$ rpki-client -vvf rpki-repo.registro.br/repo/3RBkxYdDHDXH2SaXweaFQ1jAnsXmZqEspsjftAGREd7Y/0/2B7568CA4C33430EB72DDBC822D40E65F63042A3.mft File: 2B7568CA4C33430EB72DDBC822D40E65F63042A3.mft (raw, json) Hash identifier: TivZNLOD1d1+jDuoDISYSgFXdR6fOg8IZcRInC2ajQc= Subject key identifier: 33:65:EF:A9:55:50:2C:38:FF:47:CB:98:9C:3B:CD:E4:4A:54:27:FC Authority key identifier: 2B:75:68:CA:4C:33:43:0E:B7:2D:DB:C8:22:D4:0E:65:F6:30:42:A3 Certificate issuer: /CN=2B7568CA4C33430EB72DDBC822D40E65F63042A3 Certificate serial: 127B1590AC77FEB8E7DCB362CD94E158DF04C93F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B7568CA4C33430EB72DDBC822D40E65F63042A3.cer Subject info access: rsync://rpki-repo.registro.br/repo/3RBkxYdDHDXH2SaXweaFQ1jAnsXmZqEspsjftAGREd7Y/0/2B7568CA4C33430EB72DDBC822D40E65F63042A3.mft Manifest number: 0398 Signing time: Sun 01 Mar 2026 23:32:46 +0000 Manifest this update: Sun 01 Mar 2026 23:27:46 +0000 Manifest next update: Tue 03 Mar 2026 00:44:46 +0000 Files and hashes: 1: 323830343a6134383a3a2f33322d3438203d3e20323633303834.roa (hash: jPrR+RSh1mv/rOMCUWCMEK9RXpMvIUpnibJtczV7Zt8=) 2: 3137372e32312e34382e302f32302d3234203d3e20323633303834.roa (hash: e/s1SwprzaW2XI2ybtfgpJhbKCKNV7Oqf5bmwFWZXOU=) 3: 2B7568CA4C33430EB72DDBC822D40E65F63042A3.crl (hash: w9XLgm2sHWm9xUF+N3N7SlZY1jqrxvxeSXDLcpbwq6Y=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3RBkxYdDHDXH2SaXweaFQ1jAnsXmZqEspsjftAGREd7Y/0/2B7568CA4C33430EB72DDBC822D40E65F63042A3.crl rsync://rpki-repo.registro.br/repo/3RBkxYdDHDXH2SaXweaFQ1jAnsXmZqEspsjftAGREd7Y/0/2B7568CA4C33430EB72DDBC822D40E65F63042A3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B7568CA4C33430EB72DDBC822D40E65F63042A3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 03 Mar 2026 00:44:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:7b:15:90:ac:77:fe:b8:e7:dc:b3:62:cd:94:e1:58:df:04:c9:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B7568CA4C33430EB72DDBC822D40E65F63042A3 Validity Not Before: Mar 1 23:27:46 2026 GMT Not After : Mar 3 00:44:46 2026 GMT Subject: CN=3365EFA955502C38FF47CB989C3BCDE44A5427FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:f8:9b:02:e1:4f:76:8e:6e:62:fa:03:51:61: 8a:0d:5e:66:eb:87:a7:36:3f:23:4b:55:08:67:40: de:82:db:40:01:05:90:30:6a:43:60:d3:ef:b0:70: 72:13:7a:55:ad:de:17:56:07:a1:5c:29:19:72:06: 8c:ac:3c:09:e9:de:1b:7f:39:4c:38:77:b3:f7:1d: 22:c7:7d:24:fb:a7:f7:6c:c9:92:86:f0:5b:89:3d: 8e:9c:27:17:25:32:5f:b6:a7:96:5c:a8:58:3f:8d: 20:ae:54:58:38:b8:6f:6e:66:b4:48:c2:7f:b1:fc: bf:9c:fa:f4:f6:e1:99:56:7d:23:3b:c0:dd:33:35: 61:40:18:b0:b9:ed:26:d6:6d:7e:50:21:9d:c3:e8: ed:da:16:45:6f:05:c0:5f:d3:51:d1:6c:3b:4b:15: 07:c1:42:7f:0c:95:32:68:e9:ae:71:81:82:cf:fb: cd:7d:f1:9c:e1:e1:6c:67:79:e7:52:12:97:3d:c2: a8:28:f4:a5:f3:e2:db:1b:0e:2b:7b:6f:85:2c:7c: a7:ae:98:d1:36:e8:e8:b6:7e:20:47:c7:5f:f2:aa: 28:3c:1a:6d:a0:44:d8:7b:8f:22:53:a9:f2:26:07: f5:86:fa:b7:a0:24:e8:81:a4:ea:d3:e1:bf:e2:af: 01:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:65:EF:A9:55:50:2C:38:FF:47:CB:98:9C:3B:CD:E4:4A:54:27:FC X509v3 