$ rpki-client -vvf rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/33702311ADCA7FC6C85DC0655A9217C00BE5E1EC.mft File: 33702311ADCA7FC6C85DC0655A9217C00BE5E1EC.mft (raw, json) Hash identifier: Lx9XX6+OHd6knnNdSILQnS7LM1hlrdVIjfPYuKyLOGw= Subject key identifier: 82:9C:43:EA:71:B4:0D:54:E4:6D:C4:BE:4D:7D:C7:2C:05:A3:6E:58 Authority key identifier: 33:70:23:11:AD:CA:7F:C6:C8:5D:C0:65:5A:92:17:C0:0B:E5:E1:EC Certificate issuer: /CN=33702311ADCA7FC6C85DC0655A9217C00BE5E1EC Certificate serial: 2A5DB4C4D4424A18B33622F4C7A571428B1F8CBB Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33702311ADCA7FC6C85DC0655A9217C00BE5E1EC.cer Subject info access: rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/33702311ADCA7FC6C85DC0655A9217C00BE5E1EC.mft Manifest number: 62 Signing time: Wed 25 Mar 2026 05:56:37 +0000 Manifest this update: Wed 25 Mar 2026 05:51:37 +0000 Manifest next update: Thu 26 Mar 2026 09:52:37 +0000 Files and hashes: 1: 33702311ADCA7FC6C85DC0655A9217C00BE5E1EC.crl (hash: AJaJQWN4pXTBgVkdmZ/X/YVnd/07HQFbb/14NKYm4d4=) 2: 323830343a333563303a3a2f33322d313238203d3e20323636333034.roa (hash: LIdBu4hH76fjQZltvNuNl4Sk11vROmmGVVYxeEIWdRU=) 3: 3137302e37392e3230322e302f32332d3332203d3e20323636333034.roa (hash: pLHLAyc3v38AwOZ1l5MAIcR4fRXI2Nn9ORHjbHU/uIU=) 4: 3137302e37392e3230302e302f32322d3332203d3e20323636333034.roa (hash: F0hl7fFUX/02GFyDa1Q0o9KwtX4RrOs5ypWX63He8Tk=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/33702311ADCA7FC6C85DC0655A9217C00BE5E1EC.crl rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/33702311ADCA7FC6C85DC0655A9217C00BE5E1EC.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33702311ADCA7FC6C85DC0655A9217C00BE5E1EC.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 26 Mar 2026 09:52:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:5d:b4:c4:d4:42:4a:18:b3:36:22:f4:c7:a5:71:42:8b:1f:8c:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33702311ADCA7FC6C85DC0655A9217C00BE5E1EC Validity Not Before: Mar 25 05:51:37 2026 GMT Not After : Mar 26 09:52:37 2026 GMT Subject: CN=829C43EA71B40D54E46DC4BE4D7DC72C05A36E58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:1b:86:f2:5d:25:52:1c:f6:7a:d9:06:e4:00: 46:d2:e4:df:80:bc:b4:a0:0e:b9:c4:fa:01:d5:cb: f4:3d:15:d7:72:45:21:8b:c5:6c:0d:cb:44:53:f7: 28:65:e5:83:ee:d6:a8:93:a8:33:b8:d1:24:92:dc: b7:c0:3b:8e:dd:b5:2a:5a:fa:44:f3:ce:37:7d:99: d1:42:b6:ce:64:bb:8a:80:00:c6:f1:c7:d0:d9:3c: 51:5b:06:dc:46:5e:93:bc:16:30:db:4f:1e:4e:64: f9:ec:a3:cc:60:32:ab:6e:70:37:56:2a:bf:c0:2f: 34:42:a4:33:d9:54:52:82:6a:6f:e3:f5:b8:b2:76: 5c:d9:ac:22:87:96:da:eb:60:a6:0c:79:7f:ce:5e: 31:12:9e:cb:6a:fe:29:19:d6:da:e4:33:19:52:03: 0c:31:17:ff:d0:39:4c:c1:f8:3a:0e:ad:24:e7:d5: 07:8f:9c:53:b4:e2:3e:6e:b6:25:5e:f7:9f:97:d9: 48:0a:3e:5c:71:95:24:61:a2:40:34:ea:3a:fd:37: 6f:1c:13:95:ec:a9:c8:8f:8c:4b:fd:95:5e:87:14: ae:50:30:20:6a:57:2f:4a:de:02:83:0d:3f:ee:0c: c3:2d:60:54:32:7a:af:1b:c8:f3:4d:86:98:10:02: c9:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:9C:43:EA:71:B4:0D:54:E4:6D:C4:BE:4D:7D:C7:2C:05:A3:6E:58 X509v3 Authority Key Identifier: keyid:33:70:23:11:AD:CA:7F:C6:C8:5D:C0:65:5A:92:17:C0:0B:E5:E1:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/33702311ADCA7FC6C85DC0655A9217C00BE5E1EC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33702311ADCA7FC6C85DC0655A9217C00BE5E1EC.