$ rpki-client -vvf rpki-repo.registro.br/repo/7poKX9N8dcuVV79vR2f6w85cj3tpBzAs2jA7qi9TcBvk/0/CB224EC9F8B4CEEA2F2D6E2FB6E2FDADB6AAC8A1.mft File: CB224EC9F8B4CEEA2F2D6E2FB6E2FDADB6AAC8A1.mft (raw, json) Hash identifier: GmBZm2sZyMUZfeO4ygoIVlObwIg5c7SD+LoUp0ldetc= Subject key identifier: 16:B0:90:B2:10:98:58:24:2F:77:43:B4:EC:AF:5B:0A:9E:0E:8E:32 Authority key identifier: CB:22:4E:C9:F8:B4:CE:EA:2F:2D:6E:2F:B6:E2:FD:AD:B6:AA:C8:A1 Certificate issuer: /CN=CB224EC9F8B4CEEA2F2D6E2FB6E2FDADB6AAC8A1 Certificate serial: 0177E7E392BE6F9EE32198B2D7076D2275FD6461 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB224EC9F8B4CEEA2F2D6E2FB6E2FDADB6AAC8A1.cer Subject info access: rsync://rpki-repo.registro.br/repo/7poKX9N8dcuVV79vR2f6w85cj3tpBzAs2jA7qi9TcBvk/0/CB224EC9F8B4CEEA2F2D6E2FB6E2FDADB6AAC8A1.mft Manifest number: D7 Signing time: Mon 02 Mar 2026 15:53:14 +0000 Manifest this update: Mon 02 Mar 2026 15:48:14 +0000 Manifest next update: Tue 03 Mar 2026 17:58:14 +0000 Files and hashes: 1: CB224EC9F8B4CEEA2F2D6E2FB6E2FDADB6AAC8A1.crl (hash: TiyHrAJU+7PfTnIlSoJAivS5CnZz1p6DXVslwcnLVy8=) 2: 34352e3138372e32302e302f32322d3234203d3e20323639343833.roa (hash: fmu9Yn5/C/J+YfUZLc8KQ7P9FB91xBYqIaeFNXI3FjY=) 3: 323830343a363535343a3a2f33322d3438203d3e20323639343833.roa (hash: TZWtfH5ij650ijLBJ9vtX7taN3u/arKIvGUt+j4npdE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7poKX9N8dcuVV79vR2f6w85cj3tpBzAs2jA7qi9TcBvk/0/CB224EC9F8B4CEEA2F2D6E2FB6E2FDADB6AAC8A1.crl rsync://rpki-repo.registro.br/repo/7poKX9N8dcuVV79vR2f6w85cj3tpBzAs2jA7qi9TcBvk/0/CB224EC9F8B4CEEA2F2D6E2FB6E2FDADB6AAC8A1.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB224EC9F8B4CEEA2F2D6E2FB6E2FDADB6AAC8A1.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 03 Mar 2026 17:58:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:77:e7:e3:92:be:6f:9e:e3:21:98:b2:d7:07:6d:22:75:fd:64:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CB224EC9F8B4CEEA2F2D6E2FB6E2FDADB6AAC8A1 Validity Not Before: Mar 2 15:48:14 2026 GMT Not After : Mar 3 17:58:14 2026 GMT Subject: CN=16B090B2109858242F7743B4ECAF5B0A9E0E8E32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:b5:f7:98:6f:d0:fa:da:36:97:74:bd:3b:81: 35:10:f0:06:11:d7:a9:75:c6:cd:ac:03:40:c9:1c: 1e:c2:7a:b0:bd:f8:a7:30:cc:2f:49:3a:5e:6c:51: 28:51:5a:84:3b:fe:65:69:46:ae:53:94:95:0f:1b: 89:71:29:ab:6d:0e:2d:15:34:c2:3d:76:b4:d8:14: 67:c8:a8:2e:23:01:7b:a4:b7:a1:29:d4:76:21:70: 85:f5:ef:fd:90:26:cb:d7:6c:52:cd:59:64:6d:7d: 63:15:7b:ac:3e:77:bc:df:c1:fd:4d:e5:a1:41:c4: 40:b5:bc:5a:98:3a:dc:b6:06:7a:bd:7b:cd:be:48: 24:bf:06:48:76:31:35:4f:fc:cb:fd:17:96:62:77: 3c:00:4c:04:7b:39:08:0f:24:ec:84:56:d2:14:ff: b1:78:3f:c1:e8:ae:8a:25:ca:af:1f:27:22:d0:d5: 8e:2c:b7:78:0e:17:0d:2a:74:0f:a2:6a:e4:35:6f: 42:3b:31:1b:08:38:eb:46:42:bf:f9:9d:7d:ff:d3: a4:04:c5:27:7e:74:23:80:f9:b6:db:70:d6:93:94: 6c:57:7c:e1:05:df:cb:20:82:c1:65:cd:a9:90:96: 6e:c6:94:6c:3f:ad:92:64:c6:f3:d5:da:76:84:0f: f4:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:B0:90:B2:10:98:58:24:2F:77:43:B4:EC:AF:5B:0A:9E:0E:8E:32 X509v3 Authority Key Identifier: keyid:CB:22:4E:C9:F8:B4:CE:EA:2F:2D:6E:2F:B6:E2:FD:AD:B6:AA:C8:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7poKX9N8dcuVV79vR2f6w85cj3tpBzAs2jA7qi9TcBvk/0/CB224EC9F8B4CEEA2F2D6E2FB6E2FDADB6AAC8A1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB224EC9F8B4CEEA2F2D6E2FB6E2FDADB6AAC8A1.