$ rpki-client -vvf rpki-repo.registro.br/repo/GBMqZq5YvGD8dZUrARDG9J5V4q3WMuwqu9oHXN7hea4n/0/DFBB164DBC72494619B08F0FA235F18F7F107520.mft File: DFBB164DBC72494619B08F0FA235F18F7F107520.mft (raw, json) Hash identifier: DdQhbZAvKwoHxCOKtyjhyXXBzPIfsbgNcLzYGIfxe9I= Subject key identifier: 18:98:96:11:0C:C6:35:EC:F4:91:E9:D0:F0:7D:C3:28:1B:1E:D1:A1 Authority key identifier: DF:BB:16:4D:BC:72:49:46:19:B0:8F:0F:A2:35:F1:8F:7F:10:75:20 Certificate issuer: /CN=DFBB164DBC72494619B08F0FA235F18F7F107520 Certificate serial: 6BD2937F83A63EDA29EE051DD7C37B30AB1DCAD8 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFBB164DBC72494619B08F0FA235F18F7F107520.cer Subject info access: rsync://rpki-repo.registro.br/repo/GBMqZq5YvGD8dZUrARDG9J5V4q3WMuwqu9oHXN7hea4n/0/DFBB164DBC72494619B08F0FA235F18F7F107520.mft Manifest number: 0231 Signing time: Thu 26 Mar 2026 19:57:03 +0000 Manifest this update: Thu 26 Mar 2026 19:52:03 +0000 Manifest next update: Fri 27 Mar 2026 22:12:03 +0000 Files and hashes: 1: 323830343a3563383a3a2f33322d3438203d3e20323632353431.roa (hash: zjAZcmBZeLItDUB8YXVke5uQmycIa3e/w8aXnKf9Vdk=) 2: 3137372e37322e35342e302f32342d3234203d3e20323634383830.roa (hash: IPHv9O5Pug97aXu+8gkHhnDu0MN7EgfcGaRDHIk3+FU=) 3: DFBB164DBC72494619B08F0FA235F18F7F107520.crl (hash: lH7wSsPnRVXMKuaHihowQKJUCAy8YDjzC20B48Fvbrg=) 4: 3137372e37322e34382e302f32312d3234203d3e20323632353431.roa (hash: nWmuj4phma6WvF8Ml19h8Xm8XXmRBDsPTTbq1HChm4M=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GBMqZq5YvGD8dZUrARDG9J5V4q3WMuwqu9oHXN7hea4n/0/DFBB164DBC72494619B08F0FA235F18F7F107520.crl rsync://rpki-repo.registro.br/repo/GBMqZq5YvGD8dZUrARDG9J5V4q3WMuwqu9oHXN7hea4n/0/DFBB164DBC72494619B08F0FA235F18F7F107520.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFBB164DBC72494619B08F0FA235F18F7F107520.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 27 Mar 2026 22:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:d2:93:7f:83:a6:3e:da:29:ee:05:1d:d7:c3:7b:30:ab:1d:ca:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DFBB164DBC72494619B08F0FA235F18F7F107520 Validity Not Before: Mar 26 19:52:03 2026 GMT Not After : Mar 27 22:12:03 2026 GMT Subject: CN=189896110CC635ECF491E9D0F07DC3281B1ED1A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:49:e7:af:5c:02:7f:ca:07:8a:fb:ba:35:57: d7:77:a4:3e:a0:2c:af:6e:7c:ec:87:93:e4:a0:a2: 7e:c9:3b:37:6a:3b:6e:12:a4:0e:82:51:7a:82:ef: cf:af:1e:10:6f:90:c4:6a:50:2b:95:bb:e4:98:da: bf:6c:34:28:21:51:47:7e:84:de:cf:1c:78:d2:a2: 7e:b9:d8:ad:e5:4e:da:7a:4a:a3:c0:1e:37:88:5c: 96:f9:2a:8a:f1:48:4c:a6:ff:24:0d:19:ab:ec:e7: a9:94:ce:53:f4:c5:dc:1d:76:30:4f:1a:b1:b8:4e: f4:f6:92:e6:92:34:cc:7a:1f:8a:75:e7:2f:df:7e: f0:d2:93:56:e9:19:d8:16:e9:70:cd:3b:3f:97:f5: 8b:0d:ac:f6:e4:cc:71:f0:cc:0f:e8:1b:29:92:c1: 4b:bd:8e:2c:df:33:84:31:56:f8:81:55:f2:cf:10: ab:ce:d2:34:1e:3c:dc:0a:ff:81:37:4a:c2:86:74: 3e:dd:98:33:59:8f:34:dd:b6:d7:fb:ba:e7:d9:de: 94:6d:07:90:ca:ce:48:3d:38:4e:55:b7:72:41:52: fe:69:de:09:65:94:a8:eb:78:0f:03:35:b3:ed:80: d2:91:79:06:d6:73:d8:e8:09:93:e3:37:bb:68:a1: 68:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:98:96:11:0C:C6:35:EC:F4:91:E9:D0:F0:7D:C3:28:1B:1E:D1:A1 X509v3 Authority Key Identifier: keyid:DF:BB:16:4D:BC:72:49:46:19:B0:8F:0F:A2:35:F1:8F:7F:10:75:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GBMqZq5YvGD8dZUrARDG9J5V4q3WMuwqu9oHXN7hea4n/0/DFBB164DBC72494619B08F0FA235F18F7F107520.