$ rpki-client -vvf rpki-repo.registro.br/repo/Gm9nqW21EVsfybUHSobWpLLCEG1K4PKSzJwQF3pdrut7/0/2BA7E3F6A06E73CE8FAE470EEFDC07F81AC04CDD.mft File: 2BA7E3F6A06E73CE8FAE470EEFDC07F81AC04CDD.mft (raw, json) Hash identifier: FleCcH7V9gvYKY52xCIFuUeqvgZEWT0PRqBOeOi5eRo= Subject key identifier: 0C:9F:3B:34:0C:6E:17:95:73:41:94:26:F1:8D:32:7A:7E:EF:19:69 Authority key identifier: 2B:A7:E3:F6:A0:6E:73:CE:8F:AE:47:0E:EF:DC:07:F8:1A:C0:4C:DD Certificate issuer: /CN=2BA7E3F6A06E73CE8FAE470EEFDC07F81AC04CDD Certificate serial: 38BED454832D4D5F0A94D1EBFBD52B635DC3B7EF Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BA7E3F6A06E73CE8FAE470EEFDC07F81AC04CDD.cer Subject info access: rsync://rpki-repo.registro.br/repo/Gm9nqW21EVsfybUHSobWpLLCEG1K4PKSzJwQF3pdrut7/0/2BA7E3F6A06E73CE8FAE470EEFDC07F81AC04CDD.mft Manifest number: 4C Signing time: Wed 25 Mar 2026 10:30:49 +0000 Manifest this update: Wed 25 Mar 2026 10:25:49 +0000 Manifest next update: Thu 26 Mar 2026 11:17:49 +0000 Files and hashes: 1: 2BA7E3F6A06E73CE8FAE470EEFDC07F81AC04CDD.crl (hash: iYcNaBdlIyimmIwIqyOF8RVYIJ0STyufCzd7T0ff/JY=) 2: 323830343a333230303a3a2f33322d3438203d3e20323635303530.roa (hash: JNkuPVkslJhEy5vxVPsp0mnwk/L8rP8+/jTHXEJg2FI=) 3: 3137302e3135302e3232302e302f32322d3234203d3e20323635303530.roa (hash: mO6UbLwv9B7xL5T6Fb4Y4qhDxrjBJyZngbWHDuA7/WE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Gm9nqW21EVsfybUHSobWpLLCEG1K4PKSzJwQF3pdrut7/0/2BA7E3F6A06E73CE8FAE470EEFDC07F81AC04CDD.crl rsync://rpki-repo.registro.br/repo/Gm9nqW21EVsfybUHSobWpLLCEG1K4PKSzJwQF3pdrut7/0/2BA7E3F6A06E73CE8FAE470EEFDC07F81AC04CDD.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BA7E3F6A06E73CE8FAE470EEFDC07F81AC04CDD.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 26 Mar 2026 11:17:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:be:d4:54:83:2d:4d:5f:0a:94:d1:eb:fb:d5:2b:63:5d:c3:b7:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2BA7E3F6A06E73CE8FAE470EEFDC07F81AC04CDD Validity Not Before: Mar 25 10:25:49 2026 GMT Not After : Mar 26 11:17:49 2026 GMT Subject: CN=0C9F3B340C6E179573419426F18D327A7EEF1969 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:55:66:b4:c1:15:79:03:50:2f:02:26:85:db: d5:47:ce:2b:86:32:16:0a:62:5b:27:ad:52:d7:1e: fc:dd:b6:82:fa:f7:12:87:c3:72:06:86:21:0a:48: 4e:ec:7c:a5:f4:af:17:77:3c:c1:37:97:30:fc:2c: 5f:9d:66:46:47:9a:3f:67:29:c6:f2:66:98:1a:ba: e2:5e:5d:2d:bb:6d:13:e6:f1:aa:b6:4a:94:10:36: 06:48:a5:77:2e:9f:8b:fd:f7:d0:06:77:05:fe:87: 45:e8:72:b0:a2:17:5d:64:a2:28:ac:cc:7a:cb:b8: ce:ac:ff:af:1b:3d:62:23:f7:97:d3:e1:11:e5:19: 1b:96:da:4e:a0:98:f3:75:19:79:4b:a2:cb:a4:cc: 4d:c8:7c:7c:76:ad:0b:d5:c0:34:b5:b0:8d:9e:25: 81:39:f3:0b:0a:71:7a:4c:c5:9c:af:a1:cc:ca:52: eb:85:07:93:81:a1:ad:0c:4e:e5:24:37:a3:21:ca: e3:a7:37:44:52:4f:b4:a2:30:72:9b:7c:7b:9c:63: 63:30:71:9e:89:5f:9e:60:71:12:f5:de:01:6b:40: 90:48:55:0b:33:ff:2c:8a:26:c8:16:08:22:7d:bd: f4:1d:11:e1:22:b5:72:62:33:9f:de:2f:df:16:09: c0:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:9F:3B:34:0C:6E:17:95:73:41:94:26:F1:8D:32:7A:7E:EF:19:69 X509v3 Authority Key Identifier: keyid:2B:A7:E3:F6:A0:6E:73:CE:8F:AE:47:0E:EF:DC:07:F8:1A:C0:4C:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Gm9nqW21EVsfybUHSobWpLLCEG1K4PKSzJwQF3pdrut7/0/2BA7E3F6A06E73CE8FAE470EEFDC07F81AC04CDD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BA7E3F6A06E73CE8FAE470EEFDC07F81AC04CDD.