$ rpki-client -vvf rpki-repo.registro.br/repo/GzJa4casvhcjD2hnHm5jAawctRkNagGnLB653uq8HDcN/1/BBED0BD75CAD3A303EC72F1AD0B2365EE95D390F.mft File: BBED0BD75CAD3A303EC72F1AD0B2365EE95D390F.mft (raw, json) Hash identifier: Z0GMCCHKnXKguy6YZqO8kxC1p8oBKHUo8M95p9vries= Subject key identifier: 0E:FF:2D:D0:07:5C:79:1D:2A:D8:5C:11:7D:89:3D:4E:09:5A:B7:13 Authority key identifier: BB:ED:0B:D7:5C:AD:3A:30:3E:C7:2F:1A:D0:B2:36:5E:E9:5D:39:0F Certificate issuer: /CN=BBED0BD75CAD3A303EC72F1AD0B2365EE95D390F Certificate serial: 42288B93EC7251C0333157142B61285ADD5DAA23 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BBED0BD75CAD3A303EC72F1AD0B2365EE95D390F.cer Subject info access: rsync://rpki-repo.registro.br/repo/GzJa4casvhcjD2hnHm5jAawctRkNagGnLB653uq8HDcN/1/BBED0BD75CAD3A303EC72F1AD0B2365EE95D390F.mft Manifest number: 03AB Signing time: Fri 17 Apr 2026 11:49:00 +0000 Manifest this update: Fri 17 Apr 2026 11:44:00 +0000 Manifest next update: Sat 18 Apr 2026 15:35:00 +0000 Files and hashes: 1: 323830343a333931383a3a2f33322d3438203d3e20323636353234.roa (hash: Jh/VdyotAGrLtClsSoR+lr2Ks9WJJw9NYbI44v4sSFs=) 2: BBED0BD75CAD3A303EC72F1AD0B2365EE95D390F.crl (hash: HNiXKkJS/yOccn3d1sqb4oYeaSFr4b72M9RC7vvDOt0=) 3: 3137302e3234352e3137362e302f32322d3234203d3e20323636353234.roa (hash: RRiA3TSl+z/eEsw4tlbAbDMdSZOuk6NNt0WFL07GjPY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GzJa4casvhcjD2hnHm5jAawctRkNagGnLB653uq8HDcN/1/BBED0BD75CAD3A303EC72F1AD0B2365EE95D390F.crl rsync://rpki-repo.registro.br/repo/GzJa4casvhcjD2hnHm5jAawctRkNagGnLB653uq8HDcN/1/BBED0BD75CAD3A303EC72F1AD0B2365EE95D390F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BBED0BD75CAD3A303EC72F1AD0B2365EE95D390F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Apr 2026 15:35:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:28:8b:93:ec:72:51:c0:33:31:57:14:2b:61:28:5a:dd:5d:aa:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BBED0BD75CAD3A303EC72F1AD0B2365EE95D390F Validity Not Before: Apr 17 11:44:00 2026 GMT Not After : Apr 18 15:35:00 2026 GMT Subject: CN=0EFF2DD0075C791D2AD85C117D893D4E095AB713 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:2c:0e:d4:e8:92:8a:d3:55:37:88:2e:a6:81: b4:b5:21:3f:66:3a:e5:41:07:48:b6:f2:47:cb:ec: 4e:3f:c4:52:45:d3:ba:f1:08:58:d1:1f:31:23:b2: ba:cb:4e:37:6a:ff:fd:9e:1f:51:26:0a:b4:30:aa: 08:fb:08:6d:a8:5d:f8:3f:61:dd:15:98:2d:9a:25: a9:90:41:bd:ac:b6:37:a1:b9:d1:35:a9:0d:6e:43: eb:fa:f4:29:a3:3b:01:86:cc:cb:f6:2c:22:6a:ae: 31:94:3f:76:fa:94:b9:f7:49:21:88:8c:ae:24:50: a2:7e:74:20:48:38:dc:85:c7:45:e0:49:62:dc:0c: 5b:c7:1b:4e:88:3a:ee:87:38:9e:5f:61:92:69:f9: 40:23:a5:93:3f:bd:6f:60:02:fe:a5:5a:85:e1:23: e8:f9:2a:d3:c0:d0:1e:6c:59:39:08:b9:e9:68:2a: 22:5e:4f:6e:84:06:09:f4:08:4b:02:be:44:23:01: 56:34:03:37:8b:89:2f:56:6a:7f:00:6f:4a:4f:0a: a5:c4:70:b8:c7:3d:91:9a:f7:51:95:e7:9f:c9:d8: f7:3e:0f:6b:56:38:c3:14:b7:b2:a9:13:18:d1:3e: c7:a5:65:fe:77:a5:f8:d4:96:17:ef:c0:30:a3:0b: 1c:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:FF:2D:D0:07:5C:79:1D:2A:D8:5C:11:7D:89:3D:4E:09:5A:B7:13 X509v3 