$ rpki-client -vvf rpki-repo.registro.br/repo/HUKJkh6LsvykeptmBqqUpjAYkZA9o2m1AzKT9Hw2vwk7/0/CDA0766699BBB6B51CB934FD4F8E86EB81DA6A99.mft File: CDA0766699BBB6B51CB934FD4F8E86EB81DA6A99.mft (raw, json) Hash identifier: OBN7lKHa+scFm87r92gaPGUB7meX+XgCw0SavAUXe8E= Subject key identifier: 24:91:94:72:37:1E:4F:BB:B5:68:8F:B5:6F:39:30:BD:9E:76:46:01 Authority key identifier: CD:A0:76:66:99:BB:B6:B5:1C:B9:34:FD:4F:8E:86:EB:81:DA:6A:99 Certificate issuer: /CN=CDA0766699BBB6B51CB934FD4F8E86EB81DA6A99 Certificate serial: 763ECA094CD302062ADBCF928B5A10F025A4B0B1 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDA0766699BBB6B51CB934FD4F8E86EB81DA6A99.cer Subject info access: rsync://rpki-repo.registro.br/repo/HUKJkh6LsvykeptmBqqUpjAYkZA9o2m1AzKT9Hw2vwk7/0/CDA0766699BBB6B51CB934FD4F8E86EB81DA6A99.mft Manifest number: 9D Signing time: Thu 26 Mar 2026 08:56:38 +0000 Manifest this update: Thu 26 Mar 2026 08:51:38 +0000 Manifest next update: Fri 27 Mar 2026 12:10:38 +0000 Files and hashes: 1: 3137302e3234352e3235312e302f32342d3234203d3e20323636303332.roa (hash: qSXhpi5jkfldkXQrU+AHOgUe+NMXk4NMgOqJ4pWavt0=) 2: CDA0766699BBB6B51CB934FD4F8E86EB81DA6A99.crl (hash: AYVYZClkvNSvDvF9BZSH2DrBZjZIIXHaluxQalE43pA=) 3: 3137302e3234352e3234382e302f32332d3234203d3e20323636303332.roa (hash: F4YhNoG7E6IcIRGjcBNDY1sB2guTnHkDoaPo1f5RKJk=) 4: 3137302e3234352e3235302e302f32342d3234203d3e20323636303332.roa (hash: RtiMjhc0R/xV0KBiKmXsvSv0eYHtVfNyftSRhy117C8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HUKJkh6LsvykeptmBqqUpjAYkZA9o2m1AzKT9Hw2vwk7/0/CDA0766699BBB6B51CB934FD4F8E86EB81DA6A99.crl rsync://rpki-repo.registro.br/repo/HUKJkh6LsvykeptmBqqUpjAYkZA9o2m1AzKT9Hw2vwk7/0/CDA0766699BBB6B51CB934FD4F8E86EB81DA6A99.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDA0766699BBB6B51CB934FD4F8E86EB81DA6A99.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 27 Mar 2026 12:10:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:3e:ca:09:4c:d3:02:06:2a:db:cf:92:8b:5a:10:f0:25:a4:b0:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDA0766699BBB6B51CB934FD4F8E86EB81DA6A99 Validity Not Before: Mar 26 08:51:38 2026 GMT Not After : Mar 27 12:10:38 2026 GMT Subject: CN=24919472371E4FBBB5688FB56F3930BD9E764601 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f7:1a:d7:0e:bf:dd:ff:e3:c0:1b:17:35:4e: d6:7c:6a:44:1e:c6:59:0c:35:a6:cf:2b:e9:04:b6: 65:bb:8b:95:2d:bd:2f:39:1b:e9:a5:a2:5a:0c:38: 38:81:26:42:ab:06:3b:9f:78:f9:e9:18:d2:2f:30: 70:f9:99:1e:f9:43:3c:38:68:fa:f5:d3:a1:9b:e2: 84:59:e1:cf:0c:fc:9d:7b:3c:80:bf:1a:8c:48:af: 85:77:ec:92:9f:5d:10:ba:96:c1:ba:b8:a7:9b:c6: e0:de:9c:ce:8d:28:e5:f3:ff:15:f4:af:eb:4d:3d: b5:aa:d1:40:e7:de:d2:41:5b:98:06:1c:15:27:5d: 61:d4:be:85:24:ae:ba:06:10:ad:b1:8a:ec:49:ad: 1a:8b:62:7f:cd:4e:7a:ef:d0:2c:1b:87:61:e0:93: 82:ca:20:d6:33:42:ba:ab:d0:6d:51:7d:56:62:c6: ca:02:9a:e3:19:8f:f7:11:9e:97:cb:51:8b:1d:8b: a9:9b:15:0d:b8:48:f3:57:ae:fb:b8:4a:ac:26:ff: 6c:16:05:9f:b0:7a:1a:81:57:a6:11:e2:8d:24:10: d0:88:44:09:ee:73:98:d0:1c:39:28:f4:9a:3e:87: c2:0f:8f:89:a7:d6:aa:06:9d:f0:06:2c:aa:8d:1c: 86:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:91:94:72:37:1E:4F:BB:B5:68:8F:B5:6F:39:30:BD:9E:76:46:01 X509v3 Authority Key Identifier: keyid:CD:A0:76:66:99:BB:B6:B5:1C:B9:34:FD:4F:8E:86:EB:81:DA:6A:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HUKJkh6LsvykeptmBqqUpjAYkZA9o2m1AzKT9Hw2vwk7/0/CDA0766699BBB6B51CB934FD4F8E86EB81DA6A99.