$ rpki-client -vvf rpki-repo.registro.br/repo/CDNPzzLQTEV283xCvZxRS9ZqWJigwRu1mahJYwYe9LD6/0/20EE210B8D6A04962173004DC68629DBF033EFB8.mft File: 20EE210B8D6A04962173004DC68629DBF033EFB8.mft (raw, json) Hash identifier: TiJOwmYmE6mpDpTVn/9rYGu8JNj9u4Zk9X3TCPiQlYc= Subject key identifier: 10:88:C4:EB:43:99:4F:EC:BD:4D:34:52:B5:50:0D:FE:3D:7A:57:AA Authority key identifier: 20:EE:21:0B:8D:6A:04:96:21:73:00:4D:C6:86:29:DB:F0:33:EF:B8 Certificate issuer: /CN=20EE210B8D6A04962173004DC68629DBF033EFB8 Certificate serial: 4DE4A390F7BE77D9B12E226AB4A765E773D935DA Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20EE210B8D6A04962173004DC68629DBF033EFB8.cer Subject info access: rsync://rpki-repo.registro.br/repo/CDNPzzLQTEV283xCvZxRS9ZqWJigwRu1mahJYwYe9LD6/0/20EE210B8D6A04962173004DC68629DBF033EFB8.mft Manifest number: 1D Signing time: Sun 01 Mar 2026 18:36:32 +0000 Manifest this update: Sun 01 Mar 2026 18:31:32 +0000 Manifest next update: Mon 02 Mar 2026 21:01:32 +0000 Files and hashes: 1: 20EE210B8D6A04962173004DC68629DBF033EFB8.crl (hash: BVur5Ks/SN6VXgLe4Z0Pu1/JltIePIheKFIDlta4UOA=) 2: 3133382e39342e3139362e302f32322d3234203d3e203631353831.roa (hash: sa9CbGsjToh5xSwiAq3+53EFajZd3ZS2Vu0qf9Bn+cw=) 3: 323830343a323339383a3a2f33322d3336203d3e203631353831.roa (hash: sDW1u1G3xwoJJb5WrMBGlB/ArTK4PNi5MA7borCfA0g=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CDNPzzLQTEV283xCvZxRS9ZqWJigwRu1mahJYwYe9LD6/0/20EE210B8D6A04962173004DC68629DBF033EFB8.crl rsync://rpki-repo.registro.br/repo/CDNPzzLQTEV283xCvZxRS9ZqWJigwRu1mahJYwYe9LD6/0/20EE210B8D6A04962173004DC68629DBF033EFB8.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20EE210B8D6A04962173004DC68629DBF033EFB8.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 02 Mar 2026 21:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:e4:a3:90:f7:be:77:d9:b1:2e:22:6a:b4:a7:65:e7:73:d9:35:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20EE210B8D6A04962173004DC68629DBF033EFB8 Validity Not Before: Mar 1 18:31:32 2026 GMT Not After : Mar 2 21:01:32 2026 GMT Subject: CN=1088C4EB43994FECBD4D3452B5500DFE3D7A57AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:20:fb:d5:0e:94:32:d5:57:bd:30:ab:5a:78: 93:1f:28:31:f2:7d:65:f5:e0:3a:e7:e1:b9:f2:f4: 45:b3:e2:7b:3b:59:3a:15:7f:94:36:71:cd:75:de: d7:a6:14:ff:ac:21:6d:08:f2:1b:74:cb:95:8f:dc: 03:06:85:ec:9d:cf:f0:d2:04:22:90:02:6f:a5:37: 24:b5:bd:11:f7:2a:11:98:2a:a8:41:67:42:e8:9c: 04:66:d2:48:1d:a1:cb:7a:39:d8:fa:4b:8e:41:af: 59:95:eb:b4:f1:fc:88:e9:04:0b:a5:fd:89:d0:cc: fb:8c:1a:98:41:e2:28:60:e0:d6:5a:ee:ed:33:53: 46:ab:bc:66:08:ae:2b:a5:b8:1e:c7:3f:1c:cb:e0: 14:db:01:b7:fc:92:96:9b:6b:ad:48:91:89:44:03: 15:46:14:a4:5f:af:57:c4:cf:b8:d6:bb:be:76:05: ab:9e:2c:3a:c2:8b:88:9c:4c:be:7d:d9:f2:fa:13: 8f:b8:40:bd:3c:a8:ed:53:7e:e0:54:d9:62:7b:96: 82:41:98:ee:fd:3f:7d:82:8e:51:7c:eb:7d:e3:32: 01:8c:14:41:86:10:7c:ee:ff:0d:a4:c0:84:47:4c: 7e:d6:a0:27:3e:d9:08:2d:f2:82:a8:ec:2a:55:f4: ce:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:88:C4:EB:43:99:4F:EC:BD:4D:34:52:B5:50:0D:FE:3D:7A:57:AA X509v3 Authority