$ rpki-client -vvf rpki-repo.registro.br/repo/8uJYCp1ikFMksUyfqFo4koDVaVjSt7sQpu5XAW7WYKRC/0/2CF6E8398781A45231E2166FBBE4D1C00BEEAD9C.mft File: 2CF6E8398781A45231E2166FBBE4D1C00BEEAD9C.mft (raw, json) Hash identifier: wkioyo4J3+mk/O0X3d95j+wqTPdhOJdxceqtZpWID6k= Subject key identifier: DD:A3:69:08:B4:F9:80:8B:B8:06:94:F1:71:EB:D2:30:B6:B0:B2:54 Authority key identifier: 2C:F6:E8:39:87:81:A4:52:31:E2:16:6F:BB:E4:D1:C0:0B:EE:AD:9C Certificate issuer: /CN=2CF6E8398781A45231E2166FBBE4D1C00BEEAD9C Certificate serial: 237954330FCD4C6BA63C41BD7B3AEC34548795FE Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CF6E8398781A45231E2166FBBE4D1C00BEEAD9C.cer Subject info access: rsync://rpki-repo.registro.br/repo/8uJYCp1ikFMksUyfqFo4koDVaVjSt7sQpu5XAW7WYKRC/0/2CF6E8398781A45231E2166FBBE4D1C00BEEAD9C.mft Manifest number: 74 Signing time: Thu 26 Mar 2026 14:48:20 +0000 Manifest this update: Thu 26 Mar 2026 14:43:20 +0000 Manifest next update: Fri 27 Mar 2026 16:46:20 +0000 Files and hashes: 1: 3136382e3139352e3231312e302f32342d3332203d3e20323635343332.roa (hash: 5pUyDLsvdfwdf1xjCqCad9vMEk8WnXH6wEKaQXbgEwg=) 2: 2CF6E8398781A45231E2166FBBE4D1C00BEEAD9C.crl (hash: kzGHRx/ZVnsZ1EpiriD2fpiCu4kvWpdQZq3rLKXijDo=) 3: 323830343a333430383a3a2f33322d313238203d3e20323635343332.roa (hash: z9EmqTntC48ZpR2ElyQgOuTAzYri5BNOm+6rB9SSKsQ=) 4: 34352e3138302e3131352e302f32342d3332203d3e20323635343332.roa (hash: yF9Rr0jEUqRwJY5HEZlFWjNs/e6xXbOJHEs4ehwWoNY=) 5: 34352e3137332e3138302e302f32342d3332203d3e20323635343332.roa (hash: DVzAmraahgcEvu17CMdBBLT8NB0hvpJJfNB0kmBA5G0=) 6: 3136382e3139352e3230382e302f32332d3332203d3e20323635343332.roa (hash: EGWFFskX1peJybMFEzLZZ43MWjsy15b5RQ3lVUZGbEk=) 7: 3134332e3230322e35362e302f32322d3332203d3e20323635343332.roa (hash: k6YFTCiuNfTvFEzVpatvnukAN5pWYnz7q4yneOsGwEk=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8uJYCp1ikFMksUyfqFo4koDVaVjSt7sQpu5XAW7WYKRC/0/2CF6E8398781A45231E2166FBBE4D1C00BEEAD9C.crl rsync://rpki-repo.registro.br/repo/8uJYCp1ikFMksUyfqFo4koDVaVjSt7sQpu5XAW7WYKRC/0/2CF6E8398781A45231E2166FBBE4D1C00BEEAD9C.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CF6E8398781A45231E2166FBBE4D1C00BEEAD9C.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 27 Mar 2026 16:46:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:79:54:33:0f:cd:4c:6b:a6:3c:41:bd:7b:3a:ec:34:54:87:95:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2CF6E8398781A45231E2166FBBE4D1C00BEEAD9C Validity Not Before: Mar 26 14:43:20 2026 GMT Not After : Mar 27 16:46:20 2026 GMT Subject: CN=DDA36908B4F9808BB80694F171EBD230B6B0B254 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:57:eb:28:80:c2:21:64:4a:c5:95:a7:f3:c6: 7c:23:34:cc:b7:5d:3d:56:b5:7f:ec:e5:74:37:3f: c5:0c:e6:68:b6:87:c2:fa:5d:c5:d2:d9:f0:97:76: dd:07:91:60:39:6b:f0:fb:a8:e4:04:9a:46:86:79: 4b:38:33:67:67:74:2d:6c:fe:d2:a6:c8:2b:29:ec: 90:ce:6f:aa:8b:ab:56:8d:85:38:8c:46:38:9d:a4: 12:fd:54:7a:c5:81:b0:23:d0:4b:99:12:0a:87:18: 7a:f9:29:ea:4f:0b:93:e6:47:a3:1c:9f:c3:de:f6: 84:d2:70:d3:1c:f1:ce:86:ba:2f:ce:c1:d0:cf:11: ec:06:1c:50:84:99:cc:4d:b2:44:b0:e0:52:00:a1: 48:6f:7c:1a:2d:37:b2:22:e5:67:e5:d5:3a:b7:ad: c2:d5:1d:93:e4:f1:c2:bd:50:1e:31:d6:40:54:44: d9:04:bb:a4:32:c0:a3:37:93:18:8d:6c:05:6c:44: be:37:a0:7a:69:d7:4d:16:ce:79:de:e2:73:e7:42: 02:94:4e:ec:6b:66:17:ce:f5:14:dc:55:f4:c1:45: