$ rpki-client -vvf rpki-repo.registro.br/repo/HrfbYbsTguUeMKwqV5TAiixYetRAKemiziCYiPTxACNg/0/D3E3B64C2CD0703CA658C2222A71EB5157345180.mft File: D3E3B64C2CD0703CA658C2222A71EB5157345180.mft (raw, json) Hash identifier: gWPPvJROSbkSVte+IUG4z4Rw+AItcZxzp4wG3tR6JMk= Subject key identifier: 76:C7:FF:22:15:4B:37:2A:1E:11:15:6E:F5:E4:A5:E7:35:0B:C4:5E Authority key identifier: D3:E3:B6:4C:2C:D0:70:3C:A6:58:C2:22:2A:71:EB:51:57:34:51:80 Certificate issuer: /CN=D3E3B64C2CD0703CA658C2222A71EB5157345180 Certificate serial: 5B5CB233419EEA094042025FC7F077C038C0ABD0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3E3B64C2CD0703CA658C2222A71EB5157345180.cer Subject info access: rsync://rpki-repo.registro.br/repo/HrfbYbsTguUeMKwqV5TAiixYetRAKemiziCYiPTxACNg/0/D3E3B64C2CD0703CA658C2222A71EB5157345180.mft Manifest number: 2A Signing time: Wed 25 Mar 2026 21:19:13 +0000 Manifest this update: Wed 25 Mar 2026 21:14:13 +0000 Manifest next update: Fri 27 Mar 2026 00:04:13 +0000 Files and hashes: 1: 3138372e39342e3233382e302f32342d3234203d3e20323731333132.roa (hash: STaDpgiY4hOZhddfr9+FXJ+qcP4rqk8cYeT6MNkWW7I=) 2: 323830343a373938633a383a3a2f34372d3437203d3e20323731333132.roa (hash: zpauRsMeD/JD7T4rr9DAngCrdQsHlCDI3brPPxrxuJk=) 3: 3138372e39342e3233392e302f32342d3234203d3e20323731333132.roa (hash: hlhSfF6RU8T2vgJVAspvq/U7ewsCoCtfXf3LUVRKFZI=) 4: D3E3B64C2CD0703CA658C2222A71EB5157345180.crl (hash: 9y+wed1KAMX74kwNbtexWJJyQsQLPCJK/0t2fGY4Z1Y=) 5: 323830343a373938633a3a2f33322d3332203d3e20323731333132.roa (hash: nGmj3b5LcngckNUI6SySA5/8cregSLam+WGvEI3hH/Q=) 6: 3138372e39342e3233362e302f32342d3234203d3e20323731333132.roa (hash: G44zqFKWliSg479igsFHKKSF96RCcHp78L2dS2mrT9M=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HrfbYbsTguUeMKwqV5TAiixYetRAKemiziCYiPTxACNg/0/D3E3B64C2CD0703CA658C2222A71EB5157345180.crl rsync://rpki-repo.registro.br/repo/HrfbYbsTguUeMKwqV5TAiixYetRAKemiziCYiPTxACNg/0/D3E3B64C2CD0703CA658C2222A71EB5157345180.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3E3B64C2CD0703CA658C2222A71EB5157345180.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 27 Mar 2026 00:04:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:5c:b2:33:41:9e:ea:09:40:42:02:5f:c7:f0:77:c0:38:c0:ab:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D3E3B64C2CD0703CA658C2222A71EB5157345180 Validity Not Before: Mar 25 21:14:13 2026 GMT Not After : Mar 27 00:04:13 2026 GMT Subject: CN=76C7FF22154B372A1E11156EF5E4A5E7350BC45E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:42:c9:ed:fa:f8:fa:6e:9b:b0:27:01:0c:60: 21:24:e5:2e:7f:f8:12:ef:77:2c:35:c8:4b:88:43: 6f:f0:cc:ed:dd:e1:ee:5b:ce:38:89:0a:ed:41:28: 1e:f8:20:fe:9d:da:59:75:a2:74:a0:27:19:ad:b5: 53:a8:14:b0:a3:b1:d5:9e:34:e3:63:5a:9c:14:b7: b5:66:97:3c:60:47:8a:58:e5:6e:a0:d6:8b:01:c0: 35:4d:8d:71:09:0b:50:27:a0:45:b5:26:3a:3a:bb: 6d:33:c6:42:ef:f1:68:da:33:d1:1e:8f:09:eb:e7: e5:c8:30:b8:c5:ed:7d:dd:ff:39:4d:0f:51:47:8b: a4:c8:e6:34:54:40:e5:b9:8c:4c:98:a8:0b:d4:c0: 92:c1:f2:da:25:46:d6:f2:eb:a8:a4:0d:bb:63:04: a4:90:29:5c:eb:c4:47:67:c9:35:3b:40:63:7a:a1: 15:79:cc:ca:8f:b9:58:79:fe:97:60:f9:1d:56:81: 50:ee:e9:d1:63:ce:51:83:93:33:c7:83:7f:7c:93: bd:22:2e:43:00:a6:35:ef:e6:ee:16:59:b0:2f:17: a9:81:70:24:26:2f:5d:30:37:99:6f:2e:3e:1c:fc: 77:cb:75:12:4e:f6:f5:7b:fd:25:58:dd:9f:9d:cf: a8:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:C7:FF:22:15:4B:37:2A:1E:11:15:6E:F5:E4:A5:E7:35:0B:C4:5E X509v3 Authority Key Identifier: keyid:D3:E3:B6:4C:2C:D0:70:3C:A6:58:C2:22:2A:71:EB:51:57:34:51:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HrfbYbsTguUeMKwqV5TAiixYetRAKemiziCYiPTxACNg/0/D3E3B64C2CD0703CA658C2222A71EB5157345180.