$ rpki-client -vvf rpki-repo.registro.br/repo/G2EVjA57QYDThTZMwwGpkmZExrfu4rVBYwuQautjYkYr/1/CBED8B77145C146C6E2002637F70D52E41B65B78.mft File: CBED8B77145C146C6E2002637F70D52E41B65B78.mft (raw, json) Hash identifier: RZ7EKqOfiL89keOGvEuM0vl8NSGvZ1jD7DWGzcUO1X0= Subject key identifier: 42:E1:39:A0:49:F9:55:C7:46:8C:2F:61:BA:39:07:0C:01:95:01:CB Authority key identifier: CB:ED:8B:77:14:5C:14:6C:6E:20:02:63:7F:70:D5:2E:41:B6:5B:78 Certificate issuer: /CN=CBED8B77145C146C6E2002637F70D52E41B65B78 Certificate serial: 1F1AFD7CD29983A6F99384C92A4558194327C30C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBED8B77145C146C6E2002637F70D52E41B65B78.cer Subject info access: rsync://rpki-repo.registro.br/repo/G2EVjA57QYDThTZMwwGpkmZExrfu4rVBYwuQautjYkYr/1/CBED8B77145C146C6E2002637F70D52E41B65B78.mft Manifest number: 03D1 Signing time: Wed 08 Apr 2026 13:03:12 +0000 Manifest this update: Wed 08 Apr 2026 12:58:12 +0000 Manifest next update: Thu 09 Apr 2026 15:56:12 +0000 Files and hashes: 1: CBED8B77145C146C6E2002637F70D52E41B65B78.crl (hash: bBAMGQMjCNoZwVhenU/iuxUzazEA4x8zBeORhxU47Aw=) 2: 323830343a383632633a3a2f33322d3335203d3e20323732363236.roa (hash: 8oEyJaHkTAGhqcaJWslRXlZGf9/t7Q/yYXxkDlK28T4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/G2EVjA57QYDThTZMwwGpkmZExrfu4rVBYwuQautjYkYr/1/CBED8B77145C146C6E2002637F70D52E41B65B78.crl rsync://rpki-repo.registro.br/repo/G2EVjA57QYDThTZMwwGpkmZExrfu4rVBYwuQautjYkYr/1/CBED8B77145C146C6E2002637F70D52E41B65B78.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBED8B77145C146C6E2002637F70D52E41B65B78.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 09 Apr 2026 15:56:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:1a:fd:7c:d2:99:83:a6:f9:93:84:c9:2a:45:58:19:43:27:c3:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CBED8B77145C146C6E2002637F70D52E41B65B78 Validity Not Before: Apr 8 12:58:12 2026 GMT Not After : Apr 9 15:56:12 2026 GMT Subject: CN=42E139A049F955C7468C2F61BA39070C019501CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:05:a5:96:e1:2a:cd:39:dd:c9:4f:f7:c4:76: 19:c3:8f:4a:9f:72:a6:98:d5:eb:a8:1a:01:e8:e9: 22:79:45:6f:59:13:2f:1d:ba:73:fb:8e:51:26:91: c2:ee:8d:ec:ad:82:8a:2d:ae:4a:4d:9f:72:9b:db: e6:f7:1d:e3:ff:06:af:8c:47:65:47:b6:25:50:0d: 74:76:23:f8:2f:38:ff:94:4e:c0:db:96:32:10:a7: 10:7b:b9:0e:8a:67:a6:9e:29:7e:42:51:07:18:2e: 9c:a0:af:52:a1:ca:f2:13:90:0b:58:35:9f:d1:8e: 70:3d:54:94:73:3d:1a:24:a2:fe:34:be:d9:3d:08: 60:96:e1:fe:18:00:30:09:d6:1f:e7:d2:ac:69:83: ce:dc:9d:23:02:a6:ef:4e:ae:43:f9:39:a7:ec:8c: 04:93:42:7c:af:7b:75:8f:0b:9a:56:04:a1:56:5b: f5:6d:e3:48:93:3a:37:dd:74:52:af:a6:d3:a4:30: e8:6c:06:61:78:86:af:51:15:0d:c3:95:1d:6c:50: b5:6d:96:60:40:ce:66:df:14:46:1d:89:a0:37:55: 67:2d:4b:61:d1:8d:3e:cf:06:e8:4b:bf:79:4e:d1: 9a:ed:1a:83:b5:c8:a6:74:73:ff:28:12:4e:08:12: bf:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:E1:39:A0:49:F9:55:C7:46:8C:2F:61:BA:39:07:0C:01:95:01:CB X509v3 Authority Key Identifier: keyid:CB:ED:8B:77:14:5C:14:6C:6E:20:02:63:7F:70:D5:2E:41:B6:5B:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/G2EVjA57QYDThTZMwwGpkmZExrfu4rVBYwuQautjYkYr/1/CBED8B77145C146C6E2002637F70D52E41B65B78.