$ rpki-client -vvf rpki-repo.registro.br/repo/DR8GQ5BUdBH4kqaACcZYQbjnUERKgPYCk2NJi7J4KL6Z/1/02CB993E9585A53FC6B40DA762A73EB2821BF6ED.mft File: 02CB993E9585A53FC6B40DA762A73EB2821BF6ED.mft (raw, json) Hash identifier: HbYJM4C0A+pu3szkMDnsz7Jb0aa0y/xbYFqka5Is1U0= Subject key identifier: 9B:F8:86:1E:37:24:80:C9:76:0E:4C:40:4E:A6:57:CA:DC:60:0F:E3 Authority key identifier: 02:CB:99:3E:95:85:A5:3F:C6:B4:0D:A7:62:A7:3E:B2:82:1B:F6:ED Certificate issuer: /CN=02CB993E9585A53FC6B40DA762A73EB2821BF6ED Certificate serial: 3A9E83BD32FC03410227C7B378808B828791AE8A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02CB993E9585A53FC6B40DA762A73EB2821BF6ED.cer Subject info access: rsync://rpki-repo.registro.br/repo/DR8GQ5BUdBH4kqaACcZYQbjnUERKgPYCk2NJi7J4KL6Z/1/02CB993E9585A53FC6B40DA762A73EB2821BF6ED.mft Manifest number: 039E Signing time: Sun 01 Mar 2026 12:08:09 +0000 Manifest this update: Sun 01 Mar 2026 12:03:09 +0000 Manifest next update: Mon 02 Mar 2026 12:25:09 +0000 Files and hashes: 1: 323830343a313431633a3a2f33322d313238203d3e203533313330.roa (hash: g/8RkvvRiCbns6+mnGZNl1IDwf7bMfNp8L/7f+R1hPM=) 2: 3138372e3132302e3234302e302f32302d3234203d3e203533313330.roa (hash: u6JWRD8ycN8elOEjqlNbVHnY1vOwWMG8oR+A2yiNNfQ=) 3: 02CB993E9585A53FC6B40DA762A73EB2821BF6ED.crl (hash: PC7PDFJOWDceiyJmUMG20sqMhmHrhcwR7kwYS1P1q5I=) 4: 3139312e372e37322e302f32312d3234203d3e203533313330.roa (hash: t86CJMrHTe89FiqYmonBVC0HlNmRd0X4J57WdEY9FzI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DR8GQ5BUdBH4kqaACcZYQbjnUERKgPYCk2NJi7J4KL6Z/1/02CB993E9585A53FC6B40DA762A73EB2821BF6ED.crl rsync://rpki-repo.registro.br/repo/DR8GQ5BUdBH4kqaACcZYQbjnUERKgPYCk2NJi7J4KL6Z/1/02CB993E9585A53FC6B40DA762A73EB2821BF6ED.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02CB993E9585A53FC6B40DA762A73EB2821BF6ED.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 02 Mar 2026 12:25:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:9e:83:bd:32:fc:03:41:02:27:c7:b3:78:80:8b:82:87:91:ae:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02CB993E9585A53FC6B40DA762A73EB2821BF6ED Validity Not Before: Mar 1 12:03:09 2026 GMT Not After : Mar 2 12:25:09 2026 GMT Subject: CN=9BF8861E372480C9760E4C404EA657CADC600FE3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:91:39:d7:ec:a2:51:e2:a4:09:d7:95:65:04: 78:b8:ec:0e:1a:7c:32:69:e9:2e:7a:61:03:7f:69: 10:4f:28:62:17:02:30:f1:75:55:6c:80:bf:de:7d: 4e:62:a0:50:53:4b:be:fc:ec:84:e2:47:6e:ca:d6: b7:be:0d:e4:be:a9:6e:04:28:a6:2f:fe:58:7b:df: cd:78:58:f9:ec:4a:d1:5f:25:3f:84:26:cb:7b:f8: 41:f9:fd:d3:ec:b8:11:c8:b6:0a:62:54:4d:bc:bf: 68:df:ec:8a:40:ca:db:7b:e3:b2:56:bf:fc:8f:a2: 56:e1:71:f5:07:67:76:4e:ec:14:39:2b:70:55:4c: d1:37:4d:9e:8e:d5:79:b3:fb:74:85:a0:55:d1:cd: db:99:56:af:ee:6b:3e:5c:ef:ec:54:84:6a:ea:32: cc:3d:a6:fb:99:ed:a2:6d:08:37:aa:67:b5:ca:4e: 59:04:33:e0:bc:cd:19:45:eb:72:c4:b0:85:01:e5: d7:e7:53:8b:7e:10:99:04:33:50:49:2b:46:9d:8c: 1d:fa:0d:2a:b6:c4:0a:b5:dd:38:98:73:22:47:10: 35:b4:87:e3:b8:46:b4:c6:93:db:91:fa:07:6a:c1: 28:ea:1f:c0:6b:f5:91:87:ed:ec:f1:17:bc:16:18: 99:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:F8:86:1E:37:24:80:C9:76:0E:4C:40:4E:A6:57:CA:DC:60:0F:E3 X509v3 Authority Key Identifier: keyid:02:CB:99:3E:95:85:A5:3F:C6:B4:0D:A7:62:A7:3E:B2:82:1B:F6:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DR8GQ5BUdBH4kqaACcZYQbjnUERKgPYCk2NJi7J4KL6Z/1/02CB993E9585A53FC6B40DA762A73EB2821BF6ED.