$ rpki-client -vvf rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.mft File: 9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.mft (raw, json) Hash identifier: gavgeU5Zyc3hnJEGw51EVmCOmYenrl1Q52pYaKi6hiM= Subject key identifier: 47:BA:8F:08:41:1B:20:44:D1:2C:BE:99:AF:0D:01:20:5F:3E:AF:78 Authority key identifier: 9B:40:C2:CC:13:EA:B5:03:45:ED:AC:FA:CC:15:DB:43:E6:0B:85:A2 Certificate issuer: /CN=9B40C2CC13EAB50345EDACFACC15DB43E60B85A2 Certificate serial: 180720DB3AED054C282AE4E291DDB6085013D0D0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.cer Subject info access: rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.mft Manifest number: 0230 Signing time: Thu 26 Mar 2026 17:47:08 +0000 Manifest this update: Thu 26 Mar 2026 17:42:08 +0000 Manifest next update: Fri 27 Mar 2026 20:05:08 +0000 Files and hashes: 1: 9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.crl (hash: Yzs7NVptXxO59FtHwPB2ketSK8VKd7CcGLvY3NKYNOs=) 2: 323830343a363862633a3a2f33322d3334203d3e20323639373132.roa (hash: 8RPnTiQ7wXRMCXsqv1axTDou5GdSXQ84NpnMqja7IR4=) 3: 3139302e3131322e3135362e302f32322d3234203d3e20323639373132.roa (hash: XsvSwhJsvhiN3zT4zP/EO47T43tGtKD9SfW4Q24OOT4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.crl rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 27 Mar 2026 20:05:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:07:20:db:3a:ed:05:4c:28:2a:e4:e2:91:dd:b6:08:50:13:d0:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B40C2CC13EAB50345EDACFACC15DB43E60B85A2 Validity Not Before: Mar 26 17:42:08 2026 GMT Not After : Mar 27 20:05:08 2026 GMT Subject: CN=47BA8F08411B2044D12CBE99AF0D01205F3EAF78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:32:82:c8:80:e0:3d:59:7f:e1:38:33:e8:92: fc:5b:db:76:72:a4:b7:f0:dc:5b:95:35:76:6f:e4: 8d:77:84:b0:e6:23:e4:75:a0:c6:fa:89:6a:31:1a: a4:d4:4d:c2:d6:a7:4d:4e:38:e4:86:fa:04:c0:e5: 0a:49:4e:b5:84:15:ce:b8:b8:95:b1:a3:ad:ca:ba: 6d:7d:b1:4d:03:57:c0:19:ee:8b:07:2e:bf:42:16: b0:1a:b9:18:4e:c2:91:7b:da:ad:62:ad:cf:58:3b: 51:02:fe:93:36:10:70:71:34:1f:15:31:a9:55:50: e8:e9:d2:53:84:41:33:5a:9e:4d:92:f6:72:3e:bb: 70:7f:a4:39:33:b6:a8:29:b7:59:ed:44:b8:fc:5a: 51:98:dd:bc:ee:85:10:8b:07:e8:c2:83:39:e6:7d: fe:7d:c5:dd:a5:0d:0f:52:fd:63:77:fa:31:f6:19: 01:f2:8f:35:0b:72:c3:f2:e8:b0:48:2d:7a:97:db: 7b:19:db:37:ab:9d:28:20:c5:ac:ad:34:24:f6:82: a6:08:c1:02:a4:a9:7b:11:57:88:0b:64:ae:c3:26: d8:a2:27:d0:ee:b0:74:81:d6:83:25:ff:05:5f:6f: af:2c:0d:97:7f:14:8e:bc:bf:02:8a:86:b3:86:02: 2a:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:BA:8F:08:41:1B:20:44:D1:2C:BE:99:AF:0D:01:20:5F:3E:AF:78 X509v3 Authority Key Identifier: