$ rpki-client -vvf rpki-repo.registro.br/repo/DCn7oU326hBXfHm3QQxEtsbEtNHWVj7MhWWpadKGWQcT/0/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.mft File: 2DF5549CA90B47D8FA5217800F005C7EC0D966E7.mft (raw, json) Hash identifier: mZoIp3ZFoDYwIfKltbnsqlyBkXToezgMXmrN1w/avCw= Subject key identifier: CD:A7:F4:D0:A8:53:A1:3B:69:48:FE:A9:20:18:7B:F6:11:3A:39:ED Authority key identifier: 2D:F5:54:9C:A9:0B:47:D8:FA:52:17:80:0F:00:5C:7E:C0:D9:66:E7 Certificate issuer: /CN=2DF5549CA90B47D8FA5217800F005C7EC0D966E7 Certificate serial: 2B8104CC23AAECCB39A2CDA478737020E833FA09 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.cer Subject info access: rsync://rpki-repo.registro.br/repo/DCn7oU326hBXfHm3QQxEtsbEtNHWVj7MhWWpadKGWQcT/0/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.mft Manifest number: 0275 Signing time: Mon 02 Mar 2026 12:16:04 +0000 Manifest this update: Mon 02 Mar 2026 12:11:04 +0000 Manifest next update: Tue 03 Mar 2026 15:22:04 +0000 Files and hashes: 1: 323830343a393136633a3a2f33322d3335203d3e20323734363430.roa (hash: WI9HCs6eGX9p1jo/mhyWY838lgd+KptHbbco/K1Lluw=) 2: 2DF5549CA90B47D8FA5217800F005C7EC0D966E7.crl (hash: tZckXNuZ8+8w6PrzGlgdw1/UORtYyivMFqzYAXGFLnk=) 3: 3137392e34382e3133372e302f32342d3234203d3e20323734363430.roa (hash: 61gejsX0uk9zhGJ4ZJfQ9xiAiQ66ltBn9knZR4l/mpI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DCn7oU326hBXfHm3QQxEtsbEtNHWVj7MhWWpadKGWQcT/0/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.crl rsync://rpki-repo.registro.br/repo/DCn7oU326hBXfHm3QQxEtsbEtNHWVj7MhWWpadKGWQcT/0/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 03 Mar 2026 15:22:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:81:04:cc:23:aa:ec:cb:39:a2:cd:a4:78:73:70:20:e8:33:fa:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2DF5549CA90B47D8FA5217800F005C7EC0D966E7 Validity Not Before: Mar 2 12:11:04 2026 GMT Not After : Mar 3 15:22:04 2026 GMT Subject: CN=CDA7F4D0A853A13B6948FEA920187BF6113A39ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:32:8d:20:be:41:92:b3:1e:96:d3:d6:3f:b7: 98:62:6f:4e:75:2b:2b:10:48:73:63:ff:1b:8c:da: 27:96:4e:62:bd:dd:91:fd:6a:e6:af:d5:11:db:1b: e3:09:21:c5:f5:14:61:cc:1a:f1:2e:64:ea:25:9f: 4b:74:6c:06:ab:c0:9b:ae:1e:d6:79:b9:9c:78:26: 9b:d6:9a:03:cf:7c:8f:67:d1:61:25:9f:ba:06:c7: 37:44:db:09:71:72:db:08:a5:a2:ec:29:77:08:ef: 6a:7c:81:e8:33:91:77:c6:73:34:91:07:d6:72:cd: 9a:9a:81:7c:09:8a:f3:3b:a4:1b:47:c1:32:82:17: b7:41:92:2d:e3:c0:7d:8a:a5:84:a4:2c:ff:6c:e3: d8:b6:4f:db:e4:32:c6:ea:08:3f:e5:cf:62:48:ff: 7c:b6:d2:00:78:ea:29:1f:5a:60:b4:d4:96:05:33: 80:89:37:a4:96:77:a5:db:9e:d2:28:66:02:1b:93: 7c:c3:36:88:94:ea:ab:39:34:83:c3:77:3e:19:9d: 31:93:4a:24:8d:21:56:f2:7f:a4:da:74:49:2f:6f: 7a:8f:84:86:33:d7:8c:41:d7:68:13:e0:6c:f7:26: b3:f3:7a:44:fe:fd:3d:00:d2:22:69:e1:a4:e5:51: 2b:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:A7:F4:D0:A8:53:A1:3B:69:48:FE:A9:20:18:7B:F6:11:3A:39:ED