$ rpki-client -vvf rpki-repo.registro.br/repo/8aiBaLPcPjrz9NHVhmEtyUa8MmznF41WFRxdWu4SYMYC/0/2BFE43B6FF62C8A8E2F366F5504AAC6D182D2B8B.mft File: 2BFE43B6FF62C8A8E2F366F5504AAC6D182D2B8B.mft (raw, json) Hash identifier: qJWsNSYRuuoHpTXvVfx0Ktjk5FTB13wo1TlyYDajdgo= Subject key identifier: 03:3E:4A:57:D1:3A:19:30:A4:A7:81:4E:F0:31:48:14:B3:D6:BF:05 Authority key identifier: 2B:FE:43:B6:FF:62:C8:A8:E2:F3:66:F5:50:4A:AC:6D:18:2D:2B:8B Certificate issuer: /CN=2BFE43B6FF62C8A8E2F366F5504AAC6D182D2B8B Certificate serial: 4ABC57EF84D38DACD4FE995FAF6ED8DB70708E4E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BFE43B6FF62C8A8E2F366F5504AAC6D182D2B8B.cer Subject info access: rsync://rpki-repo.registro.br/repo/8aiBaLPcPjrz9NHVhmEtyUa8MmznF41WFRxdWu4SYMYC/0/2BFE43B6FF62C8A8E2F366F5504AAC6D182D2B8B.mft Manifest number: 0B Signing time: Wed 25 Mar 2026 16:43:17 +0000 Manifest this update: Wed 25 Mar 2026 16:38:17 +0000 Manifest next update: Thu 26 Mar 2026 20:26:17 +0000 Files and hashes: 1: 2BFE43B6FF62C8A8E2F366F5504AAC6D182D2B8B.crl (hash: gLOcMLA3Xx41mPLGI5pas51hPUc0ebIlMronsbAlPOE=) 2: 3230302e3231392e3134392e302f32342d3332203d3e20323634393731.roa (hash: h3qrxvQHYvIHWATQtylOTBGiwfp1KYpMfgIxKyAHwOs=) 3: 323830313a38303a313932303a3a2f34382d313238203d3e20323634393731.roa (hash: XMt19OQs+KIsdrSVdkot4M0VNKvbfDuFMSNIOiKgGzw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8aiBaLPcPjrz9NHVhmEtyUa8MmznF41WFRxdWu4SYMYC/0/2BFE43B6FF62C8A8E2F366F5504AAC6D182D2B8B.crl rsync://rpki-repo.registro.br/repo/8aiBaLPcPjrz9NHVhmEtyUa8MmznF41WFRxdWu4SYMYC/0/2BFE43B6FF62C8A8E2F366F5504AAC6D182D2B8B.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BFE43B6FF62C8A8E2F366F5504AAC6D182D2B8B.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 26 Mar 2026 20:26:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:bc:57:ef:84:d3:8d:ac:d4:fe:99:5f:af:6e:d8:db:70:70:8e:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2BFE43B6FF62C8A8E2F366F5504AAC6D182D2B8B Validity Not Before: Mar 25 16:38:17 2026 GMT Not After : Mar 26 20:26:17 2026 GMT Subject: CN=033E4A57D13A1930A4A7814EF0314814B3D6BF05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:37:7d:89:96:26:91:f4:59:fe:4a:cf:49:8e: 05:28:60:13:58:dc:cc:e8:1e:f7:92:24:32:68:7b: 01:fb:0b:f6:9b:87:0b:67:f9:bd:16:2a:78:f1:2c: a6:3c:5b:1f:58:83:47:fe:ab:ce:6b:c0:da:28:9f: df:b8:90:bb:f1:37:34:2c:eb:89:78:ca:eb:d9:e5: 6b:6e:b6:41:8e:49:65:d8:b3:53:5d:17:87:bc:95: b4:af:f5:d9:4f:61:a6:ae:e4:6e:de:7e:e6:95:58: 2e:9e:5f:a7:e1:df:ec:b4:93:0c:43:a0:69:99:13: 7e:b0:2c:a0:43:3d:0a:cd:1f:c3:b5:4b:bc:d8:2c: 0a:1e:38:08:5c:88:ef:8a:b8:3b:d4:06:07:a7:6a: 28:e2:a6:9a:de:ab:c8:34:4a:fb:5e:d0:80:63:1c: 83:f2:d9:29:a8:ea:c2:6f:a4:d9:fa:ac:0f:30:21: d8:ec:f8:9a:cf:aa:5b:88:ef:64:82:0c:b8:04:77: 58:57:2c:a4:51:8c:9b:d7:99:d9:63:4e:59:d6:62: ed:ab:c0:7c:4b:07:0e:fc:6b:c5:4e:73:90:4d:9c: 63:2d:56:94:e0:14:70:ad:5f:8c:ac:1e:98:ab:85: 28:1c:54:49:d2:ee:b5:e6:f6:5a:f7:c1:28:96:fa: 52:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:3E:4A:57:D1:3A:19:30:A4:A7:81:4E:F0:31:48:14:B3:D6:BF:05 X509v3 Authority Key Identifier: keyid:2B:FE:43:B6:FF:62:C8:A8:E2:F3:66:F5:50:4A:AC:6D:18:2D:2B:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8aiBaLPcPjrz9NHVhmEtyUa8MmznF41WFRxdWu4SYMYC/0/2BFE43B6FF62C8A8E2F366F5504AAC6D182D2B8B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BFE43B6FF62C8A8E2F366F5504AAC6D182D2B8B.