$ rpki-client -vvf rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.mft File: 8BAE9C90EBC5082F802055EFAA6360C661BF85CE.mft (raw, json) Hash identifier: xnXuz2qUp8Cu2V1JwcFIaNxj3pDESEn1HDFDX4H4TnY= Subject key identifier: CF:BE:81:2E:AD:A9:C7:F3:D2:C2:7E:1B:C9:A2:05:C7:D7:8E:FC:EA Authority key identifier: 8B:AE:9C:90:EB:C5:08:2F:80:20:55:EF:AA:63:60:C6:61:BF:85:CE Certificate issuer: /CN=8BAE9C90EBC5082F802055EFAA6360C661BF85CE Certificate serial: 48EF43517F8188BE7AC2CFD5D50772AD939FAB19 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.cer Subject info access: rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.mft Manifest number: 039D Signing time: Wed 08 Apr 2026 08:43:33 +0000 Manifest this update: Wed 08 Apr 2026 08:38:33 +0000 Manifest next update: Thu 09 Apr 2026 09:20:33 +0000 Files and hashes: 1: 323830343a323762633a3a2f33322d3438203d3e20323633393139.roa (hash: w/YO1KIf4eo5zvFM926/mpG6uypq9a8w/nPaoqyoSig=) 2: 3133382e3138352e3233362e302f32322d3234203d3e20323633393139.roa (hash: KYkcxrUCG5d2OgDxXVUc4Ip1FNkjOzjKHcyZw6KqQbM=) 3: 8BAE9C90EBC5082F802055EFAA6360C661BF85CE.crl (hash: tvH44WGBFh6GnSpVviL3X+j1gU7WMk+UgA1ElP4mFSE=) 4: 3137302e302e3230382e302f32322d3234203d3e20323633393139.roa (hash: e4E3vMJmvzuFUBj3Gl3MPDMXsuyK/NWYw9KKWpE7NIU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.crl rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 09 Apr 2026 09:20:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:ef:43:51:7f:81:88:be:7a:c2:cf:d5:d5:07:72:ad:93:9f:ab:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BAE9C90EBC5082F802055EFAA6360C661BF85CE Validity Not Before: Apr 8 08:38:33 2026 GMT Not After : Apr 9 09:20:33 2026 GMT Subject: CN=CFBE812EADA9C7F3D2C27E1BC9A205C7D78EFCEA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:c1:59:23:52:0a:f5:38:2e:fa:45:ac:4f:f7: 9c:61:7b:c6:28:ed:a1:e4:eb:8e:64:5b:fc:6b:76: 6d:12:2f:17:03:8d:cc:8d:b0:34:ad:35:40:a4:db: 2c:ae:22:41:c4:59:f9:09:89:57:b5:ce:da:0e:43: c6:87:d8:31:2e:34:11:2c:2d:a8:e2:85:05:bf:f4: ce:f3:d5:ee:ac:a0:1f:7c:73:dd:93:6a:0a:8a:22: c6:ab:df:5d:0e:4a:be:86:f6:dc:6e:76:a2:0a:47: 94:ad:3f:80:29:28:1b:6e:00:df:0e:68:d0:d3:65: 26:08:60:ee:0d:34:00:65:56:6a:6e:11:f8:8a:9e: 6d:5c:86:5d:33:39:0c:7b:f3:ba:15:56:f8:3c:90: fc:a8:a4:25:64:4a:32:5d:1e:55:1b:f9:4a:44:4e: 65:23:88:7f:21:d9:a2:49:4e:16:9d:42:66:b8:d1: 4b:1c:e7:89:3d:0b:b3:a7:0d:ec:62:8c:93:ac:a3: 85:49:fc:91:5f:af:5f:3a:af:cb:5d:cd:79:1f:c6: ec:84:af:d6:26:4f:ca:28:75:be:fb:6e:7d:c4:18: ef:67:97:f1:c1:d7:4a:a2:25:81:c5:20:46:54:d2: 4e:fe:36:35:5b:7b:da:d3:a2:df:71:a5:42:43:e1: 51:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:BE:81:2E:AD:A9:C7:F3:D2:C2:7E:1B:C9:A2:05:C7:D7:8E:FC:EA