X509v3 Authority Key Identifier: keyid:2D:F5:54:9C:A9:0B:47:D8:FA:52:17:80:0F:00:5C:7E:C0:D9:66:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DCn7oU326hBXfHm3QQxEtsbEtNHWVj7MhWWpadKGWQcT/0/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DCn7oU326hBXfHm3QQxEtsbEtNHWVj7MhWWpadKGWQcT/0/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:d3:b1:27:e0:6f:40:3a:58:1a:df:aa:02:bf:da:57:0d:3a: fd:2a:6e:10:52:dd:96:8e:ff:88:f0:c5:c5:3c:d1:f0:ee:60: 61:83:de:65:cb:30:79:46:4c:fd:49:a2:a5:18:ca:e8:43:73: 93:b4:1c:4a:20:55:81:c2:3d:c1:05:b0:78:79:ca:38:b8:ec: 8a:55:2c:7b:e6:4d:2d:62:22:cb:66:a7:cb:ae:44:5d:e6:5c: 93:29:38:50:d1:dc:3e:ce:99:a1:31:ed:c7:a9:6a:51:58:6b: c6:f1:ab:e9:2f:0c:e4:f1:de:ce:a3:42:53:4c:5f:f7:2b:49: 4f:63:dd:80:4e:12:e9:8c:12:6a:0a:cd:8d:bf:38:aa:ba:96: 20:bb:50:e4:4e:c8:d0:59:7b:0c:1d:a3:9f:54:39:ce:c2:98: ad:a0:76:f7:ea:5d:23:2d:5d:4a:d3:fa:24:03:e8:99:f9:65: 9b:7c:14:8b:b2:09:0e:85:b4:a7:e0:94:ee:92:d4:c7:3b:67: 90:2b:e0:38:5c:60:4b:e5:5f:51:f9:fd:0e:8b:b9:c9:db:a9: 97:e9:03:38:bd:25:3e:ed:b6:bb:71:6c:b1:5e:7c:bf:87:4d: e2:a7:56:5a:df:80:ed:36:89:0d:d1:12:07:46:21:5b:ca:8f: 55:f7:96:d9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUK4EEzCOq7Ms5os2keHNwIOgz+gkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkRGNTU0OUNBOTBCNDdEOEZBNTIxNzgwMEYwMDVDN0VD MEQ5NjZFNzAeFw0yNjAzMDIxMjExMDRaFw0yNjAzMDMxNTIyMDRaMDMxMTAvBgNV BAMTKENEQTdGNEQwQTg1M0ExM0I2OTQ4RkVBOTIwMTg3QkY2MTEzQTM5RUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6Mo0gvkGSsx6W09Y/t5hib051 KysQSHNj/xuM2ieWTmK93ZH9auav1RHbG+MJIcX1FGHMGvEuZOoln0t0bAarwJuu HtZ5uZx4JpvWmgPPfI9n0WEln7oGxzdE2wlxctsIpaLsKXcI72p8gegzkXfGczSR B9ZyzZqagXwJivM7pBtHwTKCF7dBki3jwH2KpYSkLP9s49i2T9vkMsbqCD/lz2JI /3y20gB46ikfWmC01JYFM4CJN6SWd6XbntIoZgIbk3zDNoiU6qs5NIPDdz4ZnTGT SiSNIVbyf6TadEkvb3qPhIYz14xB12gT4Gz3JrPzekT+/T0A0iJp4aTlUSsDAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUzaf00KhToTtpSP6pIBh79hE6Oe0wHwYDVR0j BBgwFoAULfVUnKkLR9j6UheADwBcfsDZZucwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRENuN29VMzI2aEJYZkhtM1FReEV0c2JFdE5IV1ZqN01oV1dwYWRLR1dR Y1QvMC8yREY1NTQ5Q0E5MEI0N0Q4RkE1MjE3ODAwRjAwNUM3RUMwRDk2NkU3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJERjU1NDlDQTkwQjQ3RDhG QTUyMTc4MDBGMDA1QzdFQzBEOTY2RTcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RENuN29VMzI2aEJYZkhtM1FReEV0c2JFdE5IV1ZqN01oV1dwYWRLR1dRY1QvMC8y REY1NTQ5Q0E5MEI0N0Q4RkE1MjE3ODAwRjAwNUM3RUMwRDk2NkU3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAItOxJ+BvQDpYGt+qAr/aVw06/SpuEFLdlo7/iPDFxTzR8O5gYYPeZcsweUZM /UmipRjK6ENzk7QcSiBVgcI9wQWweHnKOLjsilUse+ZNLWIiy2any65EXeZckyk4 UNHcPs6ZoTHtx6lqUVhrxvGr6S8M5PHezqNCU0xf9ytJT2PdgE4S6YwSagrNjb84 qrqWILtQ5E7I0Fl7DB2jn1Q5zsKYraB29+pdIy1dStP6JAPomfllm3wUi7IJDoW0 p+CU7pLUxztnkCvgOFxgS+VfUfn9Dou5ydupl+kDOL0lPu22u3FssV58v4dN4qdW Wt+A7TaJDdESB0YhW8qPVfeW2Q== -----END CERTIFICATE-----Generated at Mon Mar 2 16:58:33 2026 by rpki-client