$ rpki-client -vvf rpki-repo.registro.br/repo/DR8GQ5BUdBH4kqaACcZYQbjnUERKgPYCk2NJi7J4KL6Z/1/02CB993E9585A53FC6B40DA762A73EB2821BF6ED.mft File: 02CB993E9585A53FC6B40DA762A73EB2821BF6ED.mft (raw, json) Hash identifier: KmAIbfJ9EIdTxIyPepgqOwS7Ie/B2b+WOkHHIH8N3Jk= Subject key identifier: 60:C3:C1:4D:70:DB:9F:89:5E:F7:15:A7:B1:53:5D:88:34:80:3E:8E Authority key identifier: 02:CB:99:3E:95:85:A5:3F:C6:B4:0D:A7:62:A7:3E:B2:82:1B:F6:ED Certificate issuer: /CN=02CB993E9585A53FC6B40DA762A73EB2821BF6ED Certificate serial: 36FC526CF773AF7022521412B928316AC872A69B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02CB993E9585A53FC6B40DA762A73EB2821BF6ED.cer Subject info access: rsync://rpki-repo.registro.br/repo/DR8GQ5BUdBH4kqaACcZYQbjnUERKgPYCk2NJi7J4KL6Z/1/02CB993E9585A53FC6B40DA762A73EB2821BF6ED.mft Manifest number: 03DC Signing time: Fri 17 Apr 2026 17:02:17 +0000 Manifest this update: Fri 17 Apr 2026 16:57:17 +0000 Manifest next update: Sat 18 Apr 2026 17:38:17 +0000 Files and hashes: 1: 02CB993E9585A53FC6B40DA762A73EB2821BF6ED.crl (hash: dO/xLtgMfA+OaYdZq8vWzGijyqlJscmpHoA/HFbh5Qs=) 2: 323830343a313431633a3a2f33322d313238203d3e203533313330.roa (hash: g/8RkvvRiCbns6+mnGZNl1IDwf7bMfNp8L/7f+R1hPM=) 3: 3139312e372e37322e302f32312d3234203d3e203533313330.roa (hash: t86CJMrHTe89FiqYmonBVC0HlNmRd0X4J57WdEY9FzI=) 4: 3138372e3132302e3234302e302f32302d3234203d3e203533313330.roa (hash: u6JWRD8ycN8elOEjqlNbVHnY1vOwWMG8oR+A2yiNNfQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DR8GQ5BUdBH4kqaACcZYQbjnUERKgPYCk2NJi7J4KL6Z/1/02CB993E9585A53FC6B40DA762A73EB2821BF6ED.crl rsync://rpki-repo.registro.br/repo/DR8GQ5BUdBH4kqaACcZYQbjnUERKgPYCk2NJi7J4KL6Z/1/02CB993E9585A53FC6B40DA762A73EB2821BF6ED.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02CB993E9585A53FC6B40DA762A73EB2821BF6ED.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Apr 2026 17:38:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:fc:52:6c:f7:73:af:70:22:52:14:12:b9:28:31:6a:c8:72:a6:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02CB993E9585A53FC6B40DA762A73EB2821BF6ED Validity Not Before: Apr 17 16:57:17 2026 GMT Not After : Apr 18 17:38:17 2026 GMT Subject: CN=60C3C14D70DB9F895EF715A7B1535D8834803E8E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:86:22:7c:c8:10:d7:ea:7b:95:cf:51:6d:35: 24:6d:4a:19:d6:3f:18:89:28:58:ef:19:7b:79:0e: 36:c3:a9:a7:81:f9:29:2c:29:2d:5e:b0:2f:07:4c: 0e:fa:d4:31:ee:7b:a9:56:a1:d6:9e:ac:d1:75:94: 00:27:2e:a8:ee:bc:9c:3d:b1:e8:e4:60:34:8a:5d: 69:75:86:0e:a8:64:7c:0b:51:07:00:3f:3b:78:2b: f2:0c:5a:93:d5:4d:94:5c:5c:12:17:27:42:e9:fe: c9:3e:3d:01:e3:b1:b3:07:d1:6e:d9:36:1e:7a:96: 38:49:8f:39:e1:38:23:7a:85:e5:96:d5:b3:0c:14: 8a:bf:ff:f3:e2:3e:37:b6:0e:2d:5a:a1:28:0f:85: 10:23:f8:0c:6b:27:61:03:cc:3b:bb:af:91:f1:82: b7:dc:0a:40:c4:7a:2f:1a:ac:7a:db:49:48:bc:73: 1b:c3:23:31:97:11:62:3d:08:22:4d:e0:99:37:9e: 24:6b:06:56:42:bc:59:f8:63:f2:d3:bf:53:29:aa: 2a:4c:bd:b8:e0:eb:3d:75:fc:66:6a:0f:e6:5f:16: 33:bf:39:93:e3:e1:fe:71:62:f7:b5:65:38:06:bd: 77:48:0e:5f:ca:6b:a7:40:da:d1:27:1b:a8:ca:41: fe:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:C3:C1:4D:70:DB:9F:89:5E:F7:15:A7:B1:53:5D:88:34:80:3E:8E X509v3 Authority Key Identifier: keyid:02:CB:99:3E:95:85:A5:3F:C6:B4:0D:A7:62:A7:3E:B2:82:1B:F6:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DR8GQ5BUdBH4kqaACcZYQbjnUERKgPYCk2NJi7J4KL6Z/1/02CB993E9585A53FC6B40DA762A73EB2821BF6ED.