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBED8B77145C146C6E2002637F70D52E41B65B78.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/G2EVjA57QYDThTZMwwGpkmZExrfu4rVBYwuQautjYkYr/1/CBED8B77145C146C6E2002637F70D52E41B65B78.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:5b:f7:e4:e3:5a:19:24:61:6f:fd:fd:8b:48:4a:08:2b:b8: 6e:02:be:e9:a6:4f:52:df:a2:ea:4e:7d:f0:cf:5c:ec:68:2e: 59:fd:2c:33:b0:c0:d1:3e:07:3a:40:92:65:b2:2e:36:7e:da: d2:dc:6f:bd:af:2e:92:6b:65:d6:03:8d:79:d1:60:2f:47:f8: f8:ec:d3:94:5d:87:25:6a:9b:9e:c1:29:6d:7b:5c:09:8e:8a: fc:1e:68:01:be:22:3e:f3:27:59:11:26:15:86:f7:d0:9a:14: 9b:98:6a:55:69:11:b2:31:d4:c0:b4:69:d7:0c:be:19:cb:9e: 40:f3:a4:66:9a:40:8e:8d:42:7a:6a:48:5d:bf:1e:02:fd:21: 4f:4c:91:a4:34:91:39:ae:bb:ef:cf:fa:57:6a:a7:95:b7:9a: ad:af:41:a8:7f:d3:88:ab:ce:94:83:a4:19:81:a4:84:ea:7d: 7a:e6:79:0d:37:c2:36:a9:de:56:cb:ea:d0:86:fe:10:1e:0d: 2f:43:59:13:58:0c:e8:38:12:b3:82:6d:99:7c:3e:6d:b1:36: 46:36:ee:de:7b:ed:98:e0:e5:b9:ab:e3:6e:e6:ef:18:29:5e: a5:96:cf:27:8f:95:ec:f6:b3:23:f5:87:07:1e:95:15:ad:50: 3d:ca:29:4c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUHxr9fNKZg6b5k4TJKkVYGUMnwwwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0JFRDhCNzcxNDVDMTQ2QzZFMjAwMjYzN0Y3MEQ1MkU0 MUI2NUI3ODAeFw0yNjA0MDgxMjU4MTJaFw0yNjA0MDkxNTU2MTJaMDMxMTAvBgNV BAMTKDQyRTEzOUEwNDlGOTU1Qzc0NjhDMkY2MUJBMzkwNzBDMDE5NTAxQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7BaWW4SrNOd3JT/fEdhnDj0qf cqaY1euoGgHo6SJ5RW9ZEy8dunP7jlEmkcLujeytgootrkpNn3Kb2+b3HeP/Bq+M R2VHtiVQDXR2I/gvOP+UTsDbljIQpxB7uQ6KZ6aeKX5CUQcYLpygr1KhyvITkAtY NZ/RjnA9VJRzPRokov40vtk9CGCW4f4YADAJ1h/n0qxpg87cnSMCpu9OrkP5Oafs jASTQnyve3WPC5pWBKFWW/Vt40iTOjfddFKvptOkMOhsBmF4hq9RFQ3DlR1sULVt lmBAzmbfFEYdiaA3VWctS2HRjT7PBuhLv3lO0ZrtGoO1yKZ0c/8oEk4IEr+NAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUQuE5oEn5VcdGjC9hujkHDAGVAcswHwYDVR0j BBgwFoAUy+2LdxRcFGxuIAJjf3DVLkG2W3gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRzJFVmpBNTdRWURUaFRaTXd3R3BrbVpFeHJmdTRyVkJZd3VRYXV0allr WXIvMS9DQkVEOEI3NzE0NUMxNDZDNkUyMDAyNjM3RjcwRDUyRTQxQjY1Qjc4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NCRUQ4Qjc3MTQ1QzE0NkM2 RTIwMDI2MzdGNzBENTJFNDFCNjVCNzguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RzJFVmpBNTdRWURUaFRaTXd3R3BrbVpFeHJmdTRyVkJZd3VRYXV0allrWXIvMS9D QkVEOEI3NzE0NUMxNDZDNkUyMDAyNjM3RjcwRDUyRTQxQjY1Qjc4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJVv35ONaGSRhb/39i0hKCCu4bgK+6aZPUt+i6k598M9c7GguWf0sM7DA0T4H OkCSZbIuNn7a0txvva8ukmtl1gONedFgL0f4+OzTlF2HJWqbnsEpbXtcCY6K/B5o Ab4iPvMnWREmFYb30JoUm5hqVWkRsjHUwLRp1wy+GcueQPOkZppAjo1CempIXb8e Av0hT0yRpDSROa6778/6V2qnlbeara9BqH/TiKvOlIOkGYGkhOp9euZ5DTfCNqne Vsvq0Ib+EB4NL0NZE1gM6DgSs4JtmXw+bbE2Rjbu3nvtmODluavjbubvGClepZbP J4+V7PazI/WHBx6VFa1QPcopTA== -----END CERTIFICATE-----Generated at Wed Apr 8 21:08:51 2026 by rpki-client