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/33702311ADCA7FC6C85DC0655A9217C00BE5E1EC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:ef:9a:26:7b:f6:a6:0f:0c:08:06:2d:3a:08:db:9f:2e:0c: d2:ba:5f:e8:dc:8c:ee:30:85:a1:ba:70:25:0a:4d:29:97:a3: ee:c3:0c:56:e4:27:7d:62:bf:e0:18:a4:8d:ea:42:8b:7e:cb: 8d:91:5e:d9:7d:24:eb:f6:0a:6b:7e:54:76:56:9e:75:1d:0a: d6:cf:af:3e:36:fe:d9:54:e2:70:99:e0:b4:17:ef:a6:9c:2c: c9:8b:48:95:50:4e:c5:5f:a8:5c:be:ed:e6:0f:6b:30:de:79: 57:60:b4:8d:93:21:88:a4:a3:55:18:92:8c:86:96:5f:da:02: e3:46:ff:63:00:43:60:1c:29:71:0a:87:5d:1b:f3:91:dd:49: a2:7e:0e:7e:a6:f7:37:c2:a1:3d:e5:53:3e:e8:3c:a9:f9:70: ac:7a:8d:8c:86:af:50:90:a2:d8:40:2c:f8:54:d0:b4:ec:3f: 47:e1:3c:c6:86:db:4f:cb:52:27:93:37:3f:40:e0:0f:fa:12: 23:fd:51:c9:00:28:66:78:ff:94:99:05:d4:2d:60:06:99:ef: 07:43:68:d5:2e:f4:8b:dc:5a:0f:87:7e:fe:0c:b2:75:09:f7: 2c:2a:c8:60:d1:94:ae:8d:86:03:78:ba:54:c4:ac:49:f0:21: a8:1f:bf:6b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUKl20xNRCShizNiL0x6VxQosfjLswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzM3MDIzMTFBRENBN0ZDNkM4NURDMDY1NUE5MjE3QzAw QkU1RTFFQzAeFw0yNjAzMjUwNTUxMzdaFw0yNjAzMjYwOTUyMzdaMDMxMTAvBgNV BAMTKDgyOUM0M0VBNzFCNDBENTRFNDZEQzRCRTREN0RDNzJDMDVBMzZFNTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQG4byXSVSHPZ62QbkAEbS5N+A vLSgDrnE+gHVy/Q9FddyRSGLxWwNy0RT9yhl5YPu1qiTqDO40SSS3LfAO47dtSpa +kTzzjd9mdFCts5ku4qAAMbxx9DZPFFbBtxGXpO8FjDbTx5OZPnso8xgMqtucDdW Kr/ALzRCpDPZVFKCam/j9biydlzZrCKHltrrYKYMeX/OXjESnstq/ikZ1trkMxlS AwwxF//QOUzB+DoOrSTn1QePnFO04j5utiVe95+X2UgKPlxxlSRhokA06jr9N28c E5XsqciPjEv9lV6HFK5QMCBqVy9K3gKDDT/uDMMtYFQyeq8byPNNhpgQAsndAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUgpxD6nG0DVTkbcS+TX3HLAWjblgwHwYDVR0j BBgwFoAUM3AjEa3Kf8bIXcBlWpIXwAvl4ewwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMnRIaXV4cW82bmJ3WnRxQ0FxS3gyRGJVNzZ2ckhXVVgxQmJaUEY1RThq ZkIvMC8zMzcwMjMxMUFEQ0E3RkM2Qzg1REMwNjU1QTkyMTdDMDBCRTVFMUVDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMzNzAyMzExQURDQTdGQzZD ODVEQzA2NTVBOTIxN0MwMEJFNUUxRUMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MnRIaXV4cW82bmJ3WnRxQ0FxS3gyRGJVNzZ2ckhXVVgxQmJaUEY1RThqZkIvMC8z MzcwMjMxMUFEQ0E3RkM2Qzg1REMwNjU1QTkyMTdDMDBCRTVFMUVDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAru+aJnv2pg8MCAYtOgjbny4M0rpf6NyM7jCFobpwJQpNKZej7sMMVuQnfWK/ 4BikjepCi37LjZFe2X0k6/YKa35UdlaedR0K1s+vPjb+2VTicJngtBfvppwsyYtI lVBOxV+oXL7t5g9rMN55V2C0jZMhiKSjVRiSjIaWX9oC40b/YwBDYBwpcQqHXRvz kd1Jon4Ofqb3N8KhPeVTPug8qflwrHqNjIavUJCi2EAs+FTQtOw/R+E8xobbT8tS J5M3P0DgD/oSI/1RyQAoZnj/lJkF1C1gBpnvB0No1S70i9xaD4d+/gyydQn3LCrI YNGUro2GA3i6VMSsSfAhqB+/aw== -----END CERTIFICATE-----Generated at Thu Mar 26 00:01:23 2026 by rpki-client