$ rpki-client -vvf rpki-repo.registro.br/repo/G3p9tkchdAPvpJ9Soqyp9qZHGm9cS94LRa1H9gkxYLAS/2/22CBA337E0370365B681D563898357F37A7D4D97.mft File: 22CBA337E0370365B681D563898357F37A7D4D97.mft (raw, json) Hash identifier: fBNYs++8NH5N/aAtTW9/jtqMCj416y9fc2ITQc9COJ4= Subject key identifier: 26:E8:77:90:4E:C4:17:6B:31:8E:ED:F4:D3:11:DB:06:C6:8B:52:2B Authority key identifier: 22:CB:A3:37:E0:37:03:65:B6:81:D5:63:89:83:57:F3:7A:7D:4D:97 Certificate issuer: /CN=22CBA337E0370365B681D563898357F37A7D4D97 Certificate serial: 5D10067129E0783EF3AB6F7C6F1A5D9F43A0DCB7 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22CBA337E0370365B681D563898357F37A7D4D97.cer Subject info access: rsync://rpki-repo.registro.br/repo/G3p9tkchdAPvpJ9Soqyp9qZHGm9cS94LRa1H9gkxYLAS/2/22CBA337E0370365B681D563898357F37A7D4D97.mft Manifest number: 025E Signing time: Wed 25 Mar 2026 18:32:44 +0000 Manifest this update: Wed 25 Mar 2026 18:27:44 +0000 Manifest next update: Thu 26 Mar 2026 20:54:44 +0000 Files and hashes: 1: 3230302e3232352e3131322e302f32322d3332203d3e20323638323037.roa (hash: eI9fHZ3KLBcG6xXFiThpMiP1ThyI4F2F2i1mydfMToo=) 2: 22CBA337E0370365B681D563898357F37A7D4D97.crl (hash: S6CrZ0SqwG2P8hAkb5rEyjpvqzBDSB6idyFlu+ri53I=) 3: 34352e3233352e35322e302f32322d3332203d3e20323638323037.roa (hash: px7bKqzWCRjS/nhYLdDdhRyRozqA4RvYohgLi4LW0Hc=) 4: 323830343a346439383a3a2f33322d313238203d3e20323638323037.roa (hash: y7zKx4TsW0QghEIMCq7bJ5hTklvu2VN2EabupoYne2M=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/G3p9tkchdAPvpJ9Soqyp9qZHGm9cS94LRa1H9gkxYLAS/2/22CBA337E0370365B681D563898357F37A7D4D97.crl rsync://rpki-repo.registro.br/repo/G3p9tkchdAPvpJ9Soqyp9qZHGm9cS94LRa1H9gkxYLAS/2/22CBA337E0370365B681D563898357F37A7D4D97.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22CBA337E0370365B681D563898357F37A7D4D97.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 26 Mar 2026 20:54:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:10:06:71:29:e0:78:3e:f3:ab:6f:7c:6f:1a:5d:9f:43:a0:dc:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22CBA337E0370365B681D563898357F37A7D4D97 Validity Not Before: Mar 25 18:27:44 2026 GMT Not After : Mar 26 20:54:44 2026 GMT Subject: CN=26E877904EC4176B318EEDF4D311DB06C68B522B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:dc:04:f4:8f:f9:3f:70:c5:44:a4:4c:e0:58: 02:ad:5a:91:7f:64:bf:4d:f3:f8:0b:9a:bf:e4:fe: a7:0d:7a:28:32:fe:6e:2b:74:07:79:db:02:ac:11: e1:f6:1e:95:75:b7:ac:dd:a1:0c:32:2e:53:09:57: 02:71:c8:4c:e3:4a:b6:cb:e9:df:02:53:4c:d5:04: da:97:c2:39:b7:79:ac:39:3b:e4:fe:20:4f:c8:8e: 2e:23:87:ec:ca:fc:f4:cb:45:43:17:47:74:e7:0a: 97:b8:89:a2:7b:e4:9a:50:31:40:87:fa:db:49:2e: 5f:a3:7a:dd:fe:93:a0:79:ad:b2:50:7b:9e:62:e3: 21:19:63:fa:21:1d:0e:b2:e7:76:c0:66:40:6a:49: 82:e5:9b:b7:7c:c6:b3:8e:81:2f:e2:3a:bf:2d:f5: 2d:c1:46:87:93:48:3c:e0:09:71:77:06:df:c4:49: 4e:4e:ee:31:ed:53:7f:48:b3:16:0b:fe:5d:d1:fa: 7b:16:f9:dd:9d:cd:8b:c7:71:c7:98:10:d0:07:c5: 8a:e4:02:bd:4e:fa:d9:26:67:d8:88:15:7a:dc:27: ca:f6:08:c6:a8:61:cb:ef:44:94:da:84:b8:e8:42: 43:4f:05:31:e6:51:4a:00:4e:5e:23:68:df:33:f6: ef:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:E8:77:90:4E:C4:17:6B:31:8E:ED:F4:D3:11:DB:06:C6:8B:52:2B X509v3 Authority Key Identifier: keyid:22:CB:A3:37:E0:37:03:65:B6:81:D5:63:89:83:57:F3:7A:7D:4D:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/G3p9tkchdAPvpJ9Soqyp9qZHGm9cS94LRa1H9gkxYLAS/2/22CBA337E0370365B681D563898357F37A7D4D97.