$ rpki-client -vvf rpki-repo.registro.br/repo/CTtUbo2eqp8cGauVkQCTifHQuaeE5VfSiYp4TwXeX1J9/0/DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7.mft File: DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7.mft (raw, json) Hash identifier: cm6Dm4ONTsnCELF1YQKuOeHYH5GecdTzL2VysE5pNXE= Subject key identifier: 19:2A:BA:8C:39:2C:3C:23:7A:6A:36:B8:FF:62:FC:7C:AC:88:AA:7A Authority key identifier: DF:34:AF:E4:C3:52:59:EA:0E:0A:B9:3A:34:0D:F1:39:E8:6B:8D:B7 Certificate issuer: /CN=DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7 Certificate serial: 42BB093C443C3B73AD21A2B8C198455131C5C9D7 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7.cer Subject info access: rsync://rpki-repo.registro.br/repo/CTtUbo2eqp8cGauVkQCTifHQuaeE5VfSiYp4TwXeX1J9/0/DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7.mft Manifest number: 015E Signing time: Thu 26 Mar 2026 15:45:30 +0000 Manifest this update: Thu 26 Mar 2026 15:40:30 +0000 Manifest next update: Fri 27 Mar 2026 19:35:30 +0000 Files and hashes: 1: DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7.crl (hash: 0Lu2NIj9z0qzeJWgCE61CP5owRHm4T/hlkv9J7FOnZE=) 2: 323830343a386532303a3a2f33322d313238203d3e20323733343034.roa (hash: +rQtNxAInELK5ARSncrEa6aoX0jAyBJS0K9vEo2MC/M=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CTtUbo2eqp8cGauVkQCTifHQuaeE5VfSiYp4TwXeX1J9/0/DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7.crl rsync://rpki-repo.registro.br/repo/CTtUbo2eqp8cGauVkQCTifHQuaeE5VfSiYp4TwXeX1J9/0/DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 27 Mar 2026 19:35:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:bb:09:3c:44:3c:3b:73:ad:21:a2:b8:c1:98:45:51:31:c5:c9:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7 Validity Not Before: Mar 26 15:40:30 2026 GMT Not After : Mar 27 19:35:30 2026 GMT Subject: CN=192ABA8C392C3C237A6A36B8FF62FC7CAC88AA7A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:7b:a0:d2:e9:e9:fa:e7:3d:b5:4b:d2:02:1a: c1:a5:64:e0:46:36:78:bb:f7:53:12:77:e6:96:28: ab:f7:18:14:ae:64:67:55:9a:26:9f:d2:95:d8:87: b1:12:0e:98:2c:d6:58:3b:37:ef:99:21:f3:61:09: cf:bc:58:d4:92:2e:68:b7:84:46:45:57:d6:bc:f5: 5b:64:49:6a:b6:9d:d0:ad:d6:77:07:bc:b2:67:99: 09:2e:e1:52:df:05:a9:bf:5c:4c:61:b3:32:52:10: 04:96:4e:5a:78:c2:bb:87:f1:8c:a2:29:f9:f8:91: ab:87:e3:f0:24:9a:b4:4c:8f:2c:d6:06:0c:4b:b3: 4e:a9:3f:a7:8f:9b:97:34:c6:96:70:39:53:c5:a5: ca:1f:92:37:35:12:93:f0:a2:59:06:d9:25:44:65: 7f:1a:e2:65:65:78:55:35:0e:d0:9f:26:dc:87:9b: cc:d6:95:0f:6c:05:8a:69:cc:f7:3f:10:ea:06:8c: 40:31:c4:72:f3:01:e5:ef:e1:cb:54:82:d0:7a:b6: e2:de:2e:5c:37:dc:19:de:d0:4a:9e:45:99:25:38: 95:4e:ce:bb:9a:28:06:43:a3:05:5c:d3:fe:55:ac: ca:74:f4:42:fa:97:cb:4e:48:be:2e:e6:cf:b9:97: 27:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:2A:BA:8C:39:2C:3C:23:7A:6A:36:B8:FF:62:FC:7C:AC:88:AA:7A X509v3 Authority Key Identifier: