$ rpki-client -vvf rpki-repo.registro.br/repo/CDNPzzLQTEV283xCvZxRS9ZqWJigwRu1mahJYwYe9LD6/0/20EE210B8D6A04962173004DC68629DBF033EFB8.mft File: 20EE210B8D6A04962173004DC68629DBF033EFB8.mft (raw, json) Hash identifier: ypALDtI+5o8D5OO7rLxu3b48ZGbvVmWTDxNWmNdeOA4= Subject key identifier: 2D:A1:D5:86:A4:8B:11:42:C5:98:E7:06:A3:F3:FD:95:9A:A4:96:73 Authority key identifier: 20:EE:21:0B:8D:6A:04:96:21:73:00:4D:C6:86:29:DB:F0:33:EF:B8 Certificate issuer: /CN=20EE210B8D6A04962173004DC68629DBF033EFB8 Certificate serial: 2050182DE0E3B157AA43EEF366D60EFB90198DC9 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20EE210B8D6A04962173004DC68629DBF033EFB8.cer Subject info access: rsync://rpki-repo.registro.br/repo/CDNPzzLQTEV283xCvZxRS9ZqWJigwRu1mahJYwYe9LD6/0/20EE210B8D6A04962173004DC68629DBF033EFB8.mft Manifest number: 3D Signing time: Wed 25 Mar 2026 19:11:32 +0000 Manifest this update: Wed 25 Mar 2026 19:06:32 +0000 Manifest next update: Thu 26 Mar 2026 20:18:32 +0000 Files and hashes: 1: 20EE210B8D6A04962173004DC68629DBF033EFB8.crl (hash: b1TiGVxLuDBo4uAE6TwoFLmZI1Ea0FKY3G2JfSRxL/A=) 2: 323830343a323339383a3a2f33322d3336203d3e203631353831.roa (hash: sDW1u1G3xwoJJb5WrMBGlB/ArTK4PNi5MA7borCfA0g=) 3: 3133382e39342e3139362e302f32322d3234203d3e203631353831.roa (hash: sa9CbGsjToh5xSwiAq3+53EFajZd3ZS2Vu0qf9Bn+cw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CDNPzzLQTEV283xCvZxRS9ZqWJigwRu1mahJYwYe9LD6/0/20EE210B8D6A04962173004DC68629DBF033EFB8.crl rsync://rpki-repo.registro.br/repo/CDNPzzLQTEV283xCvZxRS9ZqWJigwRu1mahJYwYe9LD6/0/20EE210B8D6A04962173004DC68629DBF033EFB8.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20EE210B8D6A04962173004DC68629DBF033EFB8.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 26 Mar 2026 20:18:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:50:18:2d:e0:e3:b1:57:aa:43:ee:f3:66:d6:0e:fb:90:19:8d:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20EE210B8D6A04962173004DC68629DBF033EFB8 Validity Not Before: Mar 25 19:06:32 2026 GMT Not After : Mar 26 20:18:32 2026 GMT Subject: CN=2DA1D586A48B1142C598E706A3F3FD959AA49673 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:10:0b:9b:75:7f:90:d7:88:23:1b:80:23:19: d9:f5:53:e4:3d:0f:45:55:6e:df:3f:17:7e:3b:ae: b6:51:d9:51:76:ca:4d:c7:3f:8a:2d:a8:c6:57:17: 86:08:ff:25:c7:84:8c:a9:13:79:44:8f:a1:a8:ef: 56:fb:c9:83:de:91:9b:3c:ed:47:02:c1:94:a3:a1: cc:8a:93:68:25:7c:8c:ee:7c:ae:d8:d6:dd:e0:03: 07:2f:f1:41:4b:59:86:fd:e4:70:76:fe:0b:93:0b: f8:1d:fc:f0:3c:7a:02:43:e1:a3:42:4b:41:6e:87: 7f:d4:ff:4b:40:1b:82:a0:7e:c9:15:36:e3:b3:2d: 2f:0e:26:e2:31:23:df:7b:d6:fe:cd:11:d2:1e:fc: f2:0f:01:c0:7f:f8:02:6d:af:58:97:92:78:02:ff: a8:a3:a7:65:42:5c:d0:2f:11:45:e2:07:1d:2b:4c: a8:cb:7f:e1:d9:34:95:7f:d6:68:9d:bf:87:14:f2: 29:37:f2:e7:fb:4c:5e:55:8e:51:44:90:e8:25:bf: a2:9c:2f:b8:ee:c2:4e:a7:a7:54:4c:93:9b:5b:94: 1b:d4:15:09:62:e1:94:aa:02:8b:92:b1:82:91:b9: 4d:84:28:02:3f:f3:6a:a7:b7:d7:dc:b9:d8:80:0b: 55:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:A1:D5:86:A4:8B:11:42:C5:98:E7:06:A3:F3:FD:95:9A:A4:96:73 X509v3 