$ rpki-client -vvf rpki-repo.registro.br/repo/4dBKbGiNo7F2Z7bGBQMse3rrJNXgjNV5KVR2DhGWSKa5/0/BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.mft File: BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.mft (raw, json) Hash identifier: bXyXdN2QFad0OCc9788RpFnWBRdmekzhKaUoyIhpdbI= Subject key identifier: EF:7D:95:8E:32:68:91:1A:E6:51:DF:84:90:F8:FF:86:44:90:77:2A Authority key identifier: BA:57:D2:39:D2:DC:0A:C2:57:37:3A:7B:BA:D5:18:86:AA:5D:4C:46 Certificate issuer: /CN=BA57D239D2DC0AC257373A7BBAD51886AA5D4C46 Certificate serial: 28AA406BA9C633481E31053932EAE3FBD7A9576D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.cer Subject info access: rsync://rpki-repo.registro.br/repo/4dBKbGiNo7F2Z7bGBQMse3rrJNXgjNV5KVR2DhGWSKa5/0/BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.mft Manifest number: 0156 Signing time: Thu 26 Mar 2026 18:23:29 +0000 Manifest this update: Thu 26 Mar 2026 18:18:29 +0000 Manifest next update: Fri 27 Mar 2026 22:19:29 +0000 Files and hashes: 1: 3133382e3138362e31362e302f32322d3234203d3e203631363233.roa (hash: JWwJnqFVLfb7s0xn8ymrfclHa6+SS+4LbQrsuCJSidU=) 2: BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.crl (hash: x9rda3wF+ssOJHmLEODOXoFqa6qfBKFwYWLZW1ZRfKI=) 3: 323830343a393339303a3a2f33322d3438203d3e203631363233.roa (hash: LG7owg69fyxfKV8rigMC7sBkP5B19iTBtW4UQCyl/2Q=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4dBKbGiNo7F2Z7bGBQMse3rrJNXgjNV5KVR2DhGWSKa5/0/BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.crl rsync://rpki-repo.registro.br/repo/4dBKbGiNo7F2Z7bGBQMse3rrJNXgjNV5KVR2DhGWSKa5/0/BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 27 Mar 2026 21:40:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:aa:40:6b:a9:c6:33:48:1e:31:05:39:32:ea:e3:fb:d7:a9:57:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA57D239D2DC0AC257373A7BBAD51886AA5D4C46 Validity Not Before: Mar 26 18:18:29 2026 GMT Not After : Mar 27 22:19:29 2026 GMT Subject: CN=EF7D958E3268911AE651DF8490F8FF864490772A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:c9:3a:be:45:62:5a:66:c5:08:ff:c4:aa:1e: d7:70:3d:a7:2f:ba:00:7e:ad:b2:00:b6:06:36:61: 39:f2:6b:52:84:07:84:94:5b:3c:7c:70:2d:cd:95: 5e:43:19:f5:d2:5c:21:3f:c6:48:db:53:2f:a8:66: d1:bc:6f:03:7e:5a:b4:06:97:e9:82:ec:fb:96:8f: 0d:19:58:ad:38:8b:65:40:c4:e8:91:8c:66:f8:07: ba:3f:ba:42:f1:1b:7e:d5:26:e3:21:82:a5:0d:20: 07:d8:0e:ec:78:fe:91:5a:a8:11:7f:9c:cf:53:cb: b8:af:c3:0a:d1:22:17:73:aa:b9:00:e4:e8:48:02: c8:92:c4:86:be:c2:88:91:66:18:14:56:e3:44:77: 24:0f:41:de:2f:f1:c6:ac:28:7a:28:66:19:2c:89: 8b:f9:58:2f:8d:2b:4d:6b:a7:1b:04:1f:a7:74:d2: 49:20:d1:b7:a7:79:67:91:42:b9:29:b0:7e:c4:c1: dc:2b:43:86:52:e8:86:67:91:f2:11:a2:65:78:bd: 1d:bc:cc:3f:cb:47:69:1f:c4:13:7b:dd:81:77:8b: 39:75:16:f5:d6:e7:5c:e6:61:e4:48:3e:c4:69:eb: 02:cb:5f:da:76:48:c0:25:00:05:3e:d7:1e:07:9f: ee:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:7D:95:8E:32:68:91:1A:E6:51:DF:84:90:F8:FF:86:44:90:77:2A