$ rpki-client -vvf rpki-repo.registro.br/repo/CfUTGqQ24bcLqCcB928MyfWAbCkdUkyUtXPyDXeAm1oB/0/2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.mft File: 2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.mft (raw, json) Hash identifier: yt/UQDSbUq4GNV9VrUk2oQw8zA8GTggchb+efudsDlk= Subject key identifier: 38:D2:1A:6E:09:45:A7:28:83:11:0B:AC:B2:87:4B:3B:30:7E:E2:7C Authority key identifier: 2D:D9:7F:5E:85:D5:A9:57:8E:78:94:0C:FD:5B:AE:DF:B8:2E:06:47 Certificate issuer: /CN=2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647 Certificate serial: 6495C0F4B1785703CC9F841D7F24980E41DD4A67 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.cer Subject info access: rsync://rpki-repo.registro.br/repo/CfUTGqQ24bcLqCcB928MyfWAbCkdUkyUtXPyDXeAm1oB/0/2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.mft Manifest number: 0391 Signing time: Fri 17 Apr 2026 03:01:28 +0000 Manifest this update: Fri 17 Apr 2026 02:56:28 +0000 Manifest next update: Sat 18 Apr 2026 06:12:28 +0000 Files and hashes: 1: 3230302e33392e34392e302f32342d3234203d3e20323731353234.roa (hash: HvJZV7cFZNky1fBcGYuqFa0SiMTvK9xz+NrDi2PVx7E=) 2: 323830343a376365303a3a2f33322d3333203d3e20323731353234.roa (hash: +J4rEB3Rt4T2Ln721WDo+oumy/LO2ZS0AjqCXsjrWc4=) 3: 3230302e33392e35312e302f32342d3234203d3e20323731353234.roa (hash: L7riJeY7IMZry5vP5gSJ6MrY0bjXLbTdx38twhWMizc=) 4: 2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.crl (hash: F92vHfAopmvZEkki+9LXOoIIDccBiFAiJFNM7DrNsBQ=) 5: 3230302e33392e35302e302f32342d3234203d3e20323731353234.roa (hash: SKQFUqDa+0i1+QWXHpdDtvb4tLGcixMI0hXM8Vaf06k=) 6: 3230302e33392e34382e302f32322d3232203d3e20323731353234.roa (hash: DKbye84QCkTImvUP7CJY0CDZq5FNbhjZ/IuRa4Ti5/Y=) 7: 3230302e33392e34382e302f32342d3234203d3e20323731353234.roa (hash: br+6ED3hJFY+Y1zT8iUZxr4iTPizEZ4ipdNZa7JBqtk=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CfUTGqQ24bcLqCcB928MyfWAbCkdUkyUtXPyDXeAm1oB/0/2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.crl rsync://rpki-repo.registro.br/repo/CfUTGqQ24bcLqCcB928MyfWAbCkdUkyUtXPyDXeAm1oB/0/2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Apr 2026 06:12:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:95:c0:f4:b1:78:57:03:cc:9f:84:1d:7f:24:98:0e:41:dd:4a:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647 Validity Not Before: Apr 17 02:56:28 2026 GMT Not After : Apr 18 06:12:28 2026 GMT Subject: CN=38D21A6E0945A72883110BACB2874B3B307EE27C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:f5:c4:59:a8:6c:6b:5a:83:d5:ae:9f:91:e8: df:83:58:ee:47:16:e3:89:31:4c:8c:38:af:b4:dc: 51:d7:92:3d:b8:8d:71:b2:20:24:ae:b8:fc:c9:e2: 10:fb:3e:69:18:4c:2b:1e:11:bb:ed:a3:fb:b2:dd: e7:bb:13:7c:89:9e:31:32:18:a6:59:bc:f9:22:13: 67:0d:e4:63:c1:74:44:28:0d:cf:dc:59:11:59:b8: 4b:69:96:f9:12:a2:ae:d4:58:1d:ce:f6:0a:43:d0: 62:cf:c8:61:64:c2:58:59:5e:17:23:d3:83:8e:13: 4d:63:fa:7d:f2:fc:2b:cc:20:03:a6:40:16:9f:25: 10:c2:04:56:4a:ea:af:35:5d:c3:17:fc:a7:70:7f: 8e:c6:66:62:f8:ce:66:65:3c:24:b4:e4:51:35:f0: 62:38:a0:c9:3b:55:c2:76:99:32:45:9c:9d:c4:e1: 53:4d:3b:36:1a:f2:f0:c4:f0:0f:a3:ad:93:8d:0b: 92:12:b5:5d:4e:bc:99:85:53:64:cb:47:c5:db:e1: 