$ rpki-client -vvf rpki-repo.registro.br/repo/6wNw2ibxMVk7MGcMThmo5cf6b9LCczbbFvZx949fRg1i/2/2BB5947B3EB2252DC2C28A1F5F856123260036FE.mft File: 2BB5947B3EB2252DC2C28A1F5F856123260036FE.mft (raw, json) Hash identifier: p2+vkVru2vovJc7OsKTbtKJFacaD6dTrn9/SOj0dsh0= Subject key identifier: EF:D4:FC:10:67:6B:D4:D7:C8:26:E4:20:C5:A9:2C:B8:29:E1:88:BB Authority key identifier: 2B:B5:94:7B:3E:B2:25:2D:C2:C2:8A:1F:5F:85:61:23:26:00:36:FE Certificate issuer: /CN=2BB5947B3EB2252DC2C28A1F5F856123260036FE Certificate serial: 0F827A41B42F0002B82537B60F283F51084DED0B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB5947B3EB2252DC2C28A1F5F856123260036FE.cer Subject info access: rsync://rpki-repo.registro.br/repo/6wNw2ibxMVk7MGcMThmo5cf6b9LCczbbFvZx949fRg1i/2/2BB5947B3EB2252DC2C28A1F5F856123260036FE.mft Manifest number: 03C1 Signing time: Wed 25 Mar 2026 21:27:05 +0000 Manifest this update: Wed 25 Mar 2026 21:22:05 +0000 Manifest next update: Thu 26 Mar 2026 22:35:05 +0000 Files and hashes: 1: 323830343a363436633a3a2f33322d3430203d3e20323639343237.roa (hash: 0yHNZRU/rOPWIWeTxxQK8crAOr43TecNrQxrFYd2xzM=) 2: 2BB5947B3EB2252DC2C28A1F5F856123260036FE.crl (hash: 704f469BqlB4o2mW+g/rOYAP377ezASIUNaOHElaMXk=) 3: 34352e3138352e36342e302f32322d3234203d3e20323639343237.roa (hash: cLWZH7fF8LrQwdp/Zg/1jWkVLX85FPQY0a4ML8PtgLo=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/6wNw2ibxMVk7MGcMThmo5cf6b9LCczbbFvZx949fRg1i/2/2BB5947B3EB2252DC2C28A1F5F856123260036FE.crl rsync://rpki-repo.registro.br/repo/6wNw2ibxMVk7MGcMThmo5cf6b9LCczbbFvZx949fRg1i/2/2BB5947B3EB2252DC2C28A1F5F856123260036FE.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB5947B3EB2252DC2C28A1F5F856123260036FE.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 26 Mar 2026 22:35:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:82:7a:41:b4:2f:00:02:b8:25:37:b6:0f:28:3f:51:08:4d:ed:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2BB5947B3EB2252DC2C28A1F5F856123260036FE Validity Not Before: Mar 25 21:22:05 2026 GMT Not After : Mar 26 22:35:05 2026 GMT Subject: CN=EFD4FC10676BD4D7C826E420C5A92CB829E188BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:c7:c9:91:69:23:4e:8f:b1:e4:f6:03:6f:ec: 3f:da:a8:74:1a:71:7a:a2:28:91:4b:ba:b5:7b:3d: f0:56:05:0c:ee:9a:de:48:8b:34:22:8d:31:1c:71: 26:a5:b6:95:0f:88:61:70:be:7b:f1:a5:53:c8:8b: 18:06:7f:6f:2d:e5:cf:b1:13:3a:21:ac:02:21:6c: 28:23:bd:8a:fa:72:16:fe:c5:ee:b3:74:a3:aa:ec: 81:31:82:6d:c2:45:62:44:8a:24:61:ea:57:51:e0: 8d:e2:c9:66:70:e1:5e:4b:a1:73:13:2a:58:e9:d1: 53:fb:4b:4d:7b:46:31:64:a0:70:36:6c:60:af:69: 34:96:51:b3:d8:dd:b4:c5:4b:4b:3e:7a:4f:ce:fc: 9b:7a:64:b4:86:17:7c:14:3b:15:30:69:3e:b0:10: 61:f1:7f:ef:16:97:00:4b:2a:0b:f0:cc:fb:95:06: 68:4e:28:19:7a:bb:0f:10:e3:16:ef:86:a4:dd:2b: fa:4a:27:8c:97:38:9c:70:4e:78:52:4b:bf:69:4f: ce:7a:ea:50:83:78:27:04:9c:e6:88:c3:70:8e:f3: 13:7a:5f:2f:d6:9a:41:ff:3d:05:ca:93:95:69:89: 67:64:2b:05:49:bb:0a:25:6d:5a:2e:5c:66:9f:ae: 26:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:D4:FC:10:67:6B:D4:D7:C8:26:E4:20:C5:A9:2C:B8:29:E1:88:BB X509v3 Authority Key Identifier: keyid:2B:B5:94:7B:3E:B2:25:2D:C2:C2:8A:1F:5F:85:61:23:26:00:36:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/6wNw2ibxMVk7MGcMThmo5cf6b9LCczbbFvZx949fRg1i/2/2BB5947B3EB2252DC2C28A1F5F856123260036FE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB5947B3EB2252DC2C28A1F5F856123260036FE.