$ rpki-client -vvf rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.mft File: 8BAE9C90EBC5082F802055EFAA6360C661BF85CE.mft (raw, json) Hash identifier: RB1BQODhDhi1kO5DUTi8ltLhobNwYOIW7bYPLV41A/Q= Subject key identifier: 22:FD:4A:71:51:D0:72:34:A6:30:6B:B5:40:75:0E:62:C3:D0:D4:86 Authority key identifier: 8B:AE:9C:90:EB:C5:08:2F:80:20:55:EF:AA:63:60:C6:61:BF:85:CE Certificate issuer: /CN=8BAE9C90EBC5082F802055EFAA6360C661BF85CE Certificate serial: 1DFE2F3EC0012A95531D318B5EF05F0A4FE6FFD5 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.cer Subject info access: rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.mft Manifest number: 03AA Signing time: Sat 18 Apr 2026 00:44:00 +0000 Manifest this update: Sat 18 Apr 2026 00:39:00 +0000 Manifest next update: Sun 19 Apr 2026 03:27:00 +0000 Files and hashes: 1: 3133382e3138352e3233362e302f32322d3234203d3e20323633393139.roa (hash: KYkcxrUCG5d2OgDxXVUc4Ip1FNkjOzjKHcyZw6KqQbM=) 2: 3137302e302e3230382e302f32322d3234203d3e20323633393139.roa (hash: e4E3vMJmvzuFUBj3Gl3MPDMXsuyK/NWYw9KKWpE7NIU=) 3: 8BAE9C90EBC5082F802055EFAA6360C661BF85CE.crl (hash: em7cwf5/rypADtPY6RhBQ5P6RtZBXGr/zF8BPO7T8RE=) 4: 323830343a323762633a3a2f33322d3438203d3e20323633393139.roa (hash: w/YO1KIf4eo5zvFM926/mpG6uypq9a8w/nPaoqyoSig=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.crl rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 19 Apr 2026 03:27:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:fe:2f:3e:c0:01:2a:95:53:1d:31:8b:5e:f0:5f:0a:4f:e6:ff:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BAE9C90EBC5082F802055EFAA6360C661BF85CE Validity Not Before: Apr 18 00:39:00 2026 GMT Not After : Apr 19 03:27:00 2026 GMT Subject: CN=22FD4A7151D07234A6306BB540750E62C3D0D486 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:cc:79:ab:07:4c:f3:73:36:fc:81:07:9d:bd: be:6c:d9:7e:7e:fa:05:9d:a3:cb:33:a9:02:da:ef: 6e:21:46:51:2c:1b:61:05:b0:36:44:84:84:19:3a: 64:93:22:77:1b:57:40:79:eb:ef:fd:04:3c:bc:1b: 60:b5:ce:2c:e9:c6:6e:c8:0a:b0:a9:86:1e:c3:e2: b6:36:3b:a2:79:24:a4:51:9a:3f:85:62:30:5b:5c: 0f:da:c9:c6:f6:f7:8a:ac:f1:5a:c8:7d:3f:1a:3f: ef:f4:6f:df:20:eb:bf:5d:b1:66:ae:41:22:fc:cc: 02:f6:fc:2f:ea:1e:77:43:f6:5a:dc:6f:6b:15:28: 76:e4:31:2c:19:95:69:4e:c1:2f:0d:fd:f5:1c:0d: cd:ed:41:6c:b5:36:f8:44:6e:2f:2c:b7:97:a6:d2: 13:55:c6:d2:86:88:cb:db:07:f1:e2:51:8b:bd:e6: 1e:f7:cf:01:5f:92:9b:e5:ab:38:65:f7:ef:b9:96: 7b:c4:a5:71:ac:43:03:ac:b3:79:0f:9d:0f:78:8e: b3:6d:f9:71:21:66:2e:28:07:95:3d:8b:da:4e:a5: 86:7d:21:53:09:62:b2:66:4c:17:34:5c:59:cc:65: 1a:40:da:33:47:be:11:20:88:8a:8d:7a:32:a6:a9: 18:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:FD:4A:71:51:D0:72:34:A6:30:6B:B5:40:75:0E:62:C3:D0:D4:86 