$ rpki-client -vvf rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.mft File: 2D59905C3FCA5BDA34D7101B088D80451D026C47.mft (raw, json) Hash identifier: jZ4WBe5teNVrHFXqy/wBHsr0NK1XUQSaHVo8HZz1sfg= Subject key identifier: A3:5A:50:C8:5F:FA:5D:B2:9D:B9:94:E9:BE:94:BD:2A:67:09:C0:01 Authority key identifier: 2D:59:90:5C:3F:CA:5B:DA:34:D7:10:1B:08:8D:80:45:1D:02:6C:47 Certificate issuer: /CN=2D59905C3FCA5BDA34D7101B088D80451D026C47 Certificate serial: 23849D1390CE372905A8B1313F823680FB523315 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.cer Subject info access: rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.mft Manifest number: 03A1 Signing time: Mon 02 Mar 2026 15:45:53 +0000 Manifest this update: Mon 02 Mar 2026 15:40:53 +0000 Manifest next update: Tue 03 Mar 2026 19:00:53 +0000 Files and hashes: 1: 3137302e38302e3130302e302f32322d3234203d3e20323634323333.roa (hash: qV9NZPspM3KKVhmVe1DENEA4d8wOeW2+jk1EM4bR4c0=) 2: 2D59905C3FCA5BDA34D7101B088D80451D026C47.crl (hash: jjeAJoIstaILpFjR/XQFt9XLYijiTgtDYtBhADfG4LQ=) 3: 3133382e3131372e3131362e302f32322d3234203d3e20323634323333.roa (hash: J7bbVsqDbFPyg+gwra+5+pRDDykaqcSlWQ/kD7KeIGo=) 4: 323830343a323439633a3a2f33322d3438203d3e20323634323333.roa (hash: BCUCHvZ6lEHs09wycHj5SXJHCb72dl7JptkA3RY+Zc4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.crl rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 03 Mar 2026 19:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:84:9d:13:90:ce:37:29:05:a8:b1:31:3f:82:36:80:fb:52:33:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D59905C3FCA5BDA34D7101B088D80451D026C47 Validity Not Before: Mar 2 15:40:53 2026 GMT Not After : Mar 3 19:00:53 2026 GMT Subject: CN=A35A50C85FFA5DB29DB994E9BE94BD2A6709C001 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:7c:79:29:2b:85:05:b4:b9:60:cd:30:cb:c0: 62:72:85:24:4c:82:99:f1:d1:bc:50:94:d4:f6:60: 16:22:c2:0e:b7:5b:6e:1d:94:99:c2:d7:15:e7:67: a2:fc:52:a9:98:b2:23:44:70:d3:57:32:84:06:9e: 6e:17:4f:be:4d:10:44:8b:e7:4b:66:b6:6e:d4:2d: 38:a0:5f:b1:6e:1e:8b:70:5a:05:84:6f:ae:71:f8: 66:80:56:68:d9:0b:e6:de:68:c3:dc:ac:b6:20:fb: 74:a9:f0:a1:21:da:59:17:5f:8f:35:ad:c1:88:00: 30:31:6d:a1:1c:b2:8b:57:55:ec:8e:57:3e:fa:4b: ee:5f:39:db:cc:77:07:56:53:85:22:7e:3b:9b:23: 51:0f:59:e6:d4:66:44:25:63:8a:ad:e0:23:57:b9: 1c:a4:25:7c:70:7c:79:e3:93:a7:67:45:d9:f4:99: 10:c5:dd:97:b4:1e:e7:1d:25:88:6f:82:62:6b:d1: 57:61:29:50:f9:02:1a:40:b6:1e:1b:43:fd:0b:dc: 23:a5:e3:5f:52:7f:4b:f9:e6:a0:99:fb:ca:4e:16: 2a:ca:ef:91:90:15:ff:bf:6b:05:57:7f:37:eb:60: a1:2d:ba:8a:d8:f5:77:82:0e:e4:c7:93:8a:d7:24: d3:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:5A:50:C8:5F:FA:5D:B2:9D:B9:94:E9:BE:94:BD:2A:67:09:C0:01 