Authority Key Identifier: keyid:BB:ED:0B:D7:5C:AD:3A:30:3E:C7:2F:1A:D0:B2:36:5E:E9:5D:39:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GzJa4casvhcjD2hnHm5jAawctRkNagGnLB653uq8HDcN/1/BBED0BD75CAD3A303EC72F1AD0B2365EE95D390F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BBED0BD75CAD3A303EC72F1AD0B2365EE95D390F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GzJa4casvhcjD2hnHm5jAawctRkNagGnLB653uq8HDcN/1/BBED0BD75CAD3A303EC72F1AD0B2365EE95D390F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:f4:9b:9b:0d:f5:60:ee:c3:bf:f3:fc:4b:b6:e8:bc:44:ae: 82:e0:42:73:0f:5a:f5:d7:f1:1f:7f:66:66:f8:fc:32:45:e7: da:88:5e:68:fa:ea:2e:43:28:3b:07:89:f7:30:e1:b6:75:72: 06:61:37:58:f5:d3:1a:27:49:3e:5e:71:60:00:ed:c4:11:0c: 8e:80:13:6f:f9:de:9d:0c:8f:57:9e:6d:02:a0:a9:4e:98:1e: 7c:f0:df:a4:e3:1c:c3:d6:89:ba:d4:a3:83:c5:50:e3:7a:f4: 07:cc:82:c9:dc:12:c7:38:50:c1:78:2c:61:f4:11:f8:ba:81: 55:fd:61:86:86:54:66:6b:e7:0d:87:2e:3f:6f:87:f9:1c:db: 36:de:6a:f2:d0:09:52:28:99:cf:40:ed:b1:34:5d:c9:ff:32: af:60:86:f4:6e:f4:5c:00:b8:a4:59:6f:92:83:8f:2a:74:d3: dc:af:4a:84:a6:bc:e6:f7:3a:93:c3:4d:b5:4c:b8:bc:67:c3: 75:ee:28:95:5a:69:c3:45:07:c3:21:3c:c9:03:39:78:7d:8c: ec:d1:a7:5b:a3:49:94:eb:f8:7d:dc:5b:b9:f4:ad:5f:10:7e: ba:26:e6:4b:46:b7:25:71:61:1f:a7:46:52:5b:69:7d:b8:d1: e6:85:cc:aa -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUQiiLk+xyUcAzMVcUK2EoWt1dqiMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkJFRDBCRDc1Q0FEM0EzMDNFQzcyRjFBRDBCMjM2NUVF OTVEMzkwRjAeFw0yNjA0MTcxMTQ0MDBaFw0yNjA0MTgxNTM1MDBaMDMxMTAvBgNV BAMTKDBFRkYyREQwMDc1Qzc5MUQyQUQ4NUMxMTdEODkzRDRFMDk1QUI3MTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+LA7U6JKK01U3iC6mgbS1IT9m OuVBB0i28kfL7E4/xFJF07rxCFjRHzEjsrrLTjdq//2eH1EmCrQwqgj7CG2oXfg/ Yd0VmC2aJamQQb2stjehudE1qQ1uQ+v69CmjOwGGzMv2LCJqrjGUP3b6lLn3SSGI jK4kUKJ+dCBIONyFx0XgSWLcDFvHG06IOu6HOJ5fYZJp+UAjpZM/vW9gAv6lWoXh I+j5KtPA0B5sWTkIueloKiJeT26EBgn0CEsCvkQjAVY0AzeLiS9Wan8Ab0pPCqXE cLjHPZGa91GV55/J2Pc+D2tWOMMUt7KpExjRPselZf53pfjUlhfvwDCjCxyVAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUDv8t0AdceR0q2FwRfYk9TglatxMwHwYDVR0j BBgwFoAUu+0L11ytOjA+xy8a0LI2XuldOQ8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR3pKYTRjYXN2aGNqRDJobkhtNWpBYXdjdFJrTmFnR25MQjY1M3VxOEhE Y04vMS9CQkVEMEJENzVDQUQzQTMwM0VDNzJGMUFEMEIyMzY1RUU5NUQzOTBGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JCRUQwQkQ3NUNBRDNBMzAz RUM3MkYxQUQwQjIzNjVFRTk1RDM5MEYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R3pKYTRjYXN2aGNqRDJobkhtNWpBYXdjdFJrTmFnR25MQjY1M3VxOEhEY04vMS9C QkVEMEJENzVDQUQzQTMwM0VDNzJGMUFEMEIyMzY1RUU5NUQzOTBGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfvSbmw31YO7Dv/P8S7bovESuguBCcw9a9dfxH39mZvj8MkXn2oheaPrqLkMo OweJ9zDhtnVyBmE3WPXTGidJPl5xYADtxBEMjoATb/nenQyPV55tAqCpTpgefPDf pOMcw9aJutSjg8VQ43r0B8yCydwSxzhQwXgsYfQR+LqBVf1hhoZUZmvnDYcuP2+H +RzbNt5q8tAJUiiZz0DtsTRdyf8yr2CG9G70XAC4pFlvkoOPKnTT3K9KhKa85vc6 k8NNtUy4vGfDde4olVppw0UHwyE8yQM5eH2M7NGnW6NJlOv4fdxbufStXxB+uibm S0a3JXFhH6dGUltpfbjR5oXMqg== -----END CERTIFICATE-----Generated at Fri Apr 17 22:37:06 2026 by rpki-client