$ rpki-client -vvf rpki-repo.registro.br/repo/3HhijkUfcB75eLomGEgXoyHdX2PyiC1AZ8nFTcnBmfBT/0/128644ECEB30868F7DDD8B50BDE3CD0A5A3A06B8.mft File: 128644ECEB30868F7DDD8B50BDE3CD0A5A3A06B8.mft (raw, json) Hash identifier: fXKdwuVjo94eaXHtlMam0Pkwh+COz9+gRtbokkBuTDQ= Subject key identifier: 56:20:93:DB:85:A7:29:D9:19:E8:6D:5A:5B:DC:52:DE:9C:06:D2:9A Authority key identifier: 12:86:44:EC:EB:30:86:8F:7D:DD:8B:50:BD:E3:CD:0A:5A:3A:06:B8 Certificate issuer: /CN=128644ECEB30868F7DDD8B50BDE3CD0A5A3A06B8 Certificate serial: 080FDB8656BADD7D66FC40370023B2B937E6A4B8 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/128644ECEB30868F7DDD8B50BDE3CD0A5A3A06B8.cer Subject info access: rsync://rpki-repo.registro.br/repo/3HhijkUfcB75eLomGEgXoyHdX2PyiC1AZ8nFTcnBmfBT/0/128644ECEB30868F7DDD8B50BDE3CD0A5A3A06B8.mft Manifest number: 0140 Signing time: Wed 08 Apr 2026 07:24:50 +0000 Manifest this update: Wed 08 Apr 2026 07:19:50 +0000 Manifest next update: Thu 09 Apr 2026 09:47:50 +0000 Files and hashes: 1: 323830343a346536343a3a2f33322d313238203d3e20323638323538.roa (hash: cIPRrBZKrOj9lWuWyZWYEmXaWAtDm4pOx+RC7zQlZq4=) 2: 128644ECEB30868F7DDD8B50BDE3CD0A5A3A06B8.crl (hash: o0eAyO4GSe+GUMtec+B6X4yqyFnLzhL6mfPbGCK47QQ=) 3: 34352e3233372e382e302f32322d3332203d3e20323638323538.roa (hash: gT6g9/y/7vUl+2G7uUJcrg2sfzhdljWwUSKvbqMYsLs=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3HhijkUfcB75eLomGEgXoyHdX2PyiC1AZ8nFTcnBmfBT/0/128644ECEB30868F7DDD8B50BDE3CD0A5A3A06B8.crl rsync://rpki-repo.registro.br/repo/3HhijkUfcB75eLomGEgXoyHdX2PyiC1AZ8nFTcnBmfBT/0/128644ECEB30868F7DDD8B50BDE3CD0A5A3A06B8.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/128644ECEB30868F7DDD8B50BDE3CD0A5A3A06B8.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 09 Apr 2026 09:47:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:0f:db:86:56:ba:dd:7d:66:fc:40:37:00:23:b2:b9:37:e6:a4:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=128644ECEB30868F7DDD8B50BDE3CD0A5A3A06B8 Validity Not Before: Apr 8 07:19:50 2026 GMT Not After : Apr 9 09:47:50 2026 GMT Subject: CN=562093DB85A729D919E86D5A5BDC52DE9C06D29A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:18:44:b2:e8:30:36:0f:cb:1f:28:da:ed:b7: 3c:4b:7e:64:89:ef:19:d5:d9:bc:b7:c9:4f:54:e9: 90:0b:ac:10:36:6d:2c:cc:02:9c:a2:71:38:7f:5e: a9:e8:38:56:77:9f:34:54:84:dd:04:e5:70:39:59: 4e:b0:bc:e6:d0:68:49:c9:78:24:ff:04:fa:9c:c5: 44:f1:6c:37:af:1e:fd:22:90:13:8f:03:0e:e7:31: 67:61:4e:9e:5b:b5:6c:d0:68:16:81:c9:81:dc:ed: 36:d9:8a:1e:7d:05:1d:4d:5e:3f:76:77:66:c5:90: b6:f4:b5:55:49:52:7d:03:3c:a9:17:df:1c:3b:fc: dd:17:72:ec:a6:63:8a:80:8d:f1:b6:c0:35:61:c5: 2b:91:c2:aa:f9:c3:ef:fc:15:38:b4:58:01:86:44: b2:6d:f0:00:d4:1c:55:bc:f0:2f:31:28:bc:9e:6d: 7a:2b:52:5b:3a:eb:4b:c7:d7:dc:04:bd:54:09:c2: 26:67:a1:2a:42:e5:59:7d:98:30:c9:5e:4b:80:b0: 4b:49:7b:70:59:c7:27:44:6a:b7:c5:8b:1e:a4:83: 2a:37:bb:bc:03:86:95:80:aa:17:17:ac:86:92:64: 24:d5:70:70:a1:27:bb:70:d5:ae:8d:04:05:52:2c: 97:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:20:93:DB:85:A7:29:D9:19:E8:6D:5A:5B:DC:52:DE:9C:06:D2:9A X509v3 