$ rpki-client -vvf rpki-repo.registro.br/repo/Gm9nqW21EVsfybUHSobWpLLCEG1K4PKSzJwQF3pdrut7/0/2BA7E3F6A06E73CE8FAE470EEFDC07F81AC04CDD.mft File: 2BA7E3F6A06E73CE8FAE470EEFDC07F81AC04CDD.mft (raw, json) Hash identifier: l167ekE8i8eO0no7akRCldjuG+87seo8DeRwvRxrHKM= Subject key identifier: E5:2D:EE:59:94:1B:8F:E8:5B:5F:ED:9B:05:38:94:BA:AF:38:80:00 Authority key identifier: 2B:A7:E3:F6:A0:6E:73:CE:8F:AE:47:0E:EF:DC:07:F8:1A:C0:4C:DD Certificate issuer: /CN=2BA7E3F6A06E73CE8FAE470EEFDC07F81AC04CDD Certificate serial: 0BBBEC93C5A58300A633DEFECDE64F69FFEE647F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BA7E3F6A06E73CE8FAE470EEFDC07F81AC04CDD.cer Subject info access: rsync://rpki-repo.registro.br/repo/Gm9nqW21EVsfybUHSobWpLLCEG1K4PKSzJwQF3pdrut7/0/2BA7E3F6A06E73CE8FAE470EEFDC07F81AC04CDD.mft Manifest number: 2D Signing time: Mon 02 Mar 2026 11:48:16 +0000 Manifest this update: Mon 02 Mar 2026 11:43:16 +0000 Manifest next update: Tue 03 Mar 2026 13:23:16 +0000 Files and hashes: 1: 323830343a333230303a3a2f33322d3438203d3e20323635303530.roa (hash: JNkuPVkslJhEy5vxVPsp0mnwk/L8rP8+/jTHXEJg2FI=) 2: 2BA7E3F6A06E73CE8FAE470EEFDC07F81AC04CDD.crl (hash: 4bGd2uL3YRPea3Nhk5/lF/E0sM2VTPx1oIT79iX7k2Q=) 3: 3137302e3135302e3232302e302f32322d3234203d3e20323635303530.roa (hash: mO6UbLwv9B7xL5T6Fb4Y4qhDxrjBJyZngbWHDuA7/WE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Gm9nqW21EVsfybUHSobWpLLCEG1K4PKSzJwQF3pdrut7/0/2BA7E3F6A06E73CE8FAE470EEFDC07F81AC04CDD.crl rsync://rpki-repo.registro.br/repo/Gm9nqW21EVsfybUHSobWpLLCEG1K4PKSzJwQF3pdrut7/0/2BA7E3F6A06E73CE8FAE470EEFDC07F81AC04CDD.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BA7E3F6A06E73CE8FAE470EEFDC07F81AC04CDD.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 03 Mar 2026 13:23:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:bb:ec:93:c5:a5:83:00:a6:33:de:fe:cd:e6:4f:69:ff:ee:64:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2BA7E3F6A06E73CE8FAE470EEFDC07F81AC04CDD Validity Not Before: Mar 2 11:43:16 2026 GMT Not After : Mar 3 13:23:16 2026 GMT Subject: CN=E52DEE59941B8FE85B5FED9B053894BAAF388000 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:aa:e7:83:b2:92:ca:ab:5e:05:90:09:a6:00: 37:7a:66:0f:7b:23:6e:0d:7a:6f:a9:ac:95:0b:62: e8:fc:83:e9:b7:12:1d:f0:3c:b8:25:86:c0:96:ff: 80:39:f5:86:fc:47:f2:48:3b:87:64:cf:9d:25:7d: 66:b9:e0:cb:7f:1d:0d:58:d7:be:6c:5f:28:23:6a: d3:31:56:07:ff:95:05:62:ce:94:9f:50:97:23:b3: a8:09:6a:4d:a4:7e:e4:0e:9a:cb:df:cf:0f:68:e0: 86:8b:f5:f4:ec:d1:0e:ce:d8:79:87:78:c4:d6:87: 72:e2:4b:ab:07:91:79:9c:05:cf:6d:9f:1f:f5:1c: df:7e:25:99:66:fe:13:8c:6d:c3:65:d5:83:ba:5a: 39:78:5d:70:3c:55:ad:0c:f3:f8:3a:80:fa:a3:cc: 92:8d:e8:ef:7d:a4:cd:67:b8:73:1b:32:8e:eb:23: a6:e8:fb:87:d1:63:bf:1b:ad:bc:31:8d:eb:7c:57: bd:8b:47:a7:b1:df:7f:bb:2d:1a:f2:ef:c9:16:a9: b2:98:0e:2a:b7:b1:57:25:db:e9:7d:ea:90:8d:05: 96:0e:12:c4:d1:c6:4c:2a:f8:62:2b:76:77:09:70: 7b:3d:5d:3b:c0:08:b3:3b:3f:29:9b:23:6d:c5:74: 2a:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:2D:EE:59:94:1B:8F:E8:5B:5F:ED:9B:05:38:94:BA:AF:38:80:00 X509v3 Authority Key Identifier: keyid:2B:A7:E3:F6:A0:6E:73:CE:8F:AE:47:0E:EF:DC:07:F8:1A:C0:4C:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Gm9nqW21EVsfybUHSobWpLLCEG1K4PKSzJwQF3pdrut7/0/2BA7E3F6A06E73CE8FAE470EEFDC07F81AC04CDD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BA7E3F6A06E73CE8FAE470EEFDC07F81AC04CDD.