$ rpki-client -vvf rpki-repo.registro.br/repo/HMLUvn9tgWcSjVFsuG2WZspidAHjdii8gzPrwRFPF2Pn/1/9E1D7C478D880E093C83DCBE1DE40DE88EF8546F.mft File: 9E1D7C478D880E093C83DCBE1DE40DE88EF8546F.mft (raw, json) Hash identifier: rW/bd/e/X8hxRlHpcUZeHcHgWKn46F7i07oRAfF/pbQ= Subject key identifier: 20:F8:E3:4F:F9:2A:C9:F5:17:DF:BC:42:0B:37:C5:6B:AD:0A:12:27 Authority key identifier: 9E:1D:7C:47:8D:88:0E:09:3C:83:DC:BE:1D:E4:0D:E8:8E:F8:54:6F Certificate issuer: /CN=9E1D7C478D880E093C83DCBE1DE40DE88EF8546F Certificate serial: 42B7E87960BD5A57ECF912EBE9C5AA273F4066F9 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E1D7C478D880E093C83DCBE1DE40DE88EF8546F.cer Subject info access: rsync://rpki-repo.registro.br/repo/HMLUvn9tgWcSjVFsuG2WZspidAHjdii8gzPrwRFPF2Pn/1/9E1D7C478D880E093C83DCBE1DE40DE88EF8546F.mft Manifest number: 03E5 Signing time: Fri 17 Apr 2026 14:41:52 +0000 Manifest this update: Fri 17 Apr 2026 14:36:52 +0000 Manifest next update: Sat 18 Apr 2026 17:38:52 +0000 Files and hashes: 1: 323830343a6662303a3a2f33322d3438203d3e20323632383431.roa (hash: v+2+rJz6iTrl92A3cSRrSXD/H/i7QQv9bgROoB9ngI0=) 2: 9E1D7C478D880E093C83DCBE1DE40DE88EF8546F.crl (hash: mVNM3GGJNHgdXCrqnY25WFkmn30QD3gH8DGvfwC+n8M=) 3: 3137372e31302e32342e302f32312d3234203d3e20323632383431.roa (hash: qvY6fPG/7rdR7e32zdmZKtAZBMnznQefKZSC4WWrSts=) 4: 3137372e3133362e3231362e302f32312d3234203d3e20323632383431.roa (hash: bHUNtNhoumS+RI8GYZao3MMMc35+8kmX9sKSiB4hGX4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HMLUvn9tgWcSjVFsuG2WZspidAHjdii8gzPrwRFPF2Pn/1/9E1D7C478D880E093C83DCBE1DE40DE88EF8546F.crl rsync://rpki-repo.registro.br/repo/HMLUvn9tgWcSjVFsuG2WZspidAHjdii8gzPrwRFPF2Pn/1/9E1D7C478D880E093C83DCBE1DE40DE88EF8546F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E1D7C478D880E093C83DCBE1DE40DE88EF8546F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Apr 2026 17:38:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:b7:e8:79:60:bd:5a:57:ec:f9:12:eb:e9:c5:aa:27:3f:40:66:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9E1D7C478D880E093C83DCBE1DE40DE88EF8546F Validity Not Before: Apr 17 14:36:52 2026 GMT Not After : Apr 18 17:38:52 2026 GMT Subject: CN=20F8E34FF92AC9F517DFBC420B37C56BAD0A1227 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:1e:eb:74:66:0d:54:e7:62:c4:eb:02:6d:31: 05:a7:2f:2e:71:9d:fa:12:b8:f4:fe:e1:c7:85:22: f4:78:36:30:43:70:bd:81:21:46:43:3f:ec:0f:67: 5b:31:fe:aa:b1:3f:7d:eb:4e:5d:7f:ef:e9:8f:d8: ba:ab:0f:37:87:6d:14:e1:d3:75:35:5a:c9:bd:71: e2:42:39:6d:0a:10:96:c0:9a:11:6e:4f:c6:5a:24: 8e:70:63:28:e4:a4:74:ea:02:03:b0:3e:a9:76:1a: a0:b0:c8:a0:f3:c9:dd:b8:59:75:fe:7b:f6:19:62: 5b:d4:3d:85:ce:66:3b:db:5a:66:67:ed:4e:e1:61: ae:a9:d5:e1:ab:52:ce:09:f1:58:44:b1:05:d5:ae: b1:29:43:4d:cc:24:70:b4:f3:2a:ea:99:80:3a:94: bb:84:c7:b8:b2:8f:e4:56:4c:2f:5f:2a:87:94:2a: 7b:e2:49:67:6f:bc:f6:0a:d2:05:85:c5:b7:02:40: 18:a5:a9:c0:1a:28:b0:d6:49:9a:7d:07:11:2c:3f: 84:9b:f8:c7:d7:c2:72:cf:89:22:18:4c:cc:b8:6e: 75:19:95:92:06:94:ed:3c:02:4f:72:9e:70:3a:22: 78:16:c0:9e:db:b2:30:9a:d7:19:76:41:a4:d4:6a: d7:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:F8:E3:4F:F9:2A:C9:F5:17:DF:BC:42:0B:37:C5:6B:AD:0A:12:27 