$ rpki-client -vvf rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/0/2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3.mft File: 2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3.mft (raw, json) Hash identifier: mnxQa3fhhSbU3RRxQHEKHRg/xYfVX0BN+F58rjTMVn8= Subject key identifier: 0C:79:3E:37:7D:ED:0E:17:80:24:5C:FF:8A:5D:E2:B2:BA:EC:44:5F Authority key identifier: 2D:D8:1B:37:1E:8A:AF:8C:14:E2:38:88:DF:FC:A2:64:2F:8B:E6:A3 Certificate issuer: /CN=2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3 Certificate serial: 53E225FB1C424B099D480C68A47F0DE374DCF9C9 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3.cer Subject info access: rsync://rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/0/2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3.mft Manifest number: 9C Signing time: Mon 02 Mar 2026 03:08:57 +0000 Manifest this update: Mon 02 Mar 2026 03:03:57 +0000 Manifest next update: Tue 03 Mar 2026 04:00:57 +0000 Files and hashes: 1: 2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3.crl (hash: YTyg6OFry7NUjAgPdY6CANXS8SfYtEiujyZa38WKCT8=) 2: 34352e3139312e3235322e302f32322d3234203d3e20323639363939.roa (hash: PSjadbPkGEhWlKbiP6CASwLEasYdw97STRMCWGmPs2g=) 3: 323830343a363838383a3a2f33322d3438203d3e20323639363939.roa (hash: Xkr7jReV0o/ET5S91WJGuF4oGyDDTzF21wF7Ks/zLrQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/0/2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3.crl rsync://rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/0/2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 03 Mar 2026 04:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:e2:25:fb:1c:42:4b:09:9d:48:0c:68:a4:7f:0d:e3:74:dc:f9:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3 Validity Not Before: Mar 2 03:03:57 2026 GMT Not After : Mar 3 04:00:57 2026 GMT Subject: CN=0C793E377DED0E1780245CFF8A5DE2B2BAEC445F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:28:da:1e:8b:d0:99:44:cb:59:11:85:6a:4e: ac:9d:a1:2e:1d:2f:c7:25:62:5a:60:67:25:37:65: 16:a2:ab:27:a7:dd:e9:38:3f:8e:a5:29:af:df:a4: 31:30:ea:4b:b0:5e:8b:78:52:cd:ec:75:04:5f:eb: 8a:34:23:2e:51:15:90:23:67:43:b3:19:06:e7:99: dc:5d:f7:51:f3:47:da:b8:10:cf:85:fe:58:fb:34: 9e:83:a4:5b:09:62:ce:c6:d8:85:6d:bf:8f:1c:a7: 7e:57:33:59:57:16:7e:12:45:92:c5:ee:7d:3e:ac: c4:a4:96:52:cf:41:4d:12:96:eb:91:17:d7:82:82: f2:e7:86:cc:9d:ec:35:67:aa:74:0b:8b:48:2d:80: f4:b8:a8:27:27:b4:6a:85:23:72:9f:1e:35:00:cc: f7:2e:c7:aa:c4:38:30:a8:c0:d2:1a:18:4d:d6:cc: 64:3d:ef:2f:fc:3f:53:20:c8:f0:25:f1:31:38:d7: e4:8a:1d:fa:e3:1d:a7:bd:e9:49:ac:2d:79:ab:6d: 79:ee:f8:35:0c:45:c5:5f:f8:0b:b2:14:0e:ce:8c: 8b:03:87:ee:15:03:d5:3f:c0:58:89:f4:8e:02:5a: d9:35:35:5c:1d:4d:56:a9:5e:62:59:57:3c:b6:1b: dd:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:79:3E:37:7D:ED:0E:17:80:24:5C:FF:8A:5D:E2:B2:BA:EC:44:5F