$ rpki-client -vvf rpki-repo.registro.br/repo/CA9fNmxzRzNNYPQuPtq2dMqbPLc5WisyZpszrLAHCL4f/0/B0CA65D9C1CC96DA8D04D527F2AA10BA40DFDFF8.mft File: B0CA65D9C1CC96DA8D04D527F2AA10BA40DFDFF8.mft (raw, json) Hash identifier: AhPNUuVm8v+L5RfwDEQ6DU8AtQPBsk+EHldtmpB4oFg= Subject key identifier: 2D:98:8E:BD:27:96:49:90:A1:39:49:29:2D:13:55:C7:8A:35:34:A3 Authority key identifier: B0:CA:65:D9:C1:CC:96:DA:8D:04:D5:27:F2:AA:10:BA:40:DF:DF:F8 Certificate issuer: /CN=B0CA65D9C1CC96DA8D04D527F2AA10BA40DFDFF8 Certificate serial: 6811CCB37FA433B7549B1C6405E775D4FEEC4D32 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0CA65D9C1CC96DA8D04D527F2AA10BA40DFDFF8.cer Subject info access: rsync://rpki-repo.registro.br/repo/CA9fNmxzRzNNYPQuPtq2dMqbPLc5WisyZpszrLAHCL4f/0/B0CA65D9C1CC96DA8D04D527F2AA10BA40DFDFF8.mft Manifest number: 0347 Signing time: Thu 09 Apr 2026 04:00:32 +0000 Manifest this update: Thu 09 Apr 2026 03:55:32 +0000 Manifest next update: Fri 10 Apr 2026 06:38:32 +0000 Files and hashes: 1: 34352e3136332e3139322e302f32322d3234203d3e20323638353537.roa (hash: yJ+X8AmbopY8pA/sN7brL5heSlvBgv7wLK1XuUxSrYI=) 2: B0CA65D9C1CC96DA8D04D527F2AA10BA40DFDFF8.crl (hash: E6Vok8+GFtyrxtIQdy3/rWUufRuP7fA9PY1wxBbzTds=) 3: 323830343a353330343a3a2f33322d3438203d3e20323638353537.roa (hash: wqKlqVL7W+Kb2fvhbIalxcQZ7cEzpbHNTNi30laWQyU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CA9fNmxzRzNNYPQuPtq2dMqbPLc5WisyZpszrLAHCL4f/0/B0CA65D9C1CC96DA8D04D527F2AA10BA40DFDFF8.crl rsync://rpki-repo.registro.br/repo/CA9fNmxzRzNNYPQuPtq2dMqbPLc5WisyZpszrLAHCL4f/0/B0CA65D9C1CC96DA8D04D527F2AA10BA40DFDFF8.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0CA65D9C1CC96DA8D04D527F2AA10BA40DFDFF8.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 10 Apr 2026 06:38:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:11:cc:b3:7f:a4:33:b7:54:9b:1c:64:05:e7:75:d4:fe:ec:4d:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B0CA65D9C1CC96DA8D04D527F2AA10BA40DFDFF8 Validity Not Before: Apr 9 03:55:32 2026 GMT Not After : Apr 10 06:38:32 2026 GMT Subject: CN=2D988EBD27964990A13949292D1355C78A3534A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:af:8c:09:60:01:9d:00:95:7c:f8:22:3a:a1: 31:d0:47:78:ee:99:df:ed:54:f5:1d:cf:ea:b2:84: f8:a1:77:a7:a5:a7:6b:96:9e:d0:98:a8:65:54:0a: a1:d6:4c:f9:29:94:91:e2:b7:18:fc:90:62:4b:40: f4:2e:dd:98:65:a9:43:0d:13:18:a6:cf:be:5c:d3: 17:2b:3a:f1:47:53:78:89:44:e6:af:f0:cf:f8:1b: 97:8f:18:df:f0:fd:5e:b5:c6:14:bd:66:0f:9d:1a: 58:fa:83:f2:ab:44:6c:07:c5:71:a0:87:8c:48:16: 7c:4f:79:af:dd:eb:87:0d:0f:d3:f0:7a:a9:d1:37: 7d:3b:d6:36:a3:20:e6:6e:9c:fe:c7:a7:60:c3:ea: b4:46:1d:0a:a8:36:c3:3d:78:b7:e8:52:c0:8a:ea: fd:6c:d5:78:ff:53:7a:45:98:e1:f9:71:16:d1:04: 98:da:15:69:f4:8c:b5:1d:6d:6b:98:1b:5d:57:a2: 96:75:15:2f:90:a7:10:91:9b:e3:a6:92:a9:12:40: dc:51:3c:96:06:a4:26:24:43:4f:e2:4c:b2:be:3e: f4:b4:28:56:fa:7b:74:21:1a:b3:d7:d0:60:41:fe: b1:00:d3:73:84:db:ad:17:f7:0c:b5:de:93:4e:98: 43:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:98:8E:BD:27:96:49:90:A1:39:49:29:2D:13:55:C7:8A:35:34:A3 X509v3 