$ rpki-client -vvf rpki-repo.registro.br/repo/C3C4t7mJXW3YFYpZHCNbeF9wR9zunEfzm5t23BALXovb/1/D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.mft File: D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.mft (raw, json) Hash identifier: zLW4j0IGdOTWjCjCFrJTeA+UlS3KMVEyLijWk9IPo6I= Subject key identifier: 8E:1F:9A:87:53:C8:63:73:E5:D2:27:5E:89:8F:45:CF:BE:B5:A4:93 Authority key identifier: D9:70:F1:7C:86:D4:D5:A9:C6:39:5E:9E:2D:16:01:BB:D9:FA:8B:DB Certificate issuer: /CN=D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB Certificate serial: 26B48D8307040DEC3CBC3F6180E02E9C49EF60A1 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.cer Subject info access: rsync://rpki-repo.registro.br/repo/C3C4t7mJXW3YFYpZHCNbeF9wR9zunEfzm5t23BALXovb/1/D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.mft Manifest number: 0189 Signing time: Thu 26 Mar 2026 09:03:20 +0000 Manifest this update: Thu 26 Mar 2026 08:58:20 +0000 Manifest next update: Fri 27 Mar 2026 12:10:20 +0000 Files and hashes: 1: 34352e37312e3232302e302f32322d3234203d3e20323637363433.roa (hash: DphYCMXiIhOunJYgpxuGmI/F5WVwTY6x8muqbHvOLD0=) 2: 323830343a343461303a3a2f33322d3438203d3e20323637363433.roa (hash: OhP4AfZLm8wKcC8NRb3lR5wasqSW+ZFcBQBWlmtzm+0=) 3: D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.crl (hash: 8fsZauu4wraa4fqddzhFigE8n2TQrHXDEIpPby9u+/M=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/C3C4t7mJXW3YFYpZHCNbeF9wR9zunEfzm5t23BALXovb/1/D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.crl rsync://rpki-repo.registro.br/repo/C3C4t7mJXW3YFYpZHCNbeF9wR9zunEfzm5t23BALXovb/1/D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 27 Mar 2026 12:10:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:b4:8d:83:07:04:0d:ec:3c:bc:3f:61:80:e0:2e:9c:49:ef:60:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB Validity Not Before: Mar 26 08:58:20 2026 GMT Not After : Mar 27 12:10:20 2026 GMT Subject: CN=8E1F9A8753C86373E5D2275E898F45CFBEB5A493 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ab:8d:b9:6c:32:e3:a8:8c:b3:e6:ff:72:a4: 79:18:05:ac:8a:5a:c4:22:b6:92:e5:58:44:6d:15: 6f:68:1d:b9:eb:e5:bc:8a:ed:c7:96:22:11:05:14: 31:2f:d5:19:fa:11:13:70:30:6e:7d:3d:4b:ae:c6: 7c:b3:2d:f2:b2:34:1b:fe:da:7e:1a:a9:ee:18:da: be:1f:86:d0:cd:fe:a6:54:77:32:5f:7f:91:6f:45: d7:a2:41:83:b3:24:3e:9b:14:20:c3:56:ce:b7:0a: 5f:4e:6d:e3:6d:3b:7c:85:3e:f9:78:9c:ac:6d:34: 6e:75:9c:ce:80:20:c8:00:2b:02:f4:a9:31:a0:ba: 44:03:0a:ca:fe:59:bc:3c:15:7f:4e:75:cf:64:e1: ef:30:a7:9f:c8:95:db:e4:1e:56:71:8d:ef:f2:82: 7c:77:60:9c:78:b5:fb:dc:76:c7:5c:d5:8b:c7:48: 1d:70:89:13:e4:26:f0:65:2b:5b:f4:9c:0c:ea:d2: 4f:b5:6b:94:ce:6b:a7:05:55:e7:c5:87:63:aa:48: fa:72:58:8f:13:80:ff:ce:56:7f:84:5b:e4:7f:a8: 34:d0:73:9e:24:a9:eb:74:d5:ff:cd:2a:fa:a3:40: 7f:64:c7:ec:4e:45:a5:99:2f:a8:32:f5:e1:b4:af: 49:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:1F:9A:87:53:C8:63:73:E5:D2:27:5E:89:8F:45:CF:BE:B5:A4:93 