$ rpki-client -vvf rpki-repo.registro.br/repo/DYd2iJ9nU2thSVQogpCZ6fJadagDjG9Acs9YtW8cNAPX/0/497761B0E5860030CC7DBE68EAFF156E3E42C2E7.mft File: 497761B0E5860030CC7DBE68EAFF156E3E42C2E7.mft (raw, json) Hash identifier: nTB6IZjyIGAUuIuJneedrJIfsr1PrOpzchgBBUfvIDY= Subject key identifier: B8:F4:84:10:28:57:D2:01:1A:78:FC:F5:46:B4:C3:04:46:5D:48:D5 Authority key identifier: 49:77:61:B0:E5:86:00:30:CC:7D:BE:68:EA:FF:15:6E:3E:42:C2:E7 Certificate issuer: /CN=497761B0E5860030CC7DBE68EAFF156E3E42C2E7 Certificate serial: 641EABC71EC928B5819AD1B0975BFAE2F21E4722 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/497761B0E5860030CC7DBE68EAFF156E3E42C2E7.cer Subject info access: rsync://rpki-repo.registro.br/repo/DYd2iJ9nU2thSVQogpCZ6fJadagDjG9Acs9YtW8cNAPX/0/497761B0E5860030CC7DBE68EAFF156E3E42C2E7.mft Manifest number: 2A Signing time: Fri 17 Apr 2026 11:08:53 +0000 Manifest this update: Fri 17 Apr 2026 11:03:53 +0000 Manifest next update: Sat 18 Apr 2026 13:17:53 +0000 Files and hashes: 1: 323830343a313763343a3a2f33322d313238203d3e20323633323530.roa (hash: tWE/7cFQzmIFwQiePhoELpPc/WXL6kZjOZzOyXr9KX0=) 2: 497761B0E5860030CC7DBE68EAFF156E3E42C2E7.crl (hash: p15cFXIJe5VAHSyeZtYtgIJgEl3x8qCVHuy7M6iIK3c=) 3: 34352e3138302e3235322e302f32322d3332203d3e20323633323530.roa (hash: f6H2+ccduXpXny06YaqI+JCeERJYDCHVbToAMDiSMCs=) 4: 3137372e3233342e3136302e302f31392d3332203d3e20323633323530.roa (hash: ifLFGAj6QfGWN5d8yw16TyEm8MCDtzYWOPkR8FDhzFQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DYd2iJ9nU2thSVQogpCZ6fJadagDjG9Acs9YtW8cNAPX/0/497761B0E5860030CC7DBE68EAFF156E3E42C2E7.crl rsync://rpki-repo.registro.br/repo/DYd2iJ9nU2thSVQogpCZ6fJadagDjG9Acs9YtW8cNAPX/0/497761B0E5860030CC7DBE68EAFF156E3E42C2E7.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/497761B0E5860030CC7DBE68EAFF156E3E42C2E7.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Apr 2026 13:17:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:1e:ab:c7:1e:c9:28:b5:81:9a:d1:b0:97:5b:fa:e2:f2:1e:47:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=497761B0E5860030CC7DBE68EAFF156E3E42C2E7 Validity Not Before: Apr 17 11:03:53 2026 GMT Not After : Apr 18 13:17:53 2026 GMT Subject: CN=B8F484102857D2011A78FCF546B4C304465D48D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:65:e8:6b:51:27:3e:b6:04:60:a8:ec:e5:4f: c5:be:d6:20:04:4c:38:8a:eb:77:60:7f:66:56:cf: 87:5a:14:ff:bc:65:88:98:e3:3a:35:db:27:a0:61: 84:9e:9f:7a:a7:e6:5f:48:2f:7a:2a:ed:07:f5:9c: 60:c4:15:b7:47:d5:08:a7:57:95:a2:8e:c3:c9:9d: 44:f7:5e:93:9d:bd:fe:5d:ac:d2:a2:47:b7:f3:2f: 1a:c3:81:f1:7c:2a:33:53:83:51:23:31:6c:bd:1f: 0d:b0:67:9b:cd:25:62:71:2b:26:72:b5:71:ae:f0: 72:84:fe:bd:e8:ac:85:4a:34:a8:41:73:f7:e9:bf: 9c:01:e8:76:2a:1a:74:a0:18:bf:f7:79:13:62:5c: 1a:ac:9f:27:2b:08:7b:87:bc:f5:96:89:27:33:4d: 67:81:44:92:7d:bc:19:5e:cc:97:44:97:69:4d:18: 81:c9:d1:99:fc:fa:ee:5f:e5:97:0d:ec:3f:83:71: 8f:f7:b2:ce:ec:14:b9:dd:ad:54:63:54:a5:74:dd: f7:a8:de:f8:1f:28:f6:9f:19:04:5b:c7:7a:b9:b9: df:0c:5a:e6:af:b2:01:ac:3b:77:33:85:8f:96:c7: fe:8c:05:d0:69:f1:27:10:b6:63:b9:79:b3:49:27: 86:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:F4:84:10:28:57:D2:01:1A:78:FC:F5:46:B4:C3:04:46:5D:48:D5 X509v3 Authority Key Identifier: keyid:49:77:61:B0:E5:86:00:30:CC:7D:BE:68:EA:FF:15:6E:3E:42:C2:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DYd2iJ9nU2thSVQogpCZ6fJadagDjG9Acs9YtW8cNAPX/0/497761B0E5860030CC7DBE68EAFF156E3E42C2E7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/497761B0E5860030CC7DBE68EAFF156E3E42C2E7.