Authority Key Identifier: keyid:B0:CA:65:D9:C1:CC:96:DA:8D:04:D5:27:F2:AA:10:BA:40:DF:DF:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CA9fNmxzRzNNYPQuPtq2dMqbPLc5WisyZpszrLAHCL4f/0/B0CA65D9C1CC96DA8D04D527F2AA10BA40DFDFF8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0CA65D9C1CC96DA8D04D527F2AA10BA40DFDFF8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CA9fNmxzRzNNYPQuPtq2dMqbPLc5WisyZpszrLAHCL4f/0/B0CA65D9C1CC96DA8D04D527F2AA10BA40DFDFF8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:85:6e:e1:61:1e:b9:67:6a:57:ac:15:49:29:f5:ab:9b:90: d1:ed:b8:ea:45:e0:bd:c8:cb:23:98:8b:b0:55:29:81:bf:fe: 00:fc:ca:c4:a5:2b:ba:24:64:ba:15:88:17:00:ff:37:23:6b: db:3f:d9:a2:69:c4:9a:02:48:08:88:82:0d:bf:1e:06:94:1a: ab:fd:6c:0a:75:91:e9:d4:53:02:41:6f:9c:9f:25:a2:f9:bd: e7:de:9d:b8:46:d2:c5:34:f8:ab:09:b5:83:e1:2f:42:b6:0b: c6:f8:89:f5:6d:75:19:f6:87:d6:60:4a:e8:5c:93:16:fb:2e: 85:d7:52:5f:4c:ca:93:5a:b5:7c:f4:2e:45:fc:d7:8c:2a:d1: e9:4a:df:d9:bc:65:e1:ca:1b:c8:82:ba:14:fb:e8:b1:fb:1c: 7c:09:0d:72:b8:b7:6c:38:36:66:09:d9:35:ce:6f:92:57:c5: 68:b1:bf:f3:08:89:88:b7:2a:3b:37:d1:e3:31:28:b3:be:b4: d1:37:e2:ce:82:1c:5e:9a:87:24:fe:b2:0d:92:76:ce:fc:23: f6:79:aa:9b:62:76:3e:24:7f:7d:ba:a5:b8:d2:42:a8:1b:4c: 56:45:4f:5a:10:28:a7:3e:5c:e7:93:05:6a:60:0a:65:14:51: c9:15:c9:fc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUaBHMs3+kM7dUmxxkBed11P7sTTIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjBDQTY1RDlDMUNDOTZEQThEMDRENTI3RjJBQTEwQkE0 MERGREZGODAeFw0yNjA0MDkwMzU1MzJaFw0yNjA0MTAwNjM4MzJaMDMxMTAvBgNV BAMTKDJEOTg4RUJEMjc5NjQ5OTBBMTM5NDkyOTJEMTM1NUM3OEEzNTM0QTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjr4wJYAGdAJV8+CI6oTHQR3ju md/tVPUdz+qyhPihd6elp2uWntCYqGVUCqHWTPkplJHitxj8kGJLQPQu3ZhlqUMN Eximz75c0xcrOvFHU3iJROav8M/4G5ePGN/w/V61xhS9Zg+dGlj6g/KrRGwHxXGg h4xIFnxPea/d64cND9PweqnRN3071jajIOZunP7Hp2DD6rRGHQqoNsM9eLfoUsCK 6v1s1Xj/U3pFmOH5cRbRBJjaFWn0jLUdbWuYG11XopZ1FS+QpxCRm+OmkqkSQNxR PJYGpCYkQ0/iTLK+PvS0KFb6e3QhGrPX0GBB/rEA03OE260X9wy13pNOmEPjAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQULZiOvSeWSZChOUkpLRNVx4o1NKMwHwYDVR0j BBgwFoAUsMpl2cHMltqNBNUn8qoQukDf3/gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ0E5Zk5teHpSek5OWVBRdVB0cTJkTXFiUExjNVdpc3lacHN6ckxBSENM NGYvMC9CMENBNjVEOUMxQ0M5NkRBOEQwNEQ1MjdGMkFBMTBCQTQwREZERkY4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IwQ0E2NUQ5QzFDQzk2REE4 RDA0RDUyN0YyQUExMEJBNDBERkRGRjguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q0E5Zk5teHpSek5OWVBRdVB0cTJkTXFiUExjNVdpc3lacHN6ckxBSENMNGYvMC9C MENBNjVEOUMxQ0M5NkRBOEQwNEQ1MjdGMkFBMTBCQTQwREZERkY4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAooVu4WEeuWdqV6wVSSn1q5uQ0e246kXgvcjLI5iLsFUpgb/+APzKxKUruiRk uhWIFwD/NyNr2z/ZomnEmgJICIiCDb8eBpQaq/1sCnWR6dRTAkFvnJ8lovm9596d uEbSxTT4qwm1g+EvQrYLxviJ9W11GfaH1mBK6FyTFvsuhddSX0zKk1q1fPQuRfzX jCrR6Urf2bxl4cobyIK6FPvosfscfAkNcri3bDg2ZgnZNc5vklfFaLG/8wiJiLcq OzfR4zEos7600TfizoIcXpqHJP6yDZJ2zvwj9nmqm2J2PiR/fbqluNJCqBtMVkVP WhAopz5c55MFamAKZRRRyRXJ/A== -----END CERTIFICATE-----Generated at Thu Apr 9 15:51:04 2026 by rpki-client