$ rpki-client -vvf rpki-repo.registro.br/repo/9uRvUc19rNh1hqYfcp511C4ASY6B9kDbbaJZS8EReSpS/1/BB0C335B8FAE649732EBF11CC0FEC64FC701798A.mft File: BB0C335B8FAE649732EBF11CC0FEC64FC701798A.mft (raw, json) Hash identifier: mLWqIy26znWWvLpNkCN6HVyFuZNjYvf/WloG/iRKIiw= Subject key identifier: 1E:8D:E2:CC:E3:B3:31:77:91:1C:C3:74:B0:63:72:EC:BF:BA:5D:74 Authority key identifier: BB:0C:33:5B:8F:AE:64:97:32:EB:F1:1C:C0:FE:C6:4F:C7:01:79:8A Certificate issuer: /CN=BB0C335B8FAE649732EBF11CC0FEC64FC701798A Certificate serial: 2EBE8953956FFAEB0D3ECDDC9D7B6EE6FEC382F9 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB0C335B8FAE649732EBF11CC0FEC64FC701798A.cer Subject info access: rsync://rpki-repo.registro.br/repo/9uRvUc19rNh1hqYfcp511C4ASY6B9kDbbaJZS8EReSpS/1/BB0C335B8FAE649732EBF11CC0FEC64FC701798A.mft Manifest number: 03A6 Signing time: Sun 01 Mar 2026 08:20:34 +0000 Manifest this update: Sun 01 Mar 2026 08:15:34 +0000 Manifest next update: Mon 02 Mar 2026 12:18:34 +0000 Files and hashes: 1: 323830343a376233343a3a2f33322d3431203d3e20323731343137.roa (hash: ZdRV9O6UEAMUReaH46a7nvJRkDR7hUawIqlvB2xkGt0=) 2: 3138372e36332e3134342e302f32322d3233203d3e20323731343137.roa (hash: VRdy8v/hOdehpnfYJjwOQWAIt+UC7d+3XsL+xNyroGk=) 3: BB0C335B8FAE649732EBF11CC0FEC64FC701798A.crl (hash: XpxEqnbDCarUP+77s+9+ihc1iw5StpSg3L/oROyjvlQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9uRvUc19rNh1hqYfcp511C4ASY6B9kDbbaJZS8EReSpS/1/BB0C335B8FAE649732EBF11CC0FEC64FC701798A.crl rsync://rpki-repo.registro.br/repo/9uRvUc19rNh1hqYfcp511C4ASY6B9kDbbaJZS8EReSpS/1/BB0C335B8FAE649732EBF11CC0FEC64FC701798A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB0C335B8FAE649732EBF11CC0FEC64FC701798A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 02 Mar 2026 12:18:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:be:89:53:95:6f:fa:eb:0d:3e:cd:dc:9d:7b:6e:e6:fe:c3:82:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB0C335B8FAE649732EBF11CC0FEC64FC701798A Validity Not Before: Mar 1 08:15:34 2026 GMT Not After : Mar 2 12:18:34 2026 GMT Subject: CN=1E8DE2CCE3B33177911CC374B06372ECBFBA5D74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d9:3d:c7:85:ee:e6:6f:16:b3:69:75:41:cd: e6:8b:6c:a2:8b:7c:c5:cc:5b:f5:88:22:36:9d:57: 1e:06:56:4a:e9:12:7a:36:08:d6:47:82:0b:fd:1d: 1b:73:da:32:68:e0:94:d0:14:00:44:30:17:a5:c2: e9:c6:4f:85:fe:86:39:7d:36:e2:a7:21:b5:c0:bf: 00:13:22:69:f8:fa:e8:58:79:0b:45:32:a9:bb:21: 1a:c8:82:d1:07:ee:f3:30:ae:78:c2:07:86:4e:10: cd:cd:86:ac:2b:5b:bc:9d:19:70:bd:c3:4b:5c:1a: ae:79:7f:99:48:ca:b2:40:56:71:4e:b6:23:87:e1: 6a:4c:b1:df:bc:5a:f9:68:3d:22:6f:61:0a:a7:4a: 14:85:51:80:35:28:3e:7e:d6:2d:63:d9:e6:a1:b8: d8:70:b4:40:79:3e:3f:c1:5b:5e:ef:cb:46:f6:15: 39:4d:d0:23:5e:d8:62:54:65:68:3d:ce:fb:57:d2: 50:b2:9c:7f:85:c7:ec:d9:d4:df:50:10:c7:8d:7d: 73:d5:b4:1f:c4:54:ce:3a:0b:14:4d:6f:f2:51:7d: 90:77:1d:81:db:8a:40:a7:3f:28:d5:ae:1b:18:43: ed:7e:c1:ed:f3:3b:fc:01:73:df:a5:87:85:a4:bc: 25:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:8D:E2:CC:E3:B3:31:77:91:1C:C3:74:B0:63:72:EC:BF:BA:5D:74 X509v3 Authority