$ rpki-client -vvf rpki-repo.registro.br/repo/33bzAP6mxbc5KiNm3BvVSDJqQ2XDcbrYANk7WfpnokQC/0/5D1A694AD3A6B6DBC8AFD1A417EE3BF5C6AC8551.mft File: 5D1A694AD3A6B6DBC8AFD1A417EE3BF5C6AC8551.mft (raw, json) Hash identifier: 4b8FsVaC+QF1CGgWdvfd0JMjmFtb+pY2jgODjH5o1Oo= Subject key identifier: 00:E6:EC:DD:1A:C6:93:14:B5:83:B0:15:FB:05:38:CD:56:E0:94:94 Authority key identifier: 5D:1A:69:4A:D3:A6:B6:DB:C8:AF:D1:A4:17:EE:3B:F5:C6:AC:85:51 Certificate issuer: /CN=5D1A694AD3A6B6DBC8AFD1A417EE3BF5C6AC8551 Certificate serial: 49DF6575B317337CD01075555ED054C9965A5EDE Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D1A694AD3A6B6DBC8AFD1A417EE3BF5C6AC8551.cer Subject info access: rsync://rpki-repo.registro.br/repo/33bzAP6mxbc5KiNm3BvVSDJqQ2XDcbrYANk7WfpnokQC/0/5D1A694AD3A6B6DBC8AFD1A417EE3BF5C6AC8551.mft Manifest number: 1D Signing time: Fri 17 Apr 2026 06:09:42 +0000 Manifest this update: Fri 17 Apr 2026 06:04:42 +0000 Manifest next update: Sat 18 Apr 2026 08:01:42 +0000 Files and hashes: 1: 5D1A694AD3A6B6DBC8AFD1A417EE3BF5C6AC8551.crl (hash: N6U/HaZ7cI/1Ptr01TThgLbbHICZ0oM4rDCQXMnFSkc=) 2: 3137392e3138392e36342e302f32312d3234203d3e203532363130.roa (hash: s+Sd3J6+D0fJVCLbV/7LqokvEhLtHDxqd9/URFGwx0w=) 3: 3133382e33362e3136302e302f32322d3234203d3e203532363130.roa (hash: edW9SCTHOuD/CBoF+BVqT3V/RohV1y2nDORU/JAXaBU=) 4: 3137392e3138392e37322e302f32312d3234203d3e203532363130.roa (hash: KRmIU8C1v1YEBWFZs2m02yhlB0LxeSQAq+BZaAkrgP8=) 5: 323830343a6433303a3a2f33322d3438203d3e203532363130.roa (hash: TDLBo76jFNpuodJNtAWKMwVUAftYbrnSV9aa6G9fsjA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/33bzAP6mxbc5KiNm3BvVSDJqQ2XDcbrYANk7WfpnokQC/0/5D1A694AD3A6B6DBC8AFD1A417EE3BF5C6AC8551.crl rsync://rpki-repo.registro.br/repo/33bzAP6mxbc5KiNm3BvVSDJqQ2XDcbrYANk7WfpnokQC/0/5D1A694AD3A6B6DBC8AFD1A417EE3BF5C6AC8551.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D1A694AD3A6B6DBC8AFD1A417EE3BF5C6AC8551.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Apr 2026 08:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:df:65:75:b3:17:33:7c:d0:10:75:55:5e:d0:54:c9:96:5a:5e:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5D1A694AD3A6B6DBC8AFD1A417EE3BF5C6AC8551 Validity Not Before: Apr 17 06:04:42 2026 GMT Not After : Apr 18 08:01:42 2026 GMT Subject: CN=00E6ECDD1AC69314B583B015FB0538CD56E09494 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:8a:12:46:ac:9e:62:4d:2c:a4:7d:85:04:c8: f5:35:c7:9f:06:ac:95:3b:bb:47:b5:68:1a:82:6c: 70:0b:4b:c0:4c:34:9b:c5:69:98:d1:5e:8f:74:92: 2b:79:83:eb:da:ac:e0:85:63:04:75:73:70:90:6c: 01:64:f9:98:7f:e0:e5:db:98:26:c1:15:2a:66:c4: cb:4a:d2:ed:59:2c:b4:92:b1:21:09:9f:b9:8a:1d: 7a:dc:cf:7f:9b:95:d4:74:02:39:3f:74:e9:0d:cb: 51:6a:0a:ab:18:6d:31:e6:23:e2:ba:4a:ee:c6:62: 72:f6:8e:8a:0f:48:f8:59:c4:f6:ff:6d:31:ef:3b: c9:11:bc:e8:57:91:33:86:8f:1c:e1:9c:0d:9f:a1: 9e:0b:9c:28:63:5e:53:6f:41:92:c4:35:29:d0:66: 8b:5a:00:72:ef:70:92:3f:50:1d:84:71:1e:70:65: 72:71:cb:b7:86:37:95:8a:24:6c:ab:f1:76:af:ed: 61:94:13:cc:3a:97:5d:86:ca:61:67:5a:d9:97:cf: c7:11:a1:f1:8b:51:63:a4:ae:0f:47:d3:85:0e:68: 70:e2:fe:ab:1c:8e:26:82:72:74:f9:83:ec:2d:2f: 3b:77:c8:86:bf:f9:14:2a:23:39:bd:f4:45:7e:06: 48:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:E6:EC:DD:1A:C6:93:14:B5:83:B0:15:FB:05:38:CD:56:E0:94:94 X509v3 Authority Key Identifier: keyid:5D:1A:69:4A:D3:A6:B6:DB:C8:AF:D1:A4:17:EE:3B:F5:C6:AC:85:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/33bzAP6mxbc5KiNm3BvVSDJqQ2XDcbrYANk7WfpnokQC/0/5D1A694AD3A6B6DBC8AFD1A417EE3BF5C6AC8551.