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3E3B64C2CD0703CA658C2222A71EB5157345180.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrfbYbsTguUeMKwqV5TAiixYetRAKemiziCYiPTxACNg/0/D3E3B64C2CD0703CA658C2222A71EB5157345180.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:21:07:42:d8:99:1c:af:dd:31:fd:4f:68:26:f9:89:d4:c5: 7f:9c:11:e2:86:8b:34:7d:21:f5:ae:9b:77:2b:83:be:b4:4a: 91:89:53:2b:80:d3:0a:13:e7:cd:5d:77:c0:0b:c2:75:ee:71: 4e:f8:dd:74:f1:cb:2f:2e:c5:ea:fa:9c:5e:9b:9a:c6:7e:41: d6:03:76:54:c2:89:9f:90:23:f7:d6:a4:d7:97:fc:e1:3e:22: 27:9d:90:c3:5d:55:0d:09:5f:68:de:41:9f:2b:a9:6d:35:e3: d1:a0:45:ca:99:63:cb:38:66:25:73:33:6c:cc:52:21:d3:d3: fc:81:37:29:35:13:93:42:4a:f4:98:ed:c5:f8:58:1d:36:09: 35:79:dc:ad:75:4e:c9:ae:b5:09:ca:e4:bc:fb:e6:f6:95:8c: aa:bd:dd:b7:7f:b2:fb:eb:2d:81:01:97:30:ac:73:b5:24:5a: 92:f0:7d:26:90:d6:fd:db:42:50:3c:cf:37:66:58:22:91:4a: e1:21:97:8b:e1:7d:c2:19:58:12:0d:a7:9d:36:ce:57:6a:b0: b0:5b:44:c4:78:2d:b8:6b:ac:55:17:7a:10:1e:f6:31:85:f7: 2a:7c:3d:80:3a:24:69:b5:c2:98:88:76:3f:6a:4c:77:9a:27: 17:a9:07:b4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUW1yyM0Ge6glAQgJfx/B3wDjAq9AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDNFM0I2NEMyQ0QwNzAzQ0E2NThDMjIyMkE3MUVCNTE1 NzM0NTE4MDAeFw0yNjAzMjUyMTE0MTNaFw0yNjAzMjcwMDA0MTNaMDMxMTAvBgNV BAMTKDc2QzdGRjIyMTU0QjM3MkExRTExMTU2RUY1RTRBNUU3MzUwQkM0NUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9Qsnt+vj6bpuwJwEMYCEk5S5/ +BLvdyw1yEuIQ2/wzO3d4e5bzjiJCu1BKB74IP6d2ll1onSgJxmttVOoFLCjsdWe NONjWpwUt7VmlzxgR4pY5W6g1osBwDVNjXEJC1AnoEW1Jjo6u20zxkLv8WjaM9Ee jwnr5+XIMLjF7X3d/zlND1FHi6TI5jRUQOW5jEyYqAvUwJLB8tolRtby66ikDbtj BKSQKVzrxEdnyTU7QGN6oRV5zMqPuVh5/pdg+R1WgVDu6dFjzlGDkzPHg398k70i LkMApjXv5u4WWbAvF6mBcCQmL10wN5lvLj4c/HfLdRJO9vV7/SVY3Z+dz6jdAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUdsf/IhVLNyoeERVu9eSl5zULxF4wHwYDVR0j BBgwFoAU0+O2TCzQcDymWMIiKnHrUVc0UYAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSHJmYllic1RndVVlTUt3cVY1VEFpaXhZZXRSQUtlbWl6aUNZaVBUeEFD TmcvMC9EM0UzQjY0QzJDRDA3MDNDQTY1OEMyMjIyQTcxRUI1MTU3MzQ1MTgwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QzRTNCNjRDMkNEMDcwM0NB NjU4QzIyMjJBNzFFQjUxNTczNDUxODAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SHJmYllic1RndVVlTUt3cVY1VEFpaXhZZXRSQUtlbWl6aUNZaVBUeEFDTmcvMC9E M0UzQjY0QzJDRDA3MDNDQTY1OEMyMjIyQTcxRUI1MTU3MzQ1MTgwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfiEHQtiZHK/dMf1PaCb5idTFf5wR4oaLNH0h9a6bdyuDvrRKkYlTK4DTChPn zV13wAvCde5xTvjddPHLLy7F6vqcXpuaxn5B1gN2VMKJn5Aj99ak15f84T4iJ52Q w11VDQlfaN5BnyupbTXj0aBFypljyzhmJXMzbMxSIdPT/IE3KTUTk0JK9JjtxfhY HTYJNXncrXVOya61CcrkvPvm9pWMqr3dt3+y++stgQGXMKxztSRakvB9JpDW/dtC UDzPN2ZYIpFK4SGXi+F9whlYEg2nnTbOV2qwsFtExHgtuGusVRd6EB72MYX3Knw9 gDokabXCmIh2P2pMd5onF6kHtA== -----END CERTIFICATE-----Generated at Thu Mar 26 01:18:07 2026 by rpki-client