$ rpki-client -vvf rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/1ACA9FBAB5A55798453EBC32813BFFABCB1112C0.mft File: 1ACA9FBAB5A55798453EBC32813BFFABCB1112C0.mft (raw, json) Hash identifier: lrDTH0BrN8tMJB3APZzFHKiE3D48Q9CKkTcT6KGlMIk= Subject key identifier: 99:4A:A1:3F:AA:BA:F0:C2:ED:FE:01:B2:63:CD:47:82:F5:5D:17:2D Authority key identifier: 1A:CA:9F:BA:B5:A5:57:98:45:3E:BC:32:81:3B:FF:AB:CB:11:12:C0 Certificate issuer: /CN=1ACA9FBAB5A55798453EBC32813BFFABCB1112C0 Certificate serial: 75602427CA5CEF2628C7E2B5E3B0CF6099988F31 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1ACA9FBAB5A55798453EBC32813BFFABCB1112C0.cer Subject info access: rsync://rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/1ACA9FBAB5A55798453EBC32813BFFABCB1112C0.mft Manifest number: 0138 Signing time: Fri 17 Apr 2026 13:58:25 +0000 Manifest this update: Fri 17 Apr 2026 13:53:25 +0000 Manifest next update: Sat 18 Apr 2026 16:41:25 +0000 Files and hashes: 1: 1ACA9FBAB5A55798453EBC32813BFFABCB1112C0.crl (hash: M7KzNC8xRMMPDcbsqfLG8/Xb+kTwXNlRCwN65QQlCI8=) 2: 323830343a383237303a3a2f33322d3334203d3e203631363038.roa (hash: uUEwAyOnSKMgNrv6cimHSGDyRpN3j7PzrC2gtxszUfQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/1ACA9FBAB5A55798453EBC32813BFFABCB1112C0.crl rsync://rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/1ACA9FBAB5A55798453EBC32813BFFABCB1112C0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1ACA9FBAB5A55798453EBC32813BFFABCB1112C0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Apr 2026 16:41:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:60:24:27:ca:5c:ef:26:28:c7:e2:b5:e3:b0:cf:60:99:98:8f:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ACA9FBAB5A55798453EBC32813BFFABCB1112C0 Validity Not Before: Apr 17 13:53:25 2026 GMT Not After : Apr 18 16:41:25 2026 GMT Subject: CN=994AA13FAABAF0C2EDFE01B263CD4782F55D172D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:56:3a:6d:65:6f:db:8f:ac:0b:c3:c8:b0:2c: b2:4a:7e:c2:4e:e6:bb:48:51:99:c4:52:3a:ec:90: 3d:c3:12:6e:2c:7c:66:88:0e:dd:c6:8a:ca:15:d7: 27:bc:cf:00:bc:4d:5f:62:84:90:5a:55:db:2a:3b: d6:aa:89:4f:9e:21:73:c2:93:fd:d9:1d:98:63:d2: 55:b1:ed:f6:fe:ae:b3:51:bd:fc:96:95:36:97:c6: cc:4b:23:d8:63:cc:a9:10:fc:c2:44:32:9b:81:38: 97:45:73:b4:6f:44:a8:e9:98:e5:18:f6:27:ab:ec: ee:e7:88:8d:a3:22:fd:4f:b8:d0:8e:76:21:bb:44: b6:7e:7a:a8:b4:32:50:0e:61:b8:59:95:08:b9:24: 17:19:1b:50:78:c4:3e:4f:69:ff:17:a7:d8:a5:ae: 80:53:2b:5a:ce:ff:e7:1e:cd:03:c5:b7:15:9c:87: 17:40:0f:b0:95:0a:f2:c5:32:cd:85:35:dc:61:a7: 67:2d:e7:3d:ba:8c:2f:12:35:ac:cc:7f:37:36:8f: e6:8c:e7:54:dd:dc:6c:99:d0:a6:10:19:2e:50:96: 0d:2e:cd:9b:60:3e:94:da:4b:1e:eb:ea:af:44:5e: 7c:35:77:32:2e:0d:41:f8:6d:b3:a7:a2:a8:67:35: 8a:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:4A:A1:3F:AA:BA:F0:C2:ED:FE:01:B2:63:CD:47:82:F5:5D:17:2D X509v3 Authority Key Identifier: keyid:1A:CA:9F:BA:B5:A5:57:98:45:3E:BC:32:81:3B:FF:AB:CB:11:12:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/1ACA9FBAB5A55798453EBC32813BFFABCB1112C0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1ACA9FBAB5A55798453EBC32813BFFABCB1112C0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/1ACA9FBAB5A55798453EBC32813BFFABCB1112C0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:7b:c1:31:c0:e0:6f:71:ff:ee:df:fc:6b:d9:4b:7f:0d:f1: 51:16:c3:3d:c3:1a:6f:7e:e0:7e:64:f9:51:04:48:36:8b:5e: 3f:56:a5:7c:a1:01:88:5d:79:c5:af:91:e8:7d:7f:92:c5:f4: c3:1a:4f:91:3f:da:aa:02:d1:ae:e7:7d:17:fa:78:39:d4:d0: 1f:e2:f0:79:31:5f:ab:f1:a4:94:b3:b2:e2:ae:0c:f7:31:96: bf:dc:41:48:ab:51:33:58:fa:2f:83:6c:45:19:fc:04:77:79: 57:60:38:eb:ff:9f:b2:c4:7b:97:8b:72:d7:95:d5:70:85:84: 48:ea:c3:35:cb:dd:43:f6:17:ef:c0:dd:34:73:ff:e3:60:90: 3d:27:82:46:e0:24:9d:02:0c:53:7f:60:ea:d3:5a:ea:31:bf: 9d:d5:c5:1f:8c:35:30:78:ca:44:18:70:41:8a:ec:d0:6c:70: bf:ed:a2:9a:1c:91:7c:ef:68:b2:fa:87:12:a0:3d:83:42:32: a4:47:02:35:b4:df:53:d7:38:dc:08:5b:00:8e:53:2e:38:cf: 11:ba:a3:fb:f6:97:f5:67:b5:a1:0e:4f:1e:c1:5e:80:9c:85: 0f:d6:28:73:60:01:8a:73:ce:63:f7:76:5f:81:fc:35:9d:d8: 3b:0e:c5:b7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUdWAkJ8pc7yYox+K147DPYJmYjzEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUFDQTlGQkFCNUE1NTc5ODQ1M0VCQzMyODEzQkZGQUJD QjExMTJDMDAeFw0yNjA0MTcxMzUzMjVaFw0yNjA0MTgxNjQxMjVaMDMxMTAvBgNV BAMTKDk5NEFBMTNGQUFCQUYwQzJFREZFMDFCMjYzQ0Q0NzgyRjU1RDE3MkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHVjptZW/bj6wLw8iwLLJKfsJO 5rtIUZnEUjrskD3DEm4sfGaIDt3GisoV1ye8zwC8TV9ihJBaVdsqO9aqiU+eIXPC k/3ZHZhj0lWx7fb+rrNRvfyWlTaXxsxLI9hjzKkQ/MJEMpuBOJdFc7RvRKjpmOUY 9ier7O7niI2jIv1PuNCOdiG7RLZ+eqi0MlAOYbhZlQi5JBcZG1B4xD5Paf8Xp9il roBTK1rO/+cezQPFtxWchxdAD7CVCvLFMs2FNdxhp2ct5z26jC8SNazMfzc2j+aM 51Td3GyZ0KYQGS5Qlg0uzZtgPpTaSx7r6q9EXnw1dzIuDUH4bbOnoqhnNYqFAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUmUqhP6q68MLt/gGyY81HgvVdFy0wHwYDVR0j BBgwFoAUGsqfurWlV5hFPrwygTv/q8sREsAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ05wQmtpdXM3cjZONVdTMVhYYlVWTWR5QnhrVmNqYTFIejZuQmpNSm5H Yk0vMC8xQUNBOUZCQUI1QTU1Nzk4NDUzRUJDMzI4MTNCRkZBQkNCMTExMkMwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFBQ0E5RkJBQjVBNTU3OTg0 NTNFQkMzMjgxM0JGRkFCQ0IxMTEyQzAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q05wQmtpdXM3cjZONVdTMVhYYlVWTWR5QnhrVmNqYTFIejZuQmpNSm5HYk0vMC8x QUNBOUZCQUI1QTU1Nzk4NDUzRUJDMzI4MTNCRkZBQkNCMTExMkMwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAj3vBMcDgb3H/7t/8a9lLfw3xURbDPcMab37gfmT5UQRINoteP1alfKEBiF15 xa+R6H1/ksX0wxpPkT/aqgLRrud9F/p4OdTQH+LweTFfq/GklLOy4q4M9zGWv9xB SKtRM1j6L4NsRRn8BHd5V2A46/+fssR7l4ty15XVcIWESOrDNcvdQ/YX78DdNHP/ 42CQPSeCRuAknQIMU39g6tNa6jG/ndXFH4w1MHjKRBhwQYrs0Gxwv+2imhyRfO9o svqHEqA9g0IypEcCNbTfU9c43AhbAI5TLjjPEbqj+/aX9We1oQ5PHsFegJyFD9Yo c2ABinPOY/d2X4H8NZ3YOw7Ftw== -----END CERTIFICATE-----Generated at Fri Apr 17 21:11:23 2026 by rpki-client