$ rpki-client -vvf rpki-repo.registro.br/repo/Gm9nqW21EVsfybUHSobWpLLCEG1K4PKSzJwQF3pdrut7/0/2BA7E3F6A06E73CE8FAE470EEFDC07F81AC04CDD.mft File: 2BA7E3F6A06E73CE8FAE470EEFDC07F81AC04CDD.mft (raw, json) Hash identifier: 4dKGNy26NMZU1st5FLZlDEKRkSofBM8A2lJgilajdDg= Subject key identifier: 70:DF:D7:4D:3D:8D:47:98:85:BA:99:02:D9:B1:90:CB:69:CD:71:66 Authority key identifier: 2B:A7:E3:F6:A0:6E:73:CE:8F:AE:47:0E:EF:DC:07:F8:1A:C0:4C:DD Certificate issuer: /CN=2BA7E3F6A06E73CE8FAE470EEFDC07F81AC04CDD Certificate serial: 04D7E2595547568BF05F0A79E849D3B6EE30E81B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BA7E3F6A06E73CE8FAE470EEFDC07F81AC04CDD.cer Subject info access: rsync://rpki-repo.registro.br/repo/Gm9nqW21EVsfybUHSobWpLLCEG1K4PKSzJwQF3pdrut7/0/2BA7E3F6A06E73CE8FAE470EEFDC07F81AC04CDD.mft Manifest number: 5F Signing time: Wed 08 Apr 2026 18:22:46 +0000 Manifest this update: Wed 08 Apr 2026 18:17:46 +0000 Manifest next update: Thu 09 Apr 2026 18:35:46 +0000 Files and hashes: 1: 2BA7E3F6A06E73CE8FAE470EEFDC07F81AC04CDD.crl (hash: o6rtymAfvB0TQAfsS6IQxmBQpNCkwKZbPn2thdef92U=) 2: 3137302e3135302e3232302e302f32322d3234203d3e20323635303530.roa (hash: mO6UbLwv9B7xL5T6Fb4Y4qhDxrjBJyZngbWHDuA7/WE=) 3: 323830343a333230303a3a2f33322d3438203d3e20323635303530.roa (hash: JNkuPVkslJhEy5vxVPsp0mnwk/L8rP8+/jTHXEJg2FI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Gm9nqW21EVsfybUHSobWpLLCEG1K4PKSzJwQF3pdrut7/0/2BA7E3F6A06E73CE8FAE470EEFDC07F81AC04CDD.crl rsync://rpki-repo.registro.br/repo/Gm9nqW21EVsfybUHSobWpLLCEG1K4PKSzJwQF3pdrut7/0/2BA7E3F6A06E73CE8FAE470EEFDC07F81AC04CDD.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BA7E3F6A06E73CE8FAE470EEFDC07F81AC04CDD.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 09 Apr 2026 18:35:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:d7:e2:59:55:47:56:8b:f0:5f:0a:79:e8:49:d3:b6:ee:30:e8:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2BA7E3F6A06E73CE8FAE470EEFDC07F81AC04CDD Validity Not Before: Apr 8 18:17:46 2026 GMT Not After : Apr 9 18:35:46 2026 GMT Subject: CN=70DFD74D3D8D479885BA9902D9B190CB69CD7166 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:53:bc:68:f6:3e:7b:d4:9f:d0:d8:d3:42:0c: 10:12:22:2f:dc:dd:6f:7b:29:e4:5a:7d:1a:72:b3: 45:18:34:4b:70:2f:f7:26:c4:64:d2:a4:b0:f1:f1: da:78:eb:09:fc:e1:ed:0a:ba:ae:2e:be:ce:1b:0f: 58:9e:40:eb:f3:8d:77:9f:3e:af:bb:32:d0:67:fd: be:e6:65:bc:36:3b:c1:4d:5f:d2:f1:6a:94:0f:7f: 42:42:78:c4:80:4c:ad:b9:31:b4:78:d5:9e:38:6b: 30:27:98:b4:6e:34:d5:a7:9c:7b:2f:b3:d3:1c:43: 09:96:9b:02:62:60:2f:7c:f1:98:25:95:74:06:e5: ac:2d:4e:0f:06:3c:58:c5:6b:a2:c9:b1:c0:ce:db: 0f:8d:b6:7a:85:74:c2:96:3b:08:44:1e:94:27:05: a5:f3:85:a0:7c:f9:ea:53:35:ee:dc:5c:4a:d9:cb: 19:a2:4d:02:e4:bc:97:43:f8:ea:0a:a1:d3:4e:84: 84:aa:db:b8:5a:42:57:61:f3:22:c8:b0:4e:c5:44: 95:f5:2c:8a:8d:03:d4:d3:cc:1c:a2:ee:c7:2b:0e: 59:0d:3c:12:20:c5:9a:d0:af:56:89:ac:f0:b0:85: a2:83:dd:cf:62:a8:4e:1a:a9:5d:49:48:09:43:ae: 4b:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:DF:D7:4D:3D:8D:47:98:85:BA:99:02:D9:B1:90:CB:69:CD:71:66 X509v3 Authority Key Identifier: keyid:2B:A7:E3:F6:A0:6E:73:CE:8F:AE:47:0E:EF:DC:07:F8:1A:C0:4C:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Gm9nqW21EVsfybUHSobWpLLCEG1K4PKSzJwQF3pdrut7/0/2BA7E3F6A06E73CE8FAE470EEFDC07F81AC04CDD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BA7E3F6A06E73CE8FAE470EEFDC07F81AC04CDD.