$ rpki-client -vvf rpki-repo.registro.br/repo/D22S2fFD3vBiGgDajdav7YNXyxUqjZgW3xexjkVpu2Nm/0/B53BC7F8E9156B14E11D55FD8D358D0A91FCE8E2.mft File: B53BC7F8E9156B14E11D55FD8D358D0A91FCE8E2.mft (raw, json) Hash identifier: 3omW11LNBjUneuBM8BlP4trde7+9aEdPrg5HEJWVc3Y= Subject key identifier: 5F:99:35:DF:CC:55:2F:6D:83:63:F5:EF:DE:C8:15:4D:D9:0F:33:59 Authority key identifier: B5:3B:C7:F8:E9:15:6B:14:E1:1D:55:FD:8D:35:8D:0A:91:FC:E8:E2 Certificate issuer: /CN=B53BC7F8E9156B14E11D55FD8D358D0A91FCE8E2 Certificate serial: 2D106582E8523F9A103946F5828929DAF1F35391 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B53BC7F8E9156B14E11D55FD8D358D0A91FCE8E2.cer Subject info access: rsync://rpki-repo.registro.br/repo/D22S2fFD3vBiGgDajdav7YNXyxUqjZgW3xexjkVpu2Nm/0/B53BC7F8E9156B14E11D55FD8D358D0A91FCE8E2.mft Manifest number: 02B4 Signing time: Thu 09 Apr 2026 03:42:11 +0000 Manifest this update: Thu 09 Apr 2026 03:37:11 +0000 Manifest next update: Fri 10 Apr 2026 06:32:11 +0000 Files and hashes: 1: 3137372e3132382e35322e302f32322d3234203d3e20323730363932.roa (hash: VT2dIpvor0j1YnG2BQMLIN5CUYFFKwD7FsBUY9oYGtM=) 2: 3133312e37322e33362e302f32322d3234203d3e20323730363932.roa (hash: A068GDKE7NVod9t4EYmwsBt9cHKNtqvvzMBnwWxyBC8=) 3: B53BC7F8E9156B14E11D55FD8D358D0A91FCE8E2.crl (hash: iDp+1JfgfW8rUQNE/T4HAYlUb8oDqjrL6n58NqLZ/iY=) 4: 323830343a366665383a3a2f33322d3438203d3e20323730363932.roa (hash: ctYl9J9TTj+GlVTx/djEI8ydQ4q/0hlaqEto9cd0hFQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/D22S2fFD3vBiGgDajdav7YNXyxUqjZgW3xexjkVpu2Nm/0/B53BC7F8E9156B14E11D55FD8D358D0A91FCE8E2.crl rsync://rpki-repo.registro.br/repo/D22S2fFD3vBiGgDajdav7YNXyxUqjZgW3xexjkVpu2Nm/0/B53BC7F8E9156B14E11D55FD8D358D0A91FCE8E2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B53BC7F8E9156B14E11D55FD8D358D0A91FCE8E2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 10 Apr 2026 06:32:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:10:65:82:e8:52:3f:9a:10:39:46:f5:82:89:29:da:f1:f3:53:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B53BC7F8E9156B14E11D55FD8D358D0A91FCE8E2 Validity Not Before: Apr 9 03:37:11 2026 GMT Not After : Apr 10 06:32:11 2026 GMT Subject: CN=5F9935DFCC552F6D8363F5EFDEC8154DD90F3359 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:8d:e5:d6:4f:73:44:cc:0c:e4:5c:46:c3:2b: 1a:0c:67:5f:62:ef:93:12:50:5b:ef:1c:78:ce:f6: 5b:07:73:7b:4d:5a:e9:31:37:92:6d:1d:89:88:cf: af:7d:06:91:97:07:ad:a4:18:f6:24:c3:64:92:bd: 25:b7:61:76:4b:19:1b:6b:02:2e:86:a5:d8:54:52: 7f:a0:f8:dc:f2:d5:3a:69:88:83:68:90:63:12:5b: 41:d7:a6:23:8c:a1:80:ef:2f:f8:a2:d2:00:0b:0a: b9:19:a0:1c:9c:7e:2b:c8:2e:d7:18:a1:03:d4:2a: 3b:4d:f1:a6:a2:41:44:67:31:d6:0f:99:d3:23:1c: 2a:a0:4e:de:1c:98:bd:fb:08:57:d4:32:af:b4:e2: 86:99:97:37:be:f8:72:22:9b:2c:4c:bd:a8:3a:2d: 12:ea:90:24:7a:93:c8:99:4a:5e:bc:65:43:b6:58: 8f:35:c9:19:7e:a2:40:ad:bc:a5:58:40:4b:61:eb: 85:53:1e:50:ff:d7:9d:68:df:61:d6:a7:78:47:cc: e8:c0:92:5d:63:58:8d:6e:ab:6c:ab:85:12:0f:56: 28:ac:46:1c:00:9d:7b:05:6c:ff:b7:12:5d:18:77: 3f:b6:19:51:05:5e:9a:e9:ab:47:25:6b:d4:53:4f: 7a:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:99:35:DF:CC:55:2F:6D:83:63:F5:EF:DE:C8:15:4D:D9:0F:33:59 