$ rpki-client -vvf rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/0/2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3.mft File: 2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3.mft (raw, json) Hash identifier: 8RbIn+gdxD3xUu4mMftNJYY61IhMDF/VkUm2RLW+7bc= Subject key identifier: 9D:AB:83:5B:64:09:ED:A2:AA:11:10:56:5A:0A:8B:56:03:5D:7B:EA Authority key identifier: 2D:D8:1B:37:1E:8A:AF:8C:14:E2:38:88:DF:FC:A2:64:2F:8B:E6:A3 Certificate issuer: /CN=2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3 Certificate serial: 0D294C0F9D23F709DA47EC4899C48CF87A3E5E15 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3.cer Subject info access: rsync://rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/0/2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3.mft Manifest number: CD Signing time: Wed 08 Apr 2026 00:44:17 +0000 Manifest this update: Wed 08 Apr 2026 00:39:17 +0000 Manifest next update: Thu 09 Apr 2026 01:16:17 +0000 Files and hashes: 1: 34352e3139312e3235322e302f32322d3234203d3e20323639363939.roa (hash: PSjadbPkGEhWlKbiP6CASwLEasYdw97STRMCWGmPs2g=) 2: 323830343a363838383a3a2f33322d3438203d3e20323639363939.roa (hash: Xkr7jReV0o/ET5S91WJGuF4oGyDDTzF21wF7Ks/zLrQ=) 3: 2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3.crl (hash: 1EmYzK+Kabf3bTHzwf9PTaDmSdcLkiCRNhheq617G2I=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/0/2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3.crl rsync://rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/0/2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 09 Apr 2026 01:16:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:29:4c:0f:9d:23:f7:09:da:47:ec:48:99:c4:8c:f8:7a:3e:5e:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3 Validity Not Before: Apr 8 00:39:17 2026 GMT Not After : Apr 9 01:16:17 2026 GMT Subject: CN=9DAB835B6409EDA2AA1110565A0A8B56035D7BEA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:fa:ed:da:38:29:d6:eb:f7:d2:0a:91:37:16: 5d:a7:52:2c:a3:fe:f8:70:bb:37:1e:f8:6d:02:1a: 1e:01:ad:42:76:61:43:03:d4:8e:fa:f6:ff:ed:34: a5:31:65:30:28:d1:d0:42:a7:f9:1b:2b:21:c2:22: db:45:71:cd:d9:4f:e7:da:11:b3:e5:b1:bb:8e:fb: 03:43:18:6e:13:29:da:ba:0a:c1:34:20:a5:b6:7b: 58:14:2e:6d:c8:a5:bb:e8:c8:3c:97:a3:24:cb:c4: b3:49:c4:00:c8:b2:ed:9f:2a:4d:b7:27:7b:60:65: dc:0e:89:84:f0:a1:41:59:37:29:7c:b5:a7:22:f4: f4:43:dd:d8:78:54:f8:fb:b9:26:fa:86:4b:d8:5b: a8:7f:ab:69:75:04:e0:5e:62:c5:28:d9:27:e7:c3: 46:f3:01:d9:96:bb:96:e2:fa:ec:21:f5:0a:e6:2a: 79:22:17:f3:26:52:2e:5e:aa:ed:32:06:4f:9c:59: af:2f:52:25:8d:8a:02:5a:d6:b4:f7:7b:19:18:0f: f7:32:c5:3f:f6:41:5d:09:84:e1:40:25:22:ef:0c: b8:30:7b:7a:cb:e4:2e:21:c8:9c:ca:0c:08:84:7e: 95:2b:aa:c6:6e:4e:19:95:84:5a:60:ce:e1:41:40: 3f:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:AB:83:5B:64:09:ED:A2:AA:11:10:56:5A:0A:8B:56:03:5D:7B:EA