$ rpki-client -vvf rpki-repo.registro.br/repo/4fG8U9KxXMEkk7khtMhaoxTadFjySWBTjrufrZRrcpoi/0/584634180EB596A77025561FEDB707C101DEFEE7.mft File: 584634180EB596A77025561FEDB707C101DEFEE7.mft (raw, json) Hash identifier: KkPZjJvkxFZlSASMh7FNee+qca7hDZLOfkv73NOD6k0= Subject key identifier: EA:AC:89:E8:B8:10:E0:9A:D6:0B:93:F9:B9:57:77:6C:69:F4:05:13 Authority key identifier: 58:46:34:18:0E:B5:96:A7:70:25:56:1F:ED:B7:07:C1:01:DE:FE:E7 Certificate issuer: /CN=584634180EB596A77025561FEDB707C101DEFEE7 Certificate serial: 1D6416290BC0E0140E6F5486FB5884F90CD277A0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/584634180EB596A77025561FEDB707C101DEFEE7.cer Subject info access: rsync://rpki-repo.registro.br/repo/4fG8U9KxXMEkk7khtMhaoxTadFjySWBTjrufrZRrcpoi/0/584634180EB596A77025561FEDB707C101DEFEE7.mft Manifest number: 4C Signing time: Fri 17 Apr 2026 17:52:20 +0000 Manifest this update: Fri 17 Apr 2026 17:47:20 +0000 Manifest next update: Sat 18 Apr 2026 18:15:20 +0000 Files and hashes: 1: 3137372e38342e37382e302f32332d3234203d3e20323734353032.roa (hash: i2geSCKGVPxMtoRCmk1132VGkI8FMIDGWpD1f/6dyGs=) 2: 323830343a393532383a3a2f33322d3438203d3e20323734353032.roa (hash: oso6vO5M8QADTr3hfzbX6oCDwgx2gNilYa4Ej84iDOw=) 3: 584634180EB596A77025561FEDB707C101DEFEE7.crl (hash: CAYGtfD2m1rpnD3kVy8SQY7GQ8pLGJbamAJQOMxR1Bs=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4fG8U9KxXMEkk7khtMhaoxTadFjySWBTjrufrZRrcpoi/0/584634180EB596A77025561FEDB707C101DEFEE7.crl rsync://rpki-repo.registro.br/repo/4fG8U9KxXMEkk7khtMhaoxTadFjySWBTjrufrZRrcpoi/0/584634180EB596A77025561FEDB707C101DEFEE7.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/584634180EB596A77025561FEDB707C101DEFEE7.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Apr 2026 18:15:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:64:16:29:0b:c0:e0:14:0e:6f:54:86:fb:58:84:f9:0c:d2:77:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=584634180EB596A77025561FEDB707C101DEFEE7 Validity Not Before: Apr 17 17:47:20 2026 GMT Not After : Apr 18 18:15:20 2026 GMT Subject: CN=EAAC89E8B810E09AD60B93F9B957776C69F40513 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:f8:12:49:71:23:c2:a5:27:f6:00:f5:97:5f: d5:e6:0f:b0:5c:8e:9c:62:90:c7:e7:9a:ad:b9:94: 42:da:70:f5:5f:43:0e:62:98:cb:f3:32:3b:c7:6a: 1e:01:03:86:6a:03:71:ce:c9:4c:9a:18:79:00:43: 30:ce:e1:33:da:9f:d8:37:24:84:f2:b7:65:19:08: d4:5d:e9:43:d7:2c:f2:af:33:6b:f1:f5:f3:a3:29: 3d:69:66:82:fd:61:67:d3:14:0d:6f:d7:91:ba:32: 24:95:01:11:53:83:9f:14:72:c7:5a:9a:c5:2f:7f: eb:14:3b:0e:06:3e:5e:40:47:84:1c:12:3d:9c:c5: 74:98:77:44:8a:aa:fa:ac:c9:88:49:23:5c:44:c1: a2:c9:1f:4e:75:67:db:d6:d7:01:fb:cd:1f:70:2c: 7e:fd:05:55:d8:ab:3f:68:a1:90:a7:81:8f:08:8b: b8:3c:59:06:ff:fe:1f:e1:81:78:fb:c4:81:16:2a: 13:74:4f:d4:d8:f2:f5:ae:23:63:db:65:55:57:ac: 60:b1:c3:45:95:15:87:cf:42:b8:9e:ea:9c:5d:be: ab:96:62:b2:2a:a5:c5:47:12:e9:c9:cf:e7:5e:47: 61:8f:02:6b:d5:e0:a0:74:2d:7f:41:87:a9:54:5c: 0e:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:AC:89:E8:B8:10:E0:9A:D6:0B:93:F9:B9:57:77:6C:69:F4:05:13 X509v3 Authority Key Identifier: keyid:58:46:34:18:0E:B5:96:A7:70:25:56:1F:ED:B7:07:C1:01:DE:FE:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4fG8U9KxXMEkk7khtMhaoxTadFjySWBTjrufrZRrcpoi/0/584634180EB596A77025561FEDB707C101DEFEE7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/584634180EB596A77025561FEDB707C101DEFEE7.