$ rpki-client -vvf rpki-repo.registro.br/repo/DxnXiRB3zsCLBGcsZgaRsKLb7s3swHx3voVx4yTkJqrs/0/D23F9BF77CC1B32DE1FEEA208F14CD3438A4DCBE.mft File: D23F9BF77CC1B32DE1FEEA208F14CD3438A4DCBE.mft (raw, json) Hash identifier: 9vs7UQ2ggTcDiYDtG2ED3lrwEvidArojtRKm1VxoqjQ= Subject key identifier: E6:C4:E0:B0:23:CE:38:AC:A7:F4:D3:F1:51:E2:78:C1:68:FC:36:D0 Authority key identifier: D2:3F:9B:F7:7C:C1:B3:2D:E1:FE:EA:20:8F:14:CD:34:38:A4:DC:BE Certificate issuer: /CN=D23F9BF77CC1B32DE1FEEA208F14CD3438A4DCBE Certificate serial: 3379AF5090A321AC01AAB8B0C961F5619BD536BF Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D23F9BF77CC1B32DE1FEEA208F14CD3438A4DCBE.cer Subject info access: rsync://rpki-repo.registro.br/repo/DxnXiRB3zsCLBGcsZgaRsKLb7s3swHx3voVx4yTkJqrs/0/D23F9BF77CC1B32DE1FEEA208F14CD3438A4DCBE.mft Manifest number: 017E Signing time: Mon 02 Mar 2026 02:15:27 +0000 Manifest this update: Mon 02 Mar 2026 02:10:27 +0000 Manifest next update: Tue 03 Mar 2026 02:21:27 +0000 Files and hashes: 1: D23F9BF77CC1B32DE1FEEA208F14CD3438A4DCBE.crl (hash: XnX0hFj9SVmJUS95HhqxLaO12gJkXb5DXj6v46dqszA=) 2: 3133382e302e3230342e302f32322d3234203d3e20323634353536.roa (hash: Bp/MXpC4FvWK4Yo9ZUl+rpN/2KDLvDApID7I3LrdZiw=) 3: 323830343a323137383a3a2f33322d3438203d3e20323634353536.roa (hash: GksSVdLS7K0cl550vTDzKqmAY2+LTjqW45XiI8cG9xk=) 4: 3136382e3232372e38382e302f32322d3234203d3e20323634353536.roa (hash: am5A4bo+CeX/idLnSOVp8k4cvl+rRIWfZDIw8duCyYA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DxnXiRB3zsCLBGcsZgaRsKLb7s3swHx3voVx4yTkJqrs/0/D23F9BF77CC1B32DE1FEEA208F14CD3438A4DCBE.crl rsync://rpki-repo.registro.br/repo/DxnXiRB3zsCLBGcsZgaRsKLb7s3swHx3voVx4yTkJqrs/0/D23F9BF77CC1B32DE1FEEA208F14CD3438A4DCBE.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D23F9BF77CC1B32DE1FEEA208F14CD3438A4DCBE.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 03 Mar 2026 02:21:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:79:af:50:90:a3:21:ac:01:aa:b8:b0:c9:61:f5:61:9b:d5:36:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D23F9BF77CC1B32DE1FEEA208F14CD3438A4DCBE Validity Not Before: Mar 2 02:10:27 2026 GMT Not After : Mar 3 02:21:27 2026 GMT Subject: CN=E6C4E0B023CE38ACA7F4D3F151E278C168FC36D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:7b:9e:d6:40:c6:c0:77:91:a6:d7:69:10:f6: da:e8:5b:df:5f:6e:b8:6c:e9:0d:6f:5a:14:c5:5e: 9f:3f:68:58:d6:a8:5b:fc:70:9f:62:b5:6d:6f:b5: 88:de:ab:3f:f5:31:80:fb:61:0e:34:9d:f4:42:a6: 1b:bb:13:42:73:e6:bc:43:23:b4:fd:1f:1e:42:a8: 49:9b:1a:bc:fe:ed:69:52:9a:67:d7:de:9f:f6:c1: c2:10:7d:f4:87:39:e9:fe:ce:7d:51:51:94:71:d3: 52:9b:b6:8a:d4:04:e6:d0:af:b6:3d:1e:19:ad:a8: 79:cf:0a:b5:0e:25:bb:5f:85:03:a5:e9:a1:71:32: 5d:25:4c:d7:02:5b:0e:5b:0e:a0:39:c5:ce:20:a9: f8:53:6d:7c:23:8d:a5:5b:f2:74:02:b9:c1:5a:db: 6a:fa:9a:fe:e7:02:e8:89:9f:fa:fc:09:cf:9d:13: b0:d3:30:67:08:2c:39:44:0b:01:e4:ad:b5:6c:fe: 3f:5d:ee:22:b4:99:9f:0c:22:45:2e:b4:41:99:18: 9e:91:23:3c:97:1d:26:d9:64:c1:ed:ec:9a:1c:a4: c3:38:46:83:4a:be:81:78:b3:7b:b2:03:b3:d6:46: 2b:7d:56:7a:b1:e9:d5:a5:ef:e5:9d:30:29:01:b7: 28:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:C4:E0:B0:23:CE:38:AC:A7:F4:D3:F1:51:E2:78:C1:68:FC:36:D0 X509v3 Authority Key Identifier: keyid:D2:3F:9B:F7:7C:C1:B3:2D:E1:FE:EA:20:8F:14:CD:34:38:A4:DC:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DxnXiRB3zsCLBGcsZgaRsKLb7s3swHx3voVx4yTkJqrs/0/D23F9BF77CC1B32DE1FEEA208F14CD3438A4DCBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D23F9BF77CC1B32DE1FEEA208F14CD3438A4DCBE.