$ rpki-client -vvf rpki-repo.registro.br/repo/2Bm8TTRLLH25rfW8wmNLaZ4gaiGaPvPP6pBZFwY3dKr4/0/334DE88ED00C8E5D1131E1ED355103A232E40FE0.mft File: 334DE88ED00C8E5D1131E1ED355103A232E40FE0.mft (raw, json) Hash identifier: ZCNHy3KQ77k2eFO37L37rHHmRPrp+gYV0zknGQz/fpI= Subject key identifier: 28:3E:AB:CF:B1:F6:F2:90:85:29:65:66:90:99:0B:1C:43:15:24:60 Authority key identifier: 33:4D:E8:8E:D0:0C:8E:5D:11:31:E1:ED:35:51:03:A2:32:E4:0F:E0 Certificate issuer: /CN=334DE88ED00C8E5D1131E1ED355103A232E40FE0 Certificate serial: 02E56B4C9697DAAE523BE5A2CF1AB26D74B831D8 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/334DE88ED00C8E5D1131E1ED355103A232E40FE0.cer Subject info access: rsync://rpki-repo.registro.br/repo/2Bm8TTRLLH25rfW8wmNLaZ4gaiGaPvPP6pBZFwY3dKr4/0/334DE88ED00C8E5D1131E1ED355103A232E40FE0.mft Manifest number: 86 Signing time: Mon 02 Mar 2026 11:42:24 +0000 Manifest this update: Mon 02 Mar 2026 11:37:24 +0000 Manifest next update: Tue 03 Mar 2026 15:02:24 +0000 Files and hashes: 1: 334DE88ED00C8E5D1131E1ED355103A232E40FE0.crl (hash: wQqORYz1UFBV+3DXgOoeEPzWCumXbDeGpL8i7mNfObM=) 2: 34352e342e3134342e302f32322d3332203d3e20323636303439.roa (hash: 7mw0GkXoVaDbDDT1y79JOed+pwzADcY+g+5vkqR9Qis=) 3: 323830343a333963343a3a2f33322d313238203d3e20323636303439.roa (hash: D9DppFrtJlT7hHTV3DkiAc9Ngx7Jz5WP2m/IH2qpUZc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2Bm8TTRLLH25rfW8wmNLaZ4gaiGaPvPP6pBZFwY3dKr4/0/334DE88ED00C8E5D1131E1ED355103A232E40FE0.crl rsync://rpki-repo.registro.br/repo/2Bm8TTRLLH25rfW8wmNLaZ4gaiGaPvPP6pBZFwY3dKr4/0/334DE88ED00C8E5D1131E1ED355103A232E40FE0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/334DE88ED00C8E5D1131E1ED355103A232E40FE0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 03 Mar 2026 15:02:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:e5:6b:4c:96:97:da:ae:52:3b:e5:a2:cf:1a:b2:6d:74:b8:31:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=334DE88ED00C8E5D1131E1ED355103A232E40FE0 Validity Not Before: Mar 2 11:37:24 2026 GMT Not After : Mar 3 15:02:24 2026 GMT Subject: CN=283EABCFB1F6F2908529656690990B1C43152460 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:39:8a:94:73:fb:4a:cf:01:44:ee:ad:8a:6b: a5:cc:b6:a9:1a:84:ed:10:59:78:0a:87:8d:7a:df: 9b:e7:91:1f:bc:8a:7c:cb:eb:28:79:93:37:eb:ed: ba:2a:92:80:96:ac:a3:27:64:1d:75:59:77:61:a8: ee:a4:40:a2:2e:46:fb:f6:ba:1b:c2:ae:70:46:3d: bb:38:c1:e6:ac:9e:6d:4b:5d:c2:9d:63:81:d9:34: 11:f3:56:cf:12:3f:c7:d1:89:45:63:17:b5:c2:a5: 04:ac:7c:b1:76:c3:57:02:f0:ba:a7:21:25:ec:18: a9:77:c8:78:ae:ef:50:1a:09:22:35:07:02:2a:95: 74:df:6d:38:4e:d6:7d:af:2f:2f:db:77:67:a6:64: 85:42:06:ff:27:07:e7:80:d8:40:85:60:c4:a0:6c: 5c:f8:f1:ef:f4:49:76:85:fd:f0:67:d2:76:66:57: f3:e9:71:b7:30:7e:ae:6a:0f:f1:78:12:19:5d:90: 63:0b:52:b2:76:23:05:92:2c:38:2c:f9:f9:d7:fd: 7b:fc:7c:fe:16:02:a7:c7:f6:07:9c:a8:1f:04:a1: 4c:2b:64:af:7a:f7:48:85:7e:69:53:45:17:ee:00: 7f:99:82:8a:5b:37:f9:d1:32:60:84:d6:7e:21:9a: dc:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:3E:AB:CF:B1:F6:F2:90:85:29:65:66:90:99:0B:1C:43:15:24:60 X509v3 