$ rpki-client -vvf rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/870F31E28EB6835FE94CC62D908989A74790CB3E.mft File: 870F31E28EB6835FE94CC62D908989A74790CB3E.mft (raw, json) Hash identifier: gyOU+70hreGWY+NNjGREJpvR0BYKu01RJIDZEZDEXA4= Subject key identifier: B3:BF:32:0C:8A:B1:FA:7E:6B:25:C3:AA:DF:E4:A3:48:65:02:18:BD Authority key identifier: 87:0F:31:E2:8E:B6:83:5F:E9:4C:C6:2D:90:89:89:A7:47:90:CB:3E Certificate issuer: /CN=870F31E28EB6835FE94CC62D908989A74790CB3E Certificate serial: 60DDE6FE89861C3BF34B8A6CED81DF5E91616A15 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870F31E28EB6835FE94CC62D908989A74790CB3E.cer Subject info access: rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/870F31E28EB6835FE94CC62D908989A74790CB3E.mft Manifest number: 0300 Signing time: Fri 17 Apr 2026 21:23:01 +0000 Manifest this update: Fri 17 Apr 2026 21:18:01 +0000 Manifest next update: Sat 18 Apr 2026 23:55:01 +0000 Files and hashes: 1: 323830343a316634633a3a2f33322d3333203d3e20323639313735.roa (hash: Wa7Azgvjc34o9tBKeUYE7ALtIlK7RWElexACUg1izXE=) 2: 34352e3138312e39322e302f32322d3234203d3e20323639313735.roa (hash: GiE743EhfSOXHGIBrKqBmOMaTBFSozjDYLmG5toJg4k=) 3: 870F31E28EB6835FE94CC62D908989A74790CB3E.crl (hash: m9jKlb06Nlq+C5Bk37ffu7MLDJkCIXZnFoCjgGeiN4o=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/870F31E28EB6835FE94CC62D908989A74790CB3E.crl rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/870F31E28EB6835FE94CC62D908989A74790CB3E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870F31E28EB6835FE94CC62D908989A74790CB3E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Apr 2026 23:44:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:dd:e6:fe:89:86:1c:3b:f3:4b:8a:6c:ed:81:df:5e:91:61:6a:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=870F31E28EB6835FE94CC62D908989A74790CB3E Validity Not Before: Apr 17 21:18:01 2026 GMT Not After : Apr 18 23:55:01 2026 GMT Subject: CN=B3BF320C8AB1FA7E6B25C3AADFE4A348650218BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ec:c0:20:2d:a2:88:9f:ad:9f:f8:e6:ef:e7: 72:01:b6:d8:31:43:cf:39:00:a6:66:a2:03:be:a2: a6:5f:3c:48:88:91:b5:cd:68:e9:02:f9:35:c6:a0: b2:3b:8a:29:c8:0d:4f:a1:18:d8:2f:54:84:97:06: 90:56:87:60:50:d2:fe:65:7d:b9:d9:d1:10:24:34: e5:df:f0:0a:13:a8:a9:7a:98:47:c4:92:1e:4d:64: 31:27:21:77:e0:ff:6b:cc:e9:1d:0b:e9:cc:44:fe: 24:4a:b0:36:53:31:a3:46:ad:54:c5:40:89:cf:b1: f5:67:d6:26:b9:16:49:c4:ad:74:46:34:e4:1f:78: cd:bd:cd:e4:ba:21:71:7c:37:ad:40:a7:78:f3:b2: 7c:8b:14:8c:05:a5:24:aa:78:8c:62:2b:b4:74:11: c9:df:e5:7f:a5:6f:e0:79:47:b6:5a:4f:7a:0f:de: bd:df:20:c0:39:31:c7:86:3b:cf:af:9a:68:b1:e1: fc:7c:00:d0:01:8f:88:98:e9:02:6a:75:16:cc:90: 62:4c:d9:af:41:4e:7f:5a:83:41:a8:ec:d5:cc:dc: 83:c3:7d:81:e8:c4:bf:1b:49:50:ad:c2:98:14:90: d5:3c:53:4c:23:ac:e5:c7:6b:13:bf:09:fa:f8:26: 8b:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:BF:32:0C:8A:B1:FA:7E:6B:25:C3:AA:DF:E4:A3:48:65:02:18:BD X509v3 Authority Key