$ rpki-client -vvf rpki-repo.registro.br/repo/8yRNaSTCKZ9bkoaFweFLjTsrGG6yKbAfydd6jR6miJZn/0/D1FFDF44055E16082D529730642377D751467152.mft File: D1FFDF44055E16082D529730642377D751467152.mft (raw, json) Hash identifier: YiYN1EU6WroVTfnR4no+yd3Rz7k+sySPXf5Pc9dXyRQ= Subject key identifier: 0D:3C:28:79:D1:8D:F3:EF:72:8E:84:F8:3E:83:CD:88:75:32:AB:CF Authority key identifier: D1:FF:DF:44:05:5E:16:08:2D:52:97:30:64:23:77:D7:51:46:71:52 Certificate issuer: /CN=D1FFDF44055E16082D529730642377D751467152 Certificate serial: 25984D1B76DE6F5AC00FB94D98D7D099DBDB4A3D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1FFDF44055E16082D529730642377D751467152.cer Subject info access: rsync://rpki-repo.registro.br/repo/8yRNaSTCKZ9bkoaFweFLjTsrGG6yKbAfydd6jR6miJZn/0/D1FFDF44055E16082D529730642377D751467152.mft Manifest number: 026B Signing time: Thu 26 Mar 2026 13:29:22 +0000 Manifest this update: Thu 26 Mar 2026 13:24:22 +0000 Manifest next update: Fri 27 Mar 2026 14:51:22 +0000 Files and hashes: 1: 323830343a356139343a3a2f33322d3438203d3e20323638373832.roa (hash: ymgJuTMZWv+63/VwPVmOxio8KOfxsIABsf+i4ONWEss=) 2: 34352e3137322e3234302e302f32322d3234203d3e20323638373832.roa (hash: iyFn8dmCWg3WyydJEml+Y2v5BY14GrWXyZ7/DRDXmgA=) 3: D1FFDF44055E16082D529730642377D751467152.crl (hash: rquZ5kDGHw7z9sorCxdNICqHpWJKwbYVC7w4u3Ca604=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8yRNaSTCKZ9bkoaFweFLjTsrGG6yKbAfydd6jR6miJZn/0/D1FFDF44055E16082D529730642377D751467152.crl rsync://rpki-repo.registro.br/repo/8yRNaSTCKZ9bkoaFweFLjTsrGG6yKbAfydd6jR6miJZn/0/D1FFDF44055E16082D529730642377D751467152.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1FFDF44055E16082D529730642377D751467152.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 27 Mar 2026 14:51:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:98:4d:1b:76:de:6f:5a:c0:0f:b9:4d:98:d7:d0:99:db:db:4a:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1FFDF44055E16082D529730642377D751467152 Validity Not Before: Mar 26 13:24:22 2026 GMT Not After : Mar 27 14:51:22 2026 GMT Subject: CN=0D3C2879D18DF3EF728E84F83E83CD887532ABCF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:68:e6:32:02:65:c1:97:f9:5e:7a:cb:ed:7c: 0c:a4:c9:6d:c1:db:f6:d1:93:b0:18:49:90:69:ef: 1a:b4:41:e2:66:b5:a8:86:a3:43:e2:6a:74:99:92: 43:0c:0d:21:9e:9b:44:b5:67:49:c0:a1:8f:2f:4f: ad:5e:68:3e:51:2e:78:29:15:d2:a7:55:80:79:6a: 54:1e:47:ae:b7:ad:6d:65:08:c0:83:45:f2:5d:cf: cd:e6:18:02:8b:a1:83:fe:f1:47:8f:e7:31:16:51: 04:5e:7d:a0:5e:ad:13:50:30:8f:a5:95:98:65:ed: c1:fa:ee:b7:2a:09:96:b1:2b:f1:ee:76:2c:7a:69: bd:7a:28:35:fb:c8:9c:92:09:10:fa:1a:bf:ce:4e: 17:d3:8e:24:43:fa:83:95:90:47:f4:74:cc:60:17: 3a:8a:c0:ed:db:c2:df:68:a1:5f:4b:81:60:af:53: 08:8c:2f:a7:c8:46:a3:cb:57:8f:9a:24:38:fc:7a: a8:08:5f:4c:ab:cd:f7:46:fd:4a:39:82:14:b8:48: df:9c:29:da:30:93:62:17:5c:c4:c6:1f:d2:70:44: d4:f0:75:32:93:d2:d4:fe:a3:6f:90:a5:43:ab:38: c9:d4:8e:6f:b3:c4:fa:71:26:20:3f:b9:23:3a:78: b6:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:3C:28:79:D1:8D:F3:EF:72:8E:84:F8:3E:83:CD:88:75:32:AB:CF X509v3 Authority Key Identifier: keyid:D1:FF:DF:44:05:5E:16:08:2D:52:97:30:64:23:77:D7:51:46:71:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8yRNaSTCKZ9bkoaFweFLjTsrGG6yKbAfydd6jR6miJZn/0/D1FFDF44055E16082D529730642377D751467152.