$ rpki-client -vvf rpki-repo.registro.br/repo/HDQ6xhnCKLYLcYw5LRNouGF1EmaEBEkjisw8jZiLpuuS/0/8F91E515016C4617D482162163052E1ABB4B35B2.mft File: 8F91E515016C4617D482162163052E1ABB4B35B2.mft (raw, json) Hash identifier: ig46wyBcrL+pSZ9IoUtz7uSzKtLNRY32x2iv/K+zcYI= Subject key identifier: 07:56:52:F1:F5:D6:AE:24:AA:AB:BA:57:DB:F7:CC:90:A4:85:CC:EA Authority key identifier: 8F:91:E5:15:01:6C:46:17:D4:82:16:21:63:05:2E:1A:BB:4B:35:B2 Certificate issuer: /CN=8F91E515016C4617D482162163052E1ABB4B35B2 Certificate serial: 21EFFB69BBB160901B6BB2A73596BB428E581708 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F91E515016C4617D482162163052E1ABB4B35B2.cer Subject info access: rsync://rpki-repo.registro.br/repo/HDQ6xhnCKLYLcYw5LRNouGF1EmaEBEkjisw8jZiLpuuS/0/8F91E515016C4617D482162163052E1ABB4B35B2.mft Manifest number: DC Signing time: Fri 17 Apr 2026 07:52:24 +0000 Manifest this update: Fri 17 Apr 2026 07:47:24 +0000 Manifest next update: Sat 18 Apr 2026 10:31:24 +0000 Files and hashes: 1: 8F91E515016C4617D482162163052E1ABB4B35B2.crl (hash: pmnTE5J8Co157eh4n7mINBXUj3+BsAnfwkR21RaX14M=) 2: 323830343a343164343a3a2f33322d3438203d3e20323637343539.roa (hash: cbbbeABJ9NLDJEbDdv4N61/lZInNTiYeAX5NeNySgEA=) 3: 3139322e3134312e38382e302f32322d3234203d3e20323637343539.roa (hash: /G2cxsR4X4qBWNv/KiJY7TQZmL6JoIuPaKjPtYPbUyE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HDQ6xhnCKLYLcYw5LRNouGF1EmaEBEkjisw8jZiLpuuS/0/8F91E515016C4617D482162163052E1ABB4B35B2.crl rsync://rpki-repo.registro.br/repo/HDQ6xhnCKLYLcYw5LRNouGF1EmaEBEkjisw8jZiLpuuS/0/8F91E515016C4617D482162163052E1ABB4B35B2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F91E515016C4617D482162163052E1ABB4B35B2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Apr 2026 10:31:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:ef:fb:69:bb:b1:60:90:1b:6b:b2:a7:35:96:bb:42:8e:58:17:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F91E515016C4617D482162163052E1ABB4B35B2 Validity Not Before: Apr 17 07:47:24 2026 GMT Not After : Apr 18 10:31:24 2026 GMT Subject: CN=075652F1F5D6AE24AAABBA57DBF7CC90A485CCEA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:59:8e:69:a2:07:bd:e4:32:a0:f2:6b:8a:d7: a5:a1:5f:5d:0c:ec:a6:a5:d1:45:68:de:12:92:84: 58:5b:62:4f:8a:1f:b6:32:e9:54:4b:5f:9b:d5:d3: f8:20:cf:42:e3:9b:37:a2:ac:92:74:e9:fb:ea:3a: c7:8f:98:ca:6c:51:3a:70:c7:ed:11:9b:25:34:d0: 45:51:75:b0:19:19:4a:41:49:72:f7:fe:b2:cb:fd: e0:e1:f1:95:df:73:98:57:eb:a9:f6:ac:ec:b2:af: eb:a1:ba:9f:4e:6e:96:64:db:99:69:47:9e:7a:94: e9:2b:6a:f0:fa:33:b5:c2:46:8d:05:c8:de:ba:ab: 58:99:00:fa:4d:f0:eb:72:02:1b:b1:19:d3:34:09: cc:18:32:6b:79:9d:c5:7d:7b:e5:56:f7:b0:29:2c: d5:0f:1d:42:92:09:80:30:c8:8f:18:df:f5:9a:7c: 29:15:49:ee:2b:4d:5b:2e:b5:dc:15:7e:ea:11:e6: d7:f9:41:b1:6f:1a:e8:ec:0c:d5:90:5b:98:2f:c5: d0:05:ee:31:93:06:f7:4d:1c:38:11:4d:37:5f:d4: 4f:d5:89:3e:79:4f:92:85:96:ed:b3:3a:8b:de:3a: b3:a7:07:27:b3:31:b7:76:4a:2d:ce:9b:1a:c6:aa: 92:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:56:52:F1:F5:D6:AE:24:AA:AB:BA:57:DB:F7:CC:90:A4:85:CC:EA X509v3 