$ rpki-client -vvf rpki-repo.registro.br/repo/2sSFAgzsUK9o4ECBLjawgW5ftbVD6nLF4Yhaz49Mo2Ap/0/D76580431FA15F4C3D598181DBE97B6443141E8C.mft File: D76580431FA15F4C3D598181DBE97B6443141E8C.mft (raw, json) Hash identifier: AU+oKvjXxUU4dPDODfwkKC/5Qow8gH5/Sr75dokuU2I= Subject key identifier: 3B:B2:12:E3:BE:56:3F:0C:E9:F3:2F:BE:2F:FB:33:CB:31:B2:B8:FC Authority key identifier: D7:65:80:43:1F:A1:5F:4C:3D:59:81:81:DB:E9:7B:64:43:14:1E:8C Certificate issuer: /CN=D76580431FA15F4C3D598181DBE97B6443141E8C Certificate serial: 1E0F87EDEC4D626B5E06563D38A48D0343490AC0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D76580431FA15F4C3D598181DBE97B6443141E8C.cer Subject info access: rsync://rpki-repo.registro.br/repo/2sSFAgzsUK9o4ECBLjawgW5ftbVD6nLF4Yhaz49Mo2Ap/0/D76580431FA15F4C3D598181DBE97B6443141E8C.mft Manifest number: 0287 Signing time: Thu 26 Mar 2026 23:33:57 +0000 Manifest this update: Thu 26 Mar 2026 23:28:57 +0000 Manifest next update: Sat 28 Mar 2026 01:47:57 +0000 Files and hashes: 1: 3230312e3138322e3139362e302f32322d3332203d3e20323637353331.roa (hash: aVpe9x63jz8Z/jD2LmUKqr4D6dFpdqMMv6wlyvjzNOA=) 2: 323830343a343264383a3a2f33322d313238203d3e20323637353331.roa (hash: CDL7I4gAvVydbTzp/KRZRtQEnq0T01uD/KthejHARk8=) 3: D76580431FA15F4C3D598181DBE97B6443141E8C.crl (hash: AmXo0KDXUr196VZGSQICP1hldhB8DpzBPNlqWwwPj7o=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2sSFAgzsUK9o4ECBLjawgW5ftbVD6nLF4Yhaz49Mo2Ap/0/D76580431FA15F4C3D598181DBE97B6443141E8C.crl rsync://rpki-repo.registro.br/repo/2sSFAgzsUK9o4ECBLjawgW5ftbVD6nLF4Yhaz49Mo2Ap/0/D76580431FA15F4C3D598181DBE97B6443141E8C.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D76580431FA15F4C3D598181DBE97B6443141E8C.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 28 Mar 2026 01:30:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:0f:87:ed:ec:4d:62:6b:5e:06:56:3d:38:a4:8d:03:43:49:0a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D76580431FA15F4C3D598181DBE97B6443141E8C Validity Not Before: Mar 26 23:28:57 2026 GMT Not After : Mar 28 01:47:57 2026 GMT Subject: CN=3BB212E3BE563F0CE9F32FBE2FFB33CB31B2B8FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b9:8f:17:9d:22:8d:cd:80:b0:71:f5:19:5b: 0a:d0:ae:41:f3:0e:34:bb:67:d9:ec:1d:ee:66:26: 77:92:51:26:d0:d1:02:9f:bd:3f:d4:42:0f:87:f7: b2:d6:87:42:b7:35:79:62:9f:e1:08:8d:34:21:a9: eb:23:31:ae:69:61:82:b2:ef:4f:ed:bc:80:c7:bd: 4b:3a:7a:71:35:61:0d:d2:1b:d1:b7:00:45:4c:4a: 23:e6:fc:4b:db:fb:ed:ac:62:18:99:3e:f5:ea:85: aa:05:98:5d:5b:ff:5e:8b:e9:a1:7a:73:ad:e6:af: 1f:59:f6:4b:66:64:e2:2c:42:87:48:73:f8:57:b2: 79:73:87:98:4d:34:73:d6:7b:0a:7c:84:b0:19:36: c4:32:00:06:8f:5e:10:8c:61:bd:92:68:eb:97:70: 88:aa:c8:84:11:c0:9e:fb:3d:0a:2b:98:fc:fb:58: f5:37:18:07:e9:63:64:c8:3a:3b:ed:72:25:ec:79: ad:96:be:7c:f3:0e:f8:b2:1e:5a:be:1e:aa:da:f5: c9:18:b7:88:a1:d4:93:27:54:78:e0:9d:bc:1c:37: e7:20:d6:25:7a:eb:f0:d5:7d:a3:c2:de:8b:21:60: 72:34:d1:dd:16:f5:96:58:6d:9e:2d:bd:a7:d2:49: 39:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:B2:12:E3:BE:56:3F:0C:E9:F3:2F:BE:2F:FB:33:CB:31:B2:B8:FC X509v3 Authority Key Identifier: keyid:D7:65:80:43:1F:A1:5F:4C:3D:59:81:81:DB:E9:7B:64:43:14:1E:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2sSFAgzsUK9o4ECBLjawgW5ftbVD6nLF4Yhaz49Mo2Ap/0/D76580431FA15F4C3D598181DBE97B6443141E8C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D76580431FA15F4C3D598181DBE97B6443141E8C.