$ rpki-client -vvf rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/0/CDB34CF4AFC01721153990AE1A10D922F7507546.mft File: CDB34CF4AFC01721153990AE1A10D922F7507546.mft (raw, json) Hash identifier: 7BbEYd0rZqmo99hG3NkVePHBWG+yWhxUFiS4w7qjuHI= Subject key identifier: FB:5D:B2:D5:63:CF:4A:DE:0F:CF:09:25:0E:63:00:EE:40:D9:82:05 Authority key identifier: CD:B3:4C:F4:AF:C0:17:21:15:39:90:AE:1A:10:D9:22:F7:50:75:46 Certificate issuer: /CN=CDB34CF4AFC01721153990AE1A10D922F7507546 Certificate serial: 6AC78461DC013F00E3BA122D6455FD3A2F8E75F6 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDB34CF4AFC01721153990AE1A10D922F7507546.cer Subject info access: rsync://rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/0/CDB34CF4AFC01721153990AE1A10D922F7507546.mft Manifest number: 03A5 Signing time: Mon 02 Mar 2026 16:17:50 +0000 Manifest this update: Mon 02 Mar 2026 16:12:50 +0000 Manifest next update: Tue 03 Mar 2026 16:56:50 +0000 Files and hashes: 1: 323830343a326639343a3a2f33322d3438203d3e20323634393030.roa (hash: vhvxSeJd+tzRkEzkUqJfnoWG2u32D84RmUUxjVexbJA=) 2: 3137302e38302e3233362e302f32322d3332203d3e20323634393030.roa (hash: A0IVZ0fDUe0zEY9+FBEhJi/Xpb3DJbrzWBmqTSyfkPo=) 3: CDB34CF4AFC01721153990AE1A10D922F7507546.crl (hash: sX1EeZCnzizTAsxnOevSdvm7zIUYqfzIGSPjzDxTzQU=) 4: 3136382e3232382e382e302f32322d3332203d3e20323634393030.roa (hash: iNkzV1rmrEjxTbsK7Aw/bkJX4Qyoo7gBNI4P1PI2lhY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/0/CDB34CF4AFC01721153990AE1A10D922F7507546.crl rsync://rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/0/CDB34CF4AFC01721153990AE1A10D922F7507546.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDB34CF4AFC01721153990AE1A10D922F7507546.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 03 Mar 2026 16:56:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:c7:84:61:dc:01:3f:00:e3:ba:12:2d:64:55:fd:3a:2f:8e:75:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDB34CF4AFC01721153990AE1A10D922F7507546 Validity Not Before: Mar 2 16:12:50 2026 GMT Not After : Mar 3 16:56:50 2026 GMT Subject: CN=FB5DB2D563CF4ADE0FCF09250E6300EE40D98205 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:21:52:6b:ef:ff:c2:5c:c0:d0:b1:d5:3c:15: 79:34:8d:48:f9:ae:6a:e4:88:eb:0c:94:79:cf:7f: cc:c4:42:6c:89:54:cd:4c:a3:dc:15:93:e9:0e:fc: f1:f5:0c:3c:d7:f0:3f:02:de:16:b5:1e:e8:9f:3c: 0a:fd:ac:48:49:31:f7:8f:b0:8c:2a:86:05:eb:9a: 91:3a:b2:1c:7e:c2:6f:d0:68:fc:3e:a7:a0:e6:ef: 7d:dd:df:c6:69:32:e0:68:4c:c2:dd:64:2f:cb:32: 45:95:0c:2b:06:be:be:8d:23:09:b4:2d:ed:0e:9e: 07:44:06:39:78:5e:14:df:75:ae:7f:42:fe:ec:5f: b6:9a:a6:c2:e2:1d:e9:3b:c5:c1:30:b4:e2:f8:0a: 87:f9:01:27:64:20:84:6f:ef:7f:f2:de:f9:00:c8: 4a:3a:11:e2:70:19:f4:2f:49:85:2a:72:c3:32:07: db:01:66:9c:96:df:10:d3:d0:66:28:2a:6b:b5:15: a0:b7:42:89:7d:92:a4:2a:df:f9:9e:da:a7:2a:eb: c9:62:f2:5f:75:fb:52:ae:5e:da:87:d6:50:39:e2: b9:60:eb:df:bc:89:31:b1:3d:34:5e:27:3e:b3:21: b0:d1:3e:3a:85:c1:ad:d8:03:7f:fc:ac:cf:d9:38: ea:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:5D:B2:D5:63:CF:4A:DE:0F:CF:09:25:0E:63:00:EE:40:D9:82:05 X509v3 Authority Key Identifier: keyid:CD:B3:4C:F4:AF:C0:17:21:15:39:90:AE:1A:10:D9:22:F7:50:75:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/0/CDB34CF4AFC01721153990AE1A10D922F7507546.