$ rpki-client -vvf rpki-repo.registro.br/repo/3dY59Jjuhvq93StbvhHy5pMXkcb6bSV8SKwjTaExiNqH/0/BEDD5173301846D74B715880C22FAB5AF38F22F1.mft File: BEDD5173301846D74B715880C22FAB5AF38F22F1.mft (raw, json) Hash identifier: L8R+vur4tIoKHwaZR34Ffn2RLuN6CN7q3dimF8/njgc= Subject key identifier: 52:37:01:A9:50:10:D1:77:48:FC:9D:D4:B3:F3:A0:08:D4:C7:58:BD Authority key identifier: BE:DD:51:73:30:18:46:D7:4B:71:58:80:C2:2F:AB:5A:F3:8F:22:F1 Certificate issuer: /CN=BEDD5173301846D74B715880C22FAB5AF38F22F1 Certificate serial: 0A634EAA0BEB1CD6AED6B89CBB39323EB94FC237 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BEDD5173301846D74B715880C22FAB5AF38F22F1.cer Subject info access: rsync://rpki-repo.registro.br/repo/3dY59Jjuhvq93StbvhHy5pMXkcb6bSV8SKwjTaExiNqH/0/BEDD5173301846D74B715880C22FAB5AF38F22F1.mft Manifest number: 2D Signing time: Tue 07 Apr 2026 16:30:01 +0000 Manifest this update: Tue 07 Apr 2026 16:25:01 +0000 Manifest next update: Wed 08 Apr 2026 17:11:01 +0000 Files and hashes: 1: 323830343a363338383a3a2f33322d313238203d3e20323639333637.roa (hash: N3cDBLxgm1hfCfg0gjke34pFmp/MkXwKf5UpBrTKhEk=) 2: BEDD5173301846D74B715880C22FAB5AF38F22F1.crl (hash: yOFHXZDtemDXLMgH2tBF8fBmLQesq4Ri5beafOw37b0=) 3: 34352e3138352e37362e302f32322d3332203d3e20323639333637.roa (hash: grvYg6pByE1PctLZnu8fcegdXuLvr1gy60s7te6df08=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3dY59Jjuhvq93StbvhHy5pMXkcb6bSV8SKwjTaExiNqH/0/BEDD5173301846D74B715880C22FAB5AF38F22F1.crl rsync://rpki-repo.registro.br/repo/3dY59Jjuhvq93StbvhHy5pMXkcb6bSV8SKwjTaExiNqH/0/BEDD5173301846D74B715880C22FAB5AF38F22F1.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BEDD5173301846D74B715880C22FAB5AF38F22F1.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 08 Apr 2026 17:11:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:63:4e:aa:0b:eb:1c:d6:ae:d6:b8:9c:bb:39:32:3e:b9:4f:c2:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BEDD5173301846D74B715880C22FAB5AF38F22F1 Validity Not Before: Apr 7 16:25:01 2026 GMT Not After : Apr 8 17:11:01 2026 GMT Subject: CN=523701A95010D17748FC9DD4B3F3A008D4C758BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:0e:39:24:33:04:0f:84:20:65:8b:f8:21:a4: 56:ef:0e:ea:b4:9f:6b:62:ff:49:3b:cd:63:3d:ea: aa:35:fa:b1:d7:83:ef:1f:0b:fc:df:4c:8a:9d:24: 42:1a:76:5d:d6:4e:bc:1f:d9:70:e0:16:a7:83:12: ee:12:57:ab:a7:ee:a3:18:e3:e3:a6:a4:76:9e:d7: 17:74:72:44:ab:e7:98:8e:74:6b:04:56:77:dd:0e: b2:50:e5:63:68:d3:42:7e:93:2c:6e:55:a1:64:b3: 3c:7c:05:e8:4a:8f:5c:8b:1c:6a:4d:0e:13:e0:e7: e1:8d:df:d6:f1:c1:e3:85:dd:6b:65:f2:5f:4b:8e: cb:4d:b7:b9:61:79:83:f0:f1:0a:3d:e6:af:df:30: e8:32:4c:3c:2b:e2:73:2f:34:c9:d6:57:33:45:ee: 30:e0:86:c6:dd:58:42:93:89:cd:46:c4:a3:03:60: ea:e3:5e:73:7d:53:41:63:bf:a6:cb:d5:25:09:ab: 4b:5f:79:0a:c6:1a:f3:49:af:4c:d2:13:17:4e:ed: dd:0b:7b:5a:0c:aa:7c:94:89:3e:74:09:7c:e3:4d: 61:4e:a0:df:e8:ee:dc:81:1e:cf:50:47:74:53:85: 23:9e:7a:94:bc:aa:68:2a:e5:27:3a:7a:ae:41:42: 1c:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:37:01:A9:50:10:D1:77:48:FC:9D:D4:B3:F3:A0:08:D4:C7:58:BD X509v3 Authority Key Identifier: keyid:BE:DD:51:73:30:18:46:D7:4B:71:58:80:C2:2F:AB:5A:F3:8F:22:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3dY59Jjuhvq93StbvhHy5pMXkcb6bSV8SKwjTaExiNqH/0/BEDD5173301846D74B715880C22FAB5AF38F22F1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BEDD5173301846D74B715880C22FAB5AF38F22F1.