$ rpki-client -vvf rpki-repo.registro.br/repo/Hnn3ReVmrZArAcBs9miuXMwZTic9hRAnF1tgnNNjRJcx/0/DED9E8FD1D2DB868985876502664A4CA2989C2CF.mft File: DED9E8FD1D2DB868985876502664A4CA2989C2CF.mft (raw, json) Hash identifier: +PFW76/5RMLYmnLk/Ggfo6PwO/qP2zpLzBsSIZh+Rek= Subject key identifier: 48:CF:6E:B8:9C:98:75:64:AD:B6:3C:D9:0C:D1:47:4C:8C:49:92:3F Authority key identifier: DE:D9:E8:FD:1D:2D:B8:68:98:58:76:50:26:64:A4:CA:29:89:C2:CF Certificate issuer: /CN=DED9E8FD1D2DB868985876502664A4CA2989C2CF Certificate serial: 696783A4CCE7A23B561C22D39C4CCBD8980A8F38 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DED9E8FD1D2DB868985876502664A4CA2989C2CF.cer Subject info access: rsync://rpki-repo.registro.br/repo/Hnn3ReVmrZArAcBs9miuXMwZTic9hRAnF1tgnNNjRJcx/0/DED9E8FD1D2DB868985876502664A4CA2989C2CF.mft Manifest number: 0102 Signing time: Thu 26 Mar 2026 10:47:45 +0000 Manifest this update: Thu 26 Mar 2026 10:42:45 +0000 Manifest next update: Fri 27 Mar 2026 14:28:45 +0000 Files and hashes: 1: 323830343a366563303a3a2f33322d313238203d3e203238323933.roa (hash: c/3sklDWNh8JDDiUEAFzZFZqzlYqC6cY3wKSXLAufyQ=) 2: DED9E8FD1D2DB868985876502664A4CA2989C2CF.crl (hash: N9Xvk0dKvdq5+8ei7V3AUc8GDpgk2tvU3P2DVhS6k4Q=) 3: 3138392e32382e33322e302f31392d3332203d3e203238323933.roa (hash: bL7GKT0wjfBACi8NxbByAA/S3mQhxB4zgvFZ3X847ak=) 4: 3138392e32382e35362e302f32342d3234203d3e20323734333730.roa (hash: DPPeS7k7NogwFfGu4j/bJkEgnjR7R/qNjR2fd1ONYCM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Hnn3ReVmrZArAcBs9miuXMwZTic9hRAnF1tgnNNjRJcx/0/DED9E8FD1D2DB868985876502664A4CA2989C2CF.crl rsync://rpki-repo.registro.br/repo/Hnn3ReVmrZArAcBs9miuXMwZTic9hRAnF1tgnNNjRJcx/0/DED9E8FD1D2DB868985876502664A4CA2989C2CF.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DED9E8FD1D2DB868985876502664A4CA2989C2CF.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 27 Mar 2026 14:28:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:67:83:a4:cc:e7:a2:3b:56:1c:22:d3:9c:4c:cb:d8:98:0a:8f:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DED9E8FD1D2DB868985876502664A4CA2989C2CF Validity Not Before: Mar 26 10:42:45 2026 GMT Not After : Mar 27 14:28:45 2026 GMT Subject: CN=48CF6EB89C987564ADB63CD90CD1474C8C49923F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:18:d4:f6:b9:92:7f:bd:73:ee:72:6b:11:40: b4:fb:c3:bb:18:ce:3d:6b:5b:ec:fb:f2:48:26:e6: 8f:e9:a8:61:6c:77:67:4a:5f:24:1f:7c:d4:6a:dd: 64:88:b5:08:e6:b1:a9:6c:d2:72:39:53:22:f1:37: ad:b8:bc:7d:d0:39:6b:73:0f:e8:15:03:0c:e1:af: 06:59:ab:f9:1c:38:1e:f6:a5:07:a2:1e:a3:b5:ee: dc:7a:3a:63:78:24:bc:86:32:1d:28:80:4d:24:e8: 38:10:cf:f9:d4:9d:a4:a5:77:f4:3d:f4:90:40:4f: b4:ee:53:be:fd:42:55:42:95:0c:eb:ec:d8:a9:35: 3c:4d:d2:a7:26:fe:68:8b:c6:8c:92:2d:f1:84:5d: 4d:52:c6:15:df:e6:6d:19:8b:1a:d9:ba:a6:64:b6: f4:8d:b0:a7:45:49:11:28:75:0a:d6:14:2a:8c:cd: cf:e4:96:64:86:c3:6a:ae:0c:c8:6b:ba:93:c6:44: e2:cd:b9:c5:90:05:0f:d2:68:24:25:fb:22:fa:43: 8b:98:49:3e:49:e9:8f:54:64:b7:d5:2f:80:a6:85: cb:65:e9:27:ad:c2:b7:98:12:e6:3a:2f:eb:c9:ba: fd:42:b3:91:5b:c2:23:b4:e1:c3:22:48:3c:41:af: fc:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:CF:6E:B8:9C:98:75:64:AD:B6:3C:D9:0C:D1:47:4C:8C:49:92:3F X509v3 Authority Key Identifier: keyid:DE:D9:E8:FD:1D:2D:B8:68:98:58:76:50:26:64:A4:CA:29:89:C2:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Hnn3ReVmrZArAcBs9miuXMwZTic9hRAnF1tgnNNjRJcx/0/DED9E8FD1D2DB868985876502664A4CA2989C2CF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DED9E8FD1D2DB868985876502664A4CA2989C2CF.