$ rpki-client -vvf rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/1/CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA.mft File: CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA.mft (raw, json) Hash identifier: DVSAgOrZmPG0VWGFM/mlXtn2VRxiwxg3uZz7zGHannw= Subject key identifier: 88:14:48:83:DC:65:04:E7:70:3A:A3:B6:35:AB:F8:31:BB:B8:B0:E7 Authority key identifier: CA:1C:4B:54:62:22:EE:15:6A:0D:43:48:D2:AB:00:43:BD:AB:4B:EA Certificate issuer: /CN=CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA Certificate serial: 2F52E171A314F911683E784919625F5C20602C7D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA.cer Subject info access: rsync://rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/1/CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA.mft Manifest number: 03D4 Signing time: Wed 08 Apr 2026 07:18:12 +0000 Manifest this update: Wed 08 Apr 2026 07:13:12 +0000 Manifest next update: Thu 09 Apr 2026 08:03:12 +0000 Files and hashes: 1: 3137302e3233392e3235322e302f32322d3234203d3e20323636333630.roa (hash: 9nuoAcwYrMrsl4Vi37XNxZmM7i+vemHTj26u7KALJZU=) 2: CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA.crl (hash: Co8tc/K+CoGs+T20KN7/WGNNAGrW2apw157B3CkJvxE=) 3: 323830343a333661303a3a2f33322d3335203d3e20323636333630.roa (hash: mmpHcgcmCJor4uSWfHygBL/vX0yx6PEzCq0/gH4b9lQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/1/CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA.crl rsync://rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/1/CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 09 Apr 2026 08:03:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:52:e1:71:a3:14:f9:11:68:3e:78:49:19:62:5f:5c:20:60:2c:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA Validity Not Before: Apr 8 07:13:12 2026 GMT Not After : Apr 9 08:03:12 2026 GMT Subject: CN=88144883DC6504E7703AA3B635ABF831BBB8B0E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:b9:ca:46:45:4b:88:07:46:79:12:c0:36:f5: f9:bc:20:1b:79:d8:ce:d5:f2:65:35:19:6b:05:24: 2f:3f:22:6c:5c:fd:9d:ca:f0:1f:f9:e8:d4:88:8c: 9a:a8:8b:e7:aa:2f:96:37:c4:04:45:cf:67:c0:dd: 52:74:bf:11:a0:f8:86:6f:e4:0d:a1:0c:67:0b:03: 39:fa:bf:97:9a:75:5f:d0:0f:7e:d0:b8:37:89:d4: d3:4c:3e:7e:93:c3:b5:83:f4:3f:18:46:7d:15:a0: 4a:8d:12:ae:41:07:cd:00:18:85:ce:ee:f7:75:7e: 61:8d:67:11:23:3c:a3:46:88:dd:52:32:08:9a:cb: 9a:67:63:6a:fd:d3:12:65:bf:bb:3a:93:44:1d:c6: 48:6d:7a:95:b5:5d:5b:bc:46:2a:2a:79:ca:44:46: 58:c4:4f:32:80:45:7d:99:82:73:5b:c7:e5:7b:6b: ff:1f:e3:f9:8b:c8:29:f6:a6:63:72:aa:5a:6b:65: 6c:3e:86:e0:3c:c8:90:b4:e3:1f:a3:92:66:94:ac: 04:5a:1e:6d:be:a0:76:61:d3:5c:9b:e2:f0:71:16: c8:f8:33:10:af:7a:b1:7f:33:eb:65:0a:26:31:63: de:93:9a:e2:9c:26:36:25:d1:9f:fe:eb:9e:70:cf: a2:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:14:48:83:DC:65:04:E7:70:3A:A3:B6:35:AB:F8:31:BB:B8:B0:E7 