$ rpki-client -vvf rpki-repo.registro.br/repo/DfvEEsHY1rSDm7GvyzeUjbUWbDH732wsgquTbEC7FnkG/0/9CF4F570E3A766751DA881F56F05A7C38CFE1867.mft File: 9CF4F570E3A766751DA881F56F05A7C38CFE1867.mft (raw, json) Hash identifier: bSOaSuEsNewkF4vCgUZUb8IYjVgUFXJ5CSniE0DR8ME= Subject key identifier: F8:87:B8:5E:10:70:14:6D:37:C2:78:D6:96:E9:27:77:46:51:F9:07 Authority key identifier: 9C:F4:F5:70:E3:A7:66:75:1D:A8:81:F5:6F:05:A7:C3:8C:FE:18:67 Certificate issuer: /CN=9CF4F570E3A766751DA881F56F05A7C38CFE1867 Certificate serial: 3BF0F1569C74FACF77E81BA93CF58BC034821B9A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CF4F570E3A766751DA881F56F05A7C38CFE1867.cer Subject info access: rsync://rpki-repo.registro.br/repo/DfvEEsHY1rSDm7GvyzeUjbUWbDH732wsgquTbEC7FnkG/0/9CF4F570E3A766751DA881F56F05A7C38CFE1867.mft Manifest number: 25 Signing time: Fri 17 Apr 2026 11:07:41 +0000 Manifest this update: Fri 17 Apr 2026 11:02:41 +0000 Manifest next update: Sat 18 Apr 2026 13:54:41 +0000 Files and hashes: 1: 34352e352e3234342e302f32322d3332203d3e20323636313130.roa (hash: YokPYCFlSXo3z+XvprHR3N8EEAffWX314itsDVxw+aI=) 2: 9CF4F570E3A766751DA881F56F05A7C38CFE1867.crl (hash: APtiNYJw7WTUGu8cK8F14iyj7sCXmRW3/Mh/4rWyVPw=) 3: 323830343a336163633a3a2f33322d313238203d3e20323636313130.roa (hash: DcQp5e8ipg9dgaFJg25yypsMbjRbnB3OVy6asVb/hZ0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DfvEEsHY1rSDm7GvyzeUjbUWbDH732wsgquTbEC7FnkG/0/9CF4F570E3A766751DA881F56F05A7C38CFE1867.crl rsync://rpki-repo.registro.br/repo/DfvEEsHY1rSDm7GvyzeUjbUWbDH732wsgquTbEC7FnkG/0/9CF4F570E3A766751DA881F56F05A7C38CFE1867.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CF4F570E3A766751DA881F56F05A7C38CFE1867.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Apr 2026 13:54:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:f0:f1:56:9c:74:fa:cf:77:e8:1b:a9:3c:f5:8b:c0:34:82:1b:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9CF4F570E3A766751DA881F56F05A7C38CFE1867 Validity Not Before: Apr 17 11:02:41 2026 GMT Not After : Apr 18 13:54:41 2026 GMT Subject: CN=F887B85E1070146D37C278D696E927774651F907 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:84:54:c8:7c:c6:df:c3:70:c6:a6:3d:81:49: 90:73:40:33:c6:78:70:05:53:93:1a:e7:16:25:ba: 17:c5:0e:8c:9c:c4:34:15:1d:ed:86:79:9a:12:2e: 00:22:fb:ac:cf:16:8a:8d:05:41:a4:a3:50:a3:c6: 7e:83:94:32:e2:ca:f5:a4:42:89:cf:0e:3c:0e:b6: cc:ba:2e:f0:5b:32:83:c9:75:57:c9:6c:28:92:2c: 72:c1:ea:22:b8:65:c6:f1:33:67:f0:3e:94:1e:52: 94:a5:74:39:10:17:e4:7a:fb:1b:1a:ac:60:2b:ea: da:0a:24:c4:c2:b5:85:f5:74:e3:34:b1:d5:32:e6: 9a:b5:03:44:56:a7:2f:ab:85:d7:ea:79:7a:7c:19: 68:3e:4d:4f:a5:36:d3:6f:7a:5e:ad:2f:6c:9c:14: d9:fe:fa:3b:09:55:72:4b:96:60:43:ed:49:77:ca: 90:a8:78:96:52:8d:77:d4:e0:0c:4d:75:e4:04:05: 6a:c4:dd:80:8b:45:3a:b7:e1:57:5e:19:48:f3:d1: 97:fd:60:07:34:44:83:4a:15:9d:14:14:55:6d:2a: f4:8b:94:0b:4d:f9:aa:3f:87:b3:5f:cc:d1:f1:b5: 56:65:0c:b4:c4:60:28:15:eb:e1:29:60:3b:8c:f0: 33:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:87:B8:5E:10:70:14:6D:37:C2:78:D6:96:E9:27:77:46:51:F9:07 X509v3 Authority Key Identifier: keyid:9C:F4:F5:70:E3:A7:66:75:1D:A8:81:F5:6F:05:A7:C3:8C:FE:18:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DfvEEsHY1rSDm7GvyzeUjbUWbDH732wsgquTbEC7FnkG/0/9CF4F570E3A766751DA881F56F05A7C38CFE1867.