$ rpki-client -vvf rpki-repo.registro.br/repo/3RuRLLauazzqQd75GiZLitNaQZxmdUq6LDJZj8fqeyd2/1/5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9.mft File: 5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9.mft (raw, json) Hash identifier: Gw8g+pwKdZyxzE1/fAjFiTABEHCW4UkeaOzM8gA/UYw= Subject key identifier: 7C:DC:5F:FB:83:A6:D0:38:46:CC:8E:80:01:F0:F4:D0:8F:0C:E7:62 Authority key identifier: 5F:F5:DC:22:C9:F3:8E:4B:3A:5F:FA:CC:76:89:C6:EB:52:A6:5D:B9 Certificate issuer: /CN=5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9 Certificate serial: 6B68E3A24AAE0AA91D0A5A32A346E19EBCA56C8E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9.cer Subject info access: rsync://rpki-repo.registro.br/repo/3RuRLLauazzqQd75GiZLitNaQZxmdUq6LDJZj8fqeyd2/1/5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9.mft Manifest number: 03D6 Signing time: Wed 08 Apr 2026 07:46:24 +0000 Manifest this update: Wed 08 Apr 2026 07:41:24 +0000 Manifest next update: Thu 09 Apr 2026 09:23:24 +0000 Files and hashes: 1: 323830343a313536343a3a2f33322d3336203d3e203532353730.roa (hash: MJEU9stz6b2jhBGcAeFLhP96QluPf2/eiJRTzyfKnO0=) 2: 3137392e39362e3230302e302f32312d3234203d3e203532353730.roa (hash: d1r/JqCcRrfI+uplhqwOSFjUh6OVTzwZb6fZkyUCGRU=) 3: 5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9.crl (hash: B3kMJu/EAEUTtHcC3qyv/TmW2+dupp0rBU1YuxmQ58U=) 4: 3137372e38362e3131362e302f32322d3234203d3e203532353730.roa (hash: x1+GQO8H+q7duDGrJLmVFbvRT4PTXdBBkE2zgyXohJc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3RuRLLauazzqQd75GiZLitNaQZxmdUq6LDJZj8fqeyd2/1/5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9.crl rsync://rpki-repo.registro.br/repo/3RuRLLauazzqQd75GiZLitNaQZxmdUq6LDJZj8fqeyd2/1/5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 09 Apr 2026 09:23:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:68:e3:a2:4a:ae:0a:a9:1d:0a:5a:32:a3:46:e1:9e:bc:a5:6c:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9 Validity Not Before: Apr 8 07:41:24 2026 GMT Not After : Apr 9 09:23:24 2026 GMT Subject: CN=7CDC5FFB83A6D03846CC8E8001F0F4D08F0CE762 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:d8:68:b6:e9:c2:46:1f:59:9d:b1:82:1e:cc: b1:90:3c:84:da:1c:e9:8d:92:cf:fd:d7:23:af:8a: ba:c2:44:d5:51:94:79:25:07:70:64:4f:df:68:4c: 54:7f:b6:5a:35:cb:ef:c9:5c:6c:32:3a:b4:e3:60: c9:36:9b:7e:9d:f2:9a:3a:12:a9:7e:aa:8d:2e:d6: 19:14:0c:f7:f4:73:ec:f6:5f:21:6b:b3:70:b5:9b: fd:34:1d:d5:2b:61:e3:26:01:2f:5a:bc:4f:e4:92: 5d:af:6a:dd:49:e7:83:52:d9:67:14:85:4c:73:73: 2c:b3:6f:04:f5:9b:1f:97:db:02:7f:27:ad:19:c4: 22:b5:d8:1b:03:36:3e:e6:c7:80:f0:8f:a2:b9:ae: c1:8b:e3:68:22:5f:0a:df:2a:6c:c3:e8:a1:27:41: 4e:70:26:92:42:47:ac:50:49:fd:25:a9:cc:80:4b: 84:5c:33:3c:52:2c:80:22:e6:89:6b:70:5f:61:95: 53:29:a8:db:fa:25:5b:da:b4:9b:4f:3d:ee:62:cd: a9:4b:09:ba:85:59:e0:2e:f7:c2:39:ef:43:cf:a9: 0a:7f:0e:c5:d2:7c:ea:80:30:fe:66:e7:ef:33:40: f1:f1:c1:02:e4:a6:2f:27:84:9b:00:cf:14:46:4c: bb:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:DC:5F:FB:83:A6:D0:38:46:CC:8E:80:01:F0:F4:D0:8F:0C:E7:62 X509v3 Authority Key Identifier: keyid:5F:F5:DC:22:C9:F3:8E:4B:3A:5F:FA:CC:76:89:C6:EB:52:A6:5D:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3RuRLLauazzqQd75GiZLitNaQZxmdUq6LDJZj8fqeyd2/1/5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3RuRLLauazzqQd75GiZLitNaQZxmdUq6LDJZj8fqeyd2/1/5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:96:2e:f0:94:65:cb:c8:a6:08:c1:5c:e3:f4:48:95:21:0c: 9d:3f:52:bb:db:53:e2:df:a0:fc:6e:f2:d2:0a:be:dc:24:ed: 29:75:50:94:6b:45:79:48:47:f9:54:9e:15:cc:da:cb:ea:ea: c4:9d:46:76:98:d0:8e:a8:8a:c4:54:30:1d:33:55:52:08:05: da:8c:a7:c3:80:81:f0:4a:26:2a:b8:96:1d:59:d6:58:f6:0e: 72:46:77:75:e0:e1:9f:d5:28:9a:4b:a6:60:44:7f:81:c5:52: cf:ef:f3:99:80:68:c4:c0:c8:6c:07:e3:80:e3:c2:aa:1a:97: 53:94:78:86:6f:ab:17:1f:d4:b2:02:17:8a:3b:d1:65:1c:c3: ee:5b:55:3d:ec:27:f1:1a:11:ae:ab:8c:17:07:33:96:1e:49: 5c:c2:58:92:3c:b9:0c:41:dd:86:f4:79:fc:5e:89:79:47:45: 75:4e:64:85:3d:38:c5:53:a8:9a:72:d0:da:64:ef:2f:b3:09: cd:dc:ea:b9:21:60:fb:b5:97:75:f3:69:61:53:de:8e:45:0f: 45:61:f6:e4:22:a3:be:cf:7d:29:90:51:08:11:7a:ca:2e:e0: 61:40:4e:93:e5:1d:0c:39:d5:d1:4e:be:10:36:5d:12:28:c2: a4:65:1a:c0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUa2jjokquCqkdCloyo0bhnrylbI4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUZGNURDMjJDOUYzOEU0QjNBNUZGQUNDNzY4OUM2RUI1 MkE2NURCOTAeFw0yNjA0MDgwNzQxMjRaFw0yNjA0MDkwOTIzMjRaMDMxMTAvBgNV BAMTKDdDREM1RkZCODNBNkQwMzg0NkNDOEU4MDAxRjBGNEQwOEYwQ0U3NjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe2Gi26cJGH1mdsYIezLGQPITa HOmNks/91yOvirrCRNVRlHklB3BkT99oTFR/tlo1y+/JXGwyOrTjYMk2m36d8po6 Eql+qo0u1hkUDPf0c+z2XyFrs3C1m/00HdUrYeMmAS9avE/kkl2vat1J54NS2WcU hUxzcyyzbwT1mx+X2wJ/J60ZxCK12BsDNj7mx4Dwj6K5rsGL42giXwrfKmzD6KEn QU5wJpJCR6xQSf0lqcyAS4RcMzxSLIAi5olrcF9hlVMpqNv6JVvatJtPPe5izalL CbqFWeAu98I570PPqQp/DsXSfOqAMP5m5+8zQPHxwQLkpi8nhJsAzxRGTLspAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUfNxf+4Om0DhGzI6AAfD00I8M52IwHwYDVR0j BBgwFoAUX/XcIsnzjks6X/rMdonG61KmXbkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM1J1UkxMYXVhenpxUWQ3NUdpWkxpdE5hUVp4bWRVcTZMREpaajhmcWV5 ZDIvMS81RkY1REMyMkM5RjM4RTRCM0E1RkZBQ0M3Njg5QzZFQjUyQTY1REI5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVGRjVEQzIyQzlGMzhFNEIz QTVGRkFDQzc2ODlDNkVCNTJBNjVEQjkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M1J1UkxMYXVhenpxUWQ3NUdpWkxpdE5hUVp4bWRVcTZMREpaajhmcWV5ZDIvMS81 RkY1REMyMkM5RjM4RTRCM0E1RkZBQ0M3Njg5QzZFQjUyQTY1REI5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtJYu8JRly8imCMFc4/RIlSEMnT9Su9tT4t+g/G7y0gq+3CTtKXVQlGtFeUhH +VSeFczay+rqxJ1GdpjQjqiKxFQwHTNVUggF2oynw4CB8EomKriWHVnWWPYOckZ3 deDhn9UomkumYER/gcVSz+/zmYBoxMDIbAfjgOPCqhqXU5R4hm+rFx/UsgIXijvR ZRzD7ltVPewn8RoRrquMFwczlh5JXMJYkjy5DEHdhvR5/F6JeUdFdU5khT04xVOo mnLQ2mTvL7MJzdzquSFg+7WXdfNpYVPejkUPRWH25CKjvs99KZBRCBF6yi7gYUBO k+UdDDnV0U6+EDZdEijCpGUawA== -----END CERTIFICATE-----Generated at Wed Apr 8 18:13:37 2026 by rpki-client