$ rpki-client -vvf rpki-repo.registro.br/repo/HKu16qqsQ6qXNXr7pKfnsjVhAPLzmHuHeBTQonNX6t1J/0/DBE1CEEFD3F3F2C6EFED441B9E6C10E43F9DB86E.mft File: DBE1CEEFD3F3F2C6EFED441B9E6C10E43F9DB86E.mft (raw, json) Hash identifier: HlTa5pi8kMPkj59kEksp6Vuha27NIuaH2N0NQCtJ8ZE= Subject key identifier: EA:EC:D9:31:2A:68:C5:49:18:5A:58:46:D5:E0:F1:4F:EA:46:20:04 Authority key identifier: DB:E1:CE:EF:D3:F3:F2:C6:EF:ED:44:1B:9E:6C:10:E4:3F:9D:B8:6E Certificate issuer: /CN=DBE1CEEFD3F3F2C6EFED441B9E6C10E43F9DB86E Certificate serial: 0A4EE716E4EC644FE91896DEDA4276A77531FE9D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBE1CEEFD3F3F2C6EFED441B9E6C10E43F9DB86E.cer Subject info access: rsync://rpki-repo.registro.br/repo/HKu16qqsQ6qXNXr7pKfnsjVhAPLzmHuHeBTQonNX6t1J/0/DBE1CEEFD3F3F2C6EFED441B9E6C10E43F9DB86E.mft Manifest number: 03B9 Signing time: Fri 17 Apr 2026 10:58:13 +0000 Manifest this update: Fri 17 Apr 2026 10:53:13 +0000 Manifest next update: Sat 18 Apr 2026 14:35:13 +0000 Files and hashes: 1: 34352e3138382e38322e302f32332d3233203d3e20323639353837.roa (hash: HoBoo1GA/eR/ql8oBZdRyvEIvJV03tZN4bSv6wnSky8=) 2: 34352e3138382e38322e302f32342d3234203d3e20323639353837.roa (hash: r5YW7FnYvvc1jpDgXF0uoaCEs5pkSIJLqsD5iBPxR9E=) 3: DBE1CEEFD3F3F2C6EFED441B9E6C10E43F9DB86E.crl (hash: zgrhBUeviPAHjbyPR7GDoPEmYy77mJosRoFiKhK8zZc=) 4: 34352e3138382e38332e302f32342d3234203d3e20323639353837.roa (hash: Q3dMZW4m0i8ZEtk/e/iL3FIayWVGHMUwvvB2YivyJDc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HKu16qqsQ6qXNXr7pKfnsjVhAPLzmHuHeBTQonNX6t1J/0/DBE1CEEFD3F3F2C6EFED441B9E6C10E43F9DB86E.crl rsync://rpki-repo.registro.br/repo/HKu16qqsQ6qXNXr7pKfnsjVhAPLzmHuHeBTQonNX6t1J/0/DBE1CEEFD3F3F2C6EFED441B9E6C10E43F9DB86E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBE1CEEFD3F3F2C6EFED441B9E6C10E43F9DB86E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Apr 2026 14:35:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:4e:e7:16:e4:ec:64:4f:e9:18:96:de:da:42:76:a7:75:31:fe:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DBE1CEEFD3F3F2C6EFED441B9E6C10E43F9DB86E Validity Not Before: Apr 17 10:53:13 2026 GMT Not After : Apr 18 14:35:13 2026 GMT Subject: CN=EAECD9312A68C549185A5846D5E0F14FEA462004 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e9:b5:26:79:95:5e:eb:af:57:c9:68:b0:5e: 7d:e8:0f:50:4d:5b:71:1d:6c:d5:33:19:2f:ee:4b: ef:4d:cd:ce:69:34:0c:35:2d:93:85:0a:96:1a:c5: 6a:17:1a:d9:0f:cc:e5:67:cf:c2:2b:ad:0e:0b:fe: 13:f9:fa:37:19:3c:49:78:a1:57:0d:36:b5:06:f7: aa:58:cd:70:1b:11:57:af:04:d2:ad:5c:2d:47:4a: 56:f6:f2:82:5e:35:c0:37:b6:bd:02:90:9a:0f:eb: 24:41:5c:44:88:a1:b9:dd:9e:8d:88:54:47:1e:4f: 01:d6:ef:6b:8a:e9:bd:57:4c:7f:48:de:4b:8b:c4: 9c:eb:73:9e:47:c2:b7:c4:52:1d:ac:82:9e:68:2b: d8:f0:95:c4:4d:10:05:0a:40:74:b9:b4:89:93:94: 0a:60:b6:3c:de:8b:c7:08:3b:f2:99:48:45:05:86: 61:31:cd:72:17:ca:72:3b:e4:ef:89:41:a5:cb:b4: 15:86:57:f5:1b:25:20:d3:82:9c:4b:07:a0:3e:67: 80:1a:01:1c:45:7b:98:4c:cb:5d:48:20:23:16:ea: 3e:a8:7a:c8:4e:2b:b9:5e:9f:4e:7e:1d:eb:3b:7e: 18:f3:e1:a2:95:e0:30:c8:aa:3c:e5:07:d9:ea:c9: 1b:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:EC:D9:31:2A:68:C5:49:18:5A:58:46:D5:E0:F1:4F:EA:46:20:04 