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7poKX9N8dcuVV79vR2f6w85cj3tpBzAs2jA7qi9TcBvk/0/CB224EC9F8B4CEEA2F2D6E2FB6E2FDADB6AAC8A1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:6b:4e:fb:0f:94:82:f5:12:09:00:72:df:a4:93:af:73:33: 05:35:f2:1c:bf:25:8e:e4:43:69:5a:4e:5f:c8:21:33:33:ef: af:5f:ea:37:a1:04:54:99:1c:b1:d1:3c:45:97:99:e6:f4:87: 46:c9:ea:2a:7d:e5:e3:41:5a:d6:bd:fa:46:d2:74:c8:3b:8e: d5:cc:55:5a:3e:0a:b6:eb:34:05:30:d1:d4:da:fe:aa:0a:81: fa:ca:2a:ba:2f:6d:be:80:e0:fe:8a:47:07:5f:64:0a:56:5d: f4:98:0a:75:fb:6c:1a:fd:c6:42:68:3d:9c:a7:bc:2d:cc:12: 73:8a:68:31:8a:74:12:90:cf:dc:69:6e:45:41:52:e2:9b:a2: 6b:ca:b1:80:fb:d2:ff:d2:5e:cd:a6:da:ed:31:9c:bf:79:75: 7a:1c:21:aa:cd:92:f3:11:12:f0:cd:83:f0:78:96:89:ec:d1: b2:74:de:15:25:9f:ba:2f:1a:ea:26:bb:9c:ce:9f:ca:f9:41: 96:7b:3e:e0:95:dc:d3:21:2b:e1:a2:e8:c9:11:cf:d0:91:ad: 73:7a:11:bf:a3:4f:82:8e:5b:1a:7a:cf:9a:8b:3b:24:1b:c6: 15:f4:97:33:4e:05:5b:b6:c4:aa:df:2a:68:61:81:70:3a:85: 99:a2:cd:ee -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUAXfn45K+b57jIZiy1wdtInX9ZGEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0IyMjRFQzlGOEI0Q0VFQTJGMkQ2RTJGQjZFMkZEQURC NkFBQzhBMTAeFw0yNjAzMDIxNTQ4MTRaFw0yNjAzMDMxNzU4MTRaMDMxMTAvBgNV BAMTKDE2QjA5MEIyMTA5ODU4MjQyRjc3NDNCNEVDQUY1QjBBOUUwRThFMzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWtfeYb9D62jaXdL07gTUQ8AYR 16l1xs2sA0DJHB7CerC9+KcwzC9JOl5sUShRWoQ7/mVpRq5TlJUPG4lxKattDi0V NMI9drTYFGfIqC4jAXukt6Ep1HYhcIX17/2QJsvXbFLNWWRtfWMVe6w+d7zfwf1N 5aFBxEC1vFqYOty2Bnq9e82+SCS/Bkh2MTVP/Mv9F5ZidzwATAR7OQgPJOyEVtIU /7F4P8Horoolyq8fJyLQ1Y4st3gOFw0qdA+iauQ1b0I7MRsIOOtGQr/5nX3/06QE xSd+dCOA+bbbcNaTlGxXfOEF38sggsFlzamQlm7GlGw/rZJkxvPV2naED/SRAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUFrCQshCYWCQvd0O07K9bCp4OjjIwHwYDVR0j BBgwFoAUyyJOyfi0zuovLW4vtuL9rbaqyKEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN3BvS1g5TjhkY3VWVjc5dlIyZjZ3ODVjajN0cEJ6QXMyakE3cWk5VGNC dmsvMC9DQjIyNEVDOUY4QjRDRUVBMkYyRDZFMkZCNkUyRkRBREI2QUFDOEExLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NCMjI0RUM5RjhCNENFRUEy RjJENkUyRkI2RTJGREFEQjZBQUM4QTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v N3BvS1g5TjhkY3VWVjc5dlIyZjZ3ODVjajN0cEJ6QXMyakE3cWk5VGNCdmsvMC9D QjIyNEVDOUY4QjRDRUVBMkYyRDZFMkZCNkUyRkRBREI2QUFDOEExLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAM2tO+w+UgvUSCQBy36STr3MzBTXyHL8ljuRDaVpOX8ghMzPvr1/qN6EEVJkc sdE8RZeZ5vSHRsnqKn3l40Fa1r36RtJ0yDuO1cxVWj4Ktus0BTDR1Nr+qgqB+soq ui9tvoDg/opHB19kClZd9JgKdftsGv3GQmg9nKe8LcwSc4poMYp0EpDP3GluRUFS 4puia8qxgPvS/9Jezaba7TGcv3l1ehwhqs2S8xES8M2D8HiWiezRsnTeFSWfui8a 6ia7nM6fyvlBlns+4JXc0yEr4aLoyRHP0JGtc3oRv6NPgo5bGnrPmos7JBvGFfSX M04FW7bEqt8qaGGBcDqFmaLN7g== -----END CERTIFICATE-----Generated at Mon Mar 2 19:29:28 2026 by rpki-client