$ rpki-client -vvf rpki-repo.registro.br/repo/FBxuLpCf3yae9MGeB2c6TC9axBZGZDV5wcQ5vfFopGSE/1/203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.mft File: 203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.mft (raw, json) Hash identifier: BVcuVra9g/P3pHj1Paf3P2qqJCeg28JUTD9CKdtDvkg= Subject key identifier: CB:BF:AC:93:BE:39:1C:85:3E:5D:5F:AD:5F:C7:42:20:5A:76:55:36 Authority key identifier: 20:3D:CC:A7:DE:79:C8:C4:DA:BA:A1:0A:6C:A9:E9:3E:A7:D3:9D:F7 Certificate issuer: /CN=203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7 Certificate serial: 60FB1D110EDC8AEFCDC8B6C3158DB394B01C31BE Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.cer Subject info access: rsync://rpki-repo.registro.br/repo/FBxuLpCf3yae9MGeB2c6TC9axBZGZDV5wcQ5vfFopGSE/1/203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.mft Manifest number: 03C4 Signing time: Thu 26 Mar 2026 06:52:45 +0000 Manifest this update: Thu 26 Mar 2026 06:47:45 +0000 Manifest next update: Fri 27 Mar 2026 07:52:45 +0000 Files and hashes: 1: 3137372e35342e3234302e302f32302d3234203d3e20323632323939.roa (hash: sJuPnLliL5BAll/ob66pS6k5uH1gd8zUIA6VXGteRg4=) 2: 3137372e35342e3234302e302f32312d3234203d3e20323632323939.roa (hash: bW/QM+W5RTh3Fta1eb8SxlbvhGj87LNXYrNw38lB6Ug=) 3: 203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.crl (hash: GyFZmQ44xT2MdTR3YaCLyQhISeADjy7FzAIgtPV9PNo=) 4: 323830343a6138633a3a2f33322d3438203d3e20323632323939.roa (hash: Jh7lgKB/S4sNuKKNjXErREjCWds0jaCiCdxM7v7Rvig=) 5: 3230302e3130382e3136302e302f32322d3234203d3e20323632323939.roa (hash: hjkvUrLUUU0VQ67o4ucvyUwTiD+eK2nBuFfG35L4KVE=) 6: 3137372e35342e3234382e302f32312d3234203d3e20323632323939.roa (hash: WL9JVMJLQsrJopIbFwUHc8XZzX8VnykPoWjRv5RCWxY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/FBxuLpCf3yae9MGeB2c6TC9axBZGZDV5wcQ5vfFopGSE/1/203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.crl rsync://rpki-repo.registro.br/repo/FBxuLpCf3yae9MGeB2c6TC9axBZGZDV5wcQ5vfFopGSE/1/203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 27 Mar 2026 07:52:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:fb:1d:11:0e:dc:8a:ef:cd:c8:b6:c3:15:8d:b3:94:b0:1c:31:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7 Validity Not Before: Mar 26 06:47:45 2026 GMT Not After : Mar 27 07:52:45 2026 GMT Subject: CN=CBBFAC93BE391C853E5D5FAD5FC742205A765536 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:3e:8d:72:db:7b:39:5c:5e:e0:61:c8:30:d1: 0e:1b:10:03:ad:69:0c:f4:e6:31:08:c7:c4:c4:f9: 60:1d:d6:49:45:22:25:8d:3d:b8:a0:fb:26:f8:7b: 7d:d0:f8:2d:ae:58:c2:17:95:3a:8d:35:05:e6:b9: 14:19:66:71:c7:61:bb:e1:81:d9:2f:a1:8e:56:25: 23:bf:c1:63:36:18:93:4f:2f:41:d2:c8:dd:6e:10: 50:ed:60:b0:65:99:32:4e:c2:a2:7c:cf:cf:53:eb: 37:4b:15:1a:07:c0:b1:05:27:ed:2b:4b:cb:7f:eb: 27:fb:05:ba:f4:c8:02:37:03:1e:1a:99:18:f1:40: e5:4a:53:c4:1d:55:f2:8b:30:8c:ec:8f:09:cf:e5: 8b:8e:48:1b:13:83:19:cf:98:8a:f0:2a:e5:2f:49: 4f:e4:be:b9:e8:5c:6d:12:c0:a1:e5:f9:0e:c8:4f: c9:79:6b:aa:06:7d:04:7e:7a:93:07:f4:6d:8d:dc: ee:dc:db:e6:17:df:23:ef:8f:60:22:5e:2c:ac:6c: 96:02:da:3a:48:eb:85:f3:2e:3b:df:52:a7:f5:3e: d6:cd:40:6d:c7:62:e1:11:0a:57:8d:89:df:03:39: 78:2c:a5:59:c0:cd:9d:56:97:38:4c:58:63:a1:28: 1e:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:BF:AC:93:BE:39:1C:85:3E:5D:5F:AD:5F:C7:42:20:5A:76:55:36 X509v3 Authority Key Identifier: keyid:20:3D:CC:A7:DE:79:C8:C4:DA:BA:A1:0A:6C:A9:E9:3E:A7:D3:9D:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/FBxuLpCf3yae9MGeB2c6TC9axBZGZDV5wcQ5vfFopGSE/1/203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/FBxuLpCf3yae9MGeB2c6TC9axBZGZDV5wcQ5vfFopGSE/1/203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:b8:06:d6:92:1f:e8:f6:b0:1c:93:f1:76:c3:23:1a:de:a1: 04:ab:e0:47:1c:01:9d:92:ca:f6:fd:3b:ae:8f:77:27:98:11: 0f:a4:e0:98:d5:0c:de:d1:50:6b:aa:23:ab:c1:7d:48:9c:e2: 0e:57:b7:7d:7e:db:a9:3b:36:71:de:47:18:15:c3:35:2b:f3: 79:50:15:0d:3d:97:13:d2:a4:cf:45:4c:0f:c0:66:a6:b8:06: 69:8b:ce:5f:43:c7:86:18:1c:c7:e5:2b:8b:dc:e2:53:8b:66: c0:24:c2:81:e8:3e:c4:59:23:0b:e7:e7:79:3b:25:a1:90:4b: 7b:a2:92:0c:cd:18:7b:b7:4c:39:39:c4:83:fe:14:86:df:cb: 8e:1a:be:15:dc:53:a8:61:4b:e9:92:3a:ec:4a:0e:ea:bf:dc: 48:d4:fb:88:e6:a1:c1:8b:7c:bb:d6:41:e5:c4:39:af:c0:5e: 50:55:80:35:45:e5:dd:d6:9e:9d:ba:ea:13:81:dd:6a:60:b6: f1:f2:22:d4:3b:9b:c5:ab:a4:99:2e:4e:41:5a:ed:b6:4e:ea: 17:ba:13:8b:df:88:c4:22:90:5c:88:93:b0:f5:dc:72:43:4a: 64:ac:11:56:6f:1a:a6:de:54:cd:2b:e4:48:dd:2b:ca:84:96: a4:8e:3e:9d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUYPsdEQ7ciu/NyLbDFY2zlLAcMb4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjAzRENDQTdERTc5QzhDNERBQkFBMTBBNkNBOUU5M0VB N0QzOURGNzAeFw0yNjAzMjYwNjQ3NDVaFw0yNjAzMjcwNzUyNDVaMDMxMTAvBgNV BAMTKENCQkZBQzkzQkUzOTFDODUzRTVENUZBRDVGQzc0MjIwNUE3NjU1MzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCPo1y23s5XF7gYcgw0Q4bEAOt aQz05jEIx8TE+WAd1klFIiWNPbig+yb4e33Q+C2uWMIXlTqNNQXmuRQZZnHHYbvh gdkvoY5WJSO/wWM2GJNPL0HSyN1uEFDtYLBlmTJOwqJ8z89T6zdLFRoHwLEFJ+0r S8t/6yf7Bbr0yAI3Ax4amRjxQOVKU8QdVfKLMIzsjwnP5YuOSBsTgxnPmIrwKuUv SU/kvrnoXG0SwKHl+Q7IT8l5a6oGfQR+epMH9G2N3O7c2+YX3yPvj2AiXiysbJYC 2jpI64XzLjvfUqf1PtbNQG3HYuERCleNid8DOXgspVnAzZ1WlzhMWGOhKB7jAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUy7+sk745HIU+XV+tX8dCIFp2VTYwHwYDVR0j BBgwFoAUID3Mp955yMTauqEKbKnpPqfTnfcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRkJ4dUxwQ2YzeWFlOU1HZUIyYzZUQzlheEJaR1pEVjV3Y1E1dmZGb3BH U0UvMS8yMDNEQ0NBN0RFNzlDOEM0REFCQUExMEE2Q0E5RTkzRUE3RDM5REY3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIwM0RDQ0E3REU3OUM4QzRE QUJBQTEwQTZDQTlFOTNFQTdEMzlERjcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RkJ4dUxwQ2YzeWFlOU1HZUIyYzZUQzlheEJaR1pEVjV3Y1E1dmZGb3BHU0UvMS8y MDNEQ0NBN0RFNzlDOEM0REFCQUExMEE2Q0E5RTkzRUE3RDM5REY3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEADbgG1pIf6PawHJPxdsMjGt6hBKvgRxwBnZLK9v07ro93J5gRD6TgmNUM3tFQ a6ojq8F9SJziDle3fX7bqTs2cd5HGBXDNSvzeVAVDT2XE9Kkz0VMD8BmprgGaYvO X0PHhhgcx+Uri9ziU4tmwCTCgeg+xFkjC+fneTsloZBLe6KSDM0Ye7dMOTnEg/4U ht/Ljhq+FdxTqGFL6ZI67EoO6r/cSNT7iOahwYt8u9ZB5cQ5r8BeUFWANUXl3dae nbrqE4HdamC28fIi1DubxaukmS5OQVrttk7qF7oTi9+IxCKQXIiTsPXcckNKZKwR Vm8apt5UzSvkSN0ryoSWpI4+nQ== -----END CERTIFICATE-----Generated at Fri Mar 27 02:14:59 2026 by rpki-client