X509v3 Authority Key Identifier: keyid:CA:1C:4B:54:62:22:EE:15:6A:0D:43:48:D2:AB:00:43:BD:AB:4B:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/1/CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/1/CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:f3:5e:af:00:66:a6:08:8a:53:03:bd:8d:be:87:bb:48:6e: ac:f8:e0:de:13:ef:ef:e1:d6:89:c7:40:92:62:ec:16:e7:c1: 5f:9b:bc:a3:8b:e4:d3:66:f2:b6:f4:59:f7:f5:2f:84:21:23: 7b:54:c0:7a:73:e9:e6:7e:31:c0:71:66:0e:5e:0f:90:bd:3a: bf:0c:b8:a3:85:6f:87:7c:5f:63:55:f5:71:49:8e:d1:83:5c: 1b:6c:e4:44:af:53:5b:af:86:a7:f7:fd:fa:33:88:81:c9:10: 70:7d:b8:10:c8:d6:6e:52:a7:61:d5:84:bc:0b:b1:df:ba:9e: 3c:ed:f9:70:28:5f:df:2a:3a:9e:14:85:46:8f:60:86:65:88: 33:92:ec:bd:21:33:b0:50:84:36:97:26:83:72:f4:4d:5f:f9: 30:12:fe:bd:2e:ee:e1:4d:23:3d:5e:51:39:cf:93:dd:19:fd: 1a:8d:72:8f:f0:37:0f:66:e6:41:92:d8:be:92:5f:2a:af:57: 49:b4:f0:9c:1d:0a:0a:dc:54:0b:68:4a:68:b6:bb:89:08:92: 1b:8c:1c:13:3e:b0:85:10:51:68:08:cc:68:15:20:28:37:a8: d5:b6:ed:0a:ca:da:b7:6a:dd:46:9a:7c:c9:f1:f2:6d:6d:8b: ed:fd:73:09 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUL1LhcaMU+RFoPnhJGWJfXCBgLH0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ExQzRCNTQ2MjIyRUUxNTZBMEQ0MzQ4RDJBQjAwNDNC REFCNEJFQTAeFw0yNjA0MDgwNzEzMTJaFw0yNjA0MDkwODAzMTJaMDMxMTAvBgNV BAMTKDg4MTQ0ODgzREM2NTA0RTc3MDNBQTNCNjM1QUJGODMxQkJCOEIwRTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVucpGRUuIB0Z5EsA29fm8IBt5 2M7V8mU1GWsFJC8/Imxc/Z3K8B/56NSIjJqoi+eqL5Y3xARFz2fA3VJ0vxGg+IZv 5A2hDGcLAzn6v5eadV/QD37QuDeJ1NNMPn6Tw7WD9D8YRn0VoEqNEq5BB80AGIXO 7vd1fmGNZxEjPKNGiN1SMgiay5pnY2r90xJlv7s6k0QdxkhtepW1XVu8RioqecpE RljETzKARX2ZgnNbx+V7a/8f4/mLyCn2pmNyqlprZWw+huA8yJC04x+jkmaUrARa Hm2+oHZh01yb4vBxFsj4MxCverF/M+tlCiYxY96TmuKcJjYl0Z/+655wz6IpAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUiBRIg9xlBOdwOqO2Nav4Mbu4sOcwHwYDVR0j BBgwFoAUyhxLVGIi7hVqDUNI0qsAQ72rS+owDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNEVOWXhVWEV4dVN5d0U4UmFWNmtEaXZKVVJWdzJKYXBNbkYxR1NaQXBK U1MvMS9DQTFDNEI1NDYyMjJFRTE1NkEwRDQzNDhEMkFCMDA0M0JEQUI0QkVBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NBMUM0QjU0NjIyMkVFMTU2 QTBENDM0OEQyQUIwMDQzQkRBQjRCRUEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NEVOWXhVWEV4dVN5d0U4UmFWNmtEaXZKVVJWdzJKYXBNbkYxR1NaQXBKU1MvMS9D QTFDNEI1NDYyMjJFRTE1NkEwRDQzNDhEMkFCMDA0M0JEQUI0QkVBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAifNerwBmpgiKUwO9jb6Hu0hurPjg3hPv7+HWicdAkmLsFufBX5u8o4vk02by tvRZ9/UvhCEje1TAenPp5n4xwHFmDl4PkL06vwy4o4Vvh3xfY1X1cUmO0YNcG2zk RK9TW6+Gp/f9+jOIgckQcH24EMjWblKnYdWEvAux37qePO35cChf3yo6nhSFRo9g hmWIM5LsvSEzsFCENpcmg3L0TV/5MBL+vS7u4U0jPV5ROc+T3Rn9Go1yj/A3D2bm QZLYvpJfKq9XSbTwnB0KCtxUC2hKaLa7iQiSG4wcEz6whRBRaAjMaBUgKDeo1bbt Csrat2rdRpp8yfHybW2L7f1zCQ== -----END CERTIFICATE-----Generated at Wed Apr 8 21:43:03 2026 by rpki-client