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gm9nqW21EVsfybUHSobWpLLCEG1K4PKSzJwQF3pdrut7/0/2BA7E3F6A06E73CE8FAE470EEFDC07F81AC04CDD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:b2:b4:15:2e:35:51:88:ce:53:4f:1e:1b:77:fd:2d:cb:d7: 99:2f:e8:bc:69:7c:83:b9:40:6f:d5:f1:ac:22:20:f7:d0:ff: 95:fe:7e:27:a2:b7:9d:4e:02:f6:d0:20:43:ee:26:dc:85:fd: 92:e6:96:9a:d4:d7:1c:f1:f1:6d:54:3c:cf:55:bf:89:40:41: 2d:9c:58:f6:50:54:50:c0:2c:6f:7a:8a:9f:71:9d:3d:cf:bb: 96:1b:dd:5d:d6:93:2c:5d:98:2c:e3:44:17:9d:25:e6:03:fc: 6e:2b:c5:4a:b2:66:50:c9:12:c3:67:09:74:8b:6b:a5:45:c9: 02:d7:68:74:84:1c:ba:d1:10:86:86:be:7a:61:e0:65:95:ad: 0b:c2:2d:a4:a0:c2:1a:25:51:6e:3e:ba:45:fd:bc:9e:86:b4: 10:3d:7d:a7:2f:a3:fd:5e:1e:50:54:2d:2e:8b:67:fe:55:0a: d1:3e:70:50:e7:fc:8c:ee:dc:ee:d5:86:ed:aa:5f:7d:53:b5: 67:e5:88:65:b3:02:6c:59:ea:64:59:1f:91:02:5d:59:5c:d9: 06:f0:fc:3f:4a:67:98:b7:d1:ce:8b:44:7f:7d:c0:3b:18:83: 21:3d:79:bb:47:55:11:e3:53:af:b1:f4:91:25:b3:94:63:aa: 4f:c5:89:c8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUBNfiWVVHVovwXwp56EnTtu4w6BswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkJBN0UzRjZBMDZFNzNDRThGQUU0NzBFRUZEQzA3Rjgx QUMwNENERDAeFw0yNjA0MDgxODE3NDZaFw0yNjA0MDkxODM1NDZaMDMxMTAvBgNV BAMTKDcwREZENzREM0Q4RDQ3OTg4NUJBOTkwMkQ5QjE5MENCNjlDRDcxNjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2U7xo9j571J/Q2NNCDBASIi/c 3W97KeRafRpys0UYNEtwL/cmxGTSpLDx8dp46wn84e0Kuq4uvs4bD1ieQOvzjXef Pq+7MtBn/b7mZbw2O8FNX9LxapQPf0JCeMSATK25MbR41Z44azAnmLRuNNWnnHsv s9McQwmWmwJiYC988ZgllXQG5awtTg8GPFjFa6LJscDO2w+NtnqFdMKWOwhEHpQn BaXzhaB8+epTNe7cXErZyxmiTQLkvJdD+OoKodNOhISq27haQldh8yLIsE7FRJX1 LIqNA9TTzByi7scrDlkNPBIgxZrQr1aJrPCwhaKD3c9iqE4aqV1JSAlDrkufAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUcN/XTT2NR5iFupkC2bGQy2nNcWYwHwYDVR0j BBgwFoAUK6fj9qBuc86PrkcO79wH+BrATN0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR205bnFXMjFFVnNmeWJVSFNvYldwTExDRUcxSzRQS1N6SndRRjNwZHJ1 dDcvMC8yQkE3RTNGNkEwNkU3M0NFOEZBRTQ3MEVFRkRDMDdGODFBQzA0Q0RELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJCQTdFM0Y2QTA2RTczQ0U4 RkFFNDcwRUVGREMwN0Y4MUFDMDRDREQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R205bnFXMjFFVnNmeWJVSFNvYldwTExDRUcxSzRQS1N6SndRRjNwZHJ1dDcvMC8y QkE3RTNGNkEwNkU3M0NFOEZBRTQ3MEVFRkRDMDdGODFBQzA0Q0RELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWrK0FS41UYjOU08eG3f9LcvXmS/ovGl8g7lAb9XxrCIg99D/lf5+J6K3nU4C 9tAgQ+4m3IX9kuaWmtTXHPHxbVQ8z1W/iUBBLZxY9lBUUMAsb3qKn3GdPc+7lhvd XdaTLF2YLONEF50l5gP8bivFSrJmUMkSw2cJdItrpUXJAtdodIQcutEQhoa+emHg ZZWtC8ItpKDCGiVRbj66Rf28noa0ED19py+j/V4eUFQtLotn/lUK0T5wUOf8jO7c 7tWG7apffVO1Z+WIZbMCbFnqZFkfkQJdWVzZBvD8P0pnmLfRzotEf33AOxiDIT15 u0dVEeNTr7H0kSWzlGOqT8WJyA== -----END CERTIFICATE-----Generated at Wed Apr 8 19:53:36 2026 by rpki-client