$ rpki-client -vvf rpki-repo.registro.br/repo/4wH1jH7pbrki5Xc8poo2Yxakzma5rdPPtz7LawS1abL4/0/CDD7619BD4F71987C247C8670D9064F291B3E36F.mft File: CDD7619BD4F71987C247C8670D9064F291B3E36F.mft (raw, json) Hash identifier: driVhNFBmDGdLzbMSOiaxyTcjuVOe/WzEXg88k0L5vA= Subject key identifier: 5A:9E:B9:13:17:19:4E:1F:F0:51:25:CD:51:A5:19:0D:5D:05:2A:3F Authority key identifier: CD:D7:61:9B:D4:F7:19:87:C2:47:C8:67:0D:90:64:F2:91:B3:E3:6F Certificate issuer: /CN=CDD7619BD4F71987C247C8670D9064F291B3E36F Certificate serial: 1414C2C8F907D20DF5E52D9DDEEA026DEA00AB3F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDD7619BD4F71987C247C8670D9064F291B3E36F.cer Subject info access: rsync://rpki-repo.registro.br/repo/4wH1jH7pbrki5Xc8poo2Yxakzma5rdPPtz7LawS1abL4/0/CDD7619BD4F71987C247C8670D9064F291B3E36F.mft Manifest number: 0132 Signing time: Fri 17 Apr 2026 12:43:22 +0000 Manifest this update: Fri 17 Apr 2026 12:38:22 +0000 Manifest next update: Sat 18 Apr 2026 13:36:22 +0000 Files and hashes: 1: 323830343a393537633a3a2f33332d3333203d3e20323734353138.roa (hash: PF5brDyVR1cmEjB6iFotsFSX3QnhYTrcdVyGy4WP2OY=) 2: 323830343a393537633a3a2f33322d3332203d3e20323734353138.roa (hash: g+bfErnC5Q3MshvfTRGFVmz3DrgAhMm+FVSXUSNdGrU=) 3: 323830343a393537633a383030303a3a2f33342d3334203d3e20323734353138.roa (hash: mKtBkzh6XG4sTlhoPWFLc5Pd7DgaZ6VR/rArRM9AyYs=) 4: 34352e362e3131392e302f32342d3234203d3e20323734353138.roa (hash: u49m43X6DK4A6wPfWeHoDfOnrEotXCa0jx043Jsqo6Y=) 5: 323830343a393537633a383030303a3a2f33332d3333203d3e20323734353138.roa (hash: 36hHf/D4ukU8mAlHpeyW/xW6TzW1Wdrh0++mjKsFN7A=) 6: 323830343a393537633a633030303a3a2f33342d3334203d3e20323734353138.roa (hash: TVfyxkvcDydRQKBsatQmjUgY75O6YdchTD42+Bc59u4=) 7: CDD7619BD4F71987C247C8670D9064F291B3E36F.crl (hash: y3lInvCgU0KYkgYPiy9EG7TvcTLHVdatu1JEg0AypDM=) 8: 323830343a393537633a3a2f33342d3334203d3e20323734353138.roa (hash: Wc2TzbM6iSZdak9WvaJANTvB62PhLpJCW7LSAbW5tsA=) 9: 323830343a393537633a343030303a3a2f33342d3334203d3e20323734353138.roa (hash: L5n4ex8pE5gfPKDduuMFd0GMuURcKIBeSu7tDIDGTFY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4wH1jH7pbrki5Xc8poo2Yxakzma5rdPPtz7LawS1abL4/0/CDD7619BD4F71987C247C8670D9064F291B3E36F.crl rsync://rpki-repo.registro.br/repo/4wH1jH7pbrki5Xc8poo2Yxakzma5rdPPtz7LawS1abL4/0/CDD7619BD4F71987C247C8670D9064F291B3E36F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDD7619BD4F71987C247C8670D9064F291B3E36F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Apr 2026 13:36:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:14:c2:c8:f9:07:d2:0d:f5:e5:2d:9d:de:ea:02:6d:ea:00:ab:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDD7619BD4F71987C247C8670D9064F291B3E36F Validity Not Before: Apr 17 12:38:22 2026 GMT Not After : Apr 18 13:36:22 2026 GMT Subject: CN=5A9EB91317194E1FF05125CD51A5190D5D052A3F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:3e:e7:5a:c4:75:ac:f9:79:cd:31:88:f4:1d: ea:2b:53:74:f7:af:99:f4:eb:ce:80:fe:c0:22:94: 2a:a2:82:c7:b9:26:dd:28:ff:22:55:24:30:56:91: 1e:06:33:f8:60:c9:47:a8:d9:c6:b0:14:ac:84:6f: d8:f1:a6:ba:eb:80:40:dc:e0:5b:dc:09:27:eb:a1: 2d:9b:6b:a9:67:8a:b2:95:6a:43:f8:a5:fb:e0:d0: a2:38:ce:c9:61:b7:fc:f4:36:f5:22:2f:a6:fa:6a: d9:18:d8:a4:8b:f0:b3:88:53:43:a1:96:50:b3:a9: c7:21:30:68:a7:df:60:20:54:62:c4:9d:6a:4e:8d: 68:d5:8c:0a:ef:36:53:a6:1b:40:44:9f:80:02:a8: 92:b4:50:c2:f9:56:9b:d6:85:d9:d9:21:19:68:c4: 5c:a0:92:4d:80:67:f2:e7:eb:f2:3f:46:a3:10:cb: db:a7:24:cf:3f:71:45:71:af:2f:78:51:28:b0:d9: 01:42:1e:a7:6c:52:33:8e:5a:6b:f8:34:e9:e0:55: be:d7:9d:8b:1f:bd:03:53:07:21:31:2c:55:cf:af: 9b:f8:68:ee:d4:cf:98:c7:ac:f8:a9:ed:11:d7:7d: c9:8e:ed:fe:af:39:8d:e1:bb:06:1e:28:38:d3:84: c7:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:9E:B9:13:17:19:4E:1F:F0:51:25:CD:51:A5:19:0D:5D:05:2A:3F X509v3 Authority Key Identifier: keyid:CD:D7:61:9B:D4:F7:19:87:C2:47:C8:67:0D:90:64:F2:91:B3:E3:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4wH1jH7pbrki5Xc8poo2Yxakzma5rdPPtz7LawS1abL4/0/CDD7619BD4F71987C247C8670D9064F291B3E36F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDD7619BD4F71987C247C8670D9064F291B3E36F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4wH1jH7pbrki5Xc8poo2Yxakzma5rdPPtz7LawS1abL4/0/CDD7619BD4F71987C247C8670D9064F291B3E36F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:28:34:cb:04:89:0d:77:ac:54:a4:aa:71:30:d3:63:98:56: e5:38:28:4e:ef:f7:1a:87:8d:84:cc:ff:a7:d0:b2:1c:8f:5e: c8:34:fb:fc:03:3d:46:8d:9f:3f:fb:63:4d:3f:b2:9b:18:62: e9:28:70:bf:3c:91:22:ab:4b:bf:a2:b7:20:5b:71:d1:81:17: da:25:51:7a:6c:fa:38:cb:79:f3:30:8b:9a:96:f9:10:c2:41: d6:cd:a0:c6:cc:6c:be:f7:84:9f:54:41:fd:5b:61:c7:35:d5: 87:d1:9b:68:51:35:be:cf:d8:ae:0e:c4:be:67:7f:5b:9c:06: 6b:77:9a:65:84:a3:a3:6e:4f:80:d2:b0:e7:07:0d:d6:f8:7c: b0:f2:f5:a9:3a:96:ff:f5:7c:5c:39:fc:e8:da:3b:fd:cc:53: fb:ad:ed:a9:e5:a3:aa:f8:3f:37:a1:8a:69:19:97:5c:d8:af: d7:25:7d:19:c0:0e:cc:11:9c:38:1e:fa:a3:df:3c:c4:23:da: d3:44:9d:ef:30:a2:b4:fe:a8:33:54:dc:1a:ce:c1:4e:a1:85: 2c:29:bf:2a:02:7d:ec:88:2b:27:9e:d2:6d:8d:b7:39:64:37: 1f:57:39:5d:72:70:c9:c7:8b:3e:1d:91:e3:2a:ad:01:3a:79: 36:54:06:10 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUFBTCyPkH0g315S2d3uoCbeoAqz8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RENzYxOUJENEY3MTk4N0MyNDdDODY3MEQ5MDY0RjI5 MUIzRTM2RjAeFw0yNjA0MTcxMjM4MjJaFw0yNjA0MTgxMzM2MjJaMDMxMTAvBgNV BAMTKDVBOUVCOTEzMTcxOTRFMUZGMDUxMjVDRDUxQTUxOTBENUQwNTJBM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoPudaxHWs+XnNMYj0HeorU3T3 r5n0686A/sAilCqigse5Jt0o/yJVJDBWkR4GM/hgyUeo2cawFKyEb9jxprrrgEDc 4FvcCSfroS2ba6lnirKVakP4pfvg0KI4zslht/z0NvUiL6b6atkY2KSL8LOIU0Oh llCzqcchMGin32AgVGLEnWpOjWjVjArvNlOmG0BEn4ACqJK0UML5VpvWhdnZIRlo xFygkk2AZ/Ln6/I/RqMQy9unJM8/cUVxry94USiw2QFCHqdsUjOOWmv4NOngVb7X nYsfvQNTByExLFXPr5v4aO7Uz5jHrPip7RHXfcmO7f6vOY3huwYeKDjThMf/AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUWp65ExcZTh/wUSXNUaUZDV0FKj8wHwYDVR0j BBgwFoAUzddhm9T3GYfCR8hnDZBk8pGz428wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNHdIMWpIN3BicmtpNVhjOHBvbzJZeGFrem1hNXJkUFB0ejdMYXdTMWFi TDQvMC9DREQ3NjE5QkQ0RjcxOTg3QzI0N0M4NjcwRDkwNjRGMjkxQjNFMzZGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NERDc2MTlCRDRGNzE5ODdD MjQ3Qzg2NzBEOTA2NEYyOTFCM0UzNkYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NHdIMWpIN3BicmtpNVhjOHBvbzJZeGFrem1hNXJkUFB0ejdMYXdTMWFiTDQvMC9D REQ3NjE5QkQ0RjcxOTg3QzI0N0M4NjcwRDkwNjRGMjkxQjNFMzZGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAoCg0ywSJDXesVKSqcTDTY5hW5TgoTu/3GoeNhMz/p9CyHI9eyDT7/AM9Ro2f P/tjTT+ymxhi6ShwvzyRIqtLv6K3IFtx0YEX2iVRemz6OMt58zCLmpb5EMJB1s2g xsxsvveEn1RB/VthxzXVh9GbaFE1vs/Yrg7Evmd/W5wGa3eaZYSjo25PgNKw5wcN 1vh8sPL1qTqW//V8XDn86No7/cxT+63tqeWjqvg/N6GKaRmXXNiv1yV9GcAOzBGc OB76o988xCPa00Sd7zCitP6oM1TcGs7BTqGFLCm/KgJ97IgrJ57SbY23OWQ3H1c5 XXJwyceLPh2R4yqtATp5NlQGEA== -----END CERTIFICATE-----Generated at Fri Apr 17 23:44:03 2026 by rpki-client