$ rpki-client -vvf rpki-repo.registro.br/repo/DiedU9B7M6NxXr5xQhJdft17HNsjQS3dg6iUHrJZiVAv/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.mft File: D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.mft (raw, json) Hash identifier: l+qcbDdC6qA4rIw7j0+kU8b6GPEX6xts2PaJjOuhvZ8= Subject key identifier: DD:60:1B:5A:27:D3:F9:CB:74:34:B5:95:4A:F5:C9:CB:4D:25:71:39 Authority key identifier: D2:24:DF:F1:98:22:C5:B2:7C:7B:CC:16:BF:D8:BE:2A:38:4F:89:AA Certificate issuer: /CN=D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA Certificate serial: 3346956B9D86352EF6748C0C643BC0A1F3E25E9C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.cer Subject info access: rsync://rpki-repo.registro.br/repo/DiedU9B7M6NxXr5xQhJdft17HNsjQS3dg6iUHrJZiVAv/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.mft Manifest number: 03D1 Signing time: Fri 17 Apr 2026 12:14:33 +0000 Manifest this update: Fri 17 Apr 2026 12:09:33 +0000 Manifest next update: Sat 18 Apr 2026 16:03:33 +0000 Files and hashes: 1: D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.crl (hash: dkVTu8wenLcvMp//4VKIF9knRDFxKa2Um9NoYpgE5pU=) 2: 323830343a333164343a3a2f33322d3438203d3e203533313339.roa (hash: cFt8LxF28+1rkiKt5ZFM/VhjfoGWCFQ6jBy7OAjx3bg=) 3: 3136382e3139372e3230342e302f32322d3234203d3e203533313339.roa (hash: ySkyY3nq4rz0dNW8rF5gaWogxnEPCTvWUkX3gDlQytA=) 4: 3138372e3130392e38302e302f32302d3234203d3e203533313339.roa (hash: MXKjsbMHPRAw36TRxv0Iq9a292215IPlxvY87b1a0BA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DiedU9B7M6NxXr5xQhJdft17HNsjQS3dg6iUHrJZiVAv/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.crl rsync://rpki-repo.registro.br/repo/DiedU9B7M6NxXr5xQhJdft17HNsjQS3dg6iUHrJZiVAv/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Apr 2026 16:03:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:46:95:6b:9d:86:35:2e:f6:74:8c:0c:64:3b:c0:a1:f3:e2:5e:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA Validity Not Before: Apr 17 12:09:33 2026 GMT Not After : Apr 18 16:03:33 2026 GMT Subject: CN=DD601B5A27D3F9CB7434B5954AF5C9CB4D257139 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:81:2c:c1:ac:1b:f7:6c:d2:54:fe:83:ff:a4: b5:01:11:c4:e3:d5:56:ba:b7:2f:3f:ec:0e:87:e5: 67:00:32:73:a8:23:59:47:46:50:38:25:4e:6f:2a: af:c3:8a:13:b5:f0:89:4b:f2:c8:e7:a5:83:1f:73: 80:5b:f4:44:ff:6f:2d:6d:d1:a0:ad:80:dd:f2:83: c5:82:17:ed:c0:8a:a3:34:07:3d:f6:1c:c6:4d:3a: d2:87:57:e2:9d:bb:cd:f6:d4:ee:9e:52:10:78:87: 34:c1:5e:8a:58:f5:d0:ad:c5:8c:27:84:98:8f:71: 45:47:f4:69:b0:00:b6:7d:dd:28:62:8f:e8:3d:bf: 7b:1c:48:69:b5:f1:df:03:af:84:90:4c:eb:fb:18: 76:62:ac:84:4e:2a:aa:bd:fa:44:a2:4a:6b:19:07: b9:14:e0:f0:e8:b9:d3:49:e7:66:c7:d4:8b:dc:d2: 90:14:b4:9e:be:59:e4:8a:6b:82:da:fa:b9:e3:ef: 5e:f1:fb:d4:c2:14:26:7c:b7:22:f3:dd:f2:52:1d: 25:63:43:c9:f4:12:a7:58:92:95:00:0a:93:75:43: ea:32:96:4f:f2:cd:58:47:fc:43:98:92:04:5a:6e: f9:36:5b:01:16:5d:5d:00:a6:84:c3:c1:73:16:1e: ab:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:60:1B:5A:27:D3:F9:CB:74:34:B5:95:4A:F5:C9:CB:4D:25:71:39 X509v3 Authority Key Identifier: keyid:D2:24:DF:F1:98:22:C5:B2:7C:7B:CC:16:BF:D8:BE:2A:38:4F:89:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DiedU9B7M6NxXr5xQhJdft17HNsjQS3dg6iUHrJZiVAv/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DiedU9B7M6NxXr5xQhJdft17HNsjQS3dg6iUHrJZiVAv/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cf:80:1b:fb:17:25:19:61:07:0f:96:eb:65:4b:24:a5:3b:92: 9a:69:53:b3:ab:7b:97:fc:70:be:a7:41:5e:82:c5:f6:65:34: e2:cd:54:52:39:47:0c:c4:4b:f8:76:f1:4a:fa:bb:23:cb:48: 77:d3:3c:13:aa:4a:e6:1f:5c:92:43:f1:b9:ca:f7:5d:05:0d: 2d:73:88:a7:d4:12:be:a2:87:9d:52:2f:f9:fd:9e:04:b2:20: 8b:d5:b9:ef:16:f5:99:af:87:93:ad:4d:fb:26:9f:c9:a5:88: a7:ce:99:3e:d5:0d:29:df:9d:70:2c:88:fd:bf:2b:d9:26:6f: b3:fd:cd:d6:23:05:01:30:0c:2d:84:10:a7:06:7c:83:82:b7: 64:4f:a2:7e:bf:20:70:6c:2c:a5:87:13:83:45:42:38:83:dd: 38:86:af:8f:7c:3e:8b:ad:c6:59:5f:55:40:3d:b9:0c:e6:51: 3f:3b:1b:80:18:4d:6d:83:fd:5c:7b:cd:f4:58:26:23:cf:f2: 62:96:6e:17:b7:5f:1d:79:4b:99:78:65:28:9b:d5:d0:af:24: a9:f7:c2:77:dc:ca:f7:4a:d1:8c:7f:ca:15:65:bc:53:41:43: 8d:59:5a:c3:bb:16:2a:1f:32:16:3d:d3:3e:53:03:27:0c:1b: 74:a6:9b:4d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUM0aVa52GNS72dIwMZDvAofPiXpwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDIyNERGRjE5ODIyQzVCMjdDN0JDQzE2QkZEOEJFMkEz ODRGODlBQTAeFw0yNjA0MTcxMjA5MzNaFw0yNjA0MTgxNjAzMzNaMDMxMTAvBgNV BAMTKERENjAxQjVBMjdEM0Y5Q0I3NDM0QjU5NTRBRjVDOUNCNEQyNTcxMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0gSzBrBv3bNJU/oP/pLUBEcTj 1Va6ty8/7A6H5WcAMnOoI1lHRlA4JU5vKq/DihO18IlL8sjnpYMfc4Bb9ET/by1t 0aCtgN3yg8WCF+3AiqM0Bz32HMZNOtKHV+Kdu8321O6eUhB4hzTBXopY9dCtxYwn hJiPcUVH9GmwALZ93Shij+g9v3scSGm18d8Dr4SQTOv7GHZirIROKqq9+kSiSmsZ B7kU4PDoudNJ52bH1Ivc0pAUtJ6+WeSKa4La+rnj717x+9TCFCZ8tyLz3fJSHSVj Q8n0EqdYkpUACpN1Q+oylk/yzVhH/EOYkgRabvk2WwEWXV0ApoTDwXMWHqvLAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU3WAbWifT+ct0NLWVSvXJy00lcTkwHwYDVR0j BBgwFoAU0iTf8ZgixbJ8e8wWv9i+KjhPiaowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRGllZFU5QjdNNk54WHI1eFFoSmRmdDE3SE5zalFTM2RnNmlVSHJKWmlW QXYvMS9EMjI0REZGMTk4MjJDNUIyN0M3QkNDMTZCRkQ4QkUyQTM4NEY4OUFBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QyMjRERkYxOTgyMkM1QjI3 QzdCQ0MxNkJGRDhCRTJBMzg0Rjg5QUEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RGllZFU5QjdNNk54WHI1eFFoSmRmdDE3SE5zalFTM2RnNmlVSHJKWmlWQXYvMS9E MjI0REZGMTk4MjJDNUIyN0M3QkNDMTZCRkQ4QkUyQTM4NEY4OUFBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAz4Ab+xclGWEHD5brZUskpTuSmmlTs6t7l/xwvqdBXoLF9mU04s1UUjlHDMRL +HbxSvq7I8tId9M8E6pK5h9ckkPxucr3XQUNLXOIp9QSvqKHnVIv+f2eBLIgi9W5 7xb1ma+Hk61N+yafyaWIp86ZPtUNKd+dcCyI/b8r2SZvs/3N1iMFATAMLYQQpwZ8 g4K3ZE+ifr8gcGwspYcTg0VCOIPdOIavj3w+i63GWV9VQD25DOZRPzsbgBhNbYP9 XHvN9FgmI8/yYpZuF7dfHXlLmXhlKJvV0K8kqffCd9zK90rRjH/KFWW8U0FDjVla w7sWKh8yFj3TPlMDJwwbdKabTQ== -----END CERTIFICATE-----Generated at Sat Apr 18 00:14:30 2026 by rpki-client