$ rpki-client -vvf rpki-repo.registro.br/repo/HLAfbLhAenLQ9t3AP35NCibj3HYeqFL8Kz3on3WpoYSE/0/FAF093F291860536EFFC93934E77DC96693302DB.mft File: FAF093F291860536EFFC93934E77DC96693302DB.mft (raw, json) Hash identifier: 1yx+e88od6OUXRfFQVn5HAbgZqDmx0Nkm7damLntPDU= Subject key identifier: 45:31:D2:6B:CE:15:2E:A3:DB:AA:76:D4:28:A4:93:40:51:4E:6C:20 Authority key identifier: FA:F0:93:F2:91:86:05:36:EF:FC:93:93:4E:77:DC:96:69:33:02:DB Certificate issuer: /CN=FAF093F291860536EFFC93934E77DC96693302DB Certificate serial: 79FACC89C082D7FF09A97C58B17C3756798FFDD2 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAF093F291860536EFFC93934E77DC96693302DB.cer Subject info access: rsync://rpki-repo.registro.br/repo/HLAfbLhAenLQ9t3AP35NCibj3HYeqFL8Kz3on3WpoYSE/0/FAF093F291860536EFFC93934E77DC96693302DB.mft Manifest number: 0291 Signing time: Fri 17 Apr 2026 18:44:58 +0000 Manifest this update: Fri 17 Apr 2026 18:39:58 +0000 Manifest next update: Sat 18 Apr 2026 20:32:58 +0000 Files and hashes: 1: 323830343a323833343a3a2f33322d3334203d3e20323633393437.roa (hash: kfg2dpneGGmCrUHXsBibXZqTKYQRGTWgwu5Dg9g6PyU=) 2: 3133382e3235352e31322e302f32332d3234203d3e20323633393437.roa (hash: dbJPXyrTCsLpCzcijXf9A1x/KHQUtPR++8OB+EdCqkQ=) 3: FAF093F291860536EFFC93934E77DC96693302DB.crl (hash: di2O6+xu4N2aYWol3M0DlBrG+3BRFji2tY/Rr/88RHE=) 4: 3133382e3235352e31352e302f32342d3234203d3e20323633393437.roa (hash: uQ2hTKKN6Qzw9x/PKbUfxmURwLfodfxJcvZkF9+RONE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HLAfbLhAenLQ9t3AP35NCibj3HYeqFL8Kz3on3WpoYSE/0/FAF093F291860536EFFC93934E77DC96693302DB.crl rsync://rpki-repo.registro.br/repo/HLAfbLhAenLQ9t3AP35NCibj3HYeqFL8Kz3on3WpoYSE/0/FAF093F291860536EFFC93934E77DC96693302DB.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAF093F291860536EFFC93934E77DC96693302DB.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Apr 2026 20:32:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:fa:cc:89:c0:82:d7:ff:09:a9:7c:58:b1:7c:37:56:79:8f:fd:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FAF093F291860536EFFC93934E77DC96693302DB Validity Not Before: Apr 17 18:39:58 2026 GMT Not After : Apr 18 20:32:58 2026 GMT Subject: CN=4531D26BCE152EA3DBAA76D428A49340514E6C20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e2:04:03:b0:4a:2d:f6:be:a2:5a:00:69:9d: 5f:74:c0:fb:a6:44:a5:e4:6d:3a:93:f2:37:95:77: 97:15:d6:a8:a1:f7:54:45:2c:29:cd:0e:ce:23:69: 66:99:93:89:18:ce:24:29:c6:c2:c2:cd:27:92:99: b3:b9:f2:0e:00:32:5e:0f:6b:41:df:fa:f2:87:70: a6:01:c2:75:05:02:46:80:75:d1:cf:fe:72:ce:40: c6:fc:69:eb:3e:92:17:55:f1:50:f9:08:af:76:1d: ca:d5:3c:20:5c:af:81:8a:5c:44:e2:f6:c6:48:e7: 14:a3:d9:bd:39:01:9f:40:a6:24:cb:0e:78:e9:7c: f4:11:51:3c:cc:d8:82:4c:13:68:6b:fd:bb:11:49: 14:58:91:c6:48:94:4b:30:be:ed:3a:c3:63:64:eb: d2:30:8a:b3:ba:20:ba:b6:d7:a3:60:59:f2:b2:58: 81:8b:73:67:4d:fb:3a:d9:e6:40:05:d7:d0:0b:f6: 11:16:a3:3f:ed:47:1d:c1:ac:80:83:35:96:28:6d: ca:cf:64:e8:1d:b4:3e:d9:2c:ab:81:f6:5a:99:2e: a8:26:c9:00:23:5e:ef:71:e5:32:3b:09:38:02:4b: 08:ab:4e:20:5c:04:0a:0d:ba:b2:08:49:7b:72:84: a6:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:31:D2:6B:CE:15:2E:A3:DB:AA:76:D4:28:A4:93:40:51:4E:6C:20 X509v3 Authority Key Identifier: keyid:FA:F0:93:F2:91:86:05:36:EF:FC:93:93:4E:77:DC:96:69:33:02:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HLAfbLhAenLQ9t3AP35NCibj3HYeqFL8Kz3on3WpoYSE/0/FAF093F291860536EFFC93934E77DC96693302DB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAF093F291860536EFFC93934E77DC96693302DB.