$ rpki-client -vvf rpki-repo.registro.br/repo/2zcXxm688UdzTnHCKPk49fSCV6Tc58TTHKuA5kkedkXR/0/BF68367BA9C194E56265EA3689DA1A2E695ABC42.mft File: BF68367BA9C194E56265EA3689DA1A2E695ABC42.mft (raw, json) Hash identifier: zuBn1ewK4axUNKqVez0LcS4FfYEGISXh2iiOyjQWF6o= Subject key identifier: 7D:4F:89:E3:6B:D6:48:EE:8E:C1:5B:54:EF:FC:0D:B4:C5:0B:8B:89 Authority key identifier: BF:68:36:7B:A9:C1:94:E5:62:65:EA:36:89:DA:1A:2E:69:5A:BC:42 Certificate issuer: /CN=BF68367BA9C194E56265EA3689DA1A2E695ABC42 Certificate serial: 4221E17A1259D80DB587E17CAE48D502B0DCD9DC Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF68367BA9C194E56265EA3689DA1A2E695ABC42.cer Subject info access: rsync://rpki-repo.registro.br/repo/2zcXxm688UdzTnHCKPk49fSCV6Tc58TTHKuA5kkedkXR/0/BF68367BA9C194E56265EA3689DA1A2E695ABC42.mft Manifest number: 3C Signing time: Sun 01 Mar 2026 23:47:08 +0000 Manifest this update: Sun 01 Mar 2026 23:42:08 +0000 Manifest next update: Tue 03 Mar 2026 02:08:08 +0000 Files and hashes: 1: 3138312e3233322e3234302e302f32322d3234203d3e20323731353530.roa (hash: bmzUQKBGoCibwkCkfQLsT9Y7VMqYOw530WoffvJ5Z+E=) 2: BF68367BA9C194E56265EA3689DA1A2E695ABC42.crl (hash: H/f5uAxuVspw3sC6pnDP2HocJmO8xjozo6dy4R5O9ho=) 3: 323830343a376434343a3a2f33322d3438203d3e20323731353530.roa (hash: ZmEJlxfCjB01FfOsgXaQherYYGrs/PAQPCRqSg5n1As=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2zcXxm688UdzTnHCKPk49fSCV6Tc58TTHKuA5kkedkXR/0/BF68367BA9C194E56265EA3689DA1A2E695ABC42.crl rsync://rpki-repo.registro.br/repo/2zcXxm688UdzTnHCKPk49fSCV6Tc58TTHKuA5kkedkXR/0/BF68367BA9C194E56265EA3689DA1A2E695ABC42.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF68367BA9C194E56265EA3689DA1A2E695ABC42.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 03 Mar 2026 02:08:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:21:e1:7a:12:59:d8:0d:b5:87:e1:7c:ae:48:d5:02:b0:dc:d9:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF68367BA9C194E56265EA3689DA1A2E695ABC42 Validity Not Before: Mar 1 23:42:08 2026 GMT Not After : Mar 3 02:08:08 2026 GMT Subject: CN=7D4F89E36BD648EE8EC15B54EFFC0DB4C50B8B89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:70:18:c2:fb:df:3c:c6:28:de:83:ba:ae:ab: 25:0b:53:33:45:4a:ac:6d:d6:b5:b8:d1:8b:16:da: 5b:71:db:9e:34:8b:f9:a2:33:c1:c1:70:b5:25:8d: 34:92:19:34:d8:76:14:f0:2f:0f:76:df:ff:7e:90: 36:84:63:60:08:cb:d2:0c:7e:ee:b5:55:4c:fc:45: b0:94:45:66:9c:62:84:ac:75:8d:9e:0a:27:fc:4b: c7:04:ce:f0:92:4c:1c:33:87:7f:0b:a1:e4:2c:0b: a3:e8:90:7a:26:ac:ae:95:57:30:fc:6d:66:e9:08: 58:5f:9e:a8:03:f3:2a:8e:99:a9:8f:3f:3f:7c:72: c2:57:9b:76:1f:e1:8f:62:0f:8b:87:cc:7c:48:1b: d0:5d:16:1d:57:88:cf:49:48:2b:32:de:f0:ad:88: 77:57:e7:08:c0:92:2d:21:25:b2:d4:37:cf:46:14: 2a:a3:29:53:f7:44:96:13:b1:79:28:2f:41:dd:4a: 93:a0:f6:4f:c0:d8:ad:9f:7c:38:e3:bd:fb:ca:ba: 1e:85:af:fe:a4:1a:6c:90:7c:6d:27:9a:72:ff:95: e5:54:7a:04:b9:cf:69:4f:66:dd:d3:f3:13:05:0d: f0:ca:7f:a9:ed:65:2b:5c:28:a4:95:ce:18:0a:37: 32:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:4F:89:E3:6B:D6:48:EE:8E:C1:5B:54:EF:FC:0D:B4:C5:0B:8B:89 X509v3 Authority Key Identifier: keyid:BF:68:36:7B:A9:C1:94:E5:62:65:EA:36:89:DA:1A:2E:69:5A:BC:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2zcXxm688UdzTnHCKPk49fSCV6Tc58TTHKuA5kkedkXR/0/BF68367BA9C194E56265EA3689DA1A2E695ABC42.