$ rpki-client -vvf rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/1/CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.mft File: CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.mft (raw, json) Hash identifier: JB9ms5yWNilQhEpOFeoel/FQpkPIa/MoJDnlTIwfSFQ= Subject key identifier: C3:D9:0C:37:DF:81:B1:4B:58:AA:1F:7D:7B:DB:03:A4:44:32:C4:AC Authority key identifier: CE:9E:7D:4F:B6:64:E3:CF:2F:C9:0E:96:04:FA:E1:98:A1:A3:02:B2 Certificate issuer: /CN=CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2 Certificate serial: 01D1A1D1B55AC60633861C13F96A767CB36827CE Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.cer Subject info access: rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/1/CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.mft Manifest number: 03D3 Signing time: Thu 26 Mar 2026 16:30:43 +0000 Manifest this update: Thu 26 Mar 2026 16:25:43 +0000 Manifest next update: Fri 27 Mar 2026 16:49:43 +0000 Files and hashes: 1: 3137302e3233332e3131352e302f32342d3234203d3e20323635303738.roa (hash: tSMpR71UAuC2zrbdj0EWvYX2DFiB40w3XPiao4IrMLk=) 2: 323830343a333237303a3a2f33322d3430203d3e20323635303738.roa (hash: xZOGYqIMw2Xb3OgmunSGGwwg8xrOZJS8s2Q0thZGd0A=) 3: 3137302e3233332e3131322e302f32322d3233203d3e20323635303738.roa (hash: tCHeehAWk6SX2/rRTD0d6RSK+ulyfAmwIQ9PX6N9nqk=) 4: CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.crl (hash: yP1rZ29jGcOMlx74fBB/sDWfX6AlP3v3urfG6H5v/9g=) 5: 3137302e3233332e3131342e302f32342d3234203d3e20323635303738.roa (hash: O74Dl+n7kgxIX7fp6e+Rx21Kwb0KGKe4Rd/oFvpRadw=) 6: 3137302e3233332e3131322e302f32342d3234203d3e20323635303738.roa (hash: bIU81f9YCjQGqnLEEAw17fgvcftmD8QjkFeC4s20MKQ=) 7: 3137302e3233332e3131332e302f32342d3234203d3e20323733373838.roa (hash: N2i/qBjBq5/TJnBxu2abDlDhuFcVTp1FhoYaGw4HyrY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/1/CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.crl rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/1/CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 27 Mar 2026 16:49:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:d1:a1:d1:b5:5a:c6:06:33:86:1c:13:f9:6a:76:7c:b3:68:27:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2 Validity Not Before: Mar 26 16:25:43 2026 GMT Not After : Mar 27 16:49:43 2026 GMT Subject: CN=C3D90C37DF81B14B58AA1F7D7BDB03A44432C4AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:82:84:d9:f5:ee:a8:8b:dd:d7:26:6b:7c:c9: fc:44:2f:e8:26:75:f8:4f:45:61:3d:2f:fb:2f:af: 0f:e7:65:04:9a:6d:f8:a1:6e:68:b0:a5:d4:24:6b: 53:6d:6f:08:87:b5:d9:e3:68:60:7a:61:61:d7:78: 14:86:a7:a2:a1:63:ba:95:99:8e:31:ba:2c:61:18: be:fc:17:18:ee:b1:3e:39:5f:18:7a:24:ba:bc:75: fe:9a:78:b4:d4:cc:09:50:ea:c5:5a:30:c9:cd:71: 62:41:cb:c7:11:2d:51:8e:4f:eb:63:36:7f:5a:07: 39:a8:69:74:a9:2d:94:20:fc:ea:1d:ea:46:50:e8: 46:45:22:7a:1e:9b:bf:84:e0:5e:b7:be:04:38:55: b7:34:4f:af:a7:93:05:06:cc:07:30:f5:15:92:d4: 7d:d9:c2:da:c3:7a:0a:4d:b3:ee:18:fc:d1:9c:7d: 6f:77:e7:2a:c6:df:84:d8:66:ba:a6:42:75:e2:3b: 52:10:bd:54:9a:3c:b2:1a:5a:19:e0:f0:7a:57:d3: 