$ rpki-client -vvf rpki-repo.registro.br/repo/DR8GQ5BUdBH4kqaACcZYQbjnUERKgPYCk2NJi7J4KL6Z/1/02CB993E9585A53FC6B40DA762A73EB2821BF6ED.mft File: 02CB993E9585A53FC6B40DA762A73EB2821BF6ED.mft (raw, json) Hash identifier: hoHc32jd8SSmTocMH7inEKpTw7r+ZUZpp6kUnS8sxNs= Subject key identifier: DA:87:2B:4F:26:F4:77:5E:C1:0B:88:E3:24:3D:5B:4F:1A:DA:3C:E7 Authority key identifier: 02:CB:99:3E:95:85:A5:3F:C6:B4:0D:A7:62:A7:3E:B2:82:1B:F6:ED Certificate issuer: /CN=02CB993E9585A53FC6B40DA762A73EB2821BF6ED Certificate serial: 23F2EB12CAD7BC8D101B8066FE16AB7E49FACEDF Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02CB993E9585A53FC6B40DA762A73EB2821BF6ED.cer Subject info access: rsync://rpki-repo.registro.br/repo/DR8GQ5BUdBH4kqaACcZYQbjnUERKgPYCk2NJi7J4KL6Z/1/02CB993E9585A53FC6B40DA762A73EB2821BF6ED.mft Manifest number: 03BF Signing time: Thu 26 Mar 2026 19:42:21 +0000 Manifest this update: Thu 26 Mar 2026 19:37:21 +0000 Manifest next update: Fri 27 Mar 2026 23:31:21 +0000 Files and hashes: 1: 3138372e3132302e3234302e302f32302d3234203d3e203533313330.roa (hash: u6JWRD8ycN8elOEjqlNbVHnY1vOwWMG8oR+A2yiNNfQ=) 2: 3139312e372e37322e302f32312d3234203d3e203533313330.roa (hash: t86CJMrHTe89FiqYmonBVC0HlNmRd0X4J57WdEY9FzI=) 3: 02CB993E9585A53FC6B40DA762A73EB2821BF6ED.crl (hash: pRDDNfe04IscvL45VbUSkJ7H8MxKKLrHHsZVfyh+36A=) 4: 323830343a313431633a3a2f33322d313238203d3e203533313330.roa (hash: g/8RkvvRiCbns6+mnGZNl1IDwf7bMfNp8L/7f+R1hPM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DR8GQ5BUdBH4kqaACcZYQbjnUERKgPYCk2NJi7J4KL6Z/1/02CB993E9585A53FC6B40DA762A73EB2821BF6ED.crl rsync://rpki-repo.registro.br/repo/DR8GQ5BUdBH4kqaACcZYQbjnUERKgPYCk2NJi7J4KL6Z/1/02CB993E9585A53FC6B40DA762A73EB2821BF6ED.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02CB993E9585A53FC6B40DA762A73EB2821BF6ED.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 27 Mar 2026 23:31:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:f2:eb:12:ca:d7:bc:8d:10:1b:80:66:fe:16:ab:7e:49:fa:ce:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02CB993E9585A53FC6B40DA762A73EB2821BF6ED Validity Not Before: Mar 26 19:37:21 2026 GMT Not After : Mar 27 23:31:21 2026 GMT Subject: CN=DA872B4F26F4775EC10B88E3243D5B4F1ADA3CE7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:cf:99:f7:07:2e:6f:05:50:39:b4:8c:1e:80: c0:0d:d9:35:d8:0f:70:f0:05:5f:d1:4e:3e:ec:6d: a4:65:c5:8b:e8:85:83:73:25:d4:99:7a:55:76:e7: a5:01:f0:2d:29:13:ae:ed:24:38:3c:d5:1a:52:29: 27:76:77:2e:1c:0d:6e:0e:f7:2d:c3:2c:06:5c:4b: 98:b6:32:99:57:af:21:76:16:35:db:b1:60:41:6d: ec:a7:e1:c8:2b:29:92:77:05:94:93:fa:51:ea:59: ab:a2:1f:de:40:cb:04:0e:b6:4b:d3:c8:df:ff:87: d2:22:44:02:ac:2e:ce:c0:9d:9c:e0:df:ea:f1:b5: c8:31:65:7b:d1:eb:33:89:4b:c5:02:75:22:39:27: bf:32:f8:53:7c:54:8d:a1:0f:36:71:03:ff:a9:66: c1:fd:c0:87:d7:38:ba:2b:96:5e:e9:61:27:ef:07: 80:9f:24:ea:28:1a:ec:a3:cc:5d:ac:0f:06:20:01: 77:c4:71:37:e5:51:56:ca:15:0f:4e:87:2f:0a:cf: a7:38:0d:fb:30:c9:35:cf:f3:7b:3d:a1:c5:7d:73: 24:e2:78:ec:88:6c:6c:7f:8b:d8:99:11:d4:67:1d: bc:23:9a:65:8c:eb:cd:b5:5e:1b:3f:4c:0a:3f:3e: 38:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:87:2B:4F:26:F4:77:5E:C1:0B:88:E3:24:3D:5B:4F:1A:DA:3C:E7 X509v3 Authority Key Identifier: keyid:02:CB:99:3E:95:85:A5:3F:C6:B4:0D:A7:62:A7:3E:B2:82:1B:F6:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DR8GQ5BUdBH4kqaACcZYQbjnUERKgPYCk2NJi7J4KL6Z/1/02CB993E9585A53FC6B40DA762A73EB2821BF6ED.