$ rpki-client -vvf rpki-repo.registro.br/repo/6RgXqYhRSsfPxhizAjEoVWZtffod3YjweuLmUNm888Qs/0/B253A5EB1FF32AC3DF9567B9626735A6DB01CE4B.mft File: B253A5EB1FF32AC3DF9567B9626735A6DB01CE4B.mft (raw, json) Hash identifier: zSnMrCCxxPoyVst9WJVSpQtGWrCx5CF8s6fnSD6yGVU= Subject key identifier: 58:56:87:1E:D3:3E:94:26:27:72:E6:78:5C:7A:26:76:49:B0:72:39 Authority key identifier: B2:53:A5:EB:1F:F3:2A:C3:DF:95:67:B9:62:67:35:A6:DB:01:CE:4B Certificate issuer: /CN=B253A5EB1FF32AC3DF9567B9626735A6DB01CE4B Certificate serial: 76DBCBDCE21EB500A7CD29D432782635A50605FC Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B253A5EB1FF32AC3DF9567B9626735A6DB01CE4B.cer Subject info access: rsync://rpki-repo.registro.br/repo/6RgXqYhRSsfPxhizAjEoVWZtffod3YjweuLmUNm888Qs/0/B253A5EB1FF32AC3DF9567B9626735A6DB01CE4B.mft Manifest number: 3E Signing time: Wed 25 Mar 2026 21:14:08 +0000 Manifest this update: Wed 25 Mar 2026 21:09:08 +0000 Manifest next update: Thu 26 Mar 2026 23:23:08 +0000 Files and hashes: 1: B253A5EB1FF32AC3DF9567B9626735A6DB01CE4B.crl (hash: gV8zzFipWh7bGghK6aTtADQY/tAhAJpHEYIvanYii/Q=) 2: 3137372e38372e36382e302f32322d3234203d3e203532353931.roa (hash: 31Q2y/0x14D0FuDzXlOAgytjCmGKSXE8CoGGBPUA/GM=) 3: 323830343a336234383a3a2f33322d3438203d3e203532353931.roa (hash: JmsFyPGKQEC+Vb2+/NBHj02xN6ulT3TWC6bkxClZNlE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/6RgXqYhRSsfPxhizAjEoVWZtffod3YjweuLmUNm888Qs/0/B253A5EB1FF32AC3DF9567B9626735A6DB01CE4B.crl rsync://rpki-repo.registro.br/repo/6RgXqYhRSsfPxhizAjEoVWZtffod3YjweuLmUNm888Qs/0/B253A5EB1FF32AC3DF9567B9626735A6DB01CE4B.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B253A5EB1FF32AC3DF9567B9626735A6DB01CE4B.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 26 Mar 2026 23:23:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:db:cb:dc:e2:1e:b5:00:a7:cd:29:d4:32:78:26:35:a5:06:05:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B253A5EB1FF32AC3DF9567B9626735A6DB01CE4B Validity Not Before: Mar 25 21:09:08 2026 GMT Not After : Mar 26 23:23:08 2026 GMT Subject: CN=5856871ED33E94262772E6785C7A267649B07239 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a2:b3:bf:44:d1:ac:bc:84:a8:9a:3f:61:66: ba:fa:0b:86:c6:b7:01:d9:e6:0a:cb:d1:a4:fc:7e: b4:a9:ee:18:d8:24:50:82:84:14:81:a7:63:f2:ec: 41:a6:e7:5b:55:bf:f9:12:a1:78:e3:9f:4e:c5:31: db:e6:cf:c1:18:52:79:49:e2:de:72:a3:94:ce:79: 7e:cf:cf:b5:a2:c3:85:bd:7b:01:78:4b:57:9e:c7: 93:e4:bc:8a:94:7a:9a:50:51:2c:bc:ac:7a:4e:c8: 07:a4:ad:a6:99:6b:c4:95:6f:22:89:2e:00:d0:ae: 3c:7f:d0:c2:e8:ea:c2:ac:67:35:a5:e0:09:16:b7: b9:97:0d:73:a4:31:2f:f7:63:fe:1a:a6:a9:18:10: 15:73:cb:dd:7f:d4:d1:b4:2f:5a:4d:e8:74:bd:dc: 95:55:c2:b1:1a:66:5f:8d:ec:40:a4:a3:de:13:54: 4b:6b:57:13:47:28:0e:30:9c:19:a1:7e:71:5a:bf: ab:c9:2a:ea:1c:d6:27:7b:a0:bd:77:50:31:11:cf: f1:9c:65:d2:4d:74:8f:29:6b:92:db:c1:e4:24:7d: 2c:06:eb:bd:b9:05:61:54:43:56:9e:4a:36:4f:d3: fa:70:07:6e:9d:2f:eb:e6:65:66:e6:4e:6f:00:ce: de:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:56:87:1E:D3:3E:94:26:27:72:E6:78:5C:7A:26:76:49:B0:72:39 X509v3 Authority Key Identifier: keyid:B2:53:A5:EB:1F:F3:2A:C3:DF:95:67:B9:62:67:35:A6:DB:01:CE:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/6RgXqYhRSsfPxhizAjEoVWZtffod3YjweuLmUNm888Qs/0/B253A5EB1FF32AC3DF9567B9626735A6DB01CE4B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B253A5EB1FF32AC3DF9567B9626735A6DB01CE4B.