$ rpki-client -vvf rpki-repo.registro.br/repo/49uW1kChcDYAEjZeg8FXqY7EEpWZvB8z3xD4i2PYVTsg/1/4CA21A8D928CABC0C9EF13850635B31EAF3C2642.mft File: 4CA21A8D928CABC0C9EF13850635B31EAF3C2642.mft (raw, json) Hash identifier: 0NQd37Do3x/ERWMPhltYw7NmoEFwm1j7YMw+imYuKTY= Subject key identifier: 32:D4:52:07:BD:4A:FF:24:57:78:17:24:80:65:28:0B:7B:35:BC:E5 Authority key identifier: 4C:A2:1A:8D:92:8C:AB:C0:C9:EF:13:85:06:35:B3:1E:AF:3C:26:42 Certificate issuer: /CN=4CA21A8D928CABC0C9EF13850635B31EAF3C2642 Certificate serial: 5EDEBB9FBD4633DC1BDE086F5FFCBAFF10802183 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CA21A8D928CABC0C9EF13850635B31EAF3C2642.cer Subject info access: rsync://rpki-repo.registro.br/repo/49uW1kChcDYAEjZeg8FXqY7EEpWZvB8z3xD4i2PYVTsg/1/4CA21A8D928CABC0C9EF13850635B31EAF3C2642.mft Manifest number: 03D4 Signing time: Wed 08 Apr 2026 08:40:02 +0000 Manifest this update: Wed 08 Apr 2026 08:35:02 +0000 Manifest next update: Thu 09 Apr 2026 10:27:02 +0000 Files and hashes: 1: 323830343a313732343a3a2f33322d3332203d3e20323633313236.roa (hash: vVV22j58Yfsh1Qfzn7vhAD/HigVdo4SwqakmT60rrPs=) 2: 4CA21A8D928CABC0C9EF13850635B31EAF3C2642.crl (hash: lv4gYW+PWY6h7f1EnB4HGKdtR1bKQliNTkD9D0WKqRA=) 3: 3137372e39322e3138342e302f32312d3231203d3e20323633313236.roa (hash: ZdB7lJ4g6bwwHFNR/gEOPyRpDFv4aASBP3gDhJDi0eo=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/49uW1kChcDYAEjZeg8FXqY7EEpWZvB8z3xD4i2PYVTsg/1/4CA21A8D928CABC0C9EF13850635B31EAF3C2642.crl rsync://rpki-repo.registro.br/repo/49uW1kChcDYAEjZeg8FXqY7EEpWZvB8z3xD4i2PYVTsg/1/4CA21A8D928CABC0C9EF13850635B31EAF3C2642.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CA21A8D928CABC0C9EF13850635B31EAF3C2642.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 09 Apr 2026 10:27:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:de:bb:9f:bd:46:33:dc:1b:de:08:6f:5f:fc:ba:ff:10:80:21:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4CA21A8D928CABC0C9EF13850635B31EAF3C2642 Validity Not Before: Apr 8 08:35:02 2026 GMT Not After : Apr 9 10:27:02 2026 GMT Subject: CN=32D45207BD4AFF24577817248065280B7B35BCE5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:b2:15:a5:26:97:4e:63:b6:ae:18:b2:71:42: f1:a9:cb:9b:a6:97:f7:d4:5b:43:f5:d2:14:d6:f7: 05:2d:5b:e3:0b:a9:7d:1c:57:f5:d7:a1:fb:d6:f2: 51:74:70:82:12:f6:bd:a0:9a:f6:94:d1:a4:a9:d1: 13:1e:2d:ea:38:c6:68:1e:ff:7f:f7:87:c8:28:54: bb:e8:21:79:a9:42:fb:84:7b:84:c8:ec:d6:ab:81: 93:34:10:65:df:08:47:49:cb:9c:7b:de:03:9f:85: 6d:b0:3b:3b:d4:cc:ad:16:4b:06:28:ad:78:26:84: a7:ad:4b:72:61:44:ae:50:42:1e:00:eb:65:8e:39: 6c:32:c1:74:a2:d5:ee:b7:3c:a8:69:d0:4e:d4:48: c7:03:24:80:d0:ad:e2:49:1f:2e:9a:e9:1c:30:65: 5d:44:ab:d5:a3:2b:c9:ff:67:28:c8:5a:36:b7:31: 11:56:66:8c:b5:4b:9f:7b:f8:31:97:1c:dd:9d:64: 1b:53:26:ff:80:09:1d:0c:c7:7f:6a:a7:14:21:75: f4:09:48:f6:3f:2f:54:7c:26:ff:10:18:2f:d7:fa: e0:0f:bd:0b:59:6b:ea:45:d1:85:af:b3:35:aa:03: 09:1e:4b:8b:ee:c6:a7:39:e8:75:14:36:d0:ce:4b: fb:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:D4:52:07:BD:4A:FF:24:57:78:17:24:80:65:28:0B:7B:35:BC:E5 X509v3 Authority Key Identifier: keyid:4C:A2:1A:8D:92:8C:AB:C0:C9:EF:13:85:06:35:B3:1E:AF:3C:26:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/49uW1kChcDYAEjZeg8FXqY7EEpWZvB8z3xD4i2PYVTsg/1/4CA21A8D928CABC0C9EF13850635B31EAF3C2642.