$ rpki-client -vvf rpki-repo.registro.br/repo/4MztZRAU2GQr4ezk8R898gF3aFgnphA9QsNKAdCkFtMk/1/032EBC04B31CCA7416FFF2267C50AACE979BC999.mft File: 032EBC04B31CCA7416FFF2267C50AACE979BC999.mft (raw, json) Hash identifier: K3DxVBxAluaZF2Cop+m3IXrUJeyR8HZkTJS6jyVMelo= Subject key identifier: C4:B9:9D:17:AE:02:EE:FB:FE:73:90:CB:E4:D2:2D:F2:01:01:1E:66 Authority key identifier: 03:2E:BC:04:B3:1C:CA:74:16:FF:F2:26:7C:50:AA:CE:97:9B:C9:99 Certificate issuer: /CN=032EBC04B31CCA7416FFF2267C50AACE979BC999 Certificate serial: 1C11661CA1B10115D05FE57C79D10243E44A783D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/032EBC04B31CCA7416FFF2267C50AACE979BC999.cer Subject info access: rsync://rpki-repo.registro.br/repo/4MztZRAU2GQr4ezk8R898gF3aFgnphA9QsNKAdCkFtMk/1/032EBC04B31CCA7416FFF2267C50AACE979BC999.mft Manifest number: 03D1 Signing time: Wed 08 Apr 2026 01:18:12 +0000 Manifest this update: Wed 08 Apr 2026 01:13:12 +0000 Manifest next update: Thu 09 Apr 2026 02:21:12 +0000 Files and hashes: 1: 032EBC04B31CCA7416FFF2267C50AACE979BC999.crl (hash: HcIIJuB8JXor+jjIfZvbceJ1gis2S0YFFhe2+eIfkXs=) 2: 323830343a336238343a3a2f33322d3438203d3e20323636313534.roa (hash: GzzGAhO8xW0SYSmZg4JucArQFk7jR/ai+dVlenp/HMA=) 3: 3139322e3134302e382e302f32322d3234203d3e20323636313534.roa (hash: ORbVx+nh4f+oaSG+F+ejDNYKTa5ZupSXQajfOzftgs0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4MztZRAU2GQr4ezk8R898gF3aFgnphA9QsNKAdCkFtMk/1/032EBC04B31CCA7416FFF2267C50AACE979BC999.crl rsync://rpki-repo.registro.br/repo/4MztZRAU2GQr4ezk8R898gF3aFgnphA9QsNKAdCkFtMk/1/032EBC04B31CCA7416FFF2267C50AACE979BC999.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/032EBC04B31CCA7416FFF2267C50AACE979BC999.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 09 Apr 2026 02:21:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:11:66:1c:a1:b1:01:15:d0:5f:e5:7c:79:d1:02:43:e4:4a:78:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=032EBC04B31CCA7416FFF2267C50AACE979BC999 Validity Not Before: Apr 8 01:13:12 2026 GMT Not After : Apr 9 02:21:12 2026 GMT Subject: CN=C4B99D17AE02EEFBFE7390CBE4D22DF201011E66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:79:18:57:fe:35:5f:26:01:52:d2:64:ba:1b: ef:83:ab:6b:dd:55:b5:96:3e:46:08:cc:08:b4:3f: 53:13:ec:e5:83:25:b0:96:35:02:78:78:5d:bb:47: 22:c5:a0:9f:7c:72:6c:97:d6:65:0b:b7:88:8b:33: 7c:77:05:9b:d5:c7:b3:56:43:cb:29:d7:6b:31:4c: 7f:3d:23:a5:25:aa:4b:97:a9:5c:66:1f:5d:92:ed: 26:6d:1a:b3:d2:cf:6a:ce:c7:63:ce:78:fa:e9:1c: 81:6d:44:ec:7e:ec:4b:c4:72:f3:8a:b6:18:96:4e: 77:e6:1c:e4:17:c7:9e:1a:38:f4:80:e0:cf:27:23: 79:19:a0:ae:40:96:c7:36:b7:1c:31:2a:a2:d4:b2: 71:de:10:77:0f:fe:1a:77:bd:6c:13:e9:d4:cb:e4: 9d:ad:a8:b4:24:a2:28:87:9a:78:34:9d:bf:40:c4: 0a:86:66:f8:56:a4:6e:2a:0e:d1:13:f4:64:65:44: 14:01:4d:e4:60:11:f3:3d:e6:d0:a5:2c:96:f7:ee: 7e:a0:bb:72:69:bf:cd:61:9e:87:80:4b:a3:c2:43: 8c:b0:02:65:40:e3:eb:20:30:f4:4c:d3:db:ab:62: 02:d1:bb:54:f6:a6:ca:c9:74:0f:56:7b:df:0c:d5: ea:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:B9:9D:17:AE:02:EE:FB:FE:73:90:CB:E4:D2:2D:F2:01:01:1E:66 X509v3 Authority Key Identifier: keyid:03:2E:BC:04:B3:1C:CA:74:16:FF:F2:26:7C:50:AA:CE:97:9B:C9:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4MztZRAU2GQr4ezk8R898gF3aFgnphA9QsNKAdCkFtMk/1/032EBC04B31CCA7416FFF2267C50AACE979BC999.