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3dY59Jjuhvq93StbvhHy5pMXkcb6bSV8SKwjTaExiNqH/0/BEDD5173301846D74B715880C22FAB5AF38F22F1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:d4:6e:02:78:56:b9:0b:85:ff:be:28:1e:8a:c3:7f:fb:55: 42:58:e8:5d:c7:ae:1d:6a:a1:5e:74:1c:94:0e:9b:c0:f2:a2: 3a:a2:e5:24:73:4f:0c:3e:51:98:35:87:77:d0:1c:d7:7a:a0: bf:e4:16:51:b1:4c:b0:28:7c:00:03:be:21:a2:c6:2c:01:8d: 74:32:25:b2:ae:92:83:95:4b:03:86:c2:7d:98:0d:81:cf:fe: ee:28:2c:18:7b:18:f1:35:0c:1b:13:69:ae:fc:61:16:c6:2d: 47:e8:c1:54:c6:8d:95:84:94:81:27:c9:af:15:22:f0:db:b0: f7:4c:61:3d:9d:fc:11:3f:eb:15:c3:b1:60:7b:cf:12:87:80: 57:f4:0f:da:82:a7:91:48:79:c1:31:48:f1:14:80:58:bb:1c: 54:c5:e5:a3:19:e9:b5:d9:9f:13:25:05:26:47:b7:4b:6c:29: 02:78:a1:78:09:e2:f3:e5:08:5f:fd:31:dc:67:6c:c2:2d:d4: 9d:7f:86:0f:b5:a2:6c:46:15:6d:d1:ef:43:55:fa:b1:02:f4: 53:57:ae:02:5e:03:cd:01:82:e6:1d:ed:19:05:e0:42:20:b9: a7:2b:72:f4:a5:39:36:28:b2:50:45:85:74:b4:d1:d0:65:89: b6:b0:e2:68 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUCmNOqgvrHNau1ricuzkyPrlPwjcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkVERDUxNzMzMDE4NDZENzRCNzE1ODgwQzIyRkFCNUFG MzhGMjJGMTAeFw0yNjA0MDcxNjI1MDFaFw0yNjA0MDgxNzExMDFaMDMxMTAvBgNV BAMTKDUyMzcwMUE5NTAxMEQxNzc0OEZDOURENEIzRjNBMDA4RDRDNzU4QkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeDjkkMwQPhCBli/ghpFbvDuq0 n2ti/0k7zWM96qo1+rHXg+8fC/zfTIqdJEIadl3WTrwf2XDgFqeDEu4SV6un7qMY 4+OmpHae1xd0ckSr55iOdGsEVnfdDrJQ5WNo00J+kyxuVaFkszx8BehKj1yLHGpN DhPg5+GN39bxweOF3Wtl8l9LjstNt7lheYPw8Qo95q/fMOgyTDwr4nMvNMnWVzNF 7jDghsbdWEKTic1GxKMDYOrjXnN9U0Fjv6bL1SUJq0tfeQrGGvNJr0zSExdO7d0L e1oMqnyUiT50CXzjTWFOoN/o7tyBHs9QR3RThSOeepS8qmgq5Sc6eq5BQhylAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUUjcBqVAQ0XdI/J3Us/OgCNTHWL0wHwYDVR0j BBgwFoAUvt1RczAYRtdLcViAwi+rWvOPIvEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM2RZNTlKanVodnE5M1N0YnZoSHk1cE1Ya2NiNmJTVjhTS3dqVGFFeGlO cUgvMC9CRURENTE3MzMwMTg0NkQ3NEI3MTU4ODBDMjJGQUI1QUYzOEYyMkYxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JFREQ1MTczMzAxODQ2RDc0 QjcxNTg4MEMyMkZBQjVBRjM4RjIyRjEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M2RZNTlKanVodnE5M1N0YnZoSHk1cE1Ya2NiNmJTVjhTS3dqVGFFeGlOcUgvMC9C RURENTE3MzMwMTg0NkQ3NEI3MTU4ODBDMjJGQUI1QUYzOEYyMkYxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAC9RuAnhWuQuF/74oHorDf/tVQljoXceuHWqhXnQclA6bwPKiOqLlJHNPDD5R mDWHd9Ac13qgv+QWUbFMsCh8AAO+IaLGLAGNdDIlsq6Sg5VLA4bCfZgNgc/+7igs GHsY8TUMGxNprvxhFsYtR+jBVMaNlYSUgSfJrxUi8Nuw90xhPZ38ET/rFcOxYHvP EoeAV/QP2oKnkUh5wTFI8RSAWLscVMXloxnptdmfEyUFJke3S2wpAniheAni8+UI X/0x3Gdswi3UnX+GD7WibEYVbdHvQ1X6sQL0U1euAl4DzQGC5h3tGQXgQiC5pyty 9KU5NiiyUEWFdLTR0GWJtrDiaA== -----END CERTIFICATE-----Generated at Wed Apr 8 11:00:18 2026 by rpki-client