Authority Key Identifier: keyid:33:4D:E8:8E:D0:0C:8E:5D:11:31:E1:ED:35:51:03:A2:32:E4:0F:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2Bm8TTRLLH25rfW8wmNLaZ4gaiGaPvPP6pBZFwY3dKr4/0/334DE88ED00C8E5D1131E1ED355103A232E40FE0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/334DE88ED00C8E5D1131E1ED355103A232E40FE0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2Bm8TTRLLH25rfW8wmNLaZ4gaiGaPvPP6pBZFwY3dKr4/0/334DE88ED00C8E5D1131E1ED355103A232E40FE0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:70:94:df:7c:b0:d1:a8:f7:1c:06:1a:f7:dd:08:7c:f3:b5: 95:72:3d:f6:fe:39:ae:db:95:f3:a2:bd:d1:81:02:e1:af:df: 1f:58:e2:90:49:c8:ff:d1:52:54:de:91:eb:6c:f3:74:4e:c6: e2:32:0e:db:f4:e8:ad:b4:0c:9a:ba:c3:cc:35:7f:1f:d9:ff: 21:6f:e6:39:a1:51:95:bb:bb:7d:35:4f:95:11:18:f2:2d:80: a0:55:7f:92:fa:63:6f:7c:87:1e:6a:fa:34:86:a4:b5:91:24: 3d:70:0d:28:a0:29:d6:c0:37:df:d1:89:3d:7f:1e:e4:9c:7f: 2a:55:30:fd:9a:d9:9f:1f:ef:5b:0c:fc:6a:b2:f4:bc:7b:13: 50:29:ab:81:24:9b:1d:a0:d4:97:da:d7:d2:7b:af:28:40:0e: d1:56:74:97:38:c7:8a:f2:0f:cf:c3:71:46:2c:3f:74:15:5b: 9f:94:93:2e:7d:31:3c:7a:ba:ad:28:1e:d8:a0:8a:53:61:64: de:89:63:fc:b2:a1:37:ab:32:7b:2d:c5:de:d0:72:e2:d2:51: 2e:4e:aa:e4:38:68:7b:c3:c8:91:b6:61:53:ac:a3:70:13:b7: 26:a0:5e:67:97:60:8e:90:dd:35:cf:ef:6a:ec:e2:04:5a:0c: 6a:61:09:5a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUAuVrTJaX2q5SO+WizxqybXS4MdgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzM0REU4OEVEMDBDOEU1RDExMzFFMUVEMzU1MTAzQTIz MkU0MEZFMDAeFw0yNjAzMDIxMTM3MjRaFw0yNjAzMDMxNTAyMjRaMDMxMTAvBgNV BAMTKDI4M0VBQkNGQjFGNkYyOTA4NTI5NjU2NjkwOTkwQjFDNDMxNTI0NjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkOYqUc/tKzwFE7q2Ka6XMtqka hO0QWXgKh41635vnkR+8inzL6yh5kzfr7boqkoCWrKMnZB11WXdhqO6kQKIuRvv2 uhvCrnBGPbs4weasnm1LXcKdY4HZNBHzVs8SP8fRiUVjF7XCpQSsfLF2w1cC8Lqn ISXsGKl3yHiu71AaCSI1BwIqlXTfbThO1n2vLy/bd2emZIVCBv8nB+eA2ECFYMSg bFz48e/0SXaF/fBn0nZmV/Ppcbcwfq5qD/F4EhldkGMLUrJ2IwWSLDgs+fnX/Xv8 fP4WAqfH9gecqB8EoUwrZK9690iFfmlTRRfuAH+ZgopbN/nRMmCE1n4hmtxzAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUKD6rz7H28pCFKWVmkJkLHEMVJGAwHwYDVR0j BBgwFoAUM03ojtAMjl0RMeHtNVEDojLkD+AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMkJtOFRUUkxMSDI1cmZXOHdtTkxhWjRnYWlHYVB2UFA2cEJaRndZM2RL cjQvMC8zMzRERTg4RUQwMEM4RTVEMTEzMUUxRUQzNTUxMDNBMjMyRTQwRkUwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMzNERFODhFRDAwQzhFNUQx MTMxRTFFRDM1NTEwM0EyMzJFNDBGRTAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MkJtOFRUUkxMSDI1cmZXOHdtTkxhWjRnYWlHYVB2UFA2cEJaRndZM2RLcjQvMC8z MzRERTg4RUQwMEM4RTVEMTEzMUUxRUQzNTUxMDNBMjMyRTQwRkUwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQ3CU33yw0aj3HAYa990IfPO1lXI99v45rtuV86K90YEC4a/fH1jikEnI/9FS VN6R62zzdE7G4jIO2/TorbQMmrrDzDV/H9n/IW/mOaFRlbu7fTVPlREY8i2AoFV/ kvpjb3yHHmr6NIaktZEkPXANKKAp1sA339GJPX8e5Jx/KlUw/ZrZnx/vWwz8arL0 vHsTUCmrgSSbHaDUl9rX0nuvKEAO0VZ0lzjHivIPz8NxRiw/dBVbn5STLn0xPHq6 rSge2KCKU2Fk3olj/LKhN6syey3F3tBy4tJRLk6q5Dhoe8PIkbZhU6yjcBO3JqBe Z5dgjpDdNc/vauziBFoMamEJWg== -----END CERTIFICATE-----Generated at Mon Mar 2 21:30:35 2026 by rpki-client