$ rpki-client -vvf rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/0/2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3.mft File: 2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3.mft (raw, json) Hash identifier: /du7n58Z8HFYVVG8oZIr7lXiXB2dLbxuISlKFZeAi4M= Subject key identifier: 35:7D:F2:D1:4F:E7:ED:CC:8F:8B:28:5D:28:9A:CD:21:83:B2:7F:09 Authority key identifier: 2D:D8:1B:37:1E:8A:AF:8C:14:E2:38:88:DF:FC:A2:64:2F:8B:E6:A3 Certificate issuer: /CN=2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3 Certificate serial: 1198CAE556DF7202F12E3D1204CFDBAFD9A88BD0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3.cer Subject info access: rsync://rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/0/2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3.mft Manifest number: FC Signing time: Wed 13 May 2026 14:41:46 +0000 Manifest this update: Wed 13 May 2026 14:36:46 +0000 Manifest next update: Thu 14 May 2026 17:15:46 +0000 Files and hashes: 1: 2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3.crl (hash: hTUzHXjOK5PUEd6VjLQIJ/3SF5lZVcUeG9hPdlERWFw=) 2: 323830343a363838383a3a2f33322d3438203d3e20323639363939.roa (hash: Xkr7jReV0o/ET5S91WJGuF4oGyDDTzF21wF7Ks/zLrQ=) 3: 34352e3139312e3235322e302f32322d3234203d3e20323639363939.roa (hash: PSjadbPkGEhWlKbiP6CASwLEasYdw97STRMCWGmPs2g=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/0/2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3.crl rsync://rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/0/2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 14 May 2026 17:15:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:98:ca:e5:56:df:72:02:f1:2e:3d:12:04:cf:db:af:d9:a8:8b:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3 Validity Not Before: May 13 14:36:46 2026 GMT Not After : May 14 17:15:46 2026 GMT Subject: CN=357DF2D14FE7EDCC8F8B285D289ACD2183B27F09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:10:dc:56:25:1b:8b:a8:a8:e8:4a:2a:50:5b: 3b:4b:ab:ea:d3:9b:68:7b:5d:b1:c2:aa:45:68:f4: f3:b0:74:c2:be:dc:0f:08:3d:2e:6e:8f:de:06:01: b9:1d:63:0e:b1:a8:2c:6c:2f:f5:9d:84:e5:9e:70: fb:22:89:67:ed:e9:cb:80:dc:65:78:cc:fb:3f:32: 95:a2:04:98:6d:e6:35:9b:84:9d:db:fd:61:88:e1: bc:d1:10:7b:10:7b:92:d0:0f:ef:ec:89:4e:2c:cf: 75:a7:1c:9f:75:9a:2c:e7:d2:80:82:58:89:ce:f1: e4:70:40:6d:fa:10:05:16:6e:89:cb:6c:cd:3c:3e: f5:1e:b7:17:35:70:f4:47:50:ba:02:4a:33:04:98: 80:7c:fd:84:44:cb:98:e8:7d:94:b3:86:eb:d4:e1: 49:3b:f6:64:0e:d7:a1:a3:d8:7e:e1:3c:76:1f:3a: 27:14:37:ed:1d:f7:41:4b:3c:33:bb:46:a8:47:45: e5:06:56:f9:d1:a6:ec:b1:f8:81:4b:3b:b1:de:60: 11:23:21:8b:39:c0:02:ca:2f:20:53:3b:4d:d9:38: f3:bb:de:16:6f:d1:37:ba:b5:70:91:da:54:61:5f: c7:68:f7:23:1d:95:91:a1:62:33:46:ed:4a:ca:39: a1:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:7D:F2:D1:4F:E7:ED:CC:8F:8B:28:5D:28:9A:CD:21:83:B2:7F:09 