$ rpki-client -vvf rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/0/2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3.mft File: 2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3.mft (raw, json) Hash identifier: T+ku+vYuOEEVyHliv56DcZpmQUpTrytVXrErjYR8jlQ= Subject key identifier: 9C:C6:CA:47:A7:07:74:6B:BA:D0:F8:53:AA:48:78:B7:BC:66:CB:CF Authority key identifier: 2D:D8:1B:37:1E:8A:AF:8C:14:E2:38:88:DF:FC:A2:64:2F:8B:E6:A3 Certificate issuer: /CN=2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3 Certificate serial: 609FA5DEC0D4D02A61AF62FA2B1CC5C3E79B3433 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3.cer Subject info access: rsync://rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/0/2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3.mft Manifest number: 010A Signing time: Sun 24 May 2026 05:28:03 +0000 Manifest this update: Sun 24 May 2026 05:23:03 +0000 Manifest next update: Mon 25 May 2026 05:44:03 +0000 Files and hashes: 1: 323830343a363838383a3a2f33322d3438203d3e20323639363939.roa (hash: Xkr7jReV0o/ET5S91WJGuF4oGyDDTzF21wF7Ks/zLrQ=) 2: 34352e3139312e3235322e302f32322d3234203d3e20323639363939.roa (hash: PSjadbPkGEhWlKbiP6CASwLEasYdw97STRMCWGmPs2g=) 3: 2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3.crl (hash: 0npfWGiCkhJdGGVBFdsCBx2+5LT5LLfO7HxnpLYu2Tg=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/0/2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3.crl rsync://rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/0/2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 25 May 2026 05:44:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:9f:a5:de:c0:d4:d0:2a:61:af:62:fa:2b:1c:c5:c3:e7:9b:34:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3 Validity Not Before: May 24 05:23:03 2026 GMT Not After : May 25 05:44:03 2026 GMT Subject: CN=9CC6CA47A707746BBAD0F853AA4878B7BC66CBCF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:3d:68:6d:62:17:bc:35:05:3b:91:44:4b:36: 7c:43:59:80:b2:13:5b:48:16:8e:7f:b7:c8:2b:d2: ab:76:ca:03:83:67:b5:5f:c0:01:7b:b1:e1:f7:05: 3a:53:5e:cd:4b:6b:52:ea:42:81:a0:82:ed:2c:d3: 95:dc:88:6f:f4:9e:5c:cf:2d:ee:1e:21:ed:60:2b: 20:f3:9e:48:cb:91:85:ad:67:2c:ca:77:c6:4b:ad: aa:ad:bc:e8:0c:e5:6e:ab:32:bf:d2:0a:77:00:11: 59:b0:9d:33:51:4a:c3:8d:b2:06:1b:d8:0a:c7:da: 1e:fb:7a:57:c1:50:26:61:1c:c4:58:2c:ab:58:51: 63:a1:2b:f3:d8:53:0a:e4:a9:ce:f0:2d:93:03:ba: 5c:23:0f:79:a8:1c:fa:2c:86:55:8b:7f:0b:ac:01: d0:f4:31:aa:5d:be:9b:1d:85:42:25:d2:8b:68:6c: 97:b8:14:04:aa:76:97:47:14:1f:9e:ac:09:15:f5: 7f:c2:c2:64:0a:3f:3f:b4:f3:ef:4b:fc:e9:a7:46: b7:b0:d3:ec:dc:7d:2c:bd:c3:7b:ec:84:a5:8b:f9: ff:28:39:9e:12:57:ad:17:e1:91:c6:2a:5b:54:5b: 38:ef:bf:b3:b5:0c:04:8d:17:a3:f3:db:fc:31:9e: d2:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:C6:CA:47:A7:07:74:6B:BA:D0:F8:53:AA:48:78:B7:BC:66:CB:CF X509v3 Authority Key