$ rpki-client -vvf rpki-repo.registro.br/repo/6wNw2ibxMVk7MGcMThmo5cf6b9LCczbbFvZx949fRg1i/2/2BB5947B3EB2252DC2C28A1F5F856123260036FE.mft File: 2BB5947B3EB2252DC2C28A1F5F856123260036FE.mft (raw, json) Hash identifier: nr0fpLkDzWM9tbfbUY5WSLFA10mk7k7xAM+0YJ0RUmQ= Subject key identifier: D8:2A:12:F6:78:59:2A:24:B0:E9:75:A1:9B:73:03:AF:8E:E1:D3:E1 Authority key identifier: 2B:B5:94:7B:3E:B2:25:2D:C2:C2:8A:1F:5F:85:61:23:26:00:36:FE Certificate issuer: /CN=2BB5947B3EB2252DC2C28A1F5F856123260036FE Certificate serial: 13592CDD8E48E8C789B083D72B5162EDA8AB00FA Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB5947B3EB2252DC2C28A1F5F856123260036FE.cer Subject info access: rsync://rpki-repo.registro.br/repo/6wNw2ibxMVk7MGcMThmo5cf6b9LCczbbFvZx949fRg1i/2/2BB5947B3EB2252DC2C28A1F5F856123260036FE.mft Manifest number: 03D3 Signing time: Wed 08 Apr 2026 09:31:13 +0000 Manifest this update: Wed 08 Apr 2026 09:26:13 +0000 Manifest next update: Thu 09 Apr 2026 11:52:13 +0000 Files and hashes: 1: 2BB5947B3EB2252DC2C28A1F5F856123260036FE.crl (hash: 1H868KLAe68lXXo12LIC7wymxIKDnyK/lj+1d+XjCp0=) 2: 34352e3138352e36342e302f32322d3234203d3e20323639343237.roa (hash: cLWZH7fF8LrQwdp/Zg/1jWkVLX85FPQY0a4ML8PtgLo=) 3: 323830343a363436633a3a2f33322d3430203d3e20323639343237.roa (hash: 0yHNZRU/rOPWIWeTxxQK8crAOr43TecNrQxrFYd2xzM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/6wNw2ibxMVk7MGcMThmo5cf6b9LCczbbFvZx949fRg1i/2/2BB5947B3EB2252DC2C28A1F5F856123260036FE.crl rsync://rpki-repo.registro.br/repo/6wNw2ibxMVk7MGcMThmo5cf6b9LCczbbFvZx949fRg1i/2/2BB5947B3EB2252DC2C28A1F5F856123260036FE.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB5947B3EB2252DC2C28A1F5F856123260036FE.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 09 Apr 2026 11:52:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:59:2c:dd:8e:48:e8:c7:89:b0:83:d7:2b:51:62:ed:a8:ab:00:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2BB5947B3EB2252DC2C28A1F5F856123260036FE Validity Not Before: Apr 8 09:26:13 2026 GMT Not After : Apr 9 11:52:13 2026 GMT Subject: CN=D82A12F678592A24B0E975A19B7303AF8EE1D3E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c5:ea:59:f0:bc:e0:cd:8d:c0:d9:24:49:59: 20:ef:f8:65:66:e2:85:b1:91:29:a4:95:1c:f0:7b: da:0b:b7:b9:22:60:75:88:60:fa:f0:e3:6b:d4:e0: 71:23:91:ae:31:e8:8e:bd:1d:0b:50:29:e4:9a:81: 7e:72:5d:6b:ce:1f:67:87:61:d6:91:5a:1f:90:17: 04:1b:91:02:ab:ce:2f:71:b5:d2:ef:54:6d:59:62: fa:d9:9e:e3:76:68:80:9e:ed:61:3e:87:33:ce:5e: 23:3f:70:cd:ed:75:5c:a9:d3:f0:19:c6:8f:98:7b: f3:a8:95:99:17:39:83:4f:4b:6d:ed:34:4d:43:0b: b3:03:7a:94:ea:4d:8a:d0:05:71:4f:bc:b6:a4:98: 67:e6:df:c1:b5:33:a1:a0:ad:1d:36:d8:23:ab:7f: 13:55:cd:e3:46:42:c3:38:7f:35:fe:07:35:05:67: 61:b0:07:62:3a:16:f1:14:55:1a:0f:fc:10:60:69: 1f:d2:cd:d8:40:fc:51:f4:91:d2:82:33:ad:50:35: 7e:71:1d:1a:d4:35:65:77:00:f0:e3:b8:68:9a:bd: ed:b9:07:5d:dc:bb:30:07:55:27:e1:28:73:0f:8b: 19:42:6c:39:69:44:72:97:28:0f:55:d4:c6:3d:9b: 24:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:2A:12:F6:78:59:2A:24:B0:E9:75:A1:9B:73:03:AF:8E:E1:D3:E1 X509v3 Authority Key Identifier: keyid:2B:B5:94:7B:3E:B2:25:2D:C2:C2:8A:1F:5F:85:61:23:26:00:36:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/6wNw2ibxMVk7MGcMThmo5cf6b9LCczbbFvZx949fRg1i/2/2BB5947B3EB2252DC2C28A1F5F856123260036FE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB5947B3EB2252DC2C28A1F5F856123260036FE.