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4fG8U9KxXMEkk7khtMhaoxTadFjySWBTjrufrZRrcpoi/0/584634180EB596A77025561FEDB707C101DEFEE7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:33:b7:0c:c1:7f:76:e4:75:11:45:e2:35:6b:65:fa:0c:7a: 72:17:50:f3:8b:30:0c:24:8f:26:40:43:e3:3d:92:4e:4c:ef: 4b:33:13:95:04:62:b9:94:7f:8d:3b:dc:57:07:8e:84:73:a8: 98:85:dc:bf:19:16:fb:b0:93:ab:8d:19:af:f4:a1:1d:87:81: b2:94:53:ce:c4:84:5a:b3:e2:6f:71:3d:57:37:3a:8d:cb:50: dd:a2:a1:d9:f7:e9:1c:e4:7c:a1:fa:dc:11:5b:e5:8d:48:e5: 32:a5:06:ad:59:9f:fe:d3:57:cd:cc:60:93:bf:8a:07:c7:61: 0f:7a:da:22:2f:a8:53:f1:1a:51:99:b3:11:1d:0b:d5:7c:3c: 05:24:16:5e:fb:c1:45:f7:f1:7c:f0:02:50:99:31:de:c0:77: 8a:0e:79:df:9d:52:bf:fc:57:fa:84:c9:32:75:67:90:8d:d4: 3a:b1:0c:fa:9c:9b:0b:ef:30:a8:7e:91:a7:41:09:f1:bb:18: 81:21:be:86:e6:57:ef:05:e9:bc:af:bd:c2:68:3c:56:81:7b: ed:b3:72:3c:40:93:1a:18:5d:83:70:98:d4:6c:e9:62:82:12: ae:44:89:ce:d5:b2:91:46:7e:32:29:86:4a:81:d5:64:da:01: e6:db:f1:9a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUHWQWKQvA4BQOb1SG+1iE+QzSd6AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTg0NjM0MTgwRUI1OTZBNzcwMjU1NjFGRURCNzA3QzEw MURFRkVFNzAeFw0yNjA0MTcxNzQ3MjBaFw0yNjA0MTgxODE1MjBaMDMxMTAvBgNV BAMTKEVBQUM4OUU4QjgxMEUwOUFENjBCOTNGOUI5NTc3NzZDNjlGNDA1MTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk+BJJcSPCpSf2APWXX9XmD7Bc jpxikMfnmq25lELacPVfQw5imMvzMjvHah4BA4ZqA3HOyUyaGHkAQzDO4TPan9g3 JITyt2UZCNRd6UPXLPKvM2vx9fOjKT1pZoL9YWfTFA1v15G6MiSVARFTg58Ucsda msUvf+sUOw4GPl5AR4QcEj2cxXSYd0SKqvqsyYhJI1xEwaLJH051Z9vW1wH7zR9w LH79BVXYqz9ooZCngY8Ii7g8WQb//h/hgXj7xIEWKhN0T9TY8vWuI2PbZVVXrGCx w0WVFYfPQrie6pxdvquWYrIqpcVHEunJz+deR2GPAmvV4KB0LX9Bh6lUXA69AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU6qyJ6LgQ4JrWC5P5uVd3bGn0BRMwHwYDVR0j BBgwFoAUWEY0GA61lqdwJVYf7bcHwQHe/ucwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNGZHOFU5S3hYTUVrazdraHRNaGFveFRhZEZqeVNXQlRqcnVmclpScmNw b2kvMC81ODQ2MzQxODBFQjU5NkE3NzAyNTU2MUZFREI3MDdDMTAxREVGRUU3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU4NDYzNDE4MEVCNTk2QTc3 MDI1NTYxRkVEQjcwN0MxMDFERUZFRTcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NGZHOFU5S3hYTUVrazdraHRNaGFveFRhZEZqeVNXQlRqcnVmclpScmNwb2kvMC81 ODQ2MzQxODBFQjU5NkE3NzAyNTU2MUZFREI3MDdDMTAxREVGRUU3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKjO3DMF/duR1EUXiNWtl+gx6chdQ84swDCSPJkBD4z2STkzvSzMTlQRiuZR/ jTvcVweOhHOomIXcvxkW+7CTq40Zr/ShHYeBspRTzsSEWrPib3E9Vzc6jctQ3aKh 2ffpHOR8ofrcEVvljUjlMqUGrVmf/tNXzcxgk7+KB8dhD3raIi+oU/EaUZmzER0L 1Xw8BSQWXvvBRffxfPACUJkx3sB3ig55351Sv/xX+oTJMnVnkI3UOrEM+pybC+8w qH6Rp0EJ8bsYgSG+huZX7wXpvK+9wmg8VoF77bNyPECTGhhdg3CY1GzpYoISrkSJ ztWykUZ+MimGSoHVZNoB5tvxmg== -----END CERTIFICATE-----Generated at Fri Apr 17 21:10:11 2026 by rpki-client