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CA21A8D928CABC0C9EF13850635B31EAF3C2642.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/49uW1kChcDYAEjZeg8FXqY7EEpWZvB8z3xD4i2PYVTsg/1/4CA21A8D928CABC0C9EF13850635B31EAF3C2642.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:88:c4:8d:81:fb:60:86:a6:1e:bf:26:7e:5d:58:81:d5:5b: ac:b8:b3:52:79:aa:a6:bf:d3:84:53:44:4b:bd:31:ce:a8:3a: 1d:3e:c0:f7:12:87:86:5d:d4:f7:bf:c1:a3:bd:05:e7:55:56: 56:ac:c0:df:e9:76:15:b3:82:ca:b3:af:30:a1:8d:e8:02:c4: ef:94:3d:9c:44:9a:98:55:b5:fd:af:7e:3e:33:a0:a1:d0:34: 23:0b:42:05:fc:a7:69:bc:5a:19:c5:44:34:5b:3e:e2:7b:e6: 1b:18:e6:e8:55:dc:b0:f1:15:d4:bc:cc:c1:dd:f5:7f:5a:a2: 89:70:b4:c2:f2:f8:87:a0:ed:f9:13:e2:b3:49:52:a7:7a:47: e4:08:c4:fd:54:a7:05:7e:72:12:b5:5f:34:48:f3:50:f0:f9: a9:f3:6a:84:f7:2d:76:19:46:00:b0:2c:a7:c6:98:59:63:18: de:a1:c4:65:9b:f4:71:50:c9:6f:09:f9:f4:49:5e:e4:95:5a: 52:db:55:92:8b:0d:10:76:93:aa:95:5f:e7:fc:08:ac:15:4a: 20:25:66:1f:e0:c0:07:49:bd:f5:7c:51:a1:50:28:b1:1e:6c: 7a:07:ee:77:6c:bc:65:86:b1:98:78:d3:3e:fd:74:d7:a8:c7: c9:2e:76:a3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUXt67n71GM9wb3ghvX/y6/xCAIYMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNENBMjFBOEQ5MjhDQUJDMEM5RUYxMzg1MDYzNUIzMUVB RjNDMjY0MjAeFw0yNjA0MDgwODM1MDJaFw0yNjA0MDkxMDI3MDJaMDMxMTAvBgNV BAMTKDMyRDQ1MjA3QkQ0QUZGMjQ1Nzc4MTcyNDgwNjUyODBCN0IzNUJDRTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1shWlJpdOY7auGLJxQvGpy5um l/fUW0P10hTW9wUtW+MLqX0cV/XXofvW8lF0cIIS9r2gmvaU0aSp0RMeLeo4xmge /3/3h8goVLvoIXmpQvuEe4TI7NargZM0EGXfCEdJy5x73gOfhW2wOzvUzK0WSwYo rXgmhKetS3JhRK5QQh4A62WOOWwywXSi1e63PKhp0E7USMcDJIDQreJJHy6a6Rww ZV1Eq9WjK8n/ZyjIWja3MRFWZoy1S597+DGXHN2dZBtTJv+ACR0Mx39qpxQhdfQJ SPY/L1R8Jv8QGC/X+uAPvQtZa+pF0YWvszWqAwkeS4vuxqc56HUUNtDOS/u/AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUMtRSB71K/yRXeBckgGUoC3s1vOUwHwYDVR0j BBgwFoAUTKIajZKMq8DJ7xOFBjWzHq88JkIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNDl1VzFrQ2hjRFlBRWpaZWc4RlhxWTdFRXBXWnZCOHozeEQ0aTJQWVZU c2cvMS80Q0EyMUE4RDkyOENBQkMwQzlFRjEzODUwNjM1QjMxRUFGM0MyNjQyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRDQTIxQThEOTI4Q0FCQzBD OUVGMTM4NTA2MzVCMzFFQUYzQzI2NDIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NDl1VzFrQ2hjRFlBRWpaZWc4RlhxWTdFRXBXWnZCOHozeEQ0aTJQWVZUc2cvMS80 Q0EyMUE4RDkyOENBQkMwQzlFRjEzODUwNjM1QjMxRUFGM0MyNjQyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAwYjEjYH7YIamHr8mfl1YgdVbrLizUnmqpr/ThFNES70xzqg6HT7A9xKHhl3U 97/Bo70F51VWVqzA3+l2FbOCyrOvMKGN6ALE75Q9nESamFW1/a9+PjOgodA0IwtC BfynabxaGcVENFs+4nvmGxjm6FXcsPEV1LzMwd31f1qiiXC0wvL4h6Dt+RPis0lS p3pH5AjE/VSnBX5yErVfNEjzUPD5qfNqhPctdhlGALAsp8aYWWMY3qHEZZv0cVDJ bwn59Ele5JVaUttVkosNEHaTqpVf5/wIrBVKICVmH+DAB0m99XxRoVAosR5segfu d2y8ZYaxmHjTPv1016jHyS52ow== -----END CERTIFICATE-----Generated at Wed Apr 8 20:47:18 2026 by rpki-client