X509v3 Authority Key Identifier: keyid:B5:3B:C7:F8:E9:15:6B:14:E1:1D:55:FD:8D:35:8D:0A:91:FC:E8:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/D22S2fFD3vBiGgDajdav7YNXyxUqjZgW3xexjkVpu2Nm/0/B53BC7F8E9156B14E11D55FD8D358D0A91FCE8E2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B53BC7F8E9156B14E11D55FD8D358D0A91FCE8E2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/D22S2fFD3vBiGgDajdav7YNXyxUqjZgW3xexjkVpu2Nm/0/B53BC7F8E9156B14E11D55FD8D358D0A91FCE8E2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:9e:e2:ba:2d:aa:78:1f:f6:d3:c4:38:de:b4:01:7f:89:46: e4:29:da:0d:54:10:5c:73:e6:ec:c0:d3:0c:60:5f:47:41:6e: 48:59:91:eb:da:5e:55:7d:b0:08:9d:2b:b8:4b:d7:c3:05:f3: 8d:63:de:a5:35:6a:72:89:c0:80:56:72:84:e4:18:a3:03:3f: 7f:0c:c3:a1:df:80:c6:a4:14:d3:d4:dc:3f:d6:a3:57:e5:37: a9:7c:7f:d9:96:ca:e9:7a:12:e5:1e:d8:4f:46:88:86:12:a2: bc:12:8f:21:74:4b:d1:e8:86:1c:3d:b5:bb:17:3c:27:96:1f: ee:95:d7:70:85:f1:ca:b2:4b:86:22:6c:45:f3:ff:f8:9b:8a: 83:63:78:bf:1e:24:81:df:1d:8c:70:0c:a4:f9:1d:5f:a6:2a: 68:1f:e3:e8:86:a0:8a:c9:d1:a0:33:de:2a:a3:2e:65:f5:0a: b2:49:38:92:78:5c:24:ea:4d:55:29:49:b2:fe:5c:68:e8:15: 3c:10:48:9d:e0:99:d0:e9:de:4c:05:98:b7:29:d5:3b:22:c6: 03:06:55:43:ba:50:bf:ff:70:9c:b0:10:ca:8b:c0:13:5b:27: a0:63:51:1a:79:f2:b7:30:21:44:74:f2:de:bd:05:66:3f:f3: f6:6d:11:33 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIULRBlguhSP5oQOUb1gokp2vHzU5EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjUzQkM3RjhFOTE1NkIxNEUxMUQ1NUZEOEQzNThEMEE5 MUZDRThFMjAeFw0yNjA0MDkwMzM3MTFaFw0yNjA0MTAwNjMyMTFaMDMxMTAvBgNV BAMTKDVGOTkzNURGQ0M1NTJGNkQ4MzYzRjVFRkRFQzgxNTRERDkwRjMzNTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpjeXWT3NEzAzkXEbDKxoMZ19i 75MSUFvvHHjO9lsHc3tNWukxN5JtHYmIz699BpGXB62kGPYkw2SSvSW3YXZLGRtr Ai6GpdhUUn+g+Nzy1TppiINokGMSW0HXpiOMoYDvL/ii0gALCrkZoBycfivILtcY oQPUKjtN8aaiQURnMdYPmdMjHCqgTt4cmL37CFfUMq+04oaZlze++HIimyxMvag6 LRLqkCR6k8iZSl68ZUO2WI81yRl+okCtvKVYQEth64VTHlD/151o32HWp3hHzOjA kl1jWI1uq2yrhRIPViisRhwAnXsFbP+3El0Ydz+2GVEFXprpq0cla9RTT3q9AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUX5k138xVL22DY/Xv3sgVTdkPM1kwHwYDVR0j BBgwFoAUtTvH+OkVaxThHVX9jTWNCpH86OIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRDIyUzJmRkQzdkJpR2dEYWpkYXY3WU5YeXhVcWpaZ1czeGV4amtWcHUy Tm0vMC9CNTNCQzdGOEU5MTU2QjE0RTExRDU1RkQ4RDM1OEQwQTkxRkNFOEUyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I1M0JDN0Y4RTkxNTZCMTRF MTFENTVGRDhEMzU4RDBBOTFGQ0U4RTIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RDIyUzJmRkQzdkJpR2dEYWpkYXY3WU5YeXhVcWpaZ1czeGV4amtWcHUyTm0vMC9C NTNCQzdGOEU5MTU2QjE0RTExRDU1RkQ4RDM1OEQwQTkxRkNFOEUyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAw57iui2qeB/208Q43rQBf4lG5CnaDVQQXHPm7MDTDGBfR0FuSFmR69peVX2w CJ0ruEvXwwXzjWPepTVqconAgFZyhOQYowM/fwzDod+AxqQU09TcP9ajV+U3qXx/ 2ZbK6XoS5R7YT0aIhhKivBKPIXRL0eiGHD21uxc8J5Yf7pXXcIXxyrJLhiJsRfP/ +JuKg2N4vx4kgd8djHAMpPkdX6YqaB/j6IagisnRoDPeKqMuZfUKskk4knhcJOpN VSlJsv5caOgVPBBIneCZ0OneTAWYtynVOyLGAwZVQ7pQv/9wnLAQyovAE1snoGNR GnnytzAhRHTy3r0FZj/z9m0RMw== -----END CERTIFICATE-----Generated at Thu Apr 9 17:59:39 2026 by rpki-client