X509v3 Authority Key Identifier: keyid:8B:AE:9C:90:EB:C5:08:2F:80:20:55:EF:AA:63:60:C6:61:BF:85:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:f4:94:0c:77:52:2b:c3:16:67:37:c8:04:e0:20:2f:6e:15: 95:61:8d:97:d9:c9:46:bb:84:f7:e9:50:eb:39:04:ac:96:2d: ca:f6:33:8d:0c:6a:a2:5f:ac:5b:2d:43:93:01:82:b7:46:9d: 09:84:4b:53:5f:1f:29:0c:5d:e5:fd:67:cb:cd:67:4e:2d:eb: 08:58:9a:c4:a2:2f:a4:c8:f3:65:0b:a5:54:97:73:a9:0c:d5: 7c:62:19:1f:fc:a0:b6:15:00:d1:84:2a:cf:cf:00:39:ca:38: 9d:20:17:8f:cd:d8:66:e3:5b:f2:7b:64:f5:f3:55:e5:5b:3c: a3:09:6c:3f:35:94:1d:73:8d:7e:ce:cf:11:8e:d1:c1:ba:c1: 80:f1:1a:7f:28:79:01:13:4f:76:b2:82:aa:e3:41:62:af:d1: 1f:f3:00:2a:32:11:88:c4:e4:a4:85:81:58:05:65:13:d4:3d: 18:6a:c7:d8:1f:23:d9:88:34:99:ab:44:e3:4e:89:4f:cf:26: eb:8b:fb:cd:5b:fa:c9:98:62:72:ef:ae:d0:65:fd:77:d9:7f: d7:eb:77:45:bc:e7:57:8b:9e:b1:6a:e4:16:1a:b4:42:76:dc: ff:da:4a:4a:6f:00:15:93:fb:4a:25:71:a9:d8:2b:15:f6:d5: 06:6d:4b:8a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUHf4vPsABKpVTHTGLXvBfCk/m/9UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJBRTlDOTBFQkM1MDgyRjgwMjA1NUVGQUE2MzYwQzY2 MUJGODVDRTAeFw0yNjA0MTgwMDM5MDBaFw0yNjA0MTkwMzI3MDBaMDMxMTAvBgNV BAMTKDIyRkQ0QTcxNTFEMDcyMzRBNjMwNkJCNTQwNzUwRTYyQzNEMEQ0ODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVzHmrB0zzczb8gQedvb5s2X5+ +gWdo8szqQLa724hRlEsG2EFsDZEhIQZOmSTIncbV0B56+/9BDy8G2C1zizpxm7I CrCphh7D4rY2O6J5JKRRmj+FYjBbXA/aycb294qs8VrIfT8aP+/0b98g679dsWau QSL8zAL2/C/qHndD9lrcb2sVKHbkMSwZlWlOwS8N/fUcDc3tQWy1NvhEbi8st5em 0hNVxtKGiMvbB/HiUYu95h73zwFfkpvlqzhl9++5lnvEpXGsQwOss3kPnQ94jrNt +XEhZi4oB5U9i9pOpYZ9IVMJYrJmTBc0XFnMZRpA2jNHvhEgiIqNejKmqRjhAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUIv1KcVHQcjSmMGu1QHUOYsPQ1IYwHwYDVR0j BBgwFoAUi66ckOvFCC+AIFXvqmNgxmG/hc4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNGNHMm9iRVVZZk1LaFdBWDQ1N25GZ3pvVFhZU3RpTEs0RGFFMzRWRFNL ODUvMS84QkFFOUM5MEVCQzUwODJGODAyMDU1RUZBQTYzNjBDNjYxQkY4NUNFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhCQUU5QzkwRUJDNTA4MkY4 MDIwNTVFRkFBNjM2MEM2NjFCRjg1Q0UuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NGNHMm9iRVVZZk1LaFdBWDQ1N25GZ3pvVFhZU3RpTEs0RGFFMzRWRFNLODUvMS84 QkFFOUM5MEVCQzUwODJGODAyMDU1RUZBQTYzNjBDNjYxQkY4NUNFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIvSUDHdSK8MWZzfIBOAgL24VlWGNl9nJRruE9+lQ6zkErJYtyvYzjQxqol+s Wy1DkwGCt0adCYRLU18fKQxd5f1ny81nTi3rCFiaxKIvpMjzZQulVJdzqQzVfGIZ H/ygthUA0YQqz88AOco4nSAXj83YZuNb8ntk9fNV5Vs8owlsPzWUHXONfs7PEY7R wbrBgPEafyh5ARNPdrKCquNBYq/RH/MAKjIRiMTkpIWBWAVlE9Q9GGrH2B8j2Yg0 matE406JT88m64v7zVv6yZhicu+u0GX9d9l/1+t3RbznV4uesWrkFhq0Qnbc/9pK Sm8AFZP7SiVxqdgrFfbVBm1Lig== -----END CERTIFICATE-----Generated at Sat Apr 18 09:34:08 2026 by rpki-client