$ rpki-client -vvf rpki-repo.registro.br/repo/8CdNyVQQ6YVbknmENwsDusXZPQcRApdnYKiRh3uCnGCy/0/67B2A333362525C9ECD5AE47B1BD12E1E2FCBC53.mft File: 67B2A333362525C9ECD5AE47B1BD12E1E2FCBC53.mft (raw, json) Hash identifier: pdUHEKv7Cc6Dgs/R26wjBN/rgqsQzgMkxQEJotTr0rI= Subject key identifier: F8:57:E2:CC:78:F0:45:65:18:8A:84:4A:EF:A9:52:4C:A9:1A:81:67 Authority key identifier: 67:B2:A3:33:36:25:25:C9:EC:D5:AE:47:B1:BD:12:E1:E2:FC:BC:53 Certificate issuer: /CN=67B2A333362525C9ECD5AE47B1BD12E1E2FCBC53 Certificate serial: 090BAA867A33176AB9D408A393838FB954FFD318 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67B2A333362525C9ECD5AE47B1BD12E1E2FCBC53.cer Subject info access: rsync://rpki-repo.registro.br/repo/8CdNyVQQ6YVbknmENwsDusXZPQcRApdnYKiRh3uCnGCy/0/67B2A333362525C9ECD5AE47B1BD12E1E2FCBC53.mft Manifest number: 0C Signing time: Wed 25 Mar 2026 17:15:21 +0000 Manifest this update: Wed 25 Mar 2026 17:10:21 +0000 Manifest next update: Thu 26 Mar 2026 19:32:21 +0000 Files and hashes: 1: 34352e3137302e3133382e302f32342d3234203d3e20323734343631.roa (hash: Wdxg47LRUm5TFstfbBqAIVXUclGkCk8iroEbPkc1O7o=) 2: 67B2A333362525C9ECD5AE47B1BD12E1E2FCBC53.crl (hash: 6rxOSI1oUWkTa5gXsoXpfdF+KGKonGFroKR17R0qfrQ=) 3: 323830343a393437633a313030303a3a2f34302d3430203d3e20323734343631.roa (hash: RjVQmAXS1Jvi0ifDxtizKk45kZS/G85DZHRMfune5R0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8CdNyVQQ6YVbknmENwsDusXZPQcRApdnYKiRh3uCnGCy/0/67B2A333362525C9ECD5AE47B1BD12E1E2FCBC53.crl rsync://rpki-repo.registro.br/repo/8CdNyVQQ6YVbknmENwsDusXZPQcRApdnYKiRh3uCnGCy/0/67B2A333362525C9ECD5AE47B1BD12E1E2FCBC53.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67B2A333362525C9ECD5AE47B1BD12E1E2FCBC53.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 26 Mar 2026 19:32:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:0b:aa:86:7a:33:17:6a:b9:d4:08:a3:93:83:8f:b9:54:ff:d3:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67B2A333362525C9ECD5AE47B1BD12E1E2FCBC53 Validity Not Before: Mar 25 17:10:21 2026 GMT Not After : Mar 26 19:32:21 2026 GMT Subject: CN=F857E2CC78F04565188A844AEFA9524CA91A8167 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:66:e9:57:96:9d:35:5e:3a:52:88:c9:f5:c1: 3b:c6:ae:7f:b6:54:c3:39:3c:bc:85:ac:7e:26:88: a1:e8:6c:2c:e1:7f:81:bb:e8:7e:67:f5:31:0e:cc: 6f:f6:b3:23:4e:23:67:27:c4:c6:0b:a2:dc:2d:4b: a5:b5:69:39:dd:4c:72:15:f0:10:ce:89:5a:89:a1: 37:f4:70:3f:77:72:9d:f1:9a:c3:66:36:d8:ee:2a: 36:4b:7c:86:3c:e5:d4:07:7c:68:5f:97:55:6c:97: ed:f6:13:fb:1a:c2:91:61:0b:da:5d:c8:61:c2:52: 06:ed:19:35:5a:7c:b0:f7:42:44:06:fa:ee:e0:30: e5:91:0c:62:98:25:64:2e:bd:5f:e3:92:b4:46:cd: 2a:9d:b2:33:66:92:85:4c:5b:ca:28:ef:80:26:21: c5:da:a3:96:6f:9e:96:ef:84:a1:d4:03:a8:b1:1e: 18:5b:1d:15:aa:67:db:98:91:c9:87:2a:0b:59:a3: 94:b8:9b:b8:d6:8a:77:3d:d4:27:28:46:fc:87:41: 47:e4:7c:c4:18:8a:7a:f3:6a:9c:34:d0:e9:fc:74: e9:56:b2:30:03:12:74:6f:26:a5:9e:be:f0:f3:ce: 06:4f:66:8f:bc:9d:52:47:6a:50:9f:55:37:50:ca: f8:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:57:E2:CC:78:F0:45:65:18:8A:84:4A:EF:A9:52:4C:A9:1A:81:67 X509v3 Authority Key Identifier: keyid:67:B2:A3:33:36:25:25:C9:EC:D5:AE:47:B1:BD:12:E1:E2:FC:BC:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8CdNyVQQ6YVbknmENwsDusXZPQcRApdnYKiRh3uCnGCy/0/67B2A333362525C9ECD5AE47B1BD12E1E2FCBC53.