$ rpki-client -vvf rpki-repo.registro.br/repo/4GnwX2mAgtYY3YoradsFmoSVX4njfzo5dTqho8mg8eRL/0/06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8.mft File: 06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8.mft (raw, json) Hash identifier: viM+Bwg3nzUicrvcUObxLeVI9M5vKeq7Z5YuF0bmGhI= Subject key identifier: 99:63:FB:BD:0D:20:A3:85:AD:E3:BE:04:F2:48:D8:4A:64:6A:1E:39 Authority key identifier: 06:DB:D3:2E:86:5D:9D:08:FA:5C:98:2A:B7:CB:DA:4F:CB:22:62:E8 Certificate issuer: /CN=06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8 Certificate serial: 424A94A5A902CB566A7FDFCADD41394DD2E97435 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8.cer Subject info access: rsync://rpki-repo.registro.br/repo/4GnwX2mAgtYY3YoradsFmoSVX4njfzo5dTqho8mg8eRL/0/06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8.mft Manifest number: 029B Signing time: Mon 02 Mar 2026 08:10:50 +0000 Manifest this update: Mon 02 Mar 2026 08:05:50 +0000 Manifest next update: Tue 03 Mar 2026 08:44:50 +0000 Files and hashes: 1: 323830343a323064633a3a2f33322d3438203d3e20323634353137.roa (hash: zktTgNIrnpj2jMbA9QGdo43g7zA2iuXC/N7Q9tS3gmM=) 2: 3133322e3235352e3137322e302f32322d3234203d3e20323634353137.roa (hash: Z6gii11kXGa6D+1mie3MmLCB7Lu81yMqpingzMNYyTs=) 3: 06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8.crl (hash: DVMPjvHPvxp60RvaLI60fjKUVdgOc5bQS6dTA3CpdMU=) 4: 3133382e3131372e3136342e302f32322d3234203d3e20323634353137.roa (hash: F2HvTqeq5FaHOhCgbB0cHi4fc5snAunjaRp1FpfCqEg=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4GnwX2mAgtYY3YoradsFmoSVX4njfzo5dTqho8mg8eRL/0/06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8.crl rsync://rpki-repo.registro.br/repo/4GnwX2mAgtYY3YoradsFmoSVX4njfzo5dTqho8mg8eRL/0/06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 03 Mar 2026 08:44:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:4a:94:a5:a9:02:cb:56:6a:7f:df:ca:dd:41:39:4d:d2:e9:74:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8 Validity Not Before: Mar 2 08:05:50 2026 GMT Not After : Mar 3 08:44:50 2026 GMT Subject: CN=9963FBBD0D20A385ADE3BE04F248D84A646A1E39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:3c:bc:27:c8:78:a2:85:5a:5d:bd:6b:6a:0f: 5b:e9:53:56:77:44:e5:35:3f:be:69:fd:d4:48:ce: f9:06:56:f2:cc:f8:62:b3:0c:5d:89:45:30:88:24: f7:70:51:44:68:f3:e5:d4:f1:47:cd:1c:68:6c:92: 8d:53:60:bb:42:9f:47:1c:0d:32:0f:35:ca:86:7d: c3:98:ff:06:0a:32:08:cb:43:71:f2:33:6b:b9:3f: c6:a4:1f:3c:22:e9:0d:56:f1:d6:42:93:c2:b7:49: 42:a8:b8:7d:70:51:81:3f:60:a1:18:61:6b:d4:59: 1d:f5:d8:c1:be:42:e8:69:df:52:38:aa:07:b9:11: 87:55:5f:81:72:5b:7e:f6:46:f1:f3:57:f0:5b:73: 50:6c:c4:ec:30:ac:3b:d3:b4:4c:8a:81:2b:2a:64: 2a:e7:cf:55:f4:8d:49:81:c6:98:f2:ee:0d:af:36: 32:28:ee:3c:a4:41:fe:3f:ab:dd:4b:6c:0f:07:04: e1:bb:02:e3:6d:42:13:46:8a:96:b4:9b:88:14:fc: 1b:46:f5:f9:7d:87:d8:c3:6a:4f:09:ff:5e:14:dc: 0d:e5:4f:c1:5e:81:28:87:30:e4:75:e9:ec:b8:22: 71:c1:f1:8d:af:1e:94:b1:1e:b9:5a:5e:3d:b7:84: