$ rpki-client -vvf rpki-repo.registro.br/repo/HzRcUvzrB2bd19geTuVf7P8gHgUV3BzbdtHT3UHsS1qj/0/B70D34D8F1E41A31229367E0B91B23AEF8E5063C.mft File: B70D34D8F1E41A31229367E0B91B23AEF8E5063C.mft (raw, json) Hash identifier: HZ00STAj/Hnqmd1RSwFLOHkOaMw/PAe3EVuksYxKuoY= Subject key identifier: 29:B3:33:1F:D8:2F:94:80:03:B4:D5:69:BB:4F:A0:0C:64:5B:F6:1B Authority key identifier: B7:0D:34:D8:F1:E4:1A:31:22:93:67:E0:B9:1B:23:AE:F8:E5:06:3C Certificate issuer: /CN=B70D34D8F1E41A31229367E0B91B23AEF8E5063C Certificate serial: 37C7CDB28AEC9A2E81FD624E4161089F3C6BDDD3 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B70D34D8F1E41A31229367E0B91B23AEF8E5063C.cer Subject info access: rsync://rpki-repo.registro.br/repo/HzRcUvzrB2bd19geTuVf7P8gHgUV3BzbdtHT3UHsS1qj/0/B70D34D8F1E41A31229367E0B91B23AEF8E5063C.mft Manifest number: 22 Signing time: Wed 25 Mar 2026 09:31:03 +0000 Manifest this update: Wed 25 Mar 2026 09:26:03 +0000 Manifest next update: Thu 26 Mar 2026 11:35:03 +0000 Files and hashes: 1: B70D34D8F1E41A31229367E0B91B23AEF8E5063C.crl (hash: yJvgT94av5BMx2eCNg0Age6nwtd0kzHFDABR36ID5gM=) 2: 3137372e3138342e3232302e302f32322d3332203d3e20323633313136.roa (hash: BXbqVPMTgztMyTh2wlrBrPwexbSnf8UnBFNLA7VJNpY=) 3: 3137392e3130392e382e302f32312d3332203d3e20323633313136.roa (hash: WL+UlzcI514Yz0Ir9XAaGH3VcZtH+N4BWEzytaiBO8Q=) 4: 323830343a313730343a3a2f33322d313238203d3e20323633313136.roa (hash: yQifKgwLmgHLoVMmW2pFehkn6Gn7QJQjanrRHs0jZKM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HzRcUvzrB2bd19geTuVf7P8gHgUV3BzbdtHT3UHsS1qj/0/B70D34D8F1E41A31229367E0B91B23AEF8E5063C.crl rsync://rpki-repo.registro.br/repo/HzRcUvzrB2bd19geTuVf7P8gHgUV3BzbdtHT3UHsS1qj/0/B70D34D8F1E41A31229367E0B91B23AEF8E5063C.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B70D34D8F1E41A31229367E0B91B23AEF8E5063C.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 26 Mar 2026 11:35:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:c7:cd:b2:8a:ec:9a:2e:81:fd:62:4e:41:61:08:9f:3c:6b:dd:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B70D34D8F1E41A31229367E0B91B23AEF8E5063C Validity Not Before: Mar 25 09:26:03 2026 GMT Not After : Mar 26 11:35:03 2026 GMT Subject: CN=29B3331FD82F948003B4D569BB4FA00C645BF61B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:2d:f0:22:8a:55:3b:c5:e5:ca:52:36:e2:b6: 7b:43:dd:a2:a5:2e:a5:76:5d:d0:ae:17:12:52:bc: ab:a0:45:61:4d:49:7a:88:05:62:6f:ef:64:59:8e: 38:07:d1:ef:ab:eb:a6:17:ad:e8:97:f1:3f:69:bb: e2:8f:5e:ff:45:23:8e:45:16:54:28:5e:dc:be:1a: 8e:fa:75:e6:29:e7:0e:b7:d0:10:13:96:c1:3f:08: a2:96:39:10:47:ba:03:93:79:8e:8e:48:2c:b1:e9: 59:fa:cd:96:b9:94:6f:a9:00:4d:99:9f:2b:92:c6: ec:2a:0e:72:6a:5f:15:51:4b:f7:d0:83:65:ac:4d: 9d:3f:4d:01:74:3a:bd:15:df:3f:f3:5f:3a:06:51: c9:02:9d:46:bd:d9:2f:23:87:2c:f5:b5:14:e6:6a: 43:77:b9:f6:3d:01:ea:0d:33:91:b2:57:62:1c:4f: cd:9e:30:18:19:97:9a:5d:f0:ea:39:e0:55:2c:e2: 8d:d3:31:cf:e2:a2:b0:b3:62:cc:40:39:ba:60:a2: 2f:af:b3:5d:ba:9d:a4:03:d0:e6:70:a2:25:a5:57: 68:82:d3:b7:67:b3:c4:66:7b:39:d6:af:9a:ac:ff: cd:5a:08:f9:14:dd:01:b2:cc:e1:5a:d5:61:86:25: 2a:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:B3:33:1F:D8:2F:94:80:03:B4:D5:69:BB:4F:A0:0C:64:5B:F6:1B X509v3 Authority Key Identifier: keyid:B7:0D:34:D8:F1:E4:1A:31:22:93:67:E0:B9:1B:23:AE:F8:E5:06:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HzRcUvzrB2bd19geTuVf7P8gHgUV3BzbdtHT3UHsS1qj/0/B70D34D8F1E41A31229367E0B91B23AEF8E5063C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B70D34D8F1E41A31229367E0B91B23AEF8E5063C.