$ rpki-client -vvf rpki-repo.registro.br/repo/6kpcT7mdsbbms6nLucrJDMXoNikb2bEtVm2pUywRgTP8/0/42CDD454B3E8670C26A58056A69FE952D8C533F3.mft File: 42CDD454B3E8670C26A58056A69FE952D8C533F3.mft (raw, json) Hash identifier: 9/egfUYA19gqcD8zfA4teqIKegkFYbkljyvWXBRANk0= Subject key identifier: 58:39:3F:A6:FA:39:F0:49:0A:34:A3:BF:CA:4A:F0:3F:B2:BC:45:4D Authority key identifier: 42:CD:D4:54:B3:E8:67:0C:26:A5:80:56:A6:9F:E9:52:D8:C5:33:F3 Certificate issuer: /CN=42CDD454B3E8670C26A58056A69FE952D8C533F3 Certificate serial: 25EC22E6BA336ED65488EBB61E4AB1C41365793E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42CDD454B3E8670C26A58056A69FE952D8C533F3.cer Subject info access: rsync://rpki-repo.registro.br/repo/6kpcT7mdsbbms6nLucrJDMXoNikb2bEtVm2pUywRgTP8/0/42CDD454B3E8670C26A58056A69FE952D8C533F3.mft Manifest number: D2 Signing time: Fri 17 Apr 2026 17:57:56 +0000 Manifest this update: Fri 17 Apr 2026 17:52:56 +0000 Manifest next update: Sat 18 Apr 2026 18:37:56 +0000 Files and hashes: 1: 323830313a38303a336538303a3a2f34382d313238203d3e20323731363430.roa (hash: mbujdo6DlwAmJYjBhooo5Os0om9AiyEjErzRsPs5DBo=) 2: 42CDD454B3E8670C26A58056A69FE952D8C533F3.crl (hash: sFUily2Ucwrx9H22wijK9/kHUY44iD8CAG0CaMMIC2s=) 3: 3230302e3233352e3132382e302f31372d3332203d3e20323731363430.roa (hash: WZuTtUN09mCdVgOP/CQKKArbd1YguwxIubngi24thqs=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/6kpcT7mdsbbms6nLucrJDMXoNikb2bEtVm2pUywRgTP8/0/42CDD454B3E8670C26A58056A69FE952D8C533F3.crl rsync://rpki-repo.registro.br/repo/6kpcT7mdsbbms6nLucrJDMXoNikb2bEtVm2pUywRgTP8/0/42CDD454B3E8670C26A58056A69FE952D8C533F3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42CDD454B3E8670C26A58056A69FE952D8C533F3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Apr 2026 18:37:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:ec:22:e6:ba:33:6e:d6:54:88:eb:b6:1e:4a:b1:c4:13:65:79:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42CDD454B3E8670C26A58056A69FE952D8C533F3 Validity Not Before: Apr 17 17:52:56 2026 GMT Not After : Apr 18 18:37:56 2026 GMT Subject: CN=58393FA6FA39F0490A34A3BFCA4AF03FB2BC454D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:50:96:fd:80:e2:90:60:60:2c:84:2a:5a:8e: 7a:3b:83:7b:c6:4f:ac:f9:1d:30:34:93:29:a1:a6: ca:77:fa:cd:22:94:d7:c6:fe:d1:09:34:55:12:99: 5d:03:86:6d:ec:dd:11:84:6d:62:0e:c0:8f:db:d7: 14:bf:b2:98:8b:a2:55:a3:7f:34:3a:f2:3d:16:75: 7c:96:15:f3:c7:ba:d6:49:d4:6c:69:09:df:60:ef: c1:e0:2e:87:ca:2d:00:ac:d7:e4:0b:2e:0b:4d:51: 8e:f0:fd:83:2e:55:a6:59:b6:a4:d1:56:96:da:ed: f9:fe:66:19:86:fa:d0:94:54:6e:00:46:da:8e:ab: ef:40:56:fa:c2:9b:ee:1e:2b:39:b0:b7:a6:e8:5c: 0c:41:2c:66:94:61:e0:a0:0d:97:6d:f8:29:58:32: 0f:e0:52:0f:48:7b:63:b5:3c:35:5b:57:af:30:c6: d2:ca:da:d8:e8:c8:84:fa:6d:2a:9b:0a:c4:f3:e4: 15:41:86:6b:b9:5e:7c:01:ee:9d:44:55:a1:d2:53: a1:fc:4f:83:be:31:67:d4:e2:58:0e:4e:d3:d9:01: a2:74:0b:40:eb:8d:19:a6:be:7b:23:f5:8e:3d:4e: fe:17:48:31:8f:9e:d9:78:87:a7:85:25:00:94:eb: 2b:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:39:3F:A6:FA:39:F0:49:0A:34:A3:BF:CA:4A:F0:3F:B2:BC:45:4D X509v3 