$ rpki-client -vvf rpki-repo.registro.br/repo/5axz5h3iCqtCsN2Eu8sjLGDKDwX9hRhQ2stM2MN2EuQA/0/BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4.mft File: BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4.mft (raw, json) Hash identifier: Kl4zNWkSAtnhnxeSFhgmZ6ApwNvUPTltmJ7Yy0+BPrY= Subject key identifier: 0F:6F:E0:09:D7:A5:DA:9D:25:5D:66:22:47:49:79:57:38:E1:0C:0E Authority key identifier: BD:EA:3E:14:C3:2F:29:AC:82:ED:A1:5B:2D:4E:D1:AD:25:04:FF:A4 Certificate issuer: /CN=BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4 Certificate serial: 1D4B376D824A60BA082BDB1F8D5246C4FD3360C1 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4.cer Subject info access: rsync://rpki-repo.registro.br/repo/5axz5h3iCqtCsN2Eu8sjLGDKDwX9hRhQ2stM2MN2EuQA/0/BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4.mft Manifest number: 03A5 Signing time: Thu 26 Mar 2026 10:22:59 +0000 Manifest this update: Thu 26 Mar 2026 10:17:59 +0000 Manifest next update: Fri 27 Mar 2026 11:07:59 +0000 Files and hashes: 1: BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4.crl (hash: F4BdubMOwNqE0kQLt4qFmeoIT6gZ4mvS7tOL8H7gBsU=) 2: 3138362e3139352e302e302f32302d3234203d3e20323632373334.roa (hash: 25TH8Nx19yip9EasUzX983wihZlY2EEgXhGIBNzEfyQ=) 3: 323830343a353738303a3a2f33322d3438203d3e20323632373334.roa (hash: yNFZBHyDGRYV2QlyPSN2OtoLmiWL4FZRPAEMsVOZrB0=) 4: 3138392e38342e3130362e302f32332d3234203d3e20323632373334.roa (hash: ayttGUuymegq6vSf98rBwELpDST1MxoqdryA36dSPQw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5axz5h3iCqtCsN2Eu8sjLGDKDwX9hRhQ2stM2MN2EuQA/0/BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4.crl rsync://rpki-repo.registro.br/repo/5axz5h3iCqtCsN2Eu8sjLGDKDwX9hRhQ2stM2MN2EuQA/0/BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 27 Mar 2026 11:07:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:4b:37:6d:82:4a:60:ba:08:2b:db:1f:8d:52:46:c4:fd:33:60:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4 Validity Not Before: Mar 26 10:17:59 2026 GMT Not After : Mar 27 11:07:59 2026 GMT Subject: CN=0F6FE009D7A5DA9D255D66224749795738E10C0E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:9e:8f:4d:98:a3:6f:15:84:43:78:7f:d2:f4: bd:49:ca:f1:1e:47:81:f0:f5:6c:c9:29:56:a2:68: 3b:1e:02:be:1d:87:ce:1c:80:cd:1f:d2:a7:fa:f7: 21:59:1f:69:41:19:bf:7f:9f:16:b8:b1:79:51:ad: b0:50:78:de:c2:f7:05:b5:bb:c1:be:14:84:6a:e8: c8:fa:94:eb:c7:ed:51:0a:21:df:eb:bb:b2:2b:0c: 04:5d:26:76:24:fa:3b:a3:1f:f3:f6:66:12:dc:6d: 8a:c9:6e:44:45:80:ae:07:a6:fc:a9:76:c9:70:64: 3c:f9:d9:47:53:b4:53:20:6c:5b:d4:87:5e:5a:92: 33:a9:16:b3:74:59:28:98:a5:69:fd:26:5c:6a:e5: d9:0e:94:ea:3f:cd:02:5e:bc:9d:ee:91:ce:38:c2: 5b:71:48:f3:68:0a:52:f3:73:0f:79:54:55:8a:8c: 50:06:5f:54:b6:0b:cf:61:dc:3f:97:8b:ee:dc:3e: d1:71:96:8c:29:23:48:f4:12:e7:b5:0c:6f:52:dc: e3:96:19:70:61:a2:b4:b7:b5:aa:33:69:f4:38:44: 25:37:20:4a:6c:df:38:1d:45:68:5f:a4:c6:8d:56: 04:a0:6f:47:82:e8:2f:c5:7e:23:fd:be:d0:c6:00: e8:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:6F:E0:09:D7:A5:DA:9D:25:5D:66:22:47:49:79:57:38:E1:0C:0E X509v3 Authority Key Identifier: keyid:BD:EA:3E:14:C3:2F:29:AC:82:ED:A1:5B:2D:4E:D1:AD:25:04:FF:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5axz5h3iCqtCsN2Eu8sjLGDKDwX9hRhQ2stM2MN2EuQA/0/BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5axz5h3iCqtCsN2Eu8sjLGDKDwX9hRhQ2stM2MN2EuQA/0/BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:09:5d:fc:09:5f:77:fd:04:17:7d:cb:3a:5c:13:ff:3c:cc: b2:c5:f9:12:c1:f7:38:a0:9c:7c:8f:ad:08:6b:cb:e5:33:53: 9b:36:67:74:be:84:c0:b2:61:b0:ba:3d:cf:98:0c:7a:54:b0: 40:d5:cf:31:65:56:58:dd:c7:d5:96:bf:4e:14:37:da:de:67: a6:36:d1:c9:a5:15:f0:91:0a:43:ee:f0:56:04:92:4c:06:0e: 31:15:47:ee:fb:4c:92:74:75:84:1d:4c:18:41:f6:8f:de:20: e0:bb:12:ba:7b:4a:08:51:06:8b:78:e4:ac:61:d5:3a:c9:63: 05:c0:b9:2d:fe:fd:2c:fb:d8:b3:75:0c:5f:d8:6e:b7:b5:9a: 5a:1b:da:c3:0b:c5:0c:bc:5d:53:e4:56:2c:46:b0:82:49:bf: 38:7f:ca:56:90:6e:7a:6c:e2:67:95:38:76:c4:ff:dd:79:4c: d9:92:f3:50:8b:91:a6:8e:9d:4c:be:d5:da:84:b4:54:87:f2: e7:99:93:88:73:cd:9f:67:5d:0a:24:d7:05:6a:95:29:e6:2b: 9b:0d:dc:f1:61:cd:ca:37:d8:48:fd:a6:a5:b7:4b:c5:22:12: 3b:92:8d:23:e1:7b:6a:09:0f:62:b3:87:43:98:7d:7b:b4:ff: fa:b4:86:70 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUHUs3bYJKYLoIK9sfjVJGxP0zYMEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkRFQTNFMTRDMzJGMjlBQzgyRURBMTVCMkQ0RUQxQUQy NTA0RkZBNDAeFw0yNjAzMjYxMDE3NTlaFw0yNjAzMjcxMTA3NTlaMDMxMTAvBgNV BAMTKDBGNkZFMDA5RDdBNURBOUQyNTVENjYyMjQ3NDk3OTU3MzhFMTBDMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqno9NmKNvFYRDeH/S9L1JyvEe R4Hw9WzJKVaiaDseAr4dh84cgM0f0qf69yFZH2lBGb9/nxa4sXlRrbBQeN7C9wW1 u8G+FIRq6Mj6lOvH7VEKId/ru7IrDARdJnYk+jujH/P2ZhLcbYrJbkRFgK4Hpvyp dslwZDz52UdTtFMgbFvUh15akjOpFrN0WSiYpWn9Jlxq5dkOlOo/zQJevJ3ukc44 wltxSPNoClLzcw95VFWKjFAGX1S2C89h3D+Xi+7cPtFxlowpI0j0Eue1DG9S3OOW GXBhorS3taozafQ4RCU3IEps3zgdRWhfpMaNVgSgb0eC6C/FfiP9vtDGAOhhAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUD2/gCdel2p0lXWYiR0l5VzjhDA4wHwYDVR0j BBgwFoAUveo+FMMvKayC7aFbLU7RrSUE/6QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNWF4ejVoM2lDcXRDc04yRXU4c2pMR0RLRHdYOWhSaFEyc3RNMk1OMkV1 UUEvMC9CREVBM0UxNEMzMkYyOUFDODJFREExNUIyRDRFRDFBRDI1MDRGRkE0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JERUEzRTE0QzMyRjI5QUM4 MkVEQTE1QjJENEVEMUFEMjUwNEZGQTQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NWF4ejVoM2lDcXRDc04yRXU4c2pMR0RLRHdYOWhSaFEyc3RNMk1OMkV1UUEvMC9C REVBM0UxNEMzMkYyOUFDODJFREExNUIyRDRFRDFBRDI1MDRGRkE0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjwld/Alfd/0EF33LOlwT/zzMssX5EsH3OKCcfI+tCGvL5TNTmzZndL6EwLJh sLo9z5gMelSwQNXPMWVWWN3H1Za/ThQ32t5npjbRyaUV8JEKQ+7wVgSSTAYOMRVH 7vtMknR1hB1MGEH2j94g4LsSuntKCFEGi3jkrGHVOsljBcC5Lf79LPvYs3UMX9hu t7WaWhvawwvFDLxdU+RWLEawgkm/OH/KVpBuemziZ5U4dsT/3XlM2ZLzUIuRpo6d TL7V2oS0VIfy55mTiHPNn2ddCiTXBWqVKeYrmw3c8WHNyjfYSP2mpbdLxSISO5KN I+F7agkPYrOHQ5h9e7T/+rSGcA== -----END CERTIFICATE-----Generated at Thu Mar 26 21:56:44 2026 by rpki-client