$ rpki-client -vvf rpki-repo.registro.br/repo/9BACTUDQ67ZoFoRdPtpa9uVCKVhTGKNQ8e8rYEb4TuLZ/1/424DD3837DD98F89E3F7BC09D7D17B26CB974CE9.mft File: 424DD3837DD98F89E3F7BC09D7D17B26CB974CE9.mft (raw, json) Hash identifier: XQLzUNWCqT44lxsGmoSvMLmciYEX0hRaohrZFn4otAg= Subject key identifier: BE:EB:A7:20:C4:A8:70:EA:94:00:DE:24:02:87:95:4A:BB:E9:1C:87 Authority key identifier: 42:4D:D3:83:7D:D9:8F:89:E3:F7:BC:09:D7:D1:7B:26:CB:97:4C:E9 Certificate issuer: /CN=424DD3837DD98F89E3F7BC09D7D17B26CB974CE9 Certificate serial: 43CA7576384BBE6E49D7C47D53D4C8E51A1338AB Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/424DD3837DD98F89E3F7BC09D7D17B26CB974CE9.cer Subject info access: rsync://rpki-repo.registro.br/repo/9BACTUDQ67ZoFoRdPtpa9uVCKVhTGKNQ8e8rYEb4TuLZ/1/424DD3837DD98F89E3F7BC09D7D17B26CB974CE9.mft Manifest number: 03A6 Signing time: Mon 02 Mar 2026 11:12:12 +0000 Manifest this update: Mon 02 Mar 2026 11:07:12 +0000 Manifest next update: Tue 03 Mar 2026 11:59:12 +0000 Files and hashes: 1: 323830343a356538383a3a2f33322d3438203d3e20323639303339.roa (hash: /3sqQIBTa3hxn0UdcKO6Ja3KscMr40/b2Dee/G49wlg=) 2: 424DD3837DD98F89E3F7BC09D7D17B26CB974CE9.crl (hash: TQaOO6JgnbgT6IqL2pHHzRCG/GVE/PGQd0nX3lR38Lo=) 3: 34352e3137372e3136302e302f32322d3234203d3e20323639303339.roa (hash: TMYk7Ho0KodBzVtCHwIpxNLPHTRDuFaSSLYPzV8TGDo=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9BACTUDQ67ZoFoRdPtpa9uVCKVhTGKNQ8e8rYEb4TuLZ/1/424DD3837DD98F89E3F7BC09D7D17B26CB974CE9.crl rsync://rpki-repo.registro.br/repo/9BACTUDQ67ZoFoRdPtpa9uVCKVhTGKNQ8e8rYEb4TuLZ/1/424DD3837DD98F89E3F7BC09D7D17B26CB974CE9.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/424DD3837DD98F89E3F7BC09D7D17B26CB974CE9.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 03 Mar 2026 11:59:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:ca:75:76:38:4b:be:6e:49:d7:c4:7d:53:d4:c8:e5:1a:13:38:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=424DD3837DD98F89E3F7BC09D7D17B26CB974CE9 Validity Not Before: Mar 2 11:07:12 2026 GMT Not After : Mar 3 11:59:12 2026 GMT Subject: CN=BEEBA720C4A870EA9400DE240287954ABBE91C87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:4f:5e:1a:d9:38:a4:8a:b9:cb:da:d3:b4:26: 4d:cc:76:d1:e6:9c:5e:2d:2c:d8:b8:a9:64:e2:46: c1:f2:e5:68:db:2b:df:84:74:ce:43:27:69:73:37: b3:5c:5d:42:9a:24:b5:b7:1b:6f:9a:13:be:92:35: 14:44:ec:b9:74:76:b0:1e:55:5a:92:71:f3:7b:df: aa:e3:74:28:25:e2:cc:f2:b2:85:89:74:ad:5d:9a: c6:1b:73:80:37:b0:89:2b:f3:c6:99:0a:94:32:99: a4:07:cc:7f:03:e8:26:23:63:97:58:b1:63:f7:12: 4f:ff:91:29:ef:e3:d9:ba:e3:a4:f8:a7:73:99:c2: 27:a1:67:f3:1d:51:7b:e2:68:2a:1e:2e:02:0e:e2: e2:45:3c:f9:f2:14:0f:19:e2:d0:ae:a1:c8:9a:83: 87:55:4b:c7:0c:43:60:8c:10:93:75:86:14:d8:13: 0b:a1:70:35:66:a1:6c:42:91:a1:a7:ea:f5:f5:98: 5e:41:f1:34:54:d6:7b:47:dc:5b:03:0c:16:8c:f2: d7:2a:5e:60:fd:7a:aa:d8:16:65:f3:59:f3:90:3f: c3:44:ce:36:fb:a4:38:a4:5c:9a:1d:4b:50:cc:0a: 91:52:36:13:09:d5:2a:62:31:99:ee:f5:a7:1c:62: a9:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:EB:A7:20:C4:A8:70:EA:94:00:DE:24:02:87:95:4A:BB:E9:1C:87 X509v3 Authority Key Identifier: keyid:42:4D:D3:83:7D:D9:8F:89:E3:F7:BC:09:D7:D1:7B:26:CB:97:4C:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9BACTUDQ67ZoFoRdPtpa9uVCKVhTGKNQ8e8rYEb4TuLZ/1/424DD3837DD98F89E3F7BC09D7D17B26CB974CE9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/424DD3837DD98F89E3F7BC09D7D17B26CB974CE9.