$ rpki-client -vvf rpki-repo.registro.br/repo/BaCJ7joF74gUTmVwPLrK4jpGGtvaNyKgPTNVZy7GEui6/0/C5E3D6C0A02A0EE3BD0702D413829BC1487A45AD.mft File: C5E3D6C0A02A0EE3BD0702D413829BC1487A45AD.mft (raw, json) Hash identifier: aFQiv4m1Ur0GqXmQn4fBkvRBaLlrvmVKRBB+dCtw/jA= Subject key identifier: 21:23:C3:95:A5:A1:12:76:25:71:EE:08:90:C8:AB:94:0C:EB:E2:1E Authority key identifier: C5:E3:D6:C0:A0:2A:0E:E3:BD:07:02:D4:13:82:9B:C1:48:7A:45:AD Certificate issuer: /CN=C5E3D6C0A02A0EE3BD0702D413829BC1487A45AD Certificate serial: 3C2AAF63B0DAFE4F4F54A06E7B281DCCEADC21C5 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5E3D6C0A02A0EE3BD0702D413829BC1487A45AD.cer Subject info access: rsync://rpki-repo.registro.br/repo/BaCJ7joF74gUTmVwPLrK4jpGGtvaNyKgPTNVZy7GEui6/0/C5E3D6C0A02A0EE3BD0702D413829BC1487A45AD.mft Manifest number: 0122 Signing time: Thu 26 Mar 2026 16:29:31 +0000 Manifest this update: Thu 26 Mar 2026 16:24:31 +0000 Manifest next update: Fri 27 Mar 2026 19:35:31 +0000 Files and hashes: 1: C5E3D6C0A02A0EE3BD0702D413829BC1487A45AD.crl (hash: rJ2t16lHmvwb4+B5D1WAlsv9lFh4bmdGF28OhiccVYE=) 2: 323830343a366331303a3a2f33322d313238203d3e20323730343433.roa (hash: LPPl3TiuccnQnw15BF2O5c80XCo9bntztuQLh81UT94=) 3: 3230302e32362e3234382e302f32322d3332203d3e20323730343433.roa (hash: KKYm/55pCGpbLWeQwnRn/GBwiJl0ocNiQJGRsO01YUg=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BaCJ7joF74gUTmVwPLrK4jpGGtvaNyKgPTNVZy7GEui6/0/C5E3D6C0A02A0EE3BD0702D413829BC1487A45AD.crl rsync://rpki-repo.registro.br/repo/BaCJ7joF74gUTmVwPLrK4jpGGtvaNyKgPTNVZy7GEui6/0/C5E3D6C0A02A0EE3BD0702D413829BC1487A45AD.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5E3D6C0A02A0EE3BD0702D413829BC1487A45AD.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 27 Mar 2026 19:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:2a:af:63:b0:da:fe:4f:4f:54:a0:6e:7b:28:1d:cc:ea:dc:21:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C5E3D6C0A02A0EE3BD0702D413829BC1487A45AD Validity Not Before: Mar 26 16:24:31 2026 GMT Not After : Mar 27 19:35:31 2026 GMT Subject: CN=2123C395A5A112762571EE0890C8AB940CEBE21E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:48:7e:34:d0:32:98:52:7b:d0:c5:3a:0d:25: ea:29:ee:33:ab:d0:5f:f6:26:80:65:20:ce:e3:52: 84:bb:d1:e9:5c:8e:3c:f3:07:7d:12:cf:3a:6f:52: 43:91:5d:cf:3a:b9:db:12:48:28:74:6d:70:81:05: 6f:84:71:1b:be:c1:65:a8:84:ea:47:f4:f2:71:cd: b2:5d:d2:12:92:93:6c:00:b2:cb:7c:e4:33:90:47: 76:07:1e:f9:a0:f9:ff:c6:ba:9f:2f:70:96:df:e1: 94:57:cd:a2:69:6d:c0:88:03:df:1e:97:da:b8:b7: 4d:5c:01:0d:d6:d6:83:1c:cc:7d:08:f6:6d:ab:7b: c0:bf:b6:b8:2f:f7:98:c2:fc:12:33:ec:26:91:b6: b1:3f:44:3c:fa:22:e5:95:34:24:25:77:b5:c2:4e: 3c:a7:e5:a6:b5:8b:bc:5b:46:45:33:f9:79:40:58: 8f:4a:59:7b:4c:aa:19:1c:59:6a:b6:c8:98:85:ac: 10:80:e5:a1:bd:a7:d9:f5:a7:a4:20:79:9a:b1:7c: ee:54:55:ba:45:b1:4e:d3:97:18:50:7c:f9:52:3d: e9:06:13:a8:06:89:3a:34:40:c1:80:75:bb:51:fc: 44:73:04:62:5a:60:f6:3c:8d:25:87:04:0f:9d:60: 46:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:23:C3:95:A5:A1:12:76:25:71:EE:08:90:C8:AB:94:0C:EB:E2:1E X509v3 Authority Key Identifier: keyid:C5:E3:D6:C0:A0:2A:0E:E3:BD:07:02:D4:13:82:9B:C1:48:7A:45:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BaCJ7joF74gUTmVwPLrK4jpGGtvaNyKgPTNVZy7GEui6/0/C5E3D6C0A02A0EE3BD0702D413829BC1487A45AD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5E3D6C0A02A0EE3BD0702D413829BC1487A45AD.