$ rpki-client -vvf rpki-repo.registro.br/repo/3bc486tcyBavaohWf69oL8BvX2B9ATx5ZPNNTTQp38Rr/0/87C1515490FE85BF094B1C0E37BBEFC5F1D1CA3E.mft File: 87C1515490FE85BF094B1C0E37BBEFC5F1D1CA3E.mft (raw, json) Hash identifier: 9gfF3E1GkWAPMr7YZJtcZludRmCfhKkWl9szgZenSXU= Subject key identifier: B4:BB:2C:B2:8A:44:A5:B3:0E:42:2E:36:86:51:F2:81:6C:1C:35:C1 Authority key identifier: 87:C1:51:54:90:FE:85:BF:09:4B:1C:0E:37:BB:EF:C5:F1:D1:CA:3E Certificate issuer: /CN=87C1515490FE85BF094B1C0E37BBEFC5F1D1CA3E Certificate serial: 525CE86FD4FA44F4F7FA2C7FF2D9419EC1561E1D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87C1515490FE85BF094B1C0E37BBEFC5F1D1CA3E.cer Subject info access: rsync://rpki-repo.registro.br/repo/3bc486tcyBavaohWf69oL8BvX2B9ATx5ZPNNTTQp38Rr/0/87C1515490FE85BF094B1C0E37BBEFC5F1D1CA3E.mft Manifest number: 0B Signing time: Wed 25 Mar 2026 17:03:17 +0000 Manifest this update: Wed 25 Mar 2026 16:58:17 +0000 Manifest next update: Thu 26 Mar 2026 20:29:17 +0000 Files and hashes: 1: 87C1515490FE85BF094B1C0E37BBEFC5F1D1CA3E.crl (hash: Etj0DWg3QurB8VhHKGc7QeYXNpTdm1mSwGl+VTDO7AE=) 2: 323830343a363932633a3a2f33322d313238203d3e20323730323533.roa (hash: LboIQz0zi/k4IskB/yP2xlFTukJ6CKhUQLct7famIfY=) 3: 3230302e3131302e3230342e302f32322d3332203d3e20323730323533.roa (hash: gUDI3nSBdU4gc5uMAM5FcaonB1BYPZEs1KCxwYAH0X8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3bc486tcyBavaohWf69oL8BvX2B9ATx5ZPNNTTQp38Rr/0/87C1515490FE85BF094B1C0E37BBEFC5F1D1CA3E.crl rsync://rpki-repo.registro.br/repo/3bc486tcyBavaohWf69oL8BvX2B9ATx5ZPNNTTQp38Rr/0/87C1515490FE85BF094B1C0E37BBEFC5F1D1CA3E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87C1515490FE85BF094B1C0E37BBEFC5F1D1CA3E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 26 Mar 2026 20:29:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:5c:e8:6f:d4:fa:44:f4:f7:fa:2c:7f:f2:d9:41:9e:c1:56:1e:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87C1515490FE85BF094B1C0E37BBEFC5F1D1CA3E Validity Not Before: Mar 25 16:58:17 2026 GMT Not After : Mar 26 20:29:17 2026 GMT Subject: CN=B4BB2CB28A44A5B30E422E368651F2816C1C35C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:75:18:97:d4:94:d6:26:f9:75:7d:6a:96:3e: c2:7b:bc:52:6d:ba:a8:b2:97:68:8f:d3:87:a8:92: cc:ec:ac:98:f7:fb:f5:aa:59:85:0c:3c:31:d4:d0: e6:3e:b2:93:be:1e:0e:c0:46:72:c3:b0:71:e6:e6: 16:54:b6:5d:41:2e:bc:81:84:04:2d:2e:5a:4f:35: a4:37:8f:24:5d:a8:4b:89:8d:06:15:a0:0b:33:88: 42:ea:25:ce:50:9b:e0:bb:61:a9:dd:b9:54:80:2a: 48:18:b0:fc:e5:71:41:b8:73:63:1e:27:32:e2:f0: fe:24:31:db:c8:c1:f3:00:56:e7:28:8f:87:88:e4: a2:27:d8:90:4e:ff:ff:e8:47:30:29:36:70:fe:64: d9:74:40:59:92:f2:10:e2:e5:bd:92:f9:5c:66:e1: e1:7b:f2:be:07:4f:8a:c0:05:98:c8:36:1e:20:16: 34:b4:54:c9:0c:2f:a7:9d:29:08:d4:a5:e9:77:5b: ab:e1:56:fe:ad:98:ec:6a:7b:2c:eb:51:13:dc:15: 9b:08:24:00:68:42:e4:0c:6b:e7:19:60:f2:38:05: 00:81:d1:10:6e:f1:89:af:bd:77:eb:dd:46:74:3e: 01:c9:74:3c:48:6f:54:0a:e3:95:b7:d0:35:bf:a4: a8:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:BB:2C:B2:8A:44:A5:B3:0E:42:2E:36:86:51:F2:81:6C:1C:35:C1 X509v3 