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02CB993E9585A53FC6B40DA762A73EB2821BF6ED.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DR8GQ5BUdBH4kqaACcZYQbjnUERKgPYCk2NJi7J4KL6Z/1/02CB993E9585A53FC6B40DA762A73EB2821BF6ED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:25:ad:79:08:96:05:aa:08:be:76:e4:a0:8d:72:b5:6b:2e: 91:db:cf:46:1c:cb:4f:03:39:bf:ed:0b:ac:f4:9e:d4:8f:33: d5:60:b5:ad:a0:bf:42:06:26:c3:61:d1:2d:73:4e:3a:cb:c1: c2:1f:1d:a1:8c:f7:c5:b2:92:7d:24:1c:ca:e2:60:aa:0a:eb: 09:65:37:8f:9a:c7:cb:d6:82:ec:90:6e:f2:29:c7:5c:80:80: 5d:cb:bd:4c:65:24:76:ed:f7:67:30:7b:6f:18:57:a7:62:50: 71:0d:b1:12:ce:87:80:fe:33:6b:c8:b7:90:43:bb:e1:8f:b5: 4d:d1:96:c3:51:5e:ee:e2:4e:07:f8:af:7d:a1:e0:63:37:a3: 10:fb:a8:b6:d5:81:46:4d:e4:50:3d:dc:2b:87:67:16:23:65: 8d:ac:9b:d3:8a:87:79:49:74:24:8c:f3:07:71:52:4e:c3:d1: 80:9a:4a:87:e1:9f:bf:65:e5:79:5c:db:7b:67:bc:2d:8a:8a: 1a:3c:e0:26:79:a5:46:30:58:7a:a2:d3:e0:d5:ff:21:b6:97: 80:25:53:c0:a3:55:6f:18:39:4e:5d:5b:c8:64:6d:9c:d2:48: cf:e4:a0:71:2a:e8:a1:9a:58:68:19:32:69:9b:0a:19:19:de: f4:db:fd:b2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUI/LrEsrXvI0QG4Bm/harfkn6zt8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDJDQjk5M0U5NTg1QTUzRkM2QjQwREE3NjJBNzNFQjI4 MjFCRjZFRDAeFw0yNjAzMjYxOTM3MjFaFw0yNjAzMjcyMzMxMjFaMDMxMTAvBgNV BAMTKERBODcyQjRGMjZGNDc3NUVDMTBCODhFMzI0M0Q1QjRGMUFEQTNDRTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLz5n3By5vBVA5tIwegMAN2TXY D3DwBV/RTj7sbaRlxYvohYNzJdSZelV256UB8C0pE67tJDg81RpSKSd2dy4cDW4O 9y3DLAZcS5i2MplXryF2FjXbsWBBbeyn4cgrKZJ3BZST+lHqWauiH95AywQOtkvT yN//h9IiRAKsLs7AnZzg3+rxtcgxZXvR6zOJS8UCdSI5J78y+FN8VI2hDzZxA/+p ZsH9wIfXOLorll7pYSfvB4CfJOooGuyjzF2sDwYgAXfEcTflUVbKFQ9Ohy8Kz6c4 DfswyTXP83s9ocV9cyTieOyIbGx/i9iZEdRnHbwjmmWM6821Xhs/TAo/PjgTAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU2ocrTyb0d17BC4jjJD1bTxraPOcwHwYDVR0j BBgwFoAUAsuZPpWFpT/GtA2nYqc+soIb9u0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRFI4R1E1QlVkQkg0a3FhQUNjWllRYmpuVUVSS2dQWUNrMk5KaTdKNEtM NlovMS8wMkNCOTkzRTk1ODVBNTNGQzZCNDBEQTc2MkE3M0VCMjgyMUJGNkVELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAyQ0I5OTNFOTU4NUE1M0ZD NkI0MERBNzYyQTczRUIyODIxQkY2RUQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RFI4R1E1QlVkQkg0a3FhQUNjWllRYmpuVUVSS2dQWUNrMk5KaTdKNEtMNlovMS8w MkNCOTkzRTk1ODVBNTNGQzZCNDBEQTc2MkE3M0VCMjgyMUJGNkVELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEArSWteQiWBaoIvnbkoI1ytWsukdvPRhzLTwM5v+0LrPSe1I8z1WC1raC/QgYm w2HRLXNOOsvBwh8doYz3xbKSfSQcyuJgqgrrCWU3j5rHy9aC7JBu8inHXICAXcu9 TGUkdu33ZzB7bxhXp2JQcQ2xEs6HgP4za8i3kEO74Y+1TdGWw1Fe7uJOB/ivfaHg YzejEPuottWBRk3kUD3cK4dnFiNljayb04qHeUl0JIzzB3FSTsPRgJpKh+Gfv2Xl eVzbe2e8LYqKGjzgJnmlRjBYeqLT4NX/IbaXgCVTwKNVbxg5Tl1byGRtnNJIz+Sg cSrooZpYaBkyaZsKGRne9Nv9sg== -----END CERTIFICATE-----Generated at Fri Mar 27 02:17:50 2026 by rpki-client