Key Identifier: keyid:BB:0C:33:5B:8F:AE:64:97:32:EB:F1:1C:C0:FE:C6:4F:C7:01:79:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9uRvUc19rNh1hqYfcp511C4ASY6B9kDbbaJZS8EReSpS/1/BB0C335B8FAE649732EBF11CC0FEC64FC701798A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB0C335B8FAE649732EBF11CC0FEC64FC701798A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9uRvUc19rNh1hqYfcp511C4ASY6B9kDbbaJZS8EReSpS/1/BB0C335B8FAE649732EBF11CC0FEC64FC701798A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:4c:5a:53:da:3b:01:0f:80:0d:01:02:61:60:9c:f3:1f:36: 61:06:ab:4a:53:5d:f1:d3:15:53:9f:24:30:e8:78:87:53:56: f4:5b:4f:0b:d5:9b:e5:ea:36:33:43:a4:06:86:43:0a:69:ed: a5:96:ae:d2:c9:ec:46:c1:ad:7c:5b:35:0d:7e:9c:b4:d4:05: 57:a4:c2:30:5e:31:d3:9b:33:93:46:c6:c4:63:e2:20:87:00: 57:a4:e4:85:f2:b7:ce:a0:45:f7:15:54:11:d5:f4:ec:75:6a: 6e:32:5d:6a:2e:d8:f8:aa:8f:79:30:eb:a3:ef:da:0d:d9:ac: e4:09:5a:f3:88:00:87:31:a1:7b:1d:08:97:cd:ac:88:52:9d: 44:ed:ae:ca:b9:e7:0f:52:f6:ee:08:7c:d2:e2:92:7d:02:79: a5:9c:ed:34:3e:22:e5:79:79:ad:5b:33:f2:29:47:7b:fd:f9: f6:ab:15:54:93:5b:09:8a:4f:bb:07:e9:82:00:7c:35:58:e2: 59:63:9d:bf:33:57:fe:c0:3e:a7:ad:35:7a:f2:ff:f2:fb:c9: 9b:84:a2:e6:5f:e8:ac:ee:92:a9:dd:a6:2d:9f:07:bf:5b:fb: 5b:fd:eb:2b:0c:b7:80:a6:63:0b:41:f9:cb:fc:f4:46:e0:11: 21:3e:7b:10 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIULr6JU5Vv+usNPs3cnXtu5v7DgvkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkIwQzMzNUI4RkFFNjQ5NzMyRUJGMTFDQzBGRUM2NEZD NzAxNzk4QTAeFw0yNjAzMDEwODE1MzRaFw0yNjAzMDIxMjE4MzRaMDMxMTAvBgNV BAMTKDFFOERFMkNDRTNCMzMxNzc5MTFDQzM3NEIwNjM3MkVDQkZCQTVENzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC82T3Hhe7mbxazaXVBzeaLbKKL fMXMW/WIIjadVx4GVkrpEno2CNZHggv9HRtz2jJo4JTQFABEMBelwunGT4X+hjl9 NuKnIbXAvwATImn4+uhYeQtFMqm7IRrIgtEH7vMwrnjCB4ZOEM3NhqwrW7ydGXC9 w0tcGq55f5lIyrJAVnFOtiOH4WpMsd+8WvloPSJvYQqnShSFUYA1KD5+1i1j2eah uNhwtEB5Pj/BW17vy0b2FTlN0CNe2GJUZWg9zvtX0lCynH+Fx+zZ1N9QEMeNfXPV tB/EVM46CxRNb/JRfZB3HYHbikCnPyjVrhsYQ+1+we3zO/wBc9+lh4WkvCXJAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUHo3izOOzMXeRHMN0sGNy7L+6XXQwHwYDVR0j BBgwFoAUuwwzW4+uZJcy6/EcwP7GT8cBeYowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOXVSdlVjMTlyTmgxaHFZZmNwNTExQzRBU1k2QjlrRGJiYUpaUzhFUmVT cFMvMS9CQjBDMzM1QjhGQUU2NDk3MzJFQkYxMUNDMEZFQzY0RkM3MDE3OThBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JCMEMzMzVCOEZBRTY0OTcz MkVCRjExQ0MwRkVDNjRGQzcwMTc5OEEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OXVSdlVjMTlyTmgxaHFZZmNwNTExQzRBU1k2QjlrRGJiYUpaUzhFUmVTcFMvMS9C QjBDMzM1QjhGQUU2NDk3MzJFQkYxMUNDMEZFQzY0RkM3MDE3OThBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEATExaU9o7AQ+ADQECYWCc8x82YQarSlNd8dMVU58kMOh4h1NW9FtPC9Wb5eo2 M0OkBoZDCmntpZau0snsRsGtfFs1DX6ctNQFV6TCMF4x05szk0bGxGPiIIcAV6Tk hfK3zqBF9xVUEdX07HVqbjJdai7Y+KqPeTDro+/aDdms5Ala84gAhzGhex0Il82s iFKdRO2uyrnnD1L27gh80uKSfQJ5pZztND4i5Xl5rVsz8ilHe/359qsVVJNbCYpP uwfpggB8NVjiWWOdvzNX/sA+p601evL/8vvJm4Si5l/orO6Sqd2mLZ8Hv1v7W/3r Kwy3gKZjC0H5y/z0RuARIT57EA== -----END CERTIFICATE-----Generated at Sun Mar 1 21:14:01 2026 by rpki-client