$ rpki-client -vvf rpki-repo.registro.br/repo/3As3Bd5oosFtNhQtDtxTwXztkwPAhcE1Jfq9rSB7buCh/0/9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.mft File: 9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.mft (raw, json) Hash identifier: lCLAlFk387/YQB5H2TaB1UeZGru/tg9gne9eUPOTYL4= Subject key identifier: 87:19:15:02:4D:97:C6:CB:73:6C:1A:1A:3E:69:33:01:1A:27:3F:D8 Authority key identifier: 9A:32:CD:91:FC:E9:CA:DB:F2:8B:ED:F4:C7:20:E6:7B:79:AF:B9:CC Certificate issuer: /CN=9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC Certificate serial: 5BEC4EEC126918C850D5B95A698B89B6F25C40C5 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.cer Subject info access: rsync://rpki-repo.registro.br/repo/3As3Bd5oosFtNhQtDtxTwXztkwPAhcE1Jfq9rSB7buCh/0/9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.mft Manifest number: 024D Signing time: Fri 17 Apr 2026 05:00:01 +0000 Manifest this update: Fri 17 Apr 2026 04:55:01 +0000 Manifest next update: Sat 18 Apr 2026 08:51:01 +0000 Files and hashes: 1: 323830343a326634303a3a2f33322d3438203d3e20323634383830.roa (hash: ORyxhMiPsLuMYUTUTFf1a5ZPgbN+I86oYsBHv0CQLjI=) 2: 3136382e3232372e35362e302f32322d3234203d3e20323634383830.roa (hash: cbbKnj2SOZFOPSYnm7IW0oAfYkFG8ZiF0WmU5IaJh4A=) 3: 3137302e3234362e3138342e302f32322d3234203d3e20323634383830.roa (hash: K2cK3NZIFljKeOpvvpHj0lLcmC4oQ0tB2wi3PEj4Arg=) 4: 9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.crl (hash: mnqnje6JVMSbW81F+uEXYAdKmrC5cWSMgP3rmV5ZvZM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3As3Bd5oosFtNhQtDtxTwXztkwPAhcE1Jfq9rSB7buCh/0/9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.crl rsync://rpki-repo.registro.br/repo/3As3Bd5oosFtNhQtDtxTwXztkwPAhcE1Jfq9rSB7buCh/0/9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Apr 2026 08:51:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:ec:4e:ec:12:69:18:c8:50:d5:b9:5a:69:8b:89:b6:f2:5c:40:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC Validity Not Before: Apr 17 04:55:01 2026 GMT Not After : Apr 18 08:51:01 2026 GMT Subject: CN=871915024D97C6CB736C1A1A3E6933011A273FD8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:3b:9d:e9:78:29:88:84:b0:7b:ec:d9:81:e5: a4:3c:c9:3f:b7:f2:90:ab:ad:34:5f:d3:cd:d9:16: 52:46:b6:66:63:d9:77:8c:28:b4:56:5c:fd:cc:25: 03:ca:92:9b:21:2c:b6:ae:d1:1e:26:c7:27:58:27: b9:89:c8:93:4f:15:60:c2:e2:d3:ff:8f:84:29:88: 4a:38:61:40:5a:78:c9:14:8b:0f:ef:6c:6f:79:ec: 35:8c:4d:2a:e9:46:30:2d:58:f0:bd:64:9e:87:24: 91:ff:b5:9a:45:b4:ad:e8:b5:97:56:11:09:1a:39: db:87:35:79:9a:16:f5:90:44:01:1b:89:fa:c9:81: ea:04:19:9d:79:03:0c:86:b8:4a:cc:9f:dd:64:6a: 7b:a6:7d:e2:ff:85:d2:b4:68:84:8a:73:6d:f4:58: d4:40:30:55:77:bc:6e:fb:09:69:ad:e3:19:21:60: 77:d2:9a:92:89:a3:2c:ef:27:49:95:59:23:fa:c5: 19:99:fc:86:58:78:02:0f:10:f1:0c:ca:8f:71:c5: 8d:3c:63:1d:5a:8b:2d:d6:6b:e7:2b:3c:cc:39:59: 16:e3:7b:f1:76:4d:69:f7:4f:01:22:11:dd:ce:e6: f9:c4:ab:86:32:b0:d1:97:15:56:fa:2b:8a:3e:eb: 