$ rpki-client -vvf rpki-repo.registro.br/repo/DYy4aJMPvzackkLHg4k9oHHHZ7gjnErkQPJUasvp6anN/1/8AD497903AB3566443C9C794694A61EFE427FA7A.mft File: 8AD497903AB3566443C9C794694A61EFE427FA7A.mft (raw, json) Hash identifier: 2EZywgUfO81KQv4+W900sn8OmLrasuss53iOCV0yspg= Subject key identifier: 34:FB:3C:C8:E6:8C:52:92:CE:85:E2:7E:49:2F:2C:D6:6E:78:E2:4A Authority key identifier: 8A:D4:97:90:3A:B3:56:64:43:C9:C7:94:69:4A:61:EF:E4:27:FA:7A Certificate issuer: /CN=8AD497903AB3566443C9C794694A61EFE427FA7A Certificate serial: ECAEB2CFAF7F65B415D81E919CE34511F37AA5 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AD497903AB3566443C9C794694A61EFE427FA7A.cer Subject info access: rsync://rpki-repo.registro.br/repo/DYy4aJMPvzackkLHg4k9oHHHZ7gjnErkQPJUasvp6anN/1/8AD497903AB3566443C9C794694A61EFE427FA7A.mft Manifest number: 03C6 Signing time: Thu 26 Mar 2026 03:12:05 +0000 Manifest this update: Thu 26 Mar 2026 03:07:05 +0000 Manifest next update: Fri 27 Mar 2026 04:24:05 +0000 Files and hashes: 1: 323830343a383630343a3a2f33332d3333203d3e20323732363134.roa (hash: xAJr0E9r4TKMxFOmg5cmoGsA01fiIOH+qeMsQLuKev4=) 2: 323830343a383630343a383030303a3a2f33332d3333203d3e20323732363134.roa (hash: udfpslgXWllHlVhUhwYULsf1Bac3lsTLTBZvpUx96iA=) 3: 323830343a383630343a3a2f33322d3332203d3e20323732363134.roa (hash: vZGx2lypgvST/TN3BIHEMwmdhDBKDrZm/OU2px4pQ/U=) 4: 8AD497903AB3566443C9C794694A61EFE427FA7A.crl (hash: Nb5Vn2PwRmfB7U55HVI01E1xn9plB3HEPlsiqrLfUHA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DYy4aJMPvzackkLHg4k9oHHHZ7gjnErkQPJUasvp6anN/1/8AD497903AB3566443C9C794694A61EFE427FA7A.crl rsync://rpki-repo.registro.br/repo/DYy4aJMPvzackkLHg4k9oHHHZ7gjnErkQPJUasvp6anN/1/8AD497903AB3566443C9C794694A61EFE427FA7A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AD497903AB3566443C9C794694A61EFE427FA7A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 27 Mar 2026 04:24:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: ec:ae:b2:cf:af:7f:65:b4:15:d8:1e:91:9c:e3:45:11:f3:7a:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AD497903AB3566443C9C794694A61EFE427FA7A Validity Not Before: Mar 26 03:07:05 2026 GMT Not After : Mar 27 04:24:05 2026 GMT Subject: CN=34FB3CC8E68C5292CE85E27E492F2CD66E78E24A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:d2:42:b6:cd:3b:a8:52:fe:fe:4f:87:44:1b: f8:0e:26:60:32:fd:73:db:8d:72:02:42:03:c3:da: e1:71:99:0e:dc:40:2c:0d:5f:63:d0:90:0b:78:3c: 71:17:4d:e5:96:a2:07:5d:9f:8c:34:b3:cd:64:c9: 7a:5c:25:1f:43:b3:60:a5:60:89:cf:4d:05:05:46: 16:b5:ba:5b:c5:5d:63:41:c8:44:c7:96:3c:f9:01: 75:51:47:5a:4b:67:83:e6:8a:dd:77:41:fe:dc:61: d4:00:77:bf:df:6c:75:8b:46:5c:56:fe:1e:e6:1c: 68:a8:d0:a8:26:a5:53:a5:e3:60:6e:5f:ce:eb:fc: 09:7e:75:b8:c7:06:d2:37:83:52:b1:29:1e:f5:02: ce:34:d7:a8:35:8c:c8:44:ae:19:4e:5a:71:3c:65: 8c:4e:8a:b0:23:6b:7a:6a:ce:30:b3:89:ed:41:cb: ac:a4:79:16:ef:84:3c:5e:ef:cb:47:b3:ea:7e:7f: 88:c1:42:a6:54:aa:40:74:78:1a:8d:bd:43:28:4d: 00:1e:9b:74:be:0f:e2:6f:35:0c:db:cd:b0:39:ae: 8b:59:85:4d:0a:e6:b7:1a:bb:c2:c0:10:85:f2:c0: e6:a4:24:b4:89:d3:8c:6f:4b:65:46:0e:5c:f8:37: e7:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:FB:3C:C8:E6:8C:52:92:CE:85:E2:7E:49:2F:2C:D6:6E:78:E2:4A