$ rpki-client -vvf rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/BDC352CC4ECCE325FD37ECE783E4C5420B23C503.mft File: BDC352CC4ECCE325FD37ECE783E4C5420B23C503.mft (raw, json) Hash identifier: K4xvN3gJ3iALTyW8i2Yr69TuvX2LArLwqo/q2bV50t4= Subject key identifier: B1:93:94:23:DA:66:EF:B3:7A:F7:A1:58:E8:E9:64:05:08:40:99:42 Authority key identifier: BD:C3:52:CC:4E:CC:E3:25:FD:37:EC:E7:83:E4:C5:42:0B:23:C5:03 Certificate issuer: /CN=BDC352CC4ECCE325FD37ECE783E4C5420B23C503 Certificate serial: 32C9EA6953B7F7FA26B1F1F13C800C5B4E0CCE15 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDC352CC4ECCE325FD37ECE783E4C5420B23C503.cer Subject info access: rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/BDC352CC4ECCE325FD37ECE783E4C5420B23C503.mft Manifest number: A7 Signing time: Wed 25 Mar 2026 04:55:49 +0000 Manifest this update: Wed 25 Mar 2026 04:50:49 +0000 Manifest next update: Thu 26 Mar 2026 08:38:49 +0000 Files and hashes: 1: 3138392e33382e302e302f32302d3234203d3e203238333036.roa (hash: IiVDGigZQjG4RbD51dKXqDMZp37q1FdaC3TRMM/Srcg=) 2: 323830343a33343a3a2f33322d3438203d3e203238333036.roa (hash: pLZaekLmmHpU0JO1ZeK8kS7V8K+kqvULpE4f37fCc6s=) 3: 3137372e39312e3137362e302f32302d3234203d3e203238333036.roa (hash: w1mDqY1V2KrVhYJfzYOhPE7wjeBij2IPBT/+At9fI10=) 4: 3138372e39342e38302e302f32302d3234203d3e203238333036.roa (hash: cUu4an7UcFYu/rekWMOi0nXgtcrJp/JBcXY8LjOSIOc=) 5: BDC352CC4ECCE325FD37ECE783E4C5420B23C503.crl (hash: w5Nn+cCvrs0KL1MoMq9ynQ+BPtqDa/ZkDgi3AbQZ7Ao=) 6: 3137372e3230302e39362e302f32302d3234203d3e203238333036.roa (hash: fCMfenxTExIWmso8nskVgu4zw5TV+Yy4ago17EhssFw=) 7: 323830343a33343a3a2f33322d3336203d3e203238333036.roa (hash: UfgSXCcDRkH/UopnwWnfUdGag8dEKjdsp2XJJe4h4d8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/BDC352CC4ECCE325FD37ECE783E4C5420B23C503.crl rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/BDC352CC4ECCE325FD37ECE783E4C5420B23C503.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDC352CC4ECCE325FD37ECE783E4C5420B23C503.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 26 Mar 2026 08:38:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:c9:ea:69:53:b7:f7:fa:26:b1:f1:f1:3c:80:0c:5b:4e:0c:ce:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDC352CC4ECCE325FD37ECE783E4C5420B23C503 Validity Not Before: Mar 25 04:50:49 2026 GMT Not After : Mar 26 08:38:49 2026 GMT Subject: CN=B1939423DA66EFB37AF7A158E8E9640508409942 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:15:8a:dd:20:da:9f:6f:c5:09:67:87:ab:df: 16:79:d6:d1:d5:eb:9a:c1:5b:91:44:2a:98:78:c8: 2a:a6:b8:0f:74:6a:4c:c5:4b:7e:c5:5c:34:fc:7b: 68:ab:87:9a:89:10:c4:b4:82:b3:db:98:4e:de:c3: f2:47:e2:9c:9f:a3:ec:d8:1e:b6:08:e9:6f:a7:93: 03:09:3e:25:e0:9c:64:02:19:c0:a0:5d:05:1f:87: cc:7a:85:37:1f:f1:70:80:3f:e7:6d:d9:ba:33:25: b9:25:a5:9e:b3:32:db:dd:78:08:5b:4c:7b:6c:58: c8:83:bc:95:66:77:44:4b:43:77:0b:d2:da:85:d9: b4:5c:07:f0:2d:08:fd:0b:dc:1b:c1:b1:f7:fa:6f: e4:a8:c0:b4:a9:1e:45:6c:a5:9b:ef:e8:c3:65:ee: dd:d5:bf:a0:95:3a:18:c9:2a:5b:a3:79:7e:d8:f2: 7c:01:86:3b:9b:b0:06:63:83:2c:9e:6c:fd:c9:6d: d6:9e:5d:5a:7b:80:5b:f4:bc:92:fd:69:2b:4a:06: d1:23:8d:67:a9:57:4f:c0:ed:a6:d7:4a:ca:3c:6b: f8:30:06:ec:ff:79:94:b6:ca:80:54:8b:70:8e:15: e6:15:64:3a:ff:ae:47:6c:9e:c1:b0:f8:dd:70:7b: 21:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:93:94:23:DA:66:EF:B3:7A:F7:A1:58:E8:E9:64:05:08:40:99:42 X509v3 Authority Key Identifier: keyid:BD:C3:52:CC:4E:CC:E3:25:FD:37:EC:E7:83:E4:C5:42:0B:23:C5:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/BDC352CC4ECCE325FD37ECE783E4C5420B23C503.