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDB34CF4AFC01721153990AE1A10D922F7507546.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/0/CDB34CF4AFC01721153990AE1A10D922F7507546.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:b0:ca:3b:aa:ea:3c:72:48:b0:f0:8a:eb:1f:3e:80:61:81: d9:8b:a8:93:f5:ef:74:d8:cd:62:60:42:1c:79:83:bb:c4:48: f9:18:5f:e6:e0:61:ee:4b:e4:6d:ca:92:51:de:ad:ff:d6:30: 4c:ef:ba:ae:2f:8d:e0:7c:e8:91:21:d4:d3:cb:8f:f6:f2:b3: 8c:40:3d:1a:78:50:13:85:22:25:11:9c:c1:3a:98:f9:12:de: 80:4a:59:c1:57:a1:c9:b7:6d:72:91:f3:5d:95:be:57:56:34: 7f:0d:d1:9a:e7:05:cb:4f:bd:e1:38:21:6f:80:5d:9e:9f:55: 77:e3:bb:09:ba:be:ff:74:7f:72:0d:72:1d:ea:ed:bd:40:c9: 3b:fa:1c:e4:e5:7f:9a:da:88:d6:04:cd:80:e6:06:3f:a1:8c: da:3a:64:80:56:3e:51:2a:5a:71:2a:80:f8:e0:f6:cd:af:b6: 8f:ee:da:eb:67:59:93:f5:0d:6f:2f:90:61:f7:64:a7:df:07: 7f:24:15:db:86:4f:b9:4d:d5:bc:8b:92:71:4f:21:1c:fb:69: ff:3a:8a:11:42:a5:0c:90:58:6f:35:06:ea:0c:c3:71:2d:e5: 1b:49:fc:7b:21:fa:c3:50:f3:c1:fa:9f:fb:ac:6b:9d:95:5f: 49:5a:5e:c9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUaseEYdwBPwDjuhItZFX9Oi+OdfYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RCMzRDRjRBRkMwMTcyMTE1Mzk5MEFFMUExMEQ5MjJG NzUwNzU0NjAeFw0yNjAzMDIxNjEyNTBaFw0yNjAzMDMxNjU2NTBaMDMxMTAvBgNV BAMTKEZCNURCMkQ1NjNDRjRBREUwRkNGMDkyNTBFNjMwMEVFNDBEOTgyMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkIVJr7//CXMDQsdU8FXk0jUj5 rmrkiOsMlHnPf8zEQmyJVM1Mo9wVk+kO/PH1DDzX8D8C3ha1HuifPAr9rEhJMfeP sIwqhgXrmpE6shx+wm/QaPw+p6Dm733d38ZpMuBoTMLdZC/LMkWVDCsGvr6NIwm0 Le0OngdEBjl4XhTfda5/Qv7sX7aapsLiHek7xcEwtOL4Cof5ASdkIIRv73/y3vkA yEo6EeJwGfQvSYUqcsMyB9sBZpyW3xDT0GYoKmu1FaC3Qol9kqQq3/me2qcq68li 8l91+1KuXtqH1lA54rlg69+8iTGxPTReJz6zIbDRPjqFwa3YA3/8rM/ZOOq3AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU+12y1WPPSt4PzwklDmMA7kDZggUwHwYDVR0j BBgwFoAUzbNM9K/AFyEVOZCuGhDZIvdQdUYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMnNSNHVhVW1lcVNOYjJidTRRMU15S25wTEFURUxLWmlRNXRXdHdmOHhU RnEvMC9DREIzNENGNEFGQzAxNzIxMTUzOTkwQUUxQTEwRDkyMkY3NTA3NTQ2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NEQjM0Q0Y0QUZDMDE3MjEx NTM5OTBBRTFBMTBEOTIyRjc1MDc1NDYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MnNSNHVhVW1lcVNOYjJidTRRMU15S25wTEFURUxLWmlRNXRXdHdmOHhURnEvMC9D REIzNENGNEFGQzAxNzIxMTUzOTkwQUUxQTEwRDkyMkY3NTA3NTQ2Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPbDKO6rqPHJIsPCK6x8+gGGB2Yuok/XvdNjNYmBCHHmDu8RI+Rhf5uBh7kvk bcqSUd6t/9YwTO+6ri+N4HzokSHU08uP9vKzjEA9GnhQE4UiJRGcwTqY+RLegEpZ wVehybdtcpHzXZW+V1Y0fw3RmucFy0+94Tghb4Bdnp9Vd+O7Cbq+/3R/cg1yHert vUDJO/oc5OV/mtqI1gTNgOYGP6GM2jpkgFY+USpacSqA+OD2za+2j+7a62dZk/UN by+QYfdkp98HfyQV24ZPuU3VvIuScU8hHPtp/zqKEUKlDJBYbzUG6gzDcS3lG0n8 eyH6w1Dzwfqf+6xrnZVfSVpeyQ== -----END CERTIFICATE-----Generated at Mon Mar 2 20:12:09 2026 by rpki-client