$ rpki-client -vvf rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/33702311ADCA7FC6C85DC0655A9217C00BE5E1EC.mft File: 33702311ADCA7FC6C85DC0655A9217C00BE5E1EC.mft (raw, json) Hash identifier: XmtLE4GE6PG6UqVCcRPQOFNsiC6H6RuOMnLj2f84+C8= Subject key identifier: 1A:4E:96:39:B9:1A:91:FE:86:54:3D:05:4D:E6:78:7B:7F:CA:01:B3 Authority key identifier: 33:70:23:11:AD:CA:7F:C6:C8:5D:C0:65:5A:92:17:C0:0B:E5:E1:EC Certificate issuer: /CN=33702311ADCA7FC6C85DC0655A9217C00BE5E1EC Certificate serial: 239C404C7FB18B53009432C8D3725F182925197F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33702311ADCA7FC6C85DC0655A9217C00BE5E1EC.cer Subject info access: rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/33702311ADCA7FC6C85DC0655A9217C00BE5E1EC.mft Manifest number: 74 Signing time: Wed 08 Apr 2026 00:05:27 +0000 Manifest this update: Wed 08 Apr 2026 00:00:27 +0000 Manifest next update: Thu 09 Apr 2026 00:05:27 +0000 Files and hashes: 1: 33702311ADCA7FC6C85DC0655A9217C00BE5E1EC.crl (hash: j6A+VC7NGpdXOoHfYb8zWO5GbxcxIs1xTz9AmNk1ldk=) 2: 3137302e37392e3230322e302f32332d3332203d3e20323636333034.roa (hash: pLHLAyc3v38AwOZ1l5MAIcR4fRXI2Nn9ORHjbHU/uIU=) 3: 3137302e37392e3230302e302f32322d3332203d3e20323636333034.roa (hash: F0hl7fFUX/02GFyDa1Q0o9KwtX4RrOs5ypWX63He8Tk=) 4: 323830343a333563303a3a2f33322d313238203d3e20323636333034.roa (hash: LIdBu4hH76fjQZltvNuNl4Sk11vROmmGVVYxeEIWdRU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/33702311ADCA7FC6C85DC0655A9217C00BE5E1EC.crl rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/33702311ADCA7FC6C85DC0655A9217C00BE5E1EC.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33702311ADCA7FC6C85DC0655A9217C00BE5E1EC.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 09 Apr 2026 00:05:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:9c:40:4c:7f:b1:8b:53:00:94:32:c8:d3:72:5f:18:29:25:19:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33702311ADCA7FC6C85DC0655A9217C00BE5E1EC Validity Not Before: Apr 8 00:00:27 2026 GMT Not After : Apr 9 00:05:27 2026 GMT Subject: CN=1A4E9639B91A91FE86543D054DE6787B7FCA01B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:44:1d:d8:20:dc:f7:1a:ec:f9:f4:a0:a6:26: dc:44:44:00:0d:68:a6:fd:f3:6d:55:ec:4d:7b:91: 1e:ba:46:d8:f5:fd:bc:b1:a3:9c:4f:a5:1a:aa:66: 8c:dc:a6:c7:1b:bd:0c:16:73:2b:06:fc:22:b6:8d: 1d:78:56:34:8b:5e:75:14:0e:76:e9:c4:3a:6c:c6: d0:0e:57:61:34:84:bc:ae:ac:4c:53:d8:f1:94:2c: d2:45:4a:92:a4:0f:88:bd:38:a4:18:4b:9c:08:f4: a0:ac:d0:5a:b3:93:ae:ab:2c:17:1a:c0:2d:1a:4e: 8b:a9:8b:c7:0f:fa:52:9e:6b:87:5e:eb:82:fa:24: 48:b5:d8:2e:58:d5:f6:37:a9:42:74:0e:e8:24:cc: 22:c8:ec:ca:74:68:7c:c0:eb:68:b2:47:27:de:67: 4c:a4:76:76:ba:47:b3:33:cc:07:53:6b:23:20:c4: fc:a7:35:8f:a7:b8:c2:64:10:c9:d0:a2:e1:7c:40: 73:0a:75:e0:9b:e9:7e:47:38:fd:f2:b3:b7:bb:58: 5d:2d:4d:19:6a:56:b1:f6:04:8e:c6:53:01:6b:8b: 3b:59:7c:24:39:cd:03:9e:d8:a2:f2:8c:ba:0b:c7: c2:4d:d9:91:39:44:b3:4f:b6:52:a1:04:b6:36:41: 80:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:4E:96:39:B9:1A:91:FE:86:54:3D:05:4D:E6:78:7B:7F:CA:01:B3 X509v3 Authority Key Identifier: keyid:33:70:23:11:AD:CA:7F:C6:C8:5D:C0:65:5A:92:17:C0:0B:E5:E1:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/33702311ADCA7FC6C85DC0655A9217C00BE5E1EC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33702311ADCA7FC6C85DC0655A9217C00BE5E1EC.