Identifier: keyid:87:0F:31:E2:8E:B6:83:5F:E9:4C:C6:2D:90:89:89:A7:47:90:CB:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/870F31E28EB6835FE94CC62D908989A74790CB3E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870F31E28EB6835FE94CC62D908989A74790CB3E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/870F31E28EB6835FE94CC62D908989A74790CB3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:5d:e1:7a:25:a6:6a:d0:be:c6:4a:eb:0b:65:90:3d:52:bd: 42:fa:8a:6f:95:f6:9d:60:e8:67:ca:0a:30:0d:7b:3c:b8:f0: d8:1d:3c:1a:46:f4:91:5a:d6:15:60:55:ad:ff:60:ae:25:e6: bd:64:bb:fa:9f:f8:6c:b4:18:bb:0b:42:fc:ee:41:79:e6:9e: b9:27:d7:cd:70:91:c8:58:18:1d:4d:2b:a7:ea:27:87:cc:31: 31:30:07:2b:24:6b:ad:28:4f:78:42:38:ba:e1:0c:76:a0:0d: e9:bc:e5:b0:c6:a9:85:54:2f:b4:19:9e:c4:c9:ce:c8:d4:1f: 2a:be:2e:1a:fe:12:10:81:3f:c3:f3:1d:48:bd:55:01:24:d8: c0:30:ab:96:0a:df:8e:eb:9c:32:1c:88:91:28:29:05:c3:be: f8:7a:33:68:0b:81:0a:91:27:30:f5:62:aa:48:4c:8f:8b:7f: a7:b5:4a:f9:f8:ed:dd:e1:fc:5d:c5:6b:e8:0c:65:95:42:19: 3c:80:33:6e:cd:f0:14:f1:1b:3c:7d:b6:27:4f:37:d5:e1:ba: 01:48:3e:52:8f:8d:7f:ef:53:e8:7f:03:69:61:c5:46:88:0b: 18:97:d4:a4:be:9c:20:0b:4d:fd:be:39:ce:55:a7:0d:88:40: d0:fb:a6:35 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUYN3m/omGHDvzS4ps7YHfXpFhahUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODcwRjMxRTI4RUI2ODM1RkU5NENDNjJEOTA4OTg5QTc0 NzkwQ0IzRTAeFw0yNjA0MTcyMTE4MDFaFw0yNjA0MTgyMzU1MDFaMDMxMTAvBgNV BAMTKEIzQkYzMjBDOEFCMUZBN0U2QjI1QzNBQURGRTRBMzQ4NjUwMjE4QkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn7MAgLaKIn62f+Obv53IBttgx Q885AKZmogO+oqZfPEiIkbXNaOkC+TXGoLI7iinIDU+hGNgvVISXBpBWh2BQ0v5l fbnZ0RAkNOXf8AoTqKl6mEfEkh5NZDEnIXfg/2vM6R0L6cxE/iRKsDZTMaNGrVTF QInPsfVn1ia5FknErXRGNOQfeM29zeS6IXF8N61Ap3jzsnyLFIwFpSSqeIxiK7R0 Ecnf5X+lb+B5R7ZaT3oP3r3fIMA5MceGO8+vmmix4fx8ANABj4iY6QJqdRbMkGJM 2a9BTn9ag0Go7NXM3IPDfYHoxL8bSVCtwpgUkNU8U0wjrOXHaxO/Cfr4Jot7AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUs78yDIqx+n5rJcOq3+SjSGUCGL0wHwYDVR0j BBgwFoAUhw8x4o62g1/pTMYtkImJp0eQyz4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNEd0RVk2MVZ6YlhNM3NTWG50OWNXTEFaZUxLcGI3YkpIOWp0MWt3Wkxq dEgvMC84NzBGMzFFMjhFQjY4MzVGRTk0Q0M2MkQ5MDg5ODlBNzQ3OTBDQjNFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg3MEYzMUUyOEVCNjgzNUZF OTRDQzYyRDkwODk4OUE3NDc5MENCM0UuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NEd0RVk2MVZ6YlhNM3NTWG50OWNXTEFaZUxLcGI3YkpIOWp0MWt3WkxqdEgvMC84 NzBGMzFFMjhFQjY4MzVGRTk0Q0M2MkQ5MDg5ODlBNzQ3OTBDQjNFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWF3heiWmatC+xkrrC2WQPVK9QvqKb5X2nWDoZ8oKMA17PLjw2B08Gkb0kVrW FWBVrf9griXmvWS7+p/4bLQYuwtC/O5BeeaeuSfXzXCRyFgYHU0rp+onh8wxMTAH KyRrrShPeEI4uuEMdqAN6bzlsMaphVQvtBmexMnOyNQfKr4uGv4SEIE/w/MdSL1V ASTYwDCrlgrfjuucMhyIkSgpBcO++HozaAuBCpEnMPViqkhMj4t/p7VK+fjt3eH8 XcVr6AxllUIZPIAzbs3wFPEbPH22J0831eG6AUg+Uo+Nf+9T6H8DaWHFRogLGJfU pL6cIAtN/b45zlWnDYhA0PumNQ== -----END CERTIFICATE-----Generated at Fri Apr 17 23:20:36 2026 by rpki-client