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFBB164DBC72494619B08F0FA235F18F7F107520.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GBMqZq5YvGD8dZUrARDG9J5V4q3WMuwqu9oHXN7hea4n/0/DFBB164DBC72494619B08F0FA235F18F7F107520.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:90:9c:30:73:9c:63:04:a8:1e:07:40:3f:c1:58:cd:ea:35: 6a:ab:d0:21:bb:9b:82:48:94:3e:2d:a1:d2:d2:94:c9:01:9c: 30:c1:3b:c7:d4:37:f8:79:27:59:30:d3:62:c7:b8:b5:5a:cf: 38:86:58:f5:60:af:24:47:c9:9b:3a:b5:69:e7:e3:85:57:d5: 02:f0:ca:26:ae:d5:b2:1c:94:de:be:23:84:e0:43:2d:45:d7: 5a:b3:ad:a0:3f:4d:f6:08:19:c9:61:c6:49:5b:46:9c:86:51: ba:58:75:69:13:86:a5:94:9c:fe:f7:08:a4:c2:9d:d0:cf:05: 61:12:23:bd:65:e3:0a:d5:98:53:79:c6:85:59:79:f8:d5:0e: d2:a3:f4:ed:71:cf:29:b3:a1:1f:d3:b9:ff:d4:b3:1e:63:c3: 68:7e:6e:a9:62:c9:05:3c:09:5e:d1:f6:a7:cb:1c:e6:64:97: 89:77:cc:c7:67:23:09:3b:70:e6:80:37:c8:44:51:81:37:33: 43:c1:d3:4b:de:75:56:a4:59:c0:79:ef:d4:07:dd:6e:4e:d8: 38:00:c6:64:ed:c1:0d:2b:c9:67:b0:db:4a:62:ad:0c:98:80: f9:30:82:2d:02:67:84:ee:59:5e:ff:6c:64:a5:c1:cf:cf:e5: f1:30:fd:64 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUa9KTf4OmPtop7gUd18N7MKsdytgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREZCQjE2NERCQzcyNDk0NjE5QjA4RjBGQTIzNUYxOEY3 RjEwNzUyMDAeFw0yNjAzMjYxOTUyMDNaFw0yNjAzMjcyMjEyMDNaMDMxMTAvBgNV BAMTKDE4OTg5NjExMENDNjM1RUNGNDkxRTlEMEYwN0RDMzI4MUIxRUQxQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVSeevXAJ/ygeK+7o1V9d3pD6g LK9ufOyHk+Sgon7JOzdqO24SpA6CUXqC78+vHhBvkMRqUCuVu+SY2r9sNCghUUd+ hN7PHHjSon652K3lTtp6SqPAHjeIXJb5KorxSEym/yQNGavs56mUzlP0xdwddjBP GrG4TvT2kuaSNMx6H4p15y/ffvDSk1bpGdgW6XDNOz+X9YsNrPbkzHHwzA/oGymS wUu9jizfM4QxVviBVfLPEKvO0jQePNwK/4E3SsKGdD7dmDNZjzTdttf7uufZ3pRt B5DKzkg9OE5Vt3JBUv5p3glllKjreA8DNbPtgNKReQbWc9joCZPjN7tooWjdAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUGJiWEQzGNez0kenQ8H3DKBse0aEwHwYDVR0j BBgwFoAU37sWTbxySUYZsI8PojXxj38QdSAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR0JNcVpxNVl2R0Q4ZFpVckFSREc5SjVWNHEzV011d3F1OW9IWE43aGVh NG4vMC9ERkJCMTY0REJDNzI0OTQ2MTlCMDhGMEZBMjM1RjE4RjdGMTA3NTIwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RGQkIxNjREQkM3MjQ5NDYx OUIwOEYwRkEyMzVGMThGN0YxMDc1MjAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R0JNcVpxNVl2R0Q4ZFpVckFSREc5SjVWNHEzV011d3F1OW9IWE43aGVhNG4vMC9E RkJCMTY0REJDNzI0OTQ2MTlCMDhGMEZBMjM1RjE4RjdGMTA3NTIwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAD5CcMHOcYwSoHgdAP8FYzeo1aqvQIbubgkiUPi2h0tKUyQGcMME7x9Q3+Hkn WTDTYse4tVrPOIZY9WCvJEfJmzq1aefjhVfVAvDKJq7VshyU3r4jhOBDLUXXWrOt oD9N9ggZyWHGSVtGnIZRulh1aROGpZSc/vcIpMKd0M8FYRIjvWXjCtWYU3nGhVl5 +NUO0qP07XHPKbOhH9O5/9SzHmPDaH5uqWLJBTwJXtH2p8sc5mSXiXfMx2cjCTtw 5oA3yERRgTczQ8HTS951VqRZwHnv1Afdbk7YOADGZO3BDSvJZ7DbSmKtDJiA+TCC LQJnhO5ZXv9sZKXBz8/l8TD9ZA== -----END CERTIFICATE-----Generated at Fri Mar 27 02:37:18 2026 by rpki-client