$ rpki-client -vvf rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/0/2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3.mft File: 2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3.mft (raw, json) Hash identifier: ib3SOI6lFUF63FdKhIt9IxmQFpByprn1JeQNiZz2cZI= Subject key identifier: 50:8E:4C:7A:58:C9:2E:BD:69:B3:F9:5E:DC:E2:D2:99:FC:A2:1D:A9 Authority key identifier: 2D:D8:1B:37:1E:8A:AF:8C:14:E2:38:88:DF:FC:A2:64:2F:8B:E6:A3 Certificate issuer: /CN=2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3 Certificate serial: 364E12A5F58E1898400B67902BAEE1F6677B8088 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3.cer Subject info access: rsync://rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/0/2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3.mft Manifest number: D9 Signing time: Fri 17 Apr 2026 07:23:12 +0000 Manifest this update: Fri 17 Apr 2026 07:18:12 +0000 Manifest next update: Sat 18 Apr 2026 10:27:12 +0000 Files and hashes: 1: 2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3.crl (hash: /VZyRxVUSDzY/1UpNFG38Wepc+n7eu+CctYc2NwG05c=) 2: 323830343a363838383a3a2f33322d3438203d3e20323639363939.roa (hash: Xkr7jReV0o/ET5S91WJGuF4oGyDDTzF21wF7Ks/zLrQ=) 3: 34352e3139312e3235322e302f32322d3234203d3e20323639363939.roa (hash: PSjadbPkGEhWlKbiP6CASwLEasYdw97STRMCWGmPs2g=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/0/2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3.crl rsync://rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/0/2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Apr 2026 10:27:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:4e:12:a5:f5:8e:18:98:40:0b:67:90:2b:ae:e1:f6:67:7b:80:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3 Validity Not Before: Apr 17 07:18:12 2026 GMT Not After : Apr 18 10:27:12 2026 GMT Subject: CN=508E4C7A58C92EBD69B3F95EDCE2D299FCA21DA9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e4:0f:cb:dc:86:89:af:cc:52:d1:ac:2a:d9: 10:73:c2:1d:b9:90:aa:97:cf:c4:69:7f:f1:db:6f: 3f:cf:ec:d5:53:db:77:18:b7:31:e9:ef:4c:f2:1e: fd:b5:da:7f:68:27:a2:41:e9:9f:bc:3f:69:ce:b2: e6:d5:d8:ab:58:94:76:38:d2:87:45:f9:2a:4e:30: f6:55:c5:97:1a:89:63:33:1f:8e:70:eb:17:c1:c2: e8:09:01:94:35:ea:61:b4:e4:fd:a7:b7:e2:94:55: a4:b5:c7:b8:3c:68:95:11:12:62:b8:1f:65:66:64: fd:78:7b:ee:20:a4:49:46:14:3f:62:8a:78:32:4b: fd:e9:51:ba:c8:24:2f:28:e9:2e:08:8b:2e:7f:2c: 7b:2a:60:56:ee:09:0a:86:18:d5:93:f7:3f:c0:9f: cd:50:4a:ad:12:e2:c7:1c:af:b3:e6:a2:bf:84:1a: 7c:76:3f:b0:56:04:13:56:f2:6c:d8:08:4b:f2:b5: 26:c5:5d:0c:26:88:3a:e1:02:cf:4e:13:cd:62:fe: fc:cb:2d:07:0e:97:5d:21:14:38:ca:08:71:a3:a1: a8:69:1c:bf:1e:5d:7f:32:a8:28:ed:72:25:27:43: 6e:6f:9b:c5:04:e9:3b:70:57:11:72:75:ad:85:96: 64:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:8E:4C:7A:58:C9:2E:BD:69:B3:F9:5E:DC:E2:D2:99:FC:A2:1D:A9 