$ rpki-client -vvf rpki-repo.registro.br/repo/FJQ7iVw9ULpfmfBV9JwEVDjYyTnFstRT3iBrF3e3Yf2z/0/C3FFCD90B027382FDB2A2EA78823282F4E8039A3.mft File: C3FFCD90B027382FDB2A2EA78823282F4E8039A3.mft (raw, json) Hash identifier: s31SveehLcRRqQsphsIDfzO6M2SZGvfFf2LTiYVJpGA= Subject key identifier: 8A:11:69:F2:A6:B3:5C:8D:D5:12:0C:2F:A5:6E:2E:16:C5:08:81:D3 Authority key identifier: C3:FF:CD:90:B0:27:38:2F:DB:2A:2E:A7:88:23:28:2F:4E:80:39:A3 Certificate issuer: /CN=C3FFCD90B027382FDB2A2EA78823282F4E8039A3 Certificate serial: 37E30668A0944DCA864FB38A804B7C82F27E1AFE Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3FFCD90B027382FDB2A2EA78823282F4E8039A3.cer Subject info access: rsync://rpki-repo.registro.br/repo/FJQ7iVw9ULpfmfBV9JwEVDjYyTnFstRT3iBrF3e3Yf2z/0/C3FFCD90B027382FDB2A2EA78823282F4E8039A3.mft Manifest number: C2 Signing time: Mon 02 Mar 2026 12:34:44 +0000 Manifest this update: Mon 02 Mar 2026 12:29:44 +0000 Manifest next update: Tue 03 Mar 2026 14:08:44 +0000 Files and hashes: 1: C3FFCD90B027382FDB2A2EA78823282F4E8039A3.crl (hash: agLu8eewJivs7OQ0CI2RXiez8mc540QRIp7xuIoEzwg=) 2: 323830343a363133383a3a2f33322d3438203d3e20323639323231.roa (hash: T01+x/vREwV33AzOYArGAX++e9FGALmTd+n1jJu8hwU=) 3: 34352e3138312e3131362e302f32322d3234203d3e20323639323231.roa (hash: 3VR2tRHys0rckh/3rahOd8k/ebCOEiGxkZ99rxqzT00=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/FJQ7iVw9ULpfmfBV9JwEVDjYyTnFstRT3iBrF3e3Yf2z/0/C3FFCD90B027382FDB2A2EA78823282F4E8039A3.crl rsync://rpki-repo.registro.br/repo/FJQ7iVw9ULpfmfBV9JwEVDjYyTnFstRT3iBrF3e3Yf2z/0/C3FFCD90B027382FDB2A2EA78823282F4E8039A3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3FFCD90B027382FDB2A2EA78823282F4E8039A3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 03 Mar 2026 14:08:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:e3:06:68:a0:94:4d:ca:86:4f:b3:8a:80:4b:7c:82:f2:7e:1a:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3FFCD90B027382FDB2A2EA78823282F4E8039A3 Validity Not Before: Mar 2 12:29:44 2026 GMT Not After : Mar 3 14:08:44 2026 GMT Subject: CN=8A1169F2A6B35C8DD5120C2FA56E2E16C50881D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:c6:6a:ee:83:60:30:8c:72:75:48:f9:0b:04: 65:d6:77:27:9a:66:8d:5f:a2:db:5a:25:9d:90:34: a5:86:40:84:06:89:13:40:45:4e:d7:34:83:39:d4: 18:89:42:f6:21:14:c9:09:b8:2c:1b:34:f5:5e:63: 63:b0:70:c8:7c:e3:66:2f:bf:8b:5a:17:01:11:3b: 11:48:6b:ab:55:08:0e:bd:b4:3a:b9:26:fd:03:fd: f7:cb:12:84:e3:bc:fc:d3:6a:20:de:a1:90:c9:e0: 1b:01:19:d9:49:e4:bb:47:5d:16:43:32:27:45:ee: 7b:2e:5c:4e:34:e9:10:19:4f:f2:fd:fd:14:cd:1f: 1a:74:f9:6e:8d:9e:d7:13:c6:cd:60:9e:65:ab:71: c3:f4:1e:d9:1b:85:f5:c8:39:9d:45:df:bd:5e:0f: e2:15:b2:74:f2:0d:1d:54:da:4a:6f:2e:18:50:a3: 97:88:2d:8b:ab:f1:b0:4d:b7:91:06:e9:9c:8f:3e: dc:4a:9c:59:61:d3:a8:e9:84:3e:e0:1f:ce:40:de: f5:47:41:2e:f0:c7:8d:5c:00:b1:aa:a0:b1:d6:ad: 60:02:2e:49:09:f9:4d:8c:b8:06:eb:d6:21:eb:fe: a6:4f:b7:65:f1:e3:e3:fc:9e:eb:14:85:68:f7:d5: d7:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:11:69:F2:A6:B3:5C:8D:D5:12:0C:2F:A5:6E:2E:16:C5:08:81:D3 X509v3 