$ rpki-client -vvf rpki-repo.registro.br/repo/5Mw2fbgzgw6hFMwjXbiDSQyqTQfM4wnMYw2B9A54L5L8/0/1BFA70C3BF99AFCA8E1C9699D5F648DF2CB441A5.mft File: 1BFA70C3BF99AFCA8E1C9699D5F648DF2CB441A5.mft (raw, json) Hash identifier: gIP/WLvdt/n+Yaz1sfcdwGWvePto0I+lfHah43GrilM= Subject key identifier: 8A:8D:F9:15:59:3D:75:59:77:FC:6A:9C:B0:46:B6:56:EE:C0:56:7A Authority key identifier: 1B:FA:70:C3:BF:99:AF:CA:8E:1C:96:99:D5:F6:48:DF:2C:B4:41:A5 Certificate issuer: /CN=1BFA70C3BF99AFCA8E1C9699D5F648DF2CB441A5 Certificate serial: 179D6B36534F0A12E134DC084D6D600A1DD84042 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BFA70C3BF99AFCA8E1C9699D5F648DF2CB441A5.cer Subject info access: rsync://rpki-repo.registro.br/repo/5Mw2fbgzgw6hFMwjXbiDSQyqTQfM4wnMYw2B9A54L5L8/0/1BFA70C3BF99AFCA8E1C9699D5F648DF2CB441A5.mft Manifest number: D0 Signing time: Tue 07 Apr 2026 23:01:23 +0000 Manifest this update: Tue 07 Apr 2026 22:56:23 +0000 Manifest next update: Wed 08 Apr 2026 23:41:23 +0000 Files and hashes: 1: 1BFA70C3BF99AFCA8E1C9699D5F648DF2CB441A5.crl (hash: Js7gwP83dCP4+H31pV6ajBnX79YIogmPygoEuQ3k4g8=) 2: 323830343a363738303a3a2f33322d3430203d3e20323639363332.roa (hash: SX2dU0cds+iLnyJtcs06QjqpHxXnJw1YEktYayh/TlE=) 3: 34352e3139302e32382e302f32322d3234203d3e20323639363332.roa (hash: aQLIYYVoiILAmoQD4DtX+QNXyDT1k5rL+bEaFnakAss=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5Mw2fbgzgw6hFMwjXbiDSQyqTQfM4wnMYw2B9A54L5L8/0/1BFA70C3BF99AFCA8E1C9699D5F648DF2CB441A5.crl rsync://rpki-repo.registro.br/repo/5Mw2fbgzgw6hFMwjXbiDSQyqTQfM4wnMYw2B9A54L5L8/0/1BFA70C3BF99AFCA8E1C9699D5F648DF2CB441A5.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BFA70C3BF99AFCA8E1C9699D5F648DF2CB441A5.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 08 Apr 2026 23:41:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:9d:6b:36:53:4f:0a:12:e1:34:dc:08:4d:6d:60:0a:1d:d8:40:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BFA70C3BF99AFCA8E1C9699D5F648DF2CB441A5 Validity Not Before: Apr 7 22:56:23 2026 GMT Not After : Apr 8 23:41:23 2026 GMT Subject: CN=8A8DF915593D755977FC6A9CB046B656EEC0567A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:23:90:e4:42:e6:68:a7:bf:07:69:15:f4:1d: 00:ad:96:ef:6c:25:8f:73:99:08:76:d5:4c:a2:f2: a5:13:fd:bf:e5:44:2c:a4:1f:e2:e6:95:b0:b3:e7: 51:71:93:c4:f0:44:0f:8d:64:57:52:51:67:60:99: b8:75:c8:39:07:bd:77:54:73:06:5b:8f:eb:2a:a1: 67:0c:b3:e7:95:bd:9c:62:ff:00:f4:49:18:c2:2b: 41:42:48:6f:65:ab:83:4b:f3:09:49:68:8e:94:83: e6:ea:8e:f3:14:ef:59:82:a6:7e:cb:11:2c:40:5e: 85:b5:41:27:5b:84:5b:f1:ed:4f:ee:bf:21:10:53: 79:6e:0f:d5:b1:6f:cb:3e:3e:8f:aa:03:43:39:b4: 87:d5:bd:7c:78:9b:6b:6e:eb:f3:30:de:72:a4:ab: e1:cd:07:f2:c0:4f:f8:d0:5e:b8:35:ef:b6:6b:db: b4:5f:7f:10:1b:0f:4a:94:96:d1:b5:13:55:78:40: c6:b9:69:94:53:a3:9d:a5:2f:2a:9d:19:e0:04:81: fc:27:55:29:73:3d:6b:1d:13:ec:5b:a9:db:10:ff: a1:4f:1d:60:de:59:be:b1:bd:9a:9f:97:c9:a5:dc: 3d:70:48:49:2c:31:c0:a3:8a:94:20:30:5a:38:d9: 15:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:8D:F9:15:59:3D:75:59:77:FC:6A:9C:B0:46:B6:56:EE:C0:56:7A X509v3 Authority Key Identifier: keyid:1B:FA:70:C3:BF:99:AF:CA:8E:1C:96:99:D5:F6:48:DF:2C:B4:41:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5Mw2fbgzgw6hFMwjXbiDSQyqTQfM4wnMYw2B9A54L5L8/0/1BFA70C3BF99AFCA8E1C9699D5F648DF2CB441A5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BFA70C3BF99AFCA8E1C9699D5F648DF2CB441A5.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Mw2fbgzgw6hFMwjXbiDSQyqTQfM4wnMYw2B9A54L5L8/0/1BFA70C3BF99AFCA8E1C9699D5F648DF2CB441A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:31:e9:3c:0a:3e:f0:cb:f1:56:09:b5:49:4c:1f:65:06:b1: 67:64:dc:8c:b3:71:7b:0a:3c:3a:54:35:1c:61:88:e3:7f:33: 9f:5a:b3:60:6d:da:87:41:f2:0b:e1:d3:4f:c1:b7:a6:fe:64: 22:4f:9f:51:da:d5:72:2c:76:28:3a:1c:66:a7:cd:c2:da:15: 4a:7d:04:c1:7c:89:a7:6c:71:74:9b:dc:9d:82:8b:1f:af:37: 76:63:bc:9b:f9:33:e1:b1:63:ed:70:19:a9:4e:92:fa:5e:63: 04:b0:14:4c:ad:ad:2f:40:aa:23:b7:79:d5:42:60:34:e2:32: d1:b2:0b:35:f3:1e:df:e0:d7:84:8c:7d:19:27:69:57:a6:28: 25:17:92:0b:b5:e2:05:21:3b:39:a9:8c:cc:df:72:b2:03:9d: 69:cd:57:d3:05:94:0b:34:37:9e:49:2e:5d:da:6d:ff:66:08: 9d:00:fc:0e:a2:fc:0b:07:13:ef:f3:09:ff:24:71:8e:b5:a4: af:35:b7:13:bd:aa:82:ca:90:5b:8b:9a:4d:25:d6:ce:0e:f9: 9b:80:bd:e9:94:18:82:86:03:e7:da:0e:cc:d6:f7:62:eb:09: 68:1d:5b:50:a0:44:f1:28:fe:7c:b0:8f:e1:1d:d3:81:08:e0: 19:c6:4e:36 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUF51rNlNPChLhNNwITW1gCh3YQEIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUJGQTcwQzNCRjk5QUZDQThFMUM5Njk5RDVGNjQ4REYy Q0I0NDFBNTAeFw0yNjA0MDcyMjU2MjNaFw0yNjA0MDgyMzQxMjNaMDMxMTAvBgNV BAMTKDhBOERGOTE1NTkzRDc1NTk3N0ZDNkE5Q0IwNDZCNjU2RUVDMDU2N0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZI5DkQuZop78HaRX0HQCtlu9s JY9zmQh21Uyi8qUT/b/lRCykH+LmlbCz51Fxk8TwRA+NZFdSUWdgmbh1yDkHvXdU cwZbj+sqoWcMs+eVvZxi/wD0SRjCK0FCSG9lq4NL8wlJaI6Ug+bqjvMU71mCpn7L ESxAXoW1QSdbhFvx7U/uvyEQU3luD9Wxb8s+Po+qA0M5tIfVvXx4m2tu6/Mw3nKk q+HNB/LAT/jQXrg177Zr27RffxAbD0qUltG1E1V4QMa5aZRTo52lLyqdGeAEgfwn VSlzPWsdE+xbqdsQ/6FPHWDeWb6xvZqfl8ml3D1wSEksMcCjipQgMFo42RX7AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUio35FVk9dVl3/GqcsEa2Vu7AVnowHwYDVR0j BBgwFoAUG/pww7+Zr8qOHJaZ1fZI3yy0QaUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNU13MmZiZ3pndzZoRk13alhiaURTUXlxVFFmTTR3bk1ZdzJCOUE1NEw1 TDgvMC8xQkZBNzBDM0JGOTlBRkNBOEUxQzk2OTlENUY2NDhERjJDQjQ0MUE1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFCRkE3MEMzQkY5OUFGQ0E4 RTFDOTY5OUQ1RjY0OERGMkNCNDQxQTUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NU13MmZiZ3pndzZoRk13alhiaURTUXlxVFFmTTR3bk1ZdzJCOUE1NEw1TDgvMC8x QkZBNzBDM0JGOTlBRkNBOEUxQzk2OTlENUY2NDhERjJDQjQ0MUE1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEANDHpPAo+8MvxVgm1SUwfZQaxZ2TcjLNxewo8OlQ1HGGI438zn1qzYG3ah0Hy C+HTT8G3pv5kIk+fUdrVcix2KDocZqfNwtoVSn0EwXyJp2xxdJvcnYKLH683dmO8 m/kz4bFj7XAZqU6S+l5jBLAUTK2tL0CqI7d51UJgNOIy0bILNfMe3+DXhIx9GSdp V6YoJReSC7XiBSE7OamMzN9ysgOdac1X0wWUCzQ3nkkuXdpt/2YInQD8DqL8CwcT 7/MJ/yRxjrWkrzW3E72qgsqQW4uaTSXWzg75m4C96ZQYgoYD59oOzNb3YusJaB1b UKBE8Sj+fLCP4R3TgQjgGcZONg== -----END CERTIFICATE-----Generated at Wed Apr 8 10:57:16 2026 by rpki-client