$ rpki-client -vvf rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/33702311ADCA7FC6C85DC0655A9217C00BE5E1EC.mft File: 33702311ADCA7FC6C85DC0655A9217C00BE5E1EC.mft (raw, json) Hash identifier: gNvuYZTVbndeIvjmcSUHA65LrcER67oxM667Onp0UXY= Subject key identifier: 4F:34:EA:3A:0C:A9:F9:C2:EC:64:5E:4E:3F:31:F8:BD:C3:80:51:B7 Authority key identifier: 33:70:23:11:AD:CA:7F:C6:C8:5D:C0:65:5A:92:17:C0:0B:E5:E1:EC Certificate issuer: /CN=33702311ADCA7FC6C85DC0655A9217C00BE5E1EC Certificate serial: 4BAB87B725DB5001BFF5FC27E60434A530FD7ECF Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33702311ADCA7FC6C85DC0655A9217C00BE5E1EC.cer Subject info access: rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/33702311ADCA7FC6C85DC0655A9217C00BE5E1EC.mft Manifest number: 44 Signing time: Mon 02 Mar 2026 12:06:37 +0000 Manifest this update: Mon 02 Mar 2026 12:01:37 +0000 Manifest next update: Tue 03 Mar 2026 12:21:37 +0000 Files and hashes: 1: 323830343a333563303a3a2f33322d313238203d3e20323636333034.roa (hash: LIdBu4hH76fjQZltvNuNl4Sk11vROmmGVVYxeEIWdRU=) 2: 3137302e37392e3230322e302f32332d3332203d3e20323636333034.roa (hash: pLHLAyc3v38AwOZ1l5MAIcR4fRXI2Nn9ORHjbHU/uIU=) 3: 33702311ADCA7FC6C85DC0655A9217C00BE5E1EC.crl (hash: DRQxJOLgKdxA2SD3MI6hziPZrSL2sEn2S4diBpsntbY=) 4: 3137302e37392e3230302e302f32322d3332203d3e20323636333034.roa (hash: F0hl7fFUX/02GFyDa1Q0o9KwtX4RrOs5ypWX63He8Tk=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/33702311ADCA7FC6C85DC0655A9217C00BE5E1EC.crl rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/33702311ADCA7FC6C85DC0655A9217C00BE5E1EC.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33702311ADCA7FC6C85DC0655A9217C00BE5E1EC.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 03 Mar 2026 12:21:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:ab:87:b7:25:db:50:01:bf:f5:fc:27:e6:04:34:a5:30:fd:7e:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33702311ADCA7FC6C85DC0655A9217C00BE5E1EC Validity Not Before: Mar 2 12:01:37 2026 GMT Not After : Mar 3 12:21:37 2026 GMT Subject: CN=4F34EA3A0CA9F9C2EC645E4E3F31F8BDC38051B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:47:2a:82:57:36:24:0d:9f:d9:14:fd:bb:45: 49:56:55:7b:fe:86:ff:d3:bd:ad:3f:67:e8:d4:5b: cb:68:59:e3:1e:6d:58:f8:7a:12:5c:be:2f:dd:aa: dd:bf:e9:68:e9:4c:f5:77:79:24:ec:bd:1b:01:34: 52:21:50:9b:af:12:9d:d4:90:c9:8a:31:c9:05:6d: 3f:e2:51:41:7e:71:49:12:6c:4b:d8:1a:26:6b:d0: e6:f5:26:83:fd:2b:a3:e1:a4:cd:65:92:25:0d:af: 8e:80:fc:82:83:e4:d4:37:8f:18:f6:8b:19:a3:97: f8:e8:d9:82:5d:05:fc:0f:6c:3c:b8:a4:05:e6:8e: 96:92:22:6f:15:8f:33:93:e1:a1:b1:b4:8e:82:89: 50:b5:e0:ef:64:be:a7:81:74:1c:b9:39:6c:8e:fd: b3:ac:28:96:9a:1e:2d:ac:4f:28:99:fa:1e:df:26: 46:fc:31:1d:99:ff:0b:72:bf:a9:1b:09:b3:cc:56: b3:43:5e:05:bd:ba:c3:c8:81:b6:2b:f7:c8:d8:8d: bd:59:31:c3:ea:ce:15:f7:08:ba:bf:15:7f:26:69: 88:9a:71:97:2f:50:34:76:76:bb:b5:7a:e3:1a:79: 53:9f:1a:eb:da:7c:5c:da:ed:33:87:da:0e:50:c6: c7:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:34:EA:3A:0C:A9:F9:C2:EC:64:5E:4E:3F:31:F8:BD:C3:80:51:B7 X509v3 Authority Key Identifier: keyid:33:70:23:11:AD:CA:7F:C6:C8:5D:C0:65:5A:92:17:C0:0B:E5:E1:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/33702311ADCA7FC6C85DC0655A9217C00BE5E1EC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33702311ADCA7FC6C85DC0655A9217C00BE5E1EC.