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D1A694AD3A6B6DBC8AFD1A417EE3BF5C6AC8551.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/33bzAP6mxbc5KiNm3BvVSDJqQ2XDcbrYANk7WfpnokQC/0/5D1A694AD3A6B6DBC8AFD1A417EE3BF5C6AC8551.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:b8:eb:d6:3c:57:7c:6f:9d:5b:1e:b4:54:7e:d0:3a:ba:52: 27:46:1b:48:b1:f9:bb:67:a7:93:9b:81:35:da:90:9d:ec:b3: 1a:0f:02:5f:69:38:60:2f:12:5c:9d:d8:81:1e:1a:0b:a7:95: 2a:b6:e7:54:2c:cc:42:36:b6:23:80:be:05:f0:f5:f1:6a:75: f6:e5:f9:2f:a5:0f:90:de:45:0b:1c:3d:e4:04:9a:1d:c0:1b: dc:1c:1f:98:46:b6:03:c1:06:83:e1:a9:20:ae:a1:0e:79:7b: 62:9d:ad:80:e3:9b:71:a1:64:14:49:69:cd:46:dc:8c:32:da: e6:7e:80:f2:36:78:c3:c8:7e:da:05:83:c2:82:d9:76:93:88: c7:f4:da:3b:50:f0:fe:36:ee:2b:be:97:93:d3:b5:c1:bd:39: d2:66:f2:94:93:e9:df:ba:f5:5c:d4:62:68:64:7e:49:21:1d: 92:f2:c3:8a:ff:a4:a0:55:86:f1:53:ee:fb:58:50:55:46:7e: 9c:19:0f:74:3d:8c:c5:fe:a6:a4:4b:a3:91:ce:ec:0f:9e:0b: b0:0f:fb:71:e5:9d:60:4a:49:85:40:15:87:4b:35:47:c8:36: e3:7c:6b:8f:ac:9e:b4:5c:5e:28:40:04:2c:05:4d:84:c9:bf: bc:56:3d:af -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUSd9ldbMXM3zQEHVVXtBUyZZaXt4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUQxQTY5NEFEM0E2QjZEQkM4QUZEMUE0MTdFRTNCRjVD NkFDODU1MTAeFw0yNjA0MTcwNjA0NDJaFw0yNjA0MTgwODAxNDJaMDMxMTAvBgNV BAMTKDAwRTZFQ0REMUFDNjkzMTRCNTgzQjAxNUZCMDUzOENENTZFMDk0OTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuihJGrJ5iTSykfYUEyPU1x58G rJU7u0e1aBqCbHALS8BMNJvFaZjRXo90kit5g+varOCFYwR1c3CQbAFk+Zh/4OXb mCbBFSpmxMtK0u1ZLLSSsSEJn7mKHXrcz3+bldR0Ajk/dOkNy1FqCqsYbTHmI+K6 Su7GYnL2jooPSPhZxPb/bTHvO8kRvOhXkTOGjxzhnA2foZ4LnChjXlNvQZLENSnQ ZotaAHLvcJI/UB2EcR5wZXJxy7eGN5WKJGyr8Xav7WGUE8w6l12GymFnWtmXz8cR ofGLUWOkrg9H04UOaHDi/qscjiaCcnT5g+wtLzt3yIa/+RQqIzm99EV+BkjdAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUAObs3RrGkxS1g7AV+wU4zVbglJQwHwYDVR0j BBgwFoAUXRppStOmttvIr9GkF+479cashVEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMzNiekFQNm14YmM1S2lObTNCdlZTREpxUTJYRGNicllBTms3V2Zwbm9r UUMvMC81RDFBNjk0QUQzQTZCNkRCQzhBRkQxQTQxN0VFM0JGNUM2QUM4NTUxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVEMUE2OTRBRDNBNkI2REJD OEFGRDFBNDE3RUUzQkY1QzZBQzg1NTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MzNiekFQNm14YmM1S2lObTNCdlZTREpxUTJYRGNicllBTms3V2Zwbm9rUUMvMC81 RDFBNjk0QUQzQTZCNkRCQzhBRkQxQTQxN0VFM0JGNUM2QUM4NTUxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEACLjr1jxXfG+dWx60VH7QOrpSJ0YbSLH5u2enk5uBNdqQneyzGg8CX2k4YC8S XJ3YgR4aC6eVKrbnVCzMQja2I4C+BfD18Wp19uX5L6UPkN5FCxw95ASaHcAb3Bwf mEa2A8EGg+GpIK6hDnl7Yp2tgOObcaFkFElpzUbcjDLa5n6A8jZ4w8h+2gWDwoLZ dpOIx/TaO1Dw/jbuK76Xk9O1wb050mbylJPp37r1XNRiaGR+SSEdkvLDiv+koFWG 8VPu+1hQVUZ+nBkPdD2Mxf6mpEujkc7sD54LsA/7ceWdYEpJhUAVh0s1R8g243xr j6yetFxeKEAELAVNhMm/vFY9rw== -----END CERTIFICATE-----Generated at Fri Apr 17 21:21:13 2026 by rpki-client