$ rpki-client -vvf rpki-repo.registro.br/repo/2WwvDGbGTAiTdQpuJ2Ush48zHBC5wW9KoRs8ktC8kCxT/1/9A88287F0DA67C74CC2430138C9E699A8D9BC30C.mft File: 9A88287F0DA67C74CC2430138C9E699A8D9BC30C.mft (raw, json) Hash identifier: 7OzAAPAVe8ooRWm1Gety3VVQ3DkTjCmWaPt1r7RN980= Subject key identifier: 92:C3:C7:60:1D:81:59:2E:E9:D6:12:DC:16:9C:F1:CF:7D:A1:CB:50 Authority key identifier: 9A:88:28:7F:0D:A6:7C:74:CC:24:30:13:8C:9E:69:9A:8D:9B:C3:0C Certificate issuer: /CN=9A88287F0DA67C74CC2430138C9E699A8D9BC30C Certificate serial: 4B712E9382D9492F473287AE1674A8FEA385E611 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A88287F0DA67C74CC2430138C9E699A8D9BC30C.cer Subject info access: rsync://rpki-repo.registro.br/repo/2WwvDGbGTAiTdQpuJ2Ush48zHBC5wW9KoRs8ktC8kCxT/1/9A88287F0DA67C74CC2430138C9E699A8D9BC30C.mft Manifest number: 03D4 Signing time: Wed 08 Apr 2026 14:03:22 +0000 Manifest this update: Wed 08 Apr 2026 13:58:22 +0000 Manifest next update: Thu 09 Apr 2026 16:12:22 +0000 Files and hashes: 1: 3137372e3135342e32302e302f32322d3332203d3e20323632343734.roa (hash: ztkkcdqiBRI6iZMMVx/NMX9D2pt1Xv3nL2WtQle4wAU=) 2: 9A88287F0DA67C74CC2430138C9E699A8D9BC30C.crl (hash: 4c58N0NoqRbKGF5Yo1xG0WP0oxID95q6QtdtB7Y3gGs=) 3: 3137372e35332e3136382e302f32312d3332203d3e20323632343734.roa (hash: JNXlLYey1yGL1s77uvcn+JEttXoFuzzQlgm7bCu5chM=) 4: 323830343a3464633a3a2f33322d313238203d3e20323632343734.roa (hash: utme5lH1g9mVZbUc0uKz2X5yOjtIpB0sgN72oFatCuw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2WwvDGbGTAiTdQpuJ2Ush48zHBC5wW9KoRs8ktC8kCxT/1/9A88287F0DA67C74CC2430138C9E699A8D9BC30C.crl rsync://rpki-repo.registro.br/repo/2WwvDGbGTAiTdQpuJ2Ush48zHBC5wW9KoRs8ktC8kCxT/1/9A88287F0DA67C74CC2430138C9E699A8D9BC30C.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A88287F0DA67C74CC2430138C9E699A8D9BC30C.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 09 Apr 2026 16:12:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:71:2e:93:82:d9:49:2f:47:32:87:ae:16:74:a8:fe:a3:85:e6:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A88287F0DA67C74CC2430138C9E699A8D9BC30C Validity Not Before: Apr 8 13:58:22 2026 GMT Not After : Apr 9 16:12:22 2026 GMT Subject: CN=92C3C7601D81592EE9D612DC169CF1CF7DA1CB50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:60:ae:f0:0a:13:f5:4c:d2:68:f2:0a:2c:d8: fc:82:94:76:50:42:45:46:69:bd:f1:18:4a:fd:d7: 2c:24:ec:d2:fd:c0:53:b4:ff:c1:07:ac:50:b6:b8: 41:3f:51:26:3f:2d:1e:fd:65:90:bf:8e:17:30:17: d8:01:f9:11:54:12:82:3b:cc:0a:f7:c1:86:d6:ee: 59:71:ea:f1:04:ad:7c:e4:d7:aa:2b:52:ce:e9:04: 02:c0:8b:07:c2:37:07:9b:7c:e4:1f:4f:79:0f:8e: a3:1c:c8:0b:65:07:0b:d1:73:2b:3a:f7:66:b4:5b: ce:43:e4:34:b5:fd:26:e3:c6:62:95:ea:31:10:e0: c7:86:31:aa:93:4c:63:84:34:38:ef:c9:0e:4a:2c: 24:4d:2c:17:23:34:09:66:08:b4:26:ef:ad:d0:52: bd:4f:5d:ec:90:07:e4:94:97:b0:06:4e:06:af:77: 09:0b:32:84:ba:ca:dd:2b:bf:87:95:4e:5a:d7:de: 64:db:21:46:03:29:d1:4a:59:e7:5b:72:1d:23:5d: ab:46:4a:cd:9d:17:99:e0:a6:9e:62:a4:2a:3c:45: ca:1d:ef:b8:79:dc:92:8c:28:79:ac:fb:fd:bc:05: 47:54:12:12:90:73:ef:5f:2e:55:8c:88:6f:94:c9: 72:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:C3:C7:60:1D:81:59:2E:E9:D6:12:DC:16:9C:F1:CF:7D:A1:CB:50 X509v3 Authority Key Identifier: keyid:9A:88:28:7F:0D:A6:7C:74:CC:24:30:13:8C:9E:69:9A:8D:9B:C3:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2WwvDGbGTAiTdQpuJ2Ush48zHBC5wW9KoRs8ktC8kCxT/1/9A88287F0DA67C74CC2430138C9E699A8D9BC30C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A88287F0DA67C74CC2430138C9E699A8D9BC30C.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2WwvDGbGTAiTdQpuJ2Ush48zHBC5wW9KoRs8ktC8kCxT/1/9A88287F0DA67C74CC2430138C9E699A8D9BC30C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:c5:95:fd:b3:6b:e7:9e:3d:1d:f0:88:20:18:ec:79:01:fb: 2a:78:22:5e:28:3d:54:41:ed:50:57:de:3d:a8:50:5e:08:e1: dd:46:74:94:bb:9c:36:aa:f2:c5:54:ff:ff:c0:de:df:09:2d: db:c0:38:41:94:74:5c:33:dc:7a:72:2c:01:2c:78:13:f0:91: 7a:10:0a:77:f0:c6:a7:3a:12:04:da:41:9a:00:ed:b0:42:cd: 45:71:e5:77:81:12:60:11:7f:a0:03:cd:f9:9a:a4:e1:80:c3: f5:3c:98:d2:b3:b4:50:33:7f:19:81:22:33:85:3d:05:00:c5: eb:f3:45:bb:41:2f:87:47:63:8b:7b:9d:25:4a:28:38:22:d2: 71:c4:d9:6b:3f:72:36:e9:f5:59:2d:fe:51:95:dc:a9:12:57: f4:e9:b0:20:fd:66:ff:54:b2:4d:60:2e:d7:fe:e2:15:dd:33: 62:f5:e4:1a:b6:ea:71:c5:97:6d:d4:85:9f:0b:16:9f:35:3b: fc:c1:de:66:c9:84:dc:49:6b:06:ba:75:8a:d1:d2:00:40:a8: d9:b0:e1:f6:ea:06:7f:c6:bc:b5:8b:31:7d:03:a1:c1:02:ab: 39:54:d4:6c:20:d3:91:2e:05:2e:16:37:f6:4f:c7:2b:9e:e5: c2:65:5b:d4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUS3Euk4LZSS9HMoeuFnSo/qOF5hEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE4ODI4N0YwREE2N0M3NENDMjQzMDEzOEM5RTY5OUE4 RDlCQzMwQzAeFw0yNjA0MDgxMzU4MjJaFw0yNjA0MDkxNjEyMjJaMDMxMTAvBgNV BAMTKDkyQzNDNzYwMUQ4MTU5MkVFOUQ2MTJEQzE2OUNGMUNGN0RBMUNCNTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTYK7wChP1TNJo8gos2PyClHZQ QkVGab3xGEr91ywk7NL9wFO0/8EHrFC2uEE/USY/LR79ZZC/jhcwF9gB+RFUEoI7 zAr3wYbW7llx6vEErXzk16orUs7pBALAiwfCNwebfOQfT3kPjqMcyAtlBwvRcys6 92a0W85D5DS1/SbjxmKV6jEQ4MeGMaqTTGOENDjvyQ5KLCRNLBcjNAlmCLQm763Q Ur1PXeyQB+SUl7AGTgavdwkLMoS6yt0rv4eVTlrX3mTbIUYDKdFKWedbch0jXatG Ss2dF5ngpp5ipCo8Rcod77h53JKMKHms+/28BUdUEhKQc+9fLlWMiG+UyXL5AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUksPHYB2BWS7p1hLcFpzxz32hy1AwHwYDVR0j BBgwFoAUmogofw2mfHTMJDATjJ5pmo2bwwwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMld3dkRHYkdUQWlUZFFwdUoyVXNoNDh6SEJDNXdXOUtvUnM4a3RDOGtD eFQvMS85QTg4Mjg3RjBEQTY3Qzc0Q0MyNDMwMTM4QzlFNjk5QThEOUJDMzBDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlBODgyODdGMERBNjdDNzRD QzI0MzAxMzhDOUU2OTlBOEQ5QkMzMEMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Mld3dkRHYkdUQWlUZFFwdUoyVXNoNDh6SEJDNXdXOUtvUnM4a3RDOGtDeFQvMS85 QTg4Mjg3RjBEQTY3Qzc0Q0MyNDMwMTM4QzlFNjk5QThEOUJDMzBDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtMWV/bNr5549HfCIIBjseQH7KngiXig9VEHtUFfePahQXgjh3UZ0lLucNqry xVT//8De3wkt28A4QZR0XDPcenIsASx4E/CRehAKd/DGpzoSBNpBmgDtsELNRXHl d4ESYBF/oAPN+Zqk4YDD9TyY0rO0UDN/GYEiM4U9BQDF6/NFu0Evh0dji3udJUoo OCLSccTZaz9yNun1WS3+UZXcqRJX9OmwIP1m/1SyTWAu1/7iFd0zYvXkGrbqccWX bdSFnwsWnzU7/MHeZsmE3ElrBrp1itHSAECo2bDh9uoGf8a8tYsxfQOhwQKrOVTU bCDTkS4FLhY39k/HK57lwmVb1A== -----END CERTIFICATE-----Generated at Wed Apr 8 17:03:32 2026 by rpki-client