$ rpki-client -vvf rpki-repo.registro.br/repo/FkKsXz3HgtZQBwSgr67hasDv5YQwpYtyQYtnPjFPWjpJ/0/8AA7FC80CEE8DB7AA9EF850F86EAFAB222EBB0F8.mft File: 8AA7FC80CEE8DB7AA9EF850F86EAFAB222EBB0F8.mft (raw, json) Hash identifier: T2DjIXo3Uuf/umLy7K4YyK/CyCOkvONm1LCrrLAqusU= Subject key identifier: 22:22:9E:0F:24:45:B6:E1:6E:44:22:61:2D:D4:E2:AA:71:33:62:F7 Authority key identifier: 8A:A7:FC:80:CE:E8:DB:7A:A9:EF:85:0F:86:EA:FA:B2:22:EB:B0:F8 Certificate issuer: /CN=8AA7FC80CEE8DB7AA9EF850F86EAFAB222EBB0F8 Certificate serial: 1EEC01652006D3A8BBFCD1272EFFAD1D7A4FBFA5 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AA7FC80CEE8DB7AA9EF850F86EAFAB222EBB0F8.cer Subject info access: rsync://rpki-repo.registro.br/repo/FkKsXz3HgtZQBwSgr67hasDv5YQwpYtyQYtnPjFPWjpJ/0/8AA7FC80CEE8DB7AA9EF850F86EAFAB222EBB0F8.mft Manifest number: 12 Signing time: Fri 17 Apr 2026 16:40:28 +0000 Manifest this update: Fri 17 Apr 2026 16:35:28 +0000 Manifest next update: Sat 18 Apr 2026 18:48:28 +0000 Files and hashes: 1: 8AA7FC80CEE8DB7AA9EF850F86EAFAB222EBB0F8.crl (hash: hLaUBvJAsk17hkJmasOX89dkCvaREToHCSvb87wKp00=) 2: 34352e3138362e3138342e302f32322d3332203d3e20323639343436.roa (hash: A/bGn0M8I11kkBKL1Dc8DIL7FIf9wKcH2GOFHDWUBGo=) 3: 323830343a363463303a3a2f33322d313238203d3e20323639343436.roa (hash: hs6q1hStmZQII04PhysFNXRC8WSUjJye1T2F5jvEh+o=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/FkKsXz3HgtZQBwSgr67hasDv5YQwpYtyQYtnPjFPWjpJ/0/8AA7FC80CEE8DB7AA9EF850F86EAFAB222EBB0F8.crl rsync://rpki-repo.registro.br/repo/FkKsXz3HgtZQBwSgr67hasDv5YQwpYtyQYtnPjFPWjpJ/0/8AA7FC80CEE8DB7AA9EF850F86EAFAB222EBB0F8.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AA7FC80CEE8DB7AA9EF850F86EAFAB222EBB0F8.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Apr 2026 18:48:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:ec:01:65:20:06:d3:a8:bb:fc:d1:27:2e:ff:ad:1d:7a:4f:bf:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AA7FC80CEE8DB7AA9EF850F86EAFAB222EBB0F8 Validity Not Before: Apr 17 16:35:28 2026 GMT Not After : Apr 18 18:48:28 2026 GMT Subject: CN=22229E0F2445B6E16E4422612DD4E2AA713362F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:af:8a:46:a1:2f:df:e8:0a:d0:cf:44:04:24: 2c:86:84:79:a6:41:db:28:8b:11:9b:40:a0:c8:be: d0:8a:ac:0e:07:e2:59:85:1f:83:02:82:94:cc:56: 98:4d:da:fc:d3:34:9f:e2:f0:d0:d7:d2:04:ed:f0: 6f:e4:b0:c6:d3:ae:69:93:6d:18:26:47:e5:f4:81: 32:09:d0:69:30:75:80:74:ac:42:52:5a:b9:d0:2e: b9:07:27:6b:4b:16:cf:51:33:15:2c:8e:b5:d3:cb: be:84:eb:80:dc:38:d8:d5:23:55:b8:84:53:84:12: a7:70:81:15:be:c5:38:1a:51:e4:5d:ae:22:50:58: 84:27:0a:0a:b3:41:a6:f2:4b:ea:6e:5c:36:fb:a6: 8f:18:bf:4d:c2:23:cd:10:18:33:81:a7:74:c4:1b: 49:3d:d7:9c:83:68:95:61:35:68:4c:6b:dc:2b:b6: c9:ad:b7:70:76:b5:b5:b6:6d:1b:de:fe:91:a7:4f: 41:d4:b5:eb:f4:d6:e9:a5:b8:94:ca:88:bc:76:c1: 01:85:59:f7:ef:a6:2e:58:ed:a2:07:6e:78:93:b9: 28:63:bb:aa:79:95:dc:c2:4d:86:e1:d2:1e:6c:96: d7:b1:22:3b:15:28:92:8b:c6:a3:93:a9:71:0c:28: 87:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:22:9E:0F:24:45:B6:E1:6E:44:22:61:2D:D4:E2:AA:71:33:62:F7 X509v3 