Authority Key Identifier: keyid:87:C1:51:54:90:FE:85:BF:09:4B:1C:0E:37:BB:EF:C5:F1:D1:CA:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3bc486tcyBavaohWf69oL8BvX2B9ATx5ZPNNTTQp38Rr/0/87C1515490FE85BF094B1C0E37BBEFC5F1D1CA3E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87C1515490FE85BF094B1C0E37BBEFC5F1D1CA3E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3bc486tcyBavaohWf69oL8BvX2B9ATx5ZPNNTTQp38Rr/0/87C1515490FE85BF094B1C0E37BBEFC5F1D1CA3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:8d:ad:15:f8:5d:17:78:c1:55:0a:5b:ee:4e:6f:77:f6:05: ab:ca:bf:5f:50:c1:ba:55:f1:d9:30:c5:e5:54:fb:29:f8:af: 35:74:cc:1a:06:b7:60:9f:b3:d3:dd:a9:ff:54:b9:19:34:08: af:d0:e3:88:af:e1:2f:fc:82:68:24:04:aa:65:4a:d9:7c:3a: bf:0a:8a:12:24:5e:26:f1:f7:05:d4:fd:d2:1c:1f:1f:5b:c0: f7:c9:61:1b:de:7f:9a:a3:1b:01:f9:57:2d:a4:a7:2c:fa:f4: b3:3b:9e:67:8a:38:e8:0b:82:d7:de:3a:c1:b1:ab:4e:11:b8: b9:53:8b:03:3d:67:8e:f4:f5:3e:c9:b5:5e:3e:8a:24:bc:c8: 99:cc:c2:be:84:c9:ca:a9:0e:ed:4b:8e:37:82:c8:04:0f:b2: a5:53:0c:cc:dc:95:9d:95:e9:97:b2:eb:6d:77:72:92:c4:70: c2:85:b1:38:fd:9c:75:99:fe:cf:6b:d8:10:40:3c:62:d0:d1: 38:3f:e9:2e:a2:ef:a6:31:31:fa:3b:6b:e9:76:22:f9:1f:f1: 65:2a:ae:b1:d6:b6:74:a2:7f:d1:d7:82:ba:6e:47:3d:23:fe: 20:77:19:58:fb:44:a3:34:12:65:f0:44:4d:68:3e:8e:97:17: b9:5d:6e:3f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUUlzob9T6RPT3+ix/8tlBnsFWHh0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODdDMTUxNTQ5MEZFODVCRjA5NEIxQzBFMzdCQkVGQzVG MUQxQ0EzRTAeFw0yNjAzMjUxNjU4MTdaFw0yNjAzMjYyMDI5MTdaMDMxMTAvBgNV BAMTKEI0QkIyQ0IyOEE0NEE1QjMwRTQyMkUzNjg2NTFGMjgxNkMxQzM1QzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEdRiX1JTWJvl1fWqWPsJ7vFJt uqiyl2iP04eokszsrJj3+/WqWYUMPDHU0OY+spO+Hg7ARnLDsHHm5hZUtl1BLryB hAQtLlpPNaQ3jyRdqEuJjQYVoAsziELqJc5Qm+C7YanduVSAKkgYsPzlcUG4c2Me JzLi8P4kMdvIwfMAVucoj4eI5KIn2JBO///oRzApNnD+ZNl0QFmS8hDi5b2S+Vxm 4eF78r4HT4rABZjINh4gFjS0VMkML6edKQjUpel3W6vhVv6tmOxqeyzrURPcFZsI JABoQuQMa+cZYPI4BQCB0RBu8YmvvXfr3UZ0PgHJdDxIb1QK45W30DW/pKhhAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUtLsssopEpbMOQi42hlHygWwcNcEwHwYDVR0j BBgwFoAUh8FRVJD+hb8JSxwON7vvxfHRyj4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM2JjNDg2dGN5QmF2YW9oV2Y2OW9MOEJ2WDJCOUFUeDVaUE5OVFRRcDM4 UnIvMC84N0MxNTE1NDkwRkU4NUJGMDk0QjFDMEUzN0JCRUZDNUYxRDFDQTNFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg3QzE1MTU0OTBGRTg1QkYw OTRCMUMwRTM3QkJFRkM1RjFEMUNBM0UuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M2JjNDg2dGN5QmF2YW9oV2Y2OW9MOEJ2WDJCOUFUeDVaUE5OVFRRcDM4UnIvMC84 N0MxNTE1NDkwRkU4NUJGMDk0QjFDMEUzN0JCRUZDNUYxRDFDQTNFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMI2tFfhdF3jBVQpb7k5vd/YFq8q/X1DBulXx2TDF5VT7KfivNXTMGga3YJ+z 092p/1S5GTQIr9DjiK/hL/yCaCQEqmVK2Xw6vwqKEiReJvH3BdT90hwfH1vA98lh G95/mqMbAflXLaSnLPr0szueZ4o46AuC1946wbGrThG4uVOLAz1njvT1Psm1Xj6K JLzImczCvoTJyqkO7UuON4LIBA+ypVMMzNyVnZXpl7LrbXdyksRwwoWxOP2cdZn+ z2vYEEA8YtDROD/pLqLvpjEx+jtr6XYi+R/xZSqusda2dKJ/0deCum5HPSP+IHcZ WPtEozQSZfBETWg+jpcXuV1uPw== -----END CERTIFICATE-----Generated at Thu Mar 26 01:14:54 2026 by rpki-client