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CF4F570E3A766751DA881F56F05A7C38CFE1867.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DfvEEsHY1rSDm7GvyzeUjbUWbDH732wsgquTbEC7FnkG/0/9CF4F570E3A766751DA881F56F05A7C38CFE1867.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:fa:e5:31:8e:5b:fb:0c:55:19:96:be:f5:e9:d0:a7:e9:39: ab:94:1a:b2:26:9e:fa:3e:78:ed:72:39:2f:cf:43:5f:c6:c8: 02:5c:a9:19:3d:b4:d9:fb:1a:4f:50:6c:57:9d:e2:e1:d9:d3: 77:6d:f1:1c:a9:87:de:34:d7:2a:e6:1b:e1:03:15:f9:1d:70: 48:0a:e8:7a:54:95:57:2f:57:94:d0:08:a1:9a:e7:59:5b:a5: 4c:49:a5:94:99:77:81:58:76:6c:04:4d:9d:66:09:2c:d0:96: a0:89:da:67:03:88:4a:d0:09:fc:68:c1:9e:24:75:68:e1:11: ae:d1:b7:10:5a:72:cb:41:05:d9:b1:c5:4f:25:05:6d:06:23: 79:fe:ce:13:78:e0:19:ac:e0:2d:41:ea:dc:cd:00:67:72:a1: 59:40:c2:2f:fb:53:f1:84:85:66:55:a2:4f:57:0d:c4:95:72: 8c:ce:cd:95:9d:34:a6:66:a0:3a:18:fc:23:17:db:a5:cc:1d: d4:c6:7c:f6:32:47:5c:35:62:1e:ab:79:dc:7b:70:dc:9b:47: a2:b1:94:58:ff:56:f1:52:a9:39:1a:60:27:a1:8c:08:01:5a: 66:85:dd:ee:8b:94:7a:80:70:a8:ba:a9:7f:ed:3d:20:99:fa: 61:48:af:86 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUO/DxVpx0+s936BupPPWLwDSCG5owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUNGNEY1NzBFM0E3NjY3NTFEQTg4MUY1NkYwNUE3QzM4 Q0ZFMTg2NzAeFw0yNjA0MTcxMTAyNDFaFw0yNjA0MTgxMzU0NDFaMDMxMTAvBgNV BAMTKEY4ODdCODVFMTA3MDE0NkQzN0MyNzhENjk2RTkyNzc3NDY1MUY5MDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkhFTIfMbfw3DGpj2BSZBzQDPG eHAFU5Ma5xYluhfFDoycxDQVHe2GeZoSLgAi+6zPFoqNBUGko1Cjxn6DlDLiyvWk QonPDjwOtsy6LvBbMoPJdVfJbCiSLHLB6iK4ZcbxM2fwPpQeUpSldDkQF+R6+xsa rGAr6toKJMTCtYX1dOM0sdUy5pq1A0RWpy+rhdfqeXp8GWg+TU+lNtNvel6tL2yc FNn++jsJVXJLlmBD7Ul3ypCoeJZSjXfU4AxNdeQEBWrE3YCLRTq34VdeGUjz0Zf9 YAc0RINKFZ0UFFVtKvSLlAtN+ao/h7NfzNHxtVZlDLTEYCgV6+EpYDuM8DP3AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU+Ie4XhBwFG03wnjWluknd0ZR+QcwHwYDVR0j BBgwFoAUnPT1cOOnZnUdqIH1bwWnw4z+GGcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRGZ2RUVzSFkxclNEbTdHdnl6ZVVqYlVXYkRINzMyd3NncXVUYkVDN0Zu a0cvMC85Q0Y0RjU3MEUzQTc2Njc1MURBODgxRjU2RjA1QTdDMzhDRkUxODY3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlDRjRGNTcwRTNBNzY2NzUx REE4ODFGNTZGMDVBN0MzOENGRTE4NjcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RGZ2RUVzSFkxclNEbTdHdnl6ZVVqYlVXYkRINzMyd3NncXVUYkVDN0Zua0cvMC85 Q0Y0RjU3MEUzQTc2Njc1MURBODgxRjU2RjA1QTdDMzhDRkUxODY3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEACPrlMY5b+wxVGZa+9enQp+k5q5Qasiae+j547XI5L89DX8bIAlypGT202fsa T1BsV53i4dnTd23xHKmH3jTXKuYb4QMV+R1wSAroelSVVy9XlNAIoZrnWVulTEml lJl3gVh2bARNnWYJLNCWoInaZwOIStAJ/GjBniR1aOERrtG3EFpyy0EF2bHFTyUF bQYjef7OE3jgGazgLUHq3M0AZ3KhWUDCL/tT8YSFZlWiT1cNxJVyjM7NlZ00pmag Ohj8Ixfbpcwd1MZ89jJHXDViHqt53Htw3JtHorGUWP9W8VKpORpgJ6GMCAFaZoXd 7ouUeoBwqLqpf+09IJn6YUivhg== -----END CERTIFICATE-----Generated at Fri Apr 17 21:20:46 2026 by rpki-client