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DYd2iJ9nU2thSVQogpCZ6fJadagDjG9Acs9YtW8cNAPX/0/497761B0E5860030CC7DBE68EAFF156E3E42C2E7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:18:80:9e:d7:f3:4d:43:b0:19:d2:33:b2:49:52:e2:ec:8b: cb:d2:b3:db:c3:16:34:ef:0b:70:eb:a3:7c:91:6c:8e:75:52: 50:43:13:7b:ab:ef:ba:40:9b:dc:4a:8b:fa:0b:d6:df:0c:39: d3:d8:1e:a6:dc:76:21:7e:d0:c3:34:16:cc:11:2c:c7:e8:9b: fb:76:68:f2:f3:84:13:d1:d5:6f:e6:62:e3:47:1d:d1:a7:18: 05:6f:b1:dc:1e:95:5a:93:39:f3:66:96:85:ad:14:68:99:b9: 13:96:61:d1:80:15:02:91:bc:ea:c8:4c:48:b9:a4:0f:2c:61: 96:22:bf:59:5c:c7:e4:f8:4a:30:9a:8b:62:71:76:4a:ac:89: d9:d8:3b:c5:b0:27:38:c3:c6:44:fb:c7:86:ad:d6:bd:8f:ce: 43:62:67:33:87:53:ed:47:05:b0:95:ad:38:b3:2e:60:39:f4: d9:f0:13:8d:10:66:4f:60:85:70:c0:61:2c:1c:56:96:c6:89: fa:3e:5c:02:e2:8a:e1:5c:6e:43:c5:82:df:5f:d9:bd:f5:d5: 39:78:39:9e:76:62:89:f4:08:88:82:04:ab:48:bc:c3:03:bc: b1:98:11:f0:bb:9c:82:32:0e:0b:26:44:0e:36:8b:3b:24:6e: 57:09:88:ae -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUZB6rxx7JKLWBmtGwl1v64vIeRyIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDk3NzYxQjBFNTg2MDAzMENDN0RCRTY4RUFGRjE1NkUz RTQyQzJFNzAeFw0yNjA0MTcxMTAzNTNaFw0yNjA0MTgxMzE3NTNaMDMxMTAvBgNV BAMTKEI4RjQ4NDEwMjg1N0QyMDExQTc4RkNGNTQ2QjRDMzA0NDY1RDQ4RDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiZehrUSc+tgRgqOzlT8W+1iAE TDiK63dgf2ZWz4daFP+8ZYiY4zo12yegYYSen3qn5l9IL3oq7Qf1nGDEFbdH1Qin V5WijsPJnUT3XpOdvf5drNKiR7fzLxrDgfF8KjNTg1EjMWy9Hw2wZ5vNJWJxKyZy tXGu8HKE/r3orIVKNKhBc/fpv5wB6HYqGnSgGL/3eRNiXBqsnycrCHuHvPWWiScz TWeBRJJ9vBlezJdEl2lNGIHJ0Zn8+u5f5ZcN7D+DcY/3ss7sFLndrVRjVKV03feo 3vgfKPafGQRbx3q5ud8MWuavsgGsO3czhY+Wx/6MBdBp8ScQtmO5ebNJJ4bfAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUuPSEEChX0gEaePz1RrTDBEZdSNUwHwYDVR0j BBgwFoAUSXdhsOWGADDMfb5o6v8Vbj5CwucwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRFlkMmlKOW5VMnRoU1ZRb2dwQ1o2ZkphZGFnRGpHOUFjczlZdFc4Y05B UFgvMC80OTc3NjFCMEU1ODYwMDMwQ0M3REJFNjhFQUZGMTU2RTNFNDJDMkU3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ5Nzc2MUIwRTU4NjAwMzBD QzdEQkU2OEVBRkYxNTZFM0U0MkMyRTcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RFlkMmlKOW5VMnRoU1ZRb2dwQ1o2ZkphZGFnRGpHOUFjczlZdFc4Y05BUFgvMC80 OTc3NjFCMEU1ODYwMDMwQ0M3REJFNjhFQUZGMTU2RTNFNDJDMkU3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAORiAntfzTUOwGdIzsklS4uyLy9Kz28MWNO8LcOujfJFsjnVSUEMTe6vvukCb 3EqL+gvW3ww509geptx2IX7QwzQWzBEsx+ib+3Zo8vOEE9HVb+Zi40cd0acYBW+x 3B6VWpM582aWha0UaJm5E5Zh0YAVApG86shMSLmkDyxhliK/WVzH5PhKMJqLYnF2 SqyJ2dg7xbAnOMPGRPvHhq3WvY/OQ2JnM4dT7UcFsJWtOLMuYDn02fATjRBmT2CF cMBhLBxWlsaJ+j5cAuKK4VxuQ8WC31/ZvfXVOXg5nnZiifQIiIIEq0i8wwO8sZgR 8LucgjIOCyZEDjaLOyRuVwmIrg== -----END CERTIFICATE-----Generated at Fri Apr 17 21:21:56 2026 by rpki-client