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF68367BA9C194E56265EA3689DA1A2E695ABC42.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2zcXxm688UdzTnHCKPk49fSCV6Tc58TTHKuA5kkedkXR/0/BF68367BA9C194E56265EA3689DA1A2E695ABC42.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cc:29:2d:62:79:90:9f:6a:63:ae:22:c0:0c:0f:98:ae:c5:5f: 4d:ec:e4:62:91:ac:f2:9a:35:2d:b4:9b:ab:49:a7:3e:a4:4b: 63:45:c4:84:d6:16:9d:ce:d4:65:ce:09:20:89:58:df:d3:42: e4:7a:14:0f:16:29:6a:25:dc:c8:45:71:c2:3a:dc:16:cf:4f: 75:d5:89:72:c6:8e:b1:7c:20:4d:24:b1:80:a4:13:1c:e3:34: 73:d2:51:e6:ab:e3:b7:8c:13:16:6e:b6:5d:77:e2:49:b0:04: 98:15:07:df:f2:b3:ab:31:df:a0:10:7c:81:f8:f9:d4:59:f8: 6b:ff:82:0f:3f:44:02:58:4a:fc:ab:b6:4f:6d:9b:23:ae:2e: 8d:df:c6:07:22:b8:38:d9:f6:43:d2:6d:ca:15:0d:79:9c:d9: 73:b4:b6:c2:53:e4:da:f0:86:04:af:2a:2b:54:d9:19:01:fa: af:a9:0d:e3:02:88:01:24:8d:b3:7f:f5:f0:e3:cd:fc:4d:08: c6:5c:26:29:f1:1b:26:a1:90:11:eb:73:e1:a8:5b:48:a2:ef: a9:fd:06:22:bc:e7:6a:78:fa:79:5b:37:e8:15:fd:13:4b:54: b8:53:7f:16:5d:e8:be:7f:3f:ac:db:33:23:01:c2:05:04:b6: ca:a7:65:23 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUQiHhehJZ2A21h+F8rkjVArDc2dwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkY2ODM2N0JBOUMxOTRFNTYyNjVFQTM2ODlEQTFBMkU2 OTVBQkM0MjAeFw0yNjAzMDEyMzQyMDhaFw0yNjAzMDMwMjA4MDhaMDMxMTAvBgNV BAMTKDdENEY4OUUzNkJENjQ4RUU4RUMxNUI1NEVGRkMwREI0QzUwQjhCODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwcBjC+988xijeg7quqyULUzNF Sqxt1rW40YsW2ltx2540i/miM8HBcLUljTSSGTTYdhTwLw923/9+kDaEY2AIy9IM fu61VUz8RbCURWacYoSsdY2eCif8S8cEzvCSTBwzh38LoeQsC6PokHomrK6VVzD8 bWbpCFhfnqgD8yqOmamPPz98csJXm3Yf4Y9iD4uHzHxIG9BdFh1XiM9JSCsy3vCt iHdX5wjAki0hJbLUN89GFCqjKVP3RJYTsXkoL0HdSpOg9k/A2K2ffDjjvfvKuh6F r/6kGmyQfG0nmnL/leVUegS5z2lPZt3T8xMFDfDKf6ntZStcKKSVzhgKNzItAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUfU+J42vWSO6OwVtU7/wNtMULi4kwHwYDVR0j BBgwFoAUv2g2e6nBlOViZeo2idoaLmlavEIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMnpjWHhtNjg4VWR6VG5IQ0tQazQ5ZlNDVjZUYzU4VFRIS3VBNWtrZWRr WFIvMC9CRjY4MzY3QkE5QzE5NEU1NjI2NUVBMzY4OURBMUEyRTY5NUFCQzQyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JGNjgzNjdCQTlDMTk0RTU2 MjY1RUEzNjg5REExQTJFNjk1QUJDNDIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MnpjWHhtNjg4VWR6VG5IQ0tQazQ5ZlNDVjZUYzU4VFRIS3VBNWtrZWRrWFIvMC9C RjY4MzY3QkE5QzE5NEU1NjI2NUVBMzY4OURBMUEyRTY5NUFCQzQyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAzCktYnmQn2pjriLADA+YrsVfTezkYpGs8po1LbSbq0mnPqRLY0XEhNYWnc7U Zc4JIIlY39NC5HoUDxYpaiXcyEVxwjrcFs9PddWJcsaOsXwgTSSxgKQTHOM0c9JR 5qvjt4wTFm62XXfiSbAEmBUH3/KzqzHfoBB8gfj51Fn4a/+CDz9EAlhK/Ku2T22b I64ujd/GByK4ONn2Q9JtyhUNeZzZc7S2wlPk2vCGBK8qK1TZGQH6r6kN4wKIASSN s3/18OPN/E0IxlwmKfEbJqGQEetz4ahbSKLvqf0GIrznanj6eVs36BX9E0tUuFN/ Fl3ovn8/rNszIwHCBQS2yqdlIw== -----END CERTIFICATE-----Generated at Mon Mar 2 17:23:29 2026 by rpki-client