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gm9nqW21EVsfybUHSobWpLLCEG1K4PKSzJwQF3pdrut7/0/2BA7E3F6A06E73CE8FAE470EEFDC07F81AC04CDD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:f3:07:35:01:e4:e4:67:60:31:23:f3:7a:99:89:91:83:6a: de:bd:07:ce:6c:cd:31:e9:29:a4:f9:53:73:ce:dc:ff:3b:ad: da:35:2d:37:0d:63:10:8e:ee:05:b6:8c:36:27:69:87:f3:9f: 8e:fa:ca:35:56:82:c8:6e:4e:14:27:7e:0c:f8:c6:cb:0c:4e: 3f:58:bf:5f:bb:ce:ba:a1:75:f3:86:08:61:9c:30:3e:d2:4e: d1:d6:d0:4d:1a:90:4f:1d:31:60:ef:91:47:94:26:a3:2d:9c: 9b:44:c1:0c:96:2c:d6:00:c3:96:56:64:fd:d6:a4:0c:ba:72: bf:3e:08:9c:8d:10:94:ef:d8:7b:4f:e5:9e:d8:10:0d:a0:a1: 5d:24:cc:2c:26:31:5b:1d:17:e9:33:0b:cb:26:9f:d6:e3:8b: 13:7f:2e:15:e3:c2:fd:9a:e8:c7:53:15:33:01:be:ad:0a:17: 36:06:f7:ca:b4:22:0b:b7:bb:38:43:e1:6e:44:e5:68:e4:0c: 8f:18:6d:39:a4:f0:b2:53:dc:3b:27:f4:77:b2:9f:b8:24:16: 50:86:a3:57:0a:34:ba:f5:30:de:da:5c:5d:1a:0b:21:8d:63: 63:fc:d9:62:30:79:0f:a7:a6:1b:de:9d:45:0f:6b:51:28:a4: f8:f6:bf:2b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUC7vsk8WlgwCmM97+zeZPaf/uZH8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkJBN0UzRjZBMDZFNzNDRThGQUU0NzBFRUZEQzA3Rjgx QUMwNENERDAeFw0yNjAzMDIxMTQzMTZaFw0yNjAzMDMxMzIzMTZaMDMxMTAvBgNV BAMTKEU1MkRFRTU5OTQxQjhGRTg1QjVGRUQ5QjA1Mzg5NEJBQUYzODgwMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDqueDspLKq14FkAmmADd6Zg97 I24Nem+prJULYuj8g+m3Eh3wPLglhsCW/4A59Yb8R/JIO4dkz50lfWa54Mt/HQ1Y 175sXygjatMxVgf/lQVizpSfUJcjs6gJak2kfuQOmsvfzw9o4IaL9fTs0Q7O2HmH eMTWh3LiS6sHkXmcBc9tnx/1HN9+JZlm/hOMbcNl1YO6Wjl4XXA8Va0M8/g6gPqj zJKN6O99pM1nuHMbMo7rI6bo+4fRY78brbwxjet8V72LR6ex33+7LRry78kWqbKY Diq3sVcl2+l96pCNBZYOEsTRxkwq+GIrdncJcHs9XTvACLM7PymbI23FdCrPAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU5S3uWZQbj+hbX+2bBTiUuq84gAAwHwYDVR0j BBgwFoAUK6fj9qBuc86PrkcO79wH+BrATN0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR205bnFXMjFFVnNmeWJVSFNvYldwTExDRUcxSzRQS1N6SndRRjNwZHJ1 dDcvMC8yQkE3RTNGNkEwNkU3M0NFOEZBRTQ3MEVFRkRDMDdGODFBQzA0Q0RELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJCQTdFM0Y2QTA2RTczQ0U4 RkFFNDcwRUVGREMwN0Y4MUFDMDRDREQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R205bnFXMjFFVnNmeWJVSFNvYldwTExDRUcxSzRQS1N6SndRRjNwZHJ1dDcvMC8y QkE3RTNGNkEwNkU3M0NFOEZBRTQ3MEVFRkRDMDdGODFBQzA0Q0RELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAA/MHNQHk5GdgMSPzepmJkYNq3r0HzmzNMekppPlTc87c/zut2jUtNw1jEI7u BbaMNidph/OfjvrKNVaCyG5OFCd+DPjGywxOP1i/X7vOuqF184YIYZwwPtJO0dbQ TRqQTx0xYO+RR5Qmoy2cm0TBDJYs1gDDllZk/dakDLpyvz4InI0QlO/Ye0/lntgQ DaChXSTMLCYxWx0X6TMLyyaf1uOLE38uFePC/Zrox1MVMwG+rQoXNgb3yrQiC7e7 OEPhbkTlaOQMjxhtOaTwslPcOyf0d7KfuCQWUIajVwo0uvUw3tpcXRoLIY1jY/zZ YjB5D6emG96dRQ9rUSik+Pa/Kw== -----END CERTIFICATE-----Generated at Mon Mar 2 16:26:49 2026 by rpki-client