$ rpki-client -vvf rpki-repo.registro.br/repo/5njX5ZywSUYtRVTQyrkAPaCGkjkxTAa7jjPKQbU5GbfP/0/BC456BECD132A9F60B830E34664A12C5374676E9.mft File: BC456BECD132A9F60B830E34664A12C5374676E9.mft (raw, json) Hash identifier: G6b0tpiXK1/0O8svykwy4RHY1u0X17luRM87qXlCmzA= Subject key identifier: F2:73:CF:1E:8A:7A:69:F4:C4:8D:1C:BC:F1:E1:94:4D:F9:35:A0:26 Authority key identifier: BC:45:6B:EC:D1:32:A9:F6:0B:83:0E:34:66:4A:12:C5:37:46:76:E9 Certificate issuer: /CN=BC456BECD132A9F60B830E34664A12C5374676E9 Certificate serial: 6374F76A0A42C78D29C663ABE5FC548AB7FFAEBF Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC456BECD132A9F60B830E34664A12C5374676E9.cer Subject info access: rsync://rpki-repo.registro.br/repo/5njX5ZywSUYtRVTQyrkAPaCGkjkxTAa7jjPKQbU5GbfP/0/BC456BECD132A9F60B830E34664A12C5374676E9.mft Manifest number: 0B Signing time: Wed 25 Mar 2026 18:28:17 +0000 Manifest this update: Wed 25 Mar 2026 18:23:17 +0000 Manifest next update: Thu 26 Mar 2026 18:56:17 +0000 Files and hashes: 1: 323830343a373265343a3a2f33322d313238203d3e20323730383832.roa (hash: YK8XuFhaC4FK6UM/+bgIEo+Qb13aFkBUwzZvAKJHvwE=) 2: 3138362e3139342e342e302f32322d3332203d3e20323730383832.roa (hash: 5X/HGZaJntduB0rloOs2ZkTeac8x0CijUvlHCGu/6ZE=) 3: BC456BECD132A9F60B830E34664A12C5374676E9.crl (hash: Y7Lr7bpAU1lK9kJvqCoUoVGEtrmRxmNWmwksB6Q4PpA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5njX5ZywSUYtRVTQyrkAPaCGkjkxTAa7jjPKQbU5GbfP/0/BC456BECD132A9F60B830E34664A12C5374676E9.crl rsync://rpki-repo.registro.br/repo/5njX5ZywSUYtRVTQyrkAPaCGkjkxTAa7jjPKQbU5GbfP/0/BC456BECD132A9F60B830E34664A12C5374676E9.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC456BECD132A9F60B830E34664A12C5374676E9.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 26 Mar 2026 18:56:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:74:f7:6a:0a:42:c7:8d:29:c6:63:ab:e5:fc:54:8a:b7:ff:ae:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BC456BECD132A9F60B830E34664A12C5374676E9 Validity Not Before: Mar 25 18:23:17 2026 GMT Not After : Mar 26 18:56:17 2026 GMT Subject: CN=F273CF1E8A7A69F4C48D1CBCF1E1944DF935A026 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:6e:af:18:2e:1f:c3:2a:42:16:07:93:69:e2: 8a:1c:84:a9:94:36:0c:e6:8c:2c:7e:db:0a:4a:45: 8a:71:66:10:30:ca:58:db:e9:74:a5:65:6d:5a:95: e2:71:20:39:cd:ed:6a:85:55:2f:de:72:e2:0b:16: 3c:0b:92:d0:54:b9:f0:ff:bd:14:6e:f6:34:26:f3: 53:00:d0:54:60:f0:0f:8f:0b:78:f7:e5:c5:b1:47: 9f:9b:ec:db:04:22:92:4f:69:0e:b6:fd:3b:fe:2c: c8:f9:52:4d:a1:c7:e6:f9:cf:1d:41:5b:2d:26:ae: 16:2f:9b:70:8e:2e:01:40:bb:5a:65:ac:fd:69:43: 19:69:0d:ea:a4:1c:99:41:51:83:25:71:ea:56:4a: 23:f4:b4:55:7c:22:67:a9:b3:eb:56:df:5c:3a:01: 6f:ab:b6:fa:b8:28:b4:d1:cc:8e:75:34:f5:38:ee: c9:03:06:c5:1f:c4:ed:8d:9e:8c:3f:d0:5a:6c:ec: db:49:88:98:bc:3d:54:ca:bb:9d:8c:97:ab:75:75: fc:68:19:2e:81:23:2c:aa:8b:45:96:1f:fd:ac:f3: 78:34:87:c5:fe:e8:1f:10:32:70:f3:18:20:db:a2: c6:0b:38:a3:21:4e:0b:b8:c3:4d:fa:19:e1:7a:9d: 5d:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:73:CF:1E:8A:7A:69:F4:C4:8D:1C:BC:F1:E1:94:4D:F9:35:A0:26 X509v3 Authority Key Identifier: keyid:BC:45:6B:EC:D1:32:A9:F6:0B:83:0E:34:66:4A:12:C5:37:46:76:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5njX5ZywSUYtRVTQyrkAPaCGkjkxTAa7jjPKQbU5GbfP/0/BC456BECD132A9F60B830E34664A12C5374676E9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC456BECD132A9F60B830E34664A12C5374676E9.