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/6RgXqYhRSsfPxhizAjEoVWZtffod3YjweuLmUNm888Qs/0/B253A5EB1FF32AC3DF9567B9626735A6DB01CE4B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:1f:29:dc:0d:d9:ea:e0:db:a2:c1:28:c9:72:71:84:e2:ba: c0:cb:8c:63:4a:39:36:80:23:65:9d:c3:04:38:88:1e:40:f7: 32:0c:70:d7:49:cf:e8:a2:7d:65:64:62:f7:d1:2e:e8:a5:11: b9:cc:9f:99:25:58:77:3b:22:15:92:64:ae:81:8e:11:e3:25: 46:d5:d1:1d:09:4a:26:11:ba:e3:67:8f:32:c0:c9:fc:d1:13: 39:bd:eb:9f:4f:06:43:71:11:d7:16:5f:6b:a5:5f:88:27:d3: 0b:b9:65:f5:ed:5e:1e:0b:ed:6f:02:48:d8:73:2f:0f:f3:9a: 33:d5:b8:bf:b6:1b:93:f3:eb:1e:e9:5a:92:85:e3:da:d2:11: eb:f4:ea:d7:bf:eb:9f:80:e9:c1:42:2e:81:3c:07:7b:a2:74: 65:9f:c2:45:26:3b:43:18:ae:a5:2a:ba:e1:d2:f2:e4:8a:d3: 5d:d5:c5:3a:2d:20:31:1b:9a:58:66:22:9a:9d:4c:2d:cf:63: 92:74:c9:3a:82:bf:ec:50:6f:36:46:52:ce:2e:e8:09:ab:d9: 07:77:05:9f:4b:b8:1b:80:d4:07:21:56:9e:c1:6c:bc:39:4f: 0a:c5:7b:30:ac:cc:91:d2:04:12:f0:11:89:e8:20:2c:f6:51: 13:71:b6:7c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUdtvL3OIetQCnzSnUMngmNaUGBfwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjI1M0E1RUIxRkYzMkFDM0RGOTU2N0I5NjI2NzM1QTZE QjAxQ0U0QjAeFw0yNjAzMjUyMTA5MDhaFw0yNjAzMjYyMzIzMDhaMDMxMTAvBgNV BAMTKDU4NTY4NzFFRDMzRTk0MjYyNzcyRTY3ODVDN0EyNjc2NDlCMDcyMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4orO/RNGsvISomj9hZrr6C4bG twHZ5grL0aT8frSp7hjYJFCChBSBp2Py7EGm51tVv/kSoXjjn07FMdvmz8EYUnlJ 4t5yo5TOeX7Pz7Wiw4W9ewF4S1eex5PkvIqUeppQUSy8rHpOyAekraaZa8SVbyKJ LgDQrjx/0MLo6sKsZzWl4AkWt7mXDXOkMS/3Y/4apqkYEBVzy91/1NG0L1pN6HS9 3JVVwrEaZl+N7ECko94TVEtrVxNHKA4wnBmhfnFav6vJKuoc1id7oL13UDERz/Gc ZdJNdI8pa5LbweQkfSwG6725BWFUQ1aeSjZP0/pwB26dL+vmZWbmTm8Azt53AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUWFaHHtM+lCYncuZ4XHomdkmwcjkwHwYDVR0j BBgwFoAUslOl6x/zKsPflWe5Ymc1ptsBzkswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNlJnWHFZaFJTc2ZQeGhpekFqRW9WV1p0ZmZvZDNZandldUxtVU5tODg4 UXMvMC9CMjUzQTVFQjFGRjMyQUMzREY5NTY3Qjk2MjY3MzVBNkRCMDFDRTRCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IyNTNBNUVCMUZGMzJBQzNE Rjk1NjdCOTYyNjczNUE2REIwMUNFNEIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NlJnWHFZaFJTc2ZQeGhpekFqRW9WV1p0ZmZvZDNZandldUxtVU5tODg4UXMvMC9C MjUzQTVFQjFGRjMyQUMzREY5NTY3Qjk2MjY3MzVBNkRCMDFDRTRCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOh8p3A3Z6uDbosEoyXJxhOK6wMuMY0o5NoAjZZ3DBDiIHkD3Mgxw10nP6KJ9 ZWRi99Eu6KURucyfmSVYdzsiFZJkroGOEeMlRtXRHQlKJhG642ePMsDJ/NETOb3r n08GQ3ER1xZfa6VfiCfTC7ll9e1eHgvtbwJI2HMvD/OaM9W4v7Ybk/PrHulakoXj 2tIR6/Tq17/rn4DpwUIugTwHe6J0ZZ/CRSY7QxiupSq64dLy5IrTXdXFOi0gMRua WGYimp1MLc9jknTJOoK/7FBvNkZSzi7oCavZB3cFn0u4G4DUByFWnsFsvDlPCsV7 MKzMkdIEEvARieggLPZRE3G2fA== -----END CERTIFICATE-----Generated at Thu Mar 26 02:39:09 2026 by rpki-client