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/33702311ADCA7FC6C85DC0655A9217C00BE5E1EC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:fe:ed:15:e1:66:b3:b5:2b:1b:0c:65:db:d7:84:ef:fe:b1: e8:9e:52:96:15:2d:8c:d5:4f:8d:6e:b7:aa:c3:20:04:e6:3a: fd:ad:98:e1:09:43:eb:4b:dc:e5:9f:3b:b9:4b:53:73:27:26: 85:ce:a0:c1:15:00:a4:31:52:60:01:f0:12:7a:95:1a:de:58: 65:5e:d2:b4:b5:16:80:3d:f5:8a:41:0d:4a:32:55:18:85:22: 16:2b:a3:4a:18:3f:08:b8:64:f7:b9:e3:4c:5f:8c:eb:ea:ed: d6:43:1c:6f:0e:a2:e8:ba:3b:1e:b3:4e:75:e8:65:36:3e:7e: 4b:af:03:3e:a2:69:a3:bd:aa:57:e9:1f:85:6d:26:c2:14:8a: 90:10:0a:82:93:12:2c:4a:d8:f5:7b:cb:3b:36:ed:6b:5c:27: 3f:ef:30:f8:81:a3:9f:6e:6b:ee:df:0a:eb:1a:ac:5e:8a:df: 7d:4a:c3:4e:3e:f2:43:58:e7:f0:5f:02:fe:11:86:c9:57:a3: 8a:91:a7:43:a3:a6:7e:3d:96:fe:3b:ff:12:e2:af:99:90:63: b7:bb:ab:d4:8f:a5:be:3f:91:89:1b:34:52:cf:24:e2:ca:67: 08:e4:fd:bc:93:7e:96:50:e7:0b:b2:40:ed:49:66:c7:54:50: 78:a3:d9:87 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUS6uHtyXbUAG/9fwn5gQ0pTD9fs8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzM3MDIzMTFBRENBN0ZDNkM4NURDMDY1NUE5MjE3QzAw QkU1RTFFQzAeFw0yNjAzMDIxMjAxMzdaFw0yNjAzMDMxMjIxMzdaMDMxMTAvBgNV BAMTKDRGMzRFQTNBMENBOUY5QzJFQzY0NUU0RTNGMzFGOEJEQzM4MDUxQjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDRyqCVzYkDZ/ZFP27RUlWVXv+ hv/Tva0/Z+jUW8toWeMebVj4ehJcvi/dqt2/6WjpTPV3eSTsvRsBNFIhUJuvEp3U kMmKMckFbT/iUUF+cUkSbEvYGiZr0Ob1JoP9K6PhpM1lkiUNr46A/IKD5NQ3jxj2 ixmjl/jo2YJdBfwPbDy4pAXmjpaSIm8VjzOT4aGxtI6CiVC14O9kvqeBdBy5OWyO /bOsKJaaHi2sTyiZ+h7fJkb8MR2Z/wtyv6kbCbPMVrNDXgW9usPIgbYr98jYjb1Z McPqzhX3CLq/FX8maYiacZcvUDR2dru1euMaeVOfGuvafFza7TOH2g5QxscVAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUTzTqOgyp+cLsZF5OPzH4vcOAUbcwHwYDVR0j BBgwFoAUM3AjEa3Kf8bIXcBlWpIXwAvl4ewwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMnRIaXV4cW82bmJ3WnRxQ0FxS3gyRGJVNzZ2ckhXVVgxQmJaUEY1RThq ZkIvMC8zMzcwMjMxMUFEQ0E3RkM2Qzg1REMwNjU1QTkyMTdDMDBCRTVFMUVDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMzNzAyMzExQURDQTdGQzZD ODVEQzA2NTVBOTIxN0MwMEJFNUUxRUMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MnRIaXV4cW82bmJ3WnRxQ0FxS3gyRGJVNzZ2ckhXVVgxQmJaUEY1RThqZkIvMC8z MzcwMjMxMUFEQ0E3RkM2Qzg1REMwNjU1QTkyMTdDMDBCRTVFMUVDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEACf7tFeFms7UrGwxl29eE7/6x6J5SlhUtjNVPjW63qsMgBOY6/a2Y4QlD60vc 5Z87uUtTcycmhc6gwRUApDFSYAHwEnqVGt5YZV7StLUWgD31ikENSjJVGIUiFiuj Shg/CLhk97njTF+M6+rt1kMcbw6i6Lo7HrNOdehlNj5+S68DPqJpo72qV+kfhW0m whSKkBAKgpMSLErY9XvLOzbta1wnP+8w+IGjn25r7t8K6xqsXorffUrDTj7yQ1jn 8F8C/hGGyVejipGnQ6Omfj2W/jv/EuKvmZBjt7ur1I+lvj+RiRs0Us8k4spnCOT9 vJN+llDnC7JA7Ulmx1RQeKPZhw== -----END CERTIFICATE-----Generated at Mon Mar 2 15:12:34 2026 by rpki-client