$ rpki-client -vvf rpki-repo.registro.br/repo/DqzB76RAGpcQfvpL8JbTJJPYsyAe6UpxRmhSc4EJUZnw/0/2D9C53D64D9C12AB17ACA86EDB3E8D348B072750.mft File: 2D9C53D64D9C12AB17ACA86EDB3E8D348B072750.mft (raw, json) Hash identifier: zHWQnYGnZMiXFaz6itvrdhAcHvZZvvvLpJivbp1l+xw= Subject key identifier: A8:65:15:88:BC:A1:61:1D:40:88:32:99:75:BB:51:7C:41:25:EE:97 Authority key identifier: 2D:9C:53:D6:4D:9C:12:AB:17:AC:A8:6E:DB:3E:8D:34:8B:07:27:50 Certificate issuer: /CN=2D9C53D64D9C12AB17ACA86EDB3E8D348B072750 Certificate serial: 35430FE183C2199E4BA2875AD75A4091122B565E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D9C53D64D9C12AB17ACA86EDB3E8D348B072750.cer Subject info access: rsync://rpki-repo.registro.br/repo/DqzB76RAGpcQfvpL8JbTJJPYsyAe6UpxRmhSc4EJUZnw/0/2D9C53D64D9C12AB17ACA86EDB3E8D348B072750.mft Manifest number: 01BA Signing time: Thu 26 Mar 2026 08:15:25 +0000 Manifest this update: Thu 26 Mar 2026 08:10:25 +0000 Manifest next update: Fri 27 Mar 2026 12:12:25 +0000 Files and hashes: 1: 3137392e34322e3132302e302f32322d3234203d3e20323731313930.roa (hash: kyzXcvYp1NW+2HlpwYQkauZYxTf38YmDeeMS4nDj4fA=) 2: 323830343a373761343a3a2f33322d3332203d3e20323731313930.roa (hash: qsRafcjJj+s2kDsDgJnWZ0Q5nBOrLVcx6L+RmAUGULI=) 3: 2D9C53D64D9C12AB17ACA86EDB3E8D348B072750.crl (hash: zq5+WoiEYEEfAn7OCfXZwxZc9dI+OhcutXSg5NosZ+4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DqzB76RAGpcQfvpL8JbTJJPYsyAe6UpxRmhSc4EJUZnw/0/2D9C53D64D9C12AB17ACA86EDB3E8D348B072750.crl rsync://rpki-repo.registro.br/repo/DqzB76RAGpcQfvpL8JbTJJPYsyAe6UpxRmhSc4EJUZnw/0/2D9C53D64D9C12AB17ACA86EDB3E8D348B072750.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D9C53D64D9C12AB17ACA86EDB3E8D348B072750.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 27 Mar 2026 12:12:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:43:0f:e1:83:c2:19:9e:4b:a2:87:5a:d7:5a:40:91:12:2b:56:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D9C53D64D9C12AB17ACA86EDB3E8D348B072750 Validity Not Before: Mar 26 08:10:25 2026 GMT Not After : Mar 27 12:12:25 2026 GMT Subject: CN=A8651588BCA1611D4088329975BB517C4125EE97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:06:20:46:8b:08:56:6c:81:ae:08:95:06:6b: 1e:15:b8:78:f2:88:f9:67:01:d1:e1:9f:dd:a1:46: bc:60:f8:31:ae:24:22:f2:ac:c6:26:70:5f:97:b9: 95:2d:f0:b1:82:5f:b1:c1:81:10:4a:13:63:46:ba: 77:ff:b5:c0:ec:fc:85:4b:e3:24:45:4a:14:70:cc: 33:82:19:60:34:6a:94:ea:5a:49:3b:eb:3b:ec:57: af:88:55:b6:2e:61:83:e7:56:31:43:d3:0a:58:bd: d4:f1:18:07:c2:cb:6d:9d:8a:33:95:3f:5a:f1:47: e8:e5:26:95:ad:99:67:e4:8f:65:c9:c5:cd:c7:4b: 8f:56:ce:d9:b5:25:bf:c3:83:79:74:89:f7:da:23: 18:fd:0b:30:97:ca:76:55:16:43:48:a3:e1:67:a9: 28:b0:28:c8:71:f9:2c:28:23:6b:7c:7c:e7:39:b1: 1c:bf:74:1c:c6:43:3a:61:ca:a4:db:e3:72:12:bc: 5a:15:7b:e3:a2:f0:79:c5:ff:f9:44:34:4c:26:57: d6:ac:c3:3f:da:85:ac:9b:24:be:b7:bc:41:c9:52: 9b:d7:f5:bb:9b:d2:08:1b:d4:67:67:19:ff:71:34: e4:20:e7:e5:a4:19:4f:03:0d:4c:0d:2f:7a:7f:0d: c6:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:65:15:88:BC:A1:61:1D:40:88:32:99:75:BB:51:7C:41:25:EE:97 X509v3 Authority Key Identifier: keyid:2D:9C:53:D6:4D:9C:12:AB:17:AC:A8:6E:DB:3E:8D:34:8B:07:27:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DqzB76RAGpcQfvpL8JbTJJPYsyAe6UpxRmhSc4EJUZnw/0/2D9C53D64D9C12AB17ACA86EDB3E8D348B072750.