$ rpki-client -vvf rpki-repo.registro.br/repo/BCneDvRBFSAzp7iw6SH6NKUw9oFjgcLDiHALZ3YEUrT7/1/CFB7582F28699F351069C8C76CC97167BF7BB2EE.mft File: CFB7582F28699F351069C8C76CC97167BF7BB2EE.mft (raw, json) Hash identifier: 94RiV/q+2oRjqjCRad1ceo4Vi+1Rmis3dNljt0v7tV0= Subject key identifier: 96:D0:EC:48:B4:5C:9F:D6:C7:24:EC:63:2A:A5:8F:71:0D:57:69:D4 Authority key identifier: CF:B7:58:2F:28:69:9F:35:10:69:C8:C7:6C:C9:71:67:BF:7B:B2:EE Certificate issuer: /CN=CFB7582F28699F351069C8C76CC97167BF7BB2EE Certificate serial: 3FA5209CE6BB40C322ADB47254784AD8BB1620BB Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFB7582F28699F351069C8C76CC97167BF7BB2EE.cer Subject info access: rsync://rpki-repo.registro.br/repo/BCneDvRBFSAzp7iw6SH6NKUw9oFjgcLDiHALZ3YEUrT7/1/CFB7582F28699F351069C8C76CC97167BF7BB2EE.mft Manifest number: 03E3 Signing time: Fri 17 Apr 2026 09:17:47 +0000 Manifest this update: Fri 17 Apr 2026 09:12:47 +0000 Manifest next update: Sat 18 Apr 2026 12:17:47 +0000 Files and hashes: 1: 3133382e3131382e3235322e302f32322d3234203d3e203532373432.roa (hash: VlQMtP6NQInhiwVIoJiXBUj4Ie/wB4WGdHL21LfKPc8=) 2: 3137372e3133302e31362e302f32302d3234203d3e203532373432.roa (hash: rJari9HForGWIAVn++KHhqqJxayzpXRfuI70oICH5Ek=) 3: 323830343a6362303a3a2f33322d3438203d3e203532373432.roa (hash: OhngJLTjITTfBnt+qyHLrtVqgrZC2VpFlDFytpAhzhI=) 4: CFB7582F28699F351069C8C76CC97167BF7BB2EE.crl (hash: J8uGqzZpXDjtFAY30NAaikPQ5Uhx5V4yU5sskgpCJkQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BCneDvRBFSAzp7iw6SH6NKUw9oFjgcLDiHALZ3YEUrT7/1/CFB7582F28699F351069C8C76CC97167BF7BB2EE.crl rsync://rpki-repo.registro.br/repo/BCneDvRBFSAzp7iw6SH6NKUw9oFjgcLDiHALZ3YEUrT7/1/CFB7582F28699F351069C8C76CC97167BF7BB2EE.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFB7582F28699F351069C8C76CC97167BF7BB2EE.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Apr 2026 12:17:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:a5:20:9c:e6:bb:40:c3:22:ad:b4:72:54:78:4a:d8:bb:16:20:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFB7582F28699F351069C8C76CC97167BF7BB2EE Validity Not Before: Apr 17 09:12:47 2026 GMT Not After : Apr 18 12:17:47 2026 GMT Subject: CN=96D0EC48B45C9FD6C724EC632AA58F710D5769D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:6b:8d:35:5e:90:0a:a7:aa:eb:e2:ab:f6:eb: 51:47:46:5f:84:86:97:32:4b:f6:40:00:af:ff:d7: 23:5f:3d:76:25:ab:6a:f5:86:50:5b:76:da:dd:b5: 0d:0a:4e:3b:36:ec:d0:49:f6:9a:f8:03:8a:40:64: b5:d8:f8:33:a3:33:55:0e:71:a2:00:4d:7f:4d:42: c2:ac:8d:72:e0:6e:43:44:f5:77:fa:0d:9d:38:d9: 20:27:f1:a4:17:01:76:f1:31:75:2c:f6:9c:4d:94: ec:8a:2c:ee:f9:ab:fe:db:86:26:df:f0:0c:8b:af: 4a:04:0f:f3:98:3e:ec:28:d2:09:43:b0:54:4b:4b: b3:6a:5d:0a:e1:05:ce:6c:a3:ad:78:14:20:51:e5: 6c:da:1f:b0:6d:fa:b2:b0:17:54:ae:5f:d3:27:56: 83:db:4d:2c:ad:11:0b:88:8f:79:4e:30:9e:4d:b8: eb:3f:fc:bc:73:37:e2:ad:3b:5d:c2:33:1f:91:ff: a2:9f:fd:5e:67:6d:56:1c:36:e7:5a:78:e1:ba:4f: 55:c0:92:fb:b4:75:dc:26:60:4a:65:e9:6e:aa:d3: 84:b7:0d:3e:62:e0:42:c7:5b:3c:57:47:83:32:0c: c3:2d:e9:55:35:bc:95:c7:50:73:ec:86:da:2d:b4: 63:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:D0:EC:48:B4:5C:9F:D6:C7:24:EC:63:2A:A5:8F:71:0D:57:69:D4 X509v3 Authority Key Identifier: keyid:CF:B7:58:2F:28:69:9F:35:10:69:C8:C7:6C:C9:71:67:BF:7B:B2:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BCneDvRBFSAzp7iw6SH6NKUw9oFjgcLDiHALZ3YEUrT7/1/CFB7582F28699F351069C8C76CC97167BF7BB2EE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFB7582F28699F351069C8C76CC97167BF7BB2EE.