$ rpki-client -vvf rpki-repo.registro.br/repo/BCneDvRBFSAzp7iw6SH6NKUw9oFjgcLDiHALZ3YEUrT7/1/CFB7582F28699F351069C8C76CC97167BF7BB2EE.mft File: CFB7582F28699F351069C8C76CC97167BF7BB2EE.mft (raw, json) Hash identifier: hqmLLuFHFIVv2Sn/AaMo+M6WOjocg8Bg7No/r1ZIbbw= Subject key identifier: 7B:FA:FE:CE:E1:03:DF:3F:01:3C:F2:77:3F:E2:D6:25:69:DA:C9:B2 Authority key identifier: CF:B7:58:2F:28:69:9F:35:10:69:C8:C7:6C:C9:71:67:BF:7B:B2:EE Certificate issuer: /CN=CFB7582F28699F351069C8C76CC97167BF7BB2EE Certificate serial: 195049848D00B111F691D6ECB57E6152D8441E4C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFB7582F28699F351069C8C76CC97167BF7BB2EE.cer Subject info access: rsync://rpki-repo.registro.br/repo/BCneDvRBFSAzp7iw6SH6NKUw9oFjgcLDiHALZ3YEUrT7/1/CFB7582F28699F351069C8C76CC97167BF7BB2EE.mft Manifest number: 03A6 Signing time: Mon 02 Mar 2026 06:57:05 +0000 Manifest this update: Mon 02 Mar 2026 06:52:05 +0000 Manifest next update: Tue 03 Mar 2026 09:53:05 +0000 Files and hashes: 1: 3133382e3131382e3235322e302f32322d3234203d3e203532373432.roa (hash: VlQMtP6NQInhiwVIoJiXBUj4Ie/wB4WGdHL21LfKPc8=) 2: 323830343a6362303a3a2f33322d3438203d3e203532373432.roa (hash: OhngJLTjITTfBnt+qyHLrtVqgrZC2VpFlDFytpAhzhI=) 3: CFB7582F28699F351069C8C76CC97167BF7BB2EE.crl (hash: uqpZ3Gity4WnguzFDr9ho5MG06nndqmJ/vyiIx8/ex8=) 4: 3137372e3133302e31362e302f32302d3234203d3e203532373432.roa (hash: rJari9HForGWIAVn++KHhqqJxayzpXRfuI70oICH5Ek=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BCneDvRBFSAzp7iw6SH6NKUw9oFjgcLDiHALZ3YEUrT7/1/CFB7582F28699F351069C8C76CC97167BF7BB2EE.crl rsync://rpki-repo.registro.br/repo/BCneDvRBFSAzp7iw6SH6NKUw9oFjgcLDiHALZ3YEUrT7/1/CFB7582F28699F351069C8C76CC97167BF7BB2EE.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFB7582F28699F351069C8C76CC97167BF7BB2EE.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 03 Mar 2026 09:53:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:50:49:84:8d:00:b1:11:f6:91:d6:ec:b5:7e:61:52:d8:44:1e:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFB7582F28699F351069C8C76CC97167BF7BB2EE Validity Not Before: Mar 2 06:52:05 2026 GMT Not After : Mar 3 09:53:05 2026 GMT Subject: CN=7BFAFECEE103DF3F013CF2773FE2D62569DAC9B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:b5:fa:02:61:32:ba:57:98:67:14:23:8b:06: 7e:41:bf:01:a9:8c:92:8f:46:6c:cf:15:2e:0b:41: 3a:73:ae:ea:8d:56:35:d0:c7:3c:1f:e6:0e:44:aa: 61:3e:50:89:da:f7:eb:ad:ab:40:f4:9d:53:27:96: f9:6c:73:e0:da:40:96:e5:4a:87:58:3e:7d:0d:6a: 4e:07:85:79:af:9a:5d:71:f1:44:a0:01:f1:a2:46: 55:48:cc:0d:c5:5e:c3:5b:16:8b:b7:84:51:c6:13: 4f:87:1d:fa:2a:ec:ac:79:ac:0b:cb:c2:07:ae:d7: 70:5a:c2:5c:0c:48:5f:e4:f9:2c:52:a1:d7:78:93: 64:7a:d5:fd:fe:30:5c:76:a0:05:4d:2e:82:c5:8b: a4:25:9c:cd:c7:89:3e:bc:c8:3c:3b:2c:c2:3b:47: 1a:5b:70:75:32:58:6f:4d:0b:74:be:3a:4b:60:e1: 75:85:f8:8c:8d:37:c1:d3:39:cd:33:87:8b:7b:af: f7:46:7d:1b:08:dc:8e:9f:6b:fc:8d:c7:07:f2:3b: a8:26:a1:77:df:f3:34:0d:e9:ec:01:ad:25:ea:38: a4:96:78:7c:40:44:58:e8:ad:46:a7:10:1e:79:10: b7:4e:29:27:72:b9:b4:39:16:55:b6:3a:0c:e5:d6: 33:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:FA:FE:CE:E1:03:DF:3F:01:3C:F2:77:3F:E2:D6:25:69:DA:C9:B2 X509v3 Authority Key Identifier: keyid:CF:B7:58:2F:28:69:9F:35:10:69:C8:C7:6C:C9:71:67:BF:7B:B2:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BCneDvRBFSAzp7iw6SH6NKUw9oFjgcLDiHALZ3YEUrT7/1/CFB7582F28699F351069C8C76CC97167BF7BB2EE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFB7582F28699F351069C8C76CC97167BF7BB2EE.