$ rpki-client -vvf rpki-repo.registro.br/repo/D1JcEAGwUvEBm8Dc4jAtYdPcbGDeuMZhGPHvxfRn4TnS/1/BDE6E0CDCDD7C337D6451A6BE94B321C22CF08EA.mft File: BDE6E0CDCDD7C337D6451A6BE94B321C22CF08EA.mft (raw, json) Hash identifier: zcJnZRUXOfKwiTH+twWgwpm3Q+QCARPOfp2ePJZ7XCQ= Subject key identifier: 04:AB:CA:F4:8D:FD:A3:8C:6D:8E:00:89:22:DF:CE:DF:6D:4D:D9:EA Authority key identifier: BD:E6:E0:CD:CD:D7:C3:37:D6:45:1A:6B:E9:4B:32:1C:22:CF:08:EA Certificate issuer: /CN=BDE6E0CDCDD7C337D6451A6BE94B321C22CF08EA Certificate serial: 28BC4ABC2CF8908CD6AC0C3551778DEE05B801BA Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDE6E0CDCDD7C337D6451A6BE94B321C22CF08EA.cer Subject info access: rsync://rpki-repo.registro.br/repo/D1JcEAGwUvEBm8Dc4jAtYdPcbGDeuMZhGPHvxfRn4TnS/1/BDE6E0CDCDD7C337D6451A6BE94B321C22CF08EA.mft Manifest number: 03D2 Signing time: Wed 08 Apr 2026 00:25:24 +0000 Manifest this update: Wed 08 Apr 2026 00:20:24 +0000 Manifest next update: Thu 09 Apr 2026 02:06:24 +0000 Files and hashes: 1: 323830343a313735383a3a2f33322d3438203d3e20323633313339.roa (hash: 4hXMnlOM2+e5ukMlFpC5yM+NX/fv2dR6Zo6WF4wA99k=) 2: 3137372e34342e3232302e302f32322d3234203d3e20323633313339.roa (hash: tZZsHHKrmUem3d9oYAxFcBELiCSS1+/C57zW1ymZQLE=) 3: BDE6E0CDCDD7C337D6451A6BE94B321C22CF08EA.crl (hash: KxXOXrZnhWHfZ+9LulwLn2yO5PRQTHa4xR+fIJ81sZc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/D1JcEAGwUvEBm8Dc4jAtYdPcbGDeuMZhGPHvxfRn4TnS/1/BDE6E0CDCDD7C337D6451A6BE94B321C22CF08EA.crl rsync://rpki-repo.registro.br/repo/D1JcEAGwUvEBm8Dc4jAtYdPcbGDeuMZhGPHvxfRn4TnS/1/BDE6E0CDCDD7C337D6451A6BE94B321C22CF08EA.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDE6E0CDCDD7C337D6451A6BE94B321C22CF08EA.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 09 Apr 2026 02:06:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:bc:4a:bc:2c:f8:90:8c:d6:ac:0c:35:51:77:8d:ee:05:b8:01:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDE6E0CDCDD7C337D6451A6BE94B321C22CF08EA Validity Not Before: Apr 8 00:20:24 2026 GMT Not After : Apr 9 02:06:24 2026 GMT Subject: CN=04ABCAF48DFDA38C6D8E008922DFCEDF6D4DD9EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ce:49:25:4a:c6:ed:11:ef:ea:37:f3:a4:8b: a5:8b:2b:90:bc:34:3d:eb:df:45:87:32:f7:32:0f: 17:55:18:f3:08:ab:20:07:13:a8:e4:03:bd:cb:7e: 64:ef:ec:5b:fd:3e:19:c8:7c:87:26:8b:01:d7:17: ac:52:bf:74:d1:1c:04:46:6e:be:55:4e:45:44:d1: 1e:60:1d:6f:16:c7:56:39:5a:32:a5:82:37:6b:db: 4d:93:47:38:db:8a:ae:08:73:16:db:d3:4a:7e:25: 4e:87:9f:55:fa:72:03:8a:09:d3:34:1f:5c:d8:3a: 06:e2:77:73:44:2a:a3:0f:78:6b:23:4b:ff:b1:5d: d9:5a:ae:65:f0:e9:95:b1:10:9e:b5:0f:98:5c:67: 7a:28:9a:b4:81:5f:81:f0:f4:49:98:59:76:03:99: 62:5c:78:a7:af:07:90:58:b5:28:90:fd:0d:13:01: 16:b3:c0:86:92:82:01:bc:79:46:69:08:8d:eb:8f: 32:dd:34:cf:e7:08:6c:7f:94:06:79:09:43:0c:48: 70:e3:ea:08:06:d1:6d:6c:36:69:de:d4:f7:c4:a4: ef:35:df:4b:6a:f3:32:24:f1:61:40:bb:52:12:f9: 05:02:47:9f:f4:1c:a2:f1:ce:8b:99:26:53:56:27: a0:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:AB:CA:F4:8D:FD:A3:8C:6D:8E:00:89:22:DF:CE:DF:6D:4D:D9:EA X509v3 Authority Key Identifier: keyid:BD:E6:E0:CD:CD:D7:C3:37:D6:45:1A:6B:E9:4B:32:1C:22:CF:08:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/D1JcEAGwUvEBm8Dc4jAtYdPcbGDeuMZhGPHvxfRn4TnS/1/BDE6E0CDCDD7C337D6451A6BE94B321C22CF08EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDE6E0CDCDD7C337D6451A6BE94B321C22CF08EA.