Authority Key Identifier: keyid:8A:A7:FC:80:CE:E8:DB:7A:A9:EF:85:0F:86:EA:FA:B2:22:EB:B0:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/FkKsXz3HgtZQBwSgr67hasDv5YQwpYtyQYtnPjFPWjpJ/0/8AA7FC80CEE8DB7AA9EF850F86EAFAB222EBB0F8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AA7FC80CEE8DB7AA9EF850F86EAFAB222EBB0F8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/FkKsXz3HgtZQBwSgr67hasDv5YQwpYtyQYtnPjFPWjpJ/0/8AA7FC80CEE8DB7AA9EF850F86EAFAB222EBB0F8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:27:62:a5:cd:43:6b:28:88:a0:70:3e:02:f6:43:c6:61:c6: 9b:a3:b0:3c:19:c3:22:ad:84:d5:59:1a:4b:09:fb:f5:fc:0b: 23:87:ee:3b:26:79:89:b0:7f:f3:00:cf:de:a0:c8:f3:33:d3: ff:9f:b6:2a:02:4e:94:f7:6a:2f:08:a3:98:f3:37:38:36:85: 77:c1:de:82:e8:31:cf:ca:f2:5e:f0:27:d9:84:f6:11:64:8c: d7:22:a1:19:ac:f4:af:71:dd:8d:c2:a7:12:41:69:9e:b6:37: 51:e3:b0:ed:12:26:62:e7:97:f8:0f:a5:3e:07:3b:b8:30:cb: 8d:62:1e:22:54:f3:54:f9:a9:eb:d3:20:f2:79:3d:24:a2:8c: c6:48:0b:d6:36:9c:31:52:52:fe:66:f1:3f:49:dd:4f:b9:44: 61:31:a7:07:9b:0a:de:6c:ac:f4:72:20:61:f3:c4:b5:71:5e: a0:90:ec:ef:fd:30:c0:30:5f:24:86:04:30:80:e6:55:47:02: 0e:30:14:c4:17:03:c6:10:7b:89:23:5b:3d:01:02:df:4e:59: 64:0f:76:db:e9:3b:d2:37:51:4d:bf:19:4f:95:12:3e:48:26: 52:a0:87:74:fe:fa:66:39:d3:1f:a2:96:25:30:37:99:c5:12: bc:dc:25:a1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUHuwBZSAG06i7/NEnLv+tHXpPv6UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEFBN0ZDODBDRUU4REI3QUE5RUY4NTBGODZFQUZBQjIy MkVCQjBGODAeFw0yNjA0MTcxNjM1MjhaFw0yNjA0MTgxODQ4MjhaMDMxMTAvBgNV BAMTKDIyMjI5RTBGMjQ0NUI2RTE2RTQ0MjI2MTJERDRFMkFBNzEzMzYyRjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2r4pGoS/f6ArQz0QEJCyGhHmm QdsoixGbQKDIvtCKrA4H4lmFH4MCgpTMVphN2vzTNJ/i8NDX0gTt8G/ksMbTrmmT bRgmR+X0gTIJ0GkwdYB0rEJSWrnQLrkHJ2tLFs9RMxUsjrXTy76E64DcONjVI1W4 hFOEEqdwgRW+xTgaUeRdriJQWIQnCgqzQabyS+puXDb7po8Yv03CI80QGDOBp3TE G0k915yDaJVhNWhMa9wrtsmtt3B2tbW2bRve/pGnT0HUtev01umluJTKiLx2wQGF Wffvpi5Y7aIHbniTuShju6p5ldzCTYbh0h5sltexIjsVKJKLxqOTqXEMKIdPAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUIiKeDyRFtuFuRCJhLdTiqnEzYvcwHwYDVR0j BBgwFoAUiqf8gM7o23qp74UPhur6siLrsPgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRmtLc1h6M0hndFpRQndTZ3I2N2hhc0R2NVlRd3BZdHlRWXRuUGpGUFdq cEovMC84QUE3RkM4MENFRThEQjdBQTlFRjg1MEY4NkVBRkFCMjIyRUJCMEY4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhBQTdGQzgwQ0VFOERCN0FB OUVGODUwRjg2RUFGQUIyMjJFQkIwRjguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RmtLc1h6M0hndFpRQndTZ3I2N2hhc0R2NVlRd3BZdHlRWXRuUGpGUFdqcEovMC84 QUE3RkM4MENFRThEQjdBQTlFRjg1MEY4NkVBRkFCMjIyRUJCMEY4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGydipc1DayiIoHA+AvZDxmHGm6OwPBnDIq2E1VkaSwn79fwLI4fuOyZ5ibB/ 8wDP3qDI8zPT/5+2KgJOlPdqLwijmPM3ODaFd8Hegugxz8ryXvAn2YT2EWSM1yKh Gaz0r3HdjcKnEkFpnrY3UeOw7RImYueX+A+lPgc7uDDLjWIeIlTzVPmp69Mg8nk9 JKKMxkgL1jacMVJS/mbxP0ndT7lEYTGnB5sK3mys9HIgYfPEtXFeoJDs7/0wwDBf JIYEMIDmVUcCDjAUxBcDxhB7iSNbPQEC305ZZA922+k70jdRTb8ZT5USPkgmUqCH dP76ZjnTH6KWJTA3mcUSvNwloQ== -----END CERTIFICATE-----Generated at Sat Apr 18 07:29:34 2026 by rpki-client