$ rpki-client -vvf rpki-repo.registro.br/repo/3jfxaRn6ggQRB9tu7KYyoEpcQ2ybYNAysrHnjEm6WmcR/1/B902C5203BF21D828D72D8FA7CEA8831ADEBE8DD.mft File: B902C5203BF21D828D72D8FA7CEA8831ADEBE8DD.mft (raw, json) Hash identifier: GEWD+6aE0PXXetwgW8LiXISpJWxM2bTXW7RHefFlG4A= Subject key identifier: CA:85:65:AB:0F:85:07:D9:CA:18:D6:0B:A4:25:D6:A5:60:1E:7E:9F Authority key identifier: B9:02:C5:20:3B:F2:1D:82:8D:72:D8:FA:7C:EA:88:31:AD:EB:E8:DD Certificate issuer: /CN=B902C5203BF21D828D72D8FA7CEA8831ADEBE8DD Certificate serial: 3BD791E9F26321CE6C4084C4F7422A1B41DB8F80 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B902C5203BF21D828D72D8FA7CEA8831ADEBE8DD.cer Subject info access: rsync://rpki-repo.registro.br/repo/3jfxaRn6ggQRB9tu7KYyoEpcQ2ybYNAysrHnjEm6WmcR/1/B902C5203BF21D828D72D8FA7CEA8831ADEBE8DD.mft Manifest number: 0272 Signing time: Thu 26 Mar 2026 13:31:56 +0000 Manifest this update: Thu 26 Mar 2026 13:26:56 +0000 Manifest next update: Fri 27 Mar 2026 14:02:56 +0000 Files and hashes: 1: B902C5203BF21D828D72D8FA7CEA8831ADEBE8DD.crl (hash: nCjP0wWpw/y6a/KxDTo8hU9SlhX5RZAIFgr/+LXn6Hc=) 2: 323830343a3735633a3a2f33322d3438203d3e20323632363337.roa (hash: Zm3LjA/oi5udxh1PSUyWaSvBvw9Vt7WojPBVJ4p3OL0=) 3: 3137372e3130352e36342e302f32302d3234203d3e20323632363337.roa (hash: UMDVXaufIU2dtqvwdqDPODbwnK+IyBEgA/HB8d1cgcI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3jfxaRn6ggQRB9tu7KYyoEpcQ2ybYNAysrHnjEm6WmcR/1/B902C5203BF21D828D72D8FA7CEA8831ADEBE8DD.crl rsync://rpki-repo.registro.br/repo/3jfxaRn6ggQRB9tu7KYyoEpcQ2ybYNAysrHnjEm6WmcR/1/B902C5203BF21D828D72D8FA7CEA8831ADEBE8DD.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B902C5203BF21D828D72D8FA7CEA8831ADEBE8DD.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 27 Mar 2026 14:02:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:d7:91:e9:f2:63:21:ce:6c:40:84:c4:f7:42:2a:1b:41:db:8f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B902C5203BF21D828D72D8FA7CEA8831ADEBE8DD Validity Not Before: Mar 26 13:26:56 2026 GMT Not After : Mar 27 14:02:56 2026 GMT Subject: CN=CA8565AB0F8507D9CA18D60BA425D6A5601E7E9F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:fe:38:2d:8a:18:ed:ae:10:f5:51:16:9f:ed: 5f:f5:c8:db:18:87:ec:88:2b:bd:02:6d:fc:a1:53: f5:bf:79:09:9c:50:76:cd:25:44:f3:b5:32:42:b3: 42:8a:11:16:28:87:0e:5f:52:a1:39:44:f0:8f:a5: 7a:a7:aa:e6:a6:0e:60:98:c9:4a:58:87:79:6f:53: 0d:77:98:a1:32:e7:b7:e6:27:96:70:87:54:82:23: 48:9c:8d:92:73:72:f2:9f:d8:5f:79:31:4e:99:06: af:d7:8e:cb:9b:97:6c:f8:ee:70:a9:59:d6:0b:4c: ea:50:ec:a0:02:58:b4:0a:d1:27:bb:37:8a:19:b8: de:96:00:29:8d:c7:c6:55:20:4b:dc:18:fd:4f:9b: 9f:04:a4:59:db:d7:d1:84:34:10:e7:8d:66:3c:54: 8f:67:b1:8b:d7:14:be:1b:d0:db:3a:88:5b:e9:d1: 73:d9:83:c6:10:19:f2:23:10:87:43:5d:6f:06:64: d7:3b:fc:8e:49:9b:d5:ea:4c:b8:2a:f1:7b:cd:92: 9c:ff:46:1d:78:7b:df:0f:c9:3f:a6:96:ed:ab:36: f8:ef:87:5a:e6:0a:b1:f7:2e:f4:30:33:bc:ac:c5: c3:f0:b4:13:45:46:1c:2f:d4:45:a6:f6:ef:98:a4: dd:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:85:65:AB:0F:85:07:D9:CA:18:D6:0B:A4:25:D6:A5:60:1E:7E:9F X509v3 Authority Key Identifier: keyid:B9:02:C5:20:3B:F2:1D:82:8D:72:D8:FA:7C:EA:88:31:AD:EB:E8:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3jfxaRn6ggQRB9tu7KYyoEpcQ2ybYNAysrHnjEm6WmcR/1/B902C5203BF21D828D72D8FA7CEA8831ADEBE8DD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B902C5203BF21D828D72D8FA7CEA8831ADEBE8DD.