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DxnXiRB3zsCLBGcsZgaRsKLb7s3swHx3voVx4yTkJqrs/0/D23F9BF77CC1B32DE1FEEA208F14CD3438A4DCBE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:83:88:55:05:58:86:ea:16:29:75:b9:95:85:0a:20:65:63: 05:52:c5:09:d9:e8:a9:2a:bb:c0:ea:4b:8c:04:a3:00:65:60: 6f:c1:ba:6c:95:8e:13:d9:a8:09:c9:98:67:ee:e3:a1:1f:d2: ee:0e:7f:f8:cf:a6:96:c8:8e:60:48:39:6b:68:8f:0b:bb:aa: 2e:f1:fd:bc:13:1c:70:86:77:61:99:51:ff:8f:5c:e1:3e:fc: b9:ba:2a:36:9d:cf:54:bd:33:c2:6e:ab:fc:d5:b2:46:de:1a: e3:91:10:0c:23:9f:64:e5:48:54:a7:e7:8a:ad:7a:2a:a3:91: 66:5f:7c:26:95:5d:54:80:d4:ab:33:98:1b:ce:dc:d1:98:0f: 00:41:f6:b4:3d:6c:2d:df:7a:d0:69:5c:40:34:56:72:29:73: 79:61:77:f4:d1:32:f9:64:d3:b6:c8:6f:53:13:47:e2:01:27: a7:05:1e:bb:c6:45:9b:76:77:a9:ec:0c:ef:78:54:49:e4:72: c6:f4:92:08:60:a8:58:35:31:a3:24:12:44:dd:63:ee:24:6d: f9:5e:a6:96:f3:d9:71:87:95:d6:ba:1b:ce:84:21:07:20:a9: 66:d6:07:18:be:38:b0:f8:ac:21:91:82:cb:b9:52:36:3e:32: 64:e6:23:50 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUM3mvUJCjIawBqriwyWH1YZvVNr8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDIzRjlCRjc3Q0MxQjMyREUxRkVFQTIwOEYxNENEMzQz OEE0RENCRTAeFw0yNjAzMDIwMjEwMjdaFw0yNjAzMDMwMjIxMjdaMDMxMTAvBgNV BAMTKEU2QzRFMEIwMjNDRTM4QUNBN0Y0RDNGMTUxRTI3OEMxNjhGQzM2RDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCze57WQMbAd5Gm12kQ9troW99f brhs6Q1vWhTFXp8/aFjWqFv8cJ9itW1vtYjeqz/1MYD7YQ40nfRCphu7E0Jz5rxD I7T9Hx5CqEmbGrz+7WlSmmfX3p/2wcIQffSHOen+zn1RUZRx01KbtorUBObQr7Y9 HhmtqHnPCrUOJbtfhQOl6aFxMl0lTNcCWw5bDqA5xc4gqfhTbXwjjaVb8nQCucFa 22r6mv7nAuiJn/r8Cc+dE7DTMGcILDlECwHkrbVs/j9d7iK0mZ8MIkUutEGZGJ6R IzyXHSbZZMHt7JocpMM4RoNKvoF4s3uyA7PWRit9Vnqx6dWl7+WdMCkBtyjvAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU5sTgsCPOOKyn9NPxUeJ4wWj8NtAwHwYDVR0j BBgwFoAU0j+b93zBsy3h/uogjxTNNDik3L4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRHhuWGlSQjN6c0NMQkdjc1pnYVJzS0xiN3Mzc3dIeDN2b1Z4NHlUa0px cnMvMC9EMjNGOUJGNzdDQzFCMzJERTFGRUVBMjA4RjE0Q0QzNDM4QTREQ0JFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QyM0Y5QkY3N0NDMUIzMkRF MUZFRUEyMDhGMTRDRDM0MzhBNERDQkUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RHhuWGlSQjN6c0NMQkdjc1pnYVJzS0xiN3Mzc3dIeDN2b1Z4NHlUa0pxcnMvMC9E MjNGOUJGNzdDQzFCMzJERTFGRUVBMjA4RjE0Q0QzNDM4QTREQ0JFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGoOIVQVYhuoWKXW5lYUKIGVjBVLFCdnoqSq7wOpLjASjAGVgb8G6bJWOE9mo CcmYZ+7joR/S7g5/+M+mlsiOYEg5a2iPC7uqLvH9vBMccIZ3YZlR/49c4T78uboq Np3PVL0zwm6r/NWyRt4a45EQDCOfZOVIVKfniq16KqORZl98JpVdVIDUqzOYG87c 0ZgPAEH2tD1sLd960GlcQDRWcilzeWF39NEy+WTTtshvUxNH4gEnpwUeu8ZFm3Z3 qewM73hUSeRyxvSSCGCoWDUxoyQSRN1j7iRt+V6mlvPZcYeV1robzoQhByCpZtYH GL44sPisIZGCy7lSNj4yZOYjUA== -----END CERTIFICATE-----Generated at Mon Mar 2 16:02:24 2026 by rpki-client