$ rpki-client -vvf rpki-repo.registro.br/repo/2DGz1c5AV3YSwGNpuREFdp16D64Xnf4xr4MqENLGqHro/0/FEFA5C3125BC7E984553E748696FBFC85C1705D0.mft File: FEFA5C3125BC7E984553E748696FBFC85C1705D0.mft (raw, json) Hash identifier: 5Rei7nTqZIDVjzJ08dtH88DGQ7+Yqbg7FuDvwOnFiIA= Subject key identifier: BF:F3:82:F1:08:38:D5:1F:BD:1A:BB:43:12:CD:06:F1:F6:F3:45:DA Authority key identifier: FE:FA:5C:31:25:BC:7E:98:45:53:E7:48:69:6F:BF:C8:5C:17:05:D0 Certificate issuer: /CN=FEFA5C3125BC7E984553E748696FBFC85C1705D0 Certificate serial: 1D1E8D9905D553C431C7560E62FB6C92D4145A20 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FEFA5C3125BC7E984553E748696FBFC85C1705D0.cer Subject info access: rsync://rpki-repo.registro.br/repo/2DGz1c5AV3YSwGNpuREFdp16D64Xnf4xr4MqENLGqHro/0/FEFA5C3125BC7E984553E748696FBFC85C1705D0.mft Manifest number: 11 Signing time: Wed 08 Apr 2026 01:37:32 +0000 Manifest this update: Wed 08 Apr 2026 01:32:32 +0000 Manifest next update: Thu 09 Apr 2026 01:41:32 +0000 Files and hashes: 1: 34352e3233372e3233362e302f32322d3234203d3e20323638323935.roa (hash: kSiwVkFSht5sHqzzFD1P2mJQVYUOoEbi/B67iFq/CGA=) 2: 323830343a346566383a3a2f33322d3438203d3e20323638323935.roa (hash: CxZxM3BLNvFYW65Y76zKHnqGUy02Y19OL8fydS8gq8Y=) 3: FEFA5C3125BC7E984553E748696FBFC85C1705D0.crl (hash: RtEJxRPq5MnPmwBQKHT22mqwWKeF7NRTt2/GvQpetb8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2DGz1c5AV3YSwGNpuREFdp16D64Xnf4xr4MqENLGqHro/0/FEFA5C3125BC7E984553E748696FBFC85C1705D0.crl rsync://rpki-repo.registro.br/repo/2DGz1c5AV3YSwGNpuREFdp16D64Xnf4xr4MqENLGqHro/0/FEFA5C3125BC7E984553E748696FBFC85C1705D0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FEFA5C3125BC7E984553E748696FBFC85C1705D0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 09 Apr 2026 01:41:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:1e:8d:99:05:d5:53:c4:31:c7:56:0e:62:fb:6c:92:d4:14:5a:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FEFA5C3125BC7E984553E748696FBFC85C1705D0 Validity Not Before: Apr 8 01:32:32 2026 GMT Not After : Apr 9 01:41:32 2026 GMT Subject: CN=BFF382F10838D51FBD1ABB4312CD06F1F6F345DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:d3:40:44:ce:44:a7:bc:9b:49:4c:b8:ae:4b: 00:08:7f:b3:d5:2c:03:45:ed:d0:31:6e:fb:31:cf: ca:d1:c1:d5:92:c5:2c:82:8a:33:87:cb:77:a9:3f: eb:1f:1a:2c:a4:0d:28:e6:64:92:d8:b6:b5:f1:51: 1d:66:4d:91:5f:67:2e:08:38:10:92:d2:71:02:10: 30:76:63:6a:3f:8d:4c:91:7b:6c:aa:e9:83:57:50: 85:58:51:aa:a0:25:88:77:71:dd:5a:26:5e:2f:1f: 50:d9:ac:c1:56:59:1b:e8:55:58:06:b8:e8:07:03: 65:ea:6a:e9:29:f5:c3:30:a8:91:28:c4:87:c6:08: 43:d6:d1:f5:65:64:b9:d1:da:76:be:0d:a0:3c:c1: 1c:96:c6:67:1e:b0:16:21:24:20:5c:94:cf:47:7c: 1b:5d:0a:5d:dc:6d:3d:93:3a:36:7b:51:96:f1:a5: a6:24:b4:6d:43:c3:2e:43:e1:be:a4:f2:c4:c4:5b: 98:e6:9e:25:32:3f:51:a4:4f:d6:fb:ac:f0:43:3f: f9:6a:6f:96:85:4a:7f:be:1b:bb:82:af:73:40:fb: bd:6e:08:8f:a6:51:7c:37:dc:b4:fb:b2:ef:0f:a8: cc:6a:38:a3:25:fa:9c:66:0f:0a:1f:cb:59:52:67: aa:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:F3:82:F1:08:38:D5:1F:BD:1A:BB:43:12:CD:06:F1:F6:F3:45:DA X509v3 