$ rpki-client -vvf rpki-repo.registro.br/repo/D22S2fFD3vBiGgDajdav7YNXyxUqjZgW3xexjkVpu2Nm/0/B53BC7F8E9156B14E11D55FD8D358D0A91FCE8E2.mft File: B53BC7F8E9156B14E11D55FD8D358D0A91FCE8E2.mft (raw, json) Hash identifier: u6BBRYBgNCAhuXkLnTXHN9ezGiMRCz75Gb4OTDZEpOM= Subject key identifier: 1A:7D:01:3E:53:71:7E:52:81:2F:0A:3F:AB:38:4D:63:A5:4C:C9:C0 Authority key identifier: B5:3B:C7:F8:E9:15:6B:14:E1:1D:55:FD:8D:35:8D:0A:91:FC:E8:E2 Certificate issuer: /CN=B53BC7F8E9156B14E11D55FD8D358D0A91FCE8E2 Certificate serial: 49262B9F57FCEEA1A080D2AE3618370E49C40C8C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B53BC7F8E9156B14E11D55FD8D358D0A91FCE8E2.cer Subject info access: rsync://rpki-repo.registro.br/repo/D22S2fFD3vBiGgDajdav7YNXyxUqjZgW3xexjkVpu2Nm/0/B53BC7F8E9156B14E11D55FD8D358D0A91FCE8E2.mft Manifest number: 02A2 Signing time: Thu 26 Mar 2026 09:20:40 +0000 Manifest this update: Thu 26 Mar 2026 09:15:40 +0000 Manifest next update: Fri 27 Mar 2026 11:00:40 +0000 Files and hashes: 1: 323830343a366665383a3a2f33322d3438203d3e20323730363932.roa (hash: ctYl9J9TTj+GlVTx/djEI8ydQ4q/0hlaqEto9cd0hFQ=) 2: 3137372e3132382e35322e302f32322d3234203d3e20323730363932.roa (hash: VT2dIpvor0j1YnG2BQMLIN5CUYFFKwD7FsBUY9oYGtM=) 3: B53BC7F8E9156B14E11D55FD8D358D0A91FCE8E2.crl (hash: Df3Ezv6a+5mVTEFGj6qJMCm36+7em0w0whATkiu2VAY=) 4: 3133312e37322e33362e302f32322d3234203d3e20323730363932.roa (hash: A068GDKE7NVod9t4EYmwsBt9cHKNtqvvzMBnwWxyBC8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/D22S2fFD3vBiGgDajdav7YNXyxUqjZgW3xexjkVpu2Nm/0/B53BC7F8E9156B14E11D55FD8D358D0A91FCE8E2.crl rsync://rpki-repo.registro.br/repo/D22S2fFD3vBiGgDajdav7YNXyxUqjZgW3xexjkVpu2Nm/0/B53BC7F8E9156B14E11D55FD8D358D0A91FCE8E2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B53BC7F8E9156B14E11D55FD8D358D0A91FCE8E2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 27 Mar 2026 11:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:26:2b:9f:57:fc:ee:a1:a0:80:d2:ae:36:18:37:0e:49:c4:0c:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B53BC7F8E9156B14E11D55FD8D358D0A91FCE8E2 Validity Not Before: Mar 26 09:15:40 2026 GMT Not After : Mar 27 11:00:40 2026 GMT Subject: CN=1A7D013E53717E52812F0A3FAB384D63A54CC9C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:65:03:12:b3:3f:6d:09:30:b1:3e:01:4e:4a: bf:9b:8b:87:94:1d:f9:55:ac:90:4e:51:87:50:c1: 7a:1f:b9:7f:a1:d7:1f:6d:7b:89:3e:70:35:0d:a3: 7a:59:23:d5:ea:48:9e:48:1a:24:87:43:f9:19:6e: fd:da:30:82:d9:d7:6c:93:b9:c0:2a:dc:62:c5:6e: 91:09:12:9d:b1:28:10:2c:18:9d:3d:c7:f7:5b:03: ea:33:6b:4d:45:12:a9:9c:ec:1d:88:20:e6:31:8c: 08:e3:f1:17:de:66:cc:42:ad:51:de:5f:80:90:fd: d8:ec:d4:a9:b2:ed:5b:10:ea:55:e4:6d:7a:9b:57: b0:0a:b8:e1:a4:84:bc:12:d2:88:85:0e:e4:11:f5: 23:ea:54:7d:6e:17:fe:e2:72:76:ce:22:3e:f2:9e: 46:01:98:49:a7:17:40:67:8a:0d:95:70:41:3c:79: d4:b8:a0:b4:7d:17:da:09:44:ac:d5:2f:84:9f:40: f2:8b:45:d2:63:49:b2:23:16:1d:f3:13:2a:c2:14: 91:4d:7d:13:fd:42:6f:04:32:08:5a:3e:dd:49:d0: 4e:ca:7b:7f:2f:b3:b8:ff:91:d0:20:f6:d5:3e:08: c3:31:53:0c:cd:7b:62:e3:73:90:06:dc:6d:98:1f: 6e:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:7D:01:3E:53:71:7E:52:81:2F:0A:3F:AB:38:4D:63:A5:4C:C9:C0 