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02CB993E9585A53FC6B40DA762A73EB2821BF6ED.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DR8GQ5BUdBH4kqaACcZYQbjnUERKgPYCk2NJi7J4KL6Z/1/02CB993E9585A53FC6B40DA762A73EB2821BF6ED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:f6:e4:7e:e1:3f:70:f9:15:14:ad:07:10:62:52:2d:40:df: f2:9c:3a:4c:e9:2a:85:ef:a1:23:57:a6:97:37:ac:38:64:b9: b5:43:c3:07:b1:31:ec:8c:e2:ec:11:11:8c:e6:51:32:49:be: f9:7f:20:6e:0a:e1:32:15:30:93:a8:f9:c5:72:2d:52:0c:53: ed:22:6c:54:fb:88:28:62:56:e2:18:d2:a2:0f:94:74:75:0f: 42:55:e5:6a:20:43:38:37:c7:60:ff:b2:11:c9:e8:5d:2d:0f: 1f:d1:d4:98:41:a4:25:e7:de:93:bf:75:ca:72:0c:03:ee:76: 7f:4d:93:1e:f6:f1:1d:42:5c:4a:7e:74:36:6c:37:69:7c:ad: 23:05:c5:a2:1d:7b:87:7a:ed:6a:47:6b:28:14:47:0c:4d:49: 55:c9:87:e8:96:1a:86:44:84:30:81:d6:dc:d4:4e:bd:82:c1: ca:92:e6:86:43:3f:5a:41:2c:78:91:b6:35:b6:d9:66:b1:53: 03:13:ca:33:6b:ed:2b:40:31:5a:2f:95:18:b6:b8:74:0b:7c: cf:9e:84:60:2e:0b:8a:e0:81:8f:24:a0:d1:ea:1a:fc:9e:f2: d7:b4:7b:58:b4:14:0c:e5:0b:7c:72:ed:ef:31:c4:28:c6:7e: e1:a2:21:f7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUNvxSbPdzr3AiUhQSuSgxashyppswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDJDQjk5M0U5NTg1QTUzRkM2QjQwREE3NjJBNzNFQjI4 MjFCRjZFRDAeFw0yNjA0MTcxNjU3MTdaFw0yNjA0MTgxNzM4MTdaMDMxMTAvBgNV BAMTKDYwQzNDMTRENzBEQjlGODk1RUY3MTVBN0IxNTM1RDg4MzQ4MDNFOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4hiJ8yBDX6nuVz1FtNSRtShnW PxiJKFjvGXt5DjbDqaeB+SksKS1esC8HTA761DHue6lWodaerNF1lAAnLqjuvJw9 sejkYDSKXWl1hg6oZHwLUQcAPzt4K/IMWpPVTZRcXBIXJ0Lp/sk+PQHjsbMH0W7Z Nh56ljhJjznhOCN6heWW1bMMFIq///PiPje2Di1aoSgPhRAj+AxrJ2EDzDu7r5Hx grfcCkDEei8arHrbSUi8cxvDIzGXEWI9CCJN4Jk3niRrBlZCvFn4Y/LTv1MpqipM vbjg6z11/GZqD+ZfFjO/OZPj4f5xYve1ZTgGvXdIDl/Ka6dA2tEnG6jKQf53AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUYMPBTXDbn4le9xWnsVNdiDSAPo4wHwYDVR0j BBgwFoAUAsuZPpWFpT/GtA2nYqc+soIb9u0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRFI4R1E1QlVkQkg0a3FhQUNjWllRYmpuVUVSS2dQWUNrMk5KaTdKNEtM NlovMS8wMkNCOTkzRTk1ODVBNTNGQzZCNDBEQTc2MkE3M0VCMjgyMUJGNkVELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAyQ0I5OTNFOTU4NUE1M0ZD NkI0MERBNzYyQTczRUIyODIxQkY2RUQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RFI4R1E1QlVkQkg0a3FhQUNjWllRYmpuVUVSS2dQWUNrMk5KaTdKNEtMNlovMS8w MkNCOTkzRTk1ODVBNTNGQzZCNDBEQTc2MkE3M0VCMjgyMUJGNkVELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAxfbkfuE/cPkVFK0HEGJSLUDf8pw6TOkqhe+hI1emlzesOGS5tUPDB7Ex7Izi 7BERjOZRMkm++X8gbgrhMhUwk6j5xXItUgxT7SJsVPuIKGJW4hjSog+UdHUPQlXl aiBDODfHYP+yEcnoXS0PH9HUmEGkJefek791ynIMA+52f02THvbxHUJcSn50Nmw3 aXytIwXFoh17h3rtakdrKBRHDE1JVcmH6JYahkSEMIHW3NROvYLBypLmhkM/WkEs eJG2NbbZZrFTAxPKM2vtK0AxWi+VGLa4dAt8z56EYC4LiuCBjySg0eoa/J7y17R7 WLQUDOULfHLt7zHEKMZ+4aIh9w== -----END CERTIFICATE-----Generated at Fri Apr 17 21:10:52 2026 by rpki-client