$ rpki-client -vvf rpki-repo.registro.br/repo/2iLVcSZJcuX1bTGeniYv9RW4E9aEgB1ANg8TAr1moVtH/0/5BA4DDBBE974E5C2A25A952BF4431147F1D195BD.mft File: 5BA4DDBBE974E5C2A25A952BF4431147F1D195BD.mft (raw, json) Hash identifier: 1JOM3zK3PXaR7EH9iJNMGQDY2L7q03WjNvMF2Tr0a+U= Subject key identifier: CC:A6:8F:20:10:32:F4:A2:F6:70:FA:42:7D:9A:02:50:A0:CD:4D:A0 Authority key identifier: 5B:A4:DD:BB:E9:74:E5:C2:A2:5A:95:2B:F4:43:11:47:F1:D1:95:BD Certificate issuer: /CN=5BA4DDBBE974E5C2A25A952BF4431147F1D195BD Certificate serial: 4CCA38A3C822FC320E05D9EAFB5377573BD25D36 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BA4DDBBE974E5C2A25A952BF4431147F1D195BD.cer Subject info access: rsync://rpki-repo.registro.br/repo/2iLVcSZJcuX1bTGeniYv9RW4E9aEgB1ANg8TAr1moVtH/0/5BA4DDBBE974E5C2A25A952BF4431147F1D195BD.mft Manifest number: 0228 Signing time: Wed 25 Mar 2026 21:54:44 +0000 Manifest this update: Wed 25 Mar 2026 21:49:44 +0000 Manifest next update: Thu 26 Mar 2026 22:22:44 +0000 Files and hashes: 1: 3230312e3138322e3137362e302f32322d3332203d3e20323637353238.roa (hash: co898g/e6gpNmTwkvo7w+mddSVtU8rvkvoxnhxCBmvQ=) 2: 5BA4DDBBE974E5C2A25A952BF4431147F1D195BD.crl (hash: 5RaeP+dcb4Se2fEAPMtrtMlwM0XnKO3dsBB6oA/o72E=) 3: 323830343a343263633a3a2f33322d313238203d3e20323637353238.roa (hash: PIlRQltrUdhiGTMrlNBLmA0cy+LED9T3Iu4ZRFUOcso=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2iLVcSZJcuX1bTGeniYv9RW4E9aEgB1ANg8TAr1moVtH/0/5BA4DDBBE974E5C2A25A952BF4431147F1D195BD.crl rsync://rpki-repo.registro.br/repo/2iLVcSZJcuX1bTGeniYv9RW4E9aEgB1ANg8TAr1moVtH/0/5BA4DDBBE974E5C2A25A952BF4431147F1D195BD.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BA4DDBBE974E5C2A25A952BF4431147F1D195BD.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 26 Mar 2026 22:22:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:ca:38:a3:c8:22:fc:32:0e:05:d9:ea:fb:53:77:57:3b:d2:5d:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5BA4DDBBE974E5C2A25A952BF4431147F1D195BD Validity Not Before: Mar 25 21:49:44 2026 GMT Not After : Mar 26 22:22:44 2026 GMT Subject: CN=CCA68F201032F4A2F670FA427D9A0250A0CD4DA0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:c3:3b:e6:aa:9c:d4:b7:cd:09:b2:7b:7b:ab: 90:fe:52:3f:4c:d6:bc:22:52:9d:e6:6a:9e:6f:69: 7b:3e:06:18:0a:b1:88:6c:b5:f3:5c:73:ba:bb:01: 5e:7a:a2:d6:15:8d:74:39:8a:34:8d:b7:43:c6:ed: dd:fe:b0:60:41:1d:0a:19:ab:9e:e9:0c:68:ad:83: 6d:c6:6b:6a:d8:9d:ee:f5:91:48:cb:b9:7d:c0:d2: 56:32:80:a3:87:45:fd:f8:5b:0e:28:71:dd:16:02: cc:e0:e7:d5:6a:de:37:6b:c0:9b:2c:9e:c0:60:f8: 9d:a4:0d:e1:c0:5b:d6:f0:7d:ad:ad:07:57:6c:93: 70:ea:a0:64:bc:16:b0:4f:71:4d:f0:78:1b:e1:ff: 82:5b:04:6a:b0:ef:4b:41:bf:b5:1c:03:32:9b:e0: e3:fc:fa:aa:24:18:59:a7:d7:b1:fb:80:d7:ec:b9: 85:e9:2d:92:a0:83:79:40:e1:24:07:1c:c4:7f:5a: e4:aa:68:09:01:ab:11:55:54:55:f5:de:42:a7:9e: 13:2c:16:1c:35:1c:dd:51:25:f5:ee:92:5d:91:ce: b0:14:33:dd:79:6e:4d:9c:e5:7b:27:2a:a9:e5:aa: 98:5b:f4:b5:38:98:4c:a1:82:a5:0d:4b:1c:55:0b: a8:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:A6:8F:20:10:32:F4:A2:F6:70:FA:42:7D:9A:02:50:A0:CD:4D:A0 X509v3 Authority Key Identifier: keyid:5B:A4:DD:BB:E9:74:E5:C2:A2:5A:95:2B:F4:43:11:47:F1:D1:95:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2iLVcSZJcuX1bTGeniYv9RW4E9aEgB1ANg8TAr1moVtH/0/5BA4DDBBE974E5C2A25A952BF4431147F1D195BD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BA4DDBBE974E5C2A25A952BF4431147F1D195BD.