$ rpki-client -vvf rpki-repo.registro.br/repo/BCneDvRBFSAzp7iw6SH6NKUw9oFjgcLDiHALZ3YEUrT7/1/CFB7582F28699F351069C8C76CC97167BF7BB2EE.mft File: CFB7582F28699F351069C8C76CC97167BF7BB2EE.mft (raw, json) Hash identifier: K1YEGIZlIaZYbK3n6AYiBuTEmnkn115kc52kTjUp+8E= Subject key identifier: 61:55:71:32:2F:C7:28:E3:AC:6D:11:CF:F4:42:F0:80:5F:7F:21:8C Authority key identifier: CF:B7:58:2F:28:69:9F:35:10:69:C8:C7:6C:C9:71:67:BF:7B:B2:EE Certificate issuer: /CN=CFB7582F28699F351069C8C76CC97167BF7BB2EE Certificate serial: 47AD542824EC098DC8BE186275374EF8A4980DE6 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFB7582F28699F351069C8C76CC97167BF7BB2EE.cer Subject info access: rsync://rpki-repo.registro.br/repo/BCneDvRBFSAzp7iw6SH6NKUw9oFjgcLDiHALZ3YEUrT7/1/CFB7582F28699F351069C8C76CC97167BF7BB2EE.mft Manifest number: 03D7 Signing time: Wed 08 Apr 2026 01:23:09 +0000 Manifest this update: Wed 08 Apr 2026 01:18:09 +0000 Manifest next update: Thu 09 Apr 2026 04:58:09 +0000 Files and hashes: 1: 323830343a6362303a3a2f33322d3438203d3e203532373432.roa (hash: OhngJLTjITTfBnt+qyHLrtVqgrZC2VpFlDFytpAhzhI=) 2: 3133382e3131382e3235322e302f32322d3234203d3e203532373432.roa (hash: VlQMtP6NQInhiwVIoJiXBUj4Ie/wB4WGdHL21LfKPc8=) 3: 3137372e3133302e31362e302f32302d3234203d3e203532373432.roa (hash: rJari9HForGWIAVn++KHhqqJxayzpXRfuI70oICH5Ek=) 4: CFB7582F28699F351069C8C76CC97167BF7BB2EE.crl (hash: 1RDGxFmqdF5bjD4DNhd7m7fZMd+SF9R19Nm/7f2M0nk=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BCneDvRBFSAzp7iw6SH6NKUw9oFjgcLDiHALZ3YEUrT7/1/CFB7582F28699F351069C8C76CC97167BF7BB2EE.crl rsync://rpki-repo.registro.br/repo/BCneDvRBFSAzp7iw6SH6NKUw9oFjgcLDiHALZ3YEUrT7/1/CFB7582F28699F351069C8C76CC97167BF7BB2EE.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFB7582F28699F351069C8C76CC97167BF7BB2EE.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 09 Apr 2026 04:58:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:ad:54:28:24:ec:09:8d:c8:be:18:62:75:37:4e:f8:a4:98:0d:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFB7582F28699F351069C8C76CC97167BF7BB2EE Validity Not Before: Apr 8 01:18:09 2026 GMT Not After : Apr 9 04:58:09 2026 GMT Subject: CN=615571322FC728E3AC6D11CFF442F0805F7F218C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:36:69:ce:20:11:c6:54:23:17:4c:0c:03:45: ac:7f:b9:59:a1:fc:c5:42:c3:0a:88:42:9d:a8:a0: 79:9a:9d:34:1e:eb:ea:0b:68:13:96:e7:ec:54:53: 11:6e:f9:a0:2c:f8:e5:bf:4a:5a:e5:39:33:8e:a5: 68:84:47:8b:f6:f4:f5:c8:db:cf:fb:7b:37:f1:17: 3c:81:9e:5c:27:5d:60:a2:05:74:75:15:8a:99:18: c9:05:2c:52:56:6e:78:12:8e:26:9e:cb:19:28:cd: ee:09:49:47:56:15:65:84:53:ab:82:22:d8:d0:8b: 50:a2:c4:6e:12:79:d1:b3:34:6d:1c:1c:6c:02:34: 71:cd:7d:00:36:b0:fe:24:43:fc:2c:71:73:73:8e: ea:f6:f6:5a:9e:78:07:31:03:58:70:09:7b:33:87: 27:36:c5:76:3b:f9:b4:86:5c:e7:8d:46:44:c1:20: b7:f9:38:49:37:87:56:b6:9b:d3:3c:84:7d:c4:c8: 96:fc:bd:bb:e0:91:4c:d1:cb:ef:6f:84:77:a2:c8: 7c:48:b2:c5:7e:67:d7:07:e8:3e:03:89:7a:34:36: bd:c4:19:a4:ab:cd:05:93:9b:11:1c:a5:a3:77:e7: 94:d8:65:ea:e8:e9:80:6d:e3:88:f7:8f:3e:15:9a: 51:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:55:71:32:2F:C7:28:E3:AC:6D:11:CF:F4:42:F0:80:5F:7F:21:8C X509v3 Authority Key Identifier: keyid:CF:B7:58:2F:28:69:9F:35:10:69:C8:C7:6C:C9:71:67:BF:7B:B2:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BCneDvRBFSAzp7iw6SH6NKUw9oFjgcLDiHALZ3YEUrT7/1/CFB7582F28699F351069C8C76CC97167BF7BB2EE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFB7582F28699F351069C8C76CC97167BF7BB2EE.