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDA0766699BBB6B51CB934FD4F8E86EB81DA6A99.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HUKJkh6LsvykeptmBqqUpjAYkZA9o2m1AzKT9Hw2vwk7/0/CDA0766699BBB6B51CB934FD4F8E86EB81DA6A99.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:4f:e3:d5:83:3d:ed:b8:0d:ab:26:55:ab:84:66:75:e5:b1: 5e:c0:97:24:eb:83:96:7c:f3:f0:e7:3e:90:20:99:e3:eb:e0: 65:d1:cd:6e:f7:c3:ff:77:8b:d6:c2:1b:2d:16:dc:ee:ba:9d: 29:66:5e:e9:d8:62:55:71:39:bb:cf:d0:99:7e:51:f2:7f:60: af:33:86:0d:79:fb:35:13:36:fd:8e:d7:14:7a:c1:12:a4:0e: 4c:eb:d2:ed:e4:20:84:c8:71:7a:c2:0c:48:d2:87:b9:fb:20: 46:18:ed:18:54:6e:a2:27:6a:b9:3c:ae:d6:a7:92:5f:48:a4: bc:33:20:06:cf:b0:42:d3:92:ee:1a:21:43:d8:02:af:24:06: 49:fc:8c:04:04:90:34:9b:1b:07:f7:68:ae:57:79:d5:8b:2a: 64:67:ee:44:ba:b9:38:8e:17:48:ba:59:6a:28:bd:b4:39:a6: 4f:bd:77:7a:47:0d:2a:51:97:c8:72:21:19:a3:f3:8d:fb:dc: 50:5c:45:e4:49:48:55:3c:ca:31:a6:d9:cf:58:01:1e:83:9b: 07:44:e1:d5:c6:70:bc:f4:3d:96:7b:f3:69:85:26:56:91:6c: e8:76:8a:7c:6e:d5:f3:28:6a:95:6c:28:d3:43:6e:d8:61:28: 04:45:4c:ec -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUdj7KCUzTAgYq28+Si1oQ8CWksLEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RBMDc2NjY5OUJCQjZCNTFDQjkzNEZENEY4RTg2RUI4 MURBNkE5OTAeFw0yNjAzMjYwODUxMzhaFw0yNjAzMjcxMjEwMzhaMDMxMTAvBgNV BAMTKDI0OTE5NDcyMzcxRTRGQkJCNTY4OEZCNTZGMzkzMEJEOUU3NjQ2MDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC19xrXDr/d/+PAGxc1TtZ8akQe xlkMNabPK+kEtmW7i5UtvS85G+mloloMODiBJkKrBjufePnpGNIvMHD5mR75Qzw4 aPr106Gb4oRZ4c8M/J17PIC/GoxIr4V37JKfXRC6lsG6uKebxuDenM6NKOXz/xX0 r+tNPbWq0UDn3tJBW5gGHBUnXWHUvoUkrroGEK2xiuxJrRqLYn/NTnrv0Cwbh2Hg k4LKINYzQrqr0G1RfVZixsoCmuMZj/cRnpfLUYsdi6mbFQ24SPNXrvu4Sqwm/2wW BZ+wehqBV6YR4o0kENCIRAnuc5jQHDko9Jo+h8IPj4mn1qoGnfAGLKqNHIa7AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUJJGUcjceT7u1aI+1bzkwvZ52RgEwHwYDVR0j BBgwFoAUzaB2Zpm7trUcuTT9T46G64HaapkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSFVLSmtoNkxzdnlrZXB0bUJxcVVwakFZa1pBOW8ybTFBektUOUh3MnZ3 azcvMC9DREEwNzY2Njk5QkJCNkI1MUNCOTM0RkQ0RjhFODZFQjgxREE2QTk5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NEQTA3NjY2OTlCQkI2QjUx Q0I5MzRGRDRGOEU4NkVCODFEQTZBOTkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SFVLSmtoNkxzdnlrZXB0bUJxcVVwakFZa1pBOW8ybTFBektUOUh3MnZ3azcvMC9D REEwNzY2Njk5QkJCNkI1MUNCOTM0RkQ0RjhFODZFQjgxREE2QTk5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEATE/j1YM97bgNqyZVq4RmdeWxXsCXJOuDlnzz8Oc+kCCZ4+vgZdHNbvfD/3eL 1sIbLRbc7rqdKWZe6dhiVXE5u8/QmX5R8n9grzOGDXn7NRM2/Y7XFHrBEqQOTOvS 7eQghMhxesIMSNKHufsgRhjtGFRuoidquTyu1qeSX0ikvDMgBs+wQtOS7hohQ9gC ryQGSfyMBASQNJsbB/dorld51YsqZGfuRLq5OI4XSLpZaii9tDmmT713ekcNKlGX yHIhGaPzjfvcUFxF5ElIVTzKMabZz1gBHoObB0Th1cZwvPQ9lnvzaYUmVpFs6HaK fG7V8yhqlWwo00Nu2GEoBEVM7A== -----END CERTIFICATE-----Generated at Thu Mar 26 21:19:56 2026 by rpki-client