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1FFDF44055E16082D529730642377D751467152.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8yRNaSTCKZ9bkoaFweFLjTsrGG6yKbAfydd6jR6miJZn/0/D1FFDF44055E16082D529730642377D751467152.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:22:d9:0f:26:02:fc:6d:bb:46:ec:13:41:d5:74:12:57:4c: 06:55:87:91:2a:aa:37:d4:62:2f:47:3b:9a:53:f8:94:d3:f0: 6b:b6:10:0a:ca:8c:f0:16:12:e2:62:50:44:47:ec:f5:70:d7: 2d:a7:49:4e:d8:07:51:b4:8b:8e:e9:11:72:8c:f8:68:ca:1b: f1:e6:27:e2:85:ac:77:27:f7:e0:6e:71:6f:cd:41:a4:bc:15: fb:48:b2:e3:39:25:17:43:7d:58:89:1b:4e:65:49:68:70:3a: 94:75:76:15:b1:03:c1:3a:dc:a0:5c:06:1f:50:70:9f:f4:42: 56:d0:4f:64:80:44:d0:f0:64:96:bf:d0:46:9e:98:c9:fb:ce: 22:41:dd:93:32:89:13:b1:cd:40:eb:94:6a:a8:17:80:cc:9e: cf:76:d8:ea:fb:a5:23:89:6b:13:41:65:ad:ca:51:f6:44:e3: 69:72:06:90:d1:99:00:03:e6:45:ef:24:05:9e:c4:21:6c:8a: 1e:9a:0f:ed:e6:30:56:25:0d:73:cf:ad:3c:49:14:35:e5:8d: 29:02:27:56:ab:e6:aa:e6:d6:56:08:c8:cc:90:8a:25:d5:e9: 11:af:50:86:ed:43:26:45:ca:27:0a:ff:99:03:a9:74:f0:31: 94:08:70:f3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUJZhNG3beb1rAD7lNmNfQmdvbSj0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDFGRkRGNDQwNTVFMTYwODJENTI5NzMwNjQyMzc3RDc1 MTQ2NzE1MjAeFw0yNjAzMjYxMzI0MjJaFw0yNjAzMjcxNDUxMjJaMDMxMTAvBgNV BAMTKDBEM0MyODc5RDE4REYzRUY3MjhFODRGODNFODNDRDg4NzUzMkFCQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUaOYyAmXBl/leesvtfAykyW3B 2/bRk7AYSZBp7xq0QeJmtaiGo0PianSZkkMMDSGem0S1Z0nAoY8vT61eaD5RLngp FdKnVYB5alQeR663rW1lCMCDRfJdz83mGAKLoYP+8UeP5zEWUQRefaBerRNQMI+l lZhl7cH67rcqCZaxK/Hudix6ab16KDX7yJySCRD6Gr/OThfTjiRD+oOVkEf0dMxg FzqKwO3bwt9ooV9LgWCvUwiML6fIRqPLV4+aJDj8eqgIX0yrzfdG/Uo5ghS4SN+c Kdowk2IXXMTGH9JwRNTwdTKT0tT+o2+QpUOrOMnUjm+zxPpxJiA/uSM6eLYNAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUDTwoedGN8+9yjoT4PoPNiHUyq88wHwYDVR0j BBgwFoAU0f/fRAVeFggtUpcwZCN311FGcVIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOHlSTmFTVENLWjlia29hRndlRkxqVHNyR0c2eUtiQWZ5ZGQ2alI2bWlK Wm4vMC9EMUZGREY0NDA1NUUxNjA4MkQ1Mjk3MzA2NDIzNzdENzUxNDY3MTUyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QxRkZERjQ0MDU1RTE2MDgy RDUyOTczMDY0MjM3N0Q3NTE0NjcxNTIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OHlSTmFTVENLWjlia29hRndlRkxqVHNyR0c2eUtiQWZ5ZGQ2alI2bWlKWm4vMC9E MUZGREY0NDA1NUUxNjA4MkQ1Mjk3MzA2NDIzNzdENzUxNDY3MTUyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAECLZDyYC/G27RuwTQdV0EldMBlWHkSqqN9RiL0c7mlP4lNPwa7YQCsqM8BYS 4mJQREfs9XDXLadJTtgHUbSLjukRcoz4aMob8eYn4oWsdyf34G5xb81BpLwV+0iy 4zklF0N9WIkbTmVJaHA6lHV2FbEDwTrcoFwGH1Bwn/RCVtBPZIBE0PBklr/QRp6Y yfvOIkHdkzKJE7HNQOuUaqgXgMyez3bY6vulI4lrE0FlrcpR9kTjaXIGkNGZAAPm Re8kBZ7EIWyKHpoP7eYwViUNc8+tPEkUNeWNKQInVqvmqubWVgjIzJCKJdXpEa9Q hu1DJkXKJwr/mQOpdPAxlAhw8w== -----END CERTIFICATE-----Generated at Thu Mar 26 23:07:57 2026 by rpki-client