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3jfxaRn6ggQRB9tu7KYyoEpcQ2ybYNAysrHnjEm6WmcR/1/B902C5203BF21D828D72D8FA7CEA8831ADEBE8DD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d2:3b:42:6f:f8:9c:54:23:86:97:5b:41:f8:1a:f4:dd:dc:ef: 65:36:89:42:94:b1:2f:1d:96:d5:50:35:a2:94:4a:e3:a0:e2: 1e:c5:e1:fb:98:12:e0:5e:61:af:9a:47:e2:44:cd:13:ab:9b: 3d:9a:38:e9:54:b6:3a:7a:b3:f6:03:5f:85:75:e6:b7:48:95: 3c:ac:bf:7f:c5:e4:5a:6e:68:98:0a:84:bd:48:14:68:fd:ce: 44:a3:8f:9d:0e:6c:f7:c5:bf:5f:aa:18:27:b1:9c:55:4e:be: 58:46:f6:3e:c7:7e:1b:be:ad:71:2d:d0:89:31:b9:71:86:9a: c5:9d:9b:fc:28:dd:a4:e1:f3:b0:8a:97:17:29:81:d3:cd:91: f7:f2:7c:5c:86:f8:99:cc:5b:06:3d:4c:64:e5:21:d4:9c:97: 77:65:20:75:42:a4:28:16:c0:99:68:fc:b2:56:8d:aa:71:bc: cc:43:e0:fd:b1:5b:06:c8:3d:35:95:e4:e8:88:62:f1:78:c4: ca:6d:7b:e4:9a:54:e9:f1:40:5d:1f:d5:0b:e7:57:6c:74:d8: 93:ae:61:f4:60:e7:73:e0:ff:44:67:3d:e8:b8:da:12:9d:cc: 2e:e2:1d:c6:19:03:6d:ee:50:d6:e9:bb:09:0d:87:c9:b3:f7: 25:a8:a2:41 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUO9eR6fJjIc5sQITE90IqG0Hbj4AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjkwMkM1MjAzQkYyMUQ4MjhENzJEOEZBN0NFQTg4MzFB REVCRThERDAeFw0yNjAzMjYxMzI2NTZaFw0yNjAzMjcxNDAyNTZaMDMxMTAvBgNV BAMTKENBODU2NUFCMEY4NTA3RDlDQTE4RDYwQkE0MjVENkE1NjAxRTdFOUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe/jgtihjtrhD1URaf7V/1yNsY h+yIK70CbfyhU/W/eQmcUHbNJUTztTJCs0KKERYohw5fUqE5RPCPpXqnquamDmCY yUpYh3lvUw13mKEy57fmJ5Zwh1SCI0icjZJzcvKf2F95MU6ZBq/Xjsubl2z47nCp WdYLTOpQ7KACWLQK0Se7N4oZuN6WACmNx8ZVIEvcGP1Pm58EpFnb19GENBDnjWY8 VI9nsYvXFL4b0Ns6iFvp0XPZg8YQGfIjEIdDXW8GZNc7/I5Jm9XqTLgq8XvNkpz/ Rh14e98PyT+mlu2rNvjvh1rmCrH3LvQwM7ysxcPwtBNFRhwv1EWm9u+YpN1dAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUyoVlqw+FB9nKGNYLpCXWpWAefp8wHwYDVR0j BBgwFoAUuQLFIDvyHYKNctj6fOqIMa3r6N0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM2pmeGFSbjZnZ1FSQjl0dTdLWXlvRXBjUTJ5YllOQXlzckhuakVtNldt Y1IvMS9COTAyQzUyMDNCRjIxRDgyOEQ3MkQ4RkE3Q0VBODgzMUFERUJFOERELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I5MDJDNTIwM0JGMjFEODI4 RDcyRDhGQTdDRUE4ODMxQURFQkU4REQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M2pmeGFSbjZnZ1FSQjl0dTdLWXlvRXBjUTJ5YllOQXlzckhuakVtNldtY1IvMS9C OTAyQzUyMDNCRjIxRDgyOEQ3MkQ4RkE3Q0VBODgzMUFERUJFOERELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEA0jtCb/icVCOGl1tB+Br03dzvZTaJQpSxLx2W1VA1opRK46DiHsXh+5gS4F5h r5pH4kTNE6ubPZo46VS2Onqz9gNfhXXmt0iVPKy/f8XkWm5omAqEvUgUaP3ORKOP nQ5s98W/X6oYJ7GcVU6+WEb2Psd+G76tcS3QiTG5cYaaxZ2b/CjdpOHzsIqXFymB 082R9/J8XIb4mcxbBj1MZOUh1JyXd2UgdUKkKBbAmWj8slaNqnG8zEPg/bFbBsg9 NZXk6Ihi8XjEym175JpU6fFAXR/VC+dXbHTYk65h9GDnc+D/RGc96LjaEp3MLuId xhkDbe5Q1um7CQ2HybP3JaiiQQ== -----END CERTIFICATE-----Generated at Thu Mar 26 21:41:18 2026 by rpki-client