X509v3 Authority Key Identifier: keyid:2D:D8:1B:37:1E:8A:AF:8C:14:E2:38:88:DF:FC:A2:64:2F:8B:E6:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/0/2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/0/2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:63:05:ff:a3:01:74:90:5b:db:db:33:00:ec:7d:e8:51:1a: fe:cf:99:7a:ca:d9:88:92:ef:34:94:6e:3a:37:96:4a:c9:bf: aa:cb:75:6b:ef:6a:bc:80:a9:7f:2a:8d:2c:52:1f:7f:ad:c1: 17:01:b7:37:69:78:99:bc:2e:3b:79:a9:9e:92:c4:22:4f:d3: 90:83:53:90:3e:73:df:06:c4:3d:e1:21:d9:28:fb:8c:76:18: 1f:f7:76:94:5d:e5:82:a0:b5:31:e0:10:2e:64:36:8e:26:14: dd:3a:bf:0e:dd:1f:70:79:10:95:ca:9c:b1:30:c9:48:75:a0: be:5d:e8:20:bf:11:2c:16:b8:62:2e:84:b3:07:b7:c0:b0:46: 0f:3d:c1:4f:84:73:79:ab:0b:2c:83:ab:e6:26:73:c4:95:d2: d9:cf:23:4a:da:ba:00:6e:29:fd:25:c7:7f:ee:ff:88:12:aa: 53:c5:bf:58:af:93:c4:a2:10:94:56:97:1a:d9:43:3a:eb:da: ff:33:13:33:c1:f5:5c:df:6b:8a:28:3f:a8:f2:17:34:2e:b9: 12:0a:46:ca:28:1d:c8:8a:7a:d8:d1:19:40:50:ca:95:c7:c3: e6:dc:8d:08:e5:7b:ed:9d:5f:de:e9:8b:be:2e:c7:29:7e:08: c5:1b:e3:8c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUNk4SpfWOGJhAC2eQK67h9md7gIgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkREODFCMzcxRThBQUY4QzE0RTIzODg4REZGQ0EyNjQy RjhCRTZBMzAeFw0yNjA0MTcwNzE4MTJaFw0yNjA0MTgxMDI3MTJaMDMxMTAvBgNV BAMTKDUwOEU0QzdBNThDOTJFQkQ2OUIzRjk1RURDRTJEMjk5RkNBMjFEQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI5A/L3IaJr8xS0awq2RBzwh25 kKqXz8Rpf/Hbbz/P7NVT23cYtzHp70zyHv212n9oJ6JB6Z+8P2nOsubV2KtYlHY4 0odF+SpOMPZVxZcaiWMzH45w6xfBwugJAZQ16mG05P2nt+KUVaS1x7g8aJUREmK4 H2VmZP14e+4gpElGFD9iingyS/3pUbrIJC8o6S4Iiy5/LHsqYFbuCQqGGNWT9z/A n81QSq0S4sccr7Pmor+EGnx2P7BWBBNW8mzYCEvytSbFXQwmiDrhAs9OE81i/vzL LQcOl10hFDjKCHGjoahpHL8eXX8yqCjtciUnQ25vm8UE6TtwVxFyda2FlmT1AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUUI5MeljJLr1ps/le3OLSmfyiHakwHwYDVR0j BBgwFoAULdgbNx6Kr4wU4jiI3/yiZC+L5qMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRGczM21Mb2pGSnRvMWVOZUYxOXRCTW1DcFFTTDlZYWRDbUU4QTVScWtS YnYvMC8yREQ4MUIzNzFFOEFBRjhDMTRFMjM4ODhERkZDQTI2NDJGOEJFNkEzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJERDgxQjM3MUU4QUFGOEMx NEUyMzg4OERGRkNBMjY0MkY4QkU2QTMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RGczM21Mb2pGSnRvMWVOZUYxOXRCTW1DcFFTTDlZYWRDbUU4QTVScWtSYnYvMC8y REQ4MUIzNzFFOEFBRjhDMTRFMjM4ODhERkZDQTI2NDJGOEJFNkEzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJ2MF/6MBdJBb29szAOx96FEa/s+ZesrZiJLvNJRuOjeWSsm/qst1a+9qvICp fyqNLFIff63BFwG3N2l4mbwuO3mpnpLEIk/TkINTkD5z3wbEPeEh2Sj7jHYYH/d2 lF3lgqC1MeAQLmQ2jiYU3Tq/Dt0fcHkQlcqcsTDJSHWgvl3oIL8RLBa4Yi6Eswe3 wLBGDz3BT4RzeasLLIOr5iZzxJXS2c8jStq6AG4p/SXHf+7/iBKqU8W/WK+TxKIQ lFaXGtlDOuva/zMTM8H1XN9riig/qPIXNC65EgpGyigdyIp62NEZQFDKlcfD5tyN COV77Z1f3umLvi7HKX4IxRvjjA== -----END CERTIFICATE-----Generated at Sat Apr 18 03:26:56 2026 by rpki-client