$ rpki-client -vvf rpki-repo.registro.br/repo/6c1NPPUnc4C5JpXw4j6N6M16BHFdDmD1soH7TniCgZbz/0/D9B9AF3648E9F74A03FCE49A2C7E187F340B54DC.mft File: D9B9AF3648E9F74A03FCE49A2C7E187F340B54DC.mft (raw, json) Hash identifier: 9P5vl9ktNMfGJ35QbK8ucDdTX3wI1OKHylPjBmfURUc= Subject key identifier: D3:13:29:74:08:66:D7:A0:C7:C7:F3:FE:01:52:42:15:81:7F:91:22 Authority key identifier: D9:B9:AF:36:48:E9:F7:4A:03:FC:E4:9A:2C:7E:18:7F:34:0B:54:DC Certificate issuer: /CN=D9B9AF3648E9F74A03FCE49A2C7E187F340B54DC Certificate serial: 2C5815594CD87B0247B23981E802D9E58DACF63D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9B9AF3648E9F74A03FCE49A2C7E187F340B54DC.cer Subject info access: rsync://rpki-repo.registro.br/repo/6c1NPPUnc4C5JpXw4j6N6M16BHFdDmD1soH7TniCgZbz/0/D9B9AF3648E9F74A03FCE49A2C7E187F340B54DC.mft Manifest number: 29 Signing time: Fri 17 Apr 2026 06:38:53 +0000 Manifest this update: Fri 17 Apr 2026 06:33:53 +0000 Manifest next update: Sat 18 Apr 2026 07:33:53 +0000 Files and hashes: 1: 3138362e3233352e3234302e302f32312d3332203d3e20323633313033.roa (hash: bQOz3WgIDv4OPTt7+prrnkPzxtho3i94XKKAj6p4PKo=) 2: D9B9AF3648E9F74A03FCE49A2C7E187F340B54DC.crl (hash: 8bWUR1BdSktfvpn/7uFLf9B6xVIAtNaJ3dHZgfY5Fv0=) 3: 323830343a346332343a3a2f33322d313238203d3e20323633313033.roa (hash: GwvUoUTa+FXCDAdTtppakkhIDxUWTlh1oJ5X+mBWI1Y=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/6c1NPPUnc4C5JpXw4j6N6M16BHFdDmD1soH7TniCgZbz/0/D9B9AF3648E9F74A03FCE49A2C7E187F340B54DC.crl rsync://rpki-repo.registro.br/repo/6c1NPPUnc4C5JpXw4j6N6M16BHFdDmD1soH7TniCgZbz/0/D9B9AF3648E9F74A03FCE49A2C7E187F340B54DC.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9B9AF3648E9F74A03FCE49A2C7E187F340B54DC.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Apr 2026 07:33:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:58:15:59:4c:d8:7b:02:47:b2:39:81:e8:02:d9:e5:8d:ac:f6:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D9B9AF3648E9F74A03FCE49A2C7E187F340B54DC Validity Not Before: Apr 17 06:33:53 2026 GMT Not After : Apr 18 07:33:53 2026 GMT Subject: CN=D31329740866D7A0C7C7F3FE01524215817F9122 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:63:1c:43:5f:88:a8:dc:ce:f0:58:6e:7f:11: ac:af:56:40:fb:68:f5:5a:b1:dc:3e:9c:3b:05:57: 69:8c:06:6c:9c:48:9f:77:f0:81:35:94:df:30:ae: 92:09:f6:2a:f1:ea:5d:af:82:03:a9:5e:cc:3b:d2: 72:89:e7:ed:46:49:64:f5:c9:c2:a5:b5:de:69:15: 21:70:bb:88:c1:d3:f0:ce:82:3e:c0:a3:ad:6a:1c: b7:47:46:d2:8c:7f:8f:c7:fe:bc:d9:aa:d0:1f:02: 26:35:4b:b4:aa:cf:b9:8e:a6:53:d7:15:80:a2:66: 73:f4:75:8b:16:4b:be:b0:90:13:85:76:6d:55:d7: 67:ac:3e:bd:76:61:db:d0:a7:99:9d:45:0e:19:8f: fa:22:ff:3a:91:0b:03:57:1f:5d:69:0e:fe:e7:65: b0:40:39:e6:bd:bd:fe:f1:0a:ce:fc:08:d3:ae:6f: 97:00:94:89:6c:93:92:15:a1:1e:a7:cd:44:55:e4: 10:45:fb:34:7f:61:6e:19:a7:f6:56:70:3b:21:da: d2:c2:14:b9:b9:f6:b3:26:cf:a2:e4:51:f5:2b:2b: 0a:4e:2a:c1:91:aa:f1:c9:e7:a6:52:48:1a:53:2e: 75:02:67:5d:4c:15:5f:ef:e2:f3:5e:c2:41:5a:79: 09:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:13:29:74:08:66:D7:A0:C7:C7:F3:FE:01:52:42:15:81:7F:91:22 X509v3 Authority Key Identifier: keyid:D9:B9:AF:36:48:E9:F7:4A:03:FC:E4:9A:2C:7E:18:7F:34:0B:54:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/6c1NPPUnc4C5JpXw4j6N6M16BHFdDmD1soH7TniCgZbz/0/D9B9AF3648E9F74A03FCE49A2C7E187F340B54DC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9B9AF3648E9F74A03FCE49A2C7E187F340B54DC.