Authority Key Identifier: keyid:FE:FA:5C:31:25:BC:7E:98:45:53:E7:48:69:6F:BF:C8:5C:17:05:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2DGz1c5AV3YSwGNpuREFdp16D64Xnf4xr4MqENLGqHro/0/FEFA5C3125BC7E984553E748696FBFC85C1705D0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FEFA5C3125BC7E984553E748696FBFC85C1705D0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2DGz1c5AV3YSwGNpuREFdp16D64Xnf4xr4MqENLGqHro/0/FEFA5C3125BC7E984553E748696FBFC85C1705D0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:6c:d4:4b:bc:8b:ea:55:27:a3:5d:cd:e9:1d:3c:9e:2e:5e: 90:71:96:49:01:a6:75:f3:79:44:1f:41:d4:6b:c1:3c:f5:1f: 42:b2:8d:78:c0:a2:4b:b8:3f:74:93:af:e9:14:f5:9e:fa:bb: 53:3d:82:d6:cd:00:1a:1e:11:97:f8:00:da:7b:59:27:e4:ae: 94:ff:d8:52:6f:61:67:c7:c8:90:a1:ec:73:5a:2c:97:1f:ae: 45:21:8a:86:b1:c6:96:d1:9a:78:ad:30:cd:62:4d:58:0e:2c: 03:60:dc:43:4b:84:20:7d:7e:2e:c3:39:50:44:db:95:02:7f: d5:9d:0a:4d:14:4a:46:ad:77:c6:e9:10:5a:27:7b:ec:6d:d6: b8:70:13:cd:6f:07:dc:ee:0b:e0:62:3a:7e:ea:fd:7a:11:9f: cf:77:3c:b6:5f:e2:fd:8e:16:4f:bc:8f:40:65:67:59:81:e4: 6b:52:13:bf:ce:7e:35:ce:98:93:4f:78:dd:69:de:31:a9:49: 72:50:0c:f2:ec:3c:7c:e8:8d:bb:9d:45:7a:dd:e9:b2:29:1c: de:15:55:f4:4d:dd:03:42:e2:b1:13:a8:1a:4d:f0:45:b8:59: be:b8:e5:7c:cc:59:49:1d:a2:50:f2:33:3d:62:9c:d9:70:7b: 7b:4d:a9:1a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUHR6NmQXVU8Qxx1YOYvtsktQUWiAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkVGQTVDMzEyNUJDN0U5ODQ1NTNFNzQ4Njk2RkJGQzg1 QzE3MDVEMDAeFw0yNjA0MDgwMTMyMzJaFw0yNjA0MDkwMTQxMzJaMDMxMTAvBgNV BAMTKEJGRjM4MkYxMDgzOEQ1MUZCRDFBQkI0MzEyQ0QwNkYxRjZGMzQ1REEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCb00BEzkSnvJtJTLiuSwAIf7PV LANF7dAxbvsxz8rRwdWSxSyCijOHy3epP+sfGiykDSjmZJLYtrXxUR1mTZFfZy4I OBCS0nECEDB2Y2o/jUyRe2yq6YNXUIVYUaqgJYh3cd1aJl4vH1DZrMFWWRvoVVgG uOgHA2Xqaukp9cMwqJEoxIfGCEPW0fVlZLnR2na+DaA8wRyWxmcesBYhJCBclM9H fBtdCl3cbT2TOjZ7UZbxpaYktG1Dwy5D4b6k8sTEW5jmniUyP1GkT9b7rPBDP/lq b5aFSn++G7uCr3NA+71uCI+mUXw33LT7su8PqMxqOKMl+pxmDwofy1lSZ6otAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUv/OC8Qg41R+9GrtDEs0G8fbzRdowHwYDVR0j BBgwFoAU/vpcMSW8fphFU+dIaW+/yFwXBdAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMkRHejFjNUFWM1lTd0dOcHVSRUZkcDE2RDY0WG5mNHhyNE1xRU5MR3FI cm8vMC9GRUZBNUMzMTI1QkM3RTk4NDU1M0U3NDg2OTZGQkZDODVDMTcwNUQwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZFRkE1QzMxMjVCQzdFOTg0 NTUzRTc0ODY5NkZCRkM4NUMxNzA1RDAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MkRHejFjNUFWM1lTd0dOcHVSRUZkcDE2RDY0WG5mNHhyNE1xRU5MR3FIcm8vMC9G RUZBNUMzMTI1QkM3RTk4NDU1M0U3NDg2OTZGQkZDODVDMTcwNUQwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAU2zUS7yL6lUno13N6R08ni5ekHGWSQGmdfN5RB9B1GvBPPUfQrKNeMCiS7g/ dJOv6RT1nvq7Uz2C1s0AGh4Rl/gA2ntZJ+SulP/YUm9hZ8fIkKHsc1oslx+uRSGK hrHGltGaeK0wzWJNWA4sA2DcQ0uEIH1+LsM5UETblQJ/1Z0KTRRKRq13xukQWid7 7G3WuHATzW8H3O4L4GI6fur9ehGfz3c8tl/i/Y4WT7yPQGVnWYHka1ITv85+Nc6Y k0943WneMalJclAM8uw8fOiNu51Fet3psikc3hVV9E3dA0LisROoGk3wRbhZvrjl fMxZSR2iUPIzPWKc2XB7e02pGg== -----END CERTIFICATE-----Generated at Wed Apr 8 12:34:34 2026 by rpki-client