$ rpki-client -vvf rpki-repo.registro.br/repo/Bns6T5M9tRSFwW6wVuwGb55MSTj9mRvtbymmZoB3wszv/0/8AE33D76F6C9FC9D0B0FF7F554C3519271D1C838.mft File: 8AE33D76F6C9FC9D0B0FF7F554C3519271D1C838.mft (raw, json) Hash identifier: MfbNRTeYgm3DEndTGMcf+nJX7h0xoIgiREtmgKPUrDg= Subject key identifier: B9:23:7D:52:86:00:4B:CA:8C:1A:3E:27:FB:37:56:81:B0:D0:F1:E6 Authority key identifier: 8A:E3:3D:76:F6:C9:FC:9D:0B:0F:F7:F5:54:C3:51:92:71:D1:C8:38 Certificate issuer: /CN=8AE33D76F6C9FC9D0B0FF7F554C3519271D1C838 Certificate serial: 3E7877F968EF0D2F7E68F759B66C494B44B56AD4 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AE33D76F6C9FC9D0B0FF7F554C3519271D1C838.cer Subject info access: rsync://rpki-repo.registro.br/repo/Bns6T5M9tRSFwW6wVuwGb55MSTj9mRvtbymmZoB3wszv/0/8AE33D76F6C9FC9D0B0FF7F554C3519271D1C838.mft Manifest number: FE Signing time: Fri 17 Apr 2026 17:32:08 +0000 Manifest this update: Fri 17 Apr 2026 17:27:08 +0000 Manifest next update: Sat 18 Apr 2026 21:05:08 +0000 Files and hashes: 1: 3139302e3130392e39392e302f32342d3234203d3e20323731323232.roa (hash: wHlU3sTFbjAA4O7WdhVkKwAR5dednQvUfHubbR1dvf8=) 2: 3139302e3130392e39382e302f32342d3234203d3e20323731323232.roa (hash: 4BJu53rKTMN1pl6CAz+q6eWZttl5HIejDJqVkTRBNw8=) 3: 3139302e3130392e39362e302f32332d3233203d3e20323731323232.roa (hash: eS5+BzUz/P8gDxELe1obBXuVHdIgN6UEEqiN1aXBrk4=) 4: 8AE33D76F6C9FC9D0B0FF7F554C3519271D1C838.crl (hash: 144KsK2xtQKSa4SpnObpo4Rk+VznkvAcnN05/qNDuE4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Bns6T5M9tRSFwW6wVuwGb55MSTj9mRvtbymmZoB3wszv/0/8AE33D76F6C9FC9D0B0FF7F554C3519271D1C838.crl rsync://rpki-repo.registro.br/repo/Bns6T5M9tRSFwW6wVuwGb55MSTj9mRvtbymmZoB3wszv/0/8AE33D76F6C9FC9D0B0FF7F554C3519271D1C838.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AE33D76F6C9FC9D0B0FF7F554C3519271D1C838.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Apr 2026 21:05:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:78:77:f9:68:ef:0d:2f:7e:68:f7:59:b6:6c:49:4b:44:b5:6a:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AE33D76F6C9FC9D0B0FF7F554C3519271D1C838 Validity Not Before: Apr 17 17:27:08 2026 GMT Not After : Apr 18 21:05:08 2026 GMT Subject: CN=B9237D5286004BCA8C1A3E27FB375681B0D0F1E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:f6:88:45:00:83:22:9c:60:b5:5d:4f:16:2b: 17:b8:cf:13:ff:30:78:1f:0f:14:db:ee:e0:35:7b: d8:6b:ee:14:e0:39:a6:09:3e:76:0e:81:ce:46:48: f2:f5:ba:b9:6c:59:f7:c9:8a:34:d7:e0:19:ed:4e: df:a9:b3:f2:4e:61:18:06:7e:d3:fd:24:df:81:d3: 0e:02:c2:9f:d0:b4:11:9c:3d:4a:c1:f2:9e:b7:08: c6:77:05:45:9e:60:79:71:9f:5d:18:95:2f:77:ab: c0:a4:bc:10:b6:a7:f3:ef:31:34:2f:a7:82:f4:c0: cf:1d:52:e0:6d:6b:2c:38:12:38:00:e8:cb:61:2a: 5a:fa:fd:e6:3d:b1:1a:72:da:6e:ef:2c:c8:c8:aa: e2:77:2f:d6:09:81:8c:61:d7:18:e4:dd:a7:d5:54: f4:8d:dd:74:83:9b:f0:55:45:1f:52:3b:cd:41:78: 18:b2:ae:b0:8d:1f:d0:a3:b3:ec:e9:bf:68:91:92: d0:2d:a1:db:88:2c:9d:70:80:22:15:c1:07:6b:db: 55:e8:ac:cd:04:b9:25:b9:9a:87:8f:47:55:02:d9: 20:c7:88:d9:67:6a:b2:21:e6:b6:c9:09:89:d4:58: cb:ee:e9:d5:25:97:09:e6:4b:00:d9:2f:77:dd:ca: 1f:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:23:7D:52:86:00:4B:CA:8C:1A:3E:27:FB:37:56:81:B0:D0:F1:E6 X509v3 Authority Key Identifier: keyid:8A:E3:3D:76:F6:C9:FC:9D:0B:0F:F7:F5:54:C3:51:92:71:D1:C8:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Bns6T5M9tRSFwW6wVuwGb55MSTj9mRvtbymmZoB3wszv/0/8AE33D76F6C9FC9D0B0FF7F554C3519271D1C838.