Authority Key Identifier: keyid:C3:FF:CD:90:B0:27:38:2F:DB:2A:2E:A7:88:23:28:2F:4E:80:39:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/FJQ7iVw9ULpfmfBV9JwEVDjYyTnFstRT3iBrF3e3Yf2z/0/C3FFCD90B027382FDB2A2EA78823282F4E8039A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3FFCD90B027382FDB2A2EA78823282F4E8039A3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/FJQ7iVw9ULpfmfBV9JwEVDjYyTnFstRT3iBrF3e3Yf2z/0/C3FFCD90B027382FDB2A2EA78823282F4E8039A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:80:fd:fe:bf:72:f8:0f:63:fa:4e:46:3f:d3:15:52:00:71: f6:ff:1a:e3:24:21:42:be:91:e6:45:af:d5:69:63:c1:46:79: f2:15:5e:a7:6c:66:73:70:b3:ae:7c:a4:1b:c6:9f:79:e4:92: 5b:27:36:b1:51:4b:91:1f:67:b3:b4:c5:05:ce:5e:88:6e:de: be:fd:52:d9:1c:89:3e:23:de:e6:82:11:30:e3:13:dd:5c:31: c4:09:71:ac:db:c4:fc:33:e7:6c:f4:5a:51:2c:4c:46:e3:54: b2:db:19:05:8c:6c:69:ae:b5:13:bb:c2:0a:df:b7:26:ca:a2: c9:4f:68:e9:39:5e:8d:bc:ed:07:af:7e:e3:47:21:7d:25:ff: 29:36:78:8d:6f:ef:14:25:e3:8a:4b:a4:a3:78:8d:64:37:fb: 0f:68:be:9f:13:69:f4:c9:f8:ec:40:e6:c6:53:fa:e7:3d:25: d6:91:d6:03:68:10:b0:bb:3b:a0:f5:6b:30:74:8e:08:30:2c: 46:ff:47:99:a6:6d:f3:a8:8e:8b:0e:8c:d5:84:d8:ab:f7:f9: 5a:e4:7f:87:03:86:e8:e1:76:ed:82:ad:18:f1:96:5e:a5:85: 8a:34:51:38:77:1a:cb:0c:2d:37:6d:a7:4e:ec:61:84:0e:e5: 5c:89:53:b6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUN+MGaKCUTcqGT7OKgEt8gvJ+Gv4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNGRkNEOTBCMDI3MzgyRkRCMkEyRUE3ODgyMzI4MkY0 RTgwMzlBMzAeFw0yNjAzMDIxMjI5NDRaFw0yNjAzMDMxNDA4NDRaMDMxMTAvBgNV BAMTKDhBMTE2OUYyQTZCMzVDOERENTEyMEMyRkE1NkUyRTE2QzUwODgxRDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdxmrug2AwjHJ1SPkLBGXWdyea Zo1fottaJZ2QNKWGQIQGiRNARU7XNIM51BiJQvYhFMkJuCwbNPVeY2OwcMh842Yv v4taFwEROxFIa6tVCA69tDq5Jv0D/ffLEoTjvPzTaiDeoZDJ4BsBGdlJ5LtHXRZD MidF7nsuXE406RAZT/L9/RTNHxp0+W6NntcTxs1gnmWrccP0HtkbhfXIOZ1F371e D+IVsnTyDR1U2kpvLhhQo5eILYur8bBNt5EG6ZyPPtxKnFlh06jphD7gH85A3vVH QS7wx41cALGqoLHWrWACLkkJ+U2MuAbr1iHr/qZPt2Xx4+P8nusUhWj31dfXAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUihFp8qazXI3VEgwvpW4uFsUIgdMwHwYDVR0j BBgwFoAUw//NkLAnOC/bKi6niCMoL06AOaMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRkpRN2lWdzlVTHBmbWZCVjlKd0VWRGpZeVRuRnN0UlQzaUJyRjNlM1lm MnovMC9DM0ZGQ0Q5MEIwMjczODJGREIyQTJFQTc4ODIzMjgyRjRFODAzOUEzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MzRkZDRDkwQjAyNzM4MkZE QjJBMkVBNzg4MjMyODJGNEU4MDM5QTMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RkpRN2lWdzlVTHBmbWZCVjlKd0VWRGpZeVRuRnN0UlQzaUJyRjNlM1lmMnovMC9D M0ZGQ0Q5MEIwMjczODJGREIyQTJFQTc4ODIzMjgyRjRFODAzOUEzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEADYD9/r9y+A9j+k5GP9MVUgBx9v8a4yQhQr6R5kWv1WljwUZ58hVep2xmc3Cz rnykG8afeeSSWyc2sVFLkR9ns7TFBc5eiG7evv1S2RyJPiPe5oIRMOMT3VwxxAlx rNvE/DPnbPRaUSxMRuNUstsZBYxsaa61E7vCCt+3JsqiyU9o6TlejbztB69+40ch fSX/KTZ4jW/vFCXjikuko3iNZDf7D2i+nxNp9Mn47EDmxlP65z0l1pHWA2gQsLs7 oPVrMHSOCDAsRv9HmaZt86iOiw6M1YTYq/f5WuR/hwOG6OF27YKtGPGWXqWFijRR OHcaywwtN22nTuxhhA7lXIlTtg== -----END CERTIFICATE-----Generated at Mon Mar 2 20:20:59 2026 by rpki-client