keyid:9B:40:C2:CC:13:EA:B5:03:45:ED:AC:FA:CC:15:DB:43:E6:0B:85:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:2d:0a:3d:35:97:ac:16:03:1d:3f:fc:b3:d5:37:fd:91:b2: 37:25:9c:0f:88:46:5f:00:f1:e4:31:bb:d5:71:21:72:bc:12: 90:a3:e0:8b:30:cb:04:1e:9c:cf:8d:33:ca:a5:54:af:e8:33: d0:9c:b9:91:07:e9:c1:f4:e0:42:d7:a1:fd:39:32:19:e0:b4: 5d:31:e9:24:87:31:0b:81:91:e5:61:ee:a2:29:6b:ee:15:9e: ea:56:60:ed:71:23:9f:fa:5b:f8:53:c1:f2:0d:87:46:8d:45: 37:fe:3a:2e:cb:03:dd:43:d8:72:c5:9e:b2:4e:84:4a:1e:60: 17:b0:9d:3b:7b:7d:bf:3a:c4:38:bb:f6:ca:0b:6b:77:98:8b: ec:82:2e:c8:09:a5:d4:f1:ad:ba:2a:98:59:18:7a:98:66:b2: 43:8c:99:f3:34:b8:f1:19:ce:f8:07:4b:aa:42:51:7e:8c:0c: 3a:2d:6f:19:14:f5:95:9e:5f:09:a2:8f:b2:2f:3d:1b:5f:42: 95:60:bf:1a:ba:7f:b6:09:b4:2e:78:d4:70:0b:7d:fd:48:b1: 5d:35:52:20:74:d5:80:32:8d:67:94:f7:98:dd:91:2f:55:90: d9:e6:fa:89:ec:05:b8:b1:6f:10:c3:29:6d:08:a7:2e:43:fe: 4b:fc:03:16 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUGAcg2zrtBUwoKuTikd22CFAT0NAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUI0MEMyQ0MxM0VBQjUwMzQ1RURBQ0ZBQ0MxNURCNDNF NjBCODVBMjAeFw0yNjAzMjYxNzQyMDhaFw0yNjAzMjcyMDA1MDhaMDMxMTAvBgNV BAMTKDQ3QkE4RjA4NDExQjIwNDREMTJDQkU5OUFGMEQwMTIwNUYzRUFGNzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChMoLIgOA9WX/hODPokvxb23Zy pLfw3FuVNXZv5I13hLDmI+R1oMb6iWoxGqTUTcLWp01OOOSG+gTA5QpJTrWEFc64 uJWxo63Kum19sU0DV8AZ7osHLr9CFrAauRhOwpF72q1irc9YO1EC/pM2EHBxNB8V MalVUOjp0lOEQTNank2S9nI+u3B/pDkztqgpt1ntRLj8WlGY3bzuhRCLB+jCgznm ff59xd2lDQ9S/WN3+jH2GQHyjzULcsPy6LBILXqX23sZ2zernSggxaytNCT2gqYI wQKkqXsRV4gLZK7DJtiiJ9DusHSB1oMl/wVfb68sDZd/FI68vwKKhrOGAiqHAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUR7qPCEEbIETRLL6Zrw0BIF8+r3gwHwYDVR0j BBgwFoAUm0DCzBPqtQNF7az6zBXbQ+YLhaIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQnpOejVkQkUya01ZR25BZnhFc05ZTHY3YU1UOG00eXhQNjNZdjgyTGRt MmcvMC85QjQwQzJDQzEzRUFCNTAzNDVFREFDRkFDQzE1REI0M0U2MEI4NUEyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlCNDBDMkNDMTNFQUI1MDM0 NUVEQUNGQUNDMTVEQjQzRTYwQjg1QTIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QnpOejVkQkUya01ZR25BZnhFc05ZTHY3YU1UOG00eXhQNjNZdjgyTGRtMmcvMC85 QjQwQzJDQzEzRUFCNTAzNDVFREFDRkFDQzE1REI0M0U2MEI4NUEyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAxS0KPTWXrBYDHT/8s9U3/ZGyNyWcD4hGXwDx5DG71XEhcrwSkKPgizDLBB6c z40zyqVUr+gz0Jy5kQfpwfTgQteh/TkyGeC0XTHpJIcxC4GR5WHuoilr7hWe6lZg 7XEjn/pb+FPB8g2HRo1FN/46LssD3UPYcsWesk6ESh5gF7CdO3t9vzrEOLv2ygtr d5iL7IIuyAml1PGtuiqYWRh6mGayQ4yZ8zS48RnO+AdLqkJRfowMOi1vGRT1lZ5f CaKPsi89G19ClWC/Grp/tgm0LnjUcAt9/UixXTVSIHTVgDKNZ5T3mN2RL1WQ2eb6 iewFuLFvEMMpbQinLkP+S/wDFg== -----END CERTIFICATE-----Generated at Thu Mar 26 21:20:19 2026 by rpki-client