$ rpki-client -vvf rpki-repo.registro.br/repo/CPxhNqg5EAcghUDjU4YBeesmmKaFdqnvE3r5GK5fnyFF/1/84210C699884A23E38D45F40B27833D84A440F91.mft File: 84210C699884A23E38D45F40B27833D84A440F91.mft (raw, json) Hash identifier: RlI8mpkpJF6XLFJPJ7DwVB6mnnbTCQmsbBYafFFQ+aw= Subject key identifier: 88:4E:99:74:58:75:41:66:41:3A:D2:DD:B3:1C:B1:06:39:69:39:28 Authority key identifier: 84:21:0C:69:98:84:A2:3E:38:D4:5F:40:B2:78:33:D8:4A:44:0F:91 Certificate issuer: /CN=84210C699884A23E38D45F40B27833D84A440F91 Certificate serial: 3AE92C7B8143F4B7C234D43AC9F124A7C68703AE Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84210C699884A23E38D45F40B27833D84A440F91.cer Subject info access: rsync://rpki-repo.registro.br/repo/CPxhNqg5EAcghUDjU4YBeesmmKaFdqnvE3r5GK5fnyFF/1/84210C699884A23E38D45F40B27833D84A440F91.mft Manifest number: 03E7 Signing time: Fri 17 Apr 2026 21:00:00 +0000 Manifest this update: Fri 17 Apr 2026 20:55:00 +0000 Manifest next update: Sat 18 Apr 2026 23:49:00 +0000 Files and hashes: 1: 3133382e33362e38302e302f32322d3234203d3e20323634353731.roa (hash: W9cuh6TY+DbzNPDLc450PMX/lZENV+B6iA3ixoKigao=) 2: 84210C699884A23E38D45F40B27833D84A440F91.crl (hash: MKd2WAEfFLgQgbju3qAoBcnKxoFT8Eh4N0Yz1X2MS0o=) 3: 323830343a323163303a3a2f33322d3332203d3e20323634353731.roa (hash: JQkS3aVjRYIUrDrcqdT2yRUNgeAwc+sxOIedWxAMUJI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CPxhNqg5EAcghUDjU4YBeesmmKaFdqnvE3r5GK5fnyFF/1/84210C699884A23E38D45F40B27833D84A440F91.crl rsync://rpki-repo.registro.br/repo/CPxhNqg5EAcghUDjU4YBeesmmKaFdqnvE3r5GK5fnyFF/1/84210C699884A23E38D45F40B27833D84A440F91.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84210C699884A23E38D45F40B27833D84A440F91.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Apr 2026 23:49:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:e9:2c:7b:81:43:f4:b7:c2:34:d4:3a:c9:f1:24:a7:c6:87:03:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84210C699884A23E38D45F40B27833D84A440F91 Validity Not Before: Apr 17 20:55:00 2026 GMT Not After : Apr 18 23:49:00 2026 GMT Subject: CN=884E997458754166413AD2DDB31CB10639693928 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:7e:4b:87:90:af:ff:47:95:36:22:f4:d8:7b: 9a:1b:cc:3d:d8:12:29:cd:c1:ad:5a:25:47:fa:bf: 9a:28:e2:13:b1:15:c4:b9:ba:72:98:41:f7:61:41: 4b:1d:17:23:5b:ad:16:6e:8d:c3:e5:5a:ce:68:0b: 08:d8:b2:59:ae:c3:dc:9a:f5:66:f5:4c:51:b7:53: e4:68:a5:cd:07:8f:e6:c7:79:6a:58:51:56:68:b4: 44:c2:54:e6:59:fb:d4:aa:cb:c6:c4:36:d4:d1:06: e1:e0:10:37:f4:2e:f2:26:ca:c8:a4:3e:cd:f4:21: c6:71:9f:92:85:e4:6e:dc:87:d4:cc:7d:8a:c6:d8: 82:bf:bb:7c:39:a2:3c:f4:19:89:54:aa:29:fe:64: f2:3d:17:64:81:05:e7:3d:2a:c6:fc:b5:16:ea:a2: 2a:71:7c:38:b5:93:7b:f4:1f:e3:93:11:9a:00:9f: 77:92:8c:aa:97:3e:7c:0a:ba:8e:77:79:73:73:5b: ca:8d:af:b0:19:bb:01:fb:79:b9:fc:8d:ca:b0:23: 32:8e:47:73:4b:0a:26:31:75:e8:b8:b5:d5:b6:e9: 1a:d7:00:61:79:eb:d3:3d:4e:45:99:99:fe:a7:c5: 53:d7:f0:cc:f9:90:c8:97:54:b3:0f:fc:76:a3:f1: 07:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:4E:99:74:58:75:41:66:41:3A:D2:DD:B3:1C:B1:06:39:69:39:28 X509v3 Authority Key Identifier: keyid:84:21:0C:69:98:84:A2:3E:38:D4:5F:40:B2:78:33:D8:4A:44:0F:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CPxhNqg5EAcghUDjU4YBeesmmKaFdqnvE3r5GK5fnyFF/1/84210C699884A23E38D45F40B27833D84A440F91.