$ rpki-client -vvf rpki-repo.registro.br/repo/Fp6TmRBpWomiaLpVfwe9MP21GxpXBisJMDw5dVZYE5it/0/AA6BDBA8A7988C3948AEF17A952458519A026B8E.mft File: AA6BDBA8A7988C3948AEF17A952458519A026B8E.mft (raw, json) Hash identifier: xqyc/s5Vfmj1vItmqHUhBIB3EfLbb6Ogihp2nznZkbQ= Subject key identifier: 1D:A3:D4:CE:FC:C9:3A:07:AC:B8:B3:3E:60:35:44:50:97:96:3A:F4 Authority key identifier: AA:6B:DB:A8:A7:98:8C:39:48:AE:F1:7A:95:24:58:51:9A:02:6B:8E Certificate issuer: /CN=AA6BDBA8A7988C3948AEF17A952458519A026B8E Certificate serial: 58CDB2652DD6DCB17F35B317F1DE1962BB6679F8 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA6BDBA8A7988C3948AEF17A952458519A026B8E.cer Subject info access: rsync://rpki-repo.registro.br/repo/Fp6TmRBpWomiaLpVfwe9MP21GxpXBisJMDw5dVZYE5it/0/AA6BDBA8A7988C3948AEF17A952458519A026B8E.mft Manifest number: 0253 Signing time: Fri 17 Apr 2026 22:23:25 +0000 Manifest this update: Fri 17 Apr 2026 22:18:25 +0000 Manifest next update: Sat 18 Apr 2026 23:51:25 +0000 Files and hashes: 1: 3138372e312e3131322e302f32302d3234203d3e203533313633.roa (hash: jJj5HXT9E5TYByV+Ipm31dw1nJ7AvvwtFk15/nuiUKE=) 2: 3137372e3133372e3137362e302f32302d3234203d3e203533313633.roa (hash: JUgCe9fJMLFDamkQaJmWXqh4IK7eV3z102yXFggN2Dg=) 3: 323830343a313033303a3a2f33322d3634203d3e203533313633.roa (hash: 0htQC3163pF6cz0tfbyyeVCQmnM5++yB4NM3hhCnahk=) 4: AA6BDBA8A7988C3948AEF17A952458519A026B8E.crl (hash: 4LQrxAt98KEJ+uygMTmohPz6mTVPCUP+jr9cjnRYxTg=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Fp6TmRBpWomiaLpVfwe9MP21GxpXBisJMDw5dVZYE5it/0/AA6BDBA8A7988C3948AEF17A952458519A026B8E.crl rsync://rpki-repo.registro.br/repo/Fp6TmRBpWomiaLpVfwe9MP21GxpXBisJMDw5dVZYE5it/0/AA6BDBA8A7988C3948AEF17A952458519A026B8E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA6BDBA8A7988C3948AEF17A952458519A026B8E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Apr 2026 23:51:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:cd:b2:65:2d:d6:dc:b1:7f:35:b3:17:f1:de:19:62:bb:66:79:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA6BDBA8A7988C3948AEF17A952458519A026B8E Validity Not Before: Apr 17 22:18:25 2026 GMT Not After : Apr 18 23:51:25 2026 GMT Subject: CN=1DA3D4CEFCC93A07ACB8B33E6035445097963AF4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:8b:57:c9:fc:e9:d3:85:6f:20:77:65:ff:4d: 56:5d:b1:0c:eb:ec:47:fd:3f:27:7e:74:e7:c5:59: 42:f0:04:1c:4d:01:e7:8e:af:8b:80:54:43:31:70: 49:1a:87:72:38:72:68:29:c1:19:36:53:73:d8:33: 39:4c:d6:ae:ea:65:ae:7b:1a:09:0f:ad:e8:e7:62: 3b:27:04:03:a7:64:40:b0:c8:61:7f:f4:2b:42:7d: 12:7f:9f:3a:c3:89:1b:2a:23:4a:84:4b:f6:c5:fa: f3:da:c2:11:cb:ec:5a:cd:fb:e0:e7:74:f3:37:14: 5e:e4:71:b4:a4:2a:fd:64:c0:d1:46:73:c6:61:1b: 00:2e:c2:1d:24:c1:c6:24:a2:7c:48:84:52:b8:ea: 67:23:7e:31:99:70:c6:d6:61:b1:1f:7a:3d:ba:6f: 1f:de:c3:4e:9e:57:01:3c:2e:25:3c:e9:a2:c1:a9: 3a:98:42:25:6b:d7:29:64:d8:10:ea:6a:d2:22:19: db:0c:0a:2a:fd:a0:fc:05:7a:b4:e5:18:d7:c0:94: c7:9c:ae:b0:14:ae:37:28:d0:f1:a1:43:a2:8c:9c: 88:cf:02:29:db:66:1f:55:d6:f1:73:4e:cf:d6:44: 04:c2:5b:45:50:84:0b:5f:60:40:9d:22:f7:28:fe: e2:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:A3:D4:CE:FC:C9:3A:07:AC:B8:B3:3E:60:35:44:50:97:96:3A:F4 