keyid:DF:34:AF:E4:C3:52:59:EA:0E:0A:B9:3A:34:0D:F1:39:E8:6B:8D:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CTtUbo2eqp8cGauVkQCTifHQuaeE5VfSiYp4TwXeX1J9/0/DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CTtUbo2eqp8cGauVkQCTifHQuaeE5VfSiYp4TwXeX1J9/0/DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:fb:f4:fe:4c:b9:e8:7b:a5:e7:05:b1:a3:eb:e1:db:a0:0b: d0:97:9b:10:55:a0:79:a6:d5:32:28:37:f8:af:9d:47:5a:7f: 9e:81:ef:c6:61:c5:61:19:b7:13:0c:1d:67:5c:15:8f:01:e5: f4:e2:29:8e:30:87:6f:48:59:c4:f3:65:23:e6:d6:bb:cc:a6: 46:e6:50:16:72:5e:0d:3e:af:34:f0:89:5b:b1:61:98:58:fb: f2:cd:72:44:97:ee:26:ef:42:ed:76:b5:ed:5c:8c:16:a1:c0: 0b:9f:84:ab:f8:64:e3:49:c4:ed:32:0f:b8:33:7e:5b:60:bb: 89:f7:0c:c4:84:a4:cc:b6:b3:81:10:50:7e:6b:83:83:b7:8d: cf:53:40:d4:b3:00:1c:4c:a8:3e:d7:bd:c4:a9:77:18:4b:41: 3d:b5:c5:fe:7c:7a:4c:ba:d7:83:8b:31:38:40:04:3a:17:d3: 01:38:ce:4c:74:9a:51:ef:69:7d:a9:d9:09:88:ff:2d:20:f6: f0:80:08:f6:a3:99:aa:70:ec:66:dc:60:06:6f:0e:10:79:ff: da:64:4f:a8:83:3c:de:77:64:72:1f:5b:e9:2f:c5:5b:3c:8b: 8d:2e:0b:6e:a6:ed:93:f8:a8:a4:17:0b:10:d4:47:9e:24:e5: d4:c7:b5:3a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUQrsJPEQ8O3OtIaK4wZhFUTHFydcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREYzNEFGRTRDMzUyNTlFQTBFMEFCOTNBMzQwREYxMzlF ODZCOERCNzAeFw0yNjAzMjYxNTQwMzBaFw0yNjAzMjcxOTM1MzBaMDMxMTAvBgNV BAMTKDE5MkFCQThDMzkyQzNDMjM3QTZBMzZCOEZGNjJGQzdDQUM4OEFBN0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCve6DS6en65z21S9ICGsGlZOBG Nni791MSd+aWKKv3GBSuZGdVmiaf0pXYh7ESDpgs1lg7N++ZIfNhCc+8WNSSLmi3 hEZFV9a89VtkSWq2ndCt1ncHvLJnmQku4VLfBam/XExhszJSEASWTlp4wruH8Yyi Kfn4kauH4/AkmrRMjyzWBgxLs06pP6ePm5c0xpZwOVPFpcofkjc1EpPwolkG2SVE ZX8a4mVleFU1DtCfJtyHm8zWlQ9sBYppzPc/EOoGjEAxxHLzAeXv4ctUgtB6tuLe Llw33Bne0EqeRZklOJVOzruaKAZDowVc0/5VrMp09EL6l8tOSL4u5s+5lyevAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUGSq6jDksPCN6aja4/2L8fKyIqnowHwYDVR0j BBgwFoAU3zSv5MNSWeoOCrk6NA3xOehrjbcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ1R0VWJvMmVxcDhjR2F1VmtRQ1RpZkhRdWFlRTVWZlNpWXA0VHdYZVgx SjkvMC9ERjM0QUZFNEMzNTI1OUVBMEUwQUI5M0EzNDBERjEzOUU4NkI4REI3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RGMzRBRkU0QzM1MjU5RUEw RTBBQjkzQTM0MERGMTM5RTg2QjhEQjcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q1R0VWJvMmVxcDhjR2F1VmtRQ1RpZkhRdWFlRTVWZlNpWXA0VHdYZVgxSjkvMC9E RjM0QUZFNEMzNTI1OUVBMEUwQUI5M0EzNDBERjEzOUU4NkI4REI3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAD/v0/ky56Hul5wWxo+vh26AL0JebEFWgeabVMig3+K+dR1p/noHvxmHFYRm3 EwwdZ1wVjwHl9OIpjjCHb0hZxPNlI+bWu8ymRuZQFnJeDT6vNPCJW7FhmFj78s1y RJfuJu9C7Xa17VyMFqHAC5+Eq/hk40nE7TIPuDN+W2C7ifcMxISkzLazgRBQfmuD g7eNz1NA1LMAHEyoPte9xKl3GEtBPbXF/nx6TLrXg4sxOEAEOhfTATjOTHSaUe9p fanZCYj/LSD28IAI9qOZqnDsZtxgBm8OEHn/2mRPqIM83ndkch9b6S/FWzyLjS4L bqbtk/iopBcLENRHniTl1Me1Og== -----END CERTIFICATE-----Generated at Thu Mar 26 20:12:47 2026 by rpki-client