d6:3b:5a:1e:f7:a4:dc:d6:ed:12:a7:b4:69:2c:98: 86:f5:9a:4f:d6:8f:70:4d:68:cd:96:02:7c:a4:67: 78:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:A3:69:08:B4:F9:80:8B:B8:06:94:F1:71:EB:D2:30:B6:B0:B2:54 X509v3 Authority Key Identifier: keyid:2C:F6:E8:39:87:81:A4:52:31:E2:16:6F:BB:E4:D1:C0:0B:EE:AD:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8uJYCp1ikFMksUyfqFo4koDVaVjSt7sQpu5XAW7WYKRC/0/2CF6E8398781A45231E2166FBBE4D1C00BEEAD9C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CF6E8398781A45231E2166FBBE4D1C00BEEAD9C.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8uJYCp1ikFMksUyfqFo4koDVaVjSt7sQpu5XAW7WYKRC/0/2CF6E8398781A45231E2166FBBE4D1C00BEEAD9C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:38:c5:d3:bf:05:e5:b6:3c:c3:1e:65:d9:1d:75:e5:5d:f8: ad:35:bf:b9:b2:88:07:e1:e6:8e:a8:c0:cc:6a:f5:3e:16:7f: 9c:f7:a3:3a:70:6b:29:e4:a3:57:c4:c8:f0:d5:ce:7b:41:c1: 5a:32:52:62:8e:fa:38:c5:f3:1f:61:ee:ba:03:fd:99:65:58: 34:d4:d9:3f:65:5b:9d:b4:37:a2:35:bf:ce:cc:3c:52:c1:ea: 9e:6f:38:2d:4a:f5:da:b8:75:cb:67:31:b2:87:54:97:fc:fa: f9:4e:01:d5:39:7c:46:f6:ac:79:ef:f2:ce:b7:63:ad:09:18: 05:9b:c8:ae:5b:79:2a:09:c5:9d:6b:96:07:79:ce:04:76:53: e2:01:2d:a3:ef:89:0d:c7:34:59:05:c0:f4:fb:57:76:91:4c: b0:d1:c3:30:d5:1a:7c:1d:0b:18:78:c0:7f:74:f2:65:b2:af: ef:f5:b7:09:ae:16:cb:29:d9:ed:fc:cd:87:03:99:74:8a:3a: d2:a9:cb:e9:dd:78:95:16:d3:a3:69:23:ba:3f:17:55:97:d0: e3:ba:65:ad:7c:31:2b:37:66:56:d8:11:f4:f2:e5:bc:bd:b3: cd:da:28:c8:57:9d:55:1a:da:0d:70:08:d5:af:83:0d:7f:2c: 51:7b:24:8f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUI3lUMw/NTGumPEG9ezrsNFSHlf4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkNGNkU4Mzk4NzgxQTQ1MjMxRTIxNjZGQkJFNEQxQzAw QkVFQUQ5QzAeFw0yNjAzMjYxNDQzMjBaFw0yNjAzMjcxNjQ2MjBaMDMxMTAvBgNV BAMTKEREQTM2OTA4QjRGOTgwOEJCODA2OTRGMTcxRUJEMjMwQjZCMEIyNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhV+sogMIhZErFlafzxnwjNMy3 XT1WtX/s5XQ3P8UM5mi2h8L6XcXS2fCXdt0HkWA5a/D7qOQEmkaGeUs4M2dndC1s /tKmyCsp7JDOb6qLq1aNhTiMRjidpBL9VHrFgbAj0EuZEgqHGHr5KepPC5PmR6Mc n8Pe9oTScNMc8c6Gui/OwdDPEewGHFCEmcxNskSw4FIAoUhvfBotN7Ii5Wfl1Tq3 rcLVHZPk8cK9UB4x1kBURNkEu6QywKM3kxiNbAVsRL43oHpp100Wznne4nPnQgKU TuxrZhfO9RTcVfTBRdY7Wh73pNzW7RKntGksmIb1mk/Wj3BNaM2WAnykZ3i3AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU3aNpCLT5gIu4BpTxcevSMLawslQwHwYDVR0j BBgwFoAULPboOYeBpFIx4hZvu+TRwAvurZwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOHVKWUNwMWlrRk1rc1V5ZnFGbzRrb0RWYVZqU3Q3c1FwdTVYQVc3V1lL UkMvMC8yQ0Y2RTgzOTg3ODFBNDUyMzFFMjE2NkZCQkU0RDFDMDBCRUVBRDlDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJDRjZFODM5ODc4MUE0NTIz MUUyMTY2RkJCRTREMUMwMEJFRUFEOUMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OHVKWUNwMWlrRk1rc1V5ZnFGbzRrb0RWYVZqU3Q3c1FwdTVYQVc3V1lLUkMvMC8y Q0Y2RTgzOTg3ODFBNDUyMzFFMjE2NkZCQkU0RDFDMDBCRUVBRDlDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEACTjF078F5bY8wx5l2R115V34rTW/ubKIB+HmjqjAzGr1PhZ/nPejOnBrKeSj V8TI8NXOe0HBWjJSYo76OMXzH2HuugP9mWVYNNTZP2VbnbQ3ojW/zsw8UsHqnm84 LUr12rh1y2cxsodUl/z6+U4B1Tl8Rvasee/yzrdjrQkYBZvIrlt5KgnFnWuWB3nO BHZT4gEto++JDcc0WQXA9PtXdpFMsNHDMNUafB0LGHjAf3TyZbKv7/W3Ca4WyynZ 7fzNhwOZdIo60qnL6d14lRbTo2kjuj8XVZfQ47plrXwxKzdmVtgR9PLlvL2zzdoo yFedVRraDXAI1a+DDX8sUXskjw== -----END CERTIFICATE-----Generated at Thu Mar 26 19:56:47 2026 by rpki-client