$ rpki-client -vvf rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/0/3668F23708FFBF0EE157A9A924E8295BA896F33D.mft File: 3668F23708FFBF0EE157A9A924E8295BA896F33D.mft (raw, json) Hash identifier: ZzBwghydISff5OqiezqG9++D6h2Xpmo61wjexva3sUc= Subject key identifier: 41:0F:B5:90:B5:07:E1:BA:C7:F1:FE:C0:3F:32:1D:23:AC:22:BA:A4 Authority key identifier: 36:68:F2:37:08:FF:BF:0E:E1:57:A9:A9:24:E8:29:5B:A8:96:F3:3D Certificate issuer: /CN=3668F23708FFBF0EE157A9A924E8295BA896F33D Certificate serial: 28D5BF36C8531332E09CA7801B7541ABDEC4CE54 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3668F23708FFBF0EE157A9A924E8295BA896F33D.cer Subject info access: rsync://rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/0/3668F23708FFBF0EE157A9A924E8295BA896F33D.mft Manifest number: 30 Signing time: Mon 02 Mar 2026 08:48:26 +0000 Manifest this update: Mon 02 Mar 2026 08:43:26 +0000 Manifest next update: Tue 03 Mar 2026 11:34:26 +0000 Files and hashes: 1: 3137372e33362e37362e302f32332d3233203d3e20323731323136.roa (hash: 1O+rv6XlvbPZca5WvayM1LDM2sBBx6xsJcsb7KU/kII=) 2: 3668F23708FFBF0EE157A9A924E8295BA896F33D.crl (hash: 5bK2FnwXoFn/dpkRiJxZoCR+zSr5vXPwNm0zls4jbSI=) 3: 3137372e33362e37382e302f32332d3233203d3e20323731323136.roa (hash: K+lZkEM4v6sJ/Jk0Z8elzm60jida0+XHfBI9QU5wKa0=) 4: 323830343a373830383a3a2f33322d3332203d3e20323731323136.roa (hash: oCPIOmoYwqZXDm5OOelB6GxaBTbNHz/pae+0Bvycpx0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/0/3668F23708FFBF0EE157A9A924E8295BA896F33D.crl rsync://rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/0/3668F23708FFBF0EE157A9A924E8295BA896F33D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3668F23708FFBF0EE157A9A924E8295BA896F33D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 03 Mar 2026 11:34:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:d5:bf:36:c8:53:13:32:e0:9c:a7:80:1b:75:41:ab:de:c4:ce:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3668F23708FFBF0EE157A9A924E8295BA896F33D Validity Not Before: Mar 2 08:43:26 2026 GMT Not After : Mar 3 11:34:26 2026 GMT Subject: CN=410FB590B507E1BAC7F1FEC03F321D23AC22BAA4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:cb:4f:9d:2f:a7:9b:0b:99:29:c6:9a:1b:97: b2:c2:3b:d0:12:c1:d3:f3:33:86:d6:7f:15:ca:97: 9f:b2:af:65:30:2d:46:21:59:fa:45:0e:64:88:e4: c1:1b:c5:89:5e:59:22:fb:66:72:09:e0:9d:8a:4a: 2f:91:70:d1:5d:4b:08:a8:2f:c4:8a:75:8f:7d:39: e8:41:a2:2c:a7:65:43:6b:36:17:e4:08:ba:f7:01: dc:c3:93:0e:b8:61:76:41:8b:21:ad:7e:12:b7:6a: f9:84:8c:1e:61:d0:75:cf:0a:f6:5b:21:7a:a1:28: 10:26:46:74:77:6c:26:2f:75:45:c8:a4:39:34:b3: b0:e2:2d:98:d3:52:1d:3c:58:57:3d:76:96:50:49: e9:c3:ac:bb:34:68:93:04:e8:d0:9d:d5:32:51:56: dc:f0:85:e1:65:f3:51:03:51:2e:7f:41:b5:b8:99: 63:70:b5:b8:d2:88:9d:07:b8:26:cd:0f:1c:fc:f8: 44:e6:81:a6:96:14:a5:ed:4c:42:ce:e1:bc:ac:71: 87:5e:55:5b:a1:ba:42:29:de:9e:4d:33:bc:15:f4: d1:75:53:24:32:f8:82:a7:6b:82:a6:c7:ee:89:5c: fb:2f:11:7e:ce:a3:eb:87:79:2e:c1:89:52:2a:27: e0:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:0F:B5:90:B5:07:E1:BA:C7:F1:FE:C0:3F:32:1D:23:AC:22:BA:A4 