$ rpki-client -vvf rpki-repo.registro.br/repo/5vfhd2kEoxEivgSho5UnJiYBtXAWBx7ebFY1meZDM1gt/0/CFDE24864395D54B821566D55DFAD56DC2717A4F.mft File: CFDE24864395D54B821566D55DFAD56DC2717A4F.mft (raw, json) Hash identifier: GgEdxq0DwFp9SvPdrGDUxjByAAy68IJSG9NpczG/qk8= Subject key identifier: E6:A8:AF:24:BA:B6:BC:9F:B0:E7:35:76:5A:B1:8B:FD:C5:90:09:5A Authority key identifier: CF:DE:24:86:43:95:D5:4B:82:15:66:D5:5D:FA:D5:6D:C2:71:7A:4F Certificate issuer: /CN=CFDE24864395D54B821566D55DFAD56DC2717A4F Certificate serial: 71B1E094E73EF7E68BF3854F72EB0850743B2347 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFDE24864395D54B821566D55DFAD56DC2717A4F.cer Subject info access: rsync://rpki-repo.registro.br/repo/5vfhd2kEoxEivgSho5UnJiYBtXAWBx7ebFY1meZDM1gt/0/CFDE24864395D54B821566D55DFAD56DC2717A4F.mft Manifest number: A2 Signing time: Fri 17 Apr 2026 10:03:52 +0000 Manifest this update: Fri 17 Apr 2026 09:58:52 +0000 Manifest next update: Sat 18 Apr 2026 13:11:52 +0000 Files and hashes: 1: 323830343a383961633a3a2f33332d3333203d3e20323733363139.roa (hash: eySNpXWtJeR5WEHH6D9gUUrO/py+gmj0uFyjGnCwR4k=) 2: 323830343a383961633a383030303a3a2f33342d3334203d3e20323733363139.roa (hash: sCs5I/xxKnSn71/ptroWwjucZGA918ogCEIyQMRWm40=) 3: CFDE24864395D54B821566D55DFAD56DC2717A4F.crl (hash: MCPhLujLKBI13U6+pw6yMuzxU5hwCiFJtSSHAV6FJ+Q=) 4: 323830343a383961633a3a2f33322d3332203d3e20323733363139.roa (hash: 6YR6ZiSGc7CxTkzhcIGVaCU+A/kiB1EQ85pD9gUP53k=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5vfhd2kEoxEivgSho5UnJiYBtXAWBx7ebFY1meZDM1gt/0/CFDE24864395D54B821566D55DFAD56DC2717A4F.crl rsync://rpki-repo.registro.br/repo/5vfhd2kEoxEivgSho5UnJiYBtXAWBx7ebFY1meZDM1gt/0/CFDE24864395D54B821566D55DFAD56DC2717A4F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFDE24864395D54B821566D55DFAD56DC2717A4F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Apr 2026 13:11:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:b1:e0:94:e7:3e:f7:e6:8b:f3:85:4f:72:eb:08:50:74:3b:23:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFDE24864395D54B821566D55DFAD56DC2717A4F Validity Not Before: Apr 17 09:58:52 2026 GMT Not After : Apr 18 13:11:52 2026 GMT Subject: CN=E6A8AF24BAB6BC9FB0E735765AB18BFDC590095A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:42:c4:9b:48:d8:5d:b0:63:28:18:9a:1f:a0: 21:02:10:8e:7f:f9:53:13:45:62:a9:73:6d:73:82: f2:d3:1a:06:6d:95:f0:71:e1:72:da:c0:84:15:89: b1:66:ee:e7:be:34:eb:75:a8:1c:8f:c4:ec:26:65: 06:38:7b:cf:ae:6f:cb:10:9f:1f:32:7c:59:54:5f: b8:0f:df:01:a1:50:5b:75:72:ea:35:82:61:6f:57: 9f:9a:c2:3b:4c:f6:1c:34:25:aa:db:32:78:d6:44: 4c:d2:a3:d9:b6:19:7c:26:72:65:6b:ae:ae:7f:df: 63:e3:cb:bc:99:c6:66:b5:fe:f3:88:e3:59:b3:65: 8f:5b:22:1c:69:b7:0d:00:75:f5:63:75:95:8b:aa: 99:d1:dc:4f:2f:2c:83:7f:3d:75:a1:20:50:af:d1: 8b:03:91:98:ec:de:ad:9c:f5:fc:f0:e6:42:b5:8c: 52:a0:c6:c9:27:5b:6b:dd:80:4d:ed:f0:74:0f:2d: a1:89:e6:6e:8c:c4:68:6b:b5:39:10:a6:c0:0f:16: 28:8b:13:63:13:11:5b:98:cb:cc:58:bb:8f:74:23: 6e:cf:e8:d7:12:b0:82:a5:9b:89:5e:8d:cc:c3:13: 58:76:47:02:c8:42:79:44:bf:c6:20:09:5e:48:16: 41:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:A8:AF:24:BA:B6:BC:9F:B0:E7:35:76:5A:B1:8B:FD:C5:90:09:5A