$ rpki-client -vvf rpki-repo.registro.br/repo/2tCkhwyTNHwLB1YLniMfMN8tRak6TQLY3kt6JpWDPMFh/0/09D503308004EB0AACDFA4EEF91239B1668B599A.mft File: 09D503308004EB0AACDFA4EEF91239B1668B599A.mft (raw, json) Hash identifier: HEeeQJPCn25Ytt9gXlC6HWa6drMGMSiRTmlNXUPzZ9o= Subject key identifier: 5F:8C:E0:B7:3A:32:B7:82:6B:5C:34:EB:D1:E1:35:90:95:5E:D3:4A Authority key identifier: 09:D5:03:30:80:04:EB:0A:AC:DF:A4:EE:F9:12:39:B1:66:8B:59:9A Certificate issuer: /CN=09D503308004EB0AACDFA4EEF91239B1668B599A Certificate serial: 515BD9E075F72070E1479BDE8AD0B1B6C71DAECC Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09D503308004EB0AACDFA4EEF91239B1668B599A.cer Subject info access: rsync://rpki-repo.registro.br/repo/2tCkhwyTNHwLB1YLniMfMN8tRak6TQLY3kt6JpWDPMFh/0/09D503308004EB0AACDFA4EEF91239B1668B599A.mft Manifest number: 18 Signing time: Wed 08 Apr 2026 14:28:36 +0000 Manifest this update: Wed 08 Apr 2026 14:23:36 +0000 Manifest next update: Thu 09 Apr 2026 17:24:36 +0000 Files and hashes: 1: 09D503308004EB0AACDFA4EEF91239B1668B599A.crl (hash: J9A+F3R4wX+wwBjH4+PRIWd+UTuPv0QJ9Mygu4Ckz7g=) 2: 3138392e39312e34382e302f32302d3332203d3e203238323034.roa (hash: wNWpCiN26Pg9w9XYmu9EAhlPFgZw8T9U4sqigVDiFjg=) 3: 323830343a343134633a3a2f33322d313238203d3e203238323034.roa (hash: YvC3eohyrDj8StvFzDSE2/eqB+Cyw8bHUil9o/x4OyM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2tCkhwyTNHwLB1YLniMfMN8tRak6TQLY3kt6JpWDPMFh/0/09D503308004EB0AACDFA4EEF91239B1668B599A.crl rsync://rpki-repo.registro.br/repo/2tCkhwyTNHwLB1YLniMfMN8tRak6TQLY3kt6JpWDPMFh/0/09D503308004EB0AACDFA4EEF91239B1668B599A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09D503308004EB0AACDFA4EEF91239B1668B599A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 09 Apr 2026 17:24:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:5b:d9:e0:75:f7:20:70:e1:47:9b:de:8a:d0:b1:b6:c7:1d:ae:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09D503308004EB0AACDFA4EEF91239B1668B599A Validity Not Before: Apr 8 14:23:36 2026 GMT Not After : Apr 9 17:24:36 2026 GMT Subject: CN=5F8CE0B73A32B7826B5C34EBD1E13590955ED34A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:6f:20:d2:98:26:aa:78:8a:33:04:5c:b1:34: 92:63:82:3a:e3:ca:cd:00:bc:e7:1d:8f:73:8f:6a: 54:5d:5d:93:31:bd:7e:2c:bd:85:2b:ee:5a:0c:77: d6:f8:57:85:00:57:04:64:ed:da:20:bc:af:3b:48: 5d:1d:1d:34:7a:2c:a9:b1:97:a6:13:86:82:2c:6d: 64:e4:a1:9d:52:41:9c:57:c2:d3:2e:62:19:ed:7c: 9e:e9:31:97:a3:a2:64:b1:d5:1a:68:58:e8:93:69: 38:2b:09:f3:84:ab:f7:4c:9e:fc:bb:97:6a:77:cd: ee:da:1f:82:17:df:98:80:83:cd:c3:f0:32:cc:2b: ab:3f:dc:73:0c:e2:f7:54:15:62:34:b0:7b:a0:65: 8c:4b:34:05:cb:f7:bb:ea:56:79:8b:1b:58:bc:dc: 3b:ca:17:ba:aa:89:24:db:c2:9a:4d:3e:89:49:81: bc:00:c4:65:04:63:c9:e2:98:00:6a:e6:b0:c0:74: c5:63:cb:f5:e9:fa:00:ba:e2:76:57:dc:81:82:d9: ba:40:97:54:5e:6d:33:14:8a:d7:a6:95:6f:96:4d: 59:7e:22:60:18:55:8a:5f:1d:ab:7e:17:97:01:24: 29:80:a4:1e:1a:32:3b:f1:2a:70:ab:86:f4:d1:34: 76:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:8C:E0:B7:3A:32:B7:82:6B:5C:34:EB:D1:E1:35:90:95:5E:D3:4A X509v3 Authority