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDC352CC4ECCE325FD37ECE783E4C5420B23C503.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/BDC352CC4ECCE325FD37ECE783E4C5420B23C503.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:7b:0e:58:ec:5d:03:44:79:a9:84:4e:48:65:f7:29:3f:3f: bf:2e:67:bf:3f:fb:c1:9e:eb:f0:cb:97:3e:e8:47:4e:f0:69: c2:c1:e2:47:09:cb:52:01:42:aa:dc:3d:30:5a:54:23:d2:5b: 4d:75:2e:c8:8e:45:74:7b:3e:7c:f6:16:b8:af:8c:8c:41:97: 66:3a:8b:f0:20:87:96:3a:49:e9:ef:88:ad:93:8e:dd:01:57: 32:65:cd:73:ec:ad:62:c7:35:71:02:ed:ea:c9:32:22:a6:a7: c2:9e:fa:5a:f1:16:1e:28:f3:6a:17:9c:c4:05:c5:67:41:4d: 30:e1:0e:b2:a9:e1:37:7d:df:9f:87:62:a6:d0:fc:aa:83:4c: d6:46:35:d8:12:ae:ad:0d:b2:95:35:c4:00:ff:63:77:ff:b1: ea:f2:85:f9:b1:e7:d2:18:bf:13:ea:51:8b:83:6d:ef:79:2c: f2:85:a9:44:6e:08:6f:3f:ea:f4:4e:6c:c9:58:e0:83:1d:da: 23:6a:ca:79:ce:c2:64:81:9a:ee:84:58:44:c0:73:57:e9:37: 74:2e:bc:6c:c7:42:97:2e:44:59:bc:29:9c:25:de:f6:52:44: 3f:ad:49:ff:e1:d2:36:a2:09:3e:a3:f0:3d:d8:1f:0d:8c:43: 10:37:e4:de -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUMsnqaVO39/omsfHxPIAMW04MzhUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkRDMzUyQ0M0RUNDRTMyNUZEMzdFQ0U3ODNFNEM1NDIw QjIzQzUwMzAeFw0yNjAzMjUwNDUwNDlaFw0yNjAzMjYwODM4NDlaMDMxMTAvBgNV BAMTKEIxOTM5NDIzREE2NkVGQjM3QUY3QTE1OEU4RTk2NDA1MDg0MDk5NDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgFYrdINqfb8UJZ4er3xZ51tHV 65rBW5FEKph4yCqmuA90akzFS37FXDT8e2irh5qJEMS0grPbmE7ew/JH4pyfo+zY HrYI6W+nkwMJPiXgnGQCGcCgXQUfh8x6hTcf8XCAP+dt2bozJbklpZ6zMtvdeAhb THtsWMiDvJVmd0RLQ3cL0tqF2bRcB/AtCP0L3BvBsff6b+SowLSpHkVspZvv6MNl 7t3Vv6CVOhjJKlujeX7Y8nwBhjubsAZjgyyebP3JbdaeXVp7gFv0vJL9aStKBtEj jWepV0/A7abXSso8a/gwBuz/eZS2yoBUi3COFeYVZDr/rkdsnsGw+N1weyG/AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUsZOUI9pm77N696FY6OlkBQhAmUIwHwYDVR0j BBgwFoAUvcNSzE7M4yX9N+zng+TFQgsjxQMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN1BEMlBudzFaclJFblYzck5rOGF6WmoxWHk2dmZ0ZTFXTE1KOWdCUE5O dWcvMC9CREMzNTJDQzRFQ0NFMzI1RkQzN0VDRTc4M0U0QzU0MjBCMjNDNTAzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JEQzM1MkNDNEVDQ0UzMjVG RDM3RUNFNzgzRTRDNTQyMEIyM0M1MDMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v N1BEMlBudzFaclJFblYzck5rOGF6WmoxWHk2dmZ0ZTFXTE1KOWdCUE5OdWcvMC9C REMzNTJDQzRFQ0NFMzI1RkQzN0VDRTc4M0U0QzU0MjBCMjNDNTAzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfnsOWOxdA0R5qYROSGX3KT8/vy5nvz/7wZ7r8MuXPuhHTvBpwsHiRwnLUgFC qtw9MFpUI9JbTXUuyI5FdHs+fPYWuK+MjEGXZjqL8CCHljpJ6e+IrZOO3QFXMmXN c+ytYsc1cQLt6skyIqanwp76WvEWHijzahecxAXFZ0FNMOEOsqnhN33fn4diptD8 qoNM1kY12BKurQ2ylTXEAP9jd/+x6vKF+bHn0hi/E+pRi4Nt73ks8oWpRG4Ibz/q 9E5syVjggx3aI2rKec7CZIGa7oRYRMBzV+k3dC68bMdCly5EWbwpnCXe9lJEP61J /+HSNqIJPqPwPdgfDYxDEDfk3g== -----END CERTIFICATE-----Generated at Thu Mar 26 00:09:25 2026 by rpki-client