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9BACTUDQ67ZoFoRdPtpa9uVCKVhTGKNQ8e8rYEb4TuLZ/1/424DD3837DD98F89E3F7BC09D7D17B26CB974CE9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:17:10:fd:5e:33:5c:a1:a4:77:86:ab:ec:61:98:9a:c0:a8: ff:e0:6e:42:f3:8f:b4:e0:8c:68:db:9e:a3:7f:72:5b:99:83: 8a:a4:86:8b:52:e5:22:d9:5e:4d:3f:0e:05:29:35:91:ca:28: 79:5b:44:9c:9e:56:a1:3a:b2:e5:11:a3:2c:4b:72:54:54:ac: a0:a1:d3:26:2f:49:1c:c0:e4:2c:6e:32:a5:da:ce:ad:e3:87: 86:e2:97:92:25:8f:7b:a5:44:af:c0:bf:bc:8b:bd:89:bd:50: 78:e2:45:6c:dd:6c:95:64:aa:84:0e:c1:8f:d3:df:be:27:77: 51:dc:2e:5d:ab:d3:2b:27:2b:b9:ab:99:6d:98:02:05:00:b7: 07:89:b6:83:b3:51:85:1c:b7:f1:99:72:3a:0a:2d:8d:38:ed: 8f:14:7b:e2:9b:7d:06:5d:1f:c8:dd:af:6c:ea:96:55:14:fe: 30:77:f6:fa:c4:8c:00:51:67:d2:7a:84:84:fe:14:1f:ad:30: 71:4d:61:68:37:f0:2e:d1:16:ee:f6:0a:df:4d:e7:d5:b7:b5: 37:15:6a:92:34:a3:a4:27:f7:7f:19:78:55:17:9b:75:11:67: f9:82:9f:88:6c:6a:e6:79:ff:3e:30:26:c5:72:37:22:54:92: ce:46:4d:6e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUQ8p1djhLvm5J18R9U9TI5RoTOKswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDI0REQzODM3REQ5OEY4OUUzRjdCQzA5RDdEMTdCMjZD Qjk3NENFOTAeFw0yNjAzMDIxMTA3MTJaFw0yNjAzMDMxMTU5MTJaMDMxMTAvBgNV BAMTKEJFRUJBNzIwQzRBODcwRUE5NDAwREUyNDAyODc5NTRBQkJFOTFDODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqT14a2TikirnL2tO0Jk3MdtHm nF4tLNi4qWTiRsHy5WjbK9+EdM5DJ2lzN7NcXUKaJLW3G2+aE76SNRRE7Ll0drAe VVqScfN736rjdCgl4szysoWJdK1dmsYbc4A3sIkr88aZCpQymaQHzH8D6CYjY5dY sWP3Ek//kSnv49m646T4p3OZwiehZ/MdUXviaCoeLgIO4uJFPPnyFA8Z4tCuocia g4dVS8cMQ2CMEJN1hhTYEwuhcDVmoWxCkaGn6vX1mF5B8TRU1ntH3FsDDBaM8tcq XmD9eqrYFmXzWfOQP8NEzjb7pDikXJodS1DMCpFSNhMJ1SpiMZnu9accYqmjAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUvuunIMSocOqUAN4kAoeVSrvpHIcwHwYDVR0j BBgwFoAUQk3Tg33Zj4nj97wJ19F7JsuXTOkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOUJBQ1RVRFE2N1pvRm9SZFB0cGE5dVZDS1ZoVEdLTlE4ZThyWUViNFR1 TFovMS80MjRERDM4MzdERDk4Rjg5RTNGN0JDMDlEN0QxN0IyNkNCOTc0Q0U5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQyNEREMzgzN0REOThGODlF M0Y3QkMwOUQ3RDE3QjI2Q0I5NzRDRTkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OUJBQ1RVRFE2N1pvRm9SZFB0cGE5dVZDS1ZoVEdLTlE4ZThyWUViNFR1TFovMS80 MjRERDM4MzdERDk4Rjg5RTNGN0JDMDlEN0QxN0IyNkNCOTc0Q0U5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhhcQ/V4zXKGkd4ar7GGYmsCo/+BuQvOPtOCMaNueo39yW5mDiqSGi1LlItle TT8OBSk1kcooeVtEnJ5WoTqy5RGjLEtyVFSsoKHTJi9JHMDkLG4ypdrOreOHhuKX kiWPe6VEr8C/vIu9ib1QeOJFbN1slWSqhA7Bj9Pfvid3UdwuXavTKycruauZbZgC BQC3B4m2g7NRhRy38ZlyOgotjTjtjxR74pt9Bl0fyN2vbOqWVRT+MHf2+sSMAFFn 0nqEhP4UH60wcU1haDfwLtEW7vYK303n1be1NxVqkjSjpCf3fxl4VRebdRFn+YKf iGxq5nn/PjAmxXI3IlSSzkZNbg== -----END CERTIFICATE-----Generated at Mon Mar 2 18:31:37 2026 by rpki-client