$ rpki-client -vvf rpki-repo.registro.br/repo/3FhH3cqZa8sGcZA3mKXkg66JoahPm9VSXiEZ4riYZC14/1/D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05.mft File: D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05.mft (raw, json) Hash identifier: 3UUDKe/qwrGGFSjaDG9P0KGB6WCgwNpaRQhNtrSFGCE= Subject key identifier: 24:00:E7:20:8A:02:63:E1:37:DF:28:DB:B8:16:46:24:10:69:02:29 Authority key identifier: D8:D9:B8:E4:A8:35:A2:FE:0F:90:57:86:DE:D8:B5:30:F7:F0:AD:05 Certificate issuer: /CN=D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05 Certificate serial: 1804A2E6547459E7E556C74B255698C41F457A35 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05.cer Subject info access: rsync://rpki-repo.registro.br/repo/3FhH3cqZa8sGcZA3mKXkg66JoahPm9VSXiEZ4riYZC14/1/D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05.mft Manifest number: 03DC Signing time: Fri 17 Apr 2026 15:47:31 +0000 Manifest this update: Fri 17 Apr 2026 15:42:31 +0000 Manifest next update: Sat 18 Apr 2026 16:41:31 +0000 Files and hashes: 1: 323830343a326630383a3a2f33322d3332203d3e20323634383637.roa (hash: WFmpswDhDjpd6g5xiHbucDpV+VKoEe130j9mwVUtUfs=) 2: D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05.crl (hash: cv7XatRVMtu0UXGemA85q4BbuKyUJz+nKyP593r8R0Q=) 3: 3136382e3230352e3232342e302f32322d3234203d3e20323634383637.roa (hash: pmh4BRCTLaVheNeaFBQFQP/b/r3NgPTQ74DTv+RIp/c=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3FhH3cqZa8sGcZA3mKXkg66JoahPm9VSXiEZ4riYZC14/1/D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05.crl rsync://rpki-repo.registro.br/repo/3FhH3cqZa8sGcZA3mKXkg66JoahPm9VSXiEZ4riYZC14/1/D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Apr 2026 16:41:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:04:a2:e6:54:74:59:e7:e5:56:c7:4b:25:56:98:c4:1f:45:7a:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05 Validity Not Before: Apr 17 15:42:31 2026 GMT Not After : Apr 18 16:41:31 2026 GMT Subject: CN=2400E7208A0263E137DF28DBB816462410690229 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:67:44:e5:04:03:be:0f:f0:75:38:39:6d:f2: 9f:1f:9e:5e:23:bd:26:b2:be:80:b9:ec:45:a4:9e: d1:c9:fd:60:fe:cd:4e:92:eb:b9:06:f8:12:96:93: f4:f6:05:66:36:b8:51:5f:1b:35:48:81:76:44:6b: 73:fc:70:43:76:cb:70:63:e2:f0:40:35:a3:94:2f: 6e:8e:5d:8e:7e:47:7e:3a:4e:cc:ca:0e:69:8e:e1: b3:9a:85:7a:e1:6a:0d:de:93:05:b7:03:cc:ae:bd: 88:31:72:e2:6f:f4:02:2b:e0:57:78:aa:44:25:cd: 58:f3:ff:32:fd:9c:54:2f:6e:88:50:4e:4e:a3:ae: 46:c2:f8:61:42:cd:6e:9d:66:54:bd:db:ba:4f:2a: 52:0d:a4:76:d2:fa:e6:b5:05:72:6c:c9:4d:b2:9e: e8:cc:c6:67:60:38:5a:3d:2a:ad:97:da:83:8d:9e: e7:b7:b4:2d:ef:d9:89:3f:2a:61:59:b4:f5:d4:59: 82:e3:e5:7e:19:f2:6d:4c:3c:fb:f5:df:cc:de:73: c9:80:c7:80:5e:32:43:16:08:3f:f9:ce:71:b8:32: 32:53:ed:63:c1:79:14:21:eb:68:5f:47:8b:c3:a3: 61:fe:b6:44:a0:57:54:af:99:d0:3b:e0:2e:4e:8d: 57:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:00:E7:20:8A:02:63:E1:37:DF:28:DB:B8:16:46:24:10:69:02:29 