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22CBA337E0370365B681D563898357F37A7D4D97.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/G3p9tkchdAPvpJ9Soqyp9qZHGm9cS94LRa1H9gkxYLAS/2/22CBA337E0370365B681D563898357F37A7D4D97.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:ba:6c:b7:09:dc:88:c9:24:2f:aa:55:63:b1:cf:90:c9:2b: 5b:d3:82:20:0e:05:34:37:d2:39:e1:61:35:e8:5d:fb:50:41: c9:23:54:c2:5f:86:6c:87:7a:50:e9:64:30:48:1e:24:04:e5: ac:bc:e4:ab:04:7f:f9:f7:f0:5c:6e:84:60:8f:1e:3b:d8:f6: 7d:c0:79:6d:32:fb:9b:32:31:b2:07:4a:91:af:ec:57:e8:34: 86:2a:3b:f5:db:5c:3b:74:75:45:2c:0c:14:c9:78:06:bc:d8: 52:68:5a:01:57:04:a5:c5:24:74:03:8f:ca:1e:58:57:7d:5a: 57:56:d6:fd:66:3c:f5:99:b6:74:11:3f:e6:1b:ba:38:1f:4d: 57:d3:d6:6d:c2:06:bb:bc:7d:28:51:48:b4:f1:7f:75:9d:a8: fc:c4:72:bf:24:4b:19:89:28:63:7a:06:eb:9b:ab:97:8e:98: f7:ef:e3:23:28:4d:ff:9d:05:1f:fd:93:19:3e:47:17:ba:e7: 0c:00:51:1c:85:f0:2e:f1:de:fc:65:e0:76:71:96:cb:32:f5: 85:49:ca:85:52:32:cb:fe:61:df:12:5c:63:a7:16:85:4b:37: 2e:84:5f:4c:95:67:de:b7:47:5d:44:88:c0:b9:e9:70:17:02: fc:73:19:c0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUXRAGcSngeD7zq298bxpdn0Og3LcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjJDQkEzMzdFMDM3MDM2NUI2ODFENTYzODk4MzU3RjM3 QTdENEQ5NzAeFw0yNjAzMjUxODI3NDRaFw0yNjAzMjYyMDU0NDRaMDMxMTAvBgNV BAMTKDI2RTg3NzkwNEVDNDE3NkIzMThFRURGNEQzMTFEQjA2QzY4QjUyMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx3AT0j/k/cMVEpEzgWAKtWpF/ ZL9N8/gLmr/k/qcNeigy/m4rdAd52wKsEeH2HpV1t6zdoQwyLlMJVwJxyEzjSrbL 6d8CU0zVBNqXwjm3eaw5O+T+IE/Iji4jh+zK/PTLRUMXR3TnCpe4iaJ75JpQMUCH +ttJLl+jet3+k6B5rbJQe55i4yEZY/ohHQ6y53bAZkBqSYLlm7d8xrOOgS/iOr8t 9S3BRoeTSDzgCXF3Bt/ESU5O7jHtU39IsxYL/l3R+nsW+d2dzYvHcceYENAHxYrk Ar1O+tkmZ9iIFXrcJ8r2CMaoYcvvRJTahLjoQkNPBTHmUUoATl4jaN8z9u8VAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUJuh3kE7EF2sxju300xHbBsaLUiswHwYDVR0j BBgwFoAUIsujN+A3A2W2gdVjiYNX83p9TZcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRzNwOXRrY2hkQVB2cEo5U29xeXA5cVpIR205Y1M5NExSYTFIOWdreFlM QVMvMi8yMkNCQTMzN0UwMzcwMzY1QjY4MUQ1NjM4OTgzNTdGMzdBN0Q0RDk3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIyQ0JBMzM3RTAzNzAzNjVC NjgxRDU2Mzg5ODM1N0YzN0E3RDREOTcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RzNwOXRrY2hkQVB2cEo5U29xeXA5cVpIR205Y1M5NExSYTFIOWdreFlMQVMvMi8y MkNCQTMzN0UwMzcwMzY1QjY4MUQ1NjM4OTgzNTdGMzdBN0Q0RDk3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAs7pstwnciMkkL6pVY7HPkMkrW9OCIA4FNDfSOeFhNehd+1BBySNUwl+GbId6 UOlkMEgeJATlrLzkqwR/+ffwXG6EYI8eO9j2fcB5bTL7mzIxsgdKka/sV+g0hio7 9dtcO3R1RSwMFMl4BrzYUmhaAVcEpcUkdAOPyh5YV31aV1bW/WY89Zm2dBE/5hu6 OB9NV9PWbcIGu7x9KFFItPF/dZ2o/MRyvyRLGYkoY3oG65url46Y9+/jIyhN/50F H/2TGT5HF7rnDABRHIXwLvHe/GXgdnGWyzL1hUnKhVIyy/5h3xJcY6cWhUs3LoRf TJVn3rdHXUSIwLnpcBcC/HMZwA== -----END CERTIFICATE-----Generated at Thu Mar 26 00:13:39 2026 by rpki-client