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gm9nqW21EVsfybUHSobWpLLCEG1K4PKSzJwQF3pdrut7/0/2BA7E3F6A06E73CE8FAE470EEFDC07F81AC04CDD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:2c:c8:47:dc:a6:5e:3c:66:4d:aa:b8:d2:f9:37:00:5d:17: 37:c2:d0:14:b3:b1:94:e1:c2:a3:ab:c9:78:42:cb:ed:63:1c: 7d:54:9c:fc:5d:06:ed:16:58:42:bb:58:17:bf:2f:55:ad:18: 6d:58:d7:e1:ff:14:12:a9:89:76:f8:78:f6:0c:b3:ac:7e:57: 88:bb:b8:01:93:26:d0:36:64:e4:1f:5d:b7:9e:58:d2:72:9c: 6b:9b:2f:8c:3f:79:f9:3d:22:58:76:eb:be:b4:fc:d1:25:c9: 8d:53:7d:8b:3d:8d:d0:50:45:7a:85:84:20:9f:98:e9:81:78: e1:3e:98:62:15:94:75:cf:9d:db:07:1f:20:89:d7:ea:b3:29: 79:69:83:b9:97:21:2f:04:3e:73:3c:f4:78:1d:7c:4d:58:1e: 27:97:01:a8:3f:5d:a7:41:15:b0:80:22:0b:1f:a5:a0:71:33: 4c:d4:23:20:c2:fa:c3:26:51:80:49:b9:c7:93:ef:b5:42:29: 27:e2:89:06:07:9c:f6:f5:4d:a3:4c:fa:a8:bc:4a:da:4a:23: 4a:1c:93:f2:ca:9b:d6:60:4c:e5:ac:33:64:ee:2f:e6:76:0a: 06:53:ad:bc:40:19:b9:da:8f:ff:9d:08:33:81:3d:73:58:d1: c5:b9:d4:7a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUOL7UVIMtTV8KlNHr+9UrY13Dt+8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkJBN0UzRjZBMDZFNzNDRThGQUU0NzBFRUZEQzA3Rjgx QUMwNENERDAeFw0yNjAzMjUxMDI1NDlaFw0yNjAzMjYxMTE3NDlaMDMxMTAvBgNV BAMTKDBDOUYzQjM0MEM2RTE3OTU3MzQxOTQyNkYxOEQzMjdBN0VFRjE5NjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBVWa0wRV5A1AvAiaF29VHziuG MhYKYlsnrVLXHvzdtoL69xKHw3IGhiEKSE7sfKX0rxd3PME3lzD8LF+dZkZHmj9n KcbyZpgauuJeXS27bRPm8aq2SpQQNgZIpXcun4v999AGdwX+h0XocrCiF11koiis zHrLuM6s/68bPWIj95fT4RHlGRuW2k6gmPN1GXlLosukzE3IfHx2rQvVwDS1sI2e JYE58wsKcXpMxZyvoczKUuuFB5OBoa0MTuUkN6MhyuOnN0RST7SiMHKbfHucY2Mw cZ6JX55gcRL13gFrQJBIVQsz/yyKJsgWCCJ9vfQdEeEitXJiM5/eL98WCcAFAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUDJ87NAxuF5VzQZQm8Y0yen7vGWkwHwYDVR0j BBgwFoAUK6fj9qBuc86PrkcO79wH+BrATN0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR205bnFXMjFFVnNmeWJVSFNvYldwTExDRUcxSzRQS1N6SndRRjNwZHJ1 dDcvMC8yQkE3RTNGNkEwNkU3M0NFOEZBRTQ3MEVFRkRDMDdGODFBQzA0Q0RELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJCQTdFM0Y2QTA2RTczQ0U4 RkFFNDcwRUVGREMwN0Y4MUFDMDRDREQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R205bnFXMjFFVnNmeWJVSFNvYldwTExDRUcxSzRQS1N6SndRRjNwZHJ1dDcvMC8y QkE3RTNGNkEwNkU3M0NFOEZBRTQ3MEVFRkRDMDdGODFBQzA0Q0RELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPSzIR9ymXjxmTaq40vk3AF0XN8LQFLOxlOHCo6vJeELL7WMcfVSc/F0G7RZY QrtYF78vVa0YbVjX4f8UEqmJdvh49gyzrH5XiLu4AZMm0DZk5B9dt55Y0nKca5sv jD95+T0iWHbrvrT80SXJjVN9iz2N0FBFeoWEIJ+Y6YF44T6YYhWUdc+d2wcfIInX 6rMpeWmDuZchLwQ+czz0eB18TVgeJ5cBqD9dp0EVsIAiCx+loHEzTNQjIML6wyZR gEm5x5PvtUIpJ+KJBgec9vVNo0z6qLxK2kojShyT8sqb1mBM5awzZO4v5nYKBlOt vEAZudqP/50IM4E9c1jRxbnUeg== -----END CERTIFICATE-----Generated at Wed Mar 25 23:59:03 2026 by rpki-client