$ rpki-client -vvf rpki-repo.registro.br/repo/kyWpGA2vP9UEDYfVNXwDktBCNDgsTRrJkxzQ5Bjm237/2/67A81E20D9B7972AADDB1C394778320F56BE023B.mft File: 67A81E20D9B7972AADDB1C394778320F56BE023B.mft (raw, json) Hash identifier: 2vKuWaTgybeVQOIZfnLN2/teePJuMOYrNsOLn1y7wVk= Subject key identifier: 8F:3B:2C:40:03:C4:4A:C3:0D:CE:0A:6F:CF:83:B4:76:D4:09:EB:89 Authority key identifier: 67:A8:1E:20:D9:B7:97:2A:AD:DB:1C:39:47:78:32:0F:56:BE:02:3B Certificate issuer: /CN=67A81E20D9B7972AADDB1C394778320F56BE023B Certificate serial: 72C42BBEC70D3D2EE51831DD3C610D305A4041B0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67A81E20D9B7972AADDB1C394778320F56BE023B.cer Subject info access: rsync://rpki-repo.registro.br/repo/kyWpGA2vP9UEDYfVNXwDktBCNDgsTRrJkxzQ5Bjm237/2/67A81E20D9B7972AADDB1C394778320F56BE023B.mft Manifest number: 01B2 Signing time: Fri 17 Apr 2026 09:05:03 +0000 Manifest this update: Fri 17 Apr 2026 09:00:03 +0000 Manifest next update: Sat 18 Apr 2026 09:59:03 +0000 Files and hashes: 1: 34352e3137312e3138392e302f32342d3234203d3e20323638373237.roa (hash: +UFS2xAxUtJTPsgIN5GML3ACDJRqNmPSE3oSqnNkiJQ=) 2: 34352e3137312e3138382e302f32342d3234203d3e20323638373237.roa (hash: WoMHGLPz9m8WHyv/c8eqB/ZBTGVzLYTCYHFQS4BRiVA=) 3: 67A81E20D9B7972AADDB1C394778320F56BE023B.crl (hash: gmqC2fbkEyF4bthXlnKiUdN+jI95+P4nV6VZ7oembtc=) 4: 34352e3137312e3138392e302f32342d3234203d3e203533313037.roa (hash: ZfM83HfKeKzzsIlJvLRkpTey+TNllfkHWy25NrM+coc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/kyWpGA2vP9UEDYfVNXwDktBCNDgsTRrJkxzQ5Bjm237/2/67A81E20D9B7972AADDB1C394778320F56BE023B.crl rsync://rpki-repo.registro.br/repo/kyWpGA2vP9UEDYfVNXwDktBCNDgsTRrJkxzQ5Bjm237/2/67A81E20D9B7972AADDB1C394778320F56BE023B.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67A81E20D9B7972AADDB1C394778320F56BE023B.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Apr 2026 09:59:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:c4:2b:be:c7:0d:3d:2e:e5:18:31:dd:3c:61:0d:30:5a:40:41:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67A81E20D9B7972AADDB1C394778320F56BE023B Validity Not Before: Apr 17 09:00:03 2026 GMT Not After : Apr 18 09:59:03 2026 GMT Subject: CN=8F3B2C4003C44AC30DCE0A6FCF83B476D409EB89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:03:29:4d:e8:56:58:74:05:a6:65:b4:70:e7: 2e:c1:25:14:d2:bb:0e:bd:42:23:9d:33:4e:52:df: 88:78:d6:1d:c4:12:36:c0:eb:fa:0f:d9:9c:5e:92: 6a:5e:3d:7b:00:63:2b:c9:5d:e5:82:f1:ee:ec:8b: 3f:f6:e9:51:25:14:82:3a:f6:f7:4f:e8:ea:e5:83: d0:f3:b9:8b:4a:35:e3:72:34:19:57:f1:7d:b3:f7: 7c:ff:ee:b4:2f:06:18:b6:7c:2d:d5:52:9a:8f:b3: c1:50:d8:ac:df:af:6e:da:bb:8a:71:45:c8:ac:da: 0c:5d:72:f1:8b:79:0b:b6:1a:50:30:12:14:be:36: 50:53:71:f6:f2:93:b8:e6:f7:0b:c9:d6:82:25:62: df:be:da:11:10:f4:e6:ee:4a:69:b3:c2:30:7d:e5: 6a:7c:04:b2:0f:e1:c0:05:bd:1c:25:53:5c:de:cd: 60:6b:34:f8:d1:d3:12:dd:36:f5:3e:7e:e1:56:f6: 77:18:0e:4c:f5:06:81:55:45:98:b7:4f:72:54:32: b7:7d:99:3c:06:82:44:5c:d6:9a:b9:c0:8f:79:8b: e3:f6:5c:67:6a:f2:a8:f6:53:9e:ea:aa:cd:0a:fd: 2f:f6:18:6e:67:b1:fd:01:dd:3c:09:05:11:40:c3: b5:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:3B:2C:40:03:C4:4A:C3:0D:CE:0A:6F:CF:83:B4:76:D4:09:EB:89 X509v3 Authority Key Identifier: keyid:67:A8:1E:20:D9:B7:97:2A:AD:DB:1C:39:47:78:32:0F:56:BE:02:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/kyWpGA2vP9UEDYfVNXwDktBCNDgsTRrJkxzQ5Bjm237/2/67A81E20D9B7972AADDB1C394778320F56BE023B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67A81E20D9B7972AADDB1C394778320F56BE023B.