X509v3 Authority Key Identifier: keyid:36:68:F2:37:08:FF:BF:0E:E1:57:A9:A9:24:E8:29:5B:A8:96:F3:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/0/3668F23708FFBF0EE157A9A924E8295BA896F33D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3668F23708FFBF0EE157A9A924E8295BA896F33D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/0/3668F23708FFBF0EE157A9A924E8295BA896F33D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d3:0e:d1:f5:39:28:a3:f5:ec:e6:ce:c3:f0:c9:bc:e6:85:f0: f7:bc:db:2b:6c:bb:e9:c3:87:e0:3b:03:b8:2b:0c:6b:59:f1: a5:7f:df:59:77:46:15:1c:cb:44:9a:67:98:70:3e:ac:ba:a9: d4:8b:19:ae:4c:07:6c:4d:7d:7f:e6:69:e6:86:36:8e:fe:fd: 77:7f:8a:1b:e1:91:eb:35:26:f1:4b:85:c0:45:f2:62:b0:05: a2:5d:1a:c6:64:31:2d:6d:95:86:77:03:24:b9:ba:29:25:7d: d9:d2:38:d7:c7:bf:93:76:6d:96:cc:25:fb:35:df:c6:9c:33: 0a:a1:c4:89:41:35:8c:5c:3c:84:1a:97:07:d3:b0:24:99:b0: df:37:78:9a:85:db:4c:2b:8a:b2:12:9b:71:1b:7b:e7:4c:95: 8b:ee:69:1e:84:42:72:d8:a8:4e:fb:52:76:a6:0e:7d:bb:da: 90:e6:fb:7c:ac:79:72:c1:0d:a5:b4:1b:cc:cc:cb:02:b1:a4: 7c:35:58:00:7b:94:6a:8d:45:83:30:70:74:78:71:50:4c:b0: 96:4e:1f:08:4c:b5:c6:10:a5:72:aa:dc:32:5e:6a:b6:f5:53: 5f:ce:b9:e7:69:95:7e:e5:06:00:47:0b:b4:03:cb:ae:4a:e5: 4e:08:ab:95 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUKNW/NshTEzLgnKeAG3VBq97EzlQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzY2OEYyMzcwOEZGQkYwRUUxNTdBOUE5MjRFODI5NUJB ODk2RjMzRDAeFw0yNjAzMDIwODQzMjZaFw0yNjAzMDMxMTM0MjZaMDMxMTAvBgNV BAMTKDQxMEZCNTkwQjUwN0UxQkFDN0YxRkVDMDNGMzIxRDIzQUMyMkJBQTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjy0+dL6ebC5kpxpobl7LCO9AS wdPzM4bWfxXKl5+yr2UwLUYhWfpFDmSI5MEbxYleWSL7ZnIJ4J2KSi+RcNFdSwio L8SKdY99OehBoiynZUNrNhfkCLr3AdzDkw64YXZBiyGtfhK3avmEjB5h0HXPCvZb IXqhKBAmRnR3bCYvdUXIpDk0s7DiLZjTUh08WFc9dpZQSenDrLs0aJME6NCd1TJR VtzwheFl81EDUS5/QbW4mWNwtbjSiJ0HuCbNDxz8+ETmgaaWFKXtTELO4byscYde VVuhukIp3p5NM7wV9NF1UyQy+IKna4Kmx+6JXPsvEX7Oo+uHeS7BiVIqJ+ChAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUQQ+1kLUH4brH8f7APzIdI6wiuqQwHwYDVR0j BBgwFoAUNmjyNwj/vw7hV6mpJOgpW6iW8z0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vREt3aUIzTUhEVTk5MTJQeFVZdUFMZDhoR3p0ZlhpYjlXREFHQUNUNWNu S1QvMC8zNjY4RjIzNzA4RkZCRjBFRTE1N0E5QTkyNEU4Mjk1QkE4OTZGMzNELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM2NjhGMjM3MDhGRkJGMEVF MTU3QTlBOTI0RTgyOTVCQTg5NkYzM0QuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v REt3aUIzTUhEVTk5MTJQeFVZdUFMZDhoR3p0ZlhpYjlXREFHQUNUNWNuS1QvMC8z NjY4RjIzNzA4RkZCRjBFRTE1N0E5QTkyNEU4Mjk1QkE4OTZGMzNELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEA0w7R9Tkoo/Xs5s7D8Mm85oXw97zbK2y76cOH4DsDuCsMa1nxpX/fWXdGFRzL RJpnmHA+rLqp1IsZrkwHbE19f+Zp5oY2jv79d3+KG+GR6zUm8UuFwEXyYrAFol0a xmQxLW2VhncDJLm6KSV92dI418e/k3Ztlswl+zXfxpwzCqHEiUE1jFw8hBqXB9Ow JJmw3zd4moXbTCuKshKbcRt750yVi+5pHoRCctioTvtSdqYOfbvakOb7fKx5csEN pbQbzMzLArGkfDVYAHuUao1FgzBwdHhxUEywlk4fCEy1xhClcqrcMl5qtvVTX865 52mVfuUGAEcLtAPLrkrlTgirlQ== -----END CERTIFICATE-----Generated at Mon Mar 2 22:16:28 2026 by rpki-client