$ rpki-client -vvf rpki-repo.registro.br/repo/3sHkDgcrhfqA53N7opJ2rnPF5cPFuByv223i6QgxrnvZ/1/DCD7A1ADD4DEBD23B1C5FAD5E60BC269D2AD100F.mft File: DCD7A1ADD4DEBD23B1C5FAD5E60BC269D2AD100F.mft (raw, json) Hash identifier: fD6kN9GRAx1y4AuDt2ZezTs4Sat+CNVksG+EDtRt4FE= Subject key identifier: 89:F2:57:21:D2:0A:34:69:4C:EC:7C:EB:11:75:87:D3:A1:30:65:F8 Authority key identifier: DC:D7:A1:AD:D4:DE:BD:23:B1:C5:FA:D5:E6:0B:C2:69:D2:AD:10:0F Certificate issuer: /CN=DCD7A1ADD4DEBD23B1C5FAD5E60BC269D2AD100F Certificate serial: 37DE2F99D8A7E3996CA97F3AEB5ED04B38FF4E22 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCD7A1ADD4DEBD23B1C5FAD5E60BC269D2AD100F.cer Subject info access: rsync://rpki-repo.registro.br/repo/3sHkDgcrhfqA53N7opJ2rnPF5cPFuByv223i6QgxrnvZ/1/DCD7A1ADD4DEBD23B1C5FAD5E60BC269D2AD100F.mft Manifest number: 03DC Signing time: Sat 18 Apr 2026 01:20:00 +0000 Manifest this update: Sat 18 Apr 2026 01:15:00 +0000 Manifest next update: Sun 19 Apr 2026 02:13:00 +0000 Files and hashes: 1: 323830343a376335343a3a2f33322d3438203d3e20323731343839.roa (hash: o3enRyNbzWXBypRyf4X8XM36ZbDvaLOcZyQ7nwnBtuU=) 2: DCD7A1ADD4DEBD23B1C5FAD5E60BC269D2AD100F.crl (hash: Uuh9P00+ra6BKi5HPjyXdQWRNVPEWMqb5xyPnCmQPCE=) 3: 3138312e3233322e3230302e302f32322d3234203d3e20323731343839.roa (hash: 6m4zbH4CvrVkkMH6P+svwQ9mp9NdGtkwxoG3HBYiSzk=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3sHkDgcrhfqA53N7opJ2rnPF5cPFuByv223i6QgxrnvZ/1/DCD7A1ADD4DEBD23B1C5FAD5E60BC269D2AD100F.crl rsync://rpki-repo.registro.br/repo/3sHkDgcrhfqA53N7opJ2rnPF5cPFuByv223i6QgxrnvZ/1/DCD7A1ADD4DEBD23B1C5FAD5E60BC269D2AD100F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCD7A1ADD4DEBD23B1C5FAD5E60BC269D2AD100F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 19 Apr 2026 02:13:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:de:2f:99:d8:a7:e3:99:6c:a9:7f:3a:eb:5e:d0:4b:38:ff:4e:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DCD7A1ADD4DEBD23B1C5FAD5E60BC269D2AD100F Validity Not Before: Apr 18 01:15:00 2026 GMT Not After : Apr 19 02:13:00 2026 GMT Subject: CN=89F25721D20A34694CEC7CEB117587D3A13065F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:7c:ef:cd:b8:6e:21:ea:4f:eb:2b:a1:bf:9f: 23:ae:51:b1:8a:0f:36:e6:ee:21:69:08:bb:e1:49: a0:60:02:48:7e:b5:9f:f2:82:79:ac:24:0e:b8:ca: 65:a4:6c:88:ba:5b:54:c6:88:24:90:5b:05:be:e8: 2f:e2:9d:60:e3:7f:01:dc:40:97:e4:46:b5:72:92: 05:c1:ea:60:61:68:66:0e:15:9e:7f:ba:d4:b8:90: 56:87:b6:5d:a4:fb:d6:87:bd:ff:ed:5b:d0:4c:51: 18:ca:df:2f:3f:4a:bd:cc:cf:48:65:10:de:c5:d0: 89:77:87:a7:c0:54:4f:a1:9c:5c:0b:dd:bc:28:6c: 20:0d:18:f5:c5:9b:51:5f:8a:9a:ce:a6:bb:bc:39: 11:d2:b2:85:30:4c:1a:b8:ca:39:b4:46:fa:fe:69: de:76:59:df:58:59:b2:87:b1:62:d7:d8:b3:0c:bc: 3e:78:16:22:d7:f1:e7:c5:14:05:d2:2b:bb:18:a5: da:51:ae:07:e8:b3:81:29:d9:83:b1:af:a0:90:d4: 1e:70:b2:c8:1b:e9:db:88:d4:03:49:a7:17:31:fd: 62:c9:6f:4b:f6:e3:9e:f9:18:0d:a5:1e:58:6a:73: 20:c9:15:c2:c3:4f:fd:67:9a:99:38:91:d9:e8:2b: 7a:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:F2:57:21:D2:0A:34:69:4C:EC:7C:EB:11:75:87:D3:A1:30:65:F8 X509v3 