$ rpki-client -vvf rpki-repo.registro.br/repo/3hJ4RCNPQvYnRTmSpDFzcf1PWaxQ9Y11okExr7dq5n5k/1/642D27C2B88FC1E644188313B8DE644A2705C863.mft File: 642D27C2B88FC1E644188313B8DE644A2705C863.mft (raw, json) Hash identifier: af5Pr0QrdbRuM8NKr5+T+2ETn7rNX7ybpgyYrMXfX4U= Subject key identifier: 82:9B:80:F1:F4:BD:44:A3:CF:77:8C:CC:66:F7:27:DC:4A:CA:85:9A Authority key identifier: 64:2D:27:C2:B8:8F:C1:E6:44:18:83:13:B8:DE:64:4A:27:05:C8:63 Certificate issuer: /CN=642D27C2B88FC1E644188313B8DE644A2705C863 Certificate serial: 1D4F6CA0005C4F08A01344201EBBA91CD0503484 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/642D27C2B88FC1E644188313B8DE644A2705C863.cer Subject info access: rsync://rpki-repo.registro.br/repo/3hJ4RCNPQvYnRTmSpDFzcf1PWaxQ9Y11okExr7dq5n5k/1/642D27C2B88FC1E644188313B8DE644A2705C863.mft Manifest number: 03D4 Signing time: Wed 08 Apr 2026 08:57:00 +0000 Manifest this update: Wed 08 Apr 2026 08:52:00 +0000 Manifest next update: Thu 09 Apr 2026 11:21:00 +0000 Files and hashes: 1: 642D27C2B88FC1E644188313B8DE644A2705C863.crl (hash: hdiIzs3vuR+W4GNdZm7EnXQjqzEVuUofjPh4f5tzZuk=) 2: 323830343a323938303a3a2f33322d313238203d3e203533313732.roa (hash: 3cNdKeqfTwiEo3K1ZkDPpVt0OMOgFIFtS6tZRrGyuA8=) 3: 3134332e3133372e382e302f32322d3332203d3e203533313732.roa (hash: X0PpyJ+ZkjeFXJjUFcys+L9H6+zRoxLuhwZHnOEhxs0=) 4: 3138362e3232352e36342e302f32302d3332203d3e203533313732.roa (hash: sEQcH/MmUdhj4qZeg8tTfa6ACp7O9srZS6WMnAT4oeQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3hJ4RCNPQvYnRTmSpDFzcf1PWaxQ9Y11okExr7dq5n5k/1/642D27C2B88FC1E644188313B8DE644A2705C863.crl rsync://rpki-repo.registro.br/repo/3hJ4RCNPQvYnRTmSpDFzcf1PWaxQ9Y11okExr7dq5n5k/1/642D27C2B88FC1E644188313B8DE644A2705C863.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/642D27C2B88FC1E644188313B8DE644A2705C863.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 09 Apr 2026 11:21:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:4f:6c:a0:00:5c:4f:08:a0:13:44:20:1e:bb:a9:1c:d0:50:34:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=642D27C2B88FC1E644188313B8DE644A2705C863 Validity Not Before: Apr 8 08:52:00 2026 GMT Not After : Apr 9 11:21:00 2026 GMT Subject: CN=829B80F1F4BD44A3CF778CCC66F727DC4ACA859A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:53:ec:95:c8:0a:33:c7:fb:88:8c:b6:ba:43: b0:e2:78:9a:fd:cc:2e:c4:12:70:e6:43:7c:a0:81: 35:97:e3:23:3a:c9:10:06:77:91:ef:f1:fa:e1:25: 74:69:68:a2:48:ed:fe:e1:5b:58:64:52:fb:dc:99: 39:fd:78:ec:92:78:91:66:59:1b:20:c9:9b:aa:26: fe:85:ca:31:24:7c:b2:67:9b:e0:eb:0b:27:54:c1: de:94:ec:0a:69:41:46:ed:65:05:3c:8d:15:a4:04: 11:82:eb:64:05:74:30:9d:61:52:2b:3e:2c:9f:3b: ed:cf:b9:9b:8a:8f:3b:de:83:b8:02:3c:71:64:fa: dd:7d:63:7c:31:b7:8b:c3:c0:e9:4c:e1:52:06:a4: 1f:05:25:24:fb:b8:cb:56:ae:25:fa:17:78:7a:eb: d3:ff:45:e1:f8:b3:99:41:47:af:b2:ff:de:96:dc: 36:6b:e2:cf:c6:07:c8:c6:4b:ff:4d:18:92:8e:a1: f6:8c:f6:e2:a5:1b:18:70:8a:2b:ab:b9:ac:6b:a4: 29:50:f5:01:3e:20:03:9b:cc:c8:9b:f6:d6:3e:7a: 24:3b:1b:f7:82:ad:79:f7:aa:e0:e7:2d:48:90:c3: 33:43:52:e8:91:5c:41:1f:b9:03:45:48:f5:ad:6b: b1:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:9B:80:F1:F4:BD:44:A3:CF:77:8C:CC:66:F7:27:DC:4A:CA:85:9A X509v3 Authority Key Identifier: keyid:64:2D:27:C2:B8:8F:C1:E6:44:18:83:13:B8:DE:64:4A:27:05:C8:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3hJ4RCNPQvYnRTmSpDFzcf1PWaxQ9Y11okExr7dq5n5k/1/642D27C2B88FC1E644188313B8DE644A2705C863.