X509v3 Authority Key Identifier: keyid:D8:D9:B8:E4:A8:35:A2:FE:0F:90:57:86:DE:D8:B5:30:F7:F0:AD:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3FhH3cqZa8sGcZA3mKXkg66JoahPm9VSXiEZ4riYZC14/1/D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3FhH3cqZa8sGcZA3mKXkg66JoahPm9VSXiEZ4riYZC14/1/D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:88:b2:53:92:43:a5:4c:e4:8d:d4:eb:9d:01:a5:4d:19:78: fd:c2:d2:c5:0b:12:e5:4f:a5:71:84:f8:c6:ae:cf:09:1f:1c: b3:93:8a:a5:23:f4:84:75:ce:4b:da:f3:9e:d9:9f:c5:82:e9: f3:0d:9d:15:7d:56:03:b4:02:6d:de:f1:98:54:27:01:04:b5: d2:c4:26:00:85:01:96:ec:68:78:4a:24:aa:50:10:07:7b:95: 5c:f0:1e:7c:3a:08:af:7a:ac:86:a8:c5:03:ad:9b:b5:8b:e5: 89:59:c8:36:98:f9:02:ad:72:dc:b9:3d:f7:0b:41:1b:70:a8: 63:c1:6e:a0:3d:65:f3:1c:ac:f5:8c:1e:f1:ed:5d:48:d7:1f: 85:bd:9a:cc:49:1c:f5:5e:b5:80:a6:b1:c9:55:32:2e:8e:86: 29:9c:33:72:32:ad:3e:5e:6a:ca:ef:e4:0c:ea:a8:4c:55:ce: b8:3d:65:33:0a:6a:df:42:66:74:bd:b7:dd:84:80:e6:5d:21: 6a:74:4e:36:d5:b6:62:c3:c1:4b:20:fd:c1:fa:34:f1:ef:49: ce:61:f0:66:eb:14:c6:d7:3d:a8:da:d2:4d:87:81:dd:17:a0: e3:5a:6f:0f:7b:54:3f:5d:16:3d:74:ca:01:93:b8:d9:e9:1d: 61:fd:66:12 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUGASi5lR0WeflVsdLJVaYxB9FejUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDhEOUI4RTRBODM1QTJGRTBGOTA1Nzg2REVEOEI1MzBG N0YwQUQwNTAeFw0yNjA0MTcxNTQyMzFaFw0yNjA0MTgxNjQxMzFaMDMxMTAvBgNV BAMTKDI0MDBFNzIwOEEwMjYzRTEzN0RGMjhEQkI4MTY0NjI0MTA2OTAyMjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHZ0TlBAO+D/B1ODlt8p8fnl4j vSayvoC57EWkntHJ/WD+zU6S67kG+BKWk/T2BWY2uFFfGzVIgXZEa3P8cEN2y3Bj 4vBANaOUL26OXY5+R346TszKDmmO4bOahXrhag3ekwW3A8yuvYgxcuJv9AIr4Fd4 qkQlzVjz/zL9nFQvbohQTk6jrkbC+GFCzW6dZlS927pPKlINpHbS+ua1BXJsyU2y nujMxmdgOFo9Kq2X2oONnue3tC3v2Yk/KmFZtPXUWYLj5X4Z8m1MPPv138zec8mA x4BeMkMWCD/5znG4MjJT7WPBeRQh62hfR4vDo2H+tkSgV1SvmdA74C5OjVc5AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUJADnIIoCY+E33yjbuBZGJBBpAikwHwYDVR0j BBgwFoAU2Nm45Kg1ov4PkFeG3ti1MPfwrQUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM0ZoSDNjcVphOHNHY1pBM21LWGtnNjZKb2FoUG05VlNYaUVaNHJpWVpD MTQvMS9EOEQ5QjhFNEE4MzVBMkZFMEY5MDU3ODZERUQ4QjUzMEY3RjBBRDA1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q4RDlCOEU0QTgzNUEyRkUw RjkwNTc4NkRFRDhCNTMwRjdGMEFEMDUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M0ZoSDNjcVphOHNHY1pBM21LWGtnNjZKb2FoUG05VlNYaUVaNHJpWVpDMTQvMS9E OEQ5QjhFNEE4MzVBMkZFMEY5MDU3ODZERUQ4QjUzMEY3RjBBRDA1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAp4iyU5JDpUzkjdTrnQGlTRl4/cLSxQsS5U+lcYT4xq7PCR8cs5OKpSP0hHXO S9rzntmfxYLp8w2dFX1WA7QCbd7xmFQnAQS10sQmAIUBluxoeEokqlAQB3uVXPAe fDoIr3qshqjFA62btYvliVnINpj5Aq1y3Lk99wtBG3CoY8FuoD1l8xys9Ywe8e1d SNcfhb2azEkc9V61gKaxyVUyLo6GKZwzcjKtPl5qyu/kDOqoTFXOuD1lMwpq30Jm dL233YSA5l0hanRONtW2YsPBSyD9wfo08e9JzmHwZusUxtc9qNrSTYeB3Reg41pv D3tUP10WPXTKAZO42ekdYf1mEg== -----END CERTIFICATE-----Generated at Sat Apr 18 01:56:50 2026 by rpki-client