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/33702311ADCA7FC6C85DC0655A9217C00BE5E1EC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:d1:69:de:4a:15:33:e3:5a:ce:83:bd:74:3b:e6:62:1c:6d: bf:0a:9f:82:16:29:f1:7f:41:bc:13:5a:20:bd:dd:0b:cc:62: d5:e4:7e:ff:5a:24:b8:bf:6a:4b:0e:82:d4:62:15:2f:23:0f: 10:05:f8:6c:b7:8e:12:50:3a:5a:3a:41:a8:c7:ba:32:c5:9c: c7:33:97:51:6a:41:6e:e1:7b:75:24:11:66:17:e8:cc:db:b8: 5d:de:0d:98:2d:71:c8:f0:f4:d7:11:94:6e:f4:4e:94:e6:82: 9a:a5:1a:99:87:43:70:9a:d4:fd:63:80:61:4e:43:db:f6:77: 92:67:28:2a:02:ee:85:f1:42:5c:55:2f:5e:99:fd:ab:ca:68: ee:83:62:f9:ff:2e:e5:87:b8:f0:54:2c:8f:c1:4b:6f:4f:29: e7:6b:81:27:eb:9e:5c:ea:eb:6f:85:10:76:13:55:ba:91:43: 4e:4f:60:7a:6d:87:89:25:92:f0:a4:32:c2:e6:7d:06:91:2e: f8:bb:3e:ad:18:af:c7:ed:c3:16:fa:51:47:52:d0:02:33:6a: 0f:09:d6:c3:c5:46:a0:4e:b3:d3:36:f4:97:ea:70:3a:25:69: 5e:2e:2f:d1:4b:b5:51:b8:2f:84:f0:27:31:44:49:20:8c:84: 9c:4e:fc:04 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUI5xATH+xi1MAlDLI03JfGCklGX8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzM3MDIzMTFBRENBN0ZDNkM4NURDMDY1NUE5MjE3QzAw QkU1RTFFQzAeFw0yNjA0MDgwMDAwMjdaFw0yNjA0MDkwMDA1MjdaMDMxMTAvBgNV BAMTKDFBNEU5NjM5QjkxQTkxRkU4NjU0M0QwNTRERTY3ODdCN0ZDQTAxQjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKRB3YINz3Guz59KCmJtxERAAN aKb9821V7E17kR66Rtj1/byxo5xPpRqqZozcpscbvQwWcysG/CK2jR14VjSLXnUU DnbpxDpsxtAOV2E0hLyurExT2PGULNJFSpKkD4i9OKQYS5wI9KCs0Fqzk66rLBca wC0aToupi8cP+lKea4de64L6JEi12C5Y1fY3qUJ0DugkzCLI7Mp0aHzA62iyRyfe Z0ykdna6R7MzzAdTayMgxPynNY+nuMJkEMnQouF8QHMKdeCb6X5HOP3ys7e7WF0t TRlqVrH2BI7GUwFriztZfCQ5zQOe2KLyjLoLx8JN2ZE5RLNPtlKhBLY2QYCJAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUGk6WObkakf6GVD0FTeZ4e3/KAbMwHwYDVR0j BBgwFoAUM3AjEa3Kf8bIXcBlWpIXwAvl4ewwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMnRIaXV4cW82bmJ3WnRxQ0FxS3gyRGJVNzZ2ckhXVVgxQmJaUEY1RThq ZkIvMC8zMzcwMjMxMUFEQ0E3RkM2Qzg1REMwNjU1QTkyMTdDMDBCRTVFMUVDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMzNzAyMzExQURDQTdGQzZD ODVEQzA2NTVBOTIxN0MwMEJFNUUxRUMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MnRIaXV4cW82bmJ3WnRxQ0FxS3gyRGJVNzZ2ckhXVVgxQmJaUEY1RThqZkIvMC8z MzcwMjMxMUFEQ0E3RkM2Qzg1REMwNjU1QTkyMTdDMDBCRTVFMUVDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfdFp3koVM+NazoO9dDvmYhxtvwqfghYp8X9BvBNaIL3dC8xi1eR+/1okuL9q Sw6C1GIVLyMPEAX4bLeOElA6WjpBqMe6MsWcxzOXUWpBbuF7dSQRZhfozNu4Xd4N mC1xyPD01xGUbvROlOaCmqUamYdDcJrU/WOAYU5D2/Z3kmcoKgLuhfFCXFUvXpn9 q8po7oNi+f8u5Ye48FQsj8FLb08p52uBJ+ueXOrrb4UQdhNVupFDTk9gem2HiSWS 8KQywuZ9BpEu+Ls+rRivx+3DFvpRR1LQAjNqDwnWw8VGoE6z0zb0l+pwOiVpXi4v 0Uu1UbgvhPAnMURJIIyEnE78BA== -----END CERTIFICATE-----Generated at Wed Apr 8 15:58:45 2026 by rpki-client