$ rpki-client -vvf rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.mft File: 33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.mft (raw, json) Hash identifier: 7QVM2cCMt1AKCiIjK8abMfMnQBUzR5YT4a7F4OeMJzQ= Subject key identifier: 69:CB:D8:AA:5B:B0:BE:C1:2E:82:26:36:51:07:54:9D:1A:32:05:45 Authority key identifier: 33:D9:9D:98:BF:D9:93:CB:7D:E4:28:4C:D0:B8:34:BD:AA:1F:B7:68 Certificate issuer: /CN=33D99D98BFD993CB7DE4284CD0B834BDAA1FB768 Certificate serial: 62B06B70D1AFA747EA65414C507C600ED019F6FD Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.cer Subject info access: rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.mft Manifest number: 0299 Signing time: Mon 02 Mar 2026 09:42:35 +0000 Manifest this update: Mon 02 Mar 2026 09:37:35 +0000 Manifest next update: Tue 03 Mar 2026 10:56:35 +0000 Files and hashes: 1: 3138362e3233352e36342e302f32302d3234203d3e20323632373235.roa (hash: HrcZaPIw6qWzEc6s97NQP4aCx0sr+eIFUBJ4BvkAiU0=) 2: 323830343a333336303a303a3230303a3a2f35352d3535203d3e20323632373235.roa (hash: TaCWInvLI8a48AGUGO8+iCDWxCk7mM6lWeqt2l/Dnwg=) 3: 3138362e3139322e302e302f32302d3234203d3e20323632373235.roa (hash: qhyepoUM/vR4i7iGTSudcrinyJEPmBC92cOtWL6vuhA=) 4: 323830343a333336303a3a2f33322d3438203d3e20323632373235.roa (hash: iZRZHxag0+tPBMVhvuUKsY7/fLV/sxx+xABdX823i5g=) 5: 33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.crl (hash: s8kvedYpywXcKmjryiZSPvQxnMqtajx8zMnBdDimrZU=) 6: 323830343a333336303a303a33303a3a2f36342d3634203d3e20323632373235.roa (hash: drgBn3Bfkh1ZDqzVLXw6b+ol1K19Qb6SGwRZSnRcdTc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.crl rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 03 Mar 2026 10:56:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:b0:6b:70:d1:af:a7:47:ea:65:41:4c:50:7c:60:0e:d0:19:f6:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33D99D98BFD993CB7DE4284CD0B834BDAA1FB768 Validity Not Before: Mar 2 09:37:35 2026 GMT Not After : Mar 3 10:56:35 2026 GMT Subject: CN=69CBD8AA5BB0BEC12E8226365107549D1A320545 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:50:4f:10:70:06:68:ca:07:e1:ca:86:4d:74: e6:b4:3c:2f:24:8c:b6:61:64:7a:90:76:23:94:73: 6f:31:be:ea:7e:46:f4:5e:25:5f:94:22:bf:45:b2: 6c:6c:75:f4:a0:dd:eb:79:f3:8a:b9:82:15:82:9f: 97:b4:d4:64:6b:9a:5a:ac:64:dc:c4:b4:8f:18:ed: 13:5b:4e:f0:f9:ff:6a:06:70:34:29:7f:16:0f:42: fa:98:8f:fe:9c:e3:ee:3e:fd:68:78:e0:cf:32:9b: 95:e4:39:a6:84:63:32:2f:ab:0e:c2:39:e4:8e:f9: ce:2d:be:91:70:54:d5:ba:4d:e1:5c:2e:0a:1e:63: f8:1d:1b:a5:7e:5d:6e:75:34:08:b5:b1:0e:e1:6e: 89:32:b9:ee:15:af:b2:fe:de:89:85:a8:19:ee:15: 8a:fa:c9:cd:99:df:28:d6:94:a8:3c:b0:69:78:0a: 78:4e:e8:9d:ed:6b:de:c6:d1:30:13:f4:24:4f:ee: b5:d8:e0:05:4c:98:cf:a4:48:ad:23:93:45:cd:ca: f9:71:89:7f:02:7d:c1:6b:8a:59:0a:05:e0:5c:6c: af:72:ce:ac:69:92:ed:59:3b:7a:17:e7:c0:61:68: 