X509v3 Authority Key Identifier: keyid:BA:57:D2:39:D2:DC:0A:C2:57:37:3A:7B:BA:D5:18:86:AA:5D:4C:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4dBKbGiNo7F2Z7bGBQMse3rrJNXgjNV5KVR2DhGWSKa5/0/BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dBKbGiNo7F2Z7bGBQMse3rrJNXgjNV5KVR2DhGWSKa5/0/BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:27:61:80:5c:a4:80:e9:32:7e:cd:20:95:dc:a1:92:70:be: 93:09:1e:39:0d:d9:9f:04:48:ec:d7:9d:57:40:f1:8a:a9:6e: a1:7c:62:e1:e9:2e:67:15:9b:cc:62:55:51:a8:41:38:9a:ae: af:22:3a:99:f3:bc:fe:0e:1c:21:53:4f:53:0a:eb:40:d4:1f: 30:9a:d9:32:aa:2a:42:29:9d:5d:c3:7a:ff:1f:6c:ff:c1:32: 49:bc:7c:f8:bf:5c:61:ca:5b:eb:d6:93:e0:d2:dd:fe:de:a8: f4:f7:ca:6e:8e:21:ea:9a:9e:3c:50:cf:57:1c:a8:69:f2:54: dd:ab:de:eb:82:4b:c4:39:3d:3a:ec:b4:2b:a9:7c:14:1f:a7: 8d:76:b6:c7:e6:e2:41:4f:8f:10:03:fb:ef:59:cc:6c:23:d6: a6:32:2c:4d:0c:7f:b7:2d:d6:1b:46:37:09:b1:99:4c:6d:f4: 6a:84:8f:96:82:b3:12:8c:15:1c:c5:02:2f:3f:a0:7a:1d:03: 4c:91:b1:d2:76:33:39:de:d6:63:92:c3:f4:3e:85:c3:0f:19: a0:e5:99:39:10:4e:f7:ea:e5:c7:64:60:0b:50:10:27:fe:2b: 9b:8a:38:ed:be:16:4a:de:75:2a:fa:63:ff:e4:d8:32:00:f8: e1:bf:a2:b1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUKKpAa6nGM0geMQU5Murj+9epV20wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE1N0QyMzlEMkRDMEFDMjU3MzczQTdCQkFENTE4ODZB QTVENEM0NjAeFw0yNjAzMjYxODE4MjlaFw0yNjAzMjcyMjE5MjlaMDMxMTAvBgNV BAMTKEVGN0Q5NThFMzI2ODkxMUFFNjUxREY4NDkwRjhGRjg2NDQ5MDc3MkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKyTq+RWJaZsUI/8SqHtdwPacv ugB+rbIAtgY2YTnya1KEB4SUWzx8cC3NlV5DGfXSXCE/xkjbUy+oZtG8bwN+WrQG l+mC7PuWjw0ZWK04i2VAxOiRjGb4B7o/ukLxG37VJuMhgqUNIAfYDux4/pFaqBF/ nM9Ty7ivwwrRIhdzqrkA5OhIAsiSxIa+woiRZhgUVuNEdyQPQd4v8casKHooZhks iYv5WC+NK01rpxsEH6d00kkg0beneWeRQrkpsH7EwdwrQ4ZS6IZnkfIRomV4vR28 zD/LR2kfxBN73YF3izl1FvXW51zmYeRIPsRp6wLLX9p2SMAlAAU+1x4Hn+5XAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU732VjjJokRrmUd+EkPj/hkSQdyowHwYDVR0j BBgwFoAUulfSOdLcCsJXNzp7utUYhqpdTEYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNGRCS2JHaU5vN0YyWjdiR0JRTXNlM3JySk5YZ2pOVjVLVlIyRGhHV1NL YTUvMC9CQTU3RDIzOUQyREMwQUMyNTczNzNBN0JCQUQ1MTg4NkFBNUQ0QzQ2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JBNTdEMjM5RDJEQzBBQzI1 NzM3M0E3QkJBRDUxODg2QUE1RDRDNDYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NGRCS2JHaU5vN0YyWjdiR0JRTXNlM3JySk5YZ2pOVjVLVlIyRGhHV1NLYTUvMC9C QTU3RDIzOUQyREMwQUMyNTczNzNBN0JCQUQ1MTg4NkFBNUQ0QzQ2Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEApSdhgFykgOkyfs0gldyhknC+kwkeOQ3ZnwRI7NedV0DxiqluoXxi4ekuZxWb zGJVUahBOJquryI6mfO8/g4cIVNPUwrrQNQfMJrZMqoqQimdXcN6/x9s/8EySbx8 +L9cYcpb69aT4NLd/t6o9PfKbo4h6pqePFDPVxyoafJU3ave64JLxDk9Ouy0K6l8 FB+njXa2x+biQU+PEAP771nMbCPWpjIsTQx/ty3WG0Y3CbGZTG30aoSPloKzEowV HMUCLz+geh0DTJGx0nYzOd7WY5LD9D6Fww8ZoOWZORBO9+rlx2RgC1AQJ/4rm4o4 7b4WSt51Kvpj/+TYMgD44b+isQ== -----END CERTIFICATE-----Generated at Thu Mar 26 21:59:15 2026 by rpki-client