$ rpki-client -vvf rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/03D8B16C2417C68C7325B3DF2EAD45A1208FA243.mft File: 03D8B16C2417C68C7325B3DF2EAD45A1208FA243.mft (raw, json) Hash identifier: Zl9YOMvkiNJhZ5xSu7bYdoGfGVylkoWpt0RqVQGLWkQ= Subject key identifier: C7:30:00:67:50:9A:04:DC:24:01:31:05:46:C8:96:6F:C7:88:F9:E3 Authority key identifier: 03:D8:B1:6C:24:17:C6:8C:73:25:B3:DF:2E:AD:45:A1:20:8F:A2:43 Certificate issuer: /CN=03D8B16C2417C68C7325B3DF2EAD45A1208FA243 Certificate serial: 7256423E3D327EF23131664FF6D2826A1FA663E4 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03D8B16C2417C68C7325B3DF2EAD45A1208FA243.cer Subject info access: rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/03D8B16C2417C68C7325B3DF2EAD45A1208FA243.mft Manifest number: 2B Signing time: Fri 17 Apr 2026 19:28:53 +0000 Manifest this update: Fri 17 Apr 2026 19:23:53 +0000 Manifest next update: Sat 18 Apr 2026 23:26:53 +0000 Files and hashes: 1: 323830343a3937383a3a2f33322d313238203d3e20323633303837.roa (hash: DAOPSVl3VjIiB/gugA2mB5ffypy61TmAdTW/kGDMNKg=) 2: 3137372e3133372e3230382e302f32302d3332203d3e20323633303837.roa (hash: T0Uz/Sk34aQgcSOQm+RkjvRwBySKQ/8Q27JSs8zyBXQ=) 3: 3137392e3130392e3136302e302f32302d3332203d3e20323633303837.roa (hash: 9009pfqHHSDfQmA16n3BSiSnUou3SNM0grpR12t1Qj4=) 4: 03D8B16C2417C68C7325B3DF2EAD45A1208FA243.crl (hash: BCprCGLUB14ZPx1lKdhtrHMThPy3uA9jPJ/pLNDViM0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/03D8B16C2417C68C7325B3DF2EAD45A1208FA243.crl rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/03D8B16C2417C68C7325B3DF2EAD45A1208FA243.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03D8B16C2417C68C7325B3DF2EAD45A1208FA243.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Apr 2026 23:26:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:56:42:3e:3d:32:7e:f2:31:31:66:4f:f6:d2:82:6a:1f:a6:63:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03D8B16C2417C68C7325B3DF2EAD45A1208FA243 Validity Not Before: Apr 17 19:23:53 2026 GMT Not After : Apr 18 23:26:53 2026 GMT Subject: CN=C7300067509A04DC2401310546C8966FC788F9E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:57:2d:30:96:ac:72:a0:36:15:54:e5:21:97: e4:bc:08:02:d6:47:3f:8f:fc:79:89:2b:84:1f:4f: 9e:da:7d:ad:07:31:f8:ed:80:1b:f0:33:a0:d5:51: 86:74:bb:0e:d1:4e:08:25:56:da:36:e3:d8:c3:7d: 19:4f:5d:9c:cb:ef:8b:42:0f:47:f1:9a:b5:87:6c: 8f:2c:4d:79:90:c9:fb:c8:f8:e1:4e:17:77:ba:14: 64:c6:75:19:d9:58:f0:ff:ff:65:16:75:ba:b0:e9: d6:bc:1b:99:2d:08:05:00:58:e7:df:c1:29:02:f0: d9:a0:04:3a:7b:4f:b7:5c:c3:1e:0d:7f:73:2e:6b: 77:13:a4:e2:5c:25:87:a9:a9:85:b7:35:d5:f3:eb: 19:b0:27:84:bb:c6:4d:da:95:4a:b4:d3:7e:13:57: cd:37:7a:86:00:9c:f6:6a:f2:a4:40:07:5c:fd:a2: f3:2b:fb:b6:62:3c:fe:8c:08:05:77:78:3d:0e:f8: 26:a9:eb:f8:db:88:6d:fb:cd:27:fe:f2:b9:9e:1f: ea:f0:a8:d7:01:d2:9d:6c:bd:72:1d:60:fc:9c:97: f0:24:bf:e3:00:0f:5f:e7:cd:05:01:e7:1a:44:c1: ac:35:d7:12:7b:97:a0:14:fe:c9:6b:3a:d6:81:b6: 9f:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:30:00:67:50:9A:04:DC:24:01:31:05:46:C8:96:6F:C7:88:F9:E3 X509v3 Authority Key Identifier: keyid:03:D8:B1:6C:24:17:C6:8C:73:25:B3:DF:2E:AD:45:A1:20:8F:A2:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/03D8B16C2417C68C7325B3DF2EAD45A1208FA243.