Authority Key Identifier: keyid:42:CD:D4:54:B3:E8:67:0C:26:A5:80:56:A6:9F:E9:52:D8:C5:33:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/6kpcT7mdsbbms6nLucrJDMXoNikb2bEtVm2pUywRgTP8/0/42CDD454B3E8670C26A58056A69FE952D8C533F3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42CDD454B3E8670C26A58056A69FE952D8C533F3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/6kpcT7mdsbbms6nLucrJDMXoNikb2bEtVm2pUywRgTP8/0/42CDD454B3E8670C26A58056A69FE952D8C533F3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:79:26:62:42:d5:3b:a0:5f:04:82:82:b1:14:ca:c8:48:fc: d3:67:ee:9d:fe:d7:19:c0:ad:50:9a:a0:c9:ea:14:e7:a0:bd: 0b:b0:b1:b7:08:6f:8f:7a:15:f0:42:bc:d2:60:8e:32:83:eb: 09:a6:8e:0f:bc:5c:9d:3d:8f:2b:18:21:94:2d:df:b3:88:57: 0b:19:a0:2c:0d:8e:25:d8:0c:ef:d8:bb:55:28:25:69:a6:4a: 44:0f:b4:9e:e3:e2:0f:bc:ce:60:28:ac:c3:a3:a4:b2:38:4d: 57:7b:67:b7:2c:55:4c:9c:82:fa:94:2a:3c:0a:ba:cd:08:19: d9:25:bc:0c:43:9c:d7:2c:0d:c7:3c:a3:0c:66:5c:1f:53:d7: 00:95:ea:4c:be:65:f8:fe:36:b2:2a:86:90:4a:11:60:79:74: 27:4b:a1:85:17:12:e0:d9:a3:d3:62:25:b6:01:2b:40:24:89: 37:74:55:a5:c3:1b:e2:b1:54:ef:06:e5:46:6b:b9:b9:75:64: 96:82:b9:a9:06:1b:ba:79:da:39:9a:71:dc:63:7b:9d:1e:ed: 96:0e:8f:e9:23:43:65:2f:ab:a7:60:aa:d7:d0:de:54:84:7c: c5:6a:51:ef:3f:ec:bf:79:a9:fa:ad:07:fc:d5:7a:79:f2:70: 50:09:6e:d3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUJewi5rozbtZUiOu2HkqxxBNleT4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDJDREQ0NTRCM0U4NjcwQzI2QTU4MDU2QTY5RkU5NTJE OEM1MzNGMzAeFw0yNjA0MTcxNzUyNTZaFw0yNjA0MTgxODM3NTZaMDMxMTAvBgNV BAMTKDU4MzkzRkE2RkEzOUYwNDkwQTM0QTNCRkNBNEFGMDNGQjJCQzQ1NEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaUJb9gOKQYGAshCpajno7g3vG T6z5HTA0kymhpsp3+s0ilNfG/tEJNFUSmV0Dhm3s3RGEbWIOwI/b1xS/spiLolWj fzQ68j0WdXyWFfPHutZJ1GxpCd9g78HgLofKLQCs1+QLLgtNUY7w/YMuVaZZtqTR Vpba7fn+ZhmG+tCUVG4ARtqOq+9AVvrCm+4eKzmwt6boXAxBLGaUYeCgDZdt+ClY Mg/gUg9Ie2O1PDVbV68wxtLK2tjoyIT6bSqbCsTz5BVBhmu5XnwB7p1EVaHSU6H8 T4O+MWfU4lgOTtPZAaJ0C0DrjRmmvnsj9Y49Tv4XSDGPntl4h6eFJQCU6yv9AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUWDk/pvo58EkKNKO/ykrwP7K8RU0wHwYDVR0j BBgwFoAUQs3UVLPoZwwmpYBWpp/pUtjFM/MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNmtwY1Q3bWRzYmJtczZuTHVjckpETVhvTmlrYjJiRXRWbTJwVXl3UmdU UDgvMC80MkNERDQ1NEIzRTg2NzBDMjZBNTgwNTZBNjlGRTk1MkQ4QzUzM0YzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQyQ0RENDU0QjNFODY3MEMy NkE1ODA1NkE2OUZFOTUyRDhDNTMzRjMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NmtwY1Q3bWRzYmJtczZuTHVjckpETVhvTmlrYjJiRXRWbTJwVXl3UmdUUDgvMC80 MkNERDQ1NEIzRTg2NzBDMjZBNTgwNTZBNjlGRTk1MkQ4QzUzM0YzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEACHkmYkLVO6BfBIKCsRTKyEj802funf7XGcCtUJqgyeoU56C9C7Cxtwhvj3oV 8EK80mCOMoPrCaaOD7xcnT2PKxghlC3fs4hXCxmgLA2OJdgM79i7VSglaaZKRA+0 nuPiD7zOYCisw6OksjhNV3tntyxVTJyC+pQqPAq6zQgZ2SW8DEOc1ywNxzyjDGZc H1PXAJXqTL5l+P42siqGkEoRYHl0J0uhhRcS4Nmj02IltgErQCSJN3RVpcMb4rFU 7wblRmu5uXVkloK5qQYbunnaOZpx3GN7nR7tlg6P6SNDZS+rp2Cq19DeVIR8xWpR 7z/sv3mp+q0H/NV6efJwUAlu0w== -----END CERTIFICATE-----Generated at Sat Apr 18 00:41:34 2026 by rpki-client