$ rpki-client -vvf rpki-repo.registro.br/repo/Hc7K2Uv5Dz1bxiHXnMMmoGdgfXroQ6cUwcN9tUAmGhpv/0/BE25C152BACFD2DD988E23E9C97AA1AEB4BA5B3E.mft File: BE25C152BACFD2DD988E23E9C97AA1AEB4BA5B3E.mft (raw, json) Hash identifier: w71kNQXDgxdGSTnnKwej4I912SVKjEjMSismZm2GfB0= Subject key identifier: 3E:92:43:9C:6B:82:D0:CF:8C:44:FF:21:02:D4:2D:6B:F1:00:46:E2 Authority key identifier: BE:25:C1:52:BA:CF:D2:DD:98:8E:23:E9:C9:7A:A1:AE:B4:BA:5B:3E Certificate issuer: /CN=BE25C152BACFD2DD988E23E9C97AA1AEB4BA5B3E Certificate serial: 0F72E565A98B6938AC86974A0C57FFE58351CD47 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE25C152BACFD2DD988E23E9C97AA1AEB4BA5B3E.cer Subject info access: rsync://rpki-repo.registro.br/repo/Hc7K2Uv5Dz1bxiHXnMMmoGdgfXroQ6cUwcN9tUAmGhpv/0/BE25C152BACFD2DD988E23E9C97AA1AEB4BA5B3E.mft Manifest number: CF Signing time: Thu 26 Mar 2026 16:53:17 +0000 Manifest this update: Thu 26 Mar 2026 16:48:17 +0000 Manifest next update: Fri 27 Mar 2026 19:00:17 +0000 Files and hashes: 1: 323830343a343465303a3a2f33322d3438203d3e203631353836.roa (hash: EE+epePHX3kApXSOd4NEAz7bQWCJ2iABI0JjgleyzM0=) 2: 34352e37312e34382e302f32322d3234203d3e203631353836.roa (hash: 50nfXV1vfz6ixz96BZYaoDznaTp9SqqgyXgtQ8vAMVM=) 3: BE25C152BACFD2DD988E23E9C97AA1AEB4BA5B3E.crl (hash: 0BXfwla/YMsT5SdYBp9Q5HZCZP3/h0fl6OtwQXjIOv8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Hc7K2Uv5Dz1bxiHXnMMmoGdgfXroQ6cUwcN9tUAmGhpv/0/BE25C152BACFD2DD988E23E9C97AA1AEB4BA5B3E.crl rsync://rpki-repo.registro.br/repo/Hc7K2Uv5Dz1bxiHXnMMmoGdgfXroQ6cUwcN9tUAmGhpv/0/BE25C152BACFD2DD988E23E9C97AA1AEB4BA5B3E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE25C152BACFD2DD988E23E9C97AA1AEB4BA5B3E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 27 Mar 2026 19:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:72:e5:65:a9:8b:69:38:ac:86:97:4a:0c:57:ff:e5:83:51:cd:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE25C152BACFD2DD988E23E9C97AA1AEB4BA5B3E Validity Not Before: Mar 26 16:48:17 2026 GMT Not After : Mar 27 19:00:17 2026 GMT Subject: CN=3E92439C6B82D0CF8C44FF2102D42D6BF10046E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:06:2b:79:83:b2:6e:ab:a3:c5:31:ca:ec:ff: a2:0f:89:aa:1a:e2:82:f9:b0:26:f4:9c:a6:47:d2: c5:43:db:8c:45:75:df:96:5d:c6:68:3a:d2:c9:66: 68:51:2e:28:65:03:b6:af:37:e4:c5:cf:4b:33:fc: 0b:40:35:3d:8b:cc:95:e8:bf:75:7b:0c:cc:93:68: 5e:47:8f:85:ef:4f:b5:ac:be:fe:0f:75:b2:0b:ac: 79:6c:3e:44:42:95:9d:f3:f0:42:e6:42:23:7d:a1: 11:65:14:93:f2:f5:3c:ea:b8:f5:e8:6a:3c:78:c1: f2:8e:5f:98:31:47:30:91:0c:be:c0:c5:83:87:e7: d1:fb:93:7a:21:10:f3:f7:f8:f3:d1:1f:2c:36:fc: 1d:fe:0d:0a:14:1b:5e:69:db:26:1b:ae:b8:c7:f1: e0:67:36:97:00:17:58:49:e4:3a:d6:be:3d:4e:0d: f3:6c:15:cb:11:94:92:b9:dd:fb:fa:14:0d:74:79: 70:af:37:3e:e2:34:4e:d3:67:9e:50:b7:47:ec:be: 2c:40:40:64:da:ac:75:e9:dd:9a:c0:84:96:49:de: e9:80:21:62:7d:6e:98:1a:88:ce:fb:7e:55:0b:00: 65:1c:3c:f4:f0:2d:f9:7b:9a:1b:c8:c7:af:01:ff: 51:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:92:43:9C:6B:82:D0:CF:8C:44:FF:21:02:D4:2D:6B:F1:00:46:E2 X509v3 Authority