X509v3 Authority Key Identifier: keyid:2D:D8:1B:37:1E:8A:AF:8C:14:E2:38:88:DF:FC:A2:64:2F:8B:E6:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/0/2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/0/2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:11:b6:52:7c:b7:6e:02:be:58:a6:4a:cd:92:2c:84:d3:2a: 4d:26:5c:fd:c5:a6:ba:2f:cb:de:90:2e:76:f0:13:e3:b0:cd: 8c:33:56:7e:50:60:3b:d4:76:28:76:19:b7:e0:53:61:2f:80: 64:fd:36:44:c1:f2:b1:7a:9c:1a:83:59:2e:d5:73:89:f8:cf: e7:5d:69:29:ab:d8:3a:80:10:b9:ea:de:ea:43:02:c1:ea:72: 31:8b:11:40:98:f6:17:e9:ba:e3:95:1a:cf:5b:8d:df:25:6d: e3:9f:e8:9e:95:49:5c:eb:95:e4:10:7b:ae:2d:ea:ff:57:dc: c6:a1:a7:7b:b6:40:c6:0c:42:95:bc:2a:61:b8:1a:98:83:51: 7e:62:d8:1e:63:75:99:e5:40:59:ea:1f:fd:20:09:f6:fd:55: ab:8a:34:ef:e6:7d:02:06:a3:91:06:78:a0:67:95:a4:88:de: 87:33:8a:09:7f:cf:18:ff:3a:db:d0:67:84:e7:dc:44:f8:22: cb:8a:71:19:d0:9f:ff:6d:a7:09:fa:46:34:3d:92:d9:b6:95: df:63:2c:9c:40:75:ce:f2:b0:80:b2:d0:05:b5:37:6b:2e:6a: f7:4d:59:b3:7c:89:27:a1:ec:cc:f5:f1:77:eb:a0:fd:c9:92: 63:58:38:0a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUEZjK5VbfcgLxLj0SBM/br9moi9AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkREODFCMzcxRThBQUY4QzE0RTIzODg4REZGQ0EyNjQy RjhCRTZBMzAeFw0yNjA1MTMxNDM2NDZaFw0yNjA1MTQxNzE1NDZaMDMxMTAvBgNV BAMTKDM1N0RGMkQxNEZFN0VEQ0M4RjhCMjg1RDI4OUFDRDIxODNCMjdGMDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8ENxWJRuLqKjoSipQWztLq+rT m2h7XbHCqkVo9POwdMK+3A8IPS5uj94GAbkdYw6xqCxsL/WdhOWecPsiiWft6cuA 3GV4zPs/MpWiBJht5jWbhJ3b/WGI4bzREHsQe5LQD+/siU4sz3WnHJ91mizn0oCC WInO8eRwQG36EAUWbonLbM08PvUetxc1cPRHULoCSjMEmIB8/YREy5jofZSzhuvU 4Uk79mQO16Gj2H7hPHYfOicUN+0d90FLPDO7RqhHReUGVvnRpuyx+IFLO7HeYBEj IYs5wALKLyBTO03ZOPO73hZv0Te6tXCR2lRhX8do9yMdlZGhYjNG7UrKOaHdAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUNX3y0U/n7cyPiyhdKJrNIYOyfwkwHwYDVR0j BBgwFoAULdgbNx6Kr4wU4jiI3/yiZC+L5qMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRGczM21Mb2pGSnRvMWVOZUYxOXRCTW1DcFFTTDlZYWRDbUU4QTVScWtS YnYvMC8yREQ4MUIzNzFFOEFBRjhDMTRFMjM4ODhERkZDQTI2NDJGOEJFNkEzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJERDgxQjM3MUU4QUFGOEMx NEUyMzg4OERGRkNBMjY0MkY4QkU2QTMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RGczM21Mb2pGSnRvMWVOZUYxOXRCTW1DcFFTTDlZYWRDbUU4QTVScWtSYnYvMC8y REQ4MUIzNzFFOEFBRjhDMTRFMjM4ODhERkZDQTI2NDJGOEJFNkEzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXhG2Uny3bgK+WKZKzZIshNMqTSZc/cWmui/L3pAudvAT47DNjDNWflBgO9R2 KHYZt+BTYS+AZP02RMHysXqcGoNZLtVzifjP511pKavYOoAQuere6kMCwepyMYsR QJj2F+m645Uaz1uN3yVt45/onpVJXOuV5BB7ri3q/1fcxqGne7ZAxgxClbwqYbga mINRfmLYHmN1meVAWeof/SAJ9v1Vq4o07+Z9AgajkQZ4oGeVpIjehzOKCX/PGP86 29BnhOfcRPgiy4pxGdCf/22nCfpGND2S2baV32MsnEB1zvKwgLLQBbU3ay5q901Z s3yJJ6HszPXxd+ug/cmSY1g4Cg== -----END CERTIFICATE-----Generated at Wed May 13 16:38:12 2026 by rpki-client