$ rpki-client -vvf rpki-repo.registro.br/repo/AcRyYkAe7B81Hmh8RpDQPrmCn6GzMMTdJByTqPMjybma/1/425279A675F326D0577BF774BBB20A14508381AD.mft File: 425279A675F326D0577BF774BBB20A14508381AD.mft (raw, json) Hash identifier: HqIZDKqevIliWJLftDBOs1SdPPVbnfaX5MGsqUCCq84= Subject key identifier: 06:FD:31:64:26:D6:A7:72:2F:3C:B7:10:B6:D5:0E:E7:F3:1F:8B:4E Authority key identifier: 42:52:79:A6:75:F3:26:D0:57:7B:F7:74:BB:B2:0A:14:50:83:81:AD Certificate issuer: /CN=425279A675F326D0577BF774BBB20A14508381AD Certificate serial: 25F696B9446BBBB4D63063F3D6B351E8FD25E4C9 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/425279A675F326D0577BF774BBB20A14508381AD.cer Subject info access: rsync://rpki-repo.registro.br/repo/AcRyYkAe7B81Hmh8RpDQPrmCn6GzMMTdJByTqPMjybma/1/425279A675F326D0577BF774BBB20A14508381AD.mft Manifest number: 03DB Signing time: Fri 17 Apr 2026 15:07:29 +0000 Manifest this update: Fri 17 Apr 2026 15:02:29 +0000 Manifest next update: Sat 18 Apr 2026 18:28:29 +0000 Files and hashes: 1: 323830343a383865303a3a2f33322d3438203d3e203238333236.roa (hash: hg6awmchCfAk1ecKa6EDAcMXCk51C2zXLJXG44kTeWY=) 2: 425279A675F326D0577BF774BBB20A14508381AD.crl (hash: 6+D5CIIUdhqOOgaFxw6XsPCJUXAC8K4xf180QiK8ecc=) 3: 3138392e35302e34302e302f32312d3234203d3e203238333236.roa (hash: xczr/1EnIBmZbxIY1mhYebZRHnu9DKVpdDIiVGn4yAE=) 4: 3138392e35302e34382e302f32322d3234203d3e203238333236.roa (hash: ltdLOBqc9NVpLmUeb8cki8a0aZmK0ih/E/Mf8nh1L3g=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/AcRyYkAe7B81Hmh8RpDQPrmCn6GzMMTdJByTqPMjybma/1/425279A675F326D0577BF774BBB20A14508381AD.crl rsync://rpki-repo.registro.br/repo/AcRyYkAe7B81Hmh8RpDQPrmCn6GzMMTdJByTqPMjybma/1/425279A675F326D0577BF774BBB20A14508381AD.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/425279A675F326D0577BF774BBB20A14508381AD.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Apr 2026 18:28:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:f6:96:b9:44:6b:bb:b4:d6:30:63:f3:d6:b3:51:e8:fd:25:e4:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=425279A675F326D0577BF774BBB20A14508381AD Validity Not Before: Apr 17 15:02:29 2026 GMT Not After : Apr 18 18:28:29 2026 GMT Subject: CN=06FD316426D6A7722F3CB710B6D50EE7F31F8B4E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a6:e8:33:8c:12:63:93:4f:51:72:e2:d0:0f: ee:6e:b8:8e:20:e3:5d:a7:a0:15:31:37:5a:d2:8a: 09:22:61:3a:56:58:50:95:b9:4c:8d:89:c0:aa:d6: dc:1b:b3:94:43:29:2a:2f:9f:6d:8a:fb:6f:b5:94: 92:80:69:94:7f:5d:ee:95:c4:72:88:00:5b:11:9b: d9:f1:c8:7a:b4:d5:8b:e8:05:58:24:f4:af:25:04: c5:b1:e8:0d:01:db:80:ea:79:ea:6d:59:28:6b:fa: 1b:e2:9b:3e:a8:55:17:fd:9f:e4:d8:94:57:16:a1: 89:f0:3b:6d:2b:43:ac:09:07:b1:93:44:8c:56:49: 1f:ad:87:ba:f8:aa:71:ce:2d:17:08:ab:ba:0f:64: f6:87:00:b5:f3:bc:03:a9:70:6c:a6:c7:c9:74:01: 5c:58:b9:ab:86:c3:49:c7:f3:da:69:a6:5b:12:0a: 21:59:db:69:6b:af:63:4f:71:6d:8f:92:77:f9:17: 01:2f:1d:46:01:5a:01:27:3d:9f:dd:f7:73:62:f5: 15:e2:e1:12:1b:bb:00:4a:6c:d9:f5:0b:49:9d:a6: 79:e1:7e:78:b1:2f:84:c2:30:41:b0:b7:18:43:72: 0c:c0:e6:b5:1d:8a:2f:07:de:ab:4f:4a:83:04:68: 74:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:FD:31:64:26:D6:A7:72:2F:3C:B7:10:B6:D5:0E:E7:F3:1F:8B:4E X509v3 Authority Key Identifier: keyid:42:52:79:A6:75:F3:26:D0:57:7B:F7:74:BB:B2:0A:14:50:83:81:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/AcRyYkAe7B81Hmh8RpDQPrmCn6GzMMTdJByTqPMjybma/1/425279A675F326D0577BF774BBB20A14508381AD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/425279A675F326D0577BF774BBB20A14508381AD.