BFAE0A68.mft File: 41FD3329BAEE7FDE9FA6AE86AE4025B1BFAE0A68.mft (raw, json) Hash identifier: hiOe2GMqXKztYuwe1/6agzRbtYh0yfr81WgX1FDk6WE= Subject key identifier: 5A:58:7A:60:16:39:DA:F7:9D:91:D3:54:46:88:CA:6D:2E:BA:E8:CB Authority key identifier: 41:FD:33:29:BA:EE:7F:DE:9F:A6:AE:86:AE:40:25:B1:BF:AE:0A:68 Certificate issuer: /CN=41FD3329BAEE7FDE9FA6AE86AE4025B1BFAE0A68 Certificate serial: 5338E79C2908573C657090ADEA3A9907BBD3E827 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41FD3329BAEE7FDE9FA6AE86AE4025B1BFAE0A68.cer Subject info access: rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/41FD3329BAEE7FDE9FA6AE86AE4025B1BFAE0A68.mft Manifest number: CA Signing time: Wed 25 Mar 2026 18:59:09 +0000 Manifest this update: Wed 25 Mar 2026 18:54:09 +0000 Manifest next update: Thu 26 Mar 2026 21:21:09 +0000 Files and hashes: 1: 3138362e3234392e3230382e302f32312d3234203d3e20323633303236.roa (hash: I91E2F3jw4jRdSPxaOhLIhvmTJSuU7fGzMz9ajPNwbU=) 2: 3133382e33362e32302e302f32322d3234203d3e20323633303236.roa (hash: BUK0GzbNyD/abJDFa7an7fqiO0Un2af6pmFESK0VwW8=) 3: 41FD3329BAEE7FDE9FA6AE86AE4025B1BFAE0A68.crl (hash: ATZ3QLvAEcCUkFxWh331pfFQsrxtt6+nDKZaxbjgxP4=) 4: 3137302e38332e38302e302f32322d3234203d3e20323633303236.roa (hash: yxbRoHfWtwh6xMmlphpwB2OBsNVcchipPcjKM9kVzCI=) 5: 323830343a6132383a3a2f33322d3438203d3e20323633303236.roa (hash: 6nFTNuG5EFWl6bFOpqqneFS6n/37QZ9k+qctY+fvJsM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/41FD3329BAEE7FDE9FA6AE86AE4025B1BFAE0A68.crl rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/41FD3329BAEE7FDE9FA6AE86AE4025B1BFAE0A68.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41FD3329BAEE7FDE9FA6AE86AE4025B1BFAE0A68.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 26 Mar 2026 21:21:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:38:e7:9c:29:08:57:3c:65:70:90:ad:ea:3a:99:07:bb:d3:e8:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41FD3329BAEE7FDE9FA6AE86AE4025B1BFAE0A68 Validity Not Before: Mar 25 18:54:09 2026 GMT Not After : Mar 26 21:21:09 2026 GMT Subject: CN=5A587A601639DAF79D91D3544688CA6D2EBAE8CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:01:1a:6a:4c:9c:3e:94:a8:f3:7c:f6:f9:32: 39:36:1d:80:02:ac:6c:92:6e:8b:d8:58:08:22:e6: d4:f7:10:0f:9c:dd:8c:d2:0d:37:90:a7:78:76:16: 74:1d:46:61:04:7f:da:41:55:b3:84:89:a2:f2:b6: ef:bb:fa:98:ec:51:2f:50:22:5f:4d:98:67:aa:99: a9:67:59:f9:ba:fb:a9:7e:20:f2:9c:94:05:64:dd: ce:a8:50:55:42:a8:e8:42:88:fa:0e:31:84:ec:10: d1:80:19:5f:71:70:9c:49:6a:ba:b1:ba:9b:47:67: b2:b2:8d:61:9b:78:c9:8b:8e:38:cb:97:14:69:e4: 1b:58:2a:da:02:5a:1b:19:1b:6b:2f:36:1e:35:45: c7:9d:e0:ef:c6:d3:1d:70:89:23:78:c9:b9:5d:e6: 94:9c:ae:a9:df:d6:3e:f3:16:91:a9:33:0e:46:a2: cc:24:8a:d3:6b:90:a4:ec:4b:09:bd:3e:bf:8b:ed: 4b:86:2a:f9:10:97:01:c7:84:a7:21:24:8a:ba:5f: bf:7a:77:9a:ea:c5:e4:8d:d7:62:26:e9:d2:ca:fb: bb:db:cb:db:e0:0b:c4:dc:98:47:99:5f:aa:49:10: 34:63:fd:3c:c8:8b:d1:8b:9f:91:8d:65:fa:64:02: 44:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:58:7A:60:16:39:DA:F7:9D:91:D3:54:46:88:CA:6D:2E:BA:E8:CB X509v3 Authority Key Identifier: keyid:41:FD:33:29:BA:EE:7F:DE:9F:A6:AE:86:AE:40:25:B1:BF:AE:0A:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/41FD3329BAEE7FDE9FA6AE86AE4025B1BFAE0A68.