X509v3 Authority Key Identifier: keyid:B5:3B:C7:F8:E9:15:6B:14:E1:1D:55:FD:8D:35:8D:0A:91:FC:E8:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/D22S2fFD3vBiGgDajdav7YNXyxUqjZgW3xexjkVpu2Nm/0/B53BC7F8E9156B14E11D55FD8D358D0A91FCE8E2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B53BC7F8E9156B14E11D55FD8D358D0A91FCE8E2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/D22S2fFD3vBiGgDajdav7YNXyxUqjZgW3xexjkVpu2Nm/0/B53BC7F8E9156B14E11D55FD8D358D0A91FCE8E2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:4f:f3:08:12:ba:14:b9:8f:58:f6:1c:fc:d1:4e:69:e9:4d: e1:fe:15:05:56:84:e3:15:78:fc:17:8b:83:4a:bd:d3:df:63: 58:ed:9f:ad:53:cc:a2:3d:4e:6a:d0:0d:8b:03:c3:a0:1a:17: 0b:7d:43:b7:6e:b1:0c:39:be:e7:90:13:e1:4e:7f:57:b2:54: 45:c3:9b:2e:ab:b4:5f:c2:ce:5e:49:ee:00:87:9a:db:0c:f7: de:48:6e:34:a2:49:58:5b:44:d5:91:45:f2:1c:47:86:65:36: 3b:a5:75:fb:0c:4c:e8:73:b1:c2:46:c8:54:00:2d:71:1f:6b: 6d:b4:ab:c7:a1:20:de:6f:ec:21:fe:af:64:06:86:58:63:5e: 64:0b:e2:a8:e8:37:f2:46:3f:34:27:ab:47:8b:13:f3:3a:26: 57:a2:d8:5f:fa:0c:b3:0f:5e:37:1e:6e:ea:16:0e:a0:3c:c3: 62:ae:60:46:75:0d:38:66:16:6b:c0:e1:8a:2a:c7:a9:4f:98: e0:d8:4d:0c:40:97:97:91:07:6b:03:e0:d2:72:a2:2b:65:a3: b1:da:6a:4a:d9:52:f2:a9:fa:3a:bc:5b:34:c6:3b:db:df:8c: d2:95:f8:b8:3e:45:88:78:0e:99:d7:e5:93:2d:8d:63:34:2b: 9b:c6:07:9e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUSSYrn1f87qGggNKuNhg3DknEDIwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjUzQkM3RjhFOTE1NkIxNEUxMUQ1NUZEOEQzNThEMEE5 MUZDRThFMjAeFw0yNjAzMjYwOTE1NDBaFw0yNjAzMjcxMTAwNDBaMDMxMTAvBgNV BAMTKDFBN0QwMTNFNTM3MTdFNTI4MTJGMEEzRkFCMzg0RDYzQTU0Q0M5QzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZZQMSsz9tCTCxPgFOSr+bi4eU HflVrJBOUYdQwXofuX+h1x9te4k+cDUNo3pZI9XqSJ5IGiSHQ/kZbv3aMILZ12yT ucAq3GLFbpEJEp2xKBAsGJ09x/dbA+oza01FEqmc7B2IIOYxjAjj8RfeZsxCrVHe X4CQ/djs1Kmy7VsQ6lXkbXqbV7AKuOGkhLwS0oiFDuQR9SPqVH1uF/7icnbOIj7y nkYBmEmnF0Bnig2VcEE8edS4oLR9F9oJRKzVL4SfQPKLRdJjSbIjFh3zEyrCFJFN fRP9Qm8EMghaPt1J0E7Ke38vs7j/kdAg9tU+CMMxUwzNe2Ljc5AG3G2YH26rAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUGn0BPlNxflKBLwo/qzhNY6VMycAwHwYDVR0j BBgwFoAUtTvH+OkVaxThHVX9jTWNCpH86OIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRDIyUzJmRkQzdkJpR2dEYWpkYXY3WU5YeXhVcWpaZ1czeGV4amtWcHUy Tm0vMC9CNTNCQzdGOEU5MTU2QjE0RTExRDU1RkQ4RDM1OEQwQTkxRkNFOEUyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I1M0JDN0Y4RTkxNTZCMTRF MTFENTVGRDhEMzU4RDBBOTFGQ0U4RTIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RDIyUzJmRkQzdkJpR2dEYWpkYXY3WU5YeXhVcWpaZ1czeGV4amtWcHUyTm0vMC9C NTNCQzdGOEU5MTU2QjE0RTExRDU1RkQ4RDM1OEQwQTkxRkNFOEUyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvU/zCBK6FLmPWPYc/NFOaelN4f4VBVaE4xV4/BeLg0q9099jWO2frVPMoj1O atANiwPDoBoXC31Dt26xDDm+55AT4U5/V7JURcObLqu0X8LOXknuAIea2wz33khu NKJJWFtE1ZFF8hxHhmU2O6V1+wxM6HOxwkbIVAAtcR9rbbSrx6Eg3m/sIf6vZAaG WGNeZAviqOg38kY/NCerR4sT8zomV6LYX/oMsw9eNx5u6hYOoDzDYq5gRnUNOGYW a8DhiirHqU+Y4NhNDECXl5EHawPg0nKiK2WjsdpqStlS8qn6OrxbNMY729+M0pX4 uD5FiHgOmdflky2NYzQrm8YHng== -----END CERTIFICATE-----Generated at Thu Mar 26 20:00:29 2026 by rpki-client