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/kyWpGA2vP9UEDYfVNXwDktBCNDgsTRrJkxzQ5Bjm237/2/67A81E20D9B7972AADDB1C394778320F56BE023B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:86:24:b9:58:4e:40:d0:42:2a:ee:4d:1f:e6:df:c9:db:ed: 9c:21:01:fe:16:b4:f1:53:d3:93:04:ee:82:62:dc:0a:46:0e: 82:91:ed:2a:44:be:14:35:fe:49:e9:ed:83:1e:c7:c0:cd:ff: 40:9b:17:65:21:5a:62:c6:32:99:73:5d:63:68:60:53:00:c4: 9e:24:75:7e:91:e2:39:16:83:85:3c:0e:e4:5b:a3:dc:24:5f: df:68:45:d6:2e:ce:6a:72:55:45:7f:d0:fa:9f:81:e7:4d:91: ca:68:99:a0:96:5d:3e:8f:df:78:32:f3:69:15:35:be:59:a3: 26:d5:57:32:87:4f:02:ab:f7:25:67:d2:11:2f:1a:48:59:18: a5:59:02:6f:0e:b1:f7:54:4e:97:ca:57:49:96:17:c4:5a:d0: a7:fc:02:65:b4:5e:3a:30:dc:4a:c9:84:f2:23:4e:62:81:56: 61:c6:e6:9c:b7:dc:a4:e4:31:a7:22:ef:d2:ec:1c:e6:72:86: 71:35:25:5b:8c:22:72:55:46:c7:0b:43:a5:2e:9d:32:cb:44: c4:e7:1c:ca:f7:f5:3d:b7:2b:db:76:a2:b6:9c:da:87:ca:ea: ee:af:1d:7f:8b:42:b1:bf:eb:13:49:e9:bb:ba:5f:c8:76:cd: 1a:fc:ef:13 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUcsQrvscNPS7lGDHdPGENMFpAQbAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjdBODFFMjBEOUI3OTcyQUFEREIxQzM5NDc3ODMyMEY1 NkJFMDIzQjAeFw0yNjA0MTcwOTAwMDNaFw0yNjA0MTgwOTU5MDNaMDMxMTAvBgNV BAMTKDhGM0IyQzQwMDNDNDRBQzMwRENFMEE2RkNGODNCNDc2RDQwOUVCODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCAylN6FZYdAWmZbRw5y7BJRTS uw69QiOdM05S34h41h3EEjbA6/oP2ZxekmpePXsAYyvJXeWC8e7siz/26VElFII6 9vdP6Orlg9DzuYtKNeNyNBlX8X2z93z/7rQvBhi2fC3VUpqPs8FQ2Kzfr27au4px Rcis2gxdcvGLeQu2GlAwEhS+NlBTcfbyk7jm9wvJ1oIlYt++2hEQ9ObuSmmzwjB9 5Wp8BLIP4cAFvRwlU1zezWBrNPjR0xLdNvU+fuFW9ncYDkz1BoFVRZi3T3JUMrd9 mTwGgkRc1pq5wI95i+P2XGdq8qj2U57qqs0K/S/2GG5nsf0B3TwJBRFAw7UjAgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUjzssQAPESsMNzgpvz4O0dtQJ64kwHwYDVR0j BBgwFoAUZ6geINm3lyqt2xw5R3gyD1a+AjswDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9reVdwR0EydlA5VUVEWWZWTlh3RGt0QkNORGdzVFJySmt4elE1QmptMjM3 LzIvNjdBODFFMjBEOUI3OTcyQUFEREIxQzM5NDc3ODMyMEY1NkJFMDIzQi5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS82N0E4MUUyMEQ5Qjc5NzJBQURE QjFDMzk0Nzc4MzIwRjU2QkUwMjNCLmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL2t5 V3BHQTJ2UDlVRURZZlZOWHdEa3RCQ05EZ3NUUnJKa3h6UTVCam0yMzcvMi82N0E4 MUUyMEQ5Qjc5NzJBQUREQjFDMzk0Nzc4MzIwRjU2QkUwMjNCLm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA Q4YkuVhOQNBCKu5NH+bfydvtnCEB/ha08VPTkwTugmLcCkYOgpHtKkS+FDX+Sent gx7HwM3/QJsXZSFaYsYymXNdY2hgUwDEniR1fpHiORaDhTwO5Fuj3CRf32hF1i7O anJVRX/Q+p+B502RymiZoJZdPo/feDLzaRU1vlmjJtVXModPAqv3JWfSES8aSFkY pVkCbw6x91ROl8pXSZYXxFrQp/wCZbReOjDcSsmE8iNOYoFWYcbmnLfcpOQxpyLv 0uwc5nKGcTUlW4wiclVGxwtDpS6dMstExOccyvf1Pbcr23aitpzah8rq7q8df4tC sb/rE0npu7pfyHbNGvzvEw== -----END CERTIFICATE-----Generated at Sat Apr 18 02:13:51 2026 by rpki-client