$ rpki-client -vvf rpki-repo.registro.br/repo/4GpvdAJ1QK9WdS5MwtWm9YjCKPmQmn5iyM7uzwDcnFuL/0/42CF8AF950150224F27B677F4A1AD4BA306A610F.mft File: 42CF8AF950150224F27B677F4A1AD4BA306A610F.mft (raw, json) Hash identifier: OYxKrgNXY9590w8e9DeL5DN8rRbkngd9WbC2yXsf3lM= Subject key identifier: 97:A6:20:1E:5B:95:9A:37:9C:F9:BB:0F:3D:65:98:E6:03:17:AE:3F Authority key identifier: 42:CF:8A:F9:50:15:02:24:F2:7B:67:7F:4A:1A:D4:BA:30:6A:61:0F Certificate issuer: /CN=42CF8AF950150224F27B677F4A1AD4BA306A610F Certificate serial: 03A8661E87C84BFABA58EE56C1DE9B4E2CF3CA71 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42CF8AF950150224F27B677F4A1AD4BA306A610F.cer Subject info access: rsync://rpki-repo.registro.br/repo/4GpvdAJ1QK9WdS5MwtWm9YjCKPmQmn5iyM7uzwDcnFuL/0/42CF8AF950150224F27B677F4A1AD4BA306A610F.mft Manifest number: 0E Signing time: Fri 17 Apr 2026 11:07:03 +0000 Manifest this update: Fri 17 Apr 2026 11:02:03 +0000 Manifest next update: Sat 18 Apr 2026 12:16:03 +0000 Files and hashes: 1: 42CF8AF950150224F27B677F4A1AD4BA306A610F.crl (hash: FfORO9sX9h4+OOwK48HUzaSyhKjSUckfYIekTr1Qwa4=) 2: 3230312e33332e38342e302f32332d3233203d3e20323734333431.roa (hash: C/3s125x576m/9xZnA4jHt0NusQYqU3nMJqrvQIE7ts=) 3: 323830343a393638383a3a2f33322d3332203d3e20323734333431.roa (hash: UdS0smRxzRrN/o++xx+mb89JXMJY5LSywGnNxwY9uM4=) 4: 3230312e33332e38342e302f32342d3234203d3e20323734333431.roa (hash: 1qcNEgfnSoLHywYelCkC2g/KjE7etqATfHolR93C7ho=) 5: 3230312e33332e38352e302f32342d3234203d3e20323734333431.roa (hash: BcyGJqCDqoaZF7DCyB00NOUR/vd1YanNkOPrMiTD4sg=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4GpvdAJ1QK9WdS5MwtWm9YjCKPmQmn5iyM7uzwDcnFuL/0/42CF8AF950150224F27B677F4A1AD4BA306A610F.crl rsync://rpki-repo.registro.br/repo/4GpvdAJ1QK9WdS5MwtWm9YjCKPmQmn5iyM7uzwDcnFuL/0/42CF8AF950150224F27B677F4A1AD4BA306A610F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42CF8AF950150224F27B677F4A1AD4BA306A610F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Apr 2026 12:16:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:a8:66:1e:87:c8:4b:fa:ba:58:ee:56:c1:de:9b:4e:2c:f3:ca:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42CF8AF950150224F27B677F4A1AD4BA306A610F Validity Not Before: Apr 17 11:02:03 2026 GMT Not After : Apr 18 12:16:03 2026 GMT Subject: CN=97A6201E5B959A379CF9BB0F3D6598E60317AE3F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:34:71:b0:93:0f:c4:87:b9:29:e6:68:74:94: 9a:f4:11:d9:5d:39:72:5a:26:bf:51:bc:98:c6:b1: bf:c3:c2:f4:19:3d:34:d0:37:cf:d4:7c:90:7c:5f: 39:87:68:c5:11:51:f9:e7:10:92:bc:6e:38:9e:5c: 9f:97:b3:ac:05:99:b8:da:30:20:22:30:ff:39:26: c5:22:88:24:dd:1f:19:26:e1:f6:6a:ca:4f:67:9d: 0c:68:ab:ee:6b:08:14:fc:d6:39:1e:11:15:bc:ec: 9d:08:ed:05:c7:3b:b4:89:d8:4e:37:88:11:83:38: fc:b3:e0:8e:5e:34:78:7a:fb:ad:c6:ce:d3:33:91: 93:ca:21:89:9a:cd:6f:d3:a2:7c:e2:73:5d:69:60: e1:eb:39:2b:44:b7:2a:e0:fe:c9:93:a8:d8:bf:73: b0:f8:55:2e:dc:bb:93:b4:80:d6:ce:f2:56:12:eb: cb:8c:61:0e:3e:f1:af:64:ae:8e:74:c2:79:93:6d: 54:b5:1c:b4:86:f2:1b:6e:9b:7d:3c:f4:52:c3:82: 32:56:05:64:10:f9:44:ab:77:bd:b3:bd:8e:3b:ac: 2a:dd:82:26:0e:c5:5f:8c:11:71:54:f4:49:42:31: 43:74:16:f0:cc:d1:27:27:4e:84:78:15:b2:a9:af: 99:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:A6:20:1E:5B:95:9A:37:9C:F9:BB:0F:3D:65:98:E6:03:17:AE:3F X509v3 Authority Key Identifier: keyid:42:CF:8A:F9:50:15:02:24:F2:7B:67:7F:4A:1A:D4:BA:30:6A:61:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4GpvdAJ1QK9WdS5MwtWm9YjCKPmQmn5iyM7uzwDcnFuL/0/42CF8AF950150224F27B677F4A1AD4BA306A610F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42CF8AF950150224F27B677F4A1AD4BA306A610F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GpvdAJ1QK9WdS5MwtWm9YjCKPmQmn5iyM7uzwDcnFuL/0/42CF8AF950150224F27B677F4A1AD4BA306A610F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:7a:b0:a5:d0:a5:32:3e:26:81:30:47:f5:e2:fc:63:40:5b: ce:f6:b0:7c:ef:14:82:59:82:05:21:65:45:7f:ac:ea:f9:16: 0a:f2:ed:82:e1:66:88:cd:1b:1d:33:0d:35:04:6d:62:37:45: 40:a7:54:4f:93:1e:0f:c2:ff:53:fb:7d:23:fe:da:2b:b4:ba: 36:9e:0d:51:14:03:74:ce:f3:19:ab:b0:13:74:b3:88:fd:29: ae:3f:ce:d7:69:79:ad:f8:bf:c5:4c:d8:94:05:38:45:20:c9: 83:b2:67:f4:6a:5c:fa:09:8e:2b:f8:5b:d1:9e:d2:38:30:e5: 14:e4:3b:1e:0b:4f:c8:8b:f7:d1:d4:e1:2d:8f:ac:c1:3a:e3: db:ac:d8:31:0e:7a:70:64:0d:27:8f:b3:72:e2:30:66:fc:75: 1a:22:d4:d3:23:9e:78:44:c3:92:66:56:12:5c:14:b0:39:19: 42:97:87:5c:ea:f8:9d:1a:cd:34:d8:6b:96:54:80:42:81:ef: a8:72:9d:78:05:0c:24:37:12:5c:c7:a1:df:cf:1b:97:fb:af: fe:fe:d2:75:3f:e4:32:03:4f:bf:e8:3f:07:ad:4c:7d:f7:d3: b5:15:06:44:07:6a:a1:3a:9c:0c:d1:2f:39:d4:cf:a4:f2:ae: 3d:59:6e:5d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUA6hmHofIS/q6WO5Wwd6bTizzynEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDJDRjhBRjk1MDE1MDIyNEYyN0I2NzdGNEExQUQ0QkEz MDZBNjEwRjAeFw0yNjA0MTcxMTAyMDNaFw0yNjA0MTgxMjE2MDNaMDMxMTAvBgNV BAMTKDk3QTYyMDFFNUI5NTlBMzc5Q0Y5QkIwRjNENjU5OEU2MDMxN0FFM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3NHGwkw/Eh7kp5mh0lJr0Edld OXJaJr9RvJjGsb/DwvQZPTTQN8/UfJB8XzmHaMURUfnnEJK8bjieXJ+Xs6wFmbja MCAiMP85JsUiiCTdHxkm4fZqyk9nnQxoq+5rCBT81jkeERW87J0I7QXHO7SJ2E43 iBGDOPyz4I5eNHh6+63GztMzkZPKIYmazW/Tonzic11pYOHrOStEtyrg/smTqNi/ c7D4VS7cu5O0gNbO8lYS68uMYQ4+8a9kro50wnmTbVS1HLSG8htum3089FLDgjJW BWQQ+USrd72zvY47rCrdgiYOxV+MEXFU9ElCMUN0FvDM0ScnToR4FbKpr5kfAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUl6YgHluVmjec+bsPPWWY5gMXrj8wHwYDVR0j BBgwFoAUQs+K+VAVAiTye2d/ShrUujBqYQ8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNEdwdmRBSjFRSzlXZFM1TXd0V205WWpDS1BtUW1uNWl5TTd1endEY25G dUwvMC80MkNGOEFGOTUwMTUwMjI0RjI3QjY3N0Y0QTFBRDRCQTMwNkE2MTBGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQyQ0Y4QUY5NTAxNTAyMjRG MjdCNjc3RjRBMUFENEJBMzA2QTYxMEYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NEdwdmRBSjFRSzlXZFM1TXd0V205WWpDS1BtUW1uNWl5TTd1endEY25GdUwvMC80 MkNGOEFGOTUwMTUwMjI0RjI3QjY3N0Y0QTFBRDRCQTMwNkE2MTBGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAv3qwpdClMj4mgTBH9eL8Y0BbzvawfO8UglmCBSFlRX+s6vkWCvLtguFmiM0b HTMNNQRtYjdFQKdUT5MeD8L/U/t9I/7aK7S6Np4NURQDdM7zGauwE3SziP0prj/O 12l5rfi/xUzYlAU4RSDJg7Jn9Gpc+gmOK/hb0Z7SODDlFOQ7HgtPyIv30dThLY+s wTrj26zYMQ56cGQNJ4+zcuIwZvx1GiLU0yOeeETDkmZWElwUsDkZQpeHXOr4nRrN NNhrllSAQoHvqHKdeAUMJDcSXMeh388bl/uv/v7SdT/kMgNPv+g/B61MfffTtRUG RAdqoTqcDNEvOdTPpPKuPVluXQ== -----END CERTIFICATE-----Generated at Fri Apr 17 23:27:33 2026 by rpki-client