$ rpki-client -vvf rpki-repo.registro.br/repo/BP6Jd8zhSCfNZqxLHbUT9pDXvncgSwNpNEayQUGS1VJh/0/2138062CFBFACA966BCBEC6DEA795B2B3C42C0DC.mft File: 2138062CFBFACA966BCBEC6DEA795B2B3C42C0DC.mft (raw, json) Hash identifier: qTuNriqRAc9mqVy5Lg4ll1QmaySFiVjqaeGs9eASFJg= Subject key identifier: FB:44:72:C0:5B:97:7E:BC:3A:2F:45:77:8B:C1:61:4D:AD:5B:B5:A2 Authority key identifier: 21:38:06:2C:FB:FA:CA:96:6B:CB:EC:6D:EA:79:5B:2B:3C:42:C0:DC Certificate issuer: /CN=2138062CFBFACA966BCBEC6DEA795B2B3C42C0DC Certificate serial: 666BD5F6CF9644DEC651A43DBA776475E1772F93 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2138062CFBFACA966BCBEC6DEA795B2B3C42C0DC.cer Subject info access: rsync://rpki-repo.registro.br/repo/BP6Jd8zhSCfNZqxLHbUT9pDXvncgSwNpNEayQUGS1VJh/0/2138062CFBFACA966BCBEC6DEA795B2B3C42C0DC.mft Manifest number: 015E Signing time: Wed 08 Apr 2026 15:28:14 +0000 Manifest this update: Wed 08 Apr 2026 15:23:14 +0000 Manifest next update: Thu 09 Apr 2026 17:55:14 +0000 Files and hashes: 1: 2138062CFBFACA966BCBEC6DEA795B2B3C42C0DC.crl (hash: zVa/kmPA+BAxy9Rl8qDc2f4ob/+6ygYOBGkQrDJao9o=) 2: 323830343a363731343a3a2f33322d3438203d3e20323639363032.roa (hash: TGVWsGNJFdug9RaukeBlnbFOq0S5LHWB8/5b2RXmLXE=) 3: 34352e3138392e3230382e302f32322d3234203d3e20323639363032.roa (hash: gAWQ8M9C1wzgTODsoLIiZ6lqQhw33L9/YHKUnfKHE4M=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BP6Jd8zhSCfNZqxLHbUT9pDXvncgSwNpNEayQUGS1VJh/0/2138062CFBFACA966BCBEC6DEA795B2B3C42C0DC.crl rsync://rpki-repo.registro.br/repo/BP6Jd8zhSCfNZqxLHbUT9pDXvncgSwNpNEayQUGS1VJh/0/2138062CFBFACA966BCBEC6DEA795B2B3C42C0DC.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2138062CFBFACA966BCBEC6DEA795B2B3C42C0DC.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 09 Apr 2026 17:55:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:6b:d5:f6:cf:96:44:de:c6:51:a4:3d:ba:77:64:75:e1:77:2f:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2138062CFBFACA966BCBEC6DEA795B2B3C42C0DC Validity Not Before: Apr 8 15:23:14 2026 GMT Not After : Apr 9 17:55:14 2026 GMT Subject: CN=FB4472C05B977EBC3A2F45778BC1614DAD5BB5A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b6:5d:42:16:83:91:34:8a:ed:d2:bd:a2:16: 39:b8:55:1f:ef:3f:43:81:bf:a0:35:20:b4:3f:e1: 9a:c7:e7:b9:7b:f1:ba:39:15:17:7b:a1:8e:7a:46: 65:4f:ea:39:ce:66:7e:92:3a:52:bf:4e:cb:59:fb: e0:2a:74:44:55:4e:1e:f7:09:97:72:87:71:6c:98: 0c:9c:89:3e:27:d1:92:e1:77:cc:0c:38:b3:5b:75: 20:7e:82:58:59:46:75:ee:65:04:2d:c4:14:40:d9: 5c:0d:aa:bd:fb:cb:83:82:f4:b1:64:3c:93:4e:16: 7a:c6:d6:9d:bb:cf:97:c8:ec:90:1b:dd:f4:77:cf: 4d:90:0b:85:fb:bd:96:95:b1:e4:a6:9d:bb:e7:14: 93:0a:c1:6f:83:4a:ef:49:a6:72:9a:aa:f1:c1:97: 57:9f:0d:25:92:8f:39:f1:60:bc:76:e8:df:74:74: 41:96:df:43:e2:38:88:43:f4:89:f8:ef:9d:25:61: 44:8c:ad:44:12:1f:69:53:a0:59:76:61:57:bd:62: 18:12:cd:90:14:92:b3:4a:59:c8:66:35:78:39:ec: e1:1b:dc:f2:d9:89:59:f4:12:a6:a5:ec:98:64:25: 97:85:e5:5e:26:3e:a8:60:c3:64:35:7d:8f:04:52: 02:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:44:72:C0:5B:97:7E:BC:3A:2F:45:77:8B:C1:61:4D:AD:5B:B5:A2 X509v3 Authority Key Identifier: keyid:21:38:06:2C:FB:FA:CA:96:6B:CB:EC:6D:EA:79:5B:2B:3C:42:C0:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BP6Jd8zhSCfNZqxLHbUT9pDXvncgSwNpNEayQUGS1VJh/0/2138062CFBFACA966BCBEC6DEA795B2B3C42C0DC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2138062CFBFACA966BCBEC6DEA795B2B3C42C0DC.