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HzRcUvzrB2bd19geTuVf7P8gHgUV3BzbdtHT3UHsS1qj/0/B70D34D8F1E41A31229367E0B91B23AEF8E5063C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:71:9f:8f:fc:47:83:d2:4a:60:31:33:a1:e3:87:3f:a1:57: fc:c4:6d:80:45:22:f0:60:07:49:c4:2c:25:0d:22:c4:c3:90: f9:d6:7f:79:e5:2c:20:bc:93:13:84:3a:c8:93:62:df:f4:82: 65:76:b8:e4:74:83:0e:87:8e:da:01:43:3a:3f:59:7c:11:ae: c8:af:a5:1c:29:66:e0:15:6b:4d:fd:65:10:a1:2d:82:1a:3d: 3d:72:87:01:0f:67:62:99:15:e5:10:f1:01:a0:b8:ed:27:10: b3:ba:a3:3a:f5:ad:bc:40:8c:1a:17:59:4c:7b:81:98:b1:be: ec:f3:fd:68:60:11:5f:c6:7d:8d:9b:af:3f:29:79:4d:5d:da: e8:37:5f:e1:ae:21:16:97:db:ec:ff:da:b5:52:ef:08:6c:da: 1f:60:cb:51:47:41:14:0d:dd:4e:d1:f8:a9:be:6a:7f:5c:fb: db:ae:ed:c9:9d:30:0b:1c:1e:68:c3:4f:ac:57:26:50:0e:67: e8:78:13:33:15:ee:48:32:02:77:19:f0:bd:07:44:53:c4:22: 23:ac:46:4b:66:8f:48:31:b1:94:95:be:bb:22:24:b1:04:eb: 01:d9:7a:ea:e3:cf:4d:d8:d7:09:68:62:16:fa:2c:9d:bd:40: bb:10:22:9d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUN8fNsorsmi6B/WJOQWEInzxr3dMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjcwRDM0RDhGMUU0MUEzMTIyOTM2N0UwQjkxQjIzQUVG OEU1MDYzQzAeFw0yNjAzMjUwOTI2MDNaFw0yNjAzMjYxMTM1MDNaMDMxMTAvBgNV BAMTKDI5QjMzMzFGRDgyRjk0ODAwM0I0RDU2OUJCNEZBMDBDNjQ1QkY2MUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGLfAiilU7xeXKUjbitntD3aKl LqV2XdCuFxJSvKugRWFNSXqIBWJv72RZjjgH0e+r66YXreiX8T9pu+KPXv9FI45F FlQoXty+Go76deYp5w630BATlsE/CKKWORBHugOTeY6OSCyx6Vn6zZa5lG+pAE2Z nyuSxuwqDnJqXxVRS/fQg2WsTZ0/TQF0Or0V3z/zXzoGUckCnUa92S8jhyz1tRTm akN3ufY9AeoNM5GyV2IcT82eMBgZl5pd8Oo54FUs4o3TMc/iorCzYsxAObpgoi+v s126naQD0OZwoiWlV2iC07dns8RmeznWr5qs/81aCPkU3QGyzOFa1WGGJSoZAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUKbMzH9gvlIADtNVpu0+gDGRb9hswHwYDVR0j BBgwFoAUtw002PHkGjEik2fguRsjrvjlBjwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSHpSY1V2enJCMmJkMTlnZVR1VmY3UDhnSGdVVjNCemJkdEhUM1VIc1Mx cWovMC9CNzBEMzREOEYxRTQxQTMxMjI5MzY3RTBCOTFCMjNBRUY4RTUwNjNDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I3MEQzNEQ4RjFFNDFBMzEy MjkzNjdFMEI5MUIyM0FFRjhFNTA2M0MuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SHpSY1V2enJCMmJkMTlnZVR1VmY3UDhnSGdVVjNCemJkdEhUM1VIc1MxcWovMC9C NzBEMzREOEYxRTQxQTMxMjI5MzY3RTBCOTFCMjNBRUY4RTUwNjNDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEALnGfj/xHg9JKYDEzoeOHP6FX/MRtgEUi8GAHScQsJQ0ixMOQ+dZ/eeUsILyT E4Q6yJNi3/SCZXa45HSDDoeO2gFDOj9ZfBGuyK+lHClm4BVrTf1lEKEtgho9PXKH AQ9nYpkV5RDxAaC47ScQs7qjOvWtvECMGhdZTHuBmLG+7PP9aGARX8Z9jZuvPyl5 TV3a6Ddf4a4hFpfb7P/atVLvCGzaH2DLUUdBFA3dTtH4qb5qf1z7267tyZ0wCxwe aMNPrFcmUA5n6HgTMxXuSDICdxnwvQdEU8QiI6xGS2aPSDGxlJW+uyIksQTrAdl6 6uPPTdjXCWhiFvosnb1AuxAinQ== -----END CERTIFICATE-----Generated at Thu Mar 26 02:39:07 2026 by rpki-client