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2sSFAgzsUK9o4ECBLjawgW5ftbVD6nLF4Yhaz49Mo2Ap/0/D76580431FA15F4C3D598181DBE97B6443141E8C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:de:75:85:52:ec:85:c3:c0:fc:af:bb:b7:5c:e4:67:da:4c: 80:53:cc:6c:c8:bc:e6:3e:a4:fb:22:d1:da:23:19:dc:81:8f: 42:a3:cb:57:47:54:38:d6:2b:32:02:1e:24:3a:b4:bf:9a:19: 23:d1:32:34:12:1f:9f:89:16:4f:32:84:4a:8a:2c:ea:bf:ba: ee:6e:ba:9b:f3:12:22:30:82:76:b6:54:a5:cb:94:64:e2:7a: 0d:33:59:b5:2e:c7:ce:82:8a:46:09:b4:d2:5b:cc:39:f7:b1: fe:46:9d:9b:fb:c5:de:ae:7c:ee:26:b8:91:50:89:51:8c:6c: 5c:a9:29:a3:79:e2:47:80:ec:c4:c6:b0:71:92:0b:33:77:fe: a2:5d:b8:7c:d6:da:fd:86:05:09:8d:b6:ca:d1:1e:09:23:8e: df:c0:c1:b2:f6:e7:d4:c8:86:c0:b5:92:e3:f7:91:12:23:dc: e6:d2:f7:80:b0:ac:39:6d:b1:11:3f:b3:9e:6c:75:87:d8:50: 02:f2:2b:52:10:9b:b5:ea:86:da:4a:00:4d:91:f5:64:c6:2a: 13:fb:83:4c:ca:64:2c:3a:3a:1b:3a:f7:67:1a:b7:99:47:0c: b8:e6:c1:da:f8:35:e4:7b:6d:be:0f:37:06:3f:b9:bf:e8:a1: 16:8f:24:6c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUHg+H7exNYmteBlY9OKSNA0NJCsAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDc2NTgwNDMxRkExNUY0QzNENTk4MTgxREJFOTdCNjQ0 MzE0MUU4QzAeFw0yNjAzMjYyMzI4NTdaFw0yNjAzMjgwMTQ3NTdaMDMxMTAvBgNV BAMTKDNCQjIxMkUzQkU1NjNGMENFOUYzMkZCRTJGRkIzM0NCMzFCMkI4RkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFuY8XnSKNzYCwcfUZWwrQrkHz DjS7Z9nsHe5mJneSUSbQ0QKfvT/UQg+H97LWh0K3NXlin+EIjTQhqesjMa5pYYKy 70/tvIDHvUs6enE1YQ3SG9G3AEVMSiPm/Evb++2sYhiZPvXqhaoFmF1b/16L6aF6 c63mrx9Z9ktmZOIsQodIc/hXsnlzh5hNNHPWewp8hLAZNsQyAAaPXhCMYb2SaOuX cIiqyIQRwJ77PQormPz7WPU3GAfpY2TIOjvtciXsea2WvnzzDviyHlq+Hqra9ckY t4ih1JMnVHjgnbwcN+cg1iV66/DVfaPC3oshYHI00d0W9ZZYbZ4tvafSSTlFAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUO7IS475WPwzp8y++L/szyzGyuPwwHwYDVR0j BBgwFoAU12WAQx+hX0w9WYGB2+l7ZEMUHowwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMnNTRkFnenNVSzlvNEVDQkxqYXdnVzVmdGJWRDZuTEY0WWhhejQ5TW8y QXAvMC9ENzY1ODA0MzFGQTE1RjRDM0Q1OTgxODFEQkU5N0I2NDQzMTQxRThDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q3NjU4MDQzMUZBMTVGNEMz RDU5ODE4MURCRTk3QjY0NDMxNDFFOEMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MnNTRkFnenNVSzlvNEVDQkxqYXdnVzVmdGJWRDZuTEY0WWhhejQ5TW8yQXAvMC9E NzY1ODA0MzFGQTE1RjRDM0Q1OTgxODFEQkU5N0I2NDQzMTQxRThDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUt51hVLshcPA/K+7t1zkZ9pMgFPMbMi85j6k+yLR2iMZ3IGPQqPLV0dUONYr MgIeJDq0v5oZI9EyNBIfn4kWTzKESoos6r+67m66m/MSIjCCdrZUpcuUZOJ6DTNZ tS7HzoKKRgm00lvMOfex/kadm/vF3q587ia4kVCJUYxsXKkpo3niR4DsxMawcZIL M3f+ol24fNba/YYFCY22ytEeCSOO38DBsvbn1MiGwLWS4/eREiPc5tL3gLCsOW2x ET+znmx1h9hQAvIrUhCbteqG2koATZH1ZMYqE/uDTMpkLDo6Gzr3Zxq3mUcMuObB 2vg15Httvg83Bj+5v+ihFo8kbA== -----END CERTIFICATE-----Generated at Fri Mar 27 03:53:13 2026 by rpki-client