Key Identifier: keyid:BE:25:C1:52:BA:CF:D2:DD:98:8E:23:E9:C9:7A:A1:AE:B4:BA:5B:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Hc7K2Uv5Dz1bxiHXnMMmoGdgfXroQ6cUwcN9tUAmGhpv/0/BE25C152BACFD2DD988E23E9C97AA1AEB4BA5B3E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE25C152BACFD2DD988E23E9C97AA1AEB4BA5B3E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hc7K2Uv5Dz1bxiHXnMMmoGdgfXroQ6cUwcN9tUAmGhpv/0/BE25C152BACFD2DD988E23E9C97AA1AEB4BA5B3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:11:3c:05:ed:6c:27:af:bd:04:cd:1a:13:3f:21:01:dc:ed: c0:c8:a5:42:b1:aa:7d:13:bc:f5:5b:9c:a3:e1:f1:65:bc:0f: e2:b2:2a:a1:52:05:7e:37:51:d0:1e:a0:1b:af:a4:61:4c:fc: 43:59:ef:f1:eb:12:42:eb:7d:0a:06:86:29:e2:c5:95:d4:f7: 1f:a1:39:e5:3b:3e:3c:fb:e3:c1:2a:1d:d8:4c:1a:5f:28:2d: 33:fb:63:14:74:59:f5:e4:07:d1:03:3c:6a:9e:d0:b1:00:07: 5a:39:b9:07:5d:0c:49:e4:cb:a6:89:54:ad:3a:c2:37:97:a7: 50:7e:77:10:0d:49:18:15:0d:34:d8:e8:63:0f:77:8a:63:cf: 6b:d6:03:25:9b:d9:a6:4d:37:af:21:a8:44:a3:ea:de:f9:d4: 66:d8:21:74:e6:30:08:d4:85:a3:86:0d:eb:18:26:9d:f5:1b: c3:84:77:fc:a2:f5:54:f4:37:7c:1d:1b:62:a7:f1:df:62:a7: 35:bf:9d:d2:57:81:47:2c:3d:0d:5b:1f:8a:94:9c:4c:f7:f7: b1:00:b3:1a:1c:d0:53:a2:83:10:17:65:ea:a1:ca:47:88:03: e6:8d:dc:2f:29:42:50:89:f2:97:96:a3:c3:3a:c2:65:7c:0f: 42:73:b9:0e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUD3LlZamLaTishpdKDFf/5YNRzUcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkUyNUMxNTJCQUNGRDJERDk4OEUyM0U5Qzk3QUExQUVC NEJBNUIzRTAeFw0yNjAzMjYxNjQ4MTdaFw0yNjAzMjcxOTAwMTdaMDMxMTAvBgNV BAMTKDNFOTI0MzlDNkI4MkQwQ0Y4QzQ0RkYyMTAyRDQyRDZCRjEwMDQ2RTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuBit5g7Juq6PFMcrs/6IPiaoa 4oL5sCb0nKZH0sVD24xFdd+WXcZoOtLJZmhRLihlA7avN+TFz0sz/AtANT2LzJXo v3V7DMyTaF5Hj4XvT7Wsvv4PdbILrHlsPkRClZ3z8ELmQiN9oRFlFJPy9TzquPXo ajx4wfKOX5gxRzCRDL7AxYOH59H7k3ohEPP3+PPRHyw2/B3+DQoUG15p2yYbrrjH 8eBnNpcAF1hJ5DrWvj1ODfNsFcsRlJK53fv6FA10eXCvNz7iNE7TZ55Qt0fsvixA QGTarHXp3ZrAhJZJ3umAIWJ9bpgaiM77flULAGUcPPTwLfl7mhvIx68B/1HPAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUPpJDnGuC0M+MRP8hAtQta/EARuIwHwYDVR0j BBgwFoAUviXBUrrP0t2YjiPpyXqhrrS6Wz4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSGM3SzJVdjVEejFieGlIWG5NTW1vR2RnZlhyb1E2Y1V3Y045dFVBbUdo cHYvMC9CRTI1QzE1MkJBQ0ZEMkREOTg4RTIzRTlDOTdBQTFBRUI0QkE1QjNFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JFMjVDMTUyQkFDRkQyREQ5 ODhFMjNFOUM5N0FBMUFFQjRCQTVCM0UuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SGM3SzJVdjVEejFieGlIWG5NTW1vR2RnZlhyb1E2Y1V3Y045dFVBbUdocHYvMC9C RTI1QzE1MkJBQ0ZEMkREOTg4RTIzRTlDOTdBQTFBRUI0QkE1QjNFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEALBE8Be1sJ6+9BM0aEz8hAdztwMilQrGqfRO89Vuco+HxZbwP4rIqoVIFfjdR 0B6gG6+kYUz8Q1nv8esSQut9CgaGKeLFldT3H6E55Ts+PPvjwSod2EwaXygtM/tj FHRZ9eQH0QM8ap7QsQAHWjm5B10MSeTLpolUrTrCN5enUH53EA1JGBUNNNjoYw93 imPPa9YDJZvZpk03ryGoRKPq3vnUZtghdOYwCNSFo4YN6xgmnfUbw4R3/KL1VPQ3 fB0bYqfx32KnNb+d0leBRyw9DVsfipScTPf3sQCzGhzQU6KDEBdl6qHKR4gD5o3c LylCUInyl5ajwzrCZXwPQnO5Dg== -----END CERTIFICATE-----Generated at Fri Mar 27 03:52:55 2026 by rpki-client