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/D1JcEAGwUvEBm8Dc4jAtYdPcbGDeuMZhGPHvxfRn4TnS/1/BDE6E0CDCDD7C337D6451A6BE94B321C22CF08EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:b8:88:2d:67:6b:2d:47:2d:26:57:fa:e1:7c:55:ef:57:8a: 25:c7:7b:b4:6e:8a:7a:bb:89:60:cb:04:58:30:a7:8b:a8:4b: 52:06:e7:73:2c:66:86:cd:ba:78:e3:a4:47:90:46:b6:1c:eb: 84:e2:79:79:03:8d:cf:14:2b:68:a5:48:d5:d3:9b:af:5a:9f: 16:56:75:56:92:7e:37:34:f3:e4:c0:00:ce:2a:5c:64:95:99: d2:43:a1:3b:60:aa:09:fa:43:da:4e:eb:a1:27:67:d8:0d:c5: 78:6c:5d:30:94:0e:c0:ba:40:6a:42:3a:56:20:93:58:e3:57: 20:1c:86:f3:ef:ec:2a:a5:e9:e3:6e:ab:0d:13:9b:3d:be:48: 2c:64:3d:d7:99:a9:9b:ac:1c:07:3d:4b:cf:cc:08:01:fc:52: 75:e3:77:8d:e3:0f:1e:9b:f2:2d:1d:7f:90:25:c3:fe:c6:7a: d6:24:8f:32:43:97:83:52:f5:cb:21:1f:39:1f:bb:1d:83:f9: a0:a1:4e:e9:9f:cc:0e:d5:14:d8:02:43:2f:56:b3:26:56:e2: 78:50:08:ce:27:03:0b:a6:11:a3:d5:e3:d7:74:f9:df:26:2f: f3:38:be:e6:4f:21:92:84:20:cc:2d:23:c9:23:18:d4:66:f0: 35:c7:2e:49 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUKLxKvCz4kIzWrAw1UXeN7gW4AbowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkRFNkUwQ0RDREQ3QzMzN0Q2NDUxQTZCRTk0QjMyMUMy MkNGMDhFQTAeFw0yNjA0MDgwMDIwMjRaFw0yNjA0MDkwMjA2MjRaMDMxMTAvBgNV BAMTKDA0QUJDQUY0OERGREEzOEM2RDhFMDA4OTIyREZDRURGNkQ0REQ5RUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4zkklSsbtEe/qN/Oki6WLK5C8 ND3r30WHMvcyDxdVGPMIqyAHE6jkA73LfmTv7Fv9PhnIfIcmiwHXF6xSv3TRHARG br5VTkVE0R5gHW8Wx1Y5WjKlgjdr202TRzjbiq4Icxbb00p+JU6Hn1X6cgOKCdM0 H1zYOgbid3NEKqMPeGsjS/+xXdlarmXw6ZWxEJ61D5hcZ3oomrSBX4Hw9EmYWXYD mWJceKevB5BYtSiQ/Q0TARazwIaSggG8eUZpCI3rjzLdNM/nCGx/lAZ5CUMMSHDj 6ggG0W1sNmne1PfEpO8130tq8zIk8WFAu1IS+QUCR5/0HKLxzouZJlNWJ6DLAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUBKvK9I39o4xtjgCJIt/O321N2eowHwYDVR0j BBgwFoAUvebgzc3XwzfWRRpr6UsyHCLPCOowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRDFKY0VBR3dVdkVCbThEYzRqQXRZZFBjYkdEZXVNWmhHUEh2eGZSbjRU blMvMS9CREU2RTBDRENERDdDMzM3RDY0NTFBNkJFOTRCMzIxQzIyQ0YwOEVBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JERTZFMENEQ0REN0MzMzdE NjQ1MUE2QkU5NEIzMjFDMjJDRjA4RUEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RDFKY0VBR3dVdkVCbThEYzRqQXRZZFBjYkdEZXVNWmhHUEh2eGZSbjRUblMvMS9C REU2RTBDRENERDdDMzM3RDY0NTFBNkJFOTRCMzIxQzIyQ0YwOEVBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEARriILWdrLUctJlf64XxV71eKJcd7tG6KeruJYMsEWDCni6hLUgbncyxmhs26 eOOkR5BGthzrhOJ5eQONzxQraKVI1dObr1qfFlZ1VpJ+NzTz5MAAzipcZJWZ0kOh O2CqCfpD2k7roSdn2A3FeGxdMJQOwLpAakI6ViCTWONXIByG8+/sKqXp426rDROb Pb5ILGQ915mpm6wcBz1Lz8wIAfxSdeN3jeMPHpvyLR1/kCXD/sZ61iSPMkOXg1L1 yyEfOR+7HYP5oKFO6Z/MDtUU2AJDL1azJlbieFAIzicDC6YRo9Xj13T53yYv8zi+ 5k8hkoQgzC0jySMY1GbwNccuSQ== -----END CERTIFICATE-----Generated at Wed Apr 8 17:49:45 2026 by rpki-client