Identifier: keyid:2D:D8:1B:37:1E:8A:AF:8C:14:E2:38:88:DF:FC:A2:64:2F:8B:E6:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/0/2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dg33mLojFJto1eNeF19tBMmCpQSL9YadCmE8A5RqkRbv/0/2DD81B371E8AAF8C14E23888DFFCA2642F8BE6A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:78:c8:e1:64:d5:64:09:a1:05:de:3c:1f:06:71:0b:98:03: 38:ed:74:34:cd:d1:3e:10:f5:cb:39:95:dd:71:d6:4c:98:cb: 95:f4:41:f2:14:d3:17:cb:ca:3a:ab:ed:4c:fd:92:81:f8:3c: 74:9c:5f:09:a5:0a:d1:3b:2f:bd:f1:a0:8d:21:cb:d2:be:42: 22:61:f0:38:21:39:b9:4e:0c:70:24:bf:c3:cd:64:db:bf:ff: ca:19:46:72:cb:c3:5b:f3:05:22:ce:b6:12:8d:95:5d:f7:5e: 56:07:ba:d4:6e:5b:41:1c:0d:63:a4:f1:62:99:91:15:31:09: 4a:7c:f0:1c:17:c6:98:d2:40:7b:ff:d6:bb:0d:72:29:37:ee: f6:eb:29:ff:c3:9d:c6:67:f4:05:2e:61:2b:7f:b2:bd:3a:31: 14:c9:46:d9:0e:38:b9:fe:b8:97:c3:cb:02:f4:db:e1:47:44: 8a:04:48:16:69:f2:ae:59:18:de:66:bc:7a:2f:10:be:35:f7: da:97:26:9a:8f:67:d8:97:b6:30:e8:48:a2:bd:77:cd:7d:3d: b0:ef:a7:94:84:63:2b:ac:88:ff:d3:da:35:bd:c8:a8:ed:eb: 97:ad:55:41:5e:ff:06:e5:f3:23:ab:21:27:af:e2:3b:21:f5: d5:08:ac:52 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUYJ+l3sDU0Cphr2L6KxzFw+ebNDMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkREODFCMzcxRThBQUY4QzE0RTIzODg4REZGQ0EyNjQy RjhCRTZBMzAeFw0yNjA1MjQwNTIzMDNaFw0yNjA1MjUwNTQ0MDNaMDMxMTAvBgNV BAMTKDlDQzZDQTQ3QTcwNzc0NkJCQUQwRjg1M0FBNDg3OEI3QkM2NkNCQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiPWhtYhe8NQU7kURLNnxDWYCy E1tIFo5/t8gr0qt2ygODZ7VfwAF7seH3BTpTXs1La1LqQoGggu0s05XciG/0nlzP Le4eIe1gKyDznkjLkYWtZyzKd8ZLraqtvOgM5W6rMr/SCncAEVmwnTNRSsONsgYb 2ArH2h77elfBUCZhHMRYLKtYUWOhK/PYUwrkqc7wLZMDulwjD3moHPoshlWLfwus AdD0MapdvpsdhUIl0otobJe4FASqdpdHFB+erAkV9X/CwmQKPz+08+9L/OmnRrew 0+zcfSy9w3vshKWL+f8oOZ4SV60X4ZHGKltUWzjvv7O1DASNF6Pz2/wxntLTAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUnMbKR6cHdGu60PhTqkh4t7xmy88wHwYDVR0j BBgwFoAULdgbNx6Kr4wU4jiI3/yiZC+L5qMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRGczM21Mb2pGSnRvMWVOZUYxOXRCTW1DcFFTTDlZYWRDbUU4QTVScWtS YnYvMC8yREQ4MUIzNzFFOEFBRjhDMTRFMjM4ODhERkZDQTI2NDJGOEJFNkEzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJERDgxQjM3MUU4QUFGOEMx NEUyMzg4OERGRkNBMjY0MkY4QkU2QTMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RGczM21Mb2pGSnRvMWVOZUYxOXRCTW1DcFFTTDlZYWRDbUU4QTVScWtSYnYvMC8y REQ4MUIzNzFFOEFBRjhDMTRFMjM4ODhERkZDQTI2NDJGOEJFNkEzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAanjI4WTVZAmhBd48HwZxC5gDOO10NM3RPhD1yzmV3XHWTJjLlfRB8hTTF8vK OqvtTP2Sgfg8dJxfCaUK0TsvvfGgjSHL0r5CImHwOCE5uU4McCS/w81k27//yhlG csvDW/MFIs62Eo2VXfdeVge61G5bQRwNY6TxYpmRFTEJSnzwHBfGmNJAe//Wuw1y KTfu9usp/8Odxmf0BS5hK3+yvToxFMlG2Q44uf64l8PLAvTb4UdEigRIFmnyrlkY 3ma8ei8QvjX32pcmmo9n2Je2MOhIor13zX09sO+nlIRjK6yI/9PaNb3IqO3rl61V QV7/BuXzI6shJ6/iOyH11QisUg== -----END CERTIFICATE-----Generated at Sun May 24 14:44:51 2026 by rpki-client