$ rpki-client -vvf rpki-repo.registro.br/repo/GnwgmtgFXnyazSMVhX71Lz61u3xtQcR5GMu6icaLNNNK/1/D3E0F3C614B2220C8F77C152E1A67F4B0BFB1625.mft File: D3E0F3C614B2220C8F77C152E1A67F4B0BFB1625.mft (raw, json) Hash identifier: BvbGBVlgonpf7GKOsx22uQD92P9Xm2KZWNgaeF3GLz4= Subject key identifier: A6:60:F0:5F:75:53:81:AF:8A:74:19:25:80:4D:62:C0:AD:3C:65:2F Authority key identifier: D3:E0:F3:C6:14:B2:22:0C:8F:77:C1:52:E1:A6:7F:4B:0B:FB:16:25 Certificate issuer: /CN=D3E0F3C614B2220C8F77C152E1A67F4B0BFB1625 Certificate serial: 5303584B8C7459545338095A3A3ED39B51FFC20E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3E0F3C614B2220C8F77C152E1A67F4B0BFB1625.cer Subject info access: rsync://rpki-repo.registro.br/repo/GnwgmtgFXnyazSMVhX71Lz61u3xtQcR5GMu6icaLNNNK/1/D3E0F3C614B2220C8F77C152E1A67F4B0BFB1625.mft Manifest number: 021C Signing time: Fri 17 Apr 2026 10:57:02 +0000 Manifest this update: Fri 17 Apr 2026 10:52:02 +0000 Manifest next update: Sat 18 Apr 2026 14:24:02 +0000 Files and hashes: 1: D3E0F3C614B2220C8F77C152E1A67F4B0BFB1625.crl (hash: porRAD4YKHQv+2aDPfRnQf2N45Erezi9YwwhKzoyUk8=) 2: 3137302e3234342e3232382e302f32322d3332203d3e20323636353233.roa (hash: Aepplb3/Qb7/bHjz6mPwayNENChEBh3u6Vjv+i2yE4k=) 3: 323830343a333931343a3a2f33322d313238203d3e20323636353233.roa (hash: 9roY73NWuAZU9MCJ1kPd9cddgXyFU4+UGZmaxI/un3o=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GnwgmtgFXnyazSMVhX71Lz61u3xtQcR5GMu6icaLNNNK/1/D3E0F3C614B2220C8F77C152E1A67F4B0BFB1625.crl rsync://rpki-repo.registro.br/repo/GnwgmtgFXnyazSMVhX71Lz61u3xtQcR5GMu6icaLNNNK/1/D3E0F3C614B2220C8F77C152E1A67F4B0BFB1625.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3E0F3C614B2220C8F77C152E1A67F4B0BFB1625.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Apr 2026 14:24:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:03:58:4b:8c:74:59:54:53:38:09:5a:3a:3e:d3:9b:51:ff:c2:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D3E0F3C614B2220C8F77C152E1A67F4B0BFB1625 Validity Not Before: Apr 17 10:52:02 2026 GMT Not After : Apr 18 14:24:02 2026 GMT Subject: CN=A660F05F755381AF8A741925804D62C0AD3C652F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:bd:ce:a8:c9:e0:ec:da:54:72:6f:4a:c6:b7: 35:28:a7:c6:7c:04:17:e5:f1:56:bd:84:f4:95:63: 40:6a:c7:c0:ed:47:01:95:ab:fe:b6:48:51:fa:48: 4e:d8:38:7e:66:90:5e:93:a2:a9:aa:d2:39:fa:61: 14:00:f6:dc:4e:4d:66:70:98:48:7d:7c:47:7b:0f: a9:e5:57:f2:5b:0b:ba:3c:63:4b:46:8f:06:c8:fb: 18:85:1e:52:2d:81:16:51:f7:9d:1c:81:bb:ee:ee: 6a:28:a0:4f:49:59:fb:3b:2e:65:a7:15:de:9a:4c: cc:3e:f4:9b:ac:af:33:92:5b:6a:4a:bc:00:dc:d8: 2d:7d:37:cd:2b:00:c4:b2:ad:2d:a1:f5:e6:f9:76: a4:6c:e4:32:29:95:d4:89:c6:cf:79:54:39:03:5d: 46:43:2a:8e:af:0e:99:4e:6c:86:e4:06:a2:d8:54: 3d:11:97:cf:ce:02:d5:c6:2f:5a:62:c8:3a:d3:f6: c5:7d:66:f0:1f:e6:21:83:8d:03:e1:91:9f:ff:f0: c8:38:bc:58:e4:19:2d:10:29:9f:ca:96:6c:ea:90: 51:d7:f8:5e:d9:37:c1:c4:e1:76:68:76:c4:b5:0b: c8:2a:0c:c5:6d:67:f9:f6:87:b3:bc:f9:e5:c7:91: 6e:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:60:F0:5F:75:53:81:AF:8A:74:19:25:80:4D:62:C0:AD:3C:65:2F X509v3 Authority Key Identifier: keyid:D3:E0:F3:C6:14:B2:22:0C:8F:77:C1:52:E1:A6:7F:4B:0B:FB:16:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GnwgmtgFXnyazSMVhX71Lz61u3xtQcR5GMu6icaLNNNK/1/D3E0F3C614B2220C8F77C152E1A67F4B0BFB1625.