Key Identifier: keyid:20:EE:21:0B:8D:6A:04:96:21:73:00:4D:C6:86:29:DB:F0:33:EF:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CDNPzzLQTEV283xCvZxRS9ZqWJigwRu1mahJYwYe9LD6/0/20EE210B8D6A04962173004DC68629DBF033EFB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20EE210B8D6A04962173004DC68629DBF033EFB8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CDNPzzLQTEV283xCvZxRS9ZqWJigwRu1mahJYwYe9LD6/0/20EE210B8D6A04962173004DC68629DBF033EFB8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:a8:77:98:2a:ae:b8:b8:13:28:6b:80:bb:13:26:04:64:db: 04:b0:ae:16:30:5d:f7:42:f4:39:b8:7a:de:14:6f:75:e4:b4: 28:97:dc:0a:9a:27:05:d4:a6:5f:97:af:a1:ca:dd:70:92:28: e1:d2:19:2e:20:b3:94:27:1c:01:47:aa:a8:15:cf:a2:34:97: 8c:5b:23:61:e7:c9:60:ed:d6:8f:e2:d6:0b:27:ed:9b:5a:78: df:45:6f:59:34:f1:c8:55:cc:7d:a4:36:38:a8:25:b8:15:79: c2:26:34:85:48:3b:4e:29:af:1d:bb:ad:71:14:c5:c5:dc:3e: 81:30:f0:f2:72:a1:31:31:4a:b8:46:51:34:ca:aa:30:67:eb: d1:00:2d:a0:d9:cc:1b:17:df:f4:6e:f7:84:4c:bf:da:1c:37: da:de:66:1b:e6:e5:58:d4:b7:9d:1a:e3:de:77:8e:e8:16:36: 98:34:96:cb:6d:92:f1:85:4f:84:4d:43:04:3f:64:62:7d:b8: 9d:ba:ef:56:87:81:45:f6:16:28:49:9e:58:5f:c7:bd:92:64: d9:16:5e:dc:db:4f:f8:6d:47:39:52:82:19:09:99:45:8e:ce: ff:fd:b2:1a:53:19:00:53:5b:e6:f6:0c:a3:90:15:23:cb:b1: b9:25:81:ff -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUTeSjkPe+d9mxLiJqtKdl53PZNdowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBFRTIxMEI4RDZBMDQ5NjIxNzMwMDREQzY4NjI5REJG MDMzRUZCODAeFw0yNjAzMDExODMxMzJaFw0yNjAzMDIyMTAxMzJaMDMxMTAvBgNV BAMTKDEwODhDNEVCNDM5OTRGRUNCRDREMzQ1MkI1NTAwREZFM0Q3QTU3QUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+IPvVDpQy1Ve9MKtaeJMfKDHy fWX14Drn4bny9EWz4ns7WToVf5Q2cc113temFP+sIW0I8ht0y5WP3AMGheydz/DS BCKQAm+lNyS1vRH3KhGYKqhBZ0LonARm0kgdoct6Odj6S45Br1mV67Tx/IjpBAul /YnQzPuMGphB4ihg4NZa7u0zU0arvGYIriuluB7HPxzL4BTbAbf8kpaba61IkYlE AxVGFKRfr1fEz7jWu752BaueLDrCi4icTL592fL6E4+4QL08qO1TfuBU2WJ7loJB mO79P32CjlF8633jMgGMFEGGEHzu/w2kwIRHTH7WoCc+2Qgt8oKo7CpV9M7TAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUEIjE60OZT+y9TTRStVAN/j16V6owHwYDVR0j BBgwFoAUIO4hC41qBJYhcwBNxoYp2/Az77gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ0ROUHp6TFFURVYyODN4Q3ZaeFJTOVpxV0ppZ3dSdTFtYWhKWXdZZTlM RDYvMC8yMEVFMjEwQjhENkEwNDk2MjE3MzAwNERDNjg2MjlEQkYwMzNFRkI4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIwRUUyMTBCOEQ2QTA0OTYy MTczMDA0REM2ODYyOURCRjAzM0VGQjguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q0ROUHp6TFFURVYyODN4Q3ZaeFJTOVpxV0ppZ3dSdTFtYWhKWXdZZTlMRDYvMC8y MEVFMjEwQjhENkEwNDk2MjE3MzAwNERDNjg2MjlEQkYwMzNFRkI4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUah3mCquuLgTKGuAuxMmBGTbBLCuFjBd90L0Obh63hRvdeS0KJfcCponBdSm X5evocrdcJIo4dIZLiCzlCccAUeqqBXPojSXjFsjYefJYO3Wj+LWCyftm1p430Vv WTTxyFXMfaQ2OKgluBV5wiY0hUg7TimvHbutcRTFxdw+gTDw8nKhMTFKuEZRNMqq MGfr0QAtoNnMGxff9G73hEy/2hw32t5mG+blWNS3nRrj3neO6BY2mDSWy22S8YVP hE1DBD9kYn24nbrvVoeBRfYWKEmeWF/HvZJk2RZe3NtP+G1HOVKCGQmZRY7O//2y GlMZAFNb5vYMo5AVI8uxuSWB/w== -----END CERTIFICATE-----Generated at Mon Mar 2 15:39:37 2026 by rpki-client