$ rpki-client -vvf rpki-repo.registro.br/repo/3DNPQJQcjZCkrDyWsJY6Zxh5roFMRKbzbpxjTXpAoAJn/0/4A3AF97837ED9A918FA75D4960FC2047B2CF81FF.mft File: 4A3AF97837ED9A918FA75D4960FC2047B2CF81FF.mft (raw, json) Hash identifier: /Ev/Fv26Y1aorqrlgsjjhN5TFFymPW5ZD+0/0iokzP4= Subject key identifier: 0E:49:C2:BE:FF:50:FB:BF:BB:BE:01:C6:A5:19:B0:00:FF:E1:F6:9F Authority key identifier: 4A:3A:F9:78:37:ED:9A:91:8F:A7:5D:49:60:FC:20:47:B2:CF:81:FF Certificate issuer: /CN=4A3AF97837ED9A918FA75D4960FC2047B2CF81FF Certificate serial: 169472D115E7C17B8AFE549622F38DC7598BC433 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A3AF97837ED9A918FA75D4960FC2047B2CF81FF.cer Subject info access: rsync://rpki-repo.registro.br/repo/3DNPQJQcjZCkrDyWsJY6Zxh5roFMRKbzbpxjTXpAoAJn/0/4A3AF97837ED9A918FA75D4960FC2047B2CF81FF.mft Manifest number: C0 Signing time: Fri 17 Apr 2026 11:01:25 +0000 Manifest this update: Fri 17 Apr 2026 10:56:25 +0000 Manifest next update: Sat 18 Apr 2026 11:37:25 +0000 Files and hashes: 1: 3230302e32342e3131382e302f32332d3234203d3e20323731363739.roa (hash: WlfPkdvQaK+2iNV2J8DnE42kv5R/ULsDx9rhkKjR0cA=) 2: 4A3AF97837ED9A918FA75D4960FC2047B2CF81FF.crl (hash: YaT5viyjDunmk5i5IDFyV3QOJiVvNO+dh4U4zCYKrDY=) 3: 3230302e32342e3131362e302f32322d3234203d3e20323731363739.roa (hash: N91dwFlRpIMGXso4PKVxPSMTeHaKnAVRNeylT8GL1f4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3DNPQJQcjZCkrDyWsJY6Zxh5roFMRKbzbpxjTXpAoAJn/0/4A3AF97837ED9A918FA75D4960FC2047B2CF81FF.crl rsync://rpki-repo.registro.br/repo/3DNPQJQcjZCkrDyWsJY6Zxh5roFMRKbzbpxjTXpAoAJn/0/4A3AF97837ED9A918FA75D4960FC2047B2CF81FF.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A3AF97837ED9A918FA75D4960FC2047B2CF81FF.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Apr 2026 11:37:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:94:72:d1:15:e7:c1:7b:8a:fe:54:96:22:f3:8d:c7:59:8b:c4:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A3AF97837ED9A918FA75D4960FC2047B2CF81FF Validity Not Before: Apr 17 10:56:25 2026 GMT Not After : Apr 18 11:37:25 2026 GMT Subject: CN=0E49C2BEFF50FBBFBBBE01C6A519B000FFE1F69F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:61:ff:cb:a6:7f:90:b6:af:81:c5:f5:e9:1a: 2d:7a:de:8d:ec:79:91:06:25:5f:13:05:b7:2a:77: e0:10:6e:26:4b:d8:2b:ab:7a:1c:19:52:20:72:2e: 97:12:17:71:ea:8a:51:eb:fa:ae:ed:0d:d7:97:ed: 6a:2b:7f:b3:d3:75:15:51:94:9b:ad:d2:51:34:7b: 40:35:9b:90:5f:1a:fc:f9:76:b5:2d:1c:6e:58:b7: 5a:dd:0b:7a:d6:47:5a:96:79:db:55:f0:89:50:09: bd:e0:7d:07:c6:7c:82:69:5f:46:bc:1c:08:41:e3: 24:73:a1:cf:65:a1:63:2d:6a:ef:b9:01:c4:62:2d: fe:f1:a5:f5:87:0e:35:4a:ff:35:d7:cb:52:27:95: 4c:77:7c:4a:71:75:11:b7:85:cd:84:9e:0b:60:2f: 5b:38:0e:af:5e:28:26:2c:3d:20:53:4d:db:2e:e1: ef:f9:35:cc:0d:cf:f3:4b:9d:7c:9d:db:47:f9:b8: 6a:2c:24:98:15:ea:97:22:f3:22:61:76:48:94:f6: 0b:3f:ff:ac:b0:d4:1f:a1:6b:76:75:ca:8a:38:1e: 65:f3:9f:2b:2f:45:ca:83:b9:db:04:56:d7:05:4d: 56:3d:38:5a:a1:ad:44:c1:62:77:e8:24:45:18:d1: fc:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:49:C2:BE:FF:50:FB:BF:BB:BE:01:C6:A5:19:B0:00:FF:E1:F6:9F X509v3 Authority Key Identifier: keyid:4A:3A:F9:78:37:ED:9A:91:8F:A7:5D:49:60:FC:20:47:B2:CF:81:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3DNPQJQcjZCkrDyWsJY6Zxh5roFMRKbzbpxjTXpAoAJn/0/4A3AF97837ED9A918FA75D4960FC2047B2CF81FF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A3AF97837ED9A918FA75D4960FC2047B2CF81FF.