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84210C699884A23E38D45F40B27833D84A440F91.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CPxhNqg5EAcghUDjU4YBeesmmKaFdqnvE3r5GK5fnyFF/1/84210C699884A23E38D45F40B27833D84A440F91.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:dc:12:24:03:5f:b2:4c:13:b7:7b:62:88:a6:74:61:a5:29: 35:76:d0:55:14:7a:1d:0d:12:a3:e9:b9:7a:a4:22:6d:63:92: 63:d2:3b:26:c6:92:8a:c3:7f:3e:03:75:27:b5:f8:ad:f8:e3: 33:db:25:ea:b7:40:d6:55:10:3b:99:2a:b5:c3:97:a5:98:37: 8f:82:48:0b:c3:6f:04:2f:f8:29:10:28:ed:1e:f7:d3:17:77: 71:a8:e5:97:36:2d:ca:f6:d1:b4:d1:69:ed:bc:5c:97:1e:af: 53:63:d9:8f:24:d3:9f:4c:ac:a4:4b:58:e0:cd:52:48:3c:aa: d3:87:3a:34:5c:9d:ed:da:4b:ab:2f:6f:59:83:e1:42:1b:1f: fc:5c:ab:2f:46:d5:93:ec:59:65:19:bd:97:8b:d6:80:d8:4a: f1:d8:f9:95:ee:7b:db:6f:85:e4:43:61:35:d0:ba:86:99:7c: 9a:3d:00:36:50:8d:05:3e:17:cd:85:df:e2:44:e2:72:ab:8d: cb:82:27:1a:21:97:a7:f0:9e:94:c5:20:9d:86:c5:7c:1a:5c: 6b:b7:a9:c0:cb:3c:4d:95:1a:56:c9:66:a0:51:3f:91:fc:5c: a8:d9:6d:5b:e7:ef:26:83:e8:c5:97:98:c6:33:dd:5b:6b:55: 95:e6:a3:76 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUOukse4FD9LfCNNQ6yfEkp8aHA64wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQyMTBDNjk5ODg0QTIzRTM4RDQ1RjQwQjI3ODMzRDg0 QTQ0MEY5MTAeFw0yNjA0MTcyMDU1MDBaFw0yNjA0MTgyMzQ5MDBaMDMxMTAvBgNV BAMTKDg4NEU5OTc0NTg3NTQxNjY0MTNBRDJEREIzMUNCMTA2Mzk2OTM5MjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBfkuHkK//R5U2IvTYe5obzD3Y EinNwa1aJUf6v5oo4hOxFcS5unKYQfdhQUsdFyNbrRZujcPlWs5oCwjYslmuw9ya 9Wb1TFG3U+Ropc0Hj+bHeWpYUVZotETCVOZZ+9Sqy8bENtTRBuHgEDf0LvImysik Ps30IcZxn5KF5G7ch9TMfYrG2IK/u3w5ojz0GYlUqin+ZPI9F2SBBec9Ksb8tRbq oipxfDi1k3v0H+OTEZoAn3eSjKqXPnwKuo53eXNzW8qNr7AZuwH7ebn8jcqwIzKO R3NLCiYxdei4tdW26RrXAGF569M9TkWZmf6nxVPX8Mz5kMiXVLMP/Haj8QcJAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUiE6ZdFh1QWZBOtLdsxyxBjlpOSgwHwYDVR0j BBgwFoAUhCEMaZiEoj441F9Asngz2EpED5EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ1B4aE5xZzVFQWNnaFVEalU0WUJlZXNtbUthRmRxbnZFM3I1R0s1Zm55 RkYvMS84NDIxMEM2OTk4ODRBMjNFMzhENDVGNDBCMjc4MzNEODRBNDQwRjkxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg0MjEwQzY5OTg4NEEyM0Uz OEQ0NUY0MEIyNzgzM0Q4NEE0NDBGOTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q1B4aE5xZzVFQWNnaFVEalU0WUJlZXNtbUthRmRxbnZFM3I1R0s1Zm55RkYvMS84 NDIxMEM2OTk4ODRBMjNFMzhENDVGNDBCMjc4MzNEODRBNDQwRjkxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAf9wSJANfskwTt3tiiKZ0YaUpNXbQVRR6HQ0So+m5eqQibWOSY9I7JsaSisN/ PgN1J7X4rfjjM9sl6rdA1lUQO5kqtcOXpZg3j4JIC8NvBC/4KRAo7R730xd3cajl lzYtyvbRtNFp7bxclx6vU2PZjyTTn0yspEtY4M1SSDyq04c6NFyd7dpLqy9vWYPh Qhsf/FyrL0bVk+xZZRm9l4vWgNhK8dj5le5722+F5ENhNdC6hpl8mj0ANlCNBT4X zYXf4kTicquNy4InGiGXp/CelMUgnYbFfBpca7epwMs8TZUaVslmoFE/kfxcqNlt W+fvJoPoxZeYxjPdW2tVleajdg== -----END CERTIFICATE-----Generated at Sat Apr 18 02:56:03 2026 by rpki-client