$ rpki-client -vvf rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/0688357ED433C0A60770FB474BDB2C72796B78BD.mft File: 0688357ED433C0A60770FB474BDB2C72796B78BD.mft (raw, json) Hash identifier: k+chSaZqvzu6xuiWOLNhxIu443achDQJzIXbAo3oKC8= Subject key identifier: B4:3B:E8:12:73:8D:01:C5:04:A7:EC:16:57:AA:15:3A:EF:4C:E4:D2 Authority key identifier: 06:88:35:7E:D4:33:C0:A6:07:70:FB:47:4B:DB:2C:72:79:6B:78:BD Certificate issuer: /CN=0688357ED433C0A60770FB474BDB2C72796B78BD Certificate serial: 43635DFA5FCC7B058D65A5C7B8F865F13902A250 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0688357ED433C0A60770FB474BDB2C72796B78BD.cer Subject info access: rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/0688357ED433C0A60770FB474BDB2C72796B78BD.mft Manifest number: 01E5 Signing time: Wed 08 Apr 2026 12:58:46 +0000 Manifest this update: Wed 08 Apr 2026 12:53:46 +0000 Manifest next update: Thu 09 Apr 2026 13:36:46 +0000 Files and hashes: 1: 3133382e33362e3233322e302f32322d3332203d3e203631363936.roa (hash: LuRWXYu4+imd4rIU9dzokAO0Dpz9LyF5XRRntkfCGpw=) 2: 323830343a316165303a383030303a3a2f33332d3634203d3e203631363936.roa (hash: yiTmys+DN+V/3P2JuJjcBbj2/WsR/+Tzc5Siu15etqg=) 3: 323830343a316165303a3a2f33322d3634203d3e203631363936.roa (hash: qum4hDnIJOav81jguvdfK8A6pH3/MefG/Rnxcv+BRpE=) 4: 323830343a316165303a3a2f33332d3634203d3e203631363936.roa (hash: hkhkMo5McuXxDb02PG2+GNvBy8ImC7Oa3hVorjwfXqc=) 5: AS61696.asa (hash: stsmp/XCRcHXqo2lURf2hX1pg3qRqsXtv07mM1pjwvM=) 6: 0688357ED433C0A60770FB474BDB2C72796B78BD.crl (hash: 1RqL+X60RXmesLZv/q7U5MyUVw6qIBLq+oqgd77Oj9A=) 7: 3230312e3134302e3234382e302f32322d3332203d3e203631363936.roa (hash: YP8oj4Ldn62fe1HczGrX55WW8njWVQW92kDPNCowXts=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/0688357ED433C0A60770FB474BDB2C72796B78BD.crl rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/0688357ED433C0A60770FB474BDB2C72796B78BD.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0688357ED433C0A60770FB474BDB2C72796B78BD.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 09 Apr 2026 13:36:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:63:5d:fa:5f:cc:7b:05:8d:65:a5:c7:b8:f8:65:f1:39:02:a2:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0688357ED433C0A60770FB474BDB2C72796B78BD Validity Not Before: Apr 8 12:53:46 2026 GMT Not After : Apr 9 13:36:46 2026 GMT Subject: CN=B43BE812738D01C504A7EC1657AA153AEF4CE4D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:be:77:af:1e:03:01:6b:aa:ec:76:ee:f0:28: 36:25:5d:63:75:a3:27:6b:bd:e1:72:43:db:46:c2: e7:a9:97:56:82:0e:d8:e9:ff:82:17:83:d7:69:6c: 49:af:fa:ff:b1:ac:24:03:0e:a4:92:b2:93:fb:7c: 40:d9:be:0b:3c:f0:32:9e:81:18:69:9b:de:39:eb: bf:48:51:c7:84:9b:97:22:48:c2:8b:cf:82:13:3d: 07:3e:f1:82:29:f5:ea:2a:08:95:33:86:9a:4b:09: 41:27:26:9d:60:df:f1:95:cd:9a:50:e9:9a:96:11: f6:fd:fe:b4:13:ac:a9:0a:83:4c:58:60:a5:ab:03: c2:00:83:ff:7a:e2:bc:37:99:55:ae:99:00:4d:00: 2e:03:df:4b:5b:4d:5f:af:32:14:4e:4a:37:4b:47: 46:7f:29:c2:a1:73:5c:c6:d7:8b:47:af:28:98:4a: c5:80:89:ea:dd:2d:b1:b5:3f:3d:32:a9:01:4a:2c: 1c:c1:4a:30:0f:b5:b4:cd:30:fc:59:6d:79:a4:cf: 5c:05:f2:7a:5a:51:71:70:b0:b5:0c:11:57:b6:e7: f9:3f:2d:ab:ff:89:24:79:16:87:74:fb:5f:11:23: 4d:b9:6c:1f:b2:8a:9f:6e:75:b0:17:99:2e:e9:f6: 6e:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:3B:E8:12:73:8D:01:C5:04:A7:EC:16:57:AA:15:3A:EF:4C:E4:D2 X509v3 Authority Key Identifier: keyid:06:88:35:7E:D4:33:C0:A6:07:70:FB:47:4B:DB:2C:72:79:6B:78:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/0688357ED433C0A60770FB474BDB2C72796B78BD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0688357ED433C0A60770FB474BDB2C72796B78BD.