X509v3 Authority Key Identifier: keyid:2D:D8:1B:37:1E:8A:AF:8C:14:E2:38:88:DF:FC:A2:64:2F:8B:E6:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/0/2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/0/2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:16:f6:1f:c6:12:aa:a2:ff:54:10:ac:17:ad:76:20:66:58: 03:f3:d6:5d:29:2c:30:32:b3:03:06:fc:b8:4b:f1:4c:a3:3f: cf:b5:7d:17:96:f5:bc:b0:f8:82:5f:af:b9:73:1b:0e:bf:e9: 0d:b2:da:86:ba:35:2f:33:dc:a9:40:46:0c:71:1a:7d:b2:75: 0a:c3:98:1e:e3:e8:86:bc:73:ea:d0:2c:d0:f7:56:08:72:80: a8:5c:ca:f7:a2:1a:88:5a:61:eb:b5:4c:0a:05:f8:c0:65:61: c5:a4:9a:21:6d:d0:41:be:d4:80:ad:78:dc:ff:22:88:04:dc: f1:89:e3:dd:ae:fe:cb:16:51:57:c2:8b:40:84:70:81:61:a2: ee:c0:30:33:ae:ff:8c:03:7f:4d:bf:d1:ae:67:a5:1e:23:10: cc:f2:ab:97:1b:9e:0d:39:fe:6a:41:c3:5f:27:73:4a:be:f9: f9:37:e2:f4:09:30:75:db:fc:65:96:db:fa:06:2d:f7:a9:93: b9:d1:ae:14:83:af:72:f8:68:60:69:80:4e:55:14:0e:c1:7a: 7e:0d:ba:6b:4e:1b:d5:54:58:5f:ae:4e:af:76:de:92:e3:a3: 27:11:0b:41:21:c2:ec:52:01:0f:0a:f3:3a:68:89:fc:7d:c5: c9:3b:c0:71 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUU+Il+xxCSwmdSAxopH8N43Tc+ckwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkREODFCMzcxRThBQUY4QzE0RTIzODg4REZGQ0EyNjQy RjhCRTZBMzAeFw0yNjAzMDIwMzAzNTdaFw0yNjAzMDMwNDAwNTdaMDMxMTAvBgNV BAMTKDBDNzkzRTM3N0RFRDBFMTc4MDI0NUNGRjhBNURFMkIyQkFFQzQ0NUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPKNoei9CZRMtZEYVqTqydoS4d L8clYlpgZyU3ZRaiqyen3ek4P46lKa/fpDEw6kuwXot4Us3sdQRf64o0Iy5RFZAj Z0OzGQbnmdxd91HzR9q4EM+F/lj7NJ6DpFsJYs7G2IVtv48cp35XM1lXFn4SRZLF 7n0+rMSkllLPQU0SluuRF9eCgvLnhsyd7DVnqnQLi0gtgPS4qCcntGqFI3KfHjUA zPcux6rEODCowNIaGE3WzGQ97y/8P1MgyPAl8TE41+SKHfrjHae96UmsLXmrbXnu +DUMRcVf+AuyFA7OjIsDh+4VA9U/wFiJ9I4CWtk1NVwdTVapXmJZVzy2G91dAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUDHk+N33tDheAJFz/il3isrrsRF8wHwYDVR0j BBgwFoAULdgbNx6Kr4wU4jiI3/yiZC+L5qMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRGczM21Mb2pGSnRvMWVOZUYxOXRCTW1DcFFTTDlZYWRDbUU4QTVScWtS YnYvMC8yREQ4MUIzNzFFOEFBRjhDMTRFMjM4ODhERkZDQTI2NDJGOEJFNkEzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJERDgxQjM3MUU4QUFGOEMx NEUyMzg4OERGRkNBMjY0MkY4QkU2QTMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RGczM21Mb2pGSnRvMWVOZUYxOXRCTW1DcFFTTDlZYWRDbUU4QTVScWtSYnYvMC8y REQ4MUIzNzFFOEFBRjhDMTRFMjM4ODhERkZDQTI2NDJGOEJFNkEzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmhb2H8YSqqL/VBCsF612IGZYA/PWXSksMDKzAwb8uEvxTKM/z7V9F5b1vLD4 gl+vuXMbDr/pDbLahro1LzPcqUBGDHEafbJ1CsOYHuPohrxz6tAs0PdWCHKAqFzK 96IaiFph67VMCgX4wGVhxaSaIW3QQb7UgK143P8iiATc8Ynj3a7+yxZRV8KLQIRw gWGi7sAwM67/jAN/Tb/RrmelHiMQzPKrlxueDTn+akHDXydzSr75+Tfi9Akwddv8 ZZbb+gYt96mTudGuFIOvcvhoYGmATlUUDsF6fg26a04b1VRYX65Or3bekuOjJxEL QSHC7FIBDwrzOmiJ/H3FyTvAcQ== -----END CERTIFICATE-----Generated at Mon Mar 2 21:45:08 2026 by rpki-client