Authority Key Identifier: keyid:DC:D7:A1:AD:D4:DE:BD:23:B1:C5:FA:D5:E6:0B:C2:69:D2:AD:10:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3sHkDgcrhfqA53N7opJ2rnPF5cPFuByv223i6QgxrnvZ/1/DCD7A1ADD4DEBD23B1C5FAD5E60BC269D2AD100F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCD7A1ADD4DEBD23B1C5FAD5E60BC269D2AD100F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3sHkDgcrhfqA53N7opJ2rnPF5cPFuByv223i6QgxrnvZ/1/DCD7A1ADD4DEBD23B1C5FAD5E60BC269D2AD100F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:06:39:57:05:b1:c2:49:de:87:75:60:2e:7c:ed:f9:1e:37: fd:d1:dc:b2:93:f3:e9:f0:ff:3e:71:84:64:29:dd:40:84:3d: ee:85:81:69:98:69:aa:2a:0e:0b:96:ad:a7:a9:37:0d:9c:17: 73:56:89:a2:50:ff:2c:3f:b3:5f:86:10:2e:3b:47:f8:44:b2: 77:5d:0c:f2:79:f4:71:19:e5:94:68:04:55:98:7d:06:58:8c: 4c:43:61:d3:b8:e4:f8:a5:ad:21:9a:d8:39:30:c9:88:04:af: 5a:77:90:ea:45:09:bf:71:08:b4:3e:d6:40:f5:81:25:4e:a2: 82:94:cb:5b:5d:75:3a:af:b6:d5:41:97:bb:ac:32:47:83:86: 4f:b1:88:81:b5:a9:49:a3:73:86:21:f8:31:b0:14:d1:2e:1d: 4d:1c:e9:67:3d:57:2c:2d:7c:7c:4e:51:37:c6:f4:42:37:2d: a3:ae:db:31:ef:ad:7e:07:7b:d8:d7:42:52:16:6e:fa:f0:3f: b2:49:b2:da:84:45:2a:a3:89:85:af:4a:9e:15:0f:18:37:3b: fc:69:13:38:78:38:18:9c:00:c8:e1:5f:c4:41:62:5a:6d:2d: cd:b0:67:de:07:ea:db:d3:17:79:6e:07:53:20:34:b3:e2:45: d0:c3:0e:30 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUN94vmdin45lsqX86617QSzj/TiIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRENEN0ExQURENERFQkQyM0IxQzVGQUQ1RTYwQkMyNjlE MkFEMTAwRjAeFw0yNjA0MTgwMTE1MDBaFw0yNjA0MTkwMjEzMDBaMDMxMTAvBgNV BAMTKDg5RjI1NzIxRDIwQTM0Njk0Q0VDN0NFQjExNzU4N0QzQTEzMDY1RjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClfO/NuG4h6k/rK6G/nyOuUbGK Dzbm7iFpCLvhSaBgAkh+tZ/ygnmsJA64ymWkbIi6W1TGiCSQWwW+6C/inWDjfwHc QJfkRrVykgXB6mBhaGYOFZ5/utS4kFaHtl2k+9aHvf/tW9BMURjK3y8/Sr3Mz0hl EN7F0Il3h6fAVE+hnFwL3bwobCANGPXFm1FfiprOpru8ORHSsoUwTBq4yjm0Rvr+ ad52Wd9YWbKHsWLX2LMMvD54FiLX8efFFAXSK7sYpdpRrgfos4Ep2YOxr6CQ1B5w ssgb6duI1ANJpxcx/WLJb0v24575GA2lHlhqcyDJFcLDT/1nmpk4kdnoK3obAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUifJXIdIKNGlM7HzrEXWH06EwZfgwHwYDVR0j BBgwFoAU3NehrdTevSOxxfrV5gvCadKtEA8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM3NIa0RnY3JoZnFBNTNON29wSjJyblBGNWNQRnVCeXYyMjNpNlFneHJu dlovMS9EQ0Q3QTFBREQ0REVCRDIzQjFDNUZBRDVFNjBCQzI2OUQyQUQxMDBGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RDRDdBMUFERDRERUJEMjNC MUM1RkFENUU2MEJDMjY5RDJBRDEwMEYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M3NIa0RnY3JoZnFBNTNON29wSjJyblBGNWNQRnVCeXYyMjNpNlFneHJudlovMS9E Q0Q3QTFBREQ0REVCRDIzQjFDNUZBRDVFNjBCQzI2OUQyQUQxMDBGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcwY5VwWxwkneh3VgLnzt+R43/dHcspPz6fD/PnGEZCndQIQ97oWBaZhpqioO C5atp6k3DZwXc1aJolD/LD+zX4YQLjtH+ESyd10M8nn0cRnllGgEVZh9BliMTENh 07jk+KWtIZrYOTDJiASvWneQ6kUJv3EItD7WQPWBJU6igpTLW111Oq+21UGXu6wy R4OGT7GIgbWpSaNzhiH4MbAU0S4dTRzpZz1XLC18fE5RN8b0Qjcto67bMe+tfgd7 2NdCUhZu+vA/skmy2oRFKqOJha9KnhUPGDc7/GkTOHg4GJwAyOFfxEFiWm0tzbBn 3gfq29MXeW4HUyA0s+JF0MMOMA== -----END CERTIFICATE-----Generated at Sat Apr 18 03:32:42 2026 by rpki-client