X509v3 Authority Key Identifier: keyid:DB:E1:CE:EF:D3:F3:F2:C6:EF:ED:44:1B:9E:6C:10:E4:3F:9D:B8:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HKu16qqsQ6qXNXr7pKfnsjVhAPLzmHuHeBTQonNX6t1J/0/DBE1CEEFD3F3F2C6EFED441B9E6C10E43F9DB86E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBE1CEEFD3F3F2C6EFED441B9E6C10E43F9DB86E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HKu16qqsQ6qXNXr7pKfnsjVhAPLzmHuHeBTQonNX6t1J/0/DBE1CEEFD3F3F2C6EFED441B9E6C10E43F9DB86E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:c9:38:82:73:d6:af:91:d1:23:bc:a6:4d:f1:66:5e:95:ba: 9f:58:3a:12:32:1f:94:ca:f1:d1:d6:b2:0b:b9:c9:ef:ab:dc: 36:39:0d:ee:76:a2:a1:64:07:ac:6a:71:53:27:14:5b:c1:b5: 42:cd:11:73:af:b3:0e:8e:6e:a1:91:59:4c:b6:56:8e:5d:1e: ba:7f:95:a6:1c:1a:37:a4:31:ab:18:2f:24:b4:6d:8f:a9:ad: c4:3b:1c:14:dc:32:5f:65:f7:d2:ee:c4:91:9a:b0:65:25:a7: f9:01:2c:53:7a:eb:c3:79:b1:cd:d6:ed:f1:2d:c6:04:0f:2a: b6:02:35:1d:b8:00:1a:ee:af:dd:88:85:2b:26:d3:12:35:22: e2:cd:b2:bb:d5:83:9e:b3:cc:db:c9:f0:04:c1:45:94:8a:5f: 54:1e:38:74:e5:b0:25:5e:11:65:94:b6:3e:49:1b:b6:07:39: cc:73:0d:20:40:46:97:e0:47:52:b3:af:5c:2c:da:93:fb:52: 5c:b7:87:50:92:01:81:23:59:60:ce:47:11:30:22:bd:25:05: 87:51:ac:ef:1e:a9:21:c0:f5:c3:0e:da:74:df:06:05:d7:29: 4c:1f:8f:5a:17:a1:0f:7a:48:c1:7a:72:06:51:4a:5c:65:a5: 31:20:2e:da -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUCk7nFuTsZE/pGJbe2kJ2p3Ux/p0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREJFMUNFRUZEM0YzRjJDNkVGRUQ0NDFCOUU2QzEwRTQz RjlEQjg2RTAeFw0yNjA0MTcxMDUzMTNaFw0yNjA0MTgxNDM1MTNaMDMxMTAvBgNV BAMTKEVBRUNEOTMxMkE2OEM1NDkxODVBNTg0NkQ1RTBGMTRGRUE0NjIwMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw6bUmeZVe669XyWiwXn3oD1BN W3EdbNUzGS/uS+9Nzc5pNAw1LZOFCpYaxWoXGtkPzOVnz8IrrQ4L/hP5+jcZPEl4 oVcNNrUG96pYzXAbEVevBNKtXC1HSlb28oJeNcA3tr0CkJoP6yRBXESIobndno2I VEceTwHW72uK6b1XTH9I3kuLxJzrc55HwrfEUh2sgp5oK9jwlcRNEAUKQHS5tImT lApgtjzei8cIO/KZSEUFhmExzXIXynI75O+JQaXLtBWGV/UbJSDTgpxLB6A+Z4Aa ARxFe5hMy11IICMW6j6oeshOK7len05+Hes7fhjz4aKV4DDIqjzlB9nqyRvBAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU6uzZMSpoxUkYWlhG1eDxT+pGIAQwHwYDVR0j BBgwFoAU2+HO79Pz8sbv7UQbnmwQ5D+duG4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSEt1MTZxcXNRNnFYTlhyN3BLZm5zalZoQVBMem1IdUhlQlRRb25OWDZ0 MUovMC9EQkUxQ0VFRkQzRjNGMkM2RUZFRDQ0MUI5RTZDMTBFNDNGOURCODZFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RCRTFDRUVGRDNGM0YyQzZF RkVENDQxQjlFNkMxMEU0M0Y5REI4NkUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SEt1MTZxcXNRNnFYTlhyN3BLZm5zalZoQVBMem1IdUhlQlRRb25OWDZ0MUovMC9E QkUxQ0VFRkQzRjNGMkM2RUZFRDQ0MUI5RTZDMTBFNDNGOURCODZFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEACck4gnPWr5HRI7ymTfFmXpW6n1g6EjIflMrx0dayC7nJ76vcNjkN7naioWQH rGpxUycUW8G1Qs0Rc6+zDo5uoZFZTLZWjl0eun+VphwaN6QxqxgvJLRtj6mtxDsc FNwyX2X30u7EkZqwZSWn+QEsU3rrw3mxzdbt8S3GBA8qtgI1HbgAGu6v3YiFKybT EjUi4s2yu9WDnrPM28nwBMFFlIpfVB44dOWwJV4RZZS2Pkkbtgc5zHMNIEBGl+BH UrOvXCzak/tSXLeHUJIBgSNZYM5HETAivSUFh1Gs7x6pIcD1ww7adN8GBdcpTB+P WhehD3pIwXpyBlFKXGWlMSAu2g== -----END CERTIFICATE-----Generated at Fri Apr 17 23:07:59 2026 by rpki-client