$ rpki-client -vvf rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.mft File: 33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.mft (raw, json) Hash identifier: gER7cdEDOyYXeFoDEVFU3QAujgoocG4UH1yLM8HiTEI= Subject key identifier: 42:C6:01:E0:50:C2:1A:EA:3D:D5:F5:83:25:5F:32:54:19:5F:AF:89 Authority key identifier: 33:D9:9D:98:BF:D9:93:CB:7D:E4:28:4C:D0:B8:34:BD:AA:1F:B7:68 Certificate issuer: /CN=33D99D98BFD993CB7DE4284CD0B834BDAA1FB768 Certificate serial: 31A894E520CBA1841329410B6ABE7861B4212916 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.cer Subject info access: rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.mft Manifest number: 02C8 Signing time: Wed 08 Apr 2026 05:10:58 +0000 Manifest this update: Wed 08 Apr 2026 05:05:58 +0000 Manifest next update: Thu 09 Apr 2026 07:44:58 +0000 Files and hashes: 1: 33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.crl (hash: 4VuP3M7/Cid3MU3S7E6tM7mwnPZl4XWpiJRXq6OoFxI=) 2: 323830343a333336303a3a2f33322d3438203d3e20323632373235.roa (hash: iZRZHxag0+tPBMVhvuUKsY7/fLV/sxx+xABdX823i5g=) 3: 323830343a333336303a303a3230303a3a2f35352d3535203d3e20323632373235.roa (hash: TaCWInvLI8a48AGUGO8+iCDWxCk7mM6lWeqt2l/Dnwg=) 4: 3138362e3139322e302e302f32302d3234203d3e20323632373235.roa (hash: qhyepoUM/vR4i7iGTSudcrinyJEPmBC92cOtWL6vuhA=) 5: 323830343a333336303a303a33303a3a2f36342d3634203d3e20323632373235.roa (hash: drgBn3Bfkh1ZDqzVLXw6b+ol1K19Qb6SGwRZSnRcdTc=) 6: 3138362e3233352e36342e302f32302d3234203d3e20323632373235.roa (hash: HrcZaPIw6qWzEc6s97NQP4aCx0sr+eIFUBJ4BvkAiU0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.crl rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 09 Apr 2026 07:44:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:a8:94:e5:20:cb:a1:84:13:29:41:0b:6a:be:78:61:b4:21:29:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33D99D98BFD993CB7DE4284CD0B834BDAA1FB768 Validity Not Before: Apr 8 05:05:58 2026 GMT Not After : Apr 9 07:44:58 2026 GMT Subject: CN=42C601E050C21AEA3DD5F583255F3254195FAF89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ec:b0:e2:35:88:51:04:cb:d4:b5:7c:b7:34: 0b:63:50:0f:9d:23:15:ee:c7:20:b7:8c:c7:d0:c8: 53:64:ed:ca:9c:43:db:ac:6a:9b:e2:5b:25:07:96: 57:78:5a:cf:7f:be:71:4c:31:c6:e2:1b:aa:e4:d0: af:eb:e4:24:0c:ab:04:54:13:cd:56:84:5d:f4:13: 6c:16:0b:c9:f7:aa:ca:f2:7e:d3:b9:93:2d:63:e7: 6f:53:f2:fc:10:20:8a:44:fd:b2:a1:02:32:36:60: 3a:db:f2:90:aa:4c:ca:60:c7:70:23:75:d0:0f:5d: d5:a1:c9:fc:26:27:8a:4e:75:57:20:53:ac:c9:81: 54:cb:00:70:cd:6f:25:a3:ee:18:8b:bd:f5:89:e4: f0:cd:5f:d8:57:fb:76:92:df:19:9c:8c:b4:e4:ea: e4:93:be:f6:2e:aa:a3:d7:2f:b7:18:67:02:d0:e9: 16:57:69:bc:3c:dc:7d:dd:a8:61:be:02:04:b5:b8: c9:4b:69:79:5c:dc:94:a0:8f:61:1c:89:f8:18:ef: 0d:49:9e:e7:cc:3b:1e:d9:1a:4f:94:b9:3e:a6:cc: 69:dc:3c:41:ce:c4:f3:63:bb:ec:29:66:fd:f6:96: d8:9c:a2:0c:5b:76:83:ac:d7:d8:21:16:db:2a:d4: 46:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:C6:01:E0:50:C2:1A:EA:3D:D5:F5:83:25:5F:32:54:19:5F:AF:89 X509v3 Authority Key Identifier: keyid:33:D9:9D:98:BF:D9:93:CB:7D:E4:28:4C:D0:B8:34:BD:AA:1F:B7:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:cb:92:67:7b:7c:80:07:69:76:95:25:eb:1f:6c:56:93:2f: 55:a0:02:82:d7:58:15:df:c4:5c:ab:b3:0b:85:75:06:77:80: 01:92:01:b4:73:02:1e:3e:a5:4a:65:73:40:0f:0a:ed:04:9e: 7a:75:e3:c4:7c:2b:8e:4c:41:87:cb:65:bf:e6:94:1f:8c:a2: 5f:e0:ba:52:4a:a6:42:25:98:a8:d5:93:c8:81:f6:c5:6d:da: 42:8c:2d:20:4d:57:82:6a:ab:18:b2:e8:aa:d0:56:5a:0b:a0: 0c:5d:aa:92:ae:f5:aa:62:a7:d8:a5:cc:a2:b3:cb:ef:92:18: 3d:b1:86:e5:4c:ed:11:df:a1:33:01:c9:e4:a6:8d:94:fd:29: 4f:b6:14:85:23:08:25:d8:86:13:48:6b:70:15:e0:dc:b8:ec: 81:7e:08:e0:05:d8:80:46:2b:85:95:e9:9a:87:ee:ed:c6:57: d1:77:74:c4:fd:9d:25:b7:77:31:20:65:8b:2c:ec:fa:c9:49: 90:39:d1:4b:04:ac:5f:e8:65:84:f4:2e:f4:0a:d6:1e:ba:0a: 7c:38:6d:af:0f:56:df:24:4e:70:ab:cf:93:47:bf:ba:7b:21: b1:31:0b:70:66:69:2f:c7:fb:7c:aa:39:16:5d:f3:0f:4e:eb: 79:01:65:9f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUMaiU5SDLoYQTKUELar54YbQhKRYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNEOTlEOThCRkQ5OTNDQjdERTQyODRDRDBCODM0QkRB QTFGQjc2ODAeFw0yNjA0MDgwNTA1NThaFw0yNjA0MDkwNzQ0NThaMDMxMTAvBgNV BAMTKDQyQzYwMUUwNTBDMjFBRUEzREQ1RjU4MzI1NUYzMjU0MTk1RkFGODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+7LDiNYhRBMvUtXy3NAtjUA+d IxXuxyC3jMfQyFNk7cqcQ9usapviWyUHlld4Ws9/vnFMMcbiG6rk0K/r5CQMqwRU E81WhF30E2wWC8n3qsryftO5ky1j529T8vwQIIpE/bKhAjI2YDrb8pCqTMpgx3Aj ddAPXdWhyfwmJ4pOdVcgU6zJgVTLAHDNbyWj7hiLvfWJ5PDNX9hX+3aS3xmcjLTk 6uSTvvYuqqPXL7cYZwLQ6RZXabw83H3dqGG+AgS1uMlLaXlc3JSgj2EcifgY7w1J nufMOx7ZGk+UuT6mzGncPEHOxPNju+wpZv32lticogxbdoOs19ghFtsq1EbRAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUQsYB4FDCGuo91fWDJV8yVBlfr4kwHwYDVR0j BBgwFoAUM9mdmL/Zk8t95ChM0Lg0vaoft2gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM0tYa2FuMVAxeGM3Sk5KanRQZUxUbXNHR1F0OGlmUnRWWlBZVHVyaTNO VVIvMC8zM0Q5OUQ5OEJGRDk5M0NCN0RFNDI4NENEMEI4MzRCREFBMUZCNzY4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMzRDk5RDk4QkZEOTkzQ0I3 REU0Mjg0Q0QwQjgzNEJEQUExRkI3NjguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M0tYa2FuMVAxeGM3Sk5KanRQZUxUbXNHR1F0OGlmUnRWWlBZVHVyaTNOVVIvMC8z M0Q5OUQ5OEJGRDk5M0NCN0RFNDI4NENEMEI4MzRCREFBMUZCNzY4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQMuSZ3t8gAdpdpUl6x9sVpMvVaACgtdYFd/EXKuzC4V1BneAAZIBtHMCHj6l SmVzQA8K7QSeenXjxHwrjkxBh8tlv+aUH4yiX+C6UkqmQiWYqNWTyIH2xW3aQowt IE1XgmqrGLLoqtBWWgugDF2qkq71qmKn2KXMorPL75IYPbGG5UztEd+hMwHJ5KaN lP0pT7YUhSMIJdiGE0hrcBXg3LjsgX4I4AXYgEYrhZXpmofu7cZX0Xd0xP2dJbd3 MSBliyzs+slJkDnRSwSsX+hlhPQu9ArWHroKfDhtrw9W3yROcKvPk0e/unshsTEL cGZpL8f7fKo5Fl3zD07reQFlnw== -----END CERTIFICATE-----Generated at Wed Apr 8 15:03:19 2026 by rpki-client