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D9C53D64D9C12AB17ACA86EDB3E8D348B072750.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DqzB76RAGpcQfvpL8JbTJJPYsyAe6UpxRmhSc4EJUZnw/0/2D9C53D64D9C12AB17ACA86EDB3E8D348B072750.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:60:05:a2:d8:05:dd:52:bc:9b:a9:4b:7a:0c:03:c4:c9:89: 02:93:b0:66:dd:86:e1:cb:05:7c:45:e6:6c:22:a6:bf:f9:39: 56:2a:2e:2f:07:1d:45:f0:eb:c3:ba:95:a6:ce:d1:11:ed:49: 2c:09:48:c6:d8:58:98:52:94:4e:7f:4e:20:36:8a:f7:4c:f9: 0b:dd:80:4d:ff:c8:f6:cc:c5:5f:7f:12:ea:a0:db:a5:49:13: b5:1e:8f:e6:df:b8:88:a9:ab:ff:a6:48:d3:aa:90:66:ec:cc: a0:89:d8:68:82:fb:cf:23:2a:17:31:45:01:f2:4d:4e:74:13: 48:72:b7:df:f9:bd:8d:d9:9a:6c:fe:5b:05:48:02:1f:25:8b: 4f:ae:89:7a:c2:98:54:1c:1e:3d:01:d5:18:1b:3f:d3:bd:01: 62:91:d7:9d:4c:d0:ea:3d:3a:06:d3:3a:fe:c5:66:a9:2c:0a: a8:8d:b4:49:ca:4e:fb:d4:76:1d:80:7d:b7:51:bc:8a:62:f3: 72:f1:47:f1:a8:52:a4:7c:e9:5a:06:31:ff:9e:cf:bf:7f:8f: cb:43:2f:35:5e:9c:0b:17:93:e6:37:8f:9a:06:a0:0a:46:45: ed:d5:11:e2:5b:06:76:11:43:c7:6d:67:92:17:12:d0:ec:9c: fa:4f:b1:ee -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUNUMP4YPCGZ5Looda11pAkRIrVl4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQ5QzUzRDY0RDlDMTJBQjE3QUNBODZFREIzRThEMzQ4 QjA3Mjc1MDAeFw0yNjAzMjYwODEwMjVaFw0yNjAzMjcxMjEyMjVaMDMxMTAvBgNV BAMTKEE4NjUxNTg4QkNBMTYxMUQ0MDg4MzI5OTc1QkI1MTdDNDEyNUVFOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxBiBGiwhWbIGuCJUGax4VuHjy iPlnAdHhn92hRrxg+DGuJCLyrMYmcF+XuZUt8LGCX7HBgRBKE2NGunf/tcDs/IVL 4yRFShRwzDOCGWA0apTqWkk76zvsV6+IVbYuYYPnVjFD0wpYvdTxGAfCy22dijOV P1rxR+jlJpWtmWfkj2XJxc3HS49Wztm1Jb/Dg3l0iffaIxj9CzCXynZVFkNIo+Fn qSiwKMhx+SwoI2t8fOc5sRy/dBzGQzphyqTb43ISvFoVe+Oi8HnF//lENEwmV9as wz/ahaybJL63vEHJUpvX9bub0ggb1GdnGf9xNOQg5+WkGU8DDUwNL3p/DcYLAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUqGUViLyhYR1AiDKZdbtRfEEl7pcwHwYDVR0j BBgwFoAULZxT1k2cEqsXrKhu2z6NNIsHJ1AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRHF6Qjc2UkFHcGNRZnZwTDhKYlRKSlBZc3lBZTZVcHhSbWhTYzRFSlVa bncvMC8yRDlDNTNENjREOUMxMkFCMTdBQ0E4NkVEQjNFOEQzNDhCMDcyNzUwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJEOUM1M0Q2NEQ5QzEyQUIx N0FDQTg2RURCM0U4RDM0OEIwNzI3NTAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RHF6Qjc2UkFHcGNRZnZwTDhKYlRKSlBZc3lBZTZVcHhSbWhTYzRFSlVabncvMC8y RDlDNTNENjREOUMxMkFCMTdBQ0E4NkVEQjNFOEQzNDhCMDcyNzUwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnmAFotgF3VK8m6lLegwDxMmJApOwZt2G4csFfEXmbCKmv/k5ViouLwcdRfDr w7qVps7REe1JLAlIxthYmFKUTn9OIDaK90z5C92ATf/I9szFX38S6qDbpUkTtR6P 5t+4iKmr/6ZI06qQZuzMoInYaIL7zyMqFzFFAfJNTnQTSHK33/m9jdmabP5bBUgC HyWLT66JesKYVBwePQHVGBs/070BYpHXnUzQ6j06BtM6/sVmqSwKqI20ScpO+9R2 HYB9t1G8imLzcvFH8ahSpHzpWgYx/57Pv3+Py0MvNV6cCxeT5jePmgagCkZF7dUR 4lsGdhFDx21nkhcS0Oyc+k+x7g== -----END CERTIFICATE-----Generated at Thu Mar 26 23:27:58 2026 by rpki-client