Authority Key Identifier: keyid:2B:75:68:CA:4C:33:43:0E:B7:2D:DB:C8:22:D4:0E:65:F6:30:42:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3RBkxYdDHDXH2SaXweaFQ1jAnsXmZqEspsjftAGREd7Y/0/2B7568CA4C33430EB72DDBC822D40E65F63042A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B7568CA4C33430EB72DDBC822D40E65F63042A3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3RBkxYdDHDXH2SaXweaFQ1jAnsXmZqEspsjftAGREd7Y/0/2B7568CA4C33430EB72DDBC822D40E65F63042A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:11:02:51:4c:8d:cf:69:72:71:12:97:49:e5:8a:d3:bb:4f: 66:03:67:8a:01:fb:19:4a:8f:8f:f0:18:cb:68:9b:e5:ee:eb: 31:f4:18:1d:3a:f3:08:94:15:93:36:4d:cd:13:93:80:5d:b5: 55:39:9e:e3:2f:cf:c4:ef:0c:a4:47:50:7d:e8:29:2f:c7:3f: 75:a5:98:c5:12:8f:fd:1a:dc:85:b3:e1:15:f8:f8:cb:b2:c2: 22:e5:a5:f6:ad:2e:ef:e4:7d:80:54:97:7e:4b:21:b1:f0:23: 78:8b:77:d7:10:e2:40:f0:09:de:6f:51:0e:af:ff:c1:0f:c3: a6:1d:6a:99:f3:18:10:40:e5:80:5f:25:38:b2:1d:d5:e9:63: 6a:65:c8:1b:0d:3c:ed:aa:e3:aa:f4:9c:9b:ab:67:e8:f9:fb: f5:cb:e3:f2:af:27:6a:da:0c:54:43:7f:8e:0f:1c:e2:45:77: 8c:f4:d9:86:b1:a8:41:2f:ad:e3:99:98:b4:79:9c:e5:4f:06: 5f:05:98:86:75:66:10:85:89:01:56:44:ef:33:e3:ba:8d:75: d3:f0:74:8e:78:1a:ec:ed:6d:ed:b5:9f:32:97:ee:73:83:64: 16:1c:22:7a:a1:95:d2:8a:0d:fd:a4:e0:d3:65:be:7f:54:f6: de:f8:5d:8f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUEnsVkKx3/rjn3LNizZThWN8EyT8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkI3NTY4Q0E0QzMzNDMwRUI3MkREQkM4MjJENDBFNjVG NjMwNDJBMzAeFw0yNjAzMDEyMzI3NDZaFw0yNjAzMDMwMDQ0NDZaMDMxMTAvBgNV BAMTKDMzNjVFRkE5NTU1MDJDMzhGRjQ3Q0I5ODlDM0JDREU0NEE1NDI3RkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDq+JsC4U92jm5i+gNRYYoNXmbr h6c2PyNLVQhnQN6C20ABBZAwakNg0++wcHITelWt3hdWB6FcKRlyBoysPAnp3ht/ OUw4d7P3HSLHfST7p/dsyZKG8FuJPY6cJxclMl+2p5ZcqFg/jSCuVFg4uG9uZrRI wn+x/L+c+vT24ZlWfSM7wN0zNWFAGLC57SbWbX5QIZ3D6O3aFkVvBcBf01HRbDtL FQfBQn8MlTJo6a5xgYLP+8198Zzh4WxneedSEpc9wqgo9KXz4tsbDit7b4UsfKeu mNE26Oi2fiBHx1/yqig8Gm2gRNh7jyJTqfImB/WG+regJOiBpOrT4b/irwEPAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUM2XvqVVQLDj/R8uYnDvN5EpUJ/wwHwYDVR0j BBgwFoAUK3VoykwzQw63LdvIItQOZfYwQqMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM1JCa3hZZERIRFhIMlNhWHdlYUZRMWpBbnNYbVpxRXNwc2pmdEFHUkVk N1kvMC8yQjc1NjhDQTRDMzM0MzBFQjcyRERCQzgyMkQ0MEU2NUY2MzA0MkEzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJCNzU2OENBNEMzMzQzMEVC NzJEREJDODIyRDQwRTY1RjYzMDQyQTMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M1JCa3hZZERIRFhIMlNhWHdlYUZRMWpBbnNYbVpxRXNwc2pmdEFHUkVkN1kvMC8y Qjc1NjhDQTRDMzM0MzBFQjcyRERCQzgyMkQ0MEU2NUY2MzA0MkEzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAoRECUUyNz2lycRKXSeWK07tPZgNnigH7GUqPj/AYy2ib5e7rMfQYHTrzCJQV kzZNzROTgF21VTme4y/PxO8MpEdQfegpL8c/daWYxRKP/RrchbPhFfj4y7LCIuWl 9q0u7+R9gFSXfkshsfAjeIt31xDiQPAJ3m9RDq//wQ/Dph1qmfMYEEDlgF8lOLId 1eljamXIGw087arjqvScm6tn6Pn79cvj8q8natoMVEN/jg8c4kV3jPTZhrGoQS+t 45mYtHmc5U8GXwWYhnVmEIWJAVZE7zPjuo110/B0jnga7O1t7bWfMpfuc4NkFhwi eqGV0ooN/aTg02W+f1T23vhdjw== -----END CERTIFICATE-----Generated at Mon Mar 2 16:02:34 2026 by rpki-client