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/6wNw2ibxMVk7MGcMThmo5cf6b9LCczbbFvZx949fRg1i/2/2BB5947B3EB2252DC2C28A1F5F856123260036FE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:fe:a7:99:38:03:11:fb:06:ee:37:a5:37:18:45:f3:e1:cc: 37:19:47:f7:dd:8b:f1:3d:27:74:39:98:db:d1:da:78:44:c4: e8:07:d0:7b:0c:59:7f:fb:0e:f2:4d:57:03:4d:fb:dd:8a:33: 20:f6:53:26:9c:79:b0:9d:f1:fb:5c:28:17:be:59:ae:82:a5: 60:9d:df:c8:a6:a1:df:a5:0c:18:6d:34:0d:34:c9:70:dc:2e: 6a:af:62:a8:57:43:a4:bb:44:d4:0a:4a:4a:a0:1a:ee:e2:7a: c1:2c:ac:ef:82:b6:db:85:f7:98:55:6b:f0:82:96:b9:81:0f: 7a:df:05:29:de:4a:82:b3:8a:f5:49:a5:34:63:24:91:36:a3: ef:be:00:b3:c5:30:4e:d7:9e:34:ba:01:e9:94:61:27:af:e4: 75:d8:9c:5b:41:a4:e2:6e:2b:e5:bd:f8:88:e7:59:35:cf:2a: 62:39:85:3c:b0:aa:69:a6:fa:1b:43:18:25:6a:a4:b2:42:a5: 2d:51:e6:0b:c4:e9:3a:9e:77:00:ec:96:77:f1:2a:aa:f4:8a: 19:27:7b:f8:c5:7b:e3:c3:c8:56:3f:5a:8a:58:c9:0d:e1:20: e2:91:84:ee:53:ad:53:a8:d9:c8:9c:2d:fb:1d:21:28:43:e4: 0b:e6:11:1e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUD4J6QbQvAAK4JTe2Dyg/UQhN7QswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkJCNTk0N0IzRUIyMjUyREMyQzI4QTFGNUY4NTYxMjMy NjAwMzZGRTAeFw0yNjAzMjUyMTIyMDVaFw0yNjAzMjYyMjM1MDVaMDMxMTAvBgNV BAMTKEVGRDRGQzEwNjc2QkQ0RDdDODI2RTQyMEM1QTkyQ0I4MjlFMTg4QkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCex8mRaSNOj7Hk9gNv7D/aqHQa cXqiKJFLurV7PfBWBQzumt5IizQijTEccSaltpUPiGFwvnvxpVPIixgGf28t5c+x EzohrAIhbCgjvYr6chb+xe6zdKOq7IExgm3CRWJEiiRh6ldR4I3iyWZw4V5LoXMT Kljp0VP7S017RjFkoHA2bGCvaTSWUbPY3bTFS0s+ek/O/Jt6ZLSGF3wUOxUwaT6w EGHxf+8WlwBLKgvwzPuVBmhOKBl6uw8Q4xbvhqTdK/pKJ4yXOJxwTnhSS79pT856 6lCDeCcEnOaIw3CO8xN6Xy/WmkH/PQXKk5VpiWdkKwVJuwolbVouXGafribvAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU79T8EGdr1NfIJuQgxaksuCnhiLswHwYDVR0j BBgwFoAUK7WUez6yJS3CwoofX4VhIyYANv4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNndOdzJpYnhNVms3TUdjTVRobW81Y2Y2YjlMQ2N6YmJGdlp4OTQ5ZlJn MWkvMi8yQkI1OTQ3QjNFQjIyNTJEQzJDMjhBMUY1Rjg1NjEyMzI2MDAzNkZFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJCQjU5NDdCM0VCMjI1MkRD MkMyOEExRjVGODU2MTIzMjYwMDM2RkUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NndOdzJpYnhNVms3TUdjTVRobW81Y2Y2YjlMQ2N6YmJGdlp4OTQ5ZlJnMWkvMi8y QkI1OTQ3QjNFQjIyNTJEQzJDMjhBMUY1Rjg1NjEyMzI2MDAzNkZFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAff6nmTgDEfsG7jelNxhF8+HMNxlH992L8T0ndDmY29HaeETE6AfQewxZf/sO 8k1XA0373YozIPZTJpx5sJ3x+1woF75ZroKlYJ3fyKah36UMGG00DTTJcNwuaq9i qFdDpLtE1ApKSqAa7uJ6wSys74K224X3mFVr8IKWuYEPet8FKd5KgrOK9UmlNGMk kTaj774As8UwTteeNLoB6ZRhJ6/kddicW0Gk4m4r5b34iOdZNc8qYjmFPLCqaab6 G0MYJWqkskKlLVHmC8TpOp53AOyWd/EqqvSKGSd7+MV748PIVj9ailjJDeEg4pGE 7lOtU6jZyJwt+x0hKEPkC+YRHg== -----END CERTIFICATE-----Generated at Thu Mar 26 00:08:19 2026 by rpki-client