$ rpki-client -vvf rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/1/3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE.mft File: 3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE.mft (raw, json) Hash identifier: sf6lg4C1pe3oViETalXLHByFRnRYA1OxC8EIlRRiScc= Subject key identifier: 8E:B6:17:51:42:70:70:BD:0E:8D:3B:B5:70:57:B5:48:89:0F:45:9C Authority key identifier: 3A:BF:96:D1:8E:7E:05:A2:4E:DA:A1:17:D2:B9:E7:6A:07:FE:C5:CE Certificate issuer: /CN=3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE Certificate serial: 5D2D20113FAAD83E39C52AD08D92D2B75EACF279 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE.cer Subject info access: rsync://rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/1/3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE.mft Manifest number: 0454 Signing time: Wed 08 Apr 2026 09:24:46 +0000 Manifest this update: Wed 08 Apr 2026 09:19:46 +0000 Manifest next update: Thu 09 Apr 2026 12:32:46 +0000 Files and hashes: 1: 3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE.crl (hash: 6CDOYoVQFisMXxHfOv+iqq86CwH9X4Z+rVvFNeYzlKg=) 2: 3230302e33362e3231362e302f32322d3234203d3e20323731333637.roa (hash: qb5CEyMM5Bsyj+QUacujxzF+SjW2ntuhn2byZVb2KWQ=) 3: 323830343a376136303a3a2f33322d3332203d3e20323731333637.roa (hash: wj2v8FaXrypVWJ5QgcZuYBN25ZTB3posFfJqz3YLkcc=) 4: 323830343a376136303a313030303a3a2f34302d3430203d3e20323731333637.roa (hash: 5D9aXFlbU9fjLoiSVvBefi4iRP3TG6aejX0Oq29ADJQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/1/3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE.crl rsync://rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/1/3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 09 Apr 2026 12:32:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:2d:20:11:3f:aa:d8:3e:39:c5:2a:d0:8d:92:d2:b7:5e:ac:f2:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE Validity Not Before: Apr 8 09:19:46 2026 GMT Not After : Apr 9 12:32:46 2026 GMT Subject: CN=8EB61751427070BD0E8D3BB57057B548890F459C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:e1:b7:8b:9a:5c:4e:46:55:51:66:b1:f2:46: 18:15:f6:ba:cb:eb:c9:41:04:bb:11:ad:85:29:12: db:75:ac:0a:61:8b:44:24:b6:1b:f6:8a:a0:91:e9: 85:5f:58:33:45:e1:fb:b3:4e:e7:ae:ce:8c:ad:86: c7:92:51:a8:61:1c:99:19:44:3c:14:0b:f5:ea:b4: d0:3b:52:ab:44:bc:42:6d:dd:91:c3:f9:a1:27:76: 81:10:5a:e1:9f:d2:17:db:51:22:41:b4:97:23:60: be:cb:5e:92:82:fe:ab:8c:df:3c:1e:e6:0f:ad:82: 8d:08:3f:65:d1:c7:8f:fe:ef:c9:ce:fb:15:a3:b3: 96:d2:c1:55:eb:55:f5:0c:2f:4a:12:d3:f2:66:89: c9:b1:2c:b0:b8:93:8c:85:c3:c5:3b:e9:4a:39:9a: 2c:f1:df:5b:d1:76:6c:b1:e3:f7:a5:3f:f4:b1:ba: 08:47:f0:38:95:c2:b2:f1:f8:47:44:fd:40:68:37: 39:fa:d9:92:2a:9f:27:0a:03:d6:af:a1:65:5d:a2: 6a:a4:e5:5e:a9:a5:7c:b8:8e:58:9d:5d:34:b0:55: 74:f6:61:ae:db:c3:34:32:08:6b:8a:11:67:9a:09: b6:ba:33:41:85:60:6a:d6:7a:f1:37:3b:6d:52:87: 