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8aiBaLPcPjrz9NHVhmEtyUa8MmznF41WFRxdWu4SYMYC/0/2BFE43B6FF62C8A8E2F366F5504AAC6D182D2B8B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:34:be:4b:c0:88:9c:6b:8d:75:b9:ff:c8:e6:22:4a:6a:9f: 65:9e:19:9f:af:c5:ba:6e:f2:e6:ae:ec:e7:c6:9d:20:40:0c: 4c:91:3b:6d:a1:a3:ba:e8:d5:8e:68:4e:c7:87:dd:3f:c7:c4: d8:e7:36:26:49:50:14:ad:79:a9:c4:6e:f3:c2:39:28:cd:c2: 16:8b:35:0f:22:39:fa:5c:46:4e:c2:17:53:cb:a6:2b:d6:8d: f1:a0:b2:04:27:fa:31:5c:23:1c:d9:f8:02:32:97:77:15:0b: 24:ef:aa:48:34:58:cd:04:79:d8:14:33:f9:4e:43:b6:22:50: 94:dd:9c:f1:bd:a2:ac:4e:b6:29:f9:9c:0c:98:c2:e5:4a:ce: c5:f5:78:ae:14:9a:09:75:a6:e4:a6:32:89:64:62:57:e0:e7: 02:b6:e7:18:c2:80:0d:cd:e0:46:57:3c:e5:2c:8a:15:eb:f6: 91:1c:cd:18:d8:72:46:0f:f2:4a:44:79:28:96:90:4d:e2:0a: 29:71:92:01:11:2b:e8:39:d1:cf:49:aa:af:62:e7:f5:05:b5: 07:6a:3c:30:db:bc:84:ef:3c:13:6e:6d:15:f8:9a:84:a4:86: 0d:c6:bb:71:b6:f9:0c:b3:5d:bd:23:f8:35:96:47:4d:af:b8: 5e:5a:46:37 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUSrxX74TTjazU/plfr27Y23Bwjk4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkJGRTQzQjZGRjYyQzhBOEUyRjM2NkY1NTA0QUFDNkQx ODJEMkI4QjAeFw0yNjAzMjUxNjM4MTdaFw0yNjAzMjYyMDI2MTdaMDMxMTAvBgNV BAMTKDAzM0U0QTU3RDEzQTE5MzBBNEE3ODE0RUYwMzE0ODE0QjNENkJGMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeN32JliaR9Fn+Ss9JjgUoYBNY 3MzoHveSJDJoewH7C/abhwtn+b0WKnjxLKY8Wx9Yg0f+q85rwNoon9+4kLvxNzQs 64l4yuvZ5WtutkGOSWXYs1NdF4e8lbSv9dlPYaau5G7efuaVWC6eX6fh3+y0kwxD oGmZE36wLKBDPQrNH8O1S7zYLAoeOAhciO+KuDvUBgenaijippreq8g0Svte0IBj HIPy2Smo6sJvpNn6rA8wIdjs+JrPqluI72SCDLgEd1hXLKRRjJvXmdljTlnWYu2r wHxLBw78a8VOc5BNnGMtVpTgFHCtX4ysHpirhSgcVEnS7rXm9lr3wSiW+lKxAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUAz5KV9E6GTCkp4FO8DFIFLPWvwUwHwYDVR0j BBgwFoAUK/5Dtv9iyKji82b1UEqsbRgtK4swDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOGFpQmFMUGNQanJ6OU5IVmhtRXR5VWE4TW16bkY0MVdGUnhkV3U0U1lN WUMvMC8yQkZFNDNCNkZGNjJDOEE4RTJGMzY2RjU1MDRBQUM2RDE4MkQyQjhCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJCRkU0M0I2RkY2MkM4QThF MkYzNjZGNTUwNEFBQzZEMTgyRDJCOEIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OGFpQmFMUGNQanJ6OU5IVmhtRXR5VWE4TW16bkY0MVdGUnhkV3U0U1lNWUMvMC8y QkZFNDNCNkZGNjJDOEE4RTJGMzY2RjU1MDRBQUM2RDE4MkQyQjhCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKTS+S8CInGuNdbn/yOYiSmqfZZ4Zn6/Fum7y5q7s58adIEAMTJE7baGjuujV jmhOx4fdP8fE2Oc2JklQFK15qcRu88I5KM3CFos1DyI5+lxGTsIXU8umK9aN8aCy BCf6MVwjHNn4AjKXdxULJO+qSDRYzQR52BQz+U5DtiJQlN2c8b2irE62KfmcDJjC 5UrOxfV4rhSaCXWm5KYyiWRiV+DnArbnGMKADc3gRlc85SyKFev2kRzNGNhyRg/y SkR5KJaQTeIKKXGSAREr6DnRz0mqr2Ln9QW1B2o8MNu8hO88E25tFfiahKSGDca7 cbb5DLNdvSP4NZZHTa+4XlpGNw== -----END CERTIFICATE-----Generated at Thu Mar 26 01:20:39 2026 by rpki-client