$ rpki-client -vvf rpki-repo.registro.br/repo/3xEzHhnAZeadzR8kYfVsGmVZtfXKVpGQRdNYdT7XDjRK/0/DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570.mft File: DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570.mft (raw, json) Hash identifier: c8XOmvxcF5dHJNJSdw82exmFvo9GNyTP6bGnr+0hqSM= Subject key identifier: 71:A6:05:8D:61:E2:38:C9:A2:E2:D6:ED:B6:F2:90:E1:F0:12:00:F9 Authority key identifier: DD:A1:EC:4A:0E:48:B5:C0:9F:B7:46:32:7F:05:F5:1E:B5:F8:E5:70 Certificate issuer: /CN=DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570 Certificate serial: 4A767F61DC12F426850D2FFA1A5DB142519EA605 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570.cer Subject info access: rsync://rpki-repo.registro.br/repo/3xEzHhnAZeadzR8kYfVsGmVZtfXKVpGQRdNYdT7XDjRK/0/DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570.mft Manifest number: 03A0 Signing time: Wed 08 Apr 2026 19:21:48 +0000 Manifest this update: Wed 08 Apr 2026 19:16:48 +0000 Manifest next update: Thu 09 Apr 2026 21:07:48 +0000 Files and hashes: 1: DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570.crl (hash: NmtRDInOAARdewP1fLi9EFWKwl/ZpklcD7GQvc07ZVk=) 2: 34352e3233362e32302e302f32322d3234203d3e20323638323232.roa (hash: Mldlh0F+qMneZfStPjBLuID03ag4mGBsrq4TGfN1eaU=) 3: 323830343a346464343a3a2f33322d3438203d3e20323638323232.roa (hash: waL43fddyS4rfCdCZ2ijjzKpHLb2qlw6Zb24sjLRXdY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3xEzHhnAZeadzR8kYfVsGmVZtfXKVpGQRdNYdT7XDjRK/0/DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570.crl rsync://rpki-repo.registro.br/repo/3xEzHhnAZeadzR8kYfVsGmVZtfXKVpGQRdNYdT7XDjRK/0/DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 09 Apr 2026 21:07:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:76:7f:61:dc:12:f4:26:85:0d:2f:fa:1a:5d:b1:42:51:9e:a6:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570 Validity Not Before: Apr 8 19:16:48 2026 GMT Not After : Apr 9 21:07:48 2026 GMT Subject: CN=71A6058D61E238C9A2E2D6EDB6F290E1F01200F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:c0:ed:3f:e5:b0:51:a3:f6:90:32:e3:bd:6b: ac:61:23:94:06:77:da:72:b8:0c:f2:40:48:4d:20: 57:0f:78:3d:23:5e:1d:b6:63:25:7e:5f:ba:13:bd: d2:b2:9a:cd:75:51:78:97:dc:b0:d0:91:6e:ce:34: 16:cf:10:4b:6f:bd:a5:ad:25:c0:21:72:dd:46:71: 50:6e:51:fb:64:43:56:fe:47:23:a7:fa:8f:8d:c2: 7a:b8:f3:38:e2:ac:99:4f:dc:8b:90:5e:13:78:55: b5:bb:f3:6c:a7:e3:28:67:c3:13:9e:35:e0:77:83: 17:11:c1:3a:b8:2b:5a:f2:ee:9e:ed:22:86:95:20: a9:6f:c6:1f:44:57:a9:03:ac:ca:d0:5d:d1:c1:dc: 12:47:dc:48:14:fa:39:cf:8e:e6:0d:e2:a5:60:11: 20:29:22:93:b7:1c:ab:d8:3b:b6:cc:82:c3:28:c7: 7e:3e:65:00:96:1e:27:85:69:18:07:8d:af:5d:3d: 55:a0:e3:3d:1b:1a:4d:18:c7:63:e8:d5:82:d4:9e: 77:f5:9b:a0:6e:4c:72:b9:19:c6:cc:80:b7:2a:b9: 19:5c:5c:29:e4:9f:b5:c2:c4:27:9e:43:c1:99:d8: 5a:cd:bb:81:8b:e0:d5:18:f5:eb:ec:99:e8:af:cd: ec:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:A6:05:8D:61:E2:38:C9:A2:E2:D6:ED:B6:F2:90:E1:F0:12:00:F9 X509v3 Authority Key Identifier: keyid:DD:A1:EC:4A:0E:48:B5:C0:9F:B7:46:32:7F:05:F5:1E:B5:F8:E5:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3xEzHhnAZeadzR8kYfVsGmVZtfXKVpGQRdNYdT7XDjRK/0/DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3xEzHhnAZeadzR8kYfVsGmVZtfXKVpGQRdNYdT7XDjRK/0/DDA1EC4A0E48B5C09FB746327F05F51EB5F8E570.