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BCneDvRBFSAzp7iw6SH6NKUw9oFjgcLDiHALZ3YEUrT7/1/CFB7582F28699F351069C8C76CC97167BF7BB2EE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:81:c3:56:be:5f:52:2d:9e:c3:83:20:20:00:54:b3:ce:50: 7f:75:42:16:63:52:c8:50:cc:07:a8:ea:8b:22:ca:21:a1:94: 57:34:d8:76:82:3c:a9:96:1f:21:f1:bd:d8:47:f7:32:2a:21: 7d:d3:5a:bc:76:4a:b5:9b:e0:6e:9e:af:87:bb:28:81:eb:38: 33:59:ac:8b:c1:6a:0c:04:99:65:38:29:56:40:34:be:ca:ff: 91:0e:79:64:ac:ba:9b:4a:88:b8:c3:b7:f3:75:fb:ce:7f:e5: cb:64:10:78:e9:f5:bb:75:bb:ad:60:de:ac:6a:83:4e:99:c7: 7a:3e:63:b1:95:a3:1f:2b:28:63:d8:3c:76:d0:d4:6d:9b:f7: 35:e2:30:cd:d5:28:6e:3f:c5:89:ab:9b:00:1d:6e:0e:8d:b6: 43:1d:2b:df:eb:dd:e8:2f:7c:5b:ed:0b:a6:0d:aa:f2:7a:ca: 3e:5e:f7:9c:77:f6:92:fc:ea:0b:f0:1c:88:01:e5:f5:e0:d8: 6c:4e:6a:a6:6d:89:d0:b0:c0:cd:dc:21:07:42:e5:04:37:8d: 61:50:8f:06:71:44:07:74:5d:95:4f:fd:80:83:3b:9a:74:b6: c3:d3:70:c3:34:6d:87:54:d8:d8:b5:80:20:56:36:6b:c8:64: 7f:b9:ce:f7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUR61UKCTsCY3IvhhidTdO+KSYDeYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZCNzU4MkYyODY5OUYzNTEwNjlDOEM3NkNDOTcxNjdC RjdCQjJFRTAeFw0yNjA0MDgwMTE4MDlaFw0yNjA0MDkwNDU4MDlaMDMxMTAvBgNV BAMTKDYxNTU3MTMyMkZDNzI4RTNBQzZEMTFDRkY0NDJGMDgwNUY3RjIxOEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqNmnOIBHGVCMXTAwDRax/uVmh /MVCwwqIQp2ooHmanTQe6+oLaBOW5+xUUxFu+aAs+OW/SlrlOTOOpWiER4v29PXI 28/7ezfxFzyBnlwnXWCiBXR1FYqZGMkFLFJWbngSjiaeyxkoze4JSUdWFWWEU6uC ItjQi1CixG4SedGzNG0cHGwCNHHNfQA2sP4kQ/wscXNzjur29lqeeAcxA1hwCXsz hyc2xXY7+bSGXOeNRkTBILf5OEk3h1a2m9M8hH3EyJb8vbvgkUzRy+9vhHeiyHxI ssV+Z9cH6D4DiXo0Nr3EGaSrzQWTmxEcpaN355TYZero6YBt44j3jz4VmlHNAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUYVVxMi/HKOOsbRHP9ELwgF9/IYwwHwYDVR0j BBgwFoAUz7dYLyhpnzUQacjHbMlxZ797su4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQkNuZUR2UkJGU0F6cDdpdzZTSDZOS1V3OW9GamdjTERpSEFMWjNZRVVy VDcvMS9DRkI3NTgyRjI4Njk5RjM1MTA2OUM4Qzc2Q0M5NzE2N0JGN0JCMkVFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NGQjc1ODJGMjg2OTlGMzUx MDY5QzhDNzZDQzk3MTY3QkY3QkIyRUUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QkNuZUR2UkJGU0F6cDdpdzZTSDZOS1V3OW9GamdjTERpSEFMWjNZRVVyVDcvMS9D RkI3NTgyRjI4Njk5RjM1MTA2OUM4Qzc2Q0M5NzE2N0JGN0JCMkVFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAW4HDVr5fUi2ew4MgIABUs85Qf3VCFmNSyFDMB6jqiyLKIaGUVzTYdoI8qZYf IfG92Ef3MiohfdNavHZKtZvgbp6vh7soges4M1msi8FqDASZZTgpVkA0vsr/kQ55 ZKy6m0qIuMO383X7zn/ly2QQeOn1u3W7rWDerGqDTpnHej5jsZWjHysoY9g8dtDU bZv3NeIwzdUobj/FiaubAB1uDo22Qx0r3+vd6C98W+0Lpg2q8nrKPl73nHf2kvzq C/AciAHl9eDYbE5qpm2J0LDAzdwhB0LlBDeNYVCPBnFEB3RdlU/9gIM7mnS2w9Nw wzRth1TY2LWAIFY2a8hkf7nO9w== -----END CERTIFICATE-----Generated at Wed Apr 8 16:00:02 2026 by rpki-client