X509v3 Authority Key Identifier: keyid:8B:AE:9C:90:EB:C5:08:2F:80:20:55:EF:AA:63:60:C6:61:BF:85:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:da:af:1f:63:5a:20:1d:15:ce:9f:e8:c7:f7:f7:a0:6b:1b: 67:1a:d9:48:ad:5d:f4:e4:6d:81:9b:39:fa:a8:9e:98:4d:4b: fc:1c:61:b2:ac:f6:68:17:23:ac:f3:e9:6d:86:59:4b:ac:ad: ce:fb:bf:22:b4:a3:be:dc:9a:af:58:83:14:9b:78:92:a0:6a: 4d:ba:89:38:af:a8:8f:71:95:8b:77:e2:dc:05:58:b7:53:2e: cd:d5:4b:77:41:a0:1c:93:f5:a8:ef:9a:1c:c4:5d:bb:51:d8: 31:1b:14:bb:f3:6f:57:99:8e:0b:49:90:65:c2:5a:80:37:fa: 2a:74:d3:4e:6d:43:c3:9d:d8:65:8e:99:85:aa:ff:2f:2c:79: fc:cb:5e:8d:10:10:94:e7:9a:17:96:fe:57:5a:4a:ea:a6:b0: 8d:5c:50:bb:10:ad:b3:7f:47:07:7a:69:eb:22:d7:79:3a:3d: a2:9f:30:b9:88:32:19:60:13:11:05:ab:d7:54:09:0b:93:7c: f8:c7:23:15:6a:03:0d:3b:a1:b4:84:32:65:65:4e:15:7c:f1: 6c:f8:a4:b6:fa:27:ac:b9:8c:98:f3:bf:22:df:eb:f1:f1:32: 31:e8:30:ec:80:29:16:02:bb:a7:de:6e:e1:01:8f:79:0d:06: 90:da:38:f4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUSO9DUX+BiL56ws/V1QdyrZOfqxkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJBRTlDOTBFQkM1MDgyRjgwMjA1NUVGQUE2MzYwQzY2 MUJGODVDRTAeFw0yNjA0MDgwODM4MzNaFw0yNjA0MDkwOTIwMzNaMDMxMTAvBgNV BAMTKENGQkU4MTJFQURBOUM3RjNEMkMyN0UxQkM5QTIwNUM3RDc4RUZDRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXwVkjUgr1OC76RaxP95xhe8Yo 7aHk645kW/xrdm0SLxcDjcyNsDStNUCk2yyuIkHEWfkJiVe1ztoOQ8aH2DEuNBEs LajihQW/9M7z1e6soB98c92TagqKIsar310OSr6G9txudqIKR5StP4ApKBtuAN8O aNDTZSYIYO4NNABlVmpuEfiKnm1chl0zOQx787oVVvg8kPyopCVkSjJdHlUb+UpE TmUjiH8h2aJJThadQma40Usc54k9C7OnDexijJOso4VJ/JFfr186r8tdzXkfxuyE r9YmT8oodb77bn3EGO9nl/HB10qiJYHFIEZU0k7+NjVbe9rTot9xpUJD4VF1AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUz76BLq2px/PSwn4byaIFx9eO/OowHwYDVR0j BBgwFoAUi66ckOvFCC+AIFXvqmNgxmG/hc4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNGNHMm9iRVVZZk1LaFdBWDQ1N25GZ3pvVFhZU3RpTEs0RGFFMzRWRFNL ODUvMS84QkFFOUM5MEVCQzUwODJGODAyMDU1RUZBQTYzNjBDNjYxQkY4NUNFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhCQUU5QzkwRUJDNTA4MkY4 MDIwNTVFRkFBNjM2MEM2NjFCRjg1Q0UuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NGNHMm9iRVVZZk1LaFdBWDQ1N25GZ3pvVFhZU3RpTEs0RGFFMzRWRFNLODUvMS84 QkFFOUM5MEVCQzUwODJGODAyMDU1RUZBQTYzNjBDNjYxQkY4NUNFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAD9qvH2NaIB0Vzp/ox/f3oGsbZxrZSK1d9ORtgZs5+qiemE1L/Bxhsqz2aBcj rPPpbYZZS6ytzvu/IrSjvtyar1iDFJt4kqBqTbqJOK+oj3GVi3fi3AVYt1MuzdVL d0GgHJP1qO+aHMRdu1HYMRsUu/NvV5mOC0mQZcJagDf6KnTTTm1Dw53YZY6Zhar/ Lyx5/MtejRAQlOeaF5b+V1pK6qawjVxQuxCts39HB3pp6yLXeTo9op8wuYgyGWAT EQWr11QJC5N8+McjFWoDDTuhtIQyZWVOFXzxbPiktvonrLmMmPO/It/r8fEyMegw 7IApFgK7p95u4QGPeQ0GkNo49A== -----END CERTIFICATE-----Generated at Thu Apr 9 00:23:01 2026 by rpki-client