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67B2A333362525C9ECD5AE47B1BD12E1E2FCBC53.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8CdNyVQQ6YVbknmENwsDusXZPQcRApdnYKiRh3uCnGCy/0/67B2A333362525C9ECD5AE47B1BD12E1E2FCBC53.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:9a:45:a7:a8:2b:3b:9f:f4:5e:fd:3a:01:82:d3:90:97:f0: bf:ba:45:61:02:38:dc:81:94:69:4d:12:74:95:43:7b:46:ec: 8e:9d:f0:b4:09:7f:2c:6b:9c:1f:af:f6:b2:b7:0d:9e:11:78: 2c:d5:a2:03:c8:7d:e6:c3:e2:ef:52:a0:21:b6:ac:dc:01:df: 6d:db:1f:42:35:da:b4:cb:0f:77:88:20:e0:74:59:67:5c:0d: e5:14:da:5a:60:c5:12:91:83:f8:35:7e:cf:76:0d:61:ea:3e: de:08:0b:87:52:2a:5b:a1:0f:26:d7:2e:c4:c0:ae:b2:9e:9d: 83:cb:d4:02:b7:34:fe:e0:7b:fd:d0:ed:c4:6d:58:d5:f0:ab: 54:ae:ea:ae:83:77:42:bd:40:93:f2:9c:19:66:78:01:ac:32: 66:77:4a:a7:3f:c7:4f:fc:87:ab:6a:14:e6:16:a3:84:e4:56: e9:27:00:c3:01:77:e1:9f:08:39:11:af:cf:b4:a3:d4:0b:85: 49:a9:b1:4d:31:61:66:f9:27:c3:08:4a:ff:26:59:17:63:31: 80:bd:0a:fb:9a:7e:c6:02:76:02:ed:12:53:29:87:06:04:e5: 73:da:86:da:01:cd:5d:31:11:fd:ab:33:7f:18:8a:71:bd:c2: 92:46:7b:0f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUCQuqhnozF2q51Aijk4OPuVT/0xgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjdCMkEzMzMzNjI1MjVDOUVDRDVBRTQ3QjFCRDEyRTFF MkZDQkM1MzAeFw0yNjAzMjUxNzEwMjFaFw0yNjAzMjYxOTMyMjFaMDMxMTAvBgNV BAMTKEY4NTdFMkNDNzhGMDQ1NjUxODhBODQ0QUVGQTk1MjRDQTkxQTgxNjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2ZulXlp01XjpSiMn1wTvGrn+2 VMM5PLyFrH4miKHobCzhf4G76H5n9TEOzG/2syNOI2cnxMYLotwtS6W1aTndTHIV 8BDOiVqJoTf0cD93cp3xmsNmNtjuKjZLfIY85dQHfGhfl1Vsl+32E/sawpFhC9pd yGHCUgbtGTVafLD3QkQG+u7gMOWRDGKYJWQuvV/jkrRGzSqdsjNmkoVMW8oo74Am IcXao5ZvnpbvhKHUA6ixHhhbHRWqZ9uYkcmHKgtZo5S4m7jWinc91CcoRvyHQUfk fMQYinrzapw00On8dOlWsjADEnRvJqWevvDzzgZPZo+8nVJHalCfVTdQyvihAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU+FfizHjwRWUYioRK76lSTKkagWcwHwYDVR0j BBgwFoAUZ7KjMzYlJcns1a5Hsb0S4eL8vFMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOENkTnlWUVE2WVZia25tRU53c0R1c1haUFFjUkFwZG5ZS2lSaDN1Q25H Q3kvMC82N0IyQTMzMzM2MjUyNUM5RUNENUFFNDdCMUJEMTJFMUUyRkNCQzUzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY3QjJBMzMzMzYyNTI1QzlF Q0Q1QUU0N0IxQkQxMkUxRTJGQ0JDNTMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OENkTnlWUVE2WVZia25tRU53c0R1c1haUFFjUkFwZG5ZS2lSaDN1Q25HQ3kvMC82 N0IyQTMzMzM2MjUyNUM5RUNENUFFNDdCMUJEMTJFMUUyRkNCQzUzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcJpFp6grO5/0Xv06AYLTkJfwv7pFYQI43IGUaU0SdJVDe0bsjp3wtAl/LGuc H6/2srcNnhF4LNWiA8h95sPi71KgIbas3AHfbdsfQjXatMsPd4gg4HRZZ1wN5RTa WmDFEpGD+DV+z3YNYeo+3ggLh1IqW6EPJtcuxMCusp6dg8vUArc0/uB7/dDtxG1Y 1fCrVK7qroN3Qr1Ak/KcGWZ4AawyZndKpz/HT/yHq2oU5hajhORW6ScAwwF34Z8I ORGvz7Sj1AuFSamxTTFhZvknwwhK/yZZF2MxgL0K+5p+xgJ2Au0SUymHBgTlc9qG 2gHNXTER/aszfxiKcb3CkkZ7Dw== -----END CERTIFICATE-----Generated at Wed Mar 25 23:58:30 2026 by rpki-client