X509v3 Authority Key Identifier: keyid:D9:70:F1:7C:86:D4:D5:A9:C6:39:5E:9E:2D:16:01:BB:D9:FA:8B:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/C3C4t7mJXW3YFYpZHCNbeF9wR9zunEfzm5t23BALXovb/1/D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/C3C4t7mJXW3YFYpZHCNbeF9wR9zunEfzm5t23BALXovb/1/D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:84:60:73:61:8a:6b:8c:1a:72:85:ee:54:f2:d5:88:75:fc: 26:fd:c9:71:f4:de:08:57:70:71:c3:d8:f4:4b:0c:a6:46:bd: 16:65:b8:f7:fe:c4:f7:a3:79:90:60:86:7c:69:54:96:fb:b7: 2e:42:1b:a3:ef:d6:0e:92:88:f4:e9:88:eb:f3:5b:a4:b3:e7: 6b:5e:62:bc:43:03:d0:ca:ea:03:25:bf:43:7c:8b:5e:fb:f3: 3f:9d:a7:53:c1:0c:9a:cd:67:40:05:09:cc:a4:1c:cd:96:72: f6:62:4c:ac:e6:6e:9f:bc:fb:bb:da:ac:ee:6e:ed:7e:7b:7c: 50:b9:33:c5:e4:19:0f:df:e9:2c:95:3f:44:1c:61:a7:ce:65: 3f:ea:03:0d:c6:ae:66:b4:ea:aa:94:d8:84:5e:e7:d2:fb:e2: 8a:36:79:e0:4c:c2:e7:52:1f:1f:40:63:1c:49:7a:38:18:bd: 31:3b:08:dd:5b:40:1e:90:c2:76:b8:ab:78:52:d5:4c:5e:fc: 75:cb:ec:88:db:4b:89:37:cb:50:83:54:55:0e:41:61:43:62: 80:31:27:e4:db:52:1f:fd:00:ae:f8:bf:b0:f1:1d:32:f4:74: 90:6c:88:00:e0:66:e6:91:ac:88:d9:dc:02:33:4c:f7:87:e3: 54:5b:28:68 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUJrSNgwcEDew8vD9hgOAunEnvYKEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDk3MEYxN0M4NkQ0RDVBOUM2Mzk1RTlFMkQxNjAxQkJE OUZBOEJEQjAeFw0yNjAzMjYwODU4MjBaFw0yNjAzMjcxMjEwMjBaMDMxMTAvBgNV BAMTKDhFMUY5QTg3NTNDODYzNzNFNUQyMjc1RTg5OEY0NUNGQkVCNUE0OTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+q425bDLjqIyz5v9ypHkYBayK WsQitpLlWERtFW9oHbnr5byK7ceWIhEFFDEv1Rn6ERNwMG59PUuuxnyzLfKyNBv+ 2n4aqe4Y2r4fhtDN/qZUdzJff5FvRdeiQYOzJD6bFCDDVs63Cl9ObeNtO3yFPvl4 nKxtNG51nM6AIMgAKwL0qTGgukQDCsr+Wbw8FX9Odc9k4e8wp5/IldvkHlZxje/y gnx3YJx4tfvcdsdc1YvHSB1wiRPkJvBlK1v0nAzq0k+1a5TOa6cFVefFh2OqSPpy WI8TgP/OVn+EW+R/qDTQc54kqet01f/NKvqjQH9kx+xORaWZL6gy9eG0r0lzAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUjh+ah1PIY3Pl0ideiY9Fz761pJMwHwYDVR0j BBgwFoAU2XDxfIbU1anGOV6eLRYBu9n6i9swDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQzNDNHQ3bUpYVzNZRllwWkhDTmJlRjl3Ujl6dW5FZnptNXQyM0JBTFhv dmIvMS9EOTcwRjE3Qzg2RDRENUE5QzYzOTVFOUUyRDE2MDFCQkQ5RkE4QkRCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q5NzBGMTdDODZENEQ1QTlD NjM5NUU5RTJEMTYwMUJCRDlGQThCREIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QzNDNHQ3bUpYVzNZRllwWkhDTmJlRjl3Ujl6dW5FZnptNXQyM0JBTFhvdmIvMS9E OTcwRjE3Qzg2RDRENUE5QzYzOTVFOUUyRDE2MDFCQkQ5RkE4QkRCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAToRgc2GKa4wacoXuVPLViHX8Jv3JcfTeCFdwccPY9EsMpka9FmW49/7E96N5 kGCGfGlUlvu3LkIbo+/WDpKI9OmI6/NbpLPna15ivEMD0MrqAyW/Q3yLXvvzP52n U8EMms1nQAUJzKQczZZy9mJMrOZun7z7u9qs7m7tfnt8ULkzxeQZD9/pLJU/RBxh p85lP+oDDcauZrTqqpTYhF7n0vviijZ54EzC51IfH0BjHEl6OBi9MTsI3VtAHpDC drireFLVTF78dcvsiNtLiTfLUINUVQ5BYUNigDEn5NtSH/0Arvi/sPEdMvR0kGyI AOBm5pGsiNncAjNM94fjVFsoaA== -----END CERTIFICATE-----Generated at Thu Mar 26 21:59:44 2026 by rpki-client