X509v3 Authority Key Identifier: keyid:AA:6B:DB:A8:A7:98:8C:39:48:AE:F1:7A:95:24:58:51:9A:02:6B:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Fp6TmRBpWomiaLpVfwe9MP21GxpXBisJMDw5dVZYE5it/0/AA6BDBA8A7988C3948AEF17A952458519A026B8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA6BDBA8A7988C3948AEF17A952458519A026B8E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fp6TmRBpWomiaLpVfwe9MP21GxpXBisJMDw5dVZYE5it/0/AA6BDBA8A7988C3948AEF17A952458519A026B8E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:35:58:18:81:d9:4f:5d:10:ee:4b:e7:bb:17:3e:1e:a9:fd: c2:f0:1f:89:38:6e:f7:15:23:66:62:fa:a6:20:ef:aa:48:55: ca:d1:52:72:f3:c9:2a:e6:56:0f:ed:11:a2:36:e0:67:7f:c5: 4f:1b:cc:11:32:58:17:8a:b4:42:e4:b1:bd:9d:df:ac:31:75: 74:73:66:5c:56:97:55:61:36:c9:c6:3e:de:ad:8b:6e:39:88: 2d:a1:ec:bf:eb:37:4b:9b:1e:e8:a1:50:4f:ed:38:f4:32:9a: 70:36:06:2d:8c:10:26:46:1a:e6:a2:da:03:00:b0:26:01:ee: 0d:98:a8:4a:7c:08:0d:9c:da:00:94:a0:34:83:7d:79:d3:68: 71:ee:19:bb:2e:d7:dc:dc:4c:cb:c8:d5:5f:d5:4a:42:44:53: 01:d8:bb:f3:89:a1:5e:31:9e:bd:9e:a9:3e:aa:84:01:9a:c2: e7:68:67:85:6c:3e:eb:14:4a:cd:20:ee:89:1a:86:e3:fb:52: 25:68:d5:fa:44:03:86:6e:95:22:0b:9b:30:16:14:f1:4b:f2: 07:d7:57:6e:45:5e:cf:da:3c:d5:13:03:81:b7:48:eb:14:4b: e1:95:02:79:c4:39:d4:60:91:62:28:52:01:90:16:bd:e9:77: 06:92:97:56 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUWM2yZS3W3LF/NbMX8d4ZYrtmefgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUE2QkRCQThBNzk4OEMzOTQ4QUVGMTdBOTUyNDU4NTE5 QTAyNkI4RTAeFw0yNjA0MTcyMjE4MjVaFw0yNjA0MTgyMzUxMjVaMDMxMTAvBgNV BAMTKDFEQTNENENFRkNDOTNBMDdBQ0I4QjMzRTYwMzU0NDUwOTc5NjNBRjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKi1fJ/OnThW8gd2X/TVZdsQzr 7Ef9Pyd+dOfFWULwBBxNAeeOr4uAVEMxcEkah3I4cmgpwRk2U3PYMzlM1q7qZa57 GgkPrejnYjsnBAOnZECwyGF/9CtCfRJ/nzrDiRsqI0qES/bF+vPawhHL7FrN++Dn dPM3FF7kcbSkKv1kwNFGc8ZhGwAuwh0kwcYkonxIhFK46mcjfjGZcMbWYbEfej26 bx/ew06eVwE8LiU86aLBqTqYQiVr1ylk2BDqatIiGdsMCir9oPwFerTlGNfAlMec rrAUrjco0PGhQ6KMnIjPAinbZh9V1vFzTs/WRATCW0VQhAtfYECdIvco/uLRAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUHaPUzvzJOgesuLM+YDVEUJeWOvQwHwYDVR0j BBgwFoAUqmvbqKeYjDlIrvF6lSRYUZoCa44wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRnA2VG1SQnBXb21pYUxwVmZ3ZTlNUDIxR3hwWEJpc0pNRHc1ZFZaWUU1 aXQvMC9BQTZCREJBOEE3OTg4QzM5NDhBRUYxN0E5NTI0NTg1MTlBMDI2QjhFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FBNkJEQkE4QTc5ODhDMzk0 OEFFRjE3QTk1MjQ1ODUxOUEwMjZCOEUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RnA2VG1SQnBXb21pYUxwVmZ3ZTlNUDIxR3hwWEJpc0pNRHc1ZFZaWUU1aXQvMC9B QTZCREJBOEE3OTg4QzM5NDhBRUYxN0E5NTI0NTg1MTlBMDI2QjhFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEADzVYGIHZT10Q7kvnuxc+Hqn9wvAfiThu9xUjZmL6piDvqkhVytFScvPJKuZW D+0RojbgZ3/FTxvMETJYF4q0QuSxvZ3frDF1dHNmXFaXVWE2ycY+3q2LbjmILaHs v+s3S5se6KFQT+049DKacDYGLYwQJkYa5qLaAwCwJgHuDZioSnwIDZzaAJSgNIN9 edNoce4Zuy7X3NxMy8jVX9VKQkRTAdi784mhXjGevZ6pPqqEAZrC52hnhWw+6xRK zSDuiRqG4/tSJWjV+kQDhm6VIgubMBYU8UvyB9dXbkVez9o81RMDgbdI6xRL4ZUC ecQ51GCRYihSAZAWvel3BpKXVg== -----END CERTIFICATE-----Generated at Sat Apr 18 11:27:54 2026 by rpki-client