$ rpki-client -vvf rpki-repo.registro.br/repo/J3hNZRMnjtXuC3wLbZu9MzNod4CqpBJahe9xJSqsBC5c/0/304A3ACEA112A3C2EFC2FE69AD6E600EBA56B2D8.mft File: 304A3ACEA112A3C2EFC2FE69AD6E600EBA56B2D8.mft (raw, json) Hash identifier: jPK6zEr94OUUZZ/wJ64Em1xealOkHFNTPgcTE7M2mtY= Subject key identifier: BD:44:B7:C2:CA:34:62:E6:E9:2D:2C:EF:78:7C:33:08:5C:D9:0B:29 Authority key identifier: 30:4A:3A:CE:A1:12:A3:C2:EF:C2:FE:69:AD:6E:60:0E:BA:56:B2:D8 Certificate issuer: /CN=304A3ACEA112A3C2EFC2FE69AD6E600EBA56B2D8 Certificate serial: 2B71388B87A7952DD2B6BF85BBC67D09B4785DDF Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/304A3ACEA112A3C2EFC2FE69AD6E600EBA56B2D8.cer Subject info access: rsync://rpki-repo.registro.br/repo/J3hNZRMnjtXuC3wLbZu9MzNod4CqpBJahe9xJSqsBC5c/0/304A3ACEA112A3C2EFC2FE69AD6E600EBA56B2D8.mft Manifest number: 03 Signing time: Sun 01 Mar 2026 17:19:53 +0000 Manifest this update: Sun 01 Mar 2026 17:14:53 +0000 Manifest next update: Mon 02 Mar 2026 21:17:53 +0000 Files and hashes: 1: 304A3ACEA112A3C2EFC2FE69AD6E600EBA56B2D8.crl (hash: A015XoNtw6eBeKaXP7TZBGkdh6toEDst+XyrrqVnW94=) 2: 323830343a386661383a3a2f33322d3438203d3e203631363137.roa (hash: 6iaQHUnKdLPIwjicncsmdgP+MTad/WZfO0tPQaeqrGo=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/J3hNZRMnjtXuC3wLbZu9MzNod4CqpBJahe9xJSqsBC5c/0/304A3ACEA112A3C2EFC2FE69AD6E600EBA56B2D8.crl rsync://rpki-repo.registro.br/repo/J3hNZRMnjtXuC3wLbZu9MzNod4CqpBJahe9xJSqsBC5c/0/304A3ACEA112A3C2EFC2FE69AD6E600EBA56B2D8.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/304A3ACEA112A3C2EFC2FE69AD6E600EBA56B2D8.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 02 Mar 2026 21:17:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:71:38:8b:87:a7:95:2d:d2:b6:bf:85:bb:c6:7d:09:b4:78:5d:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=304A3ACEA112A3C2EFC2FE69AD6E600EBA56B2D8 Validity Not Before: Mar 1 17:14:53 2026 GMT Not After : Mar 2 21:17:53 2026 GMT Subject: CN=BD44B7C2CA3462E6E92D2CEF787C33085CD90B29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d1:cd:9b:79:a8:6b:89:25:43:d3:69:f8:fd: 14:70:e4:d6:46:7d:a3:23:02:2f:13:d6:e1:77:4e: b0:79:dc:b5:31:f4:5a:f2:1b:a7:5a:eb:a7:69:55: 8d:1b:f0:0a:ef:ab:39:a1:c0:7e:fe:f0:1c:04:2f: 52:c6:5f:84:66:f2:f6:80:41:fc:db:b7:8e:2c:f6: 64:59:32:50:d0:d8:b3:e0:33:97:d1:42:4b:7f:fe: 20:b2:9a:e2:49:18:e9:1f:f7:a4:90:64:31:dd:e6: be:b0:c0:a8:4f:5d:f4:6a:f1:f8:6a:fd:e5:19:46: 6e:79:1f:df:4b:cd:98:87:5c:74:fe:81:7c:84:d8: ef:47:c9:23:9e:c7:14:70:ba:ae:78:2e:17:a9:bd: 00:dd:ed:f4:1e:d1:a2:47:93:1a:9f:60:7f:d7:05: 7d:69:d0:9b:8b:b3:e5:77:ec:31:50:ab:0c:45:8f: bf:f9:40:19:5f:23:56:4a:2a:67:ae:94:33:00:89: d1:74:cf:ba:42:09:d3:d0:d2:82:37:91:20:14:55: 31:13:52:b8:2f:0d:54:6e:5e:c9:2b:82:40:97:87: a9:c9:7f:54:d2:56:71:5a:f3:28:82:e9:01:ad:e5: 5f:c8:10:4a:1d:fd:70:e3:9a:72:8e:2f:a3:6d:06: 2a:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:44:B7:C2:CA:34:62:E6:E9:2D:2C:EF:78:7C:33:08:5C:D9:0B:29 X509v3 Authority Key Identifier: keyid:30:4A:3A:CE:A1:12:A3:C2:EF:C2:FE:69:AD:6E:60:0E:BA:56:B2:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/J3hNZRMnjtXuC3wLbZu9MzNod4CqpBJahe9xJSqsBC5c/0/304A3ACEA112A3C2EFC2FE69AD6E600EBA56B2D8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/304A3ACEA112A3C2EFC2FE69AD6E600EBA56B2D8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3hNZRMnjtXuC3wLbZu9MzNod4CqpBJahe9xJSqsBC5c/0/304A3ACEA112A3C2EFC2FE69AD6E600EBA56B2D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:2d:9a:e5:45:cc:6a:2d:a5:51:6b:a5:3e:f9:72:55:4c:c3: bf:7f:78:11:90:89:e0:51:ab:8b:ea:2b:fc:06:62:3d:0e:02: c8:67:69:9e:68:73:8f:d0:c6:65:9a:8e:f9:cd:e6:08:71:39: 93:8e:87:3f:7d:aa:17:f5:b7:d8:69:97:7c:8a:e2:2a:46:67: d5:26:63:53:03:e2:a1:b2:6b:2c:dd:37:fb:51:39:5e:f9:c1: 38:2e:58:98:93:93:a4:3c:7c:e2:d9:b1:c6:ee:4f:27:bb:c4: 8f:97:97:2b:e7:7d:7a:25:39:d9:8d:eb:59:24:f5:77:aa:99: 0d:39:5a:45:3a:c7:7f:08:70:1f:6c:b3:cc:87:00:3d:e5:6a: e3:bd:b1:4e:bf:f6:a0:70:cb:17:87:a3:82:62:56:23:4f:0f: a1:74:74:b9:6d:e3:d8:4f:60:a5:dc:e5:7c:0f:26:6b:55:4d: c1:87:93:02:ec:67:64:7f:a7:e7:61:b4:e5:89:5c:42:29:3c: 14:dd:1f:40:e2:43:86:19:ca:52:85:ea:3a:6c:65:2a:c3:08: 5e:bf:01:82:dd:49:26:86:98:4c:e3:eb:e9:93:08:a9:ac:20: de:82:a8:13:24:5e:a2:20:28:e3:b0:0a:97:d7:e5:b2:39:46: 59:5e:76:d9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUK3E4i4enlS3Str+Fu8Z9CbR4Xd8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzA0QTNBQ0VBMTEyQTNDMkVGQzJGRTY5QUQ2RTYwMEVC QTU2QjJEODAeFw0yNjAzMDExNzE0NTNaFw0yNjAzMDIyMTE3NTNaMDMxMTAvBgNV BAMTKEJENDRCN0MyQ0EzNDYyRTZFOTJEMkNFRjc4N0MzMzA4NUNEOTBCMjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+0c2beahriSVD02n4/RRw5NZG faMjAi8T1uF3TrB53LUx9FryG6da66dpVY0b8ArvqzmhwH7+8BwEL1LGX4Rm8vaA Qfzbt44s9mRZMlDQ2LPgM5fRQkt//iCymuJJGOkf96SQZDHd5r6wwKhPXfRq8fhq /eUZRm55H99LzZiHXHT+gXyE2O9HySOexxRwuq54LhepvQDd7fQe0aJHkxqfYH/X BX1p0JuLs+V37DFQqwxFj7/5QBlfI1ZKKmeulDMAidF0z7pCCdPQ0oI3kSAUVTET UrgvDVRuXskrgkCXh6nJf1TSVnFa8yiC6QGt5V/IEEod/XDjmnKOL6NtBiqbAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUvUS3wso0YubpLSzveHwzCFzZCykwHwYDVR0j BBgwFoAUMEo6zqESo8Lvwv5prW5gDrpWstgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSjNoTlpSTW5qdFh1QzN3TGJadTlNek5vZDRDcXBCSmFoZTl4SlNxc0JD NWMvMC8zMDRBM0FDRUExMTJBM0MyRUZDMkZFNjlBRDZFNjAwRUJBNTZCMkQ4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMwNEEzQUNFQTExMkEzQzJF RkMyRkU2OUFENkU2MDBFQkE1NkIyRDguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SjNoTlpSTW5qdFh1QzN3TGJadTlNek5vZDRDcXBCSmFoZTl4SlNxc0JDNWMvMC8z MDRBM0FDRUExMTJBM0MyRUZDMkZFNjlBRDZFNjAwRUJBNTZCMkQ4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbC2a5UXMai2lUWulPvlyVUzDv394EZCJ4FGri+or/AZiPQ4CyGdpnmhzj9DG ZZqO+c3mCHE5k46HP32qF/W32GmXfIriKkZn1SZjUwPiobJrLN03+1E5XvnBOC5Y mJOTpDx84tmxxu5PJ7vEj5eXK+d9eiU52Y3rWST1d6qZDTlaRTrHfwhwH2yzzIcA PeVq472xTr/2oHDLF4ejgmJWI08PoXR0uW3j2E9gpdzlfA8ma1VNwYeTAuxnZH+n 52G05YlcQik8FN0fQOJDhhnKUoXqOmxlKsMIXr8Bgt1JJoaYTOPr6ZMIqawg3oKo EyReoiAo47AKl9flsjlGWV522Q== -----END CERTIFICATE-----Generated at Mon Mar 2 15:13:22 2026 by rpki-client