Authority Key Identifier: keyid:20:EE:21:0B:8D:6A:04:96:21:73:00:4D:C6:86:29:DB:F0:33:EF:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CDNPzzLQTEV283xCvZxRS9ZqWJigwRu1mahJYwYe9LD6/0/20EE210B8D6A04962173004DC68629DBF033EFB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20EE210B8D6A04962173004DC68629DBF033EFB8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CDNPzzLQTEV283xCvZxRS9ZqWJigwRu1mahJYwYe9LD6/0/20EE210B8D6A04962173004DC68629DBF033EFB8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:2a:51:f3:00:3b:8f:3a:ff:f4:5c:46:e1:ef:37:2b:75:f8: 14:73:a4:97:f4:c0:5b:aa:5d:e8:fb:6f:dc:a1:5d:fa:53:02: 1a:12:7a:26:21:4e:b9:4e:19:62:cc:be:85:f3:17:a0:cd:bc: 9d:d9:23:59:10:42:3a:e3:ab:5a:bb:8c:8e:19:8a:eb:ed:35: b5:3d:38:49:83:88:8b:28:fd:53:72:a1:76:86:39:9f:fb:47: d8:8e:94:c6:37:62:31:38:ba:13:66:89:29:6e:69:c5:c1:9b: 04:d1:0d:67:19:9e:16:7b:be:87:d9:29:bd:64:9c:84:ab:23: 06:03:20:e5:94:ca:08:b0:2e:00:1f:6f:83:1c:d9:92:f0:22: 5f:d7:f8:26:b8:5e:1a:a6:ad:11:c6:ce:36:ae:42:a6:d6:1e: 74:0a:f3:1b:5a:9e:60:67:ac:df:0b:f2:bc:1a:55:51:5f:7b: 3a:f5:29:a7:fd:59:6d:d0:d0:a0:fb:f9:78:56:95:00:a5:16: 2b:24:da:97:0e:da:50:ad:48:14:a8:ad:99:75:7d:d7:41:4e: df:ea:b4:f2:c3:04:71:7f:3f:31:5b:ee:3f:cf:bd:d2:de:92: fb:6e:de:7d:4b:64:84:4e:21:df:cf:97:71:37:bb:ed:52:5c: 98:68:9a:4e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUIFAYLeDjsVeqQ+7zZtYO+5AZjckwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBFRTIxMEI4RDZBMDQ5NjIxNzMwMDREQzY4NjI5REJG MDMzRUZCODAeFw0yNjAzMjUxOTA2MzJaFw0yNjAzMjYyMDE4MzJaMDMxMTAvBgNV BAMTKDJEQTFENTg2QTQ4QjExNDJDNTk4RTcwNkEzRjNGRDk1OUFBNDk2NzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrEAubdX+Q14gjG4AjGdn1U+Q9 D0VVbt8/F347rrZR2VF2yk3HP4otqMZXF4YI/yXHhIypE3lEj6Go71b7yYPekZs8 7UcCwZSjocyKk2glfIzufK7Y1t3gAwcv8UFLWYb95HB2/guTC/gd/PA8egJD4aNC S0Fuh3/U/0tAG4KgfskVNuOzLS8OJuIxI9971v7NEdIe/PIPAcB/+AJtr1iXkngC /6ijp2VCXNAvEUXiBx0rTKjLf+HZNJV/1midv4cU8ik38uf7TF5VjlFEkOglv6Kc L7juwk6np1RMk5tblBvUFQli4ZSqAouSsYKRuU2EKAI/82qnt9fcudiAC1VLAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQULaHVhqSLEULFmOcGo/P9lZqklnMwHwYDVR0j BBgwFoAUIO4hC41qBJYhcwBNxoYp2/Az77gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ0ROUHp6TFFURVYyODN4Q3ZaeFJTOVpxV0ppZ3dSdTFtYWhKWXdZZTlM RDYvMC8yMEVFMjEwQjhENkEwNDk2MjE3MzAwNERDNjg2MjlEQkYwMzNFRkI4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIwRUUyMTBCOEQ2QTA0OTYy MTczMDA0REM2ODYyOURCRjAzM0VGQjguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q0ROUHp6TFFURVYyODN4Q3ZaeFJTOVpxV0ppZ3dSdTFtYWhKWXdZZTlMRDYvMC8y MEVFMjEwQjhENkEwNDk2MjE3MzAwNERDNjg2MjlEQkYwMzNFRkI4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWSpR8wA7jzr/9FxG4e83K3X4FHOkl/TAW6pd6Ptv3KFd+lMCGhJ6JiFOuU4Z Ysy+hfMXoM28ndkjWRBCOuOrWruMjhmK6+01tT04SYOIiyj9U3KhdoY5n/tH2I6U xjdiMTi6E2aJKW5pxcGbBNENZxmeFnu+h9kpvWSchKsjBgMg5ZTKCLAuAB9vgxzZ kvAiX9f4JrheGqatEcbONq5CptYedArzG1qeYGes3wvyvBpVUV97OvUpp/1ZbdDQ oPv5eFaVAKUWKyTalw7aUK1IFKitmXV910FO3+q08sMEcX8/MVvuP8+90t6S+27e fUtkhE4h38+XcTe77VJcmGiaTg== -----END CERTIFICATE-----Generated at Thu Mar 26 02:38:56 2026 by rpki-client