X509v3 Authority Key Identifier: keyid:8A:D4:97:90:3A:B3:56:64:43:C9:C7:94:69:4A:61:EF:E4:27:FA:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DYy4aJMPvzackkLHg4k9oHHHZ7gjnErkQPJUasvp6anN/1/8AD497903AB3566443C9C794694A61EFE427FA7A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AD497903AB3566443C9C794694A61EFE427FA7A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DYy4aJMPvzackkLHg4k9oHHHZ7gjnErkQPJUasvp6anN/1/8AD497903AB3566443C9C794694A61EFE427FA7A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:08:1e:12:17:12:ad:60:e7:b5:7d:67:c6:f6:39:7c:60:58: 25:ec:2b:3c:43:38:05:b4:c1:b9:46:d9:39:cd:5a:e8:aa:fc: 8b:d2:3f:ba:7b:fd:87:3e:8d:60:83:39:50:06:50:bf:1e:21: 98:25:57:9f:2f:8c:e2:44:9b:78:53:42:86:92:c3:46:be:f2: 34:e8:6f:f1:c2:88:a3:4b:74:db:a5:98:91:31:73:08:ed:5a: 9b:af:df:bd:a9:44:b4:da:6d:8c:df:12:8f:71:01:1a:12:5d: 4a:c4:58:e7:df:01:99:6a:d3:7f:29:73:e4:0f:55:76:68:ef: e6:c1:dc:2f:8e:e8:4d:e5:9c:0c:a2:15:bd:41:d0:9d:f0:a2: e4:24:c8:e8:50:df:a3:29:ed:28:dd:72:ee:ba:51:34:6a:70: 24:d2:0c:5f:4d:ed:d2:9e:41:af:17:7b:c1:a4:5f:60:66:15: ff:f1:0a:85:e5:66:80:ec:ca:f1:a0:a5:ea:4b:a3:78:6c:5f: d0:6a:e2:ad:f3:c5:e8:28:de:3c:14:16:c9:77:ed:6d:37:d1: 68:2d:42:b3:93:aa:d6:55:74:0d:a0:a8:43:e8:46:66:1a:c6: 87:fb:a5:85:73:4d:b6:90:a3:22:0f:df:bd:82:09:7d:24:c6: 05:74:31:1a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUAOyuss+vf2W0FdgekZzjRRHzeqUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEFENDk3OTAzQUIzNTY2NDQzQzlDNzk0Njk0QTYxRUZF NDI3RkE3QTAeFw0yNjAzMjYwMzA3MDVaFw0yNjAzMjcwNDI0MDVaMDMxMTAvBgNV BAMTKDM0RkIzQ0M4RTY4QzUyOTJDRTg1RTI3RTQ5MkYyQ0Q2NkU3OEUyNEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ0kK2zTuoUv7+T4dEG/gOJmAy /XPbjXICQgPD2uFxmQ7cQCwNX2PQkAt4PHEXTeWWogddn4w0s81kyXpcJR9Ds2Cl YInPTQUFRha1ulvFXWNByETHljz5AXVRR1pLZ4Pmit13Qf7cYdQAd7/fbHWLRlxW /h7mHGio0KgmpVOl42BuX87r/Al+dbjHBtI3g1KxKR71As4016g1jMhErhlOWnE8 ZYxOirAja3pqzjCzie1By6ykeRbvhDxe78tHs+p+f4jBQqZUqkB0eBqNvUMoTQAe m3S+D+JvNQzbzbA5rotZhU0K5rcau8LAEIXywOakJLSJ04xvS2VGDlz4N+ebAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUNPs8yOaMUpLOheJ+SS8s1m544kowHwYDVR0j BBgwFoAUitSXkDqzVmRDyceUaUph7+Qn+nowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRFl5NGFKTVB2emFja2tMSGc0azlvSEhIWjdnam5FcmtRUEpVYXN2cDZh bk4vMS84QUQ0OTc5MDNBQjM1NjY0NDNDOUM3OTQ2OTRBNjFFRkU0MjdGQTdBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhBRDQ5NzkwM0FCMzU2NjQ0 M0M5Qzc5NDY5NEE2MUVGRTQyN0ZBN0EuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RFl5NGFKTVB2emFja2tMSGc0azlvSEhIWjdnam5FcmtRUEpVYXN2cDZhbk4vMS84 QUQ0OTc5MDNBQjM1NjY0NDNDOUM3OTQ2OTRBNjFFRkU0MjdGQTdBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHQgeEhcSrWDntX1nxvY5fGBYJewrPEM4BbTBuUbZOc1a6Kr8i9I/unv9hz6N YIM5UAZQvx4hmCVXny+M4kSbeFNChpLDRr7yNOhv8cKIo0t026WYkTFzCO1am6/f valEtNptjN8Sj3EBGhJdSsRY598BmWrTfylz5A9Vdmjv5sHcL47oTeWcDKIVvUHQ nfCi5CTI6FDfoyntKN1y7rpRNGpwJNIMX03t0p5Brxd7waRfYGYV//EKheVmgOzK 8aCl6kujeGxf0GrirfPF6CjePBQWyXftbTfRaC1Cs5Oq1lV0DaCoQ+hGZhrGh/ul hXNNtpCjIg/fvYIJfSTGBXQxGg== -----END CERTIFICATE-----Generated at Thu Mar 26 21:23:40 2026 by rpki-client