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HLAfbLhAenLQ9t3AP35NCibj3HYeqFL8Kz3on3WpoYSE/0/FAF093F291860536EFFC93934E77DC96693302DB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:b8:21:c3:d0:61:b6:71:bd:77:49:5e:55:9b:f8:cc:38:72: 22:2f:5c:b6:5c:16:41:a3:de:37:a7:d1:3c:c2:bc:ea:cd:9c: e6:09:c7:4a:7a:cd:92:a8:c2:df:ee:bf:7c:4d:46:b9:e2:d4: c4:d0:e3:42:e4:55:4e:81:2d:1b:ec:b4:e6:4f:aa:55:30:a1: 0c:c4:70:da:b4:9f:e1:cc:19:28:e9:72:4a:39:fd:3f:06:c8: 34:af:b0:e4:c6:9c:99:3b:47:50:f5:1f:fa:75:67:29:3b:cb: 9a:41:49:50:dc:21:09:35:18:3c:85:4b:ce:3c:78:37:3c:15: 3b:8f:f2:fe:51:b9:22:b9:1a:4f:84:c9:5c:43:11:ff:c7:40: 80:24:b4:9d:67:ba:cc:a5:7f:78:6d:71:39:8c:ab:0f:a5:e6: e0:eb:02:8d:44:15:96:ef:b5:ab:a6:ba:bb:4e:be:d3:63:c6: 5f:7a:4d:40:0f:66:b2:cd:62:1b:d1:9a:73:44:41:3e:09:c3: ab:4c:83:87:55:9a:62:e3:06:e0:cf:75:7c:7d:77:0a:ce:af: 49:40:2b:18:d1:02:b7:84:89:bf:43:b7:b3:e0:03:ec:ca:0d: 9e:17:ee:08:be:56:c2:34:3f:ad:23:5a:39:2f:d1:4f:d9:f7: 36:e7:a4:c0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUefrMicCC1/8JqXxYsXw3VnmP/dIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkFGMDkzRjI5MTg2MDUzNkVGRkM5MzkzNEU3N0RDOTY2 OTMzMDJEQjAeFw0yNjA0MTcxODM5NThaFw0yNjA0MTgyMDMyNThaMDMxMTAvBgNV BAMTKDQ1MzFEMjZCQ0UxNTJFQTNEQkFBNzZENDI4QTQ5MzQwNTE0RTZDMjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx4gQDsEot9r6iWgBpnV90wPum RKXkbTqT8jeVd5cV1qih91RFLCnNDs4jaWaZk4kYziQpxsLCzSeSmbO58g4AMl4P a0Hf+vKHcKYBwnUFAkaAddHP/nLOQMb8aes+khdV8VD5CK92HcrVPCBcr4GKXETi 9sZI5xSj2b05AZ9ApiTLDnjpfPQRUTzM2IJME2hr/bsRSRRYkcZIlEswvu06w2Nk 69IwirO6ILq216NgWfKyWIGLc2dN+zrZ5kAF19AL9hEWoz/tRx3BrICDNZYobcrP ZOgdtD7ZLKuB9lqZLqgmyQAjXu9x5TI7CTgCSwirTiBcBAoNurIISXtyhKbdAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQURTHSa84VLqPbqnbUKKSTQFFObCAwHwYDVR0j BBgwFoAU+vCT8pGGBTbv/JOTTnfclmkzAtswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSExBZmJMaEFlbkxROXQzQVAzNU5DaWJqM0hZZXFGTDhLejNvbjNXcG9Z U0UvMC9GQUYwOTNGMjkxODYwNTM2RUZGQzkzOTM0RTc3REM5NjY5MzMwMkRCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZBRjA5M0YyOTE4NjA1MzZF RkZDOTM5MzRFNzdEQzk2NjkzMzAyREIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SExBZmJMaEFlbkxROXQzQVAzNU5DaWJqM0hZZXFGTDhLejNvbjNXcG9ZU0UvMC9G QUYwOTNGMjkxODYwNTM2RUZGQzkzOTM0RTc3REM5NjY5MzMwMkRCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAd7ghw9BhtnG9d0leVZv4zDhyIi9ctlwWQaPeN6fRPMK86s2c5gnHSnrNkqjC 3+6/fE1GueLUxNDjQuRVToEtG+y05k+qVTChDMRw2rSf4cwZKOlySjn9PwbINK+w 5MacmTtHUPUf+nVnKTvLmkFJUNwhCTUYPIVLzjx4NzwVO4/y/lG5IrkaT4TJXEMR /8dAgCS0nWe6zKV/eG1xOYyrD6Xm4OsCjUQVlu+1q6a6u06+02PGX3pNQA9mss1i G9Gac0RBPgnDq0yDh1WaYuMG4M91fH13Cs6vSUArGNECt4SJv0O3s+AD7MoNnhfu CL5WwjQ/rSNaOS/RT9n3NuekwA== -----END CERTIFICATE-----Generated at Sat Apr 18 09:00:11 2026 by rpki-client