$ rpki-client -vvf rpki-repo.registro.br/repo/3db7SahZtRVC8PuMcgyzbAmeUfVwyRcsxWmHCGFvpcyF/0/2987D670913962CF69181F73C94FE8C279E038DA.mft File: 2987D670913962CF69181F73C94FE8C279E038DA.mft (raw, json) Hash identifier: mPOEMwecMU/ebEJJHgpwzNuAcc2l08kli0PdOJQowy0= Subject key identifier: 69:BD:D2:21:01:C1:D2:DB:4E:89:DE:C1:30:91:A2:51:D5:F6:06:87 Authority key identifier: 29:87:D6:70:91:39:62:CF:69:18:1F:73:C9:4F:E8:C2:79:E0:38:DA Certificate issuer: /CN=2987D670913962CF69181F73C94FE8C279E038DA Certificate serial: 3594E1D7342B33E33FDF5FD4F3244B4A6E8D2B36 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2987D670913962CF69181F73C94FE8C279E038DA.cer Subject info access: rsync://rpki-repo.registro.br/repo/3db7SahZtRVC8PuMcgyzbAmeUfVwyRcsxWmHCGFvpcyF/0/2987D670913962CF69181F73C94FE8C279E038DA.mft Manifest number: DD Signing time: Wed 25 Mar 2026 19:19:36 +0000 Manifest this update: Wed 25 Mar 2026 19:14:36 +0000 Manifest next update: Thu 26 Mar 2026 19:40:36 +0000 Files and hashes: 1: 3137302e38302e36382e302f32322d3234203d3e20323633393035.roa (hash: 7NSu1PMWeoZCELaEl8OW9YbMtDkl2sNpkyCrwdD6WJA=) 2: 3133382e3230342e3230302e302f32322d3234203d3e20323633393035.roa (hash: bQcV36xReQ/IDV5gVRSjwtVDmMEnos4N2zSYcbzUSh8=) 3: 2987D670913962CF69181F73C94FE8C279E038DA.crl (hash: OwMQpIW0vNahjAbIAlBG9VGZPl6uHZdCo57MeMpPOWI=) 4: 323830343a323738303a3a2f33322d3334203d3e20323633393035.roa (hash: 56hiDQJz7DPztx5lZlqeTXai+RNb2R69Hh8Nu7xk9pI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3db7SahZtRVC8PuMcgyzbAmeUfVwyRcsxWmHCGFvpcyF/0/2987D670913962CF69181F73C94FE8C279E038DA.crl rsync://rpki-repo.registro.br/repo/3db7SahZtRVC8PuMcgyzbAmeUfVwyRcsxWmHCGFvpcyF/0/2987D670913962CF69181F73C94FE8C279E038DA.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2987D670913962CF69181F73C94FE8C279E038DA.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 26 Mar 2026 19:40:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:94:e1:d7:34:2b:33:e3:3f:df:5f:d4:f3:24:4b:4a:6e:8d:2b:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2987D670913962CF69181F73C94FE8C279E038DA Validity Not Before: Mar 25 19:14:36 2026 GMT Not After : Mar 26 19:40:36 2026 GMT Subject: CN=69BDD22101C1D2DB4E89DEC13091A251D5F60687 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:cc:f2:c8:ab:bc:c4:64:07:e6:f8:a9:07:1c: fd:6f:df:d4:19:6a:74:66:ce:b0:96:82:c4:f1:fc: 51:f2:ea:0b:6e:12:ca:ad:21:cb:a2:28:33:76:1e: 5f:cd:b3:31:5d:35:da:4c:5c:ac:50:6a:f1:90:16: 80:35:ef:40:e9:9d:0c:90:d9:ab:60:c5:b9:21:8c: ee:c3:e2:36:8f:c0:92:bb:16:27:66:9d:90:84:88: 93:d7:22:6b:f7:b6:85:b0:1d:1b:0d:1d:d8:39:12: 34:b9:4b:6f:68:fc:8f:59:0f:75:51:56:0c:ab:dd: c2:c3:27:bc:53:be:f5:24:34:58:64:67:be:8d:96: a3:a1:eb:2b:c8:69:da:02:66:71:88:14:62:d8:5c: 54:c5:f4:c7:1e:34:11:39:49:3c:22:2d:e7:61:f2: 64:58:1f:94:e5:5a:16:9d:f9:3c:b5:5b:18:8d:8b: 3b:42:91:ed:e5:3e:1e:ba:df:50:41:35:50:13:9d: 00:e1:46:21:14:2f:94:61:87:91:ba:9b:14:35:2c: df:3b:0c:05:e1:36:81:c5:71:28:f7:65:8b:db:dc: e0:f5:6b:bd:74:23:8e:0a:08:06:18:57:54:cc:e7: 56:12:50:a5:70:d7:d7:9e:0a:4a:6d:85:21:24:ed: c2:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:BD:D2:21:01:C1:D2:DB:4E:89:DE:C1:30:91:A2:51:D5:F6:06:87 X509v3 Authority Key Identifier: keyid:29:87:D6:70:91:39:62:CF:69:18:1F:73:C9:4F:E8:C2:79:E0:38:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3db7SahZtRVC8PuMcgyzbAmeUfVwyRcsxWmHCGFvpcyF/0/2987D670913962CF69181F73C94FE8C279E038DA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2987D670913962CF69181F73C94FE8C279E038DA.