$ rpki-client -vvf rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.mft File: CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.mft (raw, json) Hash identifier: pCDe+vj6/THPDoaqH+cEzRjJichXQevVmnlDw2BRIBQ= Subject key identifier: 5D:FA:FD:F9:46:E4:B7:BA:C9:E0:10:82:7F:39:3F:ED:05:AF:CC:85 Authority key identifier: CD:23:91:FA:7C:28:AE:0F:9C:8B:2B:99:E1:90:92:A3:48:7A:2E:C9 Certificate issuer: /CN=CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9 Certificate serial: 5A2BCB02FB60E486A5A8BC5017057FC72CEED003 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.cer Subject info access: rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.mft Manifest number: 03D3 Signing time: Wed 08 Apr 2026 07:12:11 +0000 Manifest this update: Wed 08 Apr 2026 07:07:11 +0000 Manifest next update: Thu 09 Apr 2026 10:19:11 +0000 Files and hashes: 1: 323830343a313561343a3a2f33322d3434203d3e20323633343030.roa (hash: SXY+DqRaOha9W6rUgVkvX8kWfmFQeH74nzcZCLBrSxg=) 2: 3137372e3232322e3233322e302f32312d3233203d3e20323633343030.roa (hash: 7KaEu9sw42ksNhOklCsT9hgtSIgophy55hML3k/smrA=) 3: CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.crl (hash: qUUSWjJic8n5kb2UL5UaAIm38ire18HsDtjFRHTUgyQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.crl rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 09 Apr 2026 10:19:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:2b:cb:02:fb:60:e4:86:a5:a8:bc:50:17:05:7f:c7:2c:ee:d0:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9 Validity Not Before: Apr 8 07:07:11 2026 GMT Not After : Apr 9 10:19:11 2026 GMT Subject: CN=5DFAFDF946E4B7BAC9E010827F393FED05AFCC85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d3:9b:cb:42:7c:47:74:b1:0a:2d:3b:30:eb: d9:55:23:c6:6f:d4:77:ac:22:58:b1:74:c2:e4:4f: 34:bc:17:cd:01:72:95:c0:82:c0:23:a5:2b:1b:08: e7:aa:4c:f5:26:11:35:8c:5d:0f:c8:d0:7a:64:ed: 88:2d:54:dd:7d:94:1b:2a:48:1c:97:02:b4:b6:e0: 5d:d1:ec:0f:74:38:9b:6b:9a:13:29:5c:a7:71:48: 77:97:90:31:a0:2f:82:25:a0:6d:3d:d0:50:0e:06: a2:51:2b:f1:0d:bb:0f:bc:2f:7a:98:47:ba:8c:f3: 07:2e:05:e5:b6:87:86:59:0e:cb:6a:4c:b1:94:14: 3e:2f:90:da:44:ca:09:da:0d:41:c9:d5:6b:3b:57: 89:a2:c2:00:73:24:0e:e8:24:a8:ca:2d:ce:50:1f: 2e:10:54:05:1e:e3:d1:8d:dc:16:ff:2a:26:bc:d2: b4:c7:5f:e5:60:a7:74:d7:72:52:07:0e:5d:eb:44: 1a:6f:e9:41:56:e8:3f:3c:00:3e:0b:8a:43:82:9e: c9:5e:3f:fb:e4:4c:64:39:eb:7a:d6:7c:9e:11:fc: ef:a5:25:24:db:50:04:c9:61:f3:af:77:a3:22:76: 8e:85:32:32:2c:44:b4:f2:b7:d3:b0:a9:bf:3c:c5: 2f:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:FA:FD:F9:46:E4:B7:BA:C9:E0:10:82:7F:39:3F:ED:05:AF:CC:85 X509v3 Authority Key Identifier: keyid:CD:23:91:FA:7C:28:AE:0F:9C:8B:2B:99:E1:90:92:A3:48:7A:2E:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:3a:9c:5d:86:38:4f:ec:b1:f6:22:f3:29:72:bd:06:5d:e5: ab:65:8f:c7:52:e8:de:a4:a1:fb:9f:02:d3:88:c3:52:8f:0f: e2:92:b1:3f:f0:31:e6:f5:41:2d:e3:b5:bd:e8:42:3d:a6:27: 89:05:72:df:b4:c3:d1:de:0a:b6:5c:5f:84:00:d2:46:21:a0: 52:3a:2e:30:50:31:8b:86:1b:b0:ef:0e:0d:7e:1d:cf:2f:bd: 2f:a0:78:eb:74:2d:a5:d4:97:fd:b0:97:46:06:f1:28:a2:a6: 83:ca:03:e2:f8:96:8d:91:28:44:95:76:29:15:7b:71:1f:93: 10:7a:35:06:1a:f7:a1:ae:e6:6c:42:46:c3:ec:58:89:6e:fe: 6c:25:fd:f5:eb:5b:1b:ab:25:72:6b:0e:55:98:da:e2:19:35: 58:36:fd:dd:03:e6:14:bc:de:a5:28:56:99:1c:4c:97:e4:74: 17:9b:a6:77:41:f5:9e:4a:0b:6b:03:2a:6f:42:cd:9b:8e:b7: ba:19:62:88:fa:3a:31:8f:66:37:24:2e:e0:67:59:fa:1f:ee: 3d:48:7a:bf:43:9f:4e:e6:c3:80:36:c3:7e:b6:bc:67:45:0c: fb:40:24:8b:64:30:18:68:cc:a1:87:0f:ad:7d:76:6b:79:a5: a6:f3:81:9f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUWivLAvtg5IalqLxQFwV/xyzu0AMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0QyMzkxRkE3QzI4QUUwRjlDOEIyQjk5RTE5MDkyQTM0 ODdBMkVDOTAeFw0yNjA0MDgwNzA3MTFaFw0yNjA0MDkxMDE5MTFaMDMxMTAvBgNV BAMTKDVERkFGREY5NDZFNEI3QkFDOUUwMTA4MjdGMzkzRkVEMDVBRkNDODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM05vLQnxHdLEKLTsw69lVI8Zv 1HesIlixdMLkTzS8F80BcpXAgsAjpSsbCOeqTPUmETWMXQ/I0Hpk7YgtVN19lBsq SByXArS24F3R7A90OJtrmhMpXKdxSHeXkDGgL4IloG090FAOBqJRK/ENuw+8L3qY R7qM8wcuBeW2h4ZZDstqTLGUFD4vkNpEygnaDUHJ1Ws7V4miwgBzJA7oJKjKLc5Q Hy4QVAUe49GN3Bb/Kia80rTHX+Vgp3TXclIHDl3rRBpv6UFW6D88AD4LikOCnsle P/vkTGQ563rWfJ4R/O+lJSTbUATJYfOvd6Mido6FMjIsRLTyt9Owqb88xS8TAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUXfr9+Ubkt7rJ4BCCfzk/7QWvzIUwHwYDVR0j BBgwFoAUzSOR+nworg+ciyuZ4ZCSo0h6LskwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMkVobnZBd1FCeHlQYmtoVXBoTVFueEN1VEVEZ3Y3a1NCMWFURDQxOFRo U1gvMS9DRDIzOTFGQTdDMjhBRTBGOUM4QjJCOTlFMTkwOTJBMzQ4N0EyRUM5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NEMjM5MUZBN0MyOEFFMEY5 QzhCMkI5OUUxOTA5MkEzNDg3QTJFQzkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MkVobnZBd1FCeHlQYmtoVXBoTVFueEN1VEVEZ3Y3a1NCMWFURDQxOFRoU1gvMS9D RDIzOTFGQTdDMjhBRTBGOUM4QjJCOTlFMTkwOTJBMzQ4N0EyRUM5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEATjqcXYY4T+yx9iLzKXK9Bl3lq2WPx1Lo3qSh+58C04jDUo8P4pKxP/Ax5vVB LeO1vehCPaYniQVy37TD0d4KtlxfhADSRiGgUjouMFAxi4YbsO8ODX4dzy+9L6B4 63QtpdSX/bCXRgbxKKKmg8oD4viWjZEoRJV2KRV7cR+TEHo1Bhr3oa7mbEJGw+xY iW7+bCX99etbG6slcmsOVZja4hk1WDb93QPmFLzepShWmRxMl+R0F5umd0H1nkoL awMqb0LNm463uhliiPo6MY9mNyQu4GdZ+h/uPUh6v0OfTubDgDbDfra8Z0UM+0Ak i2QwGGjMoYcPrX12a3mlpvOBnw== -----END CERTIFICATE-----Generated at Wed Apr 8 15:42:31 2026 by rpki-client