X509v3 Authority Key Identifier: keyid:2D:D8:1B:37:1E:8A:AF:8C:14:E2:38:88:DF:FC:A2:64:2F:8B:E6:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/0/2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/0/2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:0b:a2:2b:4f:20:33:43:67:02:4b:0e:be:cc:65:65:14:67: 53:77:f2:c7:31:a5:9c:b2:8b:72:87:80:b4:7f:0e:d6:8c:72: 8c:ed:d6:9a:b7:d1:fd:bc:a2:6a:21:1d:cf:76:8b:9c:bd:78: 39:64:24:81:42:6e:38:75:3b:4c:5f:00:a6:c3:67:e4:cf:7a: 86:d9:0c:f8:7c:3d:a1:cb:7e:c1:15:02:89:14:8a:66:67:93: ba:9c:f9:bd:2f:bc:45:e8:6b:f5:e0:de:97:9b:c7:4b:fd:e1: f6:8e:4e:1d:4e:71:31:3a:83:31:61:67:6b:82:18:04:7f:88: 0b:fd:58:a4:ef:50:55:67:31:fe:f0:79:34:c2:ed:97:59:de: 02:87:ae:99:34:91:d4:74:18:72:15:57:b4:36:b4:b8:c7:59: ba:97:42:72:a2:6a:3f:06:7c:4c:89:33:e9:39:e5:02:54:9f: 18:6b:f2:9e:ce:55:ae:41:4e:6b:7a:3b:c8:5b:f4:2b:a4:32: 1e:26:24:90:15:3e:af:65:ba:13:06:24:60:38:5e:d6:8b:1c: ac:a2:65:ad:de:03:07:b6:e8:d6:a8:d6:e6:7e:4d:ae:58:49: 72:79:91:2e:5a:7c:bb:7c:55:72:9b:62:c6:25:c2:72:5a:05: bf:6c:7b:6b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUDSlMD50j9wnaR+xImcSM+Ho+XhUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkREODFCMzcxRThBQUY4QzE0RTIzODg4REZGQ0EyNjQy RjhCRTZBMzAeFw0yNjA0MDgwMDM5MTdaFw0yNjA0MDkwMTE2MTdaMDMxMTAvBgNV BAMTKDlEQUI4MzVCNjQwOUVEQTJBQTExMTA1NjVBMEE4QjU2MDM1RDdCRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1+u3aOCnW6/fSCpE3Fl2nUiyj /vhwuzce+G0CGh4BrUJ2YUMD1I769v/tNKUxZTAo0dBCp/kbKyHCIttFcc3ZT+fa EbPlsbuO+wNDGG4TKdq6CsE0IKW2e1gULm3IpbvoyDyXoyTLxLNJxADIsu2fKk23 J3tgZdwOiYTwoUFZNyl8taci9PRD3dh4VPj7uSb6hkvYW6h/q2l1BOBeYsUo2Sfn w0bzAdmWu5bi+uwh9QrmKnkiF/MmUi5equ0yBk+cWa8vUiWNigJa1rT3exkYD/cy xT/2QV0JhOFAJSLvDLgwe3rL5C4hyJzKDAiEfpUrqsZuThmVhFpgzuFBQD9VAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUnauDW2QJ7aKqERBWWgqLVgNde+owHwYDVR0j BBgwFoAULdgbNx6Kr4wU4jiI3/yiZC+L5qMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRGczM21Mb2pGSnRvMWVOZUYxOXRCTW1DcFFTTDlZYWRDbUU4QTVScWtS YnYvMC8yREQ4MUIzNzFFOEFBRjhDMTRFMjM4ODhERkZDQTI2NDJGOEJFNkEzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJERDgxQjM3MUU4QUFGOEMx NEUyMzg4OERGRkNBMjY0MkY4QkU2QTMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RGczM21Mb2pGSnRvMWVOZUYxOXRCTW1DcFFTTDlZYWRDbUU4QTVScWtSYnYvMC8y REQ4MUIzNzFFOEFBRjhDMTRFMjM4ODhERkZDQTI2NDJGOEJFNkEzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEABwuiK08gM0NnAksOvsxlZRRnU3fyxzGlnLKLcoeAtH8O1oxyjO3WmrfR/byi aiEdz3aLnL14OWQkgUJuOHU7TF8ApsNn5M96htkM+Hw9oct+wRUCiRSKZmeTupz5 vS+8Rehr9eDel5vHS/3h9o5OHU5xMTqDMWFna4IYBH+IC/1YpO9QVWcx/vB5NMLt l1neAoeumTSR1HQYchVXtDa0uMdZupdCcqJqPwZ8TIkz6TnlAlSfGGvyns5VrkFO a3o7yFv0K6QyHiYkkBU+r2W6EwYkYDhe1oscrKJlrd4DB7bo1qjW5n5NrlhJcnmR Llp8u3xVcptixiXCcloFv2x7aw== -----END CERTIFICATE-----Generated at Wed Apr 8 16:55:47 2026 by rpki-client