X509v3 Authority Key Identifier: keyid:CF:DE:24:86:43:95:D5:4B:82:15:66:D5:5D:FA:D5:6D:C2:71:7A:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5vfhd2kEoxEivgSho5UnJiYBtXAWBx7ebFY1meZDM1gt/0/CFDE24864395D54B821566D55DFAD56DC2717A4F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFDE24864395D54B821566D55DFAD56DC2717A4F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5vfhd2kEoxEivgSho5UnJiYBtXAWBx7ebFY1meZDM1gt/0/CFDE24864395D54B821566D55DFAD56DC2717A4F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:90:a8:8a:76:1a:08:30:af:2a:37:8e:eb:ec:2a:d2:a6:8f: 69:87:73:cb:80:fd:3a:0f:82:a1:ec:04:c6:bc:ed:a3:dc:d1: 9a:49:71:88:1d:0c:73:39:c2:3a:7a:31:ce:f6:ed:c8:f0:20: 4e:3d:86:31:f8:5d:6e:49:0d:41:7e:6e:3d:86:bf:6d:e8:aa: 08:9a:ef:ad:d8:98:31:33:54:aa:1e:5f:07:2c:ac:1e:f6:ee: c6:38:16:dc:26:2a:ba:b1:5e:da:ed:6a:fd:62:7a:29:88:b2: ef:dc:6a:bb:7f:b6:1f:7f:50:02:ff:06:de:ff:d6:56:a1:a4: 8b:0c:01:80:c4:64:de:5f:ff:90:db:5a:df:ac:4e:c7:ee:58: 3b:dc:0c:e6:20:59:5e:e7:a8:a6:e0:0f:25:1e:99:b4:6c:75: ff:d0:93:1c:3d:42:8b:be:c0:0c:4f:9e:43:da:ef:5a:a9:88: cf:fb:2f:ee:cf:9a:12:6a:5c:af:15:ba:f2:56:d8:ea:66:ea: a9:5f:e4:16:ee:4a:4d:d4:08:f2:79:71:c9:b8:68:59:5e:9a: 08:22:43:e6:fe:4e:2f:71:f6:e7:09:ba:2e:d2:cc:af:6f:48: 9c:66:aa:b6:30:80:6f:34:0f:d0:e9:02:d3:3d:1e:c5:f0:74: 0c:00:a1:40 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUcbHglOc+9+aL84VPcusIUHQ7I0cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZERTI0ODY0Mzk1RDU0QjgyMTU2NkQ1NURGQUQ1NkRD MjcxN0E0RjAeFw0yNjA0MTcwOTU4NTJaFw0yNjA0MTgxMzExNTJaMDMxMTAvBgNV BAMTKEU2QThBRjI0QkFCNkJDOUZCMEU3MzU3NjVBQjE4QkZEQzU5MDA5NUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAQsSbSNhdsGMoGJofoCECEI5/ +VMTRWKpc21zgvLTGgZtlfBx4XLawIQVibFm7ue+NOt1qByPxOwmZQY4e8+ub8sQ nx8yfFlUX7gP3wGhUFt1cuo1gmFvV5+awjtM9hw0JarbMnjWREzSo9m2GXwmcmVr rq5/32Pjy7yZxma1/vOI41mzZY9bIhxptw0AdfVjdZWLqpnR3E8vLIN/PXWhIFCv 0YsDkZjs3q2c9fzw5kK1jFKgxsknW2vdgE3t8HQPLaGJ5m6MxGhrtTkQpsAPFiiL E2MTEVuYy8xYu490I27P6NcSsIKlm4lejczDE1h2RwLIQnlEv8YgCV5IFkFRAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU5qivJLq2vJ+w5zV2WrGL/cWQCVowHwYDVR0j BBgwFoAUz94khkOV1UuCFWbVXfrVbcJxek8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNXZmaGQya0VveEVpdmdTaG81VW5KaVlCdFhBV0J4N2ViRlkxbWVaRE0x Z3QvMC9DRkRFMjQ4NjQzOTVENTRCODIxNTY2RDU1REZBRDU2REMyNzE3QTRGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NGREUyNDg2NDM5NUQ1NEI4 MjE1NjZENTVERkFENTZEQzI3MTdBNEYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NXZmaGQya0VveEVpdmdTaG81VW5KaVlCdFhBV0J4N2ViRlkxbWVaRE0xZ3QvMC9D RkRFMjQ4NjQzOTVENTRCODIxNTY2RDU1REZBRDU2REMyNzE3QTRGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjJCoinYaCDCvKjeO6+wq0qaPaYdzy4D9Og+CoewExrzto9zRmklxiB0McznC OnoxzvbtyPAgTj2GMfhdbkkNQX5uPYa/beiqCJrvrdiYMTNUqh5fByysHvbuxjgW 3CYqurFe2u1q/WJ6KYiy79xqu3+2H39QAv8G3v/WVqGkiwwBgMRk3l//kNta36xO x+5YO9wM5iBZXueopuAPJR6ZtGx1/9CTHD1Ci77ADE+eQ9rvWqmIz/sv7s+aEmpc rxW68lbY6mbqqV/kFu5KTdQI8nlxybhoWV6aCCJD5v5OL3H25wm6LtLMr29InGaq tjCAbzQP0OkC0z0exfB0DAChQA== -----END CERTIFICATE-----Generated at Fri Apr 17 21:10:20 2026 by rpki-client