X509v3 Authority Key Identifier: keyid:2D:59:90:5C:3F:CA:5B:DA:34:D7:10:1B:08:8D:80:45:1D:02:6C:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:f5:f0:31:d0:6d:d1:72:62:ae:7e:67:91:0b:e5:19:15:97: 75:e9:5a:76:7d:e1:cc:94:4a:48:33:1c:7a:be:c4:e2:4d:d3: 6a:06:c9:fa:ee:13:44:20:d7:e5:a1:c4:4c:97:57:83:84:15: c3:7b:ec:2f:5b:bf:61:ed:ce:6b:bb:56:41:12:5c:68:25:5b: 9d:68:ae:97:e9:6e:28:77:f0:3b:10:5f:5d:f2:53:dc:41:2d: 32:bb:1f:5d:e2:c8:5b:dc:7e:6f:9f:15:70:22:21:d0:60:fb: a9:ab:b4:19:46:8b:d5:bf:4c:4c:04:f8:e8:ee:b1:c6:82:45: de:4c:7e:db:f8:5b:70:10:15:9c:54:c7:4f:50:7c:8d:f3:1c: 78:94:35:fa:de:eb:50:9f:ce:1c:ab:64:85:c6:f2:fa:97:3f: aa:1f:84:10:31:78:67:ea:d5:7c:94:59:5e:04:52:06:75:fd: 76:e8:ff:30:2d:d7:55:ad:47:0d:be:72:70:0f:57:b6:ed:0c: de:86:7a:98:e9:46:cc:16:82:6b:0f:12:f1:36:82:68:0f:b1: a2:cf:49:5b:87:5b:1c:9f:23:e4:be:bf:29:29:b3:7c:42:3c: 38:d3:e1:26:09:c4:51:25:8e:f1:2d:96:90:a9:17:d8:12:a6: 7a:8f:ef:0f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUI4SdE5DONykFqLExP4I2gPtSMxUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQ1OTkwNUMzRkNBNUJEQTM0RDcxMDFCMDg4RDgwNDUx RDAyNkM0NzAeFw0yNjAzMDIxNTQwNTNaFw0yNjAzMDMxOTAwNTNaMDMxMTAvBgNV BAMTKEEzNUE1MEM4NUZGQTVEQjI5REI5OTRFOUJFOTRCRDJBNjcwOUMwMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAfHkpK4UFtLlgzTDLwGJyhSRM gpnx0bxQlNT2YBYiwg63W24dlJnC1xXnZ6L8UqmYsiNEcNNXMoQGnm4XT75NEESL 50tmtm7ULTigX7FuHotwWgWEb65x+GaAVmjZC+beaMPcrLYg+3Sp8KEh2lkXX481 rcGIADAxbaEcsotXVeyOVz76S+5fOdvMdwdWU4UifjubI1EPWebUZkQlY4qt4CNX uRykJXxwfHnjk6dnRdn0mRDF3Ze0HucdJYhvgmJr0VdhKVD5AhpAth4bQ/0L3COl 419Sf0v55qCZ+8pOFirK75GQFf+/awVXfzfrYKEtuorY9XeCDuTHk4rXJNN5AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUo1pQyF/6XbKduZTpvpS9KmcJwAEwHwYDVR0j BBgwFoAULVmQXD/KW9o01xAbCI2ARR0CbEcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRFRTcmFVZEFXV0xoVVlYOXVkM2N5bnlYSDZaZVdjQVZDOHpjR29GaFA5 QUgvMS8yRDU5OTA1QzNGQ0E1QkRBMzRENzEwMUIwODhEODA0NTFEMDI2QzQ3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJENTk5MDVDM0ZDQTVCREEz NEQ3MTAxQjA4OEQ4MDQ1MUQwMjZDNDcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RFRTcmFVZEFXV0xoVVlYOXVkM2N5bnlYSDZaZVdjQVZDOHpjR29GaFA5QUgvMS8y RDU5OTA1QzNGQ0E1QkRBMzRENzEwMUIwODhEODA0NTFEMDI2QzQ3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKfXwMdBt0XJirn5nkQvlGRWXdeladn3hzJRKSDMcer7E4k3TagbJ+u4TRCDX 5aHETJdXg4QVw3vsL1u/Ye3Oa7tWQRJcaCVbnWiul+luKHfwOxBfXfJT3EEtMrsf XeLIW9x+b58VcCIh0GD7qau0GUaL1b9MTAT46O6xxoJF3kx+2/hbcBAVnFTHT1B8 jfMceJQ1+t7rUJ/OHKtkhcby+pc/qh+EEDF4Z+rVfJRZXgRSBnX9duj/MC3XVa1H Db5ycA9Xtu0M3oZ6mOlGzBaCaw8S8TaCaA+xos9JW4dbHJ8j5L6/KSmzfEI8ONPh JgnEUSWO8S2WkKkX2BKmeo/vDw== -----END CERTIFICATE-----Generated at Mon Mar 2 21:27:54 2026 by rpki-client