$ rpki-client -vvf rpki-repo.registro.br/repo/CjWZeS5rmkGr7mumCmrkWL6ABEYat5sP5N8sKEDWCCqF/0/0DD11D4FF8DAD9A5649C8F1353D414BBEFB7BC15.mft File: 0DD11D4FF8DAD9A5649C8F1353D414BBEFB7BC15.mft (raw, json) Hash identifier: G1TKzaWHbKFKyrjLvnr7Wm2oLDStOVgJJ+9At6HwUdg= Subject key identifier: 1D:3C:D3:57:ED:72:AD:7D:DE:09:7B:82:24:B6:67:43:58:FC:0E:45 Authority key identifier: 0D:D1:1D:4F:F8:DA:D9:A5:64:9C:8F:13:53:D4:14:BB:EF:B7:BC:15 Certificate issuer: /CN=0DD11D4FF8DAD9A5649C8F1353D414BBEFB7BC15 Certificate serial: 0D7AD4BE6B915A5211460D504C2D3D665BF151F7 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DD11D4FF8DAD9A5649C8F1353D414BBEFB7BC15.cer Subject info access: rsync://rpki-repo.registro.br/repo/CjWZeS5rmkGr7mumCmrkWL6ABEYat5sP5N8sKEDWCCqF/0/0DD11D4FF8DAD9A5649C8F1353D414BBEFB7BC15.mft Manifest number: 023B Signing time: Fri 17 Apr 2026 16:34:05 +0000 Manifest this update: Fri 17 Apr 2026 16:29:05 +0000 Manifest next update: Sat 18 Apr 2026 17:30:05 +0000 Files and hashes: 1: 3137372e32322e3230382e302f32302d3234203d3e203631383732.roa (hash: 9qdBO6zx55Z0LqirSKIrbpE5X4gh2LGWlaofZe7Vu3g=) 2: 0DD11D4FF8DAD9A5649C8F1353D414BBEFB7BC15.crl (hash: 4BVwal0C+KksUWqmEgLBDd4X6srdWILt/shGDOvsx2o=) 3: 323830343a316161303a3a2f33322d3438203d3e203631383732.roa (hash: E+DY2gLkA4xKMl8SJ1JUf/WWEsVYq6iSGF59by3JAqM=) 4: 3137302e38312e34342e302f32322d3234203d3e203631383732.roa (hash: 60h6j9Lf73YfOOoe3tF+EFkY0lpWYAbHzLTkuqv5ENE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CjWZeS5rmkGr7mumCmrkWL6ABEYat5sP5N8sKEDWCCqF/0/0DD11D4FF8DAD9A5649C8F1353D414BBEFB7BC15.crl rsync://rpki-repo.registro.br/repo/CjWZeS5rmkGr7mumCmrkWL6ABEYat5sP5N8sKEDWCCqF/0/0DD11D4FF8DAD9A5649C8F1353D414BBEFB7BC15.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DD11D4FF8DAD9A5649C8F1353D414BBEFB7BC15.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Apr 2026 17:30:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:7a:d4:be:6b:91:5a:52:11:46:0d:50:4c:2d:3d:66:5b:f1:51:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0DD11D4FF8DAD9A5649C8F1353D414BBEFB7BC15 Validity Not Before: Apr 17 16:29:05 2026 GMT Not After : Apr 18 17:30:05 2026 GMT Subject: CN=1D3CD357ED72AD7DDE097B8224B6674358FC0E45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:38:9c:13:c5:35:fc:5e:72:81:76:92:6a:e1: d5:22:d0:0c:76:64:d0:83:65:08:88:cd:b4:99:83: d9:09:e5:ea:f6:55:eb:98:b4:54:0a:51:b7:5e:e0: e4:25:9f:98:a3:f1:01:2e:23:72:55:fa:4d:0e:19: 51:97:bb:80:1c:32:46:6e:98:06:33:66:08:f4:f3: 6d:2e:0f:73:4b:b9:88:c0:f8:34:37:db:7a:30:ad: d0:96:5e:69:f9:52:d4:25:0f:1b:ca:90:9e:0d:9e: 1f:eb:32:48:70:c9:4c:6b:68:cc:10:0f:c5:08:1b: 3c:01:3c:ec:bf:f3:f0:65:2b:d8:88:56:25:1d:70: b4:b9:5e:db:9c:79:bf:ea:77:7a:5f:3e:df:d9:3e: 7c:3f:a2:4a:a3:0b:f7:f7:45:95:4b:8a:19:b3:87: a6:a7:fb:7b:a3:a2:5f:80:ed:5f:e6:b5:b3:b4:af: fa:40:ee:53:2c:d4:31:6f:20:95:0b:e6:4f:6c:53: c8:25:2f:a5:23:a7:cb:d6:f9:d3:a0:fd:93:96:ab: 12:f9:ad:06:a0:8a:b9:fc:81:ff:d6:58:68:83:06: b5:73:71:9b:d8:06:20:d0:36:82:a0:ab:fc:e8:eb: 9a:a4:25:8f:44:8c:2d:19:45:fd:54:ea:f2:e8:d2: 74:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:3C:D3:57:ED:72:AD:7D:DE:09:7B:82:24:B6:67:43:58:FC:0E:45 X509v3 Authority Key Identifier: keyid:0D:D1:1D:4F:F8:DA:D9:A5:64:9C:8F:13:53:D4:14:BB:EF:B7:BC:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CjWZeS5rmkGr7mumCmrkWL6ABEYat5sP5N8sKEDWCCqF/0/0DD11D4FF8DAD9A5649C8F1353D414BBEFB7BC15.