$ rpki-client -vvf rpki-repo.registro.br/repo/DhUX35ZMUCbRhYuECLQuQiyiqCX4z9LvRirJw3bBUwyX/0/DD6B33CBA62AECBCA658B13219B33B7123A50B6A.mft File: DD6B33CBA62AECBCA658B13219B33B7123A50B6A.mft (raw, json) Hash identifier: mm+5iYL30tB9zgGc3SZUAIXiAWtOMrGM3p9aH+ov/Ps= Subject key identifier: B1:7D:4A:3F:75:58:16:62:18:B3:81:B9:9C:3F:DB:4A:04:3E:AB:EA Authority key identifier: DD:6B:33:CB:A6:2A:EC:BC:A6:58:B1:32:19:B3:3B:71:23:A5:0B:6A Certificate issuer: /CN=DD6B33CBA62AECBCA658B13219B33B7123A50B6A Certificate serial: 7BEE134F12FBB45B1F3CA3149AEB759CB8132B21 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD6B33CBA62AECBCA658B13219B33B7123A50B6A.cer Subject info access: rsync://rpki-repo.registro.br/repo/DhUX35ZMUCbRhYuECLQuQiyiqCX4z9LvRirJw3bBUwyX/0/DD6B33CBA62AECBCA658B13219B33B7123A50B6A.mft Manifest number: 13 Signing time: Wed 25 Mar 2026 14:21:25 +0000 Manifest this update: Wed 25 Mar 2026 14:16:25 +0000 Manifest next update: Thu 26 Mar 2026 16:59:25 +0000 Files and hashes: 1: 323830343a363434303a3a2f33322d313238203d3e20323639343136.roa (hash: N4/0Bk6keezly5hZQiAAidEdjGuA5AahcZEJsIXxS7Y=) 2: DD6B33CBA62AECBCA658B13219B33B7123A50B6A.crl (hash: n/9iMTDE43iEeXMlyFeipK7OCcj5QncisTPyGQkXRQc=) 3: 34352e3138362e38302e302f32322d3332203d3e20323639343136.roa (hash: bGtbKlMSOgf5UkXvr9kLQzYSDl/PcrgmPTzrDcCjxrc=) 4: 3137372e38352e3139302e302f32332d3332203d3e20323639343136.roa (hash: janm0h2Kiyfj1xvg78w8miqY3dq3BVVTJWId42dp4LY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DhUX35ZMUCbRhYuECLQuQiyiqCX4z9LvRirJw3bBUwyX/0/DD6B33CBA62AECBCA658B13219B33B7123A50B6A.crl rsync://rpki-repo.registro.br/repo/DhUX35ZMUCbRhYuECLQuQiyiqCX4z9LvRirJw3bBUwyX/0/DD6B33CBA62AECBCA658B13219B33B7123A50B6A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD6B33CBA62AECBCA658B13219B33B7123A50B6A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 26 Mar 2026 16:59:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:ee:13:4f:12:fb:b4:5b:1f:3c:a3:14:9a:eb:75:9c:b8:13:2b:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD6B33CBA62AECBCA658B13219B33B7123A50B6A Validity Not Before: Mar 25 14:16:25 2026 GMT Not After : Mar 26 16:59:25 2026 GMT Subject: CN=B17D4A3F7558166218B381B99C3FDB4A043EABEA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:0d:70:20:41:5a:5d:81:2e:a4:31:64:a6:bc: c1:e3:1d:18:8f:cd:f2:d3:c7:eb:72:c3:d6:47:46: 0c:df:e2:d3:66:a6:e4:d3:97:68:58:44:68:4d:64: 07:67:aa:ce:c6:d7:bf:57:5a:cb:a2:ed:86:cc:a0: ea:4f:d2:1d:98:16:66:da:c8:d9:ae:6c:fe:38:79: bd:5e:1e:7b:8b:2f:c2:72:7a:f5:de:03:47:7a:1f: 48:74:a2:72:7a:76:39:10:ac:fd:58:7a:9e:3d:1f: 3e:58:65:6c:2d:ac:ce:c1:8a:b1:b3:79:bf:ca:ae: 4b:86:45:bf:e6:66:b0:3e:8e:0c:a9:77:c2:56:1f: 2f:cc:4c:5b:16:87:81:c3:87:80:c3:13:df:3b:29: d9:84:80:d4:55:81:43:96:ad:42:b6:a3:47:87:23: 75:ee:93:b1:f6:37:7a:39:30:cd:69:b7:f9:a5:d6: bc:db:b2:e9:0e:5b:b0:98:8c:71:c9:72:6f:5d:ce: 09:64:ce:7c:4e:dc:52:84:48:36:d4:ef:9c:bf:b0: 82:09:c8:72:30:83:60:6a:c4:ba:21:6b:9c:19:ca: c2:6a:8f:21:21:eb:01:5e:ed:bf:93:71:c0:2f:27: e8:85:06:0a:4a:c9:fd:ce:f9:c4:71:5e:71:5b:3b: 42:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:7D:4A:3F:75:58:16:62:18:B3:81:B9:9C:3F:DB:4A:04:3E:AB:EA