$ rpki-client -vvf rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.mft File: CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.mft (raw, json) Hash identifier: TFVKD/NOBHQqdygCX8K7tlOyU1FvW8eBQHuv4d8DADo= Subject key identifier: D7:0F:49:45:9B:48:70:0A:B4:E6:69:81:50:08:E2:E0:40:75:72:1E Authority key identifier: CD:23:91:FA:7C:28:AE:0F:9C:8B:2B:99:E1:90:92:A3:48:7A:2E:C9 Certificate issuer: /CN=CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9 Certificate serial: 15EC5AF2270F87E86928B3B6ACC84C7C481940CE Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.cer Subject info access: rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.mft Manifest number: 03E0 Signing time: Sat 18 Apr 2026 02:17:46 +0000 Manifest this update: Sat 18 Apr 2026 02:12:46 +0000 Manifest next update: Sun 19 Apr 2026 03:13:46 +0000 Files and hashes: 1: CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.crl (hash: oKua/CSm54ln8ugMQ0MXk2qK69pfdMDvHVVggL/O//Y=) 2: 3137372e3232322e3233322e302f32312d3233203d3e20323633343030.roa (hash: 7KaEu9sw42ksNhOklCsT9hgtSIgophy55hML3k/smrA=) 3: 323830343a313561343a3a2f33322d3434203d3e20323633343030.roa (hash: SXY+DqRaOha9W6rUgVkvX8kWfmFQeH74nzcZCLBrSxg=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.crl rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 19 Apr 2026 03:13:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:ec:5a:f2:27:0f:87:e8:69:28:b3:b6:ac:c8:4c:7c:48:19:40:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9 Validity Not Before: Apr 18 02:12:46 2026 GMT Not After : Apr 19 03:13:46 2026 GMT Subject: CN=D70F49459B48700AB4E669815008E2E04075721E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:2a:a2:f6:14:36:a6:29:39:34:d3:d6:d3:20: aa:39:68:f0:c3:1c:47:48:b1:af:c4:69:ee:de:5d: 08:a1:52:9f:77:8a:58:9c:b7:c1:d6:3d:b8:8b:f5: c6:bf:10:72:8a:de:d3:8d:85:2f:1f:48:9e:a4:49: 55:2a:52:5e:e2:d5:6d:11:ba:db:d1:20:a0:fb:df: 79:5e:c4:3b:8e:25:74:4b:09:71:c0:1f:1c:b9:b4: b5:ce:82:28:f7:41:fa:fc:da:31:ff:17:e8:07:3b: e3:5a:01:9f:9d:2b:78:2d:9d:f1:30:5a:db:8b:19: c7:6f:ce:63:ed:96:3a:ac:ae:45:9a:18:b7:88:2f: 4f:93:08:ec:04:b2:cc:8e:b3:dc:73:5d:68:18:90: 56:11:8a:1f:f3:34:d8:b1:f3:c8:50:00:0e:bc:1f: 13:bb:c7:05:18:82:af:d8:a9:64:7a:86:9d:b4:02: 37:c7:09:88:e0:38:09:c1:e8:47:c3:72:bf:1e:d3: bb:4e:28:4c:9f:03:0e:96:02:31:e9:05:2a:37:50: ab:90:77:64:7f:8a:32:9f:70:93:45:ce:8b:dc:cd: 18:3a:11:83:65:d1:5f:06:a6:64:d1:67:04:49:7c: bd:d7:03:95:90:4d:0e:4b:23:96:79:2f:69:9d:89: 15:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:0F:49:45:9B:48:70:0A:B4:E6:69:81:50:08:E2:E0:40:75:72:1E X509v3 Authority Key Identifier: keyid:CD:23:91:FA:7C:28:AE:0F:9C:8B:2B:99:E1:90:92:A3:48:7A:2E:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:18:db:50:fe:16:76:1b:4a:f5:9d:bb:23:51:bb:e0:4a:0d: 8a:a1:b8:1e:9d:f7:e3:99:2c:f0:cd:02:a7:83:a2:2d:a6:59: a0:8f:50:3a:b1:33:d3:39:b3:4f:1e:2a:57:32:c6:28:0f:9a: 85:19:ad:a8:41:6d:fd:4b:22:42:58:14:c8:f2:68:4d:25:10: 7a:5a:22:5b:90:e2:17:a3:d6:9c:c8:f5:69:d8:b3:83:0d:2b: 51:2d:84:9a:cf:c2:bf:ce:65:69:8c:49:08:2d:1e:a6:69:22: 13:76:7c:b9:07:a5:17:1e:94:b8:9d:af:ac:88:74:b4:39:f4: b1:db:ec:0c:59:ed:34:b8:03:08:de:ed:1e:b8:31:f6:a6:c0: c8:67:fb:ae:8d:7d:4d:88:09:f8:82:c3:3a:81:60:dd:1d:ca: a6:41:da:fb:10:a7:77:0b:6a:70:ac:2d:23:dd:60:0c:5b:52: 3b:d8:94:55:ec:6d:29:62:c2:18:df:91:d3:9b:1a:18:0e:68: c8:db:f1:cb:c0:14:e9:32:8f:3a:43:21:2b:2e:d1:ae:f6:5e: f2:63:9c:1b:da:f2:63:cc:54:c8:94:86:f1:27:3f:70:96:da: 1e:6c:b3:31:75:dc:20:d3:e7:77:ad:db:71:24:e4:e6:88:41: 2e:3f:d6:e6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUFexa8icPh+hpKLO2rMhMfEgZQM4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0QyMzkxRkE3QzI4QUUwRjlDOEIyQjk5RTE5MDkyQTM0 ODdBMkVDOTAeFw0yNjA0MTgwMjEyNDZaFw0yNjA0MTkwMzEzNDZaMDMxMTAvBgNV BAMTKEQ3MEY0OTQ1OUI0ODcwMEFCNEU2Njk4MTUwMDhFMkUwNDA3NTcyMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/KqL2FDamKTk009bTIKo5aPDD HEdIsa/Eae7eXQihUp93ilict8HWPbiL9ca/EHKK3tONhS8fSJ6kSVUqUl7i1W0R utvRIKD733lexDuOJXRLCXHAHxy5tLXOgij3Qfr82jH/F+gHO+NaAZ+dK3gtnfEw WtuLGcdvzmPtljqsrkWaGLeIL0+TCOwEssyOs9xzXWgYkFYRih/zNNix88hQAA68 HxO7xwUYgq/YqWR6hp20AjfHCYjgOAnB6EfDcr8e07tOKEyfAw6WAjHpBSo3UKuQ d2R/ijKfcJNFzovczRg6EYNl0V8GpmTRZwRJfL3XA5WQTQ5LI5Z5L2mdiRVLAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU1w9JRZtIcAq05mmBUAji4EB1ch4wHwYDVR0j BBgwFoAUzSOR+nworg+ciyuZ4ZCSo0h6LskwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMkVobnZBd1FCeHlQYmtoVXBoTVFueEN1VEVEZ3Y3a1NCMWFURDQxOFRo U1gvMS9DRDIzOTFGQTdDMjhBRTBGOUM4QjJCOTlFMTkwOTJBMzQ4N0EyRUM5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NEMjM5MUZBN0MyOEFFMEY5 QzhCMkI5OUUxOTA5MkEzNDg3QTJFQzkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MkVobnZBd1FCeHlQYmtoVXBoTVFueEN1VEVEZ3Y3a1NCMWFURDQxOFRoU1gvMS9D RDIzOTFGQTdDMjhBRTBGOUM4QjJCOTlFMTkwOTJBMzQ4N0EyRUM5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAoxjbUP4WdhtK9Z27I1G74EoNiqG4Hp3345ks8M0Cp4OiLaZZoI9QOrEz0zmz Tx4qVzLGKA+ahRmtqEFt/UsiQlgUyPJoTSUQeloiW5DiF6PWnMj1adizgw0rUS2E ms/Cv85laYxJCC0epmkiE3Z8uQelFx6UuJ2vrIh0tDn0sdvsDFntNLgDCN7tHrgx 9qbAyGf7ro19TYgJ+ILDOoFg3R3KpkHa+xCndwtqcKwtI91gDFtSO9iUVextKWLC GN+R05saGA5oyNvxy8AU6TKPOkMhKy7RrvZe8mOcG9ryY8xUyJSG8Sc/cJbaHmyz MXXcINPnd63bcSTk5ohBLj/W5g== -----END CERTIFICATE-----Generated at Sat Apr 18 08:58:48 2026 by rpki-client