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BCneDvRBFSAzp7iw6SH6NKUw9oFjgcLDiHALZ3YEUrT7/1/CFB7582F28699F351069C8C76CC97167BF7BB2EE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:8d:11:e3:20:9d:83:8d:ae:73:84:e1:94:03:21:8c:48:25: 28:ed:f3:9c:bb:3b:50:d1:10:23:25:3f:50:0a:b4:e8:48:4a: a6:8b:77:aa:59:c3:5f:78:11:c7:6b:c9:85:a0:6a:26:1c:fd: 4e:2e:3d:e2:69:e1:25:3d:51:86:8f:8a:e7:9c:8d:9c:0e:9c: 9a:99:74:d0:36:be:4e:32:4a:83:f7:50:2b:28:df:b5:fa:1d: 69:b9:a0:2a:13:fa:7e:db:dc:a1:44:e7:34:39:8a:47:03:c8: 1e:6f:18:b6:d6:82:a3:d5:5f:28:6c:19:12:23:df:92:2a:a5: 69:92:49:dc:cc:3c:a4:20:aa:07:ab:ea:5a:34:60:f5:bf:db: dd:fa:15:e7:42:cc:c1:c7:bc:92:9c:46:70:7e:17:ac:5b:ec: f3:76:60:68:9f:76:e0:70:03:57:8f:e0:39:b5:9e:f9:ce:a7: 7b:30:75:d0:ed:07:0e:01:85:45:d4:76:ec:5a:ef:30:23:3e: a4:96:10:fc:2c:1e:be:96:77:57:6e:ef:b4:84:8e:e0:27:7e: f3:48:f1:8d:47:19:7e:cb:a8:fa:ab:8f:6d:df:44:e7:5f:f4: 39:1d:6a:2e:1b:b5:d6:aa:8d:1b:9f:ae:27:25:c0:f8:c8:a7: 15:3e:5e:43 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUGVBJhI0AsRH2kdbstX5hUthEHkwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZCNzU4MkYyODY5OUYzNTEwNjlDOEM3NkNDOTcxNjdC RjdCQjJFRTAeFw0yNjAzMDIwNjUyMDVaFw0yNjAzMDMwOTUzMDVaMDMxMTAvBgNV BAMTKDdCRkFGRUNFRTEwM0RGM0YwMTNDRjI3NzNGRTJENjI1NjlEQUM5QjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXtfoCYTK6V5hnFCOLBn5BvwGp jJKPRmzPFS4LQTpzruqNVjXQxzwf5g5EqmE+UIna9+utq0D0nVMnlvlsc+DaQJbl SodYPn0Nak4HhXmvml1x8USgAfGiRlVIzA3FXsNbFou3hFHGE0+HHfoq7Kx5rAvL wgeu13BawlwMSF/k+SxSodd4k2R61f3+MFx2oAVNLoLFi6QlnM3HiT68yDw7LMI7 RxpbcHUyWG9NC3S+Oktg4XWF+IyNN8HTOc0zh4t7r/dGfRsI3I6fa/yNxwfyO6gm oXff8zQN6ewBrSXqOKSWeHxARFjorUanEB55ELdOKSdyubQ5FlW2Ogzl1jOFAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUe/r+zuED3z8BPPJ3P+LWJWnaybIwHwYDVR0j BBgwFoAUz7dYLyhpnzUQacjHbMlxZ797su4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQkNuZUR2UkJGU0F6cDdpdzZTSDZOS1V3OW9GamdjTERpSEFMWjNZRVVy VDcvMS9DRkI3NTgyRjI4Njk5RjM1MTA2OUM4Qzc2Q0M5NzE2N0JGN0JCMkVFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NGQjc1ODJGMjg2OTlGMzUx MDY5QzhDNzZDQzk3MTY3QkY3QkIyRUUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QkNuZUR2UkJGU0F6cDdpdzZTSDZOS1V3OW9GamdjTERpSEFMWjNZRVVyVDcvMS9D RkI3NTgyRjI4Njk5RjM1MTA2OUM4Qzc2Q0M5NzE2N0JGN0JCMkVFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAeY0R4yCdg42uc4ThlAMhjEglKO3znLs7UNEQIyU/UAq06EhKpot3qlnDX3gR x2vJhaBqJhz9Ti494mnhJT1Rho+K55yNnA6cmpl00Da+TjJKg/dQKyjftfodabmg KhP6ftvcoUTnNDmKRwPIHm8YttaCo9VfKGwZEiPfkiqlaZJJ3Mw8pCCqB6vqWjRg 9b/b3foV50LMwce8kpxGcH4XrFvs83ZgaJ924HADV4/gObWe+c6nezB10O0HDgGF RdR27FrvMCM+pJYQ/CwevpZ3V27vtISO4Cd+80jxjUcZfsuo+quPbd9E51/0OR1q Lhu11qqNG5+uJyXA+MinFT5eQw== -----END CERTIFICATE-----Generated at Mon Mar 2 15:59:59 2026 by rpki-client