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BCneDvRBFSAzp7iw6SH6NKUw9oFjgcLDiHALZ3YEUrT7/1/CFB7582F28699F351069C8C76CC97167BF7BB2EE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:19:e7:91:81:46:c1:c3:d8:6c:50:66:6a:ef:9e:01:29:ac: 31:54:70:01:e1:7f:7f:ae:1d:4d:df:1b:b4:2e:1d:3b:17:0d: fc:6c:3a:94:7c:33:fb:67:70:51:e1:41:26:e0:ce:20:f9:13: 3d:4e:22:63:75:a0:c6:77:3c:92:5f:16:c6:ec:82:c1:55:d9: d7:b4:43:db:07:a4:f7:a8:cb:bb:f3:fe:3d:e7:02:1d:31:25: bb:58:16:b3:32:98:10:f9:92:fa:c8:ca:b6:d2:4d:3e:30:95: 32:92:5a:fd:5c:5b:a1:e2:f8:a8:0f:8c:9b:6a:7e:05:69:63: d9:c3:e3:96:28:6a:1b:42:98:91:37:78:e9:9c:20:b7:92:ad: b2:42:86:f3:b6:8b:b9:9f:d2:82:fa:b7:f4:bc:c7:df:41:a2: cc:49:08:0c:e0:07:bb:47:e2:44:11:7c:ec:3e:b8:cc:81:26: a5:49:10:e9:3b:37:b8:64:d3:d4:53:5f:f0:98:5d:34:84:63: 72:ea:87:e2:49:a3:9b:e2:38:d6:59:3a:69:4c:b0:1b:47:ab: 23:5b:cb:62:1b:fe:a4:8f:b5:2d:c1:71:e7:30:dd:d6:4e:c4: a5:23:f5:5c:66:6e:be:40:d8:c4:d1:51:10:95:8a:63:ed:66: 0d:93:42:54 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUP6UgnOa7QMMirbRyVHhK2LsWILswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZCNzU4MkYyODY5OUYzNTEwNjlDOEM3NkNDOTcxNjdC RjdCQjJFRTAeFw0yNjA0MTcwOTEyNDdaFw0yNjA0MTgxMjE3NDdaMDMxMTAvBgNV BAMTKDk2RDBFQzQ4QjQ1QzlGRDZDNzI0RUM2MzJBQTU4RjcxMEQ1NzY5RDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHa401XpAKp6rr4qv261FHRl+E hpcyS/ZAAK//1yNfPXYlq2r1hlBbdtrdtQ0KTjs27NBJ9pr4A4pAZLXY+DOjM1UO caIATX9NQsKsjXLgbkNE9Xf6DZ042SAn8aQXAXbxMXUs9pxNlOyKLO75q/7bhibf 8AyLr0oED/OYPuwo0glDsFRLS7NqXQrhBc5so614FCBR5WzaH7Bt+rKwF1SuX9Mn VoPbTSytEQuIj3lOMJ5NuOs//LxzN+KtO13CMx+R/6Kf/V5nbVYcNudaeOG6T1XA kvu0ddwmYEpl6W6q04S3DT5i4ELHWzxXR4MyDMMt6VU1vJXHUHPshtottGOvAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUltDsSLRcn9bHJOxjKqWPcQ1XadQwHwYDVR0j BBgwFoAUz7dYLyhpnzUQacjHbMlxZ797su4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQkNuZUR2UkJGU0F6cDdpdzZTSDZOS1V3OW9GamdjTERpSEFMWjNZRVVy VDcvMS9DRkI3NTgyRjI4Njk5RjM1MTA2OUM4Qzc2Q0M5NzE2N0JGN0JCMkVFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NGQjc1ODJGMjg2OTlGMzUx MDY5QzhDNzZDQzk3MTY3QkY3QkIyRUUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QkNuZUR2UkJGU0F6cDdpdzZTSDZOS1V3OW9GamdjTERpSEFMWjNZRVVyVDcvMS9D RkI3NTgyRjI4Njk5RjM1MTA2OUM4Qzc2Q0M5NzE2N0JGN0JCMkVFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEALhnnkYFGwcPYbFBmau+eASmsMVRwAeF/f64dTd8btC4dOxcN/Gw6lHwz+2dw UeFBJuDOIPkTPU4iY3Wgxnc8kl8WxuyCwVXZ17RD2wek96jLu/P+PecCHTElu1gW szKYEPmS+sjKttJNPjCVMpJa/VxboeL4qA+Mm2p+BWlj2cPjlihqG0KYkTd46Zwg t5KtskKG87aLuZ/Sgvq39LzH30GizEkIDOAHu0fiRBF87D64zIEmpUkQ6Ts3uGTT 1FNf8JhdNIRjcuqH4kmjm+I41lk6aUywG0erI1vLYhv+pI+1LcFx5zDd1k7EpSP1 XGZuvkDYxNFREJWKY+1mDZNCVA== -----END CERTIFICATE-----Generated at Sat Apr 18 02:11:49 2026 by rpki-client