85:36:49:f1:52:1a:6a:43:e9:78:88:c4:25:c0:cb: 6c:b9:15:ed:2b:c5:bf:74:86:3f:c7:4e:d2:3b:38: d3:c9:b5:17:59:fa:cc:87:a2:bb:a3:9f:a1:8f:2d: 55:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:D9:0C:37:DF:81:B1:4B:58:AA:1F:7D:7B:DB:03:A4:44:32:C4:AC X509v3 Authority Key Identifier: keyid:CE:9E:7D:4F:B6:64:E3:CF:2F:C9:0E:96:04:FA:E1:98:A1:A3:02:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/1/CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/1/CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:a7:60:f4:0e:fc:1d:4f:5a:46:cb:0c:6f:60:1c:74:19:c7: aa:f0:ff:78:b9:f4:35:c1:2d:dd:d6:f8:0e:b8:ed:0d:80:fb: 1d:11:42:8e:fb:41:4f:28:a9:9e:08:fe:e0:8e:8f:34:f2:12: c8:fe:38:cb:59:35:7f:fd:fa:13:7f:53:ca:03:7e:48:19:8e: 25:35:d6:50:fb:05:ac:66:c0:20:d5:ed:71:8c:c1:4e:75:f4: 6d:47:aa:fa:d7:45:10:47:51:39:18:1a:83:7e:16:a2:d7:dc: 0b:13:25:15:37:15:4f:b3:57:75:1f:ce:d8:86:bb:7b:12:05: 5f:6f:e2:93:25:cd:05:d7:ab:6b:f6:24:f9:62:42:18:64:4a: 1d:d3:04:e0:f7:43:50:89:8f:1d:da:12:c2:cc:c4:cb:da:16: 63:3a:48:5c:b8:b7:c8:de:0b:98:85:fb:e8:a8:d3:4d:74:d0: 3f:f2:d6:5a:8c:53:7d:f4:02:a7:8d:d0:53:68:15:28:3c:58: 06:9e:e4:e2:5e:a3:79:94:14:f2:00:3e:b4:ec:ce:85:8e:09: df:99:6d:89:52:f2:41:e7:b0:a2:ee:10:7b:43:4e:31:82:d3: d1:33:57:4b:64:55:4d:1f:a5:7b:46:e9:ae:16:e3:71:ee:54: 45:c8:a8:3f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUAdGh0bVaxgYzhhwT+Wp2fLNoJ84wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0U5RTdENEZCNjY0RTNDRjJGQzkwRTk2MDRGQUUxOThB MUEzMDJCMjAeFw0yNjAzMjYxNjI1NDNaFw0yNjAzMjcxNjQ5NDNaMDMxMTAvBgNV BAMTKEMzRDkwQzM3REY4MUIxNEI1OEFBMUY3RDdCREIwM0E0NDQzMkM0QUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmgoTZ9e6oi93XJmt8yfxEL+gm dfhPRWE9L/svrw/nZQSabfihbmiwpdQka1NtbwiHtdnjaGB6YWHXeBSGp6KhY7qV mY4xuixhGL78FxjusT45Xxh6JLq8df6aeLTUzAlQ6sVaMMnNcWJBy8cRLVGOT+tj Nn9aBzmoaXSpLZQg/Ood6kZQ6EZFInoem7+E4F63vgQ4Vbc0T6+nkwUGzAcw9RWS 1H3ZwtrDegpNs+4Y/NGcfW935yrG34TYZrqmQnXiO1IQvVSaPLIaWhng8HpX04U2 SfFSGmpD6XiIxCXAy2y5Fe0rxb90hj/HTtI7ONPJtRdZ+syHorujn6GPLVVXAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUw9kMN9+BsUtYqh99e9sDpEQyxKwwHwYDVR0j BBgwFoAUzp59T7Zk488vyQ6WBPrhmKGjArIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRDZiNXRkRkt5TjQ1dzNpcGRrZFJBN0hXSnlGdTRGb0VoY1VuWVJQNVdz VHYvMS9DRTlFN0Q0RkI2NjRFM0NGMkZDOTBFOTYwNEZBRTE5OEExQTMwMkIyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NFOUU3RDRGQjY2NEUzQ0Yy RkM5MEU5NjA0RkFFMTk4QTFBMzAyQjIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RDZiNXRkRkt5TjQ1dzNpcGRrZFJBN0hXSnlGdTRGb0VoY1VuWVJQNVdzVHYvMS9D RTlFN0Q0RkI2NjRFM0NGMkZDOTBFOTYwNEZBRTE5OEExQTMwMkIyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEASadg9A78HU9aRssMb2AcdBnHqvD/eLn0NcEt3db4DrjtDYD7HRFCjvtBTyip ngj+4I6PNPISyP44y1k1f/36E39TygN+SBmOJTXWUPsFrGbAINXtcYzBTnX0bUeq +tdFEEdRORgag34WotfcCxMlFTcVT7NXdR/O2Ia7exIFX2/ikyXNBdera/Yk+WJC GGRKHdME4PdDUImPHdoSwszEy9oWYzpIXLi3yN4LmIX76KjTTXTQP/LWWoxTffQC p43QU2gVKDxYBp7k4l6jeZQU8gA+tOzOhY4J35ltiVLyQeewou4Qe0NOMYLT0TNX S2RVTR+le0bprhbjce5URcioPw== -----END CERTIFICATE-----Generated at Thu Mar 26 21:02:21 2026 by rpki-client