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5njX5ZywSUYtRVTQyrkAPaCGkjkxTAa7jjPKQbU5GbfP/0/BC456BECD132A9F60B830E34664A12C5374676E9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:ff:4d:75:03:e0:02:a1:71:0f:47:31:d5:b1:89:ed:99:18: 93:66:74:fc:49:5c:0e:5f:95:6b:f4:ac:a4:57:d4:17:1d:43: a1:31:48:94:0f:1a:92:0e:1c:92:ca:25:f8:de:bf:a5:da:73: 4c:5d:94:6f:35:6f:5c:71:93:ba:3b:c6:f5:c7:55:a9:90:34: b2:7e:98:fc:4c:cd:45:c8:33:47:4f:37:14:59:37:fb:8f:80: d9:28:d2:be:43:3b:1d:e0:b7:a8:c3:af:db:ae:10:a5:91:92: 22:30:d8:19:0b:a4:0a:2f:f1:c1:42:4e:52:ea:d3:4f:18:23: e2:0c:ea:ed:c8:8b:d7:ba:4c:f8:32:9d:5d:f3:6b:9d:46:1e: 1e:2d:52:c2:b0:3a:c6:04:3a:2c:0a:7f:01:ed:93:60:a1:98: a9:ab:77:30:0c:5d:1f:c1:7b:52:ea:34:21:ff:a5:9c:80:3e: fd:b6:7f:dd:b9:ee:8f:f3:58:8e:27:08:70:da:4f:be:42:be: 31:51:4c:e8:65:0e:8b:ba:b5:bd:45:18:9c:bc:9e:eb:af:f2: 39:29:31:e6:77:dd:89:c8:e4:3f:8f:ee:31:4a:9e:c0:11:75: fe:30:fc:30:df:06:ae:75:b7:17:3b:ab:71:b0:68:52:7a:e1: cd:fd:d3:a3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUY3T3agpCx40pxmOr5fxUirf/rr8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkM0NTZCRUNEMTMyQTlGNjBCODMwRTM0NjY0QTEyQzUz NzQ2NzZFOTAeFw0yNjAzMjUxODIzMTdaFw0yNjAzMjYxODU2MTdaMDMxMTAvBgNV BAMTKEYyNzNDRjFFOEE3QTY5RjRDNDhEMUNCQ0YxRTE5NDRERjkzNUEwMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/bq8YLh/DKkIWB5Np4oochKmU NgzmjCx+2wpKRYpxZhAwyljb6XSlZW1aleJxIDnN7WqFVS/ecuILFjwLktBUufD/ vRRu9jQm81MA0FRg8A+PC3j35cWxR5+b7NsEIpJPaQ62/Tv+LMj5Uk2hx+b5zx1B Wy0mrhYvm3COLgFAu1plrP1pQxlpDeqkHJlBUYMlcepWSiP0tFV8Imeps+tW31w6 AW+rtvq4KLTRzI51NPU47skDBsUfxO2Nnow/0Fps7NtJiJi8PVTKu52Ml6t1dfxo GS6BIyyqi0WWH/2s83g0h8X+6B8QMnDzGCDbosYLOKMhTgu4w036GeF6nV2/AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU8nPPHop6afTEjRy88eGUTfk1oCYwHwYDVR0j BBgwFoAUvEVr7NEyqfYLgw40ZkoSxTdGdukwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNW5qWDVaeXdTVVl0UlZUUXlya0FQYUNHa2preFRBYTdqalBLUWJVNUdi ZlAvMC9CQzQ1NkJFQ0QxMzJBOUY2MEI4MzBFMzQ2NjRBMTJDNTM3NDY3NkU5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JDNDU2QkVDRDEzMkE5RjYw QjgzMEUzNDY2NEExMkM1Mzc0Njc2RTkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NW5qWDVaeXdTVVl0UlZUUXlya0FQYUNHa2preFRBYTdqalBLUWJVNUdiZlAvMC9C QzQ1NkJFQ0QxMzJBOUY2MEI4MzBFMzQ2NjRBMTJDNTM3NDY3NkU5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVP9NdQPgAqFxD0cx1bGJ7ZkYk2Z0/ElcDl+Va/SspFfUFx1DoTFIlA8akg4c ksol+N6/pdpzTF2UbzVvXHGTujvG9cdVqZA0sn6Y/EzNRcgzR083FFk3+4+A2SjS vkM7HeC3qMOv264QpZGSIjDYGQukCi/xwUJOUurTTxgj4gzq7ciL17pM+DKdXfNr nUYeHi1SwrA6xgQ6LAp/Ae2TYKGYqat3MAxdH8F7Uuo0If+lnIA+/bZ/3bnuj/NY jicIcNpPvkK+MVFM6GUOi7q1vUUYnLye66/yOSkx5nfdicjkP4/uMUqewBF1/jD8 MN8GrnW3FzurcbBoUnrhzf3Tow== -----END CERTIFICATE-----Generated at Thu Mar 26 01:17:47 2026 by rpki-client