Authority Key Identifier: keyid:8F:91:E5:15:01:6C:46:17:D4:82:16:21:63:05:2E:1A:BB:4B:35:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HDQ6xhnCKLYLcYw5LRNouGF1EmaEBEkjisw8jZiLpuuS/0/8F91E515016C4617D482162163052E1ABB4B35B2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F91E515016C4617D482162163052E1ABB4B35B2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HDQ6xhnCKLYLcYw5LRNouGF1EmaEBEkjisw8jZiLpuuS/0/8F91E515016C4617D482162163052E1ABB4B35B2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:92:b4:b3:96:42:02:86:41:b6:52:59:a2:cf:e3:c6:c9:03: 1e:e1:1f:3a:ee:07:ec:c7:8e:1d:1f:c9:8d:8c:1b:2a:9e:cb: 81:df:65:aa:53:99:69:9c:81:ba:89:93:15:53:68:43:63:87: fd:a5:b4:e3:99:1d:b4:a0:b0:6f:4f:c7:45:15:dc:45:47:de: 35:a0:c4:a2:31:d6:e2:57:da:ee:47:d1:10:87:d3:80:34:0e: e5:a7:fb:91:2f:7e:4b:c5:c3:9f:bd:e4:07:c9:5b:77:87:67: a0:f7:79:ed:9f:cf:43:66:01:49:05:ff:0d:39:85:cd:58:d3: b9:14:62:3c:d2:80:d3:8a:aa:04:a1:58:f2:a4:6d:1f:ca:b6: 0f:6d:59:bd:8d:0d:3e:9e:7a:cc:f0:12:2a:a9:7b:6a:64:79: a3:a1:68:f6:13:20:68:2a:12:50:a6:9b:d9:b8:8c:b4:19:e4: 1b:a6:f7:95:02:10:5c:fb:ec:4c:55:82:30:8f:02:87:d6:0d: a9:8b:84:5a:3c:94:85:a9:48:ec:bc:76:a7:01:78:34:ea:76: 5f:f9:2c:48:ce:2e:96:71:b7:6b:20:66:c0:2e:8f:96:1e:ed: 30:82:c4:59:c8:9c:20:6a:70:3a:3d:d7:a8:7e:39:e1:7c:06: 0f:a7:e0:eb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUIe/7abuxYJAba7KnNZa7Qo5YFwgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY5MUU1MTUwMTZDNDYxN0Q0ODIxNjIxNjMwNTJFMUFC QjRCMzVCMjAeFw0yNjA0MTcwNzQ3MjRaFw0yNjA0MTgxMDMxMjRaMDMxMTAvBgNV BAMTKDA3NTY1MkYxRjVENkFFMjRBQUFCQkE1N0RCRjdDQzkwQTQ4NUNDRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCKWY5poge95DKg8muK16WhX10M 7Kal0UVo3hKShFhbYk+KH7Yy6VRLX5vV0/ggz0LjmzeirJJ06fvqOsePmMpsUTpw x+0RmyU00EVRdbAZGUpBSXL3/rLL/eDh8ZXfc5hX66n2rOyyr+uhup9ObpZk25lp R556lOkravD6M7XCRo0FyN66q1iZAPpN8OtyAhuxGdM0CcwYMmt5ncV9e+VW97Ap LNUPHUKSCYAwyI8Y3/WafCkVSe4rTVsutdwVfuoR5tf5QbFvGujsDNWQW5gvxdAF 7jGTBvdNHDgRTTdf1E/ViT55T5KFlu2zOoveOrOnByezMbd2Si3OmxrGqpI/AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUB1ZS8fXWriSqq7pX2/fMkKSFzOowHwYDVR0j BBgwFoAUj5HlFQFsRhfUghYhYwUuGrtLNbIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSERRNnhobkNLTFlMY1l3NUxSTm91R0YxRW1hRUJFa2ppc3c4alppTHB1 dVMvMC84RjkxRTUxNTAxNkM0NjE3RDQ4MjE2MjE2MzA1MkUxQUJCNEIzNUIyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhGOTFFNTE1MDE2QzQ2MTdE NDgyMTYyMTYzMDUyRTFBQkI0QjM1QjIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SERRNnhobkNLTFlMY1l3NUxSTm91R0YxRW1hRUJFa2ppc3c4alppTHB1dVMvMC84 RjkxRTUxNTAxNkM0NjE3RDQ4MjE2MjE2MzA1MkUxQUJCNEIzNUIyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMZK0s5ZCAoZBtlJZos/jxskDHuEfOu4H7MeOHR/JjYwbKp7Lgd9lqlOZaZyB uomTFVNoQ2OH/aW045kdtKCwb0/HRRXcRUfeNaDEojHW4lfa7kfREIfTgDQO5af7 kS9+S8XDn73kB8lbd4dnoPd57Z/PQ2YBSQX/DTmFzVjTuRRiPNKA04qqBKFY8qRt H8q2D21ZvY0NPp56zPASKql7amR5o6Fo9hMgaCoSUKab2biMtBnkG6b3lQIQXPvs TFWCMI8Ch9YNqYuEWjyUhalI7Lx2pwF4NOp2X/ksSM4ulnG3ayBmwC6Plh7tMILE WcicIGpwOj3XqH454XwGD6fg6w== -----END CERTIFICATE-----Generated at Fri Apr 17 22:10:23 2026 by rpki-client