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BP6Jd8zhSCfNZqxLHbUT9pDXvncgSwNpNEayQUGS1VJh/0/2138062CFBFACA966BCBEC6DEA795B2B3C42C0DC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:fa:02:f0:74:a6:03:9d:fc:63:f0:fe:a7:f5:06:af:4c:2e: 7b:2a:11:33:d9:6e:9b:5d:f8:a5:5a:4b:f2:5e:fa:bb:bf:48: bc:db:bf:48:37:e2:1a:29:db:7c:d3:83:97:03:ba:13:ea:9c: a4:20:8b:98:dd:7d:e0:82:92:cc:09:4d:3e:48:f0:03:c6:32: e7:91:58:01:80:ef:2d:a3:b4:ba:4e:e1:ba:39:63:11:8c:3d: 4e:5f:c0:04:3b:52:6b:3a:6b:62:b0:ec:e5:b7:0d:57:ac:50: 85:91:05:80:40:43:9e:59:e1:ab:a3:77:21:f1:93:aa:7b:8e: d0:55:39:4e:50:92:9f:56:85:79:b4:eb:bc:92:9a:12:bd:66: 21:5a:4c:b4:67:51:a7:b9:fd:1f:e6:b9:12:e7:57:19:85:51: 23:92:36:1a:60:fa:c5:90:04:59:a7:a6:fc:56:b7:bc:28:fc: d0:b1:f0:91:eb:33:ac:1c:a0:96:18:78:27:66:94:8f:c2:32: e1:88:39:c4:84:3b:36:00:9b:bb:95:f7:1f:27:b3:8d:17:4e: ca:fa:2c:33:85:fb:d3:ed:23:7b:41:e3:c0:19:22:13:21:19: ec:14:e4:a2:ec:19:8c:d1:95:d5:b3:68:e4:e6:bb:3e:32:71: 98:6b:9f:06 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUZmvV9s+WRN7GUaQ9undkdeF3L5MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjEzODA2MkNGQkZBQ0E5NjZCQ0JFQzZERUE3OTVCMkIz QzQyQzBEQzAeFw0yNjA0MDgxNTIzMTRaFw0yNjA0MDkxNzU1MTRaMDMxMTAvBgNV BAMTKEZCNDQ3MkMwNUI5NzdFQkMzQTJGNDU3NzhCQzE2MTREQUQ1QkI1QTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBtl1CFoORNIrt0r2iFjm4VR/v P0OBv6A1ILQ/4ZrH57l78bo5FRd7oY56RmVP6jnOZn6SOlK/TstZ++AqdERVTh73 CZdyh3FsmAyciT4n0ZLhd8wMOLNbdSB+glhZRnXuZQQtxBRA2VwNqr37y4OC9LFk PJNOFnrG1p27z5fI7JAb3fR3z02QC4X7vZaVseSmnbvnFJMKwW+DSu9JpnKaqvHB l1efDSWSjznxYLx26N90dEGW30PiOIhD9In4750lYUSMrUQSH2lToFl2YVe9YhgS zZAUkrNKWchmNXg57OEb3PLZiVn0Eqal7JhkJZeF5V4mPqhgw2Q1fY8EUgLTAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU+0RywFuXfrw6L0V3i8FhTa1btaIwHwYDVR0j BBgwFoAUITgGLPv6ypZry+xt6nlbKzxCwNwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQlA2SmQ4emhTQ2ZOWnF4TEhiVVQ5cERYdm5jZ1N3TnBORWF5UVVHUzFW SmgvMC8yMTM4MDYyQ0ZCRkFDQTk2NkJDQkVDNkRFQTc5NUIyQjNDNDJDMERDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIxMzgwNjJDRkJGQUNBOTY2 QkNCRUM2REVBNzk1QjJCM0M0MkMwREMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QlA2SmQ4emhTQ2ZOWnF4TEhiVVQ5cERYdm5jZ1N3TnBORWF5UVVHUzFWSmgvMC8y MTM4MDYyQ0ZCRkFDQTk2NkJDQkVDNkRFQTc5NUIyQjNDNDJDMERDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEvoC8HSmA538Y/D+p/UGr0wueyoRM9lum134pVpL8l76u79IvNu/SDfiGinb fNODlwO6E+qcpCCLmN194IKSzAlNPkjwA8Yy55FYAYDvLaO0uk7hujljEYw9Tl/A BDtSazprYrDs5bcNV6xQhZEFgEBDnlnhq6N3IfGTqnuO0FU5TlCSn1aFebTrvJKa Er1mIVpMtGdRp7n9H+a5EudXGYVRI5I2GmD6xZAEWaem/Fa3vCj80LHwkeszrByg lhh4J2aUj8Iy4Yg5xIQ7NgCbu5X3HyezjRdOyvosM4X70+0je0HjwBkiEyEZ7BTk ouwZjNGV1bNo5Oa7PjJxmGufBg== -----END CERTIFICATE-----Generated at Thu Apr 9 11:13:40 2026 by rpki-client