1f:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:B6:17:51:42:70:70:BD:0E:8D:3B:B5:70:57:B5:48:89:0F:45:9C X509v3 Authority Key Identifier: keyid:3A:BF:96:D1:8E:7E:05:A2:4E:DA:A1:17:D2:B9:E7:6A:07:FE:C5:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/1/3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/1/3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:e3:bc:e3:9e:ef:ca:4d:f8:f8:f4:ca:0f:44:48:53:59:15: 2f:c9:8c:b0:06:50:33:82:65:56:a3:c8:e9:09:bd:41:0f:64: 56:60:78:93:86:61:c1:0a:3a:c8:55:4f:b6:3c:21:09:13:50: 02:2e:da:2f:30:3c:ba:4e:30:07:8e:81:2e:fa:d6:d4:94:a3: 61:5e:2a:a3:ba:75:20:4c:d1:17:e4:45:5a:8c:46:a0:be:3d: 42:10:35:1d:a4:f1:ce:f9:f0:51:c4:ad:0e:0f:ed:db:43:76: 38:76:bd:ec:44:73:52:6e:bd:e4:2f:ad:c4:a7:44:d4:44:ca: 0e:d9:81:58:96:8f:a2:28:37:26:97:40:d9:aa:02:b4:61:c2: 75:e6:f2:ff:23:cd:7b:be:a8:e5:d6:7f:66:65:24:4a:07:6e: 74:7d:7e:a8:26:4c:38:ae:96:fa:bd:b0:9d:a6:42:e4:5b:3a: d3:a5:d4:a3:37:0d:53:2b:d8:c2:a9:c1:43:ab:8b:66:75:5f: ef:6e:79:37:55:56:7a:7d:fc:e5:f0:45:60:09:5d:be:1c:2e: bf:93:4e:38:ef:0f:20:1e:74:f8:1e:20:aa:4a:18:e6:fe:2b: 19:f0:ff:62:29:a1:b0:cd:25:bd:da:c0:0b:63:4b:a0:8c:04: f9:77:4e:09 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUXS0gET+q2D45xSrQjZLSt16s8nkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0FCRjk2RDE4RTdFMDVBMjRFREFBMTE3RDJCOUU3NkEw N0ZFQzVDRTAeFw0yNjA0MDgwOTE5NDZaFw0yNjA0MDkxMjMyNDZaMDMxMTAvBgNV BAMTKDhFQjYxNzUxNDI3MDcwQkQwRThEM0JCNTcwNTdCNTQ4ODkwRjQ1OUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDn4beLmlxORlVRZrHyRhgV9rrL 68lBBLsRrYUpEtt1rAphi0Qkthv2iqCR6YVfWDNF4fuzTueuzoythseSUahhHJkZ RDwUC/XqtNA7UqtEvEJt3ZHD+aEndoEQWuGf0hfbUSJBtJcjYL7LXpKC/quM3zwe 5g+tgo0IP2XRx4/+78nO+xWjs5bSwVXrVfUML0oS0/JmicmxLLC4k4yFw8U76Uo5 mizx31vRdmyx4/elP/SxughH8DiVwrLx+EdE/UBoNzn62ZIqnycKA9avoWVdomqk 5V6ppXy4jlidXTSwVXT2Ya7bwzQyCGuKEWeaCba6M0GFYGrWevE3O21Shx+dAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUjrYXUUJwcL0OjTu1cFe1SIkPRZwwHwYDVR0j BBgwFoAUOr+W0Y5+BaJO2qEX0rnnagf+xc4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQkZZSHkzcEJrWVJRdHJCOE02andKTWFqeVc0ZGZ6a0VtUllUc0Z0d3Vz Z3IvMS8zQUJGOTZEMThFN0UwNUEyNEVEQUExMTdEMkI5RTc2QTA3RkVDNUNFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNBQkY5NkQxOEU3RTA1QTI0 RURBQTExN0QyQjlFNzZBMDdGRUM1Q0UuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QkZZSHkzcEJrWVJRdHJCOE02andKTWFqeVc0ZGZ6a0VtUllUc0Z0d3VzZ3IvMS8z QUJGOTZEMThFN0UwNUEyNEVEQUExMTdEMkI5RTc2QTA3RkVDNUNFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEASeO8457vyk34+PTKD0RIU1kVL8mMsAZQM4JlVqPI6Qm9QQ9kVmB4k4ZhwQo6 yFVPtjwhCRNQAi7aLzA8uk4wB46BLvrW1JSjYV4qo7p1IEzRF+RFWoxGoL49QhA1 HaTxzvnwUcStDg/t20N2OHa97ERzUm695C+txKdE1ETKDtmBWJaPoig3JpdA2aoC tGHCdeby/yPNe76o5dZ/ZmUkSgdudH1+qCZMOK6W+r2wnaZC5Fs606XUozcNUyvY wqnBQ6uLZnVf7255N1VWen385fBFYAldvhwuv5NOOO8PIB50+B4gqkoY5v4rGfD/ YimhsM0lvdrAC2NLoIwE+XdOCQ== -----END CERTIFICATE-----Generated at Wed Apr 8 18:29:20 2026 by rpki-client