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3DNPQJQcjZCkrDyWsJY6Zxh5roFMRKbzbpxjTXpAoAJn/0/4A3AF97837ED9A918FA75D4960FC2047B2CF81FF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:2c:b8:0d:40:53:43:86:b9:38:12:2a:fd:b0:9f:6d:a0:14: 1e:37:05:e7:50:97:e2:1d:34:06:ee:aa:86:48:c5:71:98:51: cd:ac:63:6b:bd:13:fb:27:51:d6:06:2c:14:ae:62:d5:a2:51: 31:af:bb:ac:9d:55:e5:47:b6:19:d7:dd:7a:88:7b:b3:fd:35: 47:d6:b1:65:37:77:14:7a:a1:2b:16:b8:e9:80:2b:b6:b5:25: 13:7b:62:c3:1a:1f:9c:b8:a3:9a:43:91:ec:7b:d8:25:6e:9c: 76:f6:67:a7:1f:47:01:d8:7c:d3:65:1f:4d:d1:8c:2d:dd:04: 8c:88:3c:76:f9:4a:5a:9c:99:6f:6a:ce:76:b0:f0:4a:8f:6f: 40:4c:83:30:b9:6a:de:d5:33:5a:41:fc:c2:78:25:a6:ee:89: f9:94:33:3c:bc:66:90:dd:01:df:6d:b9:88:cf:23:14:b3:c4: 27:80:53:5c:89:b2:ea:ae:82:7a:e5:4f:dd:c5:71:f2:e2:a7: 14:22:3e:83:eb:ba:6d:a0:81:9a:f7:a1:54:d5:65:78:07:ce: e2:a1:a7:8f:00:d0:dd:ef:d5:aa:dc:e1:b5:bc:43:e3:b7:8a: b0:08:3e:60:67:94:26:33:d1:39:3a:1e:12:5d:b5:0e:1d:54: f6:9a:62:fa -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUFpRy0RXnwXuK/lSWIvONx1mLxDMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEEzQUY5NzgzN0VEOUE5MThGQTc1RDQ5NjBGQzIwNDdC MkNGODFGRjAeFw0yNjA0MTcxMDU2MjVaFw0yNjA0MTgxMTM3MjVaMDMxMTAvBgNV BAMTKDBFNDlDMkJFRkY1MEZCQkZCQkJFMDFDNkE1MTlCMDAwRkZFMUY2OUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpYf/Lpn+Qtq+BxfXpGi163o3s eZEGJV8TBbcqd+AQbiZL2CurehwZUiByLpcSF3HqilHr+q7tDdeX7Worf7PTdRVR lJut0lE0e0A1m5BfGvz5drUtHG5Yt1rdC3rWR1qWedtV8IlQCb3gfQfGfIJpX0a8 HAhB4yRzoc9loWMtau+5AcRiLf7xpfWHDjVK/zXXy1InlUx3fEpxdRG3hc2Engtg L1s4Dq9eKCYsPSBTTdsu4e/5NcwNz/NLnXyd20f5uGosJJgV6pci8yJhdkiU9gs/ /6yw1B+ha3Z1yoo4HmXznysvRcqDudsEVtcFTVY9OFqhrUTBYnfoJEUY0fx7AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUDknCvv9Q+7+7vgHGpRmwAP/h9p8wHwYDVR0j BBgwFoAUSjr5eDftmpGPp11JYPwgR7LPgf8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM0ROUFFKUWNqWkNrckR5V3NKWTZaeGg1cm9GTVJLYnpicHhqVFhwQW9B Sm4vMC80QTNBRjk3ODM3RUQ5QTkxOEZBNzVENDk2MEZDMjA0N0IyQ0Y4MUZGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRBM0FGOTc4MzdFRDlBOTE4 RkE3NUQ0OTYwRkMyMDQ3QjJDRjgxRkYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M0ROUFFKUWNqWkNrckR5V3NKWTZaeGg1cm9GTVJLYnpicHhqVFhwQW9BSm4vMC80 QTNBRjk3ODM3RUQ5QTkxOEZBNzVENDk2MEZDMjA0N0IyQ0Y4MUZGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFiy4DUBTQ4a5OBIq/bCfbaAUHjcF51CX4h00Bu6qhkjFcZhRzaxja70T+ydR 1gYsFK5i1aJRMa+7rJ1V5Ue2Gdfdeoh7s/01R9axZTd3FHqhKxa46YArtrUlE3ti wxofnLijmkOR7HvYJW6cdvZnpx9HAdh802UfTdGMLd0EjIg8dvlKWpyZb2rOdrDw So9vQEyDMLlq3tUzWkH8wnglpu6J+ZQzPLxmkN0B3225iM8jFLPEJ4BTXImy6q6C euVP3cVx8uKnFCI+g+u6baCBmvehVNVleAfO4qGnjwDQ3e/VqtzhtbxD47eKsAg+ YGeUJjPROToeEl21Dh1U9ppi+g== -----END CERTIFICATE-----Generated at Fri Apr 17 21:10:34 2026 by rpki-client