dd:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:63:FB:BD:0D:20:A3:85:AD:E3:BE:04:F2:48:D8:4A:64:6A:1E:39 X509v3 Authority Key Identifier: keyid:06:DB:D3:2E:86:5D:9D:08:FA:5C:98:2A:B7:CB:DA:4F:CB:22:62:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4GnwX2mAgtYY3YoradsFmoSVX4njfzo5dTqho8mg8eRL/0/06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GnwX2mAgtYY3YoradsFmoSVX4njfzo5dTqho8mg8eRL/0/06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:d1:87:16:a8:73:a6:1c:cc:70:c8:b1:0a:13:e8:b9:d7:f1: 78:23:f3:04:ad:7e:f7:ac:3f:7f:5b:1d:1a:1b:e0:47:be:22: 2a:9f:a9:95:4c:11:a4:9a:73:97:52:f8:7d:f3:97:b3:43:25: 40:9f:bf:8a:5c:d8:d6:01:6f:69:d8:e3:80:b7:97:3f:50:71: 52:2b:73:d8:2b:0e:74:c4:d8:03:11:03:6a:e7:e5:a9:74:27: 2a:0f:06:dc:ef:19:6a:e0:86:9b:e1:f2:6c:84:18:37:72:3f: 86:c4:d3:f1:d5:96:79:36:ff:da:25:f7:a0:7c:6f:b9:9a:13: ed:a1:a9:e7:1a:24:09:02:b6:98:c5:62:92:59:d7:2d:ec:c9: 9b:29:cf:e6:ab:ba:b4:ae:b1:c3:0a:89:ed:b9:06:70:2a:20: 37:1d:02:d4:0b:35:c7:71:a3:00:3b:91:c1:8e:18:62:ab:93: a1:d6:8b:ce:b9:08:a9:c7:5d:fd:2b:3b:03:2e:1b:b8:a6:27: db:fa:fe:be:42:24:29:0f:0d:29:40:26:70:69:77:32:5f:b0: 6d:21:5c:b9:cd:23:ba:26:97:5a:81:b2:08:c4:b8:7b:b4:12: 03:f8:b6:00:61:57:8e:23:78:b2:ee:eb:0f:84:a1:d7:fd:87: a7:c1:c3:54 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUQkqUpakCy1Zqf9/K3UE5TdLpdDUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDZEQkQzMkU4NjVEOUQwOEZBNUM5ODJBQjdDQkRBNEZD QjIyNjJFODAeFw0yNjAzMDIwODA1NTBaFw0yNjAzMDMwODQ0NTBaMDMxMTAvBgNV BAMTKDk5NjNGQkJEMEQyMEEzODVBREUzQkUwNEYyNDhEODRBNjQ2QTFFMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUPLwnyHiihVpdvWtqD1vpU1Z3 ROU1P75p/dRIzvkGVvLM+GKzDF2JRTCIJPdwUURo8+XU8UfNHGhsko1TYLtCn0cc DTIPNcqGfcOY/wYKMgjLQ3HyM2u5P8akHzwi6Q1W8dZCk8K3SUKouH1wUYE/YKEY YWvUWR312MG+Quhp31I4qge5EYdVX4FyW372RvHzV/Bbc1BsxOwwrDvTtEyKgSsq ZCrnz1X0jUmBxpjy7g2vNjIo7jykQf4/q91LbA8HBOG7AuNtQhNGipa0m4gU/BtG 9fl9h9jDak8J/14U3A3lT8FegSiHMOR16ey4InHB8Y2vHpSxHrlaXj23hN3xAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUmWP7vQ0go4Wt474E8kjYSmRqHjkwHwYDVR0j BBgwFoAUBtvTLoZdnQj6XJgqt8vaT8siYugwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNEdud1gybUFndFlZM1lvcmFkc0Ztb1NWWDRuamZ6bzVkVHFobzhtZzhl UkwvMC8wNkRCRDMyRTg2NUQ5RDA4RkE1Qzk4MkFCN0NCREE0RkNCMjI2MkU4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA2REJEMzJFODY1RDlEMDhG QTVDOTgyQUI3Q0JEQTRGQ0IyMjYyRTguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NEdud1gybUFndFlZM1lvcmFkc0Ztb1NWWDRuamZ6bzVkVHFobzhtZzhlUkwvMC8w NkRCRDMyRTg2NUQ5RDA4RkE1Qzk4MkFCN0NCREE0RkNCMjI2MkU4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPdGHFqhzphzMcMixChPoudfxeCPzBK1+96w/f1sdGhvgR74iKp+plUwRpJpz l1L4ffOXs0MlQJ+/ilzY1gFvadjjgLeXP1BxUitz2CsOdMTYAxEDauflqXQnKg8G 3O8ZauCGm+HybIQYN3I/hsTT8dWWeTb/2iX3oHxvuZoT7aGp5xokCQK2mMViklnX LezJmynP5qu6tK6xwwqJ7bkGcCogNx0C1As1x3GjADuRwY4YYquTodaLzrkIqcdd /Ss7Ay4buKYn2/r+vkIkKQ8NKUAmcGl3Ml+wbSFcuc0juiaXWoGyCMS4e7QSA/i2 AGFXjiN4su7rD4Sh1/2Hp8HDVA== -----END CERTIFICATE-----Generated at Mon Mar 2 12:00:53 2026 by rpki-client