$ rpki-client -vvf rpki-repo.registro.br/repo/2zcXxm688UdzTnHCKPk49fSCV6Tc58TTHKuA5kkedkXR/0/BF68367BA9C194E56265EA3689DA1A2E695ABC42.mft File: BF68367BA9C194E56265EA3689DA1A2E695ABC42.mft (raw, json) Hash identifier: 3MNTxu4vp8uk9HVVIhkt3lw23UW2RY10oA5Ly3migi8= Subject key identifier: CD:18:2A:9C:87:99:E4:B3:AA:DC:9E:4E:A7:10:B6:F3:85:33:B5:A5 Authority key identifier: BF:68:36:7B:A9:C1:94:E5:62:65:EA:36:89:DA:1A:2E:69:5A:BC:42 Certificate issuer: /CN=BF68367BA9C194E56265EA3689DA1A2E695ABC42 Certificate serial: 6865BDE588576B3FC0B96BB637065B20540B80BD Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF68367BA9C194E56265EA3689DA1A2E695ABC42.cer Subject info access: rsync://rpki-repo.registro.br/repo/2zcXxm688UdzTnHCKPk49fSCV6Tc58TTHKuA5kkedkXR/0/BF68367BA9C194E56265EA3689DA1A2E695ABC42.mft Manifest number: 7A Signing time: Fri 17 Apr 2026 16:18:20 +0000 Manifest this update: Fri 17 Apr 2026 16:13:20 +0000 Manifest next update: Sat 18 Apr 2026 18:12:20 +0000 Files and hashes: 1: BF68367BA9C194E56265EA3689DA1A2E695ABC42.crl (hash: ldEk68spY6gdTzqSYLnIUOQw1f1AUKPgi1JySXvMLxs=) 2: 3138312e3233322e3234302e302f32322d3234203d3e20323731353530.roa (hash: bmzUQKBGoCibwkCkfQLsT9Y7VMqYOw530WoffvJ5Z+E=) 3: 323830343a376434343a3a2f33322d3438203d3e20323731353530.roa (hash: ZmEJlxfCjB01FfOsgXaQherYYGrs/PAQPCRqSg5n1As=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2zcXxm688UdzTnHCKPk49fSCV6Tc58TTHKuA5kkedkXR/0/BF68367BA9C194E56265EA3689DA1A2E695ABC42.crl rsync://rpki-repo.registro.br/repo/2zcXxm688UdzTnHCKPk49fSCV6Tc58TTHKuA5kkedkXR/0/BF68367BA9C194E56265EA3689DA1A2E695ABC42.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF68367BA9C194E56265EA3689DA1A2E695ABC42.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Apr 2026 18:12:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:65:bd:e5:88:57:6b:3f:c0:b9:6b:b6:37:06:5b:20:54:0b:80:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF68367BA9C194E56265EA3689DA1A2E695ABC42 Validity Not Before: Apr 17 16:13:20 2026 GMT Not After : Apr 18 18:12:20 2026 GMT Subject: CN=CD182A9C8799E4B3AADC9E4EA710B6F38533B5A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:ff:ee:ab:eb:51:c2:31:a3:4b:aa:fa:82:d2: 50:11:c1:16:39:44:ad:0e:c7:ae:f4:44:b7:a1:19: 06:84:61:79:00:29:8f:6d:80:64:26:8a:69:83:9c: ad:c5:f3:c8:9c:1e:ad:4b:26:ef:be:56:f0:b7:88: 35:46:a5:5a:65:1c:6b:a1:6a:b6:cc:c4:1c:9f:ac: 9d:33:ce:6d:9f:37:07:95:4a:49:62:7c:3b:2c:f6: 55:77:c1:3d:b2:e4:ba:33:cc:eb:be:5c:6c:94:6d: 43:d1:1f:15:dd:4b:4e:d2:03:83:ab:e4:83:dc:c1: a9:dc:de:2b:00:53:dd:ee:52:e8:f5:ee:10:28:0a: ed:aa:02:e5:60:80:d7:b6:24:ab:67:2a:98:e2:05: bf:ac:7d:ca:40:b7:9a:d3:29:b9:50:37:16:7d:eb: e9:24:cf:5c:e8:a2:87:36:4e:56:3d:41:48:54:d3: d2:86:b1:7c:ec:8b:a2:92:21:15:5e:4f:be:2d:93: db:e6:ab:f8:01:02:e0:71:ad:09:9e:05:8c:5f:13: fc:fb:90:53:2e:42:c8:c5:06:29:2f:02:27:a7:b1: 1c:c4:ca:67:0a:13:ea:88:55:cf:62:fb:7d:9b:59: 26:60:9a:f0:d1:a1:69:05:63:d4:cc:99:1c:35:45: 54:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:18:2A:9C:87:99:E4:B3:AA:DC:9E:4E:A7:10:B6:F3:85:33:B5:A5 X509v3 Authority Key Identifier: keyid:BF:68:36:7B:A9:C1:94:E5:62:65:EA:36:89:DA:1A:2E:69:5A:BC:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2zcXxm688UdzTnHCKPk49fSCV6Tc58TTHKuA5kkedkXR/0/BF68367BA9C194E56265EA3689DA1A2E695ABC42.