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DD11D4FF8DAD9A5649C8F1353D414BBEFB7BC15.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CjWZeS5rmkGr7mumCmrkWL6ABEYat5sP5N8sKEDWCCqF/0/0DD11D4FF8DAD9A5649C8F1353D414BBEFB7BC15.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:88:b8:43:1a:81:c0:47:7c:b2:9f:f8:3a:5d:ee:95:78:af: e7:f7:8e:96:cc:e8:1e:f2:d1:a4:0a:ba:bb:6a:4b:26:a0:61: a9:58:2a:57:3f:b7:8e:7f:bb:5e:76:62:31:54:52:d9:58:b9: b5:f5:40:cb:0d:fb:96:5e:1d:af:ca:df:f4:98:51:7c:44:37: b5:0b:7f:b1:99:93:19:14:15:9e:10:6c:cc:f7:a6:d8:b6:f5: de:90:64:12:28:8c:ee:da:09:e3:c8:33:ce:91:ae:40:07:53: 15:f9:11:41:f3:2d:80:ee:e4:60:18:c0:21:4b:1a:e8:0b:c3: cf:3d:5d:1b:5e:40:ce:f9:4c:7f:d0:b2:73:0e:46:35:c6:93: d2:b7:03:5d:28:57:d8:4c:5b:c5:d5:cd:aa:36:69:ec:5c:3d: ab:55:70:49:b4:6a:59:bf:44:c1:f0:24:8d:00:11:46:15:5e: b4:3f:1b:78:27:e2:d1:27:8e:e3:33:fa:af:23:e1:1a:43:5e: 5f:27:77:70:73:40:f5:ba:8f:a9:f5:2c:dc:8d:fb:33:70:83: 09:6c:9a:80:96:e6:07:70:13:e1:c1:74:cb:c0:e2:b0:d5:47: 6f:a7:0c:2b:75:94:f7:47:49:35:67:dd:d2:69:24:df:90:11: 7c:bd:4d:11 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUDXrUvmuRWlIRRg1QTC09ZlvxUfcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEREMTFENEZGOERBRDlBNTY0OUM4RjEzNTNENDE0QkJF RkI3QkMxNTAeFw0yNjA0MTcxNjI5MDVaFw0yNjA0MTgxNzMwMDVaMDMxMTAvBgNV BAMTKDFEM0NEMzU3RUQ3MkFEN0RERTA5N0I4MjI0QjY2NzQzNThGQzBFNDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXOJwTxTX8XnKBdpJq4dUi0Ax2 ZNCDZQiIzbSZg9kJ5er2VeuYtFQKUbde4OQln5ij8QEuI3JV+k0OGVGXu4AcMkZu mAYzZgj0820uD3NLuYjA+DQ323owrdCWXmn5UtQlDxvKkJ4Nnh/rMkhwyUxraMwQ D8UIGzwBPOy/8/BlK9iIViUdcLS5Xtuceb/qd3pfPt/ZPnw/okqjC/f3RZVLihmz h6an+3ujol+A7V/mtbO0r/pA7lMs1DFvIJUL5k9sU8glL6Ujp8vW+dOg/ZOWqxL5 rQagirn8gf/WWGiDBrVzcZvYBiDQNoKgq/zo65qkJY9EjC0ZRf1U6vLo0nQjAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUHTzTV+1yrX3eCXuCJLZnQ1j8DkUwHwYDVR0j BBgwFoAUDdEdT/ja2aVknI8TU9QUu++3vBUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ2pXWmVTNXJta0dyN211bUNtcmtXTDZBQkVZYXQ1c1A1TjhzS0VEV0ND cUYvMC8wREQxMUQ0RkY4REFEOUE1NjQ5QzhGMTM1M0Q0MTRCQkVGQjdCQzE1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBERDExRDRGRjhEQUQ5QTU2 NDlDOEYxMzUzRDQxNEJCRUZCN0JDMTUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q2pXWmVTNXJta0dyN211bUNtcmtXTDZBQkVZYXQ1c1A1TjhzS0VEV0NDcUYvMC8w REQxMUQ0RkY4REFEOUE1NjQ5QzhGMTM1M0Q0MTRCQkVGQjdCQzE1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlIi4QxqBwEd8sp/4Ol3ulXiv5/eOlszoHvLRpAq6u2pLJqBhqVgqVz+3jn+7 XnZiMVRS2Vi5tfVAyw37ll4dr8rf9JhRfEQ3tQt/sZmTGRQVnhBszPem2Lb13pBk EiiM7toJ48gzzpGuQAdTFfkRQfMtgO7kYBjAIUsa6AvDzz1dG15AzvlMf9Cycw5G NcaT0rcDXShX2ExbxdXNqjZp7Fw9q1VwSbRqWb9EwfAkjQARRhVetD8beCfi0SeO 4zP6ryPhGkNeXyd3cHNA9bqPqfUs3I37M3CDCWyagJbmB3AT4cF0y8DisNVHb6cM K3WU90dJNWfd0mkk35ARfL1NEQ== -----END CERTIFICATE-----Generated at Fri Apr 17 20:59:02 2026 by rpki-client