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02CB993E9585A53FC6B40DA762A73EB2821BF6ED.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DR8GQ5BUdBH4kqaACcZYQbjnUERKgPYCk2NJi7J4KL6Z/1/02CB993E9585A53FC6B40DA762A73EB2821BF6ED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:51:07:6b:9f:83:40:c0:df:46:5a:6f:e9:60:da:8e:b1:a8: 79:ab:3a:c1:4a:9e:5f:2d:e1:03:2c:01:5d:cb:6f:cb:36:a1: 8c:f7:e3:7b:71:bf:7e:36:70:29:dc:8f:be:21:0b:b8:f5:93: 2b:07:d7:b9:fa:ee:9c:c4:a0:1d:b9:48:9c:34:1b:ba:19:01: a3:76:b4:f1:68:20:41:fd:80:10:c9:4a:bd:a9:6f:5a:20:b2: 06:0a:6a:79:04:26:e4:d3:b9:92:53:cb:1f:02:da:70:4a:15: c3:24:d0:35:74:4f:b4:8d:54:7b:14:1d:da:13:30:19:c5:67: 1e:e7:05:b1:6a:cc:04:2a:52:e6:be:97:a5:62:03:30:6c:47: e8:e2:98:03:72:be:42:7d:8d:d9:df:0b:fa:55:b1:fb:90:5e: a7:0c:75:0e:58:73:05:b6:80:01:e6:5f:bb:94:8b:9a:cd:4e: 23:ab:2e:24:42:02:72:0c:88:fd:6a:4d:d3:73:cf:30:80:ad: 8a:3b:d1:fa:e6:d6:e4:75:e7:70:2d:93:a4:67:e3:d1:2e:0b: b0:49:4c:26:cc:78:0f:a0:7b:d2:8b:eb:4f:b0:50:50:c2:d0: d1:15:34:2b:c3:7c:33:c9:0a:6a:75:4d:ac:f0:8e:03:18:bd: 80:15:63:07 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUOp6DvTL8A0ECJ8ezeICLgoeRroowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDJDQjk5M0U5NTg1QTUzRkM2QjQwREE3NjJBNzNFQjI4 MjFCRjZFRDAeFw0yNjAzMDExMjAzMDlaFw0yNjAzMDIxMjI1MDlaMDMxMTAvBgNV BAMTKDlCRjg4NjFFMzcyNDgwQzk3NjBFNEM0MDRFQTY1N0NBREM2MDBGRTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQkTnX7KJR4qQJ15VlBHi47A4a fDJp6S56YQN/aRBPKGIXAjDxdVVsgL/efU5ioFBTS7787ITiR27K1re+DeS+qW4E KKYv/lh73814WPnsStFfJT+EJst7+EH5/dPsuBHItgpiVE28v2jf7IpAytt747JW v/yPolbhcfUHZ3ZO7BQ5K3BVTNE3TZ6O1Xmz+3SFoFXRzduZVq/uaz5c7+xUhGrq Msw9pvuZ7aJtCDeqZ7XKTlkEM+C8zRlF63LEsIUB5dfnU4t+EJkEM1BJK0adjB36 DSq2xAq13TiYcyJHEDW0h+O4RrTGk9uR+gdqwSjqH8Br9ZGH7ezxF7wWGJllAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUm/iGHjckgMl2DkxATqZXytxgD+MwHwYDVR0j BBgwFoAUAsuZPpWFpT/GtA2nYqc+soIb9u0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRFI4R1E1QlVkQkg0a3FhQUNjWllRYmpuVUVSS2dQWUNrMk5KaTdKNEtM NlovMS8wMkNCOTkzRTk1ODVBNTNGQzZCNDBEQTc2MkE3M0VCMjgyMUJGNkVELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAyQ0I5OTNFOTU4NUE1M0ZD NkI0MERBNzYyQTczRUIyODIxQkY2RUQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RFI4R1E1QlVkQkg0a3FhQUNjWllRYmpuVUVSS2dQWUNrMk5KaTdKNEtMNlovMS8w MkNCOTkzRTk1ODVBNTNGQzZCNDBEQTc2MkE3M0VCMjgyMUJGNkVELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVlEHa5+DQMDfRlpv6WDajrGoeas6wUqeXy3hAywBXctvyzahjPfje3G/fjZw KdyPviELuPWTKwfXufrunMSgHblInDQbuhkBo3a08WggQf2AEMlKvalvWiCyBgpq eQQm5NO5klPLHwLacEoVwyTQNXRPtI1UexQd2hMwGcVnHucFsWrMBCpS5r6XpWID MGxH6OKYA3K+Qn2N2d8L+lWx+5Bepwx1DlhzBbaAAeZfu5SLms1OI6suJEICcgyI /WpN03PPMICtijvR+ubW5HXncC2TpGfj0S4LsElMJsx4D6B70ovrT7BQUMLQ0RU0 K8N8M8kKanVNrPCOAxi9gBVjBw== -----END CERTIFICATE-----Generated at Sun Mar 1 21:16:29 2026 by rpki-client