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/032EBC04B31CCA7416FFF2267C50AACE979BC999.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4MztZRAU2GQr4ezk8R898gF3aFgnphA9QsNKAdCkFtMk/1/032EBC04B31CCA7416FFF2267C50AACE979BC999.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:ef:ff:3f:93:17:04:7b:c3:0c:3a:cf:ab:36:ac:49:68:34: f5:c1:58:81:6b:86:20:6c:e1:81:2e:92:97:bd:32:54:01:a9: 64:1d:f9:37:c0:32:8a:c6:9d:de:69:31:bf:8b:5a:7c:c5:b1: 55:f5:00:e1:07:18:12:4d:3d:10:ea:d9:5f:d2:71:6b:f1:fc: 09:e0:4b:0e:92:5f:f5:b8:8f:45:b3:65:fd:c3:db:14:ec:e9: 09:6b:e4:2d:10:f4:9f:9a:67:eb:cc:a2:d0:ed:06:bc:ff:9e: 45:f2:06:74:01:df:12:6d:c6:d6:a8:2a:6c:df:fd:a4:9f:76: b5:4b:68:60:7b:74:91:0a:a9:f0:eb:17:8e:cd:7c:8e:ad:e5: 92:dc:1b:1a:e6:40:9f:4b:87:5a:6f:e8:3a:39:03:9c:3d:34: d8:81:05:f9:cf:a8:df:8a:51:8c:54:f7:b5:b8:71:32:f8:25: ad:5c:b1:3e:0e:fb:44:f7:2f:d5:bb:8a:20:47:2d:b9:ca:9b: 33:9b:f2:5a:f9:b2:fd:7b:9e:e5:98:86:d5:71:e4:a9:13:ec: 57:4f:6d:d5:5c:b8:14:91:ca:6f:82:ab:32:ee:41:1a:c3:44: 4e:ad:4f:45:61:d3:30:2f:70:81:c8:22:3b:e1:d4:d3:24:c9: d3:20:6b:cc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUHBFmHKGxARXQX+V8edECQ+RKeD0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDMyRUJDMDRCMzFDQ0E3NDE2RkZGMjI2N0M1MEFBQ0U5 NzlCQzk5OTAeFw0yNjA0MDgwMTEzMTJaFw0yNjA0MDkwMjIxMTJaMDMxMTAvBgNV BAMTKEM0Qjk5RDE3QUUwMkVFRkJGRTczOTBDQkU0RDIyREYyMDEwMTFFNjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDreRhX/jVfJgFS0mS6G++Dq2vd VbWWPkYIzAi0P1MT7OWDJbCWNQJ4eF27RyLFoJ98cmyX1mULt4iLM3x3BZvVx7NW Q8sp12sxTH89I6UlqkuXqVxmH12S7SZtGrPSz2rOx2POePrpHIFtROx+7EvEcvOK thiWTnfmHOQXx54aOPSA4M8nI3kZoK5Alsc2txwxKqLUsnHeEHcP/hp3vWwT6dTL 5J2tqLQkoiiHmng0nb9AxAqGZvhWpG4qDtET9GRlRBQBTeRgEfM95tClLJb37n6g u3Jpv81hnoeAS6PCQ4ywAmVA4+sgMPRM09urYgLRu1T2psrJdA9We98M1eoZAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUxLmdF64C7vv+c5DL5NIt8gEBHmYwHwYDVR0j BBgwFoAUAy68BLMcynQW//ImfFCqzpebyZkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNE16dFpSQVUyR1FyNGV6azhSODk4Z0YzYUZnbnBoQTlRc05LQWRDa0Z0 TWsvMS8wMzJFQkMwNEIzMUNDQTc0MTZGRkYyMjY3QzUwQUFDRTk3OUJDOTk5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAzMkVCQzA0QjMxQ0NBNzQx NkZGRjIyNjdDNTBBQUNFOTc5QkM5OTkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NE16dFpSQVUyR1FyNGV6azhSODk4Z0YzYUZnbnBoQTlRc05LQWRDa0Z0TWsvMS8w MzJFQkMwNEIzMUNDQTc0MTZGRkYyMjY3QzUwQUFDRTk3OUJDOTk5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhe//P5MXBHvDDDrPqzasSWg09cFYgWuGIGzhgS6Sl70yVAGpZB35N8Ayisad 3mkxv4tafMWxVfUA4QcYEk09EOrZX9Jxa/H8CeBLDpJf9biPRbNl/cPbFOzpCWvk LRD0n5pn68yi0O0GvP+eRfIGdAHfEm3G1qgqbN/9pJ92tUtoYHt0kQqp8OsXjs18 jq3lktwbGuZAn0uHWm/oOjkDnD002IEF+c+o34pRjFT3tbhxMvglrVyxPg77RPcv 1buKIEctucqbM5vyWvmy/Xue5ZiG1XHkqRPsV09t1Vy4FJHKb4KrMu5BGsNETq1P RWHTMC9wgcgiO+HU0yTJ0yBrzA== -----END CERTIFICATE-----Generated at Wed Apr 8 17:48:12 2026 by rpki-client