$ rpki-client -vvf rpki-repo.registro.br/repo/8aP1i4ygyyirdYtc5QQm58TJuQXadqT71yyjh3NMQyCK/1/00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74.mft File: 00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74.mft (raw, json) Hash identifier: ZbhXT6t3tlrHHGhjqyk/t9I46xMTC+Ut6r3LCy5FNRM= Subject key identifier: A2:E3:6F:4F:0C:22:14:8A:55:DD:85:33:0F:5A:B1:B2:3A:64:AB:02 Authority key identifier: 00:D9:5A:AB:43:E0:36:D7:A6:DE:22:28:E9:DB:13:FF:AB:79:BE:74 Certificate issuer: /CN=00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74 Certificate serial: 23D06156F2B20828C39C3C99D79F8449B9BAB3C7 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74.cer Subject info access: rsync://rpki-repo.registro.br/repo/8aP1i4ygyyirdYtc5QQm58TJuQXadqT71yyjh3NMQyCK/1/00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74.mft Manifest number: 03DF Signing time: Fri 17 Apr 2026 11:19:19 +0000 Manifest this update: Fri 17 Apr 2026 11:14:19 +0000 Manifest next update: Sat 18 Apr 2026 14:59:19 +0000 Files and hashes: 1: 323830343a356666383a3a2f33322d3438203d3e20323639313337.roa (hash: Qu8SOuwmPFomMoaDPKHSrBCNVxQVDZ7bIXJ/lQ8lu6w=) 2: 00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74.crl (hash: TnacfDqdfCEX4gnX5hBmiON3KHSPlCY5skrOKbxLodM=) 3: 34352e3138302e3134342e302f32322d3332203d3e20323639313337.roa (hash: M2/f+qAdVdCb7KTuh+OMRc31I7vb9gKfRCr3bCTCX8A=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8aP1i4ygyyirdYtc5QQm58TJuQXadqT71yyjh3NMQyCK/1/00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74.crl rsync://rpki-repo.registro.br/repo/8aP1i4ygyyirdYtc5QQm58TJuQXadqT71yyjh3NMQyCK/1/00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Apr 2026 14:59:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:d0:61:56:f2:b2:08:28:c3:9c:3c:99:d7:9f:84:49:b9:ba:b3:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74 Validity Not Before: Apr 17 11:14:19 2026 GMT Not After : Apr 18 14:59:19 2026 GMT Subject: CN=A2E36F4F0C22148A55DD85330F5AB1B23A64AB02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:72:6d:b8:92:46:58:9f:d0:60:0e:eb:08:d2: f0:bc:ee:db:60:f7:8f:d1:29:1b:af:c8:7f:c9:6f: fb:d1:05:97:a7:11:c2:af:ef:07:b7:78:05:84:a2: 63:9b:c4:ea:67:5a:be:33:33:70:1e:63:01:77:b7: 9d:85:fb:28:cd:07:91:70:dd:8e:71:18:17:79:05: 14:b0:b2:bc:8c:6d:4f:bc:0c:8a:70:5f:eb:f0:8a: 2c:39:71:7f:ca:a9:11:95:26:cd:64:d8:c0:02:fb: 1c:1f:ea:10:38:c3:cb:3d:87:f2:11:23:2b:aa:9a: 39:0b:07:da:24:6a:d6:c6:68:a0:d8:e1:b4:ad:c5: f7:74:e7:05:62:93:21:fd:1e:65:bd:3e:6b:eb:a3: d4:88:97:34:43:d1:66:c9:9c:a1:26:ea:65:56:ca: eb:31:30:e0:d4:ef:f4:1b:f1:bf:0f:58:9c:01:85: 4f:0b:f2:e8:64:ff:d9:2a:41:22:b5:85:b1:f8:dc: 44:bb:4e:79:0e:c8:3a:62:f4:87:1d:3f:80:6e:47: 41:50:98:80:0b:f5:16:d9:92:a0:ec:a4:a6:aa:20: 52:4b:4e:57:f4:b8:f9:f8:c4:6c:98:87:ac:90:cc: b4:16:f7:43:b4:ca:7d:8f:0f:cb:4e:97:2b:25:32: 4e:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:E3:6F:4F:0C:22:14:8A:55:DD:85:33:0F:5A:B1:B2:3A:64:AB:02 