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AE33D76F6C9FC9D0B0FF7F554C3519271D1C838.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bns6T5M9tRSFwW6wVuwGb55MSTj9mRvtbymmZoB3wszv/0/8AE33D76F6C9FC9D0B0FF7F554C3519271D1C838.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:5b:6e:34:04:ab:3a:4d:53:d2:58:ab:eb:9f:08:cf:6d:7c: 50:c8:9d:80:3f:7b:b7:72:29:54:dd:e4:f0:f8:2d:0a:80:6c: 0b:17:21:bd:76:de:ab:23:41:49:40:d1:11:39:12:8c:b7:f0: c5:c8:f5:e1:53:d2:dc:f3:65:1d:a4:a5:00:43:81:20:17:e5: f8:2d:60:75:46:8c:ef:10:59:b8:f6:04:a3:ae:e2:ae:99:88: cd:3a:06:51:a9:90:a5:7c:06:c1:85:0a:21:a4:2b:e1:39:bb: f6:87:51:61:d6:96:6c:e9:45:36:fd:a4:b3:ea:f2:fc:84:d6: e6:2a:ee:a9:e2:94:01:ca:0e:64:29:ea:de:fe:c5:61:44:23: ee:08:00:84:1a:10:6d:17:eb:e8:bf:5c:81:43:94:f2:53:1b: 38:f6:d9:0a:f3:cd:ac:84:de:36:8a:34:1f:c4:52:96:e1:23: 15:91:98:69:70:81:ee:fc:95:00:8a:ed:79:a9:0e:6e:8f:92: 08:61:47:0e:c2:b9:87:fe:36:bf:5e:35:ed:61:ed:22:ca:d9: 42:f3:dd:29:5c:3e:5e:40:ea:35:60:8b:5d:c7:25:61:a0:5f: 52:3e:7d:e5:4a:e0:20:fe:4a:71:78:f8:c5:15:ca:4f:67:5e: de:79:16:0a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUPnh3+WjvDS9+aPdZtmxJS0S1atQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEFFMzNENzZGNkM5RkM5RDBCMEZGN0Y1NTRDMzUxOTI3 MUQxQzgzODAeFw0yNjA0MTcxNzI3MDhaFw0yNjA0MTgyMTA1MDhaMDMxMTAvBgNV BAMTKEI5MjM3RDUyODYwMDRCQ0E4QzFBM0UyN0ZCMzc1NjgxQjBEMEYxRTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCf9ohFAIMinGC1XU8WKxe4zxP/ MHgfDxTb7uA1e9hr7hTgOaYJPnYOgc5GSPL1urlsWffJijTX4BntTt+ps/JOYRgG ftP9JN+B0w4Cwp/QtBGcPUrB8p63CMZ3BUWeYHlxn10YlS93q8CkvBC2p/PvMTQv p4L0wM8dUuBtayw4EjgA6MthKlr6/eY9sRpy2m7vLMjIquJ3L9YJgYxh1xjk3afV VPSN3XSDm/BVRR9SO81BeBiyrrCNH9Cjs+zpv2iRktAtoduILJ1wgCIVwQdr21Xo rM0EuSW5moePR1UC2SDHiNlnarIh5rbJCYnUWMvu6dUllwnmSwDZL3fdyh+RAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUuSN9UoYAS8qMGj4n+zdWgbDQ8eYwHwYDVR0j BBgwFoAUiuM9dvbJ/J0LD/f1VMNRknHRyDgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQm5zNlQ1TTl0UlNGd1c2d1Z1d0diNTVNU1RqOW1SdnRieW1tWm9CM3dz enYvMC84QUUzM0Q3NkY2QzlGQzlEMEIwRkY3RjU1NEMzNTE5MjcxRDFDODM4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhBRTMzRDc2RjZDOUZDOUQw QjBGRjdGNTU0QzM1MTkyNzFEMUM4MzguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Qm5zNlQ1TTl0UlNGd1c2d1Z1d0diNTVNU1RqOW1SdnRieW1tWm9CM3dzenYvMC84 QUUzM0Q3NkY2QzlGQzlEMEIwRkY3RjU1NEMzNTE5MjcxRDFDODM4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJ1tuNASrOk1T0lir658Iz218UMidgD97t3IpVN3k8PgtCoBsCxchvXbeqyNB SUDRETkSjLfwxcj14VPS3PNlHaSlAEOBIBfl+C1gdUaM7xBZuPYEo67irpmIzToG UamQpXwGwYUKIaQr4Tm79odRYdaWbOlFNv2ks+ry/ITW5iruqeKUAcoOZCnq3v7F YUQj7ggAhBoQbRfr6L9cgUOU8lMbOPbZCvPNrITeNoo0H8RSluEjFZGYaXCB7vyV AIrteakObo+SCGFHDsK5h/42v1417WHtIsrZQvPdKVw+XkDqNWCLXcclYaBfUj59 5UrgIP5KcXj4xRXKT2de3nkWCg== -----END CERTIFICATE-----Generated at Sat Apr 18 03:28:50 2026 by rpki-client