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2iLVcSZJcuX1bTGeniYv9RW4E9aEgB1ANg8TAr1moVtH/0/5BA4DDBBE974E5C2A25A952BF4431147F1D195BD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:90:65:ae:79:2f:f5:9d:ce:2f:fd:12:1c:56:77:66:40:93: b4:5e:ae:e8:30:bf:2c:f5:ae:84:7e:e2:dc:61:1a:d6:6e:e8: 4d:76:3e:71:52:6d:4b:8e:aa:7b:b1:00:b1:24:cd:7e:9f:2a: d1:5a:04:1e:d7:80:14:b8:42:09:c3:d7:2c:d9:86:ef:1c:f6: d7:24:08:b4:c5:a5:df:3e:d3:19:f3:4d:e2:ec:a7:7c:d9:ba: e0:7c:a2:e8:78:eb:cd:1d:f4:22:31:0e:74:73:fd:58:4f:2a: ee:15:b7:c1:a3:7b:3e:8e:f7:94:cc:16:82:a0:d8:79:9a:77: ac:b4:e2:86:22:b6:0b:93:44:5d:b1:0e:d0:1f:21:09:f6:32: 49:d0:5c:3d:c9:c2:ea:dc:92:d3:3d:b6:61:fc:ce:70:cd:80: 18:94:ce:ad:90:97:9d:00:69:49:98:dc:6a:9a:f7:23:4b:71: a7:47:94:9b:77:ae:22:b9:35:e2:78:de:de:1b:31:dd:5f:01: 1a:7b:ab:98:ee:05:f0:cb:86:e9:1d:2d:31:89:f0:2b:e1:4d: 3a:49:e1:0a:98:59:57:ba:88:ba:f2:e5:bc:c9:48:7f:75:59: e1:e4:ba:4b:bc:52:67:d4:82:62:a3:9b:74:de:2e:15:b8:9e: b3:51:04:f9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUTMo4o8gi/DIOBdnq+1N3VzvSXTYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUJBNEREQkJFOTc0RTVDMkEyNUE5NTJCRjQ0MzExNDdG MUQxOTVCRDAeFw0yNjAzMjUyMTQ5NDRaFw0yNjAzMjYyMjIyNDRaMDMxMTAvBgNV BAMTKENDQTY4RjIwMTAzMkY0QTJGNjcwRkE0MjdEOUEwMjUwQTBDRDREQTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSwzvmqpzUt80Jsnt7q5D+Uj9M 1rwiUp3map5vaXs+BhgKsYhstfNcc7q7AV56otYVjXQ5ijSNt0PG7d3+sGBBHQoZ q57pDGitg23Ga2rYne71kUjLuX3A0lYygKOHRf34Ww4ocd0WAszg59Vq3jdrwJss nsBg+J2kDeHAW9bwfa2tB1dsk3DqoGS8FrBPcU3weBvh/4JbBGqw70tBv7UcAzKb 4OP8+qokGFmn17H7gNfsuYXpLZKgg3lA4SQHHMR/WuSqaAkBqxFVVFX13kKnnhMs Fhw1HN1RJfXukl2RzrAUM915bk2c5XsnKqnlqphb9LU4mEyhgqUNSxxVC6ihAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUzKaPIBAy9KL2cPpCfZoCUKDNTaAwHwYDVR0j BBgwFoAUW6Tdu+l05cKiWpUr9EMRR/HRlb0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMmlMVmNTWkpjdVgxYlRHZW5pWXY5Ulc0RTlhRWdCMUFOZzhUQXIxbW9W dEgvMC81QkE0RERCQkU5NzRFNUMyQTI1QTk1MkJGNDQzMTE0N0YxRDE5NUJELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVCQTREREJCRTk3NEU1QzJB MjVBOTUyQkY0NDMxMTQ3RjFEMTk1QkQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MmlMVmNTWkpjdVgxYlRHZW5pWXY5Ulc0RTlhRWdCMUFOZzhUQXIxbW9WdEgvMC81 QkE0RERCQkU5NzRFNUMyQTI1QTk1MkJGNDQzMTE0N0YxRDE5NUJELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqZBlrnkv9Z3OL/0SHFZ3ZkCTtF6u6DC/LPWuhH7i3GEa1m7oTXY+cVJtS46q e7EAsSTNfp8q0VoEHteAFLhCCcPXLNmG7xz21yQItMWl3z7TGfNN4uynfNm64Hyi 6HjrzR30IjEOdHP9WE8q7hW3waN7Po73lMwWgqDYeZp3rLTihiK2C5NEXbEO0B8h CfYySdBcPcnC6tyS0z22YfzOcM2AGJTOrZCXnQBpSZjcapr3I0txp0eUm3euIrk1 4nje3hsx3V8BGnurmO4F8MuG6R0tMYnwK+FNOknhCphZV7qIuvLlvMlIf3VZ4eS6 S7xSZ9SCYqObdN4uFbies1EE+Q== -----END CERTIFICATE-----Generated at Thu Mar 26 01:24:56 2026 by rpki-client