6a:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:19:15:02:4D:97:C6:CB:73:6C:1A:1A:3E:69:33:01:1A:27:3F:D8 X509v3 Authority Key Identifier: keyid:9A:32:CD:91:FC:E9:CA:DB:F2:8B:ED:F4:C7:20:E6:7B:79:AF:B9:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3As3Bd5oosFtNhQtDtxTwXztkwPAhcE1Jfq9rSB7buCh/0/9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3As3Bd5oosFtNhQtDtxTwXztkwPAhcE1Jfq9rSB7buCh/0/9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:a3:88:e3:f7:15:29:9d:fb:e9:3f:81:ec:2b:61:2c:a5:2e: 4c:e0:70:d7:0d:d8:01:4c:f4:bf:70:1e:94:a0:1e:50:1d:51: 44:c1:fd:90:54:bf:9f:e6:be:2f:43:71:4e:49:89:2c:3a:c8: 43:e8:d7:a1:44:11:7a:c7:75:6a:c7:b9:5c:ef:68:05:a0:8f: bf:03:82:53:b0:a3:1d:10:83:7d:2f:36:4b:05:b2:ce:37:64: bd:10:52:c2:ce:cc:50:f5:4e:29:8d:ec:96:31:c8:e9:85:b2: 40:91:6c:92:45:c3:0b:e8:0f:99:31:93:a4:5d:09:4e:c5:bd: 10:39:16:90:50:93:af:6e:8f:e7:ba:7d:78:d4:26:f7:70:6e: c1:a8:a6:ae:03:3c:17:57:b6:ff:d1:6f:36:fa:a7:69:99:6f: 8a:ef:70:75:70:2f:7d:8c:f7:59:ed:53:a4:57:45:ea:e3:58: fa:dc:02:68:5b:2f:45:84:17:07:d5:c6:2c:ba:d9:4d:7d:4b: de:ae:9a:96:fe:a7:88:f6:de:f1:0f:8f:ca:47:9d:71:5c:f5: 11:9a:09:47:3d:0a:29:0f:58:e7:87:f1:88:25:18:e6:b2:f6: b6:91:b0:cc:37:ef:e2:4e:65:d3:ae:5b:e1:95:c2:b6:67:57: e1:3d:7c:c2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUW+xO7BJpGMhQ1blaaYuJtvJcQMUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUEzMkNEOTFGQ0U5Q0FEQkYyOEJFREY0QzcyMEU2N0I3 OUFGQjlDQzAeFw0yNjA0MTcwNDU1MDFaFw0yNjA0MTgwODUxMDFaMDMxMTAvBgNV BAMTKDg3MTkxNTAyNEQ5N0M2Q0I3MzZDMUExQTNFNjkzMzAxMUEyNzNGRDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaO53peCmIhLB77NmB5aQ8yT+3 8pCrrTRf083ZFlJGtmZj2XeMKLRWXP3MJQPKkpshLLau0R4mxydYJ7mJyJNPFWDC 4tP/j4QpiEo4YUBaeMkUiw/vbG957DWMTSrpRjAtWPC9ZJ6HJJH/tZpFtK3otZdW EQkaOduHNXmaFvWQRAEbifrJgeoEGZ15AwyGuErMn91kanumfeL/hdK0aISKc230 WNRAMFV3vG77CWmt4xkhYHfSmpKJoyzvJ0mVWSP6xRmZ/IZYeAIPEPEMyo9xxY08 Yx1aiy3Wa+crPMw5WRbje/F2TWn3TwEiEd3O5vnEq4YysNGXFVb6K4o+62ohAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUhxkVAk2XxstzbBoaPmkzARonP9gwHwYDVR0j BBgwFoAUmjLNkfzpytvyi+30xyDme3mvucwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM0FzM0JkNW9vc0Z0TmhRdER0eFR3WHp0a3dQQWhjRTFKZnE5clNCN2J1 Q2gvMC85QTMyQ0Q5MUZDRTlDQURCRjI4QkVERjRDNzIwRTY3Qjc5QUZCOUNDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlBMzJDRDkxRkNFOUNBREJG MjhCRURGNEM3MjBFNjdCNzlBRkI5Q0MuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M0FzM0JkNW9vc0Z0TmhRdER0eFR3WHp0a3dQQWhjRTFKZnE5clNCN2J1Q2gvMC85 QTMyQ0Q5MUZDRTlDQURCRjI4QkVERjRDNzIwRTY3Qjc5QUZCOUNDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEALaOI4/cVKZ376T+B7CthLKUuTOBw1w3YAUz0v3AelKAeUB1RRMH9kFS/n+a+ L0NxTkmJLDrIQ+jXoUQResd1ase5XO9oBaCPvwOCU7CjHRCDfS82SwWyzjdkvRBS ws7MUPVOKY3sljHI6YWyQJFskkXDC+gPmTGTpF0JTsW9EDkWkFCTr26P57p9eNQm 93BuwaimrgM8F1e2/9FvNvqnaZlviu9wdXAvfYz3We1TpFdF6uNY+twCaFsvRYQX B9XGLLrZTX1L3q6alv6niPbe8Q+PykedcVz1EZoJRz0KKQ9Y54fxiCUY5rL2tpGw zDfv4k5l065b4ZXCtmdX4T18wg== -----END CERTIFICATE-----Generated at Fri Apr 17 20:58:30 2026 by rpki-client