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/AcRyYkAe7B81Hmh8RpDQPrmCn6GzMMTdJByTqPMjybma/1/425279A675F326D0577BF774BBB20A14508381AD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:97:e5:1e:a9:d6:c3:7f:1b:91:48:84:73:85:8b:7c:52:79: 66:26:77:34:af:a4:65:03:32:5f:65:9a:ed:d0:de:9c:48:66: e4:82:f9:00:a6:ee:02:c3:4a:b8:db:e9:09:36:fc:25:f3:14: c7:fb:e8:e7:3f:e1:ff:e7:f1:7c:6d:24:c6:8b:96:ea:a9:6e: 01:c0:50:1d:9b:4d:1f:41:0f:74:a9:e0:86:14:cc:f4:74:77: 69:ed:17:2e:2e:22:5e:3b:aa:d6:61:9d:5c:03:1f:d8:1a:68: 5f:e1:0c:07:65:4f:f8:c3:d5:51:74:e4:d5:e3:e0:a0:b2:ca: 7e:f3:b6:59:63:0b:d3:cd:80:c1:52:50:c1:20:65:eb:57:cc: 4a:f1:0f:5a:6e:f7:ca:c9:7d:16:ef:50:4c:83:fe:d5:ff:e3: 9d:3b:8c:a9:33:1c:4d:77:a3:e2:67:33:55:ae:1e:2c:05:45: a3:52:ad:15:d1:c1:1e:19:1c:94:b4:bc:fb:2d:f9:7e:cb:e5: 9c:78:6b:2a:6c:80:8e:0f:b8:51:2e:39:2a:d8:b7:4d:fd:28: 73:90:b8:5e:2c:b6:9a:20:8e:1a:87:15:09:d5:9c:05:a0:24: cc:5e:ef:b6:ea:de:95:89:29:fb:8a:79:ae:ac:d1:a1:ea:82: b4:da:c3:cf -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUJfaWuURru7TWMGPz1rNR6P0l5MkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDI1Mjc5QTY3NUYzMjZEMDU3N0JGNzc0QkJCMjBBMTQ1 MDgzODFBRDAeFw0yNjA0MTcxNTAyMjlaFw0yNjA0MTgxODI4MjlaMDMxMTAvBgNV BAMTKDA2RkQzMTY0MjZENkE3NzIyRjNDQjcxMEI2RDUwRUU3RjMxRjhCNEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5pugzjBJjk09RcuLQD+5uuI4g 412noBUxN1rSigkiYTpWWFCVuUyNicCq1twbs5RDKSovn22K+2+1lJKAaZR/Xe6V xHKIAFsRm9nxyHq01YvoBVgk9K8lBMWx6A0B24DqeeptWShr+hvimz6oVRf9n+TY lFcWoYnwO20rQ6wJB7GTRIxWSR+th7r4qnHOLRcIq7oPZPaHALXzvAOpcGymx8l0 AVxYuauGw0nH89ppplsSCiFZ22lrr2NPcW2Pknf5FwEvHUYBWgEnPZ/d93Ni9RXi 4RIbuwBKbNn1C0mdpnnhfnixL4TCMEGwtxhDcgzA5rUdii8H3qtPSoMEaHSvAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUBv0xZCbWp3IvPLcQttUO5/Mfi04wHwYDVR0j BBgwFoAUQlJ5pnXzJtBXe/d0u7IKFFCDga0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQWNSeVlrQWU3QjgxSG1oOFJwRFFQcm1DbjZHek1NVGRKQnlUcVBNanli bWEvMS80MjUyNzlBNjc1RjMyNkQwNTc3QkY3NzRCQkIyMEExNDUwODM4MUFELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQyNTI3OUE2NzVGMzI2RDA1 NzdCRjc3NEJCQjIwQTE0NTA4MzgxQUQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QWNSeVlrQWU3QjgxSG1oOFJwRFFQcm1DbjZHek1NVGRKQnlUcVBNanlibWEvMS80 MjUyNzlBNjc1RjMyNkQwNTc3QkY3NzRCQkIyMEExNDUwODM4MUFELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJJflHqnWw38bkUiEc4WLfFJ5ZiZ3NK+kZQMyX2Wa7dDenEhm5IL5AKbuAsNK uNvpCTb8JfMUx/vo5z/h/+fxfG0kxouW6qluAcBQHZtNH0EPdKnghhTM9HR3ae0X Li4iXjuq1mGdXAMf2BpoX+EMB2VP+MPVUXTk1ePgoLLKfvO2WWML082AwVJQwSBl 61fMSvEPWm73ysl9Fu9QTIP+1f/jnTuMqTMcTXej4mczVa4eLAVFo1KtFdHBHhkc lLS8+y35fsvlnHhrKmyAjg+4US45Kti3Tf0oc5C4Xiy2miCOGocVCdWcBaAkzF7v turelYkp+4p5rqzRoeqCtNrDzw== -----END CERTIFICATE-----Generated at Fri Apr 17 21:11:48 2026 by rpki-client