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hnn3ReVmrZArAcBs9miuXMwZTic9hRAnF1tgnNNjRJcx/0/DED9E8FD1D2DB868985876502664A4CA2989C2CF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:5c:ad:11:ed:08:b1:ab:e4:4c:bb:bf:00:9b:a6:0e:f9:4c: a1:3e:33:bc:1a:e0:ad:cf:2a:5e:e4:60:a2:eb:7b:fa:d3:7a: 01:7f:03:49:9b:79:0b:ee:f1:b2:62:24:79:e5:ca:dc:31:21: 7d:4c:19:62:ed:da:c9:db:b3:ef:e6:95:3c:92:9a:8c:30:94: f2:fe:4b:81:ee:d6:d0:15:bd:08:26:38:a1:22:7a:f4:c6:c6: 95:44:52:af:dd:f4:39:54:42:e5:1a:db:d9:23:64:f9:d1:02: bc:ee:86:6e:42:4e:4b:07:9a:e8:24:f5:82:b4:ab:ab:82:af: ca:ea:13:73:a8:7c:c6:c9:35:79:cb:e6:93:5a:c7:a3:01:ef: 28:c8:5d:26:b7:ef:3b:fe:ce:65:01:bb:85:26:5c:d2:70:93: 8e:11:01:f0:05:12:27:fb:d3:78:e0:42:c3:a0:1f:3a:a0:4e: 70:c7:e2:a2:86:75:3d:5a:be:b8:86:f7:6c:ac:4a:0f:73:ad: 94:e3:5e:45:d1:f2:02:44:5f:84:38:40:a2:92:6e:08:fe:df: a6:17:32:eb:e3:e2:8f:e4:2e:6f:07:77:ab:92:22:20:fe:88: 97:f6:5a:ba:2e:11:b4:f3:d3:f0:86:16:13:b4:08:57:7a:1a: 3e:8a:ad:d0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUaWeDpMznojtWHCLTnEzL2JgKjzgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREVEOUU4RkQxRDJEQjg2ODk4NTg3NjUwMjY2NEE0Q0Ey OTg5QzJDRjAeFw0yNjAzMjYxMDQyNDVaFw0yNjAzMjcxNDI4NDVaMDMxMTAvBgNV BAMTKDQ4Q0Y2RUI4OUM5ODc1NjRBREI2M0NEOTBDRDE0NzRDOEM0OTkyM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrGNT2uZJ/vXPucmsRQLT7w7sY zj1rW+z78kgm5o/pqGFsd2dKXyQffNRq3WSItQjmsals0nI5UyLxN624vH3QOWtz D+gVAwzhrwZZq/kcOB72pQeiHqO17tx6OmN4JLyGMh0ogE0k6DgQz/nUnaSld/Q9 9JBAT7TuU779QlVClQzr7NipNTxN0qcm/miLxoySLfGEXU1SxhXf5m0ZixrZuqZk tvSNsKdFSREodQrWFCqMzc/klmSGw2quDMhrupPGROLNucWQBQ/SaCQl+yL6Q4uY ST5J6Y9UZLfVL4Cmhctl6SetwreYEuY6L+vJuv1Cs5FbwiO04cMiSDxBr/xjAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUSM9uuJyYdWSttjzZDNFHTIxJkj8wHwYDVR0j BBgwFoAU3tno/R0tuGiYWHZQJmSkyimJws8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSG5uM1JlVm1yWkFyQWNCczltaXVYTXdaVGljOWhSQW5GMXRnbk5OalJK Y3gvMC9ERUQ5RThGRDFEMkRCODY4OTg1ODc2NTAyNjY0QTRDQTI5ODlDMkNGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RFRDlFOEZEMUQyREI4Njg5 ODU4NzY1MDI2NjRBNENBMjk4OUMyQ0YuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SG5uM1JlVm1yWkFyQWNCczltaXVYTXdaVGljOWhSQW5GMXRnbk5OalJKY3gvMC9E RUQ5RThGRDFEMkRCODY4OTg1ODc2NTAyNjY0QTRDQTI5ODlDMkNGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkVytEe0IsavkTLu/AJumDvlMoT4zvBrgrc8qXuRgout7+tN6AX8DSZt5C+7x smIkeeXK3DEhfUwZYu3ayduz7+aVPJKajDCU8v5Lge7W0BW9CCY4oSJ69MbGlURS r930OVRC5Rrb2SNk+dECvO6GbkJOSwea6CT1grSrq4KvyuoTc6h8xsk1ecvmk1rH owHvKMhdJrfvO/7OZQG7hSZc0nCTjhEB8AUSJ/vTeOBCw6AfOqBOcMfiooZ1PVq+ uIb3bKxKD3OtlONeRdHyAkRfhDhAopJuCP7fphcy6+Pij+Qubwd3q5IiIP6Il/Za ui4RtPPT8IYWE7QIV3oaPoqt0A== -----END CERTIFICATE-----Generated at Thu Mar 26 17:54:18 2026 by rpki-client