5d:c7:05:f7:6c:5b:fe:58:7c:aa:43:c6:07:cc:74: 20:fb:74:3d:47:3d:3b:62:96:75:db:a0:12:b0:a2: b4:b3:6c:e7:47:92:e5:a8:82:df:31:41:2b:ea:6b: 84:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:D2:1A:6E:09:45:A7:28:83:11:0B:AC:B2:87:4B:3B:30:7E:E2:7C X509v3 Authority Key Identifier: keyid:2D:D9:7F:5E:85:D5:A9:57:8E:78:94:0C:FD:5B:AE:DF:B8:2E:06:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CfUTGqQ24bcLqCcB928MyfWAbCkdUkyUtXPyDXeAm1oB/0/2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CfUTGqQ24bcLqCcB928MyfWAbCkdUkyUtXPyDXeAm1oB/0/2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:c2:f2:0a:2d:5f:0c:00:02:69:bc:6c:de:88:dc:fc:cf:ac: dc:9e:50:0d:1d:0f:39:81:e7:f6:c0:f6:ad:a4:2d:20:ea:f2: bc:80:2b:c4:fb:1a:1c:c0:cc:2d:a6:ef:fd:15:4c:c7:ec:97: 5e:ca:45:d3:36:01:91:ac:a7:fa:5f:51:bd:f8:09:cc:ee:47: e4:4b:36:7d:69:d1:9e:79:07:29:4f:f3:e8:22:a2:22:8a:db: d7:c3:5f:1c:1b:ae:1e:8c:21:f9:45:7a:48:da:7a:be:15:67: b4:f7:d7:11:0e:3d:b4:81:6e:8c:ab:6a:e8:e8:4b:03:f6:42: c5:9d:1e:29:e0:27:25:80:e0:57:3f:1b:21:81:62:cf:41:be: ff:69:14:f6:38:b6:82:f8:28:7a:2b:a6:0f:e9:5f:fc:89:75: 76:13:d4:44:fb:07:18:ba:65:9c:af:8b:71:35:c5:9c:44:74: 99:6a:7d:c1:98:86:d7:ae:81:27:92:25:39:92:92:88:17:32: 39:4e:fe:30:ec:aa:8e:ce:63:31:21:ae:31:b3:ad:30:0d:ce: 3b:34:90:2b:02:20:c1:89:7b:15:6a:80:7d:2b:a0:41:17:4c: 4b:76:4d:57:58:be:24:5c:9d:c4:87:b8:78:fc:82:45:00:69: 9e:50:5c:b9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUZJXA9LF4VwPMn4QdfySYDkHdSmcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkREOTdGNUU4NUQ1QTk1NzhFNzg5NDBDRkQ1QkFFREZC ODJFMDY0NzAeFw0yNjA0MTcwMjU2MjhaFw0yNjA0MTgwNjEyMjhaMDMxMTAvBgNV BAMTKDM4RDIxQTZFMDk0NUE3Mjg4MzExMEJBQ0IyODc0QjNCMzA3RUUyN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT9cRZqGxrWoPVrp+R6N+DWO5H FuOJMUyMOK+03FHXkj24jXGyICSuuPzJ4hD7PmkYTCseEbvto/uy3ee7E3yJnjEy GKZZvPkiE2cN5GPBdEQoDc/cWRFZuEtplvkSoq7UWB3O9gpD0GLPyGFkwlhZXhcj 04OOE01j+n3y/CvMIAOmQBafJRDCBFZK6q81XcMX/Kdwf47GZmL4zmZlPCS05FE1 8GI4oMk7VcJ2mTJFnJ3E4VNNOzYa8vDE8A+jrZONC5IStV1OvJmFU2TLR8Xb4V3H BfdsW/5YfKpDxgfMdCD7dD1HPTtilnXboBKworSzbOdHkuWogt8xQSvqa4RtAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUONIabglFpyiDEQussodLOzB+4nwwHwYDVR0j BBgwFoAULdl/XoXVqVeOeJQM/Vuu37guBkcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ2ZVVEdxUTI0YmNMcUNjQjkyOE15ZldBYkNrZFVreVV0WFB5RFhlQW0x b0IvMC8yREQ5N0Y1RTg1RDVBOTU3OEU3ODk0MENGRDVCQUVERkI4MkUwNjQ3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJERDk3RjVFODVENUE5NTc4 RTc4OTQwQ0ZENUJBRURGQjgyRTA2NDcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q2ZVVEdxUTI0YmNMcUNjQjkyOE15ZldBYkNrZFVreVV0WFB5RFhlQW0xb0IvMC8y REQ5N0Y1RTg1RDVBOTU3OEU3ODk0MENGRDVCQUVERkI4MkUwNjQ3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdsLyCi1fDAACabxs3ojc/M+s3J5QDR0POYHn9sD2raQtIOryvIArxPsaHMDM Labv/RVMx+yXXspF0zYBkayn+l9RvfgJzO5H5Es2fWnRnnkHKU/z6CKiIorb18Nf HBuuHowh+UV6SNp6vhVntPfXEQ49tIFujKtq6OhLA/ZCxZ0eKeAnJYDgVz8bIYFi z0G+/2kU9ji2gvgoeiumD+lf/Il1dhPURPsHGLplnK+LcTXFnER0mWp9wZiG166B J5IlOZKSiBcyOU7+MOyqjs5jMSGuMbOtMA3OOzSQKwIgwYl7FWqAfSugQRdMS3ZN V1i+JFydxIe4ePyCRQBpnlBcuQ== -----END CERTIFICATE-----Generated at Fri Apr 17 23:39:16 2026 by rpki-client