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:a7:35:6e:31:66:0f:99:d3:60:e2:47:ea:5f:ae:cf:b2:ed: 62:ae:ee:46:93:c7:f9:9d:8c:d6:a4:40:28:87:d9:8a:fc:8b: fc:cb:a1:41:dd:47:1e:e9:45:88:30:49:32:43:bf:e2:ac:11: 83:09:a9:fd:09:92:cc:f2:bf:a9:dc:6f:44:c5:fb:84:fd:3c: 18:11:fd:13:4a:76:53:58:f1:a3:71:5d:db:6e:2a:93:c3:a1: e9:c2:31:a3:26:c1:a3:db:1e:37:66:5e:d0:e9:77:6c:44:90: 80:f0:c2:94:ce:9b:e0:0f:25:16:55:0f:6b:90:11:97:2a:df: b1:6a:92:d7:1f:bf:90:ec:36:71:97:65:dc:b9:37:07:c9:52: 3b:f7:73:fb:22:22:30:3d:51:5f:89:72:47:bc:d6:f0:cb:25: e9:e7:b9:e5:43:bc:a4:0a:74:c8:27:76:fc:4c:cf:3e:20:f6: 09:d2:ab:75:dc:39:b4:a6:35:41:5d:3e:f5:3d:f0:a8:f8:46: 6d:5b:66:e4:5f:6a:e3:3d:de:40:fe:8b:23:f8:dd:ab:31:1e: 9b:75:1f:df:6b:9c:a8:41:51:c4:aa:71:a9:d1:7c:cf:31:04: 2d:09:c1:e2:ee:1c:62:88:c5:dc:87:2c:90:c8:81:9e:44:30: 6f:ae:88:0d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUSnZ/YdwS9CaFDS/6Gl2xQlGepgUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERBMUVDNEEwRTQ4QjVDMDlGQjc0NjMyN0YwNUY1MUVC NUY4RTU3MDAeFw0yNjA0MDgxOTE2NDhaFw0yNjA0MDkyMTA3NDhaMDMxMTAvBgNV BAMTKDcxQTYwNThENjFFMjM4QzlBMkUyRDZFREI2RjI5MEUxRjAxMjAwRjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZwO0/5bBRo/aQMuO9a6xhI5QG d9pyuAzyQEhNIFcPeD0jXh22YyV+X7oTvdKyms11UXiX3LDQkW7ONBbPEEtvvaWt JcAhct1GcVBuUftkQ1b+RyOn+o+Nwnq48zjirJlP3IuQXhN4VbW782yn4yhnwxOe NeB3gxcRwTq4K1ry7p7tIoaVIKlvxh9EV6kDrMrQXdHB3BJH3EgU+jnPjuYN4qVg ESApIpO3HKvYO7bMgsMox34+ZQCWHieFaRgHja9dPVWg4z0bGk0Yx2Po1YLUnnf1 m6BuTHK5GcbMgLcquRlcXCnkn7XCxCeeQ8GZ2FrNu4GL4NUY9evsmeivzezvAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUcaYFjWHiOMmi4tbttvKQ4fASAPkwHwYDVR0j BBgwFoAU3aHsSg5ItcCft0YyfwX1HrX45XAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM3hFekhobkFaZWFkelI4a1lmVnNHbVZadGZYS1ZwR1FSZE5ZZFQ3WERq UksvMC9EREExRUM0QTBFNDhCNUMwOUZCNzQ2MzI3RjA1RjUxRUI1RjhFNTcwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0REQTFFQzRBMEU0OEI1QzA5 RkI3NDYzMjdGMDVGNTFFQjVGOEU1NzAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M3hFekhobkFaZWFkelI4a1lmVnNHbVZadGZYS1ZwR1FSZE5ZZFQ3WERqUksvMC9E REExRUM0QTBFNDhCNUMwOUZCNzQ2MzI3RjA1RjUxRUI1RjhFNTcwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIac1bjFmD5nTYOJH6l+uz7LtYq7uRpPH+Z2M1qRAKIfZivyL/MuhQd1HHulF iDBJMkO/4qwRgwmp/QmSzPK/qdxvRMX7hP08GBH9E0p2U1jxo3Fd224qk8Oh6cIx oybBo9seN2Ze0Ol3bESQgPDClM6b4A8lFlUPa5ARlyrfsWqS1x+/kOw2cZdl3Lk3 B8lSO/dz+yIiMD1RX4lyR7zW8Msl6ee55UO8pAp0yCd2/EzPPiD2CdKrddw5tKY1 QV0+9T3wqPhGbVtm5F9q4z3eQP6LI/jdqzEem3Uf32ucqEFRxKpxqdF8zzEELQnB 4u4cYojF3IcskMiBnkQwb66IDQ== -----END CERTIFICATE-----Generated at Wed Apr 8 23:15:47 2026 by rpki-client