X509v3 Authority Key Identifier: keyid:00:D9:5A:AB:43:E0:36:D7:A6:DE:22:28:E9:DB:13:FF:AB:79:BE:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8aP1i4ygyyirdYtc5QQm58TJuQXadqT71yyjh3NMQyCK/1/00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8aP1i4ygyyirdYtc5QQm58TJuQXadqT71yyjh3NMQyCK/1/00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:c4:bf:5d:e4:57:af:d4:b5:96:e3:f2:46:0a:89:ef:38:89: 8f:49:fe:52:5b:3c:ed:e7:e2:f8:4c:b9:84:36:68:9e:87:c4: 08:c2:42:79:df:bd:b4:3a:d1:bd:15:10:5b:9d:a0:ac:b7:26: 11:94:0d:53:b0:4f:96:86:a1:ca:5e:44:37:a6:02:01:7c:e3: 79:28:08:be:38:61:18:24:46:93:02:f4:7b:18:dc:ab:69:32: 72:bc:bc:9d:24:35:fe:1e:52:90:be:a1:62:ac:97:c0:4b:70: 52:16:54:89:05:4f:03:ec:0c:3f:98:1d:e4:0b:e1:70:38:8d: 0a:22:0c:be:fe:0b:ce:87:5b:fa:5f:c1:09:05:8f:38:3e:09: 56:15:ae:32:e3:01:a5:47:ba:86:39:c5:a2:9d:8e:b2:b8:bd: 0f:0b:20:7a:3e:57:10:eb:c1:8e:d8:db:41:be:ea:c9:e9:af: b8:5d:16:7b:97:f6:ce:58:e9:56:94:f8:b6:12:51:e8:dd:30: bb:50:74:ff:e3:e8:60:f8:61:d8:c8:9c:bf:78:c2:ad:db:0e: 96:fc:a7:d9:40:0f:08:d3:5c:49:75:8f:ff:1f:6e:f4:8b:e2: 6f:45:30:f7:10:1b:01:90:e7:bf:ff:46:30:c8:17:af:8c:52: 53:af:68:a5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUI9BhVvKyCCjDnDyZ15+ESbm6s8cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDBEOTVBQUI0M0UwMzZEN0E2REUyMjI4RTlEQjEzRkZB Qjc5QkU3NDAeFw0yNjA0MTcxMTE0MTlaFw0yNjA0MTgxNDU5MTlaMDMxMTAvBgNV BAMTKEEyRTM2RjRGMEMyMjE0OEE1NUREODUzMzBGNUFCMUIyM0E2NEFCMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMcm24kkZYn9BgDusI0vC87ttg 94/RKRuvyH/Jb/vRBZenEcKv7we3eAWEomObxOpnWr4zM3AeYwF3t52F+yjNB5Fw 3Y5xGBd5BRSwsryMbU+8DIpwX+vwiiw5cX/KqRGVJs1k2MAC+xwf6hA4w8s9h/IR IyuqmjkLB9okatbGaKDY4bStxfd05wVikyH9HmW9Pmvro9SIlzRD0WbJnKEm6mVW yusxMODU7/Qb8b8PWJwBhU8L8uhk/9kqQSK1hbH43ES7TnkOyDpi9IcdP4BuR0FQ mIAL9RbZkqDspKaqIFJLTlf0uPn4xGyYh6yQzLQW90O0yn2PD8tOlyslMk5FAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUouNvTwwiFIpV3YUzD1qxsjpkqwIwHwYDVR0j BBgwFoAUANlaq0PgNtem3iIo6dsT/6t5vnQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOGFQMWk0eWd5eWlyZFl0YzVRUW01OFRKdVFYYWRxVDcxeXlqaDNOTVF5 Q0svMS8wMEQ5NUFBQjQzRTAzNkQ3QTZERTIyMjhFOURCMTNGRkFCNzlCRTc0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAwRDk1QUFCNDNFMDM2RDdB NkRFMjIyOEU5REIxM0ZGQUI3OUJFNzQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OGFQMWk0eWd5eWlyZFl0YzVRUW01OFRKdVFYYWRxVDcxeXlqaDNOTVF5Q0svMS8w MEQ5NUFBQjQzRTAzNkQ3QTZERTIyMjhFOURCMTNGRkFCNzlCRTc0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAa8S/XeRXr9S1luPyRgqJ7ziJj0n+Uls87efi+Ey5hDZonofECMJCed+9tDrR vRUQW52grLcmEZQNU7BPloahyl5EN6YCAXzjeSgIvjhhGCRGkwL0exjcq2kycry8 nSQ1/h5SkL6hYqyXwEtwUhZUiQVPA+wMP5gd5AvhcDiNCiIMvv4Lzodb+l/BCQWP OD4JVhWuMuMBpUe6hjnFop2Osri9Dwsgej5XEOvBjtjbQb7qyemvuF0We5f2zljp VpT4thJR6N0wu1B0/+PoYPhh2Micv3jCrdsOlvyn2UAPCNNcSXWP/x9u9Ivib0Uw 9xAbAZDnv/9GMMgXr4xSU69opQ== -----END CERTIFICATE-----Generated at Sat Apr 18 00:46:30 2026 by rpki-client