X509v3 Authority Key Identifier: keyid:9E:1D:7C:47:8D:88:0E:09:3C:83:DC:BE:1D:E4:0D:E8:8E:F8:54:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HMLUvn9tgWcSjVFsuG2WZspidAHjdii8gzPrwRFPF2Pn/1/9E1D7C478D880E093C83DCBE1DE40DE88EF8546F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E1D7C478D880E093C83DCBE1DE40DE88EF8546F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HMLUvn9tgWcSjVFsuG2WZspidAHjdii8gzPrwRFPF2Pn/1/9E1D7C478D880E093C83DCBE1DE40DE88EF8546F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:74:7b:fb:25:31:ae:8a:9e:3f:b9:9d:dc:75:58:a2:c4:64: d8:73:83:f7:91:a4:c0:0a:c1:df:67:da:cc:cf:d2:13:2b:2a: 2f:4d:8f:8e:e6:91:d8:1f:29:d4:b2:04:ed:e2:72:48:bc:ab: 98:66:34:93:f6:bf:8b:1b:a1:cf:48:a1:94:c0:f0:ad:4e:b5: 8a:62:4f:76:4f:5a:89:8d:fb:1a:ed:e4:70:fb:9e:97:9e:c1: 56:3e:19:ab:e3:5d:ef:34:02:ee:a1:a3:37:16:55:96:93:5b: db:a7:12:c6:90:a4:e6:97:c8:b0:b4:8b:11:7c:df:31:f7:9d: b9:b8:3c:ca:90:04:69:67:89:86:84:05:76:d0:ba:5b:46:9c: c2:63:4b:7a:79:db:9d:b7:88:f5:a6:a2:47:a8:b5:46:4e:32: e4:1d:bb:a6:f5:85:86:a7:94:a3:e0:d9:dc:38:46:e4:ed:79: 94:4b:28:e8:cf:62:1c:86:b0:dd:26:f5:4a:f5:e6:62:b7:9a: 0f:ef:48:f9:4e:41:8b:ff:33:7c:e5:ec:22:ea:36:f8:7a:69: 21:32:0c:ea:8c:a3:0e:dd:74:0d:f5:6c:41:f0:05:43:28:70: 65:79:e6:58:e2:4a:38:c8:3f:a9:df:c9:61:d1:93:3d:bb:72: 77:ed:76:4b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUQrfoeWC9Wlfs+RLr6cWqJz9AZvkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUUxRDdDNDc4RDg4MEUwOTNDODNEQ0JFMURFNDBERTg4 RUY4NTQ2RjAeFw0yNjA0MTcxNDM2NTJaFw0yNjA0MTgxNzM4NTJaMDMxMTAvBgNV BAMTKDIwRjhFMzRGRjkyQUM5RjUxN0RGQkM0MjBCMzdDNTZCQUQwQTEyMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoHut0Zg1U52LE6wJtMQWnLy5x nfoSuPT+4ceFIvR4NjBDcL2BIUZDP+wPZ1sx/qqxP33rTl1/7+mP2LqrDzeHbRTh 03U1Wsm9ceJCOW0KEJbAmhFuT8ZaJI5wYyjkpHTqAgOwPql2GqCwyKDzyd24WXX+ e/YZYlvUPYXOZjvbWmZn7U7hYa6p1eGrUs4J8VhEsQXVrrEpQ03MJHC08yrqmYA6 lLuEx7iyj+RWTC9fKoeUKnviSWdvvPYK0gWFxbcCQBilqcAaKLDWSZp9BxEsP4Sb +MfXwnLPiSIYTMy4bnUZlZIGlO08Ak9ynnA6IngWwJ7bsjCa1xl2QaTUatcVAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUIPjjT/kqyfUX37xCCzfFa60KEicwHwYDVR0j BBgwFoAUnh18R42IDgk8g9y+HeQN6I74VG8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSE1MVXZuOXRnV2NTalZGc3VHMldac3BpZEFIamRpaThnelByd1JGUEYy UG4vMS85RTFEN0M0NzhEODgwRTA5M0M4M0RDQkUxREU0MERFODhFRjg1NDZGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlFMUQ3QzQ3OEQ4ODBFMDkz QzgzRENCRTFERTQwREU4OEVGODU0NkYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SE1MVXZuOXRnV2NTalZGc3VHMldac3BpZEFIamRpaThnelByd1JGUEYyUG4vMS85 RTFEN0M0NzhEODgwRTA5M0M4M0RDQkUxREU0MERFODhFRjg1NDZGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFnR7+yUxroqeP7md3HVYosRk2HOD95GkwArB32fazM/SEysqL02PjuaR2B8p 1LIE7eJySLyrmGY0k/a/ixuhz0ihlMDwrU61imJPdk9aiY37Gu3kcPuel57BVj4Z q+Nd7zQC7qGjNxZVlpNb26cSxpCk5pfIsLSLEXzfMfedubg8ypAEaWeJhoQFdtC6 W0acwmNLennbnbeI9aaiR6i1Rk4y5B27pvWFhqeUo+DZ3DhG5O15lEso6M9iHIaw 3Sb1SvXmYreaD+9I+U5Bi/8zfOXsIuo2+HppITIM6oyjDt10DfVsQfAFQyhwZXnm WOJKOMg/qd/JYdGTPbtyd+12Sw== -----END CERTIFICATE-----Generated at Sat Apr 18 06:34:49 2026 by rpki-client