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3E0F3C614B2220C8F77C152E1A67F4B0BFB1625.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GnwgmtgFXnyazSMVhX71Lz61u3xtQcR5GMu6icaLNNNK/1/D3E0F3C614B2220C8F77C152E1A67F4B0BFB1625.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:8d:a3:6e:6a:92:55:3c:30:b1:12:47:0a:84:d1:fa:b9:a8: f0:e4:da:de:36:64:57:d9:48:2e:cb:60:86:9d:db:3e:53:44: 51:d8:91:83:10:92:c8:e6:01:b6:59:13:fd:67:ab:88:6d:b7: 30:91:f8:72:48:8e:fb:7b:40:fa:98:d4:3b:aa:9e:ac:bc:b4: ed:71:80:00:89:7b:bb:fb:1b:0d:12:e9:10:7d:e2:e1:b3:d0: 6c:19:8c:0f:19:e6:e0:49:45:64:cb:1f:65:e4:13:be:43:2d: b9:10:f6:d7:6f:76:07:80:27:96:8f:a1:7e:b2:a1:3e:75:3c: 5c:28:5a:af:b2:01:75:4f:da:c9:3d:86:59:f2:f5:75:df:05: 74:a6:f9:80:63:86:28:49:9b:66:0f:11:e3:fe:ae:bf:f1:11: 02:02:ee:e5:bc:d0:03:88:18:13:ae:be:18:7f:78:13:e6:a2: 2e:49:3a:26:38:51:2d:1c:09:a2:53:24:6c:8d:ef:0d:ef:11: b3:fd:51:e8:14:da:48:ba:d0:a3:9c:3f:9e:da:87:7d:56:e8: 18:3c:00:11:ff:be:de:56:3c:9f:a2:81:0d:e7:45:20:51:9d: 2e:61:55:87:58:a3:57:2e:a1:6f:33:e1:01:f3:04:7d:bf:7e: 52:cc:1c:12 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUUwNYS4x0WVRTOAlaOj7Tm1H/wg4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDNFMEYzQzYxNEIyMjIwQzhGNzdDMTUyRTFBNjdGNEIw QkZCMTYyNTAeFw0yNjA0MTcxMDUyMDJaFw0yNjA0MTgxNDI0MDJaMDMxMTAvBgNV BAMTKEE2NjBGMDVGNzU1MzgxQUY4QTc0MTkyNTgwNEQ2MkMwQUQzQzY1MkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpvc6oyeDs2lRyb0rGtzUop8Z8 BBfl8Va9hPSVY0Bqx8DtRwGVq/62SFH6SE7YOH5mkF6Toqmq0jn6YRQA9txOTWZw mEh9fEd7D6nlV/JbC7o8Y0tGjwbI+xiFHlItgRZR950cgbvu7moooE9JWfs7LmWn Fd6aTMw+9JusrzOSW2pKvADc2C19N80rAMSyrS2h9eb5dqRs5DIpldSJxs95VDkD XUZDKo6vDplObIbkBqLYVD0Rl8/OAtXGL1piyDrT9sV9ZvAf5iGDjQPhkZ//8Mg4 vFjkGS0QKZ/KlmzqkFHX+F7ZN8HE4XZodsS1C8gqDMVtZ/n2h7O8+eXHkW5bAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUpmDwX3VTga+KdBklgE1iwK08ZS8wHwYDVR0j BBgwFoAU0+DzxhSyIgyPd8FS4aZ/Swv7FiUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR253Z210Z0ZYbnlhelNNVmhYNzFMejYxdTN4dFFjUjVHTXU2aWNhTE5O TksvMS9EM0UwRjNDNjE0QjIyMjBDOEY3N0MxNTJFMUE2N0Y0QjBCRkIxNjI1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QzRTBGM0M2MTRCMjIyMEM4 Rjc3QzE1MkUxQTY3RjRCMEJGQjE2MjUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R253Z210Z0ZYbnlhelNNVmhYNzFMejYxdTN4dFFjUjVHTXU2aWNhTE5OTksvMS9E M0UwRjNDNjE0QjIyMjBDOEY3N0MxNTJFMUE2N0Y0QjBCRkIxNjI1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWI2jbmqSVTwwsRJHCoTR+rmo8OTa3jZkV9lILstghp3bPlNEUdiRgxCSyOYB tlkT/WeriG23MJH4ckiO+3tA+pjUO6qerLy07XGAAIl7u/sbDRLpEH3i4bPQbBmM Dxnm4ElFZMsfZeQTvkMtuRD21292B4Anlo+hfrKhPnU8XChar7IBdU/ayT2GWfL1 dd8FdKb5gGOGKEmbZg8R4/6uv/ERAgLu5bzQA4gYE66+GH94E+aiLkk6JjhRLRwJ olMkbI3vDe8Rs/1R6BTaSLrQo5w/ntqHfVboGDwAEf++3lY8n6KBDedFIFGdLmFV h1ijVy6hbzPhAfMEfb9+UswcEg== -----END CERTIFICATE-----Generated at Fri Apr 17 22:37:03 2026 by rpki-client