Key Identifier: keyid:09:D5:03:30:80:04:EB:0A:AC:DF:A4:EE:F9:12:39:B1:66:8B:59:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2tCkhwyTNHwLB1YLniMfMN8tRak6TQLY3kt6JpWDPMFh/0/09D503308004EB0AACDFA4EEF91239B1668B599A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09D503308004EB0AACDFA4EEF91239B1668B599A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tCkhwyTNHwLB1YLniMfMN8tRak6TQLY3kt6JpWDPMFh/0/09D503308004EB0AACDFA4EEF91239B1668B599A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:82:e0:d7:e8:9b:d4:05:db:7f:ca:3f:5d:d7:8b:2c:05:54: 25:3b:06:db:b4:8f:0d:e2:ba:3c:f3:3a:ed:37:39:9a:19:b1: 69:22:64:d2:7b:7d:7e:81:43:0c:c4:fc:f3:89:3b:5c:12:8d: 7a:82:1e:67:07:25:2a:2d:a1:3e:0e:b2:7a:b7:8a:23:3a:41: a9:1c:f4:a5:20:60:4e:44:f2:bf:f7:9b:b8:36:93:a1:c3:0a: f7:53:78:f5:c0:35:64:3c:08:39:39:20:4d:60:99:a1:83:fc: c9:3e:e2:e3:67:43:04:6a:ff:b0:de:b6:e8:95:e8:ab:ea:ae: 83:74:75:33:75:fe:ec:6b:bc:66:81:e4:9f:ee:3a:a3:d1:ed: 79:2f:a4:85:a4:65:d7:a8:03:7e:29:a7:bb:f2:ea:a9:e0:3e: a3:93:44:6c:31:18:40:9e:8d:4e:5f:77:68:61:72:19:ce:bb: 64:df:d1:a4:0a:37:2f:79:4a:c0:20:61:a5:0f:77:93:24:53: b0:5b:77:72:3f:9f:60:f9:10:2f:b8:52:80:d3:b7:1d:1b:e9: 65:20:f9:42:e7:b6:b3:9a:df:13:f5:84:99:80:ef:2d:10:09: d0:5a:3b:28:58:43:6a:1f:05:be:7d:c3:b7:5f:01:16:16:45: 61:f8:5c:a2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUUVvZ4HX3IHDhR5veitCxtscdrswwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDlENTAzMzA4MDA0RUIwQUFDREZBNEVFRjkxMjM5QjE2 NjhCNTk5QTAeFw0yNjA0MDgxNDIzMzZaFw0yNjA0MDkxNzI0MzZaMDMxMTAvBgNV BAMTKDVGOENFMEI3M0EzMkI3ODI2QjVDMzRFQkQxRTEzNTkwOTU1RUQzNEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSbyDSmCaqeIozBFyxNJJjgjrj ys0AvOcdj3OPalRdXZMxvX4svYUr7loMd9b4V4UAVwRk7dogvK87SF0dHTR6LKmx l6YThoIsbWTkoZ1SQZxXwtMuYhntfJ7pMZejomSx1RpoWOiTaTgrCfOEq/dMnvy7 l2p3ze7aH4IX35iAg83D8DLMK6s/3HMM4vdUFWI0sHugZYxLNAXL97vqVnmLG1i8 3DvKF7qqiSTbwppNPolJgbwAxGUEY8nimABq5rDAdMVjy/Xp+gC64nZX3IGC2bpA l1RebTMUitemlW+WTVl+ImAYVYpfHat+F5cBJCmApB4aMjvxKnCrhvTRNHYPAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUX4zgtzoyt4JrXDTr0eE1kJVe00owHwYDVR0j BBgwFoAUCdUDMIAE6wqs36Tu+RI5sWaLWZowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMnRDa2h3eVROSHdMQjFZTG5pTWZNTjh0UmFrNlRRTFkza3Q2SnBXRFBN RmgvMC8wOUQ1MDMzMDgwMDRFQjBBQUNERkE0RUVGOTEyMzlCMTY2OEI1OTlBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA5RDUwMzMwODAwNEVCMEFB Q0RGQTRFRUY5MTIzOUIxNjY4QjU5OUEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MnRDa2h3eVROSHdMQjFZTG5pTWZNTjh0UmFrNlRRTFkza3Q2SnBXRFBNRmgvMC8w OUQ1MDMzMDgwMDRFQjBBQUNERkE0RUVGOTEyMzlCMTY2OEI1OTlBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaYLg1+ib1AXbf8o/XdeLLAVUJTsG27SPDeK6PPM67Tc5mhmxaSJk0nt9foFD DMT884k7XBKNeoIeZwclKi2hPg6yereKIzpBqRz0pSBgTkTyv/ebuDaTocMK91N4 9cA1ZDwIOTkgTWCZoYP8yT7i42dDBGr/sN626JXoq+qug3R1M3X+7Gu8ZoHkn+46 o9HteS+khaRl16gDfimnu/LqqeA+o5NEbDEYQJ6NTl93aGFyGc67ZN/RpAo3L3lK wCBhpQ93kyRTsFt3cj+fYPkQL7hSgNO3HRvpZSD5Que2s5rfE/WEmYDvLRAJ0Fo7 KFhDah8Fvn3Dt18BFhZFYfhcog== -----END CERTIFICATE-----Generated at Wed Apr 8 22:13:41 2026 by rpki-client