$ rpki-client -vvf rpki-repo.registro.br/repo/4uMJQphfXda8F8Mm4rK6Tsozgjd8LgXn6Ac37sZbLXKm/1/314A8609354C2E3C1725893D521D35CC5FC4AFDB.mft File: 314A8609354C2E3C1725893D521D35CC5FC4AFDB.mft (raw, json) Hash identifier: fjOcVLwFVu6832YSRZ+qiqmq2DQ6WA9UDdO3knrf8rc= Subject key identifier: 23:35:E7:24:C6:76:9A:F4:C6:12:4A:9F:FC:56:93:D4:5B:C0:B7:9C Authority key identifier: 31:4A:86:09:35:4C:2E:3C:17:25:89:3D:52:1D:35:CC:5F:C4:AF:DB Certificate issuer: /CN=314A8609354C2E3C1725893D521D35CC5FC4AFDB Certificate serial: 6C82F3A95E5F10223CF49A51B27D1DC8C32628C9 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/314A8609354C2E3C1725893D521D35CC5FC4AFDB.cer Subject info access: rsync://rpki-repo.registro.br/repo/4uMJQphfXda8F8Mm4rK6Tsozgjd8LgXn6Ac37sZbLXKm/1/314A8609354C2E3C1725893D521D35CC5FC4AFDB.mft Manifest number: 03C9 Signing time: Tue 07 Apr 2026 19:47:29 +0000 Manifest this update: Tue 07 Apr 2026 19:42:29 +0000 Manifest next update: Wed 08 Apr 2026 20:32:29 +0000 Files and hashes: 1: 3137