Authority Key Identifier: keyid:12:86:44:EC:EB:30:86:8F:7D:DD:8B:50:BD:E3:CD:0A:5A:3A:06:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3HhijkUfcB75eLomGEgXoyHdX2PyiC1AZ8nFTcnBmfBT/0/128644ECEB30868F7DDD8B50BDE3CD0A5A3A06B8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/128644ECEB30868F7DDD8B50BDE3CD0A5A3A06B8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3HhijkUfcB75eLomGEgXoyHdX2PyiC1AZ8nFTcnBmfBT/0/128644ECEB30868F7DDD8B50BDE3CD0A5A3A06B8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:79:f6:d2:8e:b6:dc:cb:09:cd:96:ff:fb:45:8e:5d:cd:55: 4c:67:10:51:7d:42:f3:77:c0:0e:90:06:69:e2:0b:f7:9b:35: 7c:61:53:51:e0:22:ab:60:38:db:67:94:35:94:ee:cd:ad:4d: 4f:4f:19:3d:7d:b7:4f:3b:8d:bc:92:bc:7e:0e:4e:a3:55:c2: 57:01:2e:91:c2:3e:a4:94:52:7f:6b:d9:f8:64:09:15:c0:00: 86:ff:5c:02:1e:7b:3f:ed:53:88:51:e3:f8:a7:41:d8:b2:72: a6:ea:26:60:84:9d:48:bf:8f:e4:72:e1:74:b6:ad:61:d7:42: a0:d7:47:cc:aa:fd:cf:e9:ab:38:8b:98:4b:ae:e4:69:00:20: b7:c5:aa:52:d4:fb:49:b7:26:b3:3d:76:44:c7:fc:0f:87:ba: 59:03:92:3c:f4:44:cc:7f:c9:f9:ef:21:f0:07:0b:d2:8a:63: 2e:30:70:97:d4:6e:49:5d:bf:b3:77:f5:4b:82:bb:25:72:4a: 59:dd:13:2a:e2:31:dc:88:e5:d7:91:4f:b6:64:94:e7:8c:c8: 4e:35:78:53:0e:ee:52:24:0a:42:1f:e8:a1:68:1b:a4:52:e0: 2e:d5:4e:b2:21:44:7c:9a:c6:9f:78:ce:02:6a:df:34:4c:b5: 1c:1e:05:4e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUCA/bhla63X1m/EA3ACOyuTfmpLgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTI4NjQ0RUNFQjMwODY4RjdEREQ4QjUwQkRFM0NEMEE1 QTNBMDZCODAeFw0yNjA0MDgwNzE5NTBaFw0yNjA0MDkwOTQ3NTBaMDMxMTAvBgNV BAMTKDU2MjA5M0RCODVBNzI5RDkxOUU4NkQ1QTVCREM1MkRFOUMwNkQyOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdGESy6DA2D8sfKNrttzxLfmSJ 7xnV2by3yU9U6ZALrBA2bSzMApyicTh/XqnoOFZ3nzRUhN0E5XA5WU6wvObQaEnJ eCT/BPqcxUTxbDevHv0ikBOPAw7nMWdhTp5btWzQaBaByYHc7TbZih59BR1NXj92 d2bFkLb0tVVJUn0DPKkX3xw7/N0XcuymY4qAjfG2wDVhxSuRwqr5w+/8FTi0WAGG RLJt8ADUHFW88C8xKLyebXorUls660vH19wEvVQJwiZnoSpC5Vl9mDDJXkuAsEtJ e3BZxydEarfFix6kgyo3u7wDhpWAqhcXrIaSZCTVcHChJ7tw1a6NBAVSLJcRAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUViCT24WnKdkZ6G1aW9xS3pwG0powHwYDVR0j BBgwFoAUEoZE7Oswho993YtQvePNClo6BrgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM0hoaWprVWZjQjc1ZUxvbUdFZ1hveUhkWDJQeWlDMUFaOG5GVGNuQm1m QlQvMC8xMjg2NDRFQ0VCMzA4NjhGN0RERDhCNTBCREUzQ0QwQTVBM0EwNkI4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzEyODY0NEVDRUIzMDg2OEY3 REREOEI1MEJERTNDRDBBNUEzQTA2QjguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M0hoaWprVWZjQjc1ZUxvbUdFZ1hveUhkWDJQeWlDMUFaOG5GVGNuQm1mQlQvMC8x Mjg2NDRFQ0VCMzA4NjhGN0RERDhCNTBCREUzQ0QwQTVBM0EwNkI4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAunn20o623MsJzZb/+0WOXc1VTGcQUX1C83fADpAGaeIL95s1fGFTUeAiq2A4 22eUNZTuza1NT08ZPX23TzuNvJK8fg5Oo1XCVwEukcI+pJRSf2vZ+GQJFcAAhv9c Ah57P+1TiFHj+KdB2LJypuomYISdSL+P5HLhdLatYddCoNdHzKr9z+mrOIuYS67k aQAgt8WqUtT7Sbcmsz12RMf8D4e6WQOSPPREzH/J+e8h8AcL0opjLjBwl9RuSV2/ s3f1S4K7JXJKWd0TKuIx3Ijl15FPtmSU54zITjV4Uw7uUiQKQh/ooWgbpFLgLtVO siFEfJrGn3jOAmrfNEy1HB4FTg== -----END CERTIFICATE-----Generated at Wed Apr 8 13:39:46 2026 by rpki-client