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/642D27C2B88FC1E644188313B8DE644A2705C863.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3hJ4RCNPQvYnRTmSpDFzcf1PWaxQ9Y11okExr7dq5n5k/1/642D27C2B88FC1E644188313B8DE644A2705C863.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:e0:ee:9e:be:92:48:7b:99:f7:92:db:10:6e:d5:4d:01:db: 0d:aa:3d:f7:f7:17:5a:01:d4:cb:21:1f:3c:75:19:0d:d3:3a: 2e:a7:6e:18:10:6f:89:10:9a:74:57:f1:f0:09:1f:c7:03:56: b0:26:39:5c:80:61:20:6b:b4:d8:15:b2:22:14:89:ed:e3:7e: 87:ed:a9:12:bb:6e:b7:81:ff:ba:a1:3a:2e:4d:82:53:ee:e6: e3:f0:9f:da:4e:4a:da:a9:c1:32:62:29:85:ce:06:9b:2b:0c: 25:3f:ff:90:12:99:67:27:09:b6:cd:52:8c:23:61:4c:94:1d: 16:43:8c:30:c5:3c:59:23:f0:53:11:44:19:46:70:74:ad:ef: 32:27:df:78:0d:d0:56:6b:31:53:d4:e4:11:5b:ab:c2:d0:19: 81:45:78:80:7e:47:b8:05:bf:e1:6c:7c:eb:4c:7d:00:2c:8e: 96:0e:ab:90:41:33:1a:ad:e0:68:24:81:53:90:00:36:cd:a0: c2:34:29:5b:7a:39:3f:e9:61:47:c0:b7:92:a8:bf:61:93:fb: 0a:4b:1a:cc:1e:e7:63:e6:83:d0:aa:5c:63:e1:59:5e:1d:5f: 39:12:d9:4c:3c:f6:21:ca:a5:ad:ff:8f:60:ad:3c:4e:81:c6: 3c:de:ee:f5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUHU9soABcTwigE0QgHrupHNBQNIQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjQyRDI3QzJCODhGQzFFNjQ0MTg4MzEzQjhERTY0NEEy NzA1Qzg2MzAeFw0yNjA0MDgwODUyMDBaFw0yNjA0MDkxMTIxMDBaMDMxMTAvBgNV BAMTKDgyOUI4MEYxRjRCRDQ0QTNDRjc3OENDQzY2RjcyN0RDNEFDQTg1OUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXU+yVyAozx/uIjLa6Q7DieJr9 zC7EEnDmQ3yggTWX4yM6yRAGd5Hv8frhJXRpaKJI7f7hW1hkUvvcmTn9eOySeJFm WRsgyZuqJv6FyjEkfLJnm+DrCydUwd6U7AppQUbtZQU8jRWkBBGC62QFdDCdYVIr PiyfO+3PuZuKjzveg7gCPHFk+t19Y3wxt4vDwOlM4VIGpB8FJST7uMtWriX6F3h6 69P/ReH4s5lBR6+y/96W3DZr4s/GB8jGS/9NGJKOofaM9uKlGxhwiiuruaxrpClQ 9QE+IAObzMib9tY+eiQ7G/eCrXn3quDnLUiQwzNDUuiRXEEfuQNFSPWta7H1AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUgpuA8fS9RKPPd4zMZvcn3ErKhZowHwYDVR0j BBgwFoAUZC0nwriPweZEGIMTuN5kSicFyGMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM2hKNFJDTlBRdlluUlRtU3BERnpjZjFQV2F4UTlZMTFva0V4cjdkcTVu NWsvMS82NDJEMjdDMkI4OEZDMUU2NDQxODgzMTNCOERFNjQ0QTI3MDVDODYzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY0MkQyN0MyQjg4RkMxRTY0 NDE4ODMxM0I4REU2NDRBMjcwNUM4NjMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M2hKNFJDTlBRdlluUlRtU3BERnpjZjFQV2F4UTlZMTFva0V4cjdkcTVuNWsvMS82 NDJEMjdDMkI4OEZDMUU2NDQxODgzMTNCOERFNjQ0QTI3MDVDODYzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAuDunr6SSHuZ95LbEG7VTQHbDao99/cXWgHUyyEfPHUZDdM6LqduGBBviRCa dFfx8AkfxwNWsCY5XIBhIGu02BWyIhSJ7eN+h+2pErtut4H/uqE6Lk2CU+7m4/Cf 2k5K2qnBMmIphc4GmysMJT//kBKZZycJts1SjCNhTJQdFkOMMMU8WSPwUxFEGUZw dK3vMiffeA3QVmsxU9TkEVurwtAZgUV4gH5HuAW/4Wx860x9ACyOlg6rkEEzGq3g aCSBU5AANs2gwjQpW3o5P+lhR8C3kqi/YZP7CksazB7nY+aD0KpcY+FZXh1fORLZ TDz2Icqlrf+PYK08ToHGPN7u9Q== -----END CERTIFICATE-----Generated at Wed Apr 8 19:04:38 2026 by rpki-client