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03D8B16C2417C68C7325B3DF2EAD45A1208FA243.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/03D8B16C2417C68C7325B3DF2EAD45A1208FA243.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:ee:34:ce:8d:76:01:0d:af:4f:a5:14:08:8d:b1:95:3a:0d: bb:5b:f5:08:73:c6:70:ac:0a:3b:ac:2b:db:93:3e:55:40:8b: 2a:9d:c9:b0:98:9d:0d:1b:58:89:65:1d:ff:10:8b:e8:be:e9: ac:ee:06:16:d7:b6:7c:d3:ed:fa:3a:e9:6e:a5:43:38:40:9e: f1:ab:e2:39:47:df:64:f9:b3:cc:41:3b:9d:a9:5e:67:0c:6a: 0e:9e:b1:f4:45:fe:f6:b5:a1:81:99:35:44:41:f1:d9:45:13: a5:5c:fd:ee:b1:d5:07:ce:3b:70:7d:69:96:66:04:62:c9:51: 35:37:31:b4:21:b2:56:89:4b:2c:eb:a8:81:28:2e:c9:36:67: 1d:3c:af:76:aa:49:5b:17:96:88:65:0d:62:81:5f:3f:36:44: eb:a2:b3:8a:05:b4:49:b9:8b:19:a5:9f:f3:76:08:fa:2a:56: 5f:72:6a:21:e0:a3:4b:86:70:51:14:fd:74:b5:fe:30:e8:7b: be:06:e3:77:ae:1a:4e:f1:09:02:0c:fc:fd:42:30:ee:c0:32: af:ec:31:98:9a:91:c7:ae:da:e8:43:e1:40:90:5d:24:28:bb: dc:6e:cf:bb:c2:08:4c:5f:4b:77:b5:4d:36:74:b8:02:d1:90: c8:bb:7f:87 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUclZCPj0yfvIxMWZP9tKCah+mY+QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDNEOEIxNkMyNDE3QzY4QzczMjVCM0RGMkVBRDQ1QTEy MDhGQTI0MzAeFw0yNjA0MTcxOTIzNTNaFw0yNjA0MTgyMzI2NTNaMDMxMTAvBgNV BAMTKEM3MzAwMDY3NTA5QTA0REMyNDAxMzEwNTQ2Qzg5NjZGQzc4OEY5RTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtVy0wlqxyoDYVVOUhl+S8CALW Rz+P/HmJK4QfT57afa0HMfjtgBvwM6DVUYZ0uw7RTgglVto249jDfRlPXZzL74tC D0fxmrWHbI8sTXmQyfvI+OFOF3e6FGTGdRnZWPD//2UWdbqw6da8G5ktCAUAWOff wSkC8NmgBDp7T7dcwx4Nf3Mua3cTpOJcJYepqYW3NdXz6xmwJ4S7xk3alUq0034T V803eoYAnPZq8qRAB1z9ovMr+7ZiPP6MCAV3eD0O+Cap6/jbiG37zSf+8rmeH+rw qNcB0p1svXIdYPycl/Akv+MAD1/nzQUB5xpEwaw11xJ7l6AU/slrOtaBtp8TAgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUxzAAZ1CaBNwkATEFRsiWb8eI+eMwHwYDVR0j BBgwFoAUA9ixbCQXxoxzJbPfLq1FoSCPokMwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9LRmU5RkczYXhIWm81R2VIRjNmRkZibVdDMTU3dTVuY1RXZGM2WUFxVm1C LzAvMDNEOEIxNkMyNDE3QzY4QzczMjVCM0RGMkVBRDQ1QTEyMDhGQTI0My5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8wM0Q4QjE2QzI0MTdDNjhDNzMy NUIzREYyRUFENDVBMTIwOEZBMjQzLmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0tG ZTlGRzNheEhabzVHZUhGM2ZGRmJtV0MxNTd1NW5jVFdkYzZZQXFWbUIvMC8wM0Q4 QjE2QzI0MTdDNjhDNzMyNUIzREYyRUFENDVBMTIwOEZBMjQzLm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA X+40zo12AQ2vT6UUCI2xlToNu1v1CHPGcKwKO6wr25M+VUCLKp3JsJidDRtYiWUd /xCL6L7prO4GFte2fNPt+jrpbqVDOECe8aviOUffZPmzzEE7naleZwxqDp6x9EX+ 9rWhgZk1REHx2UUTpVz97rHVB847cH1plmYEYslRNTcxtCGyVolLLOuogSguyTZn HTyvdqpJWxeWiGUNYoFfPzZE66KzigW0SbmLGaWf83YI+ipWX3JqIeCjS4ZwURT9 dLX+MOh7vgbjd64aTvEJAgz8/UIw7sAyr+wxmJqRx67a6EPhQJBdJCi73G7Pu8II TF9Ld7VNNnS4AtGQyLt/hw== -----END CERTIFICATE-----Generated at Sat Apr 18 01:21:25 2026 by rpki-client