X509v3 Authority Key Identifier: keyid:DD:6B:33:CB:A6:2A:EC:BC:A6:58:B1:32:19:B3:3B:71:23:A5:0B:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DhUX35ZMUCbRhYuECLQuQiyiqCX4z9LvRirJw3bBUwyX/0/DD6B33CBA62AECBCA658B13219B33B7123A50B6A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD6B33CBA62AECBCA658B13219B33B7123A50B6A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DhUX35ZMUCbRhYuECLQuQiyiqCX4z9LvRirJw3bBUwyX/0/DD6B33CBA62AECBCA658B13219B33B7123A50B6A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:bf:64:70:a1:f0:4f:43:94:70:91:8c:4e:73:3a:3f:d3:f2: bc:cd:0f:ab:97:14:45:65:73:0f:40:36:e9:31:cc:8c:32:1d: bb:24:a5:42:fe:62:ed:9f:fe:49:a6:0d:e2:7e:33:aa:ee:a0: bc:cd:09:ac:57:fa:ed:a8:91:a2:e1:b0:b4:ca:58:ef:20:9c: 36:79:f3:89:0c:98:a5:cf:c8:a6:7f:74:81:3c:73:7a:f7:06: 19:c6:dc:84:2f:2b:45:55:cb:f0:fa:2b:97:93:61:bf:61:85: 1f:d1:c0:bb:10:57:13:a1:8b:2c:72:16:cc:30:a9:bd:4a:4b: 1b:ef:41:33:27:b0:92:eb:e4:56:af:0d:71:26:77:7f:74:1b: a9:19:5b:a3:04:ae:e7:19:00:d2:97:fd:f3:e3:80:ec:ef:07: 54:d0:09:63:81:19:c7:15:51:da:89:4e:ce:1e:c5:9a:0e:9d: 37:22:77:68:32:0e:97:ce:3a:f2:28:e1:6d:11:0f:fa:fa:03: 8f:c8:81:7b:0f:86:cb:14:ed:28:d7:1c:ae:e5:4a:d7:48:69: 1c:2a:f3:ba:3a:3c:66:41:76:de:99:3a:31:31:03:b5:5f:b6: cf:7d:6e:6e:89:93:dd:c0:28:0b:37:5b:3b:d8:0f:29:88:41: 49:90:1d:20 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUe+4TTxL7tFsfPKMUmut1nLgTKyEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQ2QjMzQ0JBNjJBRUNCQ0E2NThCMTMyMTlCMzNCNzEy M0E1MEI2QTAeFw0yNjAzMjUxNDE2MjVaFw0yNjAzMjYxNjU5MjVaMDMxMTAvBgNV BAMTKEIxN0Q0QTNGNzU1ODE2NjIxOEIzODFCOTlDM0ZEQjRBMDQzRUFCRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgDXAgQVpdgS6kMWSmvMHjHRiP zfLTx+tyw9ZHRgzf4tNmpuTTl2hYRGhNZAdnqs7G179XWsui7YbMoOpP0h2YFmba yNmubP44eb1eHnuLL8JyevXeA0d6H0h0onJ6djkQrP1Yep49Hz5YZWwtrM7BirGz eb/KrkuGRb/mZrA+jgypd8JWHy/MTFsWh4HDh4DDE987KdmEgNRVgUOWrUK2o0eH I3Xuk7H2N3o5MM1pt/ml1rzbsukOW7CYjHHJcm9dzglkznxO3FKESDbU75y/sIIJ yHIwg2BqxLoha5wZysJqjyEh6wFe7b+TccAvJ+iFBgpKyf3O+cRxXnFbO0JDAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUsX1KP3VYFmIYs4G5nD/bSgQ+q+owHwYDVR0j BBgwFoAU3Wszy6Yq7LymWLEyGbM7cSOlC2owDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRGhVWDM1Wk1VQ2JSaFl1RUNMUXVRaXlpcUNYNHo5THZSaXJKdzNiQlV3 eVgvMC9ERDZCMzNDQkE2MkFFQ0JDQTY1OEIxMzIxOUIzM0I3MTIzQTUwQjZBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RENkIzM0NCQTYyQUVDQkNB NjU4QjEzMjE5QjMzQjcxMjNBNTBCNkEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RGhVWDM1Wk1VQ2JSaFl1RUNMUXVRaXlpcUNYNHo5THZSaXJKdzNiQlV3eVgvMC9E RDZCMzNDQkE2MkFFQ0JDQTY1OEIxMzIxOUIzM0I3MTIzQTUwQjZBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAor9kcKHwT0OUcJGMTnM6P9PyvM0Pq5cURWVzD0A26THMjDIduySlQv5i7Z/+ SaYN4n4zqu6gvM0JrFf67aiRouGwtMpY7yCcNnnziQyYpc/Ipn90gTxzevcGGcbc hC8rRVXL8Porl5Nhv2GFH9HAuxBXE6GLLHIWzDCpvUpLG+9BMyewkuvkVq8NcSZ3 f3QbqRlbowSu5xkA0pf98+OA7O8HVNAJY4EZxxVR2olOzh7Fmg6dNyJ3aDIOl846 8ijhbREP+voDj8iBew+GyxTtKNccruVK10hpHCrzujo8ZkF23pk6MTEDtV+2z31u bomT3cAoCzdbO9gPKYhBSZAdIA== -----END CERTIFICATE-----Generated at Thu Mar 26 01:22:18 2026 by rpki-client