91:f2:92:ec:3d:95:fd:a6:87:c9:3f:28:1f:48:db: c3:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:CB:D8:AA:5B:B0:BE:C1:2E:82:26:36:51:07:54:9D:1A:32:05:45 X509v3 Authority Key Identifier: keyid:33:D9:9D:98:BF:D9:93:CB:7D:E4:28:4C:D0:B8:34:BD:AA:1F:B7:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:57:76:24:41:74:50:c3:ac:14:de:db:e3:62:ec:34:8e:8a: 0d:5d:f9:ff:7a:23:dc:3b:ee:0c:2c:80:b2:4b:66:b2:d0:87: 33:22:79:fe:b9:00:1a:13:e3:26:e0:fc:34:53:96:56:69:32: b1:9f:a1:32:f7:50:a5:d1:d9:36:cb:bb:2e:8d:0b:ca:3e:db: 16:72:32:45:49:3c:7d:6c:93:64:13:c7:05:03:34:bc:93:49: 1e:ba:cf:f7:1f:f2:cd:b2:6c:01:f2:f2:6e:24:b1:19:e8:4f: 34:28:02:45:de:ce:b6:dd:46:0c:8e:6e:c9:89:37:0d:36:92: e1:78:8f:2c:24:e2:16:61:45:6d:46:f6:83:83:59:43:fd:f0: 97:84:42:2e:f0:fd:05:37:56:50:43:0b:5e:e5:5b:20:6d:de: 02:3f:84:30:59:2d:7f:3d:a6:c1:60:4d:ba:22:30:83:54:2b: fc:13:16:b2:41:a6:b4:2d:f2:f8:c9:6e:51:61:1d:31:0f:2e: 17:ef:e6:61:b8:80:89:95:91:f4:93:ab:fa:74:7a:36:ce:69: e3:7c:26:f2:12:c7:e1:42:31:bd:f1:61:19:55:ae:45:7a:1e: ce:65:76:97:fa:6a:01:08:07:1a:1a:fb:b4:62:f1:3e:00:e1: 77:23:7c:d5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUYrBrcNGvp0fqZUFMUHxgDtAZ9v0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNEOTlEOThCRkQ5OTNDQjdERTQyODRDRDBCODM0QkRB QTFGQjc2ODAeFw0yNjAzMDIwOTM3MzVaFw0yNjAzMDMxMDU2MzVaMDMxMTAvBgNV BAMTKDY5Q0JEOEFBNUJCMEJFQzEyRTgyMjYzNjUxMDc1NDlEMUEzMjA1NDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJUE8QcAZoygfhyoZNdOa0PC8k jLZhZHqQdiOUc28xvup+RvReJV+UIr9FsmxsdfSg3et584q5ghWCn5e01GRrmlqs ZNzEtI8Y7RNbTvD5/2oGcDQpfxYPQvqYj/6c4+4+/Wh44M8ym5XkOaaEYzIvqw7C OeSO+c4tvpFwVNW6TeFcLgoeY/gdG6V+XW51NAi1sQ7hbokyue4Vr7L+3omFqBnu FYr6yc2Z3yjWlKg8sGl4CnhO6J3ta97G0TAT9CRP7rXY4AVMmM+kSK0jk0XNyvlx iX8CfcFrilkKBeBcbK9yzqxpku1ZO3oX58BhaJHykuw9lf2mh8k/KB9I28PVAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUacvYqluwvsEugiY2UQdUnRoyBUUwHwYDVR0j BBgwFoAUM9mdmL/Zk8t95ChM0Lg0vaoft2gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM0tYa2FuMVAxeGM3Sk5KanRQZUxUbXNHR1F0OGlmUnRWWlBZVHVyaTNO VVIvMC8zM0Q5OUQ5OEJGRDk5M0NCN0RFNDI4NENEMEI4MzRCREFBMUZCNzY4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMzRDk5RDk4QkZEOTkzQ0I3 REU0Mjg0Q0QwQjgzNEJEQUExRkI3NjguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M0tYa2FuMVAxeGM3Sk5KanRQZUxUbXNHR1F0OGlmUnRWWlBZVHVyaTNOVVIvMC8z M0Q5OUQ5OEJGRDk5M0NCN0RFNDI4NENEMEI4MzRCREFBMUZCNzY4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEATFd2JEF0UMOsFN7b42LsNI6KDV35/3oj3DvuDCyAsktmstCHMyJ5/rkAGhPj JuD8NFOWVmkysZ+hMvdQpdHZNsu7Lo0Lyj7bFnIyRUk8fWyTZBPHBQM0vJNJHrrP 9x/yzbJsAfLybiSxGehPNCgCRd7Ott1GDI5uyYk3DTaS4XiPLCTiFmFFbUb2g4NZ Q/3wl4RCLvD9BTdWUEMLXuVbIG3eAj+EMFktfz2mwWBNuiIwg1Qr/BMWskGmtC3y +MluUWEdMQ8uF+/mYbiAiZWR9JOr+nR6Ns5p43wm8hLH4UIxvfFhGVWuRXoezmV2 l/pqAQgHGhr7tGLxPgDhdyN81Q== -----END CERTIFICATE-----Generated at Mon Mar 2 18:18:11 2026 by rpki-client