$ rpki-client -vvf rpki-repo.registro.br/repo/7YgUCFjENbiLg4FLBzokWDgjo7UHN8LKjWJDzhoSx1ZH/1/B9EFF2DCC8D3B6928E516E6A2DF086E08CB891E4.mft File: B9EFF2DCC8D3B6928E516E6A2DF086E08CB891E4.mft (raw, json) Hash identifier: V4uRSSDz39L659PkFa1NeCCv/Mb9zowrhrRmegVWebM= Subject key identifier: 21:7E:E5:33:34:4D:A8:E8:F8:49:73:94:A5:95:29:8D:46:98:20:18 Authority key identifier: B9:EF:F2:DC:C8:D3:B6:92:8E:51:6E:6A:2D:F0:86:E0:8C:B8:91:E4 Certificate issuer: /CN=B9EFF2DCC8D3B6928E516E6A2DF086E08CB891E4 Certificate serial: 50DAE003FBE41A9E8CC735137E25BEF07262F6EF Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9EFF2DCC8D3B6928E516E6A2DF086E08CB891E4.cer Subject info access: rsync://rpki-repo.registro.br/repo/7YgUCFjENbiLg4FLBzokWDgjo7UHN8LKjWJDzhoSx1ZH/1/B9EFF2DCC8D3B6928E516E6A2DF086E08CB891E4.mft Manifest number: 03D1 Signing time: Thu 26 Mar 2026 14:26:28 +0000 Manifest this update: Thu 26 Mar 2026 14:21:28 +0000 Manifest next update: Fri 27 Mar 2026 15:24:28 +0000 Files and hashes: 1: 323830343a373737343a3a2f33322d3332203d3e20323731313739.roa (hash: 6Mvxd0a015QwqVQYjmk4KDuv5AMlcXU689f0Up6JAvQ=) 2: 3137392e35312e3134382e302f32322d3234203d3e20323731313739.roa (hash: fscH08Be33lLCrOFmFTelyKv56wGOusIcbHMYRtzIk0=) 3: B9EFF2DCC8D3B6928E516E6A2DF086E08CB891E4.crl (hash: bC6W9F2hZsmRjS2wv68Jra+0AbDs16E3JQ0YU0eYpX0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7YgUCFjENbiLg4FLBzokWDgjo7UHN8LKjWJDzhoSx1ZH/1/B9EFF2DCC8D3B6928E516E6A2DF086E08CB891E4.crl rsync://rpki-repo.registro.br/repo/7YgUCFjENbiLg4FLBzokWDgjo7UHN8LKjWJDzhoSx1ZH/1/B9EFF2DCC8D3B6928E516E6A2DF086E08CB891E4.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9EFF2DCC8D3B6928E516E6A2DF086E08CB891E4.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 27 Mar 2026 15:24:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:da:e0:03:fb:e4:1a:9e:8c:c7:35:13:7e:25:be:f0:72:62:f6:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B9EFF2DCC8D3B6928E516E6A2DF086E08CB891E4 Validity Not Before: Mar 26 14:21:28 2026 GMT Not After : Mar 27 15:24:28 2026 GMT Subject: CN=217EE533344DA8E8F8497394A595298D46982018 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ed:b9:bf:9c:11:4a:fa:8b:2c:6c:a3:a4:84: 67:10:ad:a6:be:41:6a:28:f9:ce:3a:21:e7:1c:90: 67:24:2a:b0:b0:dc:7a:d9:65:8b:b5:b1:d1:f1:c7: 73:28:9c:5d:f5:87:97:5f:37:7c:a3:c0:92:b4:71: 0a:9a:34:1e:8e:45:eb:bb:66:8f:2c:78:84:ac:01: 6d:f0:c4:6c:bc:92:2e:68:e7:f4:97:6c:37:1c:8c: e7:e5:b5:20:a6:18:02:f3:3f:49:a4:c0:74:c9:0e: ba:76:82:62:5b:4a:3e:2f:60:71:7d:a3:ce:b1:ef: df:30:d4:0d:0d:b4:87:00:95:f2:1a:23:ae:56:78: ea:9f:5d:71:40:b9:96:5a:47:b5:d2:2b:44:34:9a: d5:62:ca:1c:10:be:e0:e7:db:67:fe:f9:aa:90:6e: 46:ee:bc:1d:98:1e:1b:d3:2f:2f:2b:5d:92:cf:a1: 1a:34:7e:39:f2:81:34:ba:86:3e:bd:9b:e5:db:b7: c0:6e:0a:6e:62:9c:be:22:30:e6:88:36:2e:21:b8: 61:26:35:04:d4:5f:ac:cb:ae:df:7c:38:87:42:95: 1b:a8:f0:d4:a3:a9:f4:7b:5c:5f:67:3f:64:2d:ef: 4e:96:f8:5f:d7:31:5e:9e:b7:d5:a3:af:0c:5d:53: 26:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:7E:E5:33:34:4D:A8:E8:F8:49:73:94:A5:95:29:8D:46:98:20:18 X509v3 Authority Key Identifier: keyid:B9:EF:F2:DC:C8:D3:B6:92:8E:51:6E:6A:2D:F0:86:E0:8C:B8:91:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7YgUCFjENbiLg4FLBzokWDgjo7UHN8LKjWJDzhoSx1ZH/1/B9EFF2DCC8D3B6928E516E6A2DF086E08CB891E4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9EFF2DCC8D3B6928E516E6A2DF086E08CB891E4.