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41FD3329BAEE7FDE9FA6AE86AE4025B1BFAE0A68.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/41FD3329BAEE7FDE9FA6AE86AE4025B1BFAE0A68.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:92:33:56:1c:e0:2b:b0:b7:5e:4c:67:ee:24:c1:c0:b9:85: ae:56:a2:94:d6:7d:b7:5b:88:d7:09:68:3f:4d:ff:10:26:9a: f4:dd:f9:69:2e:c2:e6:6d:ab:27:67:94:ee:e8:6c:bd:3d:8e: dc:ac:31:47:d5:25:a2:81:9b:1a:8d:ac:f0:ed:c8:68:9b:f6: 62:36:0c:c4:5d:30:41:9b:d5:27:87:6c:6e:b9:0b:13:f7:5c: f7:1f:b4:c7:7f:f6:96:cd:dc:ce:0f:c6:e2:38:4c:55:fb:f8: 6c:02:a5:9b:78:71:e5:e9:f2:5a:5e:40:eb:6e:6b:cf:9b:b5: 1a:c0:30:f0:80:ee:e4:55:93:40:81:8f:99:85:20:ff:b8:51: 20:f2:14:89:12:8b:b7:db:51:ad:c1:f3:56:b8:30:1e:18:95: c0:0e:85:50:be:c2:69:e3:0a:27:e2:20:8a:90:a5:25:f4:a3: 32:68:9f:b9:65:e0:d5:87:75:46:a3:2a:89:ce:4c:f1:44:7c: b1:f8:35:6d:46:ce:0c:61:f6:92:f3:15:db:21:53:d6:04:21: 8d:e0:a2:7a:27:5b:f1:87:74:4d:ba:d7:32:18:56:b6:2d:af: 5d:33:5b:68:fb:55:38:fe:85:ec:8c:ec:64:e7:a5:b6:a3:0a: 7f:92:b0:9a -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUUzjnnCkIVzxlcJCt6jqZB7vT6CcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDFGRDMzMjlCQUVFN0ZERTlGQTZBRTg2QUU0MDI1QjFC RkFFMEE2ODAeFw0yNjAzMjUxODU0MDlaFw0yNjAzMjYyMTIxMDlaMDMxMTAvBgNV BAMTKDVBNTg3QTYwMTYzOURBRjc5RDkxRDM1NDQ2ODhDQTZEMkVCQUU4Q0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgARpqTJw+lKjzfPb5Mjk2HYAC rGySbovYWAgi5tT3EA+c3YzSDTeQp3h2FnQdRmEEf9pBVbOEiaLytu+7+pjsUS9Q Il9NmGeqmalnWfm6+6l+IPKclAVk3c6oUFVCqOhCiPoOMYTsENGAGV9xcJxJarqx uptHZ7KyjWGbeMmLjjjLlxRp5BtYKtoCWhsZG2svNh41Rced4O/G0x1wiSN4ybld 5pScrqnf1j7zFpGpMw5GoswkitNrkKTsSwm9Pr+L7UuGKvkQlwHHhKchJIq6X796 d5rqxeSN12Im6dLK+7vby9vgC8TcmEeZX6pJEDRj/TzIi9GLn5GNZfpkAkTLAgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUWlh6YBY52vedkdNURojKbS666MswHwYDVR0j BBgwFoAUQf0zKbruf96fpq6GrkAlsb+uCmgwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby94WHBzQWd2cDY5dEttcDNQNUJFOVlkaWR1QXoyZEJOOEVXYW4xdFZBQ2Jj LzAvNDFGRDMzMjlCQUVFN0ZERTlGQTZBRTg2QUU0MDI1QjFCRkFFMEE2OC5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS80MUZEMzMyOUJBRUU3RkRFOUZB NkFFODZBRTQwMjVCMUJGQUUwQTY4LmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL3hY cHNBZ3ZwNjl0S21wM1A1QkU5WWRpZHVBejJkQk44RVdhbjF0VkFDYmMvMC80MUZE MzMyOUJBRUU3RkRFOUZBNkFFODZBRTQwMjVCMUJGQUUwQTY4Lm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA MJIzVhzgK7C3Xkxn7iTBwLmFrlailNZ9t1uI1wloP03/ECaa9N35aS7C5m2rJ2eU 7uhsvT2O3KwxR9UlooGbGo2s8O3IaJv2YjYMxF0wQZvVJ4dsbrkLE/dc9x+0x3/2 ls3czg/G4jhMVfv4bAKlm3hx5enyWl5A625rz5u1GsAw8IDu5FWTQIGPmYUg/7hR IPIUiRKLt9tRrcHzVrgwHhiVwA6FUL7CaeMKJ+IgipClJfSjMmifuWXg1Yd1RqMq ic5M8UR8sfg1bUbODGH2kvMV2yFT1gQhjeCieidb8Yd0TbrXMhhWti2vXTNbaPtV OP6F7IzsZOeltqMKf5Kwmg== -----END CERTIFICATE-----Generated at Thu Mar 26 01:16:43 2026 by rpki-client