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BaCJ7joF74gUTmVwPLrK4jpGGtvaNyKgPTNVZy7GEui6/0/C5E3D6C0A02A0EE3BD0702D413829BC1487A45AD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:c1:b4:a0:fb:27:ed:c5:45:7b:82:16:ee:27:d1:23:e1:ca: 1a:39:98:c3:c0:29:ef:b0:0f:b3:d5:7f:01:1e:62:14:21:58: 1a:9e:01:c0:aa:6f:db:10:fe:04:86:f6:67:cb:4b:6f:63:29: 61:6a:56:49:b1:a7:37:06:9c:de:66:24:37:16:a1:a0:82:3c: 5b:08:bf:5d:cb:ee:51:47:c6:0b:53:37:b3:08:9f:8e:0d:66: b1:1f:fa:27:fd:68:2a:41:ee:ff:3d:49:35:bc:80:15:cb:84: aa:a1:94:c1:1e:42:52:41:e3:9c:be:1f:c9:04:2b:9c:53:c6: dc:7a:25:49:3f:f4:a5:3d:d5:3e:d9:3a:84:ba:7c:4c:e0:cc: aa:29:1b:55:75:f7:0d:6b:27:d8:c5:51:14:1d:d8:bd:1c:83: a6:ea:84:ae:2f:8e:37:71:bc:cc:ff:9f:be:8f:91:1c:d5:d1: d7:71:ce:9c:4a:93:44:62:75:42:cf:90:60:8a:d2:e5:1b:76: cf:01:50:53:9d:6a:b0:82:fa:37:ec:07:e8:a8:c8:00:a0:32: c0:a7:6e:fc:d1:26:98:88:64:aa:66:6a:ad:eb:21:2e:2b:df: 37:b1:f6:10:03:13:f0:c1:ee:f1:aa:83:c1:8e:f9:e4:07:ca: 8d:77:44:c7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUPCqvY7Da/k9PVKBueygdzOrcIcUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzVFM0Q2QzBBMDJBMEVFM0JEMDcwMkQ0MTM4MjlCQzE0 ODdBNDVBRDAeFw0yNjAzMjYxNjI0MzFaFw0yNjAzMjcxOTM1MzFaMDMxMTAvBgNV BAMTKDIxMjNDMzk1QTVBMTEyNzYyNTcxRUUwODkwQzhBQjk0MENFQkUyMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiSH400DKYUnvQxToNJeop7jOr 0F/2JoBlIM7jUoS70elcjjzzB30SzzpvUkORXc86udsSSCh0bXCBBW+EcRu+wWWo hOpH9PJxzbJd0hKSk2wAsst85DOQR3YHHvmg+f/Gup8vcJbf4ZRXzaJpbcCIA98e l9q4t01cAQ3W1oMczH0I9m2re8C/trgv95jC/BIz7CaRtrE/RDz6IuWVNCQld7XC Tjyn5aa1i7xbRkUz+XlAWI9KWXtMqhkcWWq2yJiFrBCA5aG9p9n1p6QgeZqxfO5U VbpFsU7TlxhQfPlSPekGE6gGiTo0QMGAdbtR/ERzBGJaYPY8jSWHBA+dYEZhAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUISPDlaWhEnYlce4IkMirlAzr4h4wHwYDVR0j BBgwFoAUxePWwKAqDuO9BwLUE4KbwUh6Ra0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQmFDSjdqb0Y3NGdVVG1Wd1BMcks0anBHR3R2YU55S2dQVE5WWnk3R0V1 aTYvMC9DNUUzRDZDMEEwMkEwRUUzQkQwNzAyRDQxMzgyOUJDMTQ4N0E0NUFELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M1RTNENkMwQTAyQTBFRTNC RDA3MDJENDEzODI5QkMxNDg3QTQ1QUQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QmFDSjdqb0Y3NGdVVG1Wd1BMcks0anBHR3R2YU55S2dQVE5WWnk3R0V1aTYvMC9D NUUzRDZDMEEwMkEwRUUzQkQwNzAyRDQxMzgyOUJDMTQ4N0E0NUFELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIsG0oPsn7cVFe4IW7ifRI+HKGjmYw8Ap77APs9V/AR5iFCFYGp4BwKpv2xD+ BIb2Z8tLb2MpYWpWSbGnNwac3mYkNxahoII8Wwi/XcvuUUfGC1M3swifjg1msR/6 J/1oKkHu/z1JNbyAFcuEqqGUwR5CUkHjnL4fyQQrnFPG3HolST/0pT3VPtk6hLp8 TODMqikbVXX3DWsn2MVRFB3YvRyDpuqEri+ON3G8zP+fvo+RHNXR13HOnEqTRGJ1 Qs+QYIrS5Rt2zwFQU51qsIL6N+wH6KjIAKAywKdu/NEmmIhkqmZqreshLivfN7H2 EAMT8MHu8aqDwY755AfKjXdExw== -----END CERTIFICATE-----Generated at Thu Mar 26 23:26:48 2026 by rpki-client