$ rpki-client -vvf rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.mft File: DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.mft (raw, json) Hash identifier: ffJmy+dkimCmhK8b8KA1Oqy4ZrNZK4AiM3yf9vlY0TM= Subject key identifier: 00:EE:3E:75:9A:E9:15:6F:49:94:6D:19:2D:61:F5:CD:5F:6F:EF:EB Authority key identifier: DF:BB:E5:3A:A4:0A:CB:45:ED:76:DA:C0:E6:F8:33:B2:8B:ED:8A:69 Certificate issuer: /CN=DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69 Certificate serial: 7DC53104DB79AAE2248D2F38E11EE021A3FCB7F1 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.cer Subject info access: rsync://rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.mft Manifest number: 0396 Signing time: Mon 02 Mar 2026 12:02:50 +0000 Manifest this update: Mon 02 Mar 2026 11:57:50 +0000 Manifest next update: Tue 03 Mar 2026 12:52:50 +0000 Files and hashes: 1: 34352e3233372e32342e302f32322d3234203d3e20323638323632.roa (hash: rINL47d16XXmhij2neYqgRCOetMGqa2cVuGeKHBY2Ww=) 2: DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.crl (hash: sYLpubf1tfW5wxzj3VbPGLSSQsWsF3ZQtMvY+6uERdc=) 3: 323830343a346537343a3a2f33322d3438203d3e20323638323632.roa (hash: /VCzucGfHlqNTkfJXTq1xxcOLzuuIwZ1U/QtbROwaEI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.crl rsync://rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 03 Mar 2026 12:52:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:c5:31:04:db:79:aa:e2:24:8d:2f:38:e1:1e:e0:21:a3:fc:b7:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69 Validity Not Before: Mar 2 11:57:50 2026 GMT Not After : Mar 3 12:52:50 2026 GMT Subject: CN=00EE3E759AE9156F49946D192D61F5CD5F6FEFEB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:e6:77:3f:44:19:fe:fa:f9:f3:26:27:5b:cf: 57:19:2e:eb:b0:8a:63:2e:a3:ac:6d:c7:83:f3:a8: 38:ef:f5:18:00:86:43:51:b3:23:bf:ef:29:75:c7: e8:84:12:dd:08:bd:1b:c0:c1:e6:02:50:9b:5a:88: 61:29:ee:3a:d1:14:b2:d5:76:4c:e7:62:58:74:62: 9d:7a:e0:77:70:0a:9c:60:19:5f:8d:c8:2b:1f:bd: a0:f9:f3:c9:f1:12:34:9c:5c:8a:3c:fd:85:27:e7: 8f:52:4a:6e:ee:3a:7a:1f:5a:14:0d:0c:02:ff:2a: 03:2f:24:2f:e7:27:b6:91:ed:66:40:f1:24:f2:40: f1:7d:fe:d3:d0:0e:a0:bc:ff:99:aa:a2:b7:ce:78: 49:b6:62:7b:45:97:c0:85:f3:6c:90:54:80:3c:66: 03:9b:a7:b9:69:4c:53:f7:f6:01:f6:42:db:23:0b: 63:c7:15:f1:23:1c:4f:29:38:cf:dc:88:d0:ef:74: f6:2f:17:cb:f8:2a:0f:1e:be:28:a4:ba:b6:85:28: b8:29:68:34:3b:6b:bf:c5:a2:a8:ab:ac:1f:48:d4: f7:13:3c:98:80:ab:26:16:ff:5d:87:34:3e:63:de: a4:27:66:84:9f:62:82:39:0f:ea:22:58:f4:1c:bd: 0f:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:EE:3E:75:9A:E9:15:6F:49:94:6D:19:2D:61:F5:CD:5F:6F:EF:EB X509v3 Authority Key Identifier: keyid:DF:BB:E5:3A:A4:0A:CB:45:ED:76:DA:C0:E6:F8:33:B2:8B:ED:8A:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:6d:51:d4:31:1b:94:e6:9e:e4:0d:21:3c:d3:c2:44:1d:0a: e8:91:f0:b3:d6:c3:04:7a:2a:a9:4d:9d:08:dc:d8:13:17:13: 7f:5a:28:ba:dd:57:96:c3:ca:03:55:d1:73:cf:a0:39:d3:b5: ce:dd:1b:ca:d6:11:17:3e:d6:f3:10:d5:1a:ae:cc:57:e2:ad: 00:c7:bc:5b:72:90:0d:30:87:ba:02:62:c1:20:67:69:db:0a: fc:23:94:61:2b:09:08:f2:df:ac:c4:e7:ff:2b:f8:08:10:b2: c8:57:a9:00:36:73:2d:3d:39:e8:c0:72:38:9c:2f:ca:53:ff: 84:2a:07:d4:f0:0f:a1:09:b4:d6:7d:5e:60:8e:e3:a7:d3:a4: 8e:14:88:1d:2d:da:85:d1:38:cd:0f:f4:9e:a0:85:a7:67:ba: 66:7b:6d:13:4e:18:72:1f:74:b4:09:b1:a0:16:4b:d6:14:88: 5e:96:9b:42:d3:5a:fd:e2:ba:8a:b3:29:24:0c:4f:9d:fd:c1: f3:a6:34:61:50:7e:c4:25:fb:17:29:60:89:c0:33:0a:ba:a2: 0d:50:48:27:ae:ec:e3:3a:30:7e:26:88:90:76:f6:3a:e2:e7: 9c:ee:bd:a1:0a:9f:b8:27:f5:49:6b:55:96:97:99:cb:00:2d: dc:63:65:98 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUfcUxBNt5quIkjS844R7gIaP8t/EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREZCQkU1M0FBNDBBQ0I0NUVENzZEQUMwRTZGODMzQjI4 QkVEOEE2OTAeFw0yNjAzMDIxMTU3NTBaFw0yNjAzMDMxMjUyNTBaMDMxMTAvBgNV BAMTKDAwRUUzRTc1OUFFOTE1NkY0OTk0NkQxOTJENjFGNUNENUY2RkVGRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT5nc/RBn++vnzJidbz1cZLuuw imMuo6xtx4PzqDjv9RgAhkNRsyO/7yl1x+iEEt0IvRvAweYCUJtaiGEp7jrRFLLV dkznYlh0Yp164HdwCpxgGV+NyCsfvaD588nxEjScXIo8/YUn549SSm7uOnofWhQN DAL/KgMvJC/nJ7aR7WZA8STyQPF9/tPQDqC8/5mqorfOeEm2YntFl8CF82yQVIA8 ZgObp7lpTFP39gH2QtsjC2PHFfEjHE8pOM/ciNDvdPYvF8v4Kg8eviikuraFKLgp aDQ7a7/FoqirrB9I1PcTPJiAqyYW/12HND5j3qQnZoSfYoI5D+oiWPQcvQ/NAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUAO4+dZrpFW9JlG0ZLWH1zV9v7+swHwYDVR0j BBgwFoAU37vlOqQKy0XtdtrA5vgzsovtimkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ3RYaE5vRHB6YlpOaldUcjlLcjJZUWc3SmhGNmUxVkhqY25GazdYM1Rl VmovMC9ERkJCRTUzQUE0MEFDQjQ1RUQ3NkRBQzBFNkY4MzNCMjhCRUQ4QTY5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RGQkJFNTNBQTQwQUNCNDVF RDc2REFDMEU2RjgzM0IyOEJFRDhBNjkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q3RYaE5vRHB6YlpOaldUcjlLcjJZUWc3SmhGNmUxVkhqY25GazdYM1RlVmovMC9E RkJCRTUzQUE0MEFDQjQ1RUQ3NkRBQzBFNkY4MzNCMjhCRUQ4QTY5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJG1R1DEblOae5A0hPNPCRB0K6JHws9bDBHoqqU2dCNzYExcTf1oout1XlsPK A1XRc8+gOdO1zt0bytYRFz7W8xDVGq7MV+KtAMe8W3KQDTCHugJiwSBnadsK/COU YSsJCPLfrMTn/yv4CBCyyFepADZzLT056MByOJwvylP/hCoH1PAPoQm01n1eYI7j p9OkjhSIHS3ahdE4zQ/0nqCFp2e6ZnttE04Ych90tAmxoBZL1hSIXpabQtNa/eK6 irMpJAxPnf3B86Y0YVB+xCX7FylgicAzCrqiDVBIJ67s4zowfiaIkHb2OuLnnO69 oQqfuCf1SWtVlpeZywAt3GNlmA== -----END CERTIFICATE-----Generated at Mon Mar 2 18:14:03 2026 by rpki-client