$ rpki-client -vvf rpki-repo.registro.br/repo/DiedU9B7M6NxXr5xQhJdft17HNsjQS3dg6iUHrJZiVAv/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.mft File: D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.mft (raw, json) Hash identifier: JZH7mbVNCOHAIGkOTklCswudTknOfqI8y72hwSTbg88= Subject key identifier: A6:CB:B2:BD:9D:5B:7F:1A:20:84:B2:BC:63:EE:C9:8E:AE:1A:E9:06 Authority key identifier: D2:24:DF:F1:98:22:C5:B2:7C:7B:CC:16:BF:D8:BE:2A:38:4F:89:AA Certificate issuer: /CN=D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA Certificate serial: 3E0063019BD6ED55E04DA64D83FE5CD1286C978E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.cer Subject info access: rsync://rpki-repo.registro.br/repo/DiedU9B7M6NxXr5xQhJdft17HNsjQS3dg6iUHrJZiVAv/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.mft Manifest number: 03B2 Signing time: Wed 25 Mar 2026 17:10:46 +0000 Manifest this update: Wed 25 Mar 2026 17:05:46 +0000 Manifest next update: Thu 26 Mar 2026 17:38:46 +0000 Files and hashes: 1: D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.crl (hash: dvxh6KUApk1kpIEYBbnxhDZ74H3x8NiSe8/uKbHGO5g=) 2: 3136382e3139372e3230342e302f32322d3234203d3e203533313339.roa (hash: ySkyY3nq4rz0dNW8rF5gaWogxnEPCTvWUkX3gDlQytA=) 3: 323830343a333164343a3a2f33322d3438203d3e203533313339.roa (hash: cFt8LxF28+1rkiKt5ZFM/VhjfoGWCFQ6jBy7OAjx3bg=) 4: 3138372e3130392e38302e302f32302d3234203d3e203533313339.roa (hash: MXKjsbMHPRAw36TRxv0Iq9a292215IPlxvY87b1a0BA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DiedU9B7M6NxXr5xQhJdft17HNsjQS3dg6iUHrJZiVAv/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.crl rsync://rpki-repo.registro.br/repo/DiedU9B7M6NxXr5xQhJdft17HNsjQS3dg6iUHrJZiVAv/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 26 Mar 2026 17:38:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:00:63:01:9b:d6:ed:55:e0:4d:a6:4d:83:fe:5c:d1:28:6c:97:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA Validity Not Before: Mar 25 17:05:46 2026 GMT Not After : Mar 26 17:38:46 2026 GMT Subject: CN=A6CBB2BD9D5B7F1A2084B2BC63EEC98EAE1AE906 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:08:88:3f:70:d1:bd:40:13:df:d2:40:2f:20: a2:34:39:70:9d:88:63:d4:55:6d:56:5f:02:78:1d: 04:e4:26:18:27:72:be:89:da:6e:15:a4:dd:a0:4e: 80:ae:e6:ed:77:9b:5c:1d:3d:79:ac:7b:23:8f:38: 81:ba:91:5c:ad:d7:e3:4f:50:9a:0c:16:86:da:a0: ae:2d:fb:fc:d4:be:61:e3:94:63:3e:5f:73:0d:52: c7:e5:3b:3b:4d:c9:e5:7e:b5:97:ef:c1:b5:aa:29: e7:61:db:ee:4e:ed:65:fb:3f:06:12:69:f4:31:74: 2a:f5:02:60:4a:10:12:56:97:9b:68:84:d3:6f:9a: 30:89:93:c8:ff:54:a5:5d:80:32:6f:11:9e:40:4e: cd:15:4e:02:95:7a:a7:06:ad:fd:1f:57:05:61:46: 8f:20:cd:2e:72:a8:fa:8d:5c:61:b5:21:33:3b:ea: 81:8d:5a:6d:14:c8:c3:e1:2b:20:1f:6b:6e:b9:01: b4:68:12:9e:d2:43:7e:fa:6b:ef:5e:1b:18:12:fc: da:9c:fc:7e:3e:67:64:8d:ab:f5:b6:53:57:48:65: b9:c1:0c:b4:ae:76:7f:f4:31:12:c9:ed:1c:c7:71: fc:fd:6d:8e:e7:0a:b3:44:93:70:01:9c:c2:2e:d5: 65:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:CB:B2:BD:9D:5B:7F:1A:20:84:B2:BC:63:EE:C9:8E:AE:1A:E9:06 X509v3 Authority Key Identifier: keyid:D2:24:DF:F1:98:22:C5:B2:7C:7B:CC:16:BF:D8:BE:2A:38:4F:89:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DiedU9B7M6NxXr5xQhJdft17HNsjQS3dg6iUHrJZiVAv/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DiedU9B7M6NxXr5xQhJdft17HNsjQS3dg6iUHrJZiVAv/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:7b:df:5f:d0:79:be:ee:98:50:0f:82:4f:6d:28:85:4a:a5: 53:71:2c:45:d0:53:f9:69:df:13:e1:b7:68:00:36:b5:7c:c3: 42:39:37:c5:10:61:30:0e:8f:32:cc:a7:6b:c1:3a:e0:12:bd: 4a:26:99:08:28:17:59:d1:62:ca:47:7f:1d:97:16:b0:f2:06: aa:7f:08:37:6e:82:00:5c:a6:6b:d5:d4:0d:34:d7:9b:47:bb: 7c:af:bc:5a:0b:2a:69:7c:87:58:1e:5c:ce:be:3d:a0:47:b4: ac:83:08:c6:a1:30:04:03:f1:15:1b:e4:db:f3:11:64:04:08: e4:4a:6f:56:85:16:e1:3a:2e:df:3b:06:b8:02:21:a1:57:e9: c3:86:d5:5b:11:7c:4a:91:03:02:d9:01:25:22:9b:cd:4b:19: 96:b2:4d:e8:f5:3c:36:63:d7:43:bc:18:ee:91:a7:eb:84:cc: 05:07:31:de:5c:41:95:6c:0b:47:b1:ca:c6:a7:07:11:a0:eb: e2:de:3b:d6:5d:53:b6:2f:bb:09:69:28:75:16:e8:02:d3:f4: 71:bd:0a:7d:33:40:15:c8:a3:f8:73:3e:ca:db:a8:3c:9f:20: fe:fe:1c:e7:12:41:9f:cf:2d:b8:a8:7e:3c:03:72:77:8d:9d: f2:c7:5c:5b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUPgBjAZvW7VXgTaZNg/5c0Shsl44wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDIyNERGRjE5ODIyQzVCMjdDN0JDQzE2QkZEOEJFMkEz ODRGODlBQTAeFw0yNjAzMjUxNzA1NDZaFw0yNjAzMjYxNzM4NDZaMDMxMTAvBgNV BAMTKEE2Q0JCMkJEOUQ1QjdGMUEyMDg0QjJCQzYzRUVDOThFQUUxQUU5MDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCJCIg/cNG9QBPf0kAvIKI0OXCd iGPUVW1WXwJ4HQTkJhgncr6J2m4VpN2gToCu5u13m1wdPXmseyOPOIG6kVyt1+NP UJoMFobaoK4t+/zUvmHjlGM+X3MNUsflOztNyeV+tZfvwbWqKedh2+5O7WX7PwYS afQxdCr1AmBKEBJWl5tohNNvmjCJk8j/VKVdgDJvEZ5ATs0VTgKVeqcGrf0fVwVh Ro8gzS5yqPqNXGG1ITM76oGNWm0UyMPhKyAfa265AbRoEp7SQ376a+9eGxgS/Nqc /H4+Z2SNq/W2U1dIZbnBDLSudn/0MRLJ7RzHcfz9bY7nCrNEk3ABnMIu1WVPAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUpsuyvZ1bfxoghLK8Y+7Jjq4a6QYwHwYDVR0j BBgwFoAU0iTf8ZgixbJ8e8wWv9i+KjhPiaowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRGllZFU5QjdNNk54WHI1eFFoSmRmdDE3SE5zalFTM2RnNmlVSHJKWmlW QXYvMS9EMjI0REZGMTk4MjJDNUIyN0M3QkNDMTZCRkQ4QkUyQTM4NEY4OUFBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QyMjRERkYxOTgyMkM1QjI3 QzdCQ0MxNkJGRDhCRTJBMzg0Rjg5QUEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RGllZFU5QjdNNk54WHI1eFFoSmRmdDE3SE5zalFTM2RnNmlVSHJKWmlWQXYvMS9E MjI0REZGMTk4MjJDNUIyN0M3QkNDMTZCRkQ4QkUyQTM4NEY4OUFBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAL3vfX9B5vu6YUA+CT20ohUqlU3EsRdBT+WnfE+G3aAA2tXzDQjk3xRBhMA6P Msyna8E64BK9SiaZCCgXWdFiykd/HZcWsPIGqn8IN26CAFyma9XUDTTXm0e7fK+8 WgsqaXyHWB5czr49oEe0rIMIxqEwBAPxFRvk2/MRZAQI5EpvVoUW4Tou3zsGuAIh oVfpw4bVWxF8SpEDAtkBJSKbzUsZlrJN6PU8NmPXQ7wY7pGn64TMBQcx3lxBlWwL R7HKxqcHEaDr4t471l1Tti+7CWkodRboAtP0cb0KfTNAFcij+HM+ytuoPJ8g/v4c 5xJBn88tuKh+PANyd42d8sdcWw== -----END CERTIFICATE-----Generated at Thu Mar 26 03:00:40 2026 by rpki-client