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3db7SahZtRVC8PuMcgyzbAmeUfVwyRcsxWmHCGFvpcyF/0/2987D670913962CF69181F73C94FE8C279E038DA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:20:87:c7:e4:98:73:65:be:06:d3:ea:59:2b:22:40:a9:f9: d8:1d:9b:eb:87:27:d8:0e:e6:a0:2e:bc:c8:4c:f2:66:ef:59: 48:1a:0f:0d:a9:e4:b1:05:b2:ff:c4:e1:95:f9:7b:b1:b3:05: f8:c7:b0:5c:b4:6b:aa:a0:ef:dc:3b:d7:ff:34:e8:95:b3:0e: 5e:ab:ea:ec:0a:4e:58:a4:f2:be:1b:4f:f9:8f:50:af:f7:37: 86:0a:19:42:65:d4:3f:e0:90:48:5b:08:a8:41:d8:87:82:a5: da:7c:4f:e6:99:0e:75:52:a6:52:b7:3e:18:c0:68:e0:bd:57: 0f:ae:9e:15:d2:4a:f6:31:60:54:20:e8:c4:3e:a9:ce:90:b6: f4:b4:01:4b:77:06:17:47:b9:a7:29:3b:11:a2:05:dc:54:4c: 4f:19:5d:df:fe:7d:e1:7e:ae:49:16:49:e2:f8:03:c7:ec:2d: 2f:f2:10:15:96:85:40:09:a9:43:19:67:09:bb:0c:73:e5:0c: 1d:ef:fa:5f:14:38:23:7f:00:06:6d:22:20:76:c3:b6:5a:a3: 2f:aa:e8:a7:5a:c0:9d:19:7f:1b:79:32:35:ab:a0:49:cc:60: f9:20:6d:fb:a7:79:8e:38:67:9a:6d:39:9c:4f:8c:61:9a:dc: c4:a7:d0:45 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUNZTh1zQrM+M/31/U8yRLSm6NKzYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk4N0Q2NzA5MTM5NjJDRjY5MTgxRjczQzk0RkU4QzI3 OUUwMzhEQTAeFw0yNjAzMjUxOTE0MzZaFw0yNjAzMjYxOTQwMzZaMDMxMTAvBgNV BAMTKDY5QkREMjIxMDFDMUQyREI0RTg5REVDMTMwOTFBMjUxRDVGNjA2ODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZzPLIq7zEZAfm+KkHHP1v39QZ anRmzrCWgsTx/FHy6gtuEsqtIcuiKDN2Hl/NszFdNdpMXKxQavGQFoA170DpnQyQ 2atgxbkhjO7D4jaPwJK7FidmnZCEiJPXImv3toWwHRsNHdg5EjS5S29o/I9ZD3VR Vgyr3cLDJ7xTvvUkNFhkZ76NlqOh6yvIadoCZnGIFGLYXFTF9MceNBE5STwiLedh 8mRYH5TlWhad+Ty1WxiNiztCke3lPh6631BBNVATnQDhRiEUL5Rhh5G6mxQ1LN87 DAXhNoHFcSj3ZYvb3OD1a710I44KCAYYV1TM51YSUKVw19eeCkpthSEk7cIBAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUab3SIQHB0ttOid7BMJGiUdX2BocwHwYDVR0j BBgwFoAUKYfWcJE5Ys9pGB9zyU/ownngONowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM2RiN1NhaFp0UlZDOFB1TWNneXpiQW1lVWZWd3lSY3N4V21IQ0dGdnBj eUYvMC8yOTg3RDY3MDkxMzk2MkNGNjkxODFGNzNDOTRGRThDMjc5RTAzOERBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI5ODdENjcwOTEzOTYyQ0Y2 OTE4MUY3M0M5NEZFOEMyNzlFMDM4REEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M2RiN1NhaFp0UlZDOFB1TWNneXpiQW1lVWZWd3lSY3N4V21IQ0dGdnBjeUYvMC8y OTg3RDY3MDkxMzk2MkNGNjkxODFGNzNDOTRGRThDMjc5RTAzOERBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfyCHx+SYc2W+BtPqWSsiQKn52B2b64cn2A7moC68yEzyZu9ZSBoPDanksQWy /8Thlfl7sbMF+MewXLRrqqDv3DvX/zTolbMOXqvq7ApOWKTyvhtP+Y9Qr/c3hgoZ QmXUP+CQSFsIqEHYh4Kl2nxP5pkOdVKmUrc+GMBo4L1XD66eFdJK9jFgVCDoxD6p zpC29LQBS3cGF0e5pyk7EaIF3FRMTxld3/594X6uSRZJ4vgDx+wtL/IQFZaFQAmp QxlnCbsMc+UMHe/6XxQ4I38ABm0iIHbDtlqjL6rop1rAnRl/G3kyNaugScxg+SBt +6d5jjhnmm05nE+MYZrcxKfQRQ== -----END CERTIFICATE-----Generated at Thu Mar 26 01:25:18 2026 by rpki-client