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7YgUCFjENbiLg4FLBzokWDgjo7UHN8LKjWJDzhoSx1ZH/1/B9EFF2DCC8D3B6928E516E6A2DF086E08CB891E4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:a8:d7:6a:2b:89:37:e9:a0:2d:70:46:23:c9:b3:1e:76:2c: 89:60:00:90:40:ac:5c:5b:b2:74:1d:ad:b0:9e:01:61:48:1c: 1f:d7:42:bb:03:9e:dd:3d:61:ee:c7:32:3a:15:78:d9:5a:19: f0:f7:33:25:37:12:fa:74:13:a4:9e:d0:a1:fb:08:df:97:47: 2c:01:a3:dc:e6:48:8a:42:a2:89:d8:5e:00:39:1a:0c:ea:6b: fc:f4:61:62:a1:7c:da:bc:3d:37:83:21:87:7a:89:fe:d0:f7: 3c:a8:2b:95:66:57:d2:df:df:65:b6:33:a1:af:91:ec:b1:c9: 00:36:86:0f:01:f8:6b:9a:5d:6f:d2:09:c4:a7:68:bf:b1:25: 4d:8e:a5:00:be:b5:11:0e:15:f0:3f:ed:4b:9d:0d:92:5a:36: b1:e8:d4:f8:eb:43:64:44:12:91:86:94:7c:07:51:76:9a:d5: 0c:a6:14:ad:1d:fe:ef:da:4a:6d:6b:c9:b9:2a:2c:89:8f:9d: f8:9e:32:82:75:d2:c0:7c:af:70:bc:85:0a:b9:51:5c:22:ed: d0:82:c5:c8:26:d2:34:98:de:cb:32:9a:8f:90:fe:5e:62:11: 81:9d:6b:b4:e1:be:e9:66:22:58:37:37:e9:e9:37:dd:4d:51: 54:34:68:3d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUUNrgA/vkGp6MxzUTfiW+8HJi9u8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjlFRkYyRENDOEQzQjY5MjhFNTE2RTZBMkRGMDg2RTA4 Q0I4OTFFNDAeFw0yNjAzMjYxNDIxMjhaFw0yNjAzMjcxNTI0MjhaMDMxMTAvBgNV BAMTKDIxN0VFNTMzMzQ0REE4RThGODQ5NzM5NEE1OTUyOThENDY5ODIwMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU7bm/nBFK+ossbKOkhGcQraa+ QWoo+c46IecckGckKrCw3HrZZYu1sdHxx3MonF31h5dfN3yjwJK0cQqaNB6OReu7 Zo8seISsAW3wxGy8ki5o5/SXbDccjOfltSCmGALzP0mkwHTJDrp2gmJbSj4vYHF9 o86x798w1A0NtIcAlfIaI65WeOqfXXFAuZZaR7XSK0Q0mtViyhwQvuDn22f++aqQ bkbuvB2YHhvTLy8rXZLPoRo0fjnygTS6hj69m+Xbt8BuCm5inL4iMOaINi4huGEm NQTUX6zLrt98OIdClRuo8NSjqfR7XF9nP2Qt706W+F/XMV6et9WjrwxdUya1AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUIX7lMzRNqOj4SXOUpZUpjUaYIBgwHwYDVR0j BBgwFoAUue/y3MjTtpKOUW5qLfCG4Iy4keQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN1lnVUNGakVOYmlMZzRGTEJ6b2tXRGdqbzdVSE44TEtqV0pEemhvU3gx WkgvMS9COUVGRjJEQ0M4RDNCNjkyOEU1MTZFNkEyREYwODZFMDhDQjg5MUU0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I5RUZGMkRDQzhEM0I2OTI4 RTUxNkU2QTJERjA4NkUwOENCODkxRTQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v N1lnVUNGakVOYmlMZzRGTEJ6b2tXRGdqbzdVSE44TEtqV0pEemhvU3gxWkgvMS9C OUVGRjJEQ0M4RDNCNjkyOEU1MTZFNkEyREYwODZFMDhDQjg5MUU0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAyKjXaiuJN+mgLXBGI8mzHnYsiWAAkECsXFuydB2tsJ4BYUgcH9dCuwOe3T1h 7scyOhV42VoZ8PczJTcS+nQTpJ7QofsI35dHLAGj3OZIikKiidheADkaDOpr/PRh YqF82rw9N4Mhh3qJ/tD3PKgrlWZX0t/fZbYzoa+R7LHJADaGDwH4a5pdb9IJxKdo v7ElTY6lAL61EQ4V8D/tS50Nklo2sejU+OtDZEQSkYaUfAdRdprVDKYUrR3+79pK bWvJuSosiY+d+J4ygnXSwHyvcLyFCrlRXCLt0ILFyCbSNJjeyzKaj5D+XmIRgZ1r tOG+6WYiWDc36ek33U1RVDRoPQ== -----END CERTIFICATE-----Generated at Fri Mar 27 01:03:27 2026 by rpki-client