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/6c1NPPUnc4C5JpXw4j6N6M16BHFdDmD1soH7TniCgZbz/0/D9B9AF3648E9F74A03FCE49A2C7E187F340B54DC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:d4:f1:28:07:c0:bf:ce:39:f8:1f:f9:93:57:58:3e:ca:fa: 87:21:f5:cb:27:90:bb:2e:02:32:07:66:de:fb:a9:d8:82:37: f3:87:95:29:1b:36:fb:6c:3e:6d:c0:54:cb:fc:4f:21:40:50: bc:88:c8:22:1c:b0:e9:e1:99:ab:ef:fb:57:6d:6d:00:3e:97: 2c:9e:fb:c6:0b:17:48:8b:15:00:49:09:fe:a2:95:c6:11:30: 97:d4:c6:db:cf:62:d6:94:d7:90:5d:3c:fe:87:16:8c:56:c7: 3b:ea:5d:4f:05:f4:fb:95:cf:38:88:6d:5b:91:b1:81:09:59: 5b:88:39:d4:c0:30:8d:24:b3:25:d2:d3:d0:de:d0:ca:29:4f: 2f:ef:81:aa:b4:92:3e:a2:90:9b:2f:5f:ce:ab:d6:82:13:9d: 87:ca:92:fc:28:3b:03:cf:96:0f:48:61:ad:14:21:42:fc:a1: 96:d0:0b:0a:ff:7c:f1:73:75:66:8d:8b:ea:61:16:6b:44:05: df:d4:8f:ea:9b:db:c6:8e:e6:52:ce:14:f3:60:ef:cf:a9:06: 43:3a:16:eb:ac:50:b5:60:69:70:9d:14:74:06:fb:17:61:14: 45:3c:a1:65:45:41:0a:b5:65:1a:fc:7e:c6:92:9d:b4:04:ad: 14:09:1c:32 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIULFgVWUzYewJHsjmB6ALZ5Y2s9j0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDlCOUFGMzY0OEU5Rjc0QTAzRkNFNDlBMkM3RTE4N0Yz NDBCNTREQzAeFw0yNjA0MTcwNjMzNTNaFw0yNjA0MTgwNzMzNTNaMDMxMTAvBgNV BAMTKEQzMTMyOTc0MDg2NkQ3QTBDN0M3RjNGRTAxNTI0MjE1ODE3RjkxMjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDYxxDX4io3M7wWG5/EayvVkD7 aPVasdw+nDsFV2mMBmycSJ938IE1lN8wrpIJ9irx6l2vggOpXsw70nKJ5+1GSWT1 ycKltd5pFSFwu4jB0/DOgj7Ao61qHLdHRtKMf4/H/rzZqtAfAiY1S7Sqz7mOplPX FYCiZnP0dYsWS76wkBOFdm1V12esPr12YdvQp5mdRQ4Zj/oi/zqRCwNXH11pDv7n ZbBAOea9vf7xCs78CNOub5cAlIlsk5IVoR6nzURV5BBF+zR/YW4Zp/ZWcDsh2tLC FLm59rMmz6LkUfUrKwpOKsGRqvHJ56ZSSBpTLnUCZ11MFV/v4vNewkFaeQkLAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU0xMpdAhm16DHx/P+AVJCFYF/kSIwHwYDVR0j BBgwFoAU2bmvNkjp90oD/OSaLH4YfzQLVNwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNmMxTlBQVW5jNEM1SnBYdzRqNk42TTE2QkhGZERtRDFzb0g3VG5pQ2da YnovMC9EOUI5QUYzNjQ4RTlGNzRBMDNGQ0U0OUEyQzdFMTg3RjM0MEI1NERDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q5QjlBRjM2NDhFOUY3NEEw M0ZDRTQ5QTJDN0UxODdGMzQwQjU0REMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NmMxTlBQVW5jNEM1SnBYdzRqNk42TTE2QkhGZERtRDFzb0g3VG5pQ2daYnovMC9E OUI5QUYzNjQ4RTlGNzRBMDNGQ0U0OUEyQzdFMTg3RjM0MEI1NERDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQ9TxKAfAv845+B/5k1dYPsr6hyH1yyeQuy4CMgdm3vup2II384eVKRs2+2w+ bcBUy/xPIUBQvIjIIhyw6eGZq+/7V21tAD6XLJ77xgsXSIsVAEkJ/qKVxhEwl9TG 289i1pTXkF08/ocWjFbHO+pdTwX0+5XPOIhtW5GxgQlZW4g51MAwjSSzJdLT0N7Q yilPL++BqrSSPqKQmy9fzqvWghOdh8qS/Cg7A8+WD0hhrRQhQvyhltALCv988XN1 Zo2L6mEWa0QF39SP6pvbxo7mUs4U82Dvz6kGQzoW66xQtWBpcJ0UdAb7F2EURTyh ZUVBCrVlGvx+xpKdtAStFAkcMg== -----END CERTIFICATE-----Generated at Fri Apr 17 19:42:57 2026 by rpki-client