$ rpki-client -vvf rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.mft File: CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.mft (raw, json) Hash identifier: c5lNbS5+iLAkOoU4qk7ntP11csimEcWYjCFXxJSEckg= Subject key identifier: 93:89:26:80:9D:13:91:37:0A:08:64:79:B4:2B:D4:F8:B9:5B:8C:BD Authority key identifier: CD:23:91:FA:7C:28:AE:0F:9C:8B:2B:99:E1:90:92:A3:48:7A:2E:C9 Certificate issuer: /CN=CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9 Certificate serial: 036EC25347C7F98DDD17BDF2977027521B938337 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.cer Subject info access: rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.mft Manifest number: 03A5 Signing time: Mon 02 Mar 2026 03:15:41 +0000 Manifest this update: Mon 02 Mar 2026 03:10:41 +0000 Manifest next update: Tue 03 Mar 2026 04:09:41 +0000 Files and hashes: 1: 3137372e3232322e3233322e302f32312d3233203d3e20323633343030.roa (hash: 7KaEu9sw42ksNhOklCsT9hgtSIgophy55hML3k/smrA=) 2: CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.crl (hash: 1yLLhXlS5jOGsd8l0VRd++/7CzDzAYtM8WRNqMmGe3E=) 3: 323830343a313561343a3a2f33322d3434203d3e20323633343030.roa (hash: SXY+DqRaOha9W6rUgVkvX8kWfmFQeH74nzcZCLBrSxg=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.crl rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 03 Mar 2026 04:09:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:6e:c2:53:47:c7:f9:8d:dd:17:bd:f2:97:70:27:52:1b:93:83:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9 Validity Not Before: Mar 2 03:10:41 2026 GMT Not After : Mar 3 04:09:41 2026 GMT Subject: CN=938926809D1391370A086479B42BD4F8B95B8CBD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:fd:7e:43:f3:19:32:d7:31:9f:07:82:a6:03: 9e:80:93:86:ae:73:57:ca:a9:b2:8f:09:14:d0:01: d7:c4:21:67:3a:7f:23:1f:2b:fe:28:73:ce:20:86: 22:da:ea:4f:00:fd:7d:ca:cc:16:db:9d:5a:81:7c: 68:bc:c6:5c:a9:96:40:6a:8f:73:fa:f9:10:76:18: be:c5:ed:c9:a1:f5:2b:f2:f1:b0:1c:9c:33:fe:01: 43:e6:10:8f:d6:82:5c:12:40:43:e1:bc:69:5d:0a: 53:47:03:3e:fd:02:c5:75:97:20:b9:34:2c:58:b6: bd:66:5b:ca:7c:c1:cc:a2:e1:c1:99:4e:df:fb:c4: c1:c8:4e:e2:9f:a4:0f:8a:3e:1f:d6:dc:e2:c2:c8: 39:4b:2f:66:86:e8:75:95:9c:d7:82:e3:60:4b:e3: 2e:23:4f:61:6f:c9:ad:a8:44:6d:d3:05:be:c0:a8: 74:72:2e:f3:14:b4:b2:56:48:60:0b:26:63:6a:d3: 5e:86:3d:a1:75:91:07:04:17:47:54:b8:af:e2:21: e9:2f:34:9c:cd:d0:ef:6e:ba:0e:5f:31:6e:a8:25: ce:d9:e1:6c:ba:ac:a5:9c:9d:d7:fa:c5:f3:91:4b: 12:8f:43:a8:94:6a:13:de:f8:bd:99:4a:92:c4:e6: b0:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:89:26:80:9D:13:91:37:0A:08:64:79:B4:2B:D4:F8:B9:5B:8C:BD X509v3 Authority Key Identifier: keyid:CD:23:91:FA:7C:28:AE:0F:9C:8B:2B:99:E1:90:92:A3:48:7A:2E:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:ff:ff:27:12:f8:1e:ee:a5:ff:e8:09:d2:da:97:be:f6:84: 76:a9:08:99:b2:13:d6:9c:84:b3:82:05:87:9a:0a:1e:91:60: 70:f2:8d:1d:83:76:6c:b2:88:d5:64:09:59:59:47:79:09:51: ac:b6:0c:e8:2c:ff:92:31:73:2d:d5:1e:fb:66:0c:c3:d3:c5: da:90:e7:77:dd:0f:45:a0:42:a6:e8:05:bc:79:02:67:06:2a: fb:f4:eb:e1:b7:3b:9b:6d:dd:78:3c:79:cb:f2:e9:c4:3f:f9: ed:8a:fc:e6:ef:f4:d2:1b:ef:01:af:c4:56:89:56:c0:2d:2d: 23:a7:16:e8:ef:f4:5b:99:0d:03:35:de:a7:c9:02:e6:6b:f6: 2e:63:0e:cc:c3:77:b8:52:24:20:c5:46:3d:e7:a3:e2:ff:ae: cd:04:51:24:7e:93:ba:26:45:a7:61:74:b8:a5:83:ef:1b:a1: 7d:ec:e2:0c:14:e4:e5:18:fd:bf:86:b5:b4:50:4b:ee:c9:1c: 9f:47:54:2b:07:23:01:89:07:29:87:c6:e3:fc:cf:6a:c5:f7: bd:f4:ba:c7:83:07:0a:ec:8d:ef:fa:d2:d3:50:61:ce:f3:59: c3:e9:3d:54:3b:b8:56:6e:9f:28:46:6c:69:9d:29:11:5a:d8: 28:02:fc:0d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUA27CU0fH+Y3dF73yl3AnUhuTgzcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0QyMzkxRkE3QzI4QUUwRjlDOEIyQjk5RTE5MDkyQTM0 ODdBMkVDOTAeFw0yNjAzMDIwMzEwNDFaFw0yNjAzMDMwNDA5NDFaMDMxMTAvBgNV BAMTKDkzODkyNjgwOUQxMzkxMzcwQTA4NjQ3OUI0MkJENEY4Qjk1QjhDQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+/X5D8xky1zGfB4KmA56Ak4au c1fKqbKPCRTQAdfEIWc6fyMfK/4oc84ghiLa6k8A/X3KzBbbnVqBfGi8xlyplkBq j3P6+RB2GL7F7cmh9Svy8bAcnDP+AUPmEI/WglwSQEPhvGldClNHAz79AsV1lyC5 NCxYtr1mW8p8wcyi4cGZTt/7xMHITuKfpA+KPh/W3OLCyDlLL2aG6HWVnNeC42BL 4y4jT2Fvya2oRG3TBb7AqHRyLvMUtLJWSGALJmNq016GPaF1kQcEF0dUuK/iIekv NJzN0O9uug5fMW6oJc7Z4Wy6rKWcndf6xfORSxKPQ6iUahPe+L2ZSpLE5rC/AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUk4kmgJ0TkTcKCGR5tCvU+LlbjL0wHwYDVR0j BBgwFoAUzSOR+nworg+ciyuZ4ZCSo0h6LskwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMkVobnZBd1FCeHlQYmtoVXBoTVFueEN1VEVEZ3Y3a1NCMWFURDQxOFRo U1gvMS9DRDIzOTFGQTdDMjhBRTBGOUM4QjJCOTlFMTkwOTJBMzQ4N0EyRUM5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NEMjM5MUZBN0MyOEFFMEY5 QzhCMkI5OUUxOTA5MkEzNDg3QTJFQzkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MkVobnZBd1FCeHlQYmtoVXBoTVFueEN1VEVEZ3Y3a1NCMWFURDQxOFRoU1gvMS9D RDIzOTFGQTdDMjhBRTBGOUM4QjJCOTlFMTkwOTJBMzQ4N0EyRUM5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEArf//JxL4Hu6l/+gJ0tqXvvaEdqkImbIT1pyEs4IFh5oKHpFgcPKNHYN2bLKI 1WQJWVlHeQlRrLYM6Cz/kjFzLdUe+2YMw9PF2pDnd90PRaBCpugFvHkCZwYq+/Tr 4bc7m23deDx5y/LpxD/57Yr85u/00hvvAa/EVolWwC0tI6cW6O/0W5kNAzXep8kC 5mv2LmMOzMN3uFIkIMVGPeej4v+uzQRRJH6TuiZFp2F0uKWD7xuhfeziDBTk5Rj9 v4a1tFBL7skcn0dUKwcjAYkHKYfG4/zPasX3vfS6x4MHCuyN7/rS01BhzvNZw+k9 VDu4Vm6fKEZsaZ0pEVrYKAL8DQ== -----END CERTIFICATE-----Generated at Mon Mar 2 16:58:45 2026 by rpki-client