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF68367BA9C194E56265EA3689DA1A2E695ABC42.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2zcXxm688UdzTnHCKPk49fSCV6Tc58TTHKuA5kkedkXR/0/BF68367BA9C194E56265EA3689DA1A2E695ABC42.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:6d:4e:7f:8d:a9:07:c2:cd:92:62:16:e5:80:a7:65:80:1d: 08:9f:18:8e:34:38:1c:48:6a:d9:ae:cf:58:66:6e:17:99:8b: 7a:be:50:24:aa:28:c5:0c:9c:c3:b7:41:d0:3f:43:72:77:88: 2c:d4:58:73:ac:2c:f3:22:ca:09:f9:bf:ee:dd:d1:3b:24:d3: a4:db:a5:2e:06:05:62:22:20:9a:b8:b5:f5:d8:c5:4c:c0:e6: 81:a5:a8:16:4f:59:39:9a:94:08:37:df:74:6e:a0:0b:7a:22: 68:dc:e6:83:e1:7b:cd:c7:b3:c4:99:25:6f:d4:7c:af:4d:a6: a5:d7:82:fa:f0:18:21:47:24:1d:ea:b6:6c:f5:36:cb:8a:1a: ce:1a:fc:e5:f9:e3:6b:95:29:8b:4a:10:1f:39:75:ab:12:32: 1a:5b:cf:bc:1f:55:39:be:c2:f5:8d:48:c1:46:13:10:20:9a: b4:16:70:67:af:2a:fc:b1:bb:46:94:cd:9e:b7:ec:a0:ec:45: 61:94:1b:bf:69:09:2d:c3:21:87:45:1c:f6:e7:43:62:84:d8: 81:38:88:ac:16:4c:9c:14:74:5b:88:c8:f5:12:1b:ea:98:b8: c2:24:d3:7c:5b:8c:bb:76:21:bc:77:41:1a:09:ae:13:64:14: db:02:79:c5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUaGW95YhXaz/AuWu2NwZbIFQLgL0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkY2ODM2N0JBOUMxOTRFNTYyNjVFQTM2ODlEQTFBMkU2 OTVBQkM0MjAeFw0yNjA0MTcxNjEzMjBaFw0yNjA0MTgxODEyMjBaMDMxMTAvBgNV BAMTKENEMTgyQTlDODc5OUU0QjNBQURDOUU0RUE3MTBCNkYzODUzM0I1QTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW/+6r61HCMaNLqvqC0lARwRY5 RK0Ox670RLehGQaEYXkAKY9tgGQmimmDnK3F88icHq1LJu++VvC3iDVGpVplHGuh arbMxByfrJ0zzm2fNweVSklifDss9lV3wT2y5LozzOu+XGyUbUPRHxXdS07SA4Or 5IPcwanc3isAU93uUuj17hAoCu2qAuVggNe2JKtnKpjiBb+sfcpAt5rTKblQNxZ9 6+kkz1zoooc2TlY9QUhU09KGsXzsi6KSIRVeT74tk9vmq/gBAuBxrQmeBYxfE/z7 kFMuQsjFBikvAiensRzEymcKE+qIVc9i+32bWSZgmvDRoWkFY9TMmRw1RVSDAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUzRgqnIeZ5LOq3J5OpxC284UztaUwHwYDVR0j BBgwFoAUv2g2e6nBlOViZeo2idoaLmlavEIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMnpjWHhtNjg4VWR6VG5IQ0tQazQ5ZlNDVjZUYzU4VFRIS3VBNWtrZWRr WFIvMC9CRjY4MzY3QkE5QzE5NEU1NjI2NUVBMzY4OURBMUEyRTY5NUFCQzQyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JGNjgzNjdCQTlDMTk0RTU2 MjY1RUEzNjg5REExQTJFNjk1QUJDNDIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MnpjWHhtNjg4VWR6VG5IQ0tQazQ5ZlNDVjZUYzU4VFRIS3VBNWtrZWRrWFIvMC9C RjY4MzY3QkE5QzE5NEU1NjI2NUVBMzY4OURBMUEyRTY5NUFCQzQyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbW1Of42pB8LNkmIW5YCnZYAdCJ8YjjQ4HEhq2a7PWGZuF5mLer5QJKooxQyc w7dB0D9DcneILNRYc6ws8yLKCfm/7t3ROyTTpNulLgYFYiIgmri19djFTMDmgaWo Fk9ZOZqUCDffdG6gC3oiaNzmg+F7zcezxJklb9R8r02mpdeC+vAYIUckHeq2bPU2 y4oazhr85fnja5Upi0oQHzl1qxIyGlvPvB9VOb7C9Y1IwUYTECCatBZwZ68q/LG7 RpTNnrfsoOxFYZQbv2kJLcMhh0Uc9udDYoTYgTiIrBZMnBR0W4jI9RIb6pi4wiTT fFuMu3YhvHdBGgmuE2QU2wJ5xQ== -----END CERTIFICATE-----Generated at Sat Apr 18 08:57:36 2026 by rpki-client