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/6wNw2ibxMVk7MGcMThmo5cf6b9LCczbbFvZx949fRg1i/2/2BB5947B3EB2252DC2C28A1F5F856123260036FE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:00:b7:32:2d:9e:88:fd:59:0f:f5:4c:ac:80:5c:94:28:d7: c3:81:6e:5c:ca:38:be:b1:76:a0:6e:44:82:c4:b7:2c:5f:ac: 7a:c5:be:31:9d:61:a8:b4:45:0b:1f:7b:63:b9:31:54:9d:ac: 91:00:fa:cc:df:48:72:d0:7a:51:fa:6c:8b:b9:d7:46:7b:59: 2b:c7:43:fb:72:e8:f6:5a:92:f8:9a:32:00:25:6f:a0:eb:ec: ab:41:2e:fa:0c:9b:ad:49:31:10:4a:71:76:f3:b7:62:a0:82: a1:f6:68:cc:bf:9b:24:1b:1b:a5:bb:4a:a9:81:da:65:7b:e4: 63:58:49:16:39:c3:73:a2:9f:ed:00:53:f9:0d:db:0a:f4:62: bf:cb:f7:dc:61:4c:8c:bb:9d:ee:b7:5d:f0:04:02:9a:4e:c4: 6f:53:74:41:af:b9:0d:09:70:ef:b6:76:15:a7:08:c7:eb:5e: 75:4a:0f:98:f2:e1:96:29:bb:11:71:31:9a:b7:21:1b:84:4e: b8:3d:e2:f9:af:eb:59:11:b5:f4:fa:30:5c:27:d1:9a:d4:f7: 39:58:82:c0:2c:39:b4:e3:6a:88:0e:c0:5b:6e:75:b7:98:14: a9:1d:42:03:38:da:46:d5:81:ce:da:08:4b:83:ec:ae:9d:33: c5:68:23:8d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUE1ks3Y5I6MeJsIPXK1Fi7airAPowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkJCNTk0N0IzRUIyMjUyREMyQzI4QTFGNUY4NTYxMjMy NjAwMzZGRTAeFw0yNjA0MDgwOTI2MTNaFw0yNjA0MDkxMTUyMTNaMDMxMTAvBgNV BAMTKEQ4MkExMkY2Nzg1OTJBMjRCMEU5NzVBMTlCNzMwM0FGOEVFMUQzRTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5xepZ8LzgzY3A2SRJWSDv+GVm 4oWxkSmklRzwe9oLt7kiYHWIYPrw42vU4HEjka4x6I69HQtQKeSagX5yXWvOH2eH YdaRWh+QFwQbkQKrzi9xtdLvVG1ZYvrZnuN2aICe7WE+hzPOXiM/cM3tdVyp0/AZ xo+Ye/OolZkXOYNPS23tNE1DC7MDepTqTYrQBXFPvLakmGfm38G1M6GgrR022COr fxNVzeNGQsM4fzX+BzUFZ2GwB2I6FvEUVRoP/BBgaR/SzdhA/FH0kdKCM61QNX5x HRrUNWV3APDjuGiave25B13cuzAHVSfhKHMPixlCbDlpRHKXKA9V1MY9mySVAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU2CoS9nhZKiSw6XWhm3MDr47h0+EwHwYDVR0j BBgwFoAUK7WUez6yJS3CwoofX4VhIyYANv4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNndOdzJpYnhNVms3TUdjTVRobW81Y2Y2YjlMQ2N6YmJGdlp4OTQ5ZlJn MWkvMi8yQkI1OTQ3QjNFQjIyNTJEQzJDMjhBMUY1Rjg1NjEyMzI2MDAzNkZFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJCQjU5NDdCM0VCMjI1MkRD MkMyOEExRjVGODU2MTIzMjYwMDM2RkUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NndOdzJpYnhNVms3TUdjTVRobW81Y2Y2YjlMQ2N6YmJGdlp4OTQ5ZlJnMWkvMi8y QkI1OTQ3QjNFQjIyNTJEQzJDMjhBMUY1Rjg1NjEyMzI2MDAzNkZFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJgC3Mi2eiP1ZD/VMrIBclCjXw4FuXMo4vrF2oG5EgsS3LF+sesW+MZ1hqLRF Cx97Y7kxVJ2skQD6zN9IctB6Ufpsi7nXRntZK8dD+3Lo9lqS+JoyACVvoOvsq0Eu +gybrUkxEEpxdvO3YqCCofZozL+bJBsbpbtKqYHaZXvkY1hJFjnDc6Kf7QBT+Q3b CvRiv8v33GFMjLud7rdd8AQCmk7Eb1N0Qa+5DQlw77Z2FacIx+tedUoPmPLhlim7 EXExmrchG4ROuD3i+a/rWRG19PowXCfRmtT3OViCwCw5tONqiA7AW251t5gUqR1C AzjaRtWBztoIS4Psrp0zxWgjjQ== -----END CERTIFICATE-----Generated at Wed Apr 8 17:00:47 2026 by rpki-client