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/0688357ED433C0A60770FB474BDB2C72796B78BD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:50:b9:4f:37:a1:7f:cf:3f:07:f2:64:a6:16:9d:fe:72:9f: 21:05:34:9a:94:9f:b6:c6:e1:e9:2c:f9:0c:94:af:fa:d4:d7: 75:83:bb:e2:a1:ef:c7:d8:2f:f0:af:04:10:61:80:c0:26:a6: d1:ee:80:8e:e1:41:ea:0a:00:c5:f0:09:df:dd:41:55:fe:2b: 0c:79:3a:ae:cd:ca:ce:d2:a1:86:ac:48:e4:eb:e1:e3:05:ed: a5:e2:88:a8:ef:4d:b0:bf:5b:7f:e9:46:d6:53:10:69:c8:4f: 1c:1e:f9:56:0a:cc:db:05:a4:fa:5e:2e:ab:cb:70:48:ff:02: 8b:7f:9c:ed:9b:d5:45:9f:bc:4d:6e:43:bf:9b:90:13:fe:75: 7f:ef:d3:2a:d1:25:db:b1:87:71:dc:ab:55:2d:40:d5:92:fb: 6f:36:4c:df:6b:0f:96:f7:cf:ad:9c:e1:11:20:54:f7:26:5c: c4:d1:5a:6c:d9:e4:31:35:fa:b7:d2:38:1e:46:b6:67:64:a4: df:75:5f:55:99:38:6c:a1:a3:14:68:d3:f0:7c:38:a7:4d:dc: 55:70:f3:54:f4:5c:39:92:74:80:10:0c:81:2a:8f:b2:98:b9: 79:15:e8:a1:04:5f:49:1f:a1:29:e7:47:53:4c:42:11:ed:6a: ea:bf:75:d1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUQ2Nd+l/MewWNZaXHuPhl8TkColAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDY4ODM1N0VENDMzQzBBNjA3NzBGQjQ3NEJEQjJDNzI3 OTZCNzhCRDAeFw0yNjA0MDgxMjUzNDZaFw0yNjA0MDkxMzM2NDZaMDMxMTAvBgNV BAMTKEI0M0JFODEyNzM4RDAxQzUwNEE3RUMxNjU3QUExNTNBRUY0Q0U0RDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgvnevHgMBa6rsdu7wKDYlXWN1 oydrveFyQ9tGwuepl1aCDtjp/4IXg9dpbEmv+v+xrCQDDqSSspP7fEDZvgs88DKe gRhpm945679IUceEm5ciSMKLz4ITPQc+8YIp9eoqCJUzhppLCUEnJp1g3/GVzZpQ 6ZqWEfb9/rQTrKkKg0xYYKWrA8IAg/964rw3mVWumQBNAC4D30tbTV+vMhROSjdL R0Z/KcKhc1zG14tHryiYSsWAierdLbG1Pz0yqQFKLBzBSjAPtbTNMPxZbXmkz1wF 8npaUXFwsLUMEVe25/k/Lav/iSR5Fod0+18RI025bB+yip9udbAXmS7p9m6tAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUtDvoEnONAcUEp+wWV6oVOu9M5NIwHwYDVR0j BBgwFoAUBog1ftQzwKYHcPtHS9sscnlreL0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMlhFaVJKTlVlVXd2ZWNYYjZNaHpNRGlNSlVvWWFlcjg3ajNxeWNqVGNX c3gvMC8wNjg4MzU3RUQ0MzNDMEE2MDc3MEZCNDc0QkRCMkM3Mjc5NkI3OEJELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA2ODgzNTdFRDQzM0MwQTYw NzcwRkI0NzRCREIyQzcyNzk2Qjc4QkQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MlhFaVJKTlVlVXd2ZWNYYjZNaHpNRGlNSlVvWWFlcjg3ajNxeWNqVGNXc3gvMC8w Njg4MzU3RUQ0MzNDMEE2MDc3MEZCNDc0QkRCMkM3Mjc5NkI3OEJELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEACFC5Tzehf88/B/Jkphad/nKfIQU0mpSftsbh6Sz5DJSv+tTXdYO74qHvx9gv 8K8EEGGAwCam0e6AjuFB6goAxfAJ391BVf4rDHk6rs3KztKhhqxI5Ovh4wXtpeKI qO9NsL9bf+lG1lMQachPHB75VgrM2wWk+l4uq8twSP8Ci3+c7ZvVRZ+8TW5Dv5uQ E/51f+/TKtEl27GHcdyrVS1A1ZL7bzZM32sPlvfPrZzhESBU9yZcxNFabNnkMTX6 t9I4Hka2Z2Sk33VfVZk4bKGjFGjT8Hw4p03cVXDzVPRcOZJ0gBAMgSqPspi5eRXo oQRfSR+hKedHU0xCEe1q6r910Q== -----END CERTIFICATE-----Generated at Wed Apr 8 20:46:01 2026 by rpki-client