$ rpki-client -vvf rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/72DB29ACFB9A8FA91BA7A8A94F819DEC61A0C74B.mft File: 72DB29ACFB9A8FA91BA7A8A94F819DEC61A0C74B.mft (raw, json) Hash identifier: d3L5x02UpbSVVcJE2T+dMWpQOY6JIz578zdvLIedEII= Subject key identifier: A9:63:E0:65:4A:64:5D:B4:F7:A5:AA:AA:9A:DB:8C:D0:1B:A4:95:32 Authority key identifier: 72:DB:29:AC:FB:9A:8F:A9:1B:A7:A8:A9:4F:81:9D:EC:61:A0:C7:4B Certificate issuer: /CN=72DB29ACFB9A8FA91BA7A8A94F819DEC61A0C74B Certificate serial: 0B66D272EC6A3C0876CB55ED59300649DC1CD238 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72DB29ACFB9A8FA91BA7A8A94F819DEC61A0C74B.cer Subject info access: rsync://rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/72DB29ACFB9A8FA91BA7A8A94F819DEC61A0C74B.mft Manifest number: 07 Signing time: Wed 25 Mar 2026 20:13:17 +0000 Manifest this update: Wed 25 Mar 2026 20:08:17 +0000 Manifest next update: Thu 26 Mar 2026 23:26:17 +0000 Files and hashes: 1: 34352e3233372e32362e302f32332d3332203d3e20323638323632.roa (hash: Gl3bxMn8lT6IQxXoS2WQDuL+5cF14T1T08jt+lAXZRk=) 2: 323830343a346537343a3a2f33322d313238203d3e20323638323632.roa (hash: +13PRgvgS+y2aG8SuGR6WjUhp5A78IZfd83U0qcnGvU=) 3: 72DB29ACFB9A8FA91BA7A8A94F819DEC61A0C74B.crl (hash: 7/ScS0f1sdkgoDgjU2CoCrdQ3jzQYFMvKTCTjQy5rcs=) 4: 34352e3233372e32342e302f32332d3332203d3e20323638323632.roa (hash: vArVfhgGT8R3/jx9frBmP+FJTOy42OB4PQrNLGQ5JQY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/72DB29ACFB9A8FA91BA7A8A94F819DEC61A0C74B.crl rsync://rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/72DB29ACFB9A8FA91BA7A8A94F819DEC61A0C74B.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72DB29ACFB9A8FA91BA7A8A94F819DEC61A0C74B.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 26 Mar 2026 23:26:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:66:d2:72:ec:6a:3c:08:76:cb:55:ed:59:30:06:49:dc:1c:d2:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72DB29ACFB9A8FA91BA7A8A94F819DEC61A0C74B Validity Not Before: Mar 25 20:08:17 2026 GMT Not After : Mar 26 23:26:17 2026 GMT Subject: CN=A963E0654A645DB4F7A5AAAA9ADB8CD01BA49532 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:be:17:12:6f:4e:1e:82:f6:e1:ca:93:f5:78: a1:2d:4f:e5:85:7d:4a:bc:80:b8:a0:30:86:71:91: bf:9b:18:14:ad:26:79:ae:02:d5:b0:5f:60:bc:2f: ca:f3:68:08:58:d9:f7:c2:2a:f9:7b:c0:c5:72:d5: 6b:a7:74:60:45:79:69:2a:9e:b9:08:28:55:49:42: ed:6c:ae:09:a9:71:f1:76:0d:a3:1e:48:66:73:a3: 35:fd:ea:79:f4:31:a7:4e:8e:b0:f0:15:73:74:b9: fe:69:8a:69:c9:eb:b6:06:22:40:4c:b0:4e:56:38: cd:8b:c0:93:be:f8:2d:0e:a5:21:db:c0:5f:55:1e: 63:5f:8e:71:c7:53:a2:5e:19:f3:00:06:1c:a0:fc: 54:d9:69:3e:af:bc:4a:bb:98:ea:eb:03:e6:71:90: 39:b8:c9:da:e2:2d:80:ff:97:86:a9:a6:d2:7c:a8: 63:0b:12:06:5d:b1:46:5d:47:00:60:59:08:ae:83: c5:a9:ad:ce:dc:2d:0c:6b:63:ea:7e:4e:4f:c7:1a: 6a:3f:48:0b:c8:0f:2c:5f:5d:b6:8e:9f:b9:ec:d6: 63:c2:99:25:a5:40:99:38:f0:22:54:be:dc:c5:6c: ed:cd:ed:7d:ff:01:7a:85:53:0c:c6:26:cf:4c:2e: 43:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:63:E0:65:4A:64:5D:B4:F7:A5:AA:AA:9A:DB:8C:D0:1B:A4:95:32 X509v3 Authority Key Identifier: keyid:72:DB:29:AC:FB:9A:8F:A9:1B:A7:A8:A9:4F:81:9D:EC:61:A0:C7:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/72DB29ACFB9A8FA91BA7A8A94F819DEC61A0C74B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72DB29ACFB9A8FA91BA7A8A94F819DEC61A0C74B.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/72DB29ACFB9A8FA91BA7A8A94F819DEC61A0C74B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:b7:ae:1f:f4:8d:eb:9d:90:0d:e1:f1:cb:4b:43:ee:a6:69: 39:73:cd:d0:99:81:e5:74:92:28:02:8c:05:75:96:8b:99:c9: 47:48:ae:7b:85:7e:b3:be:7c:02:7a:5c:d2:c8:e8:9a:45:3a: 58:c2:31:71:f2:75:f5:bd:d4:40:c4:92:57:dd:d0:5b:e1:ec: 40:84:fa:8c:d9:e5:cb:cd:5f:a3:ca:fb:47:43:ea:b5:bd:80: 48:11:fd:38:bb:34:cc:85:2e:b5:91:23:e5:9e:e8:43:6a:f4: 12:71:5c:26:8e:6f:8f:34:14:b4:c3:02:15:07:26:d6:b6:64: 9d:d3:64:22:d0:35:f1:46:61:33:34:b0:75:a8:25:33:99:84: f0:6b:a5:25:ef:40:2e:09:1a:dd:1f:0f:0e:b0:a9:93:b0:ab: a9:1b:e2:40:ec:c7:a3:f6:a9:60:12:e6:63:d3:61:e6:e1:d3: 83:d9:01:9d:64:d0:e7:f0:3b:47:5f:48:32:e2:d2:05:f9:52: 04:ca:bb:2f:5d:bf:5b:36:cf:7f:3a:e9:80:20:5b:fd:23:6c: fd:8e:28:fa:b5:e4:cf:81:84:7f:d1:f5:6e:6e:b5:26:d7:ae: 01:e7:ad:9d:d2:90:e2:8e:f3:e9:e0:0e:61:58:ee:bb:48:e7: 80:39:27:b5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUC2bScuxqPAh2y1XtWTAGSdwc0jgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzJEQjI5QUNGQjlBOEZBOTFCQTdBOEE5NEY4MTlERUM2 MUEwQzc0QjAeFw0yNjAzMjUyMDA4MTdaFw0yNjAzMjYyMzI2MTdaMDMxMTAvBgNV BAMTKEE5NjNFMDY1NEE2NDVEQjRGN0E1QUFBQTlBREI4Q0QwMUJBNDk1MzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMvhcSb04egvbhypP1eKEtT+WF fUq8gLigMIZxkb+bGBStJnmuAtWwX2C8L8rzaAhY2ffCKvl7wMVy1WundGBFeWkq nrkIKFVJQu1srgmpcfF2DaMeSGZzozX96nn0MadOjrDwFXN0uf5pimnJ67YGIkBM sE5WOM2LwJO++C0OpSHbwF9VHmNfjnHHU6JeGfMABhyg/FTZaT6vvEq7mOrrA+Zx kDm4ydriLYD/l4apptJ8qGMLEgZdsUZdRwBgWQiug8Wprc7cLQxrY+p+Tk/HGmo/ SAvIDyxfXbaOn7ns1mPCmSWlQJk48CJUvtzFbO3N7X3/AXqFUwzGJs9MLkMZAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUqWPgZUpkXbT3paqqmtuM0BuklTIwHwYDVR0j BBgwFoAUctsprPuaj6kbp6ipT4Gd7GGgx0swDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ3RYaE5vRHB6YlpOaldUcjlLcjJZUWc3SmhGNmUxVkhqY25GazdYM1Rl VmovMC83MkRCMjlBQ0ZCOUE4RkE5MUJBN0E4QTk0RjgxOURFQzYxQTBDNzRCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzcyREIyOUFDRkI5QThGQTkx QkE3QThBOTRGODE5REVDNjFBMEM3NEIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q3RYaE5vRHB6YlpOaldUcjlLcjJZUWc3SmhGNmUxVkhqY25GazdYM1RlVmovMC83 MkRCMjlBQ0ZCOUE4RkE5MUJBN0E4QTk0RjgxOURFQzYxQTBDNzRCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqbeuH/SN652QDeHxy0tD7qZpOXPN0JmB5XSSKAKMBXWWi5nJR0iue4V+s758 Anpc0sjomkU6WMIxcfJ19b3UQMSSV93QW+HsQIT6jNnly81fo8r7R0Pqtb2ASBH9 OLs0zIUutZEj5Z7oQ2r0EnFcJo5vjzQUtMMCFQcm1rZkndNkItA18UZhMzSwdagl M5mE8GulJe9ALgka3R8PDrCpk7CrqRviQOzHo/apYBLmY9Nh5uHTg9kBnWTQ5/A7 R19IMuLSBflSBMq7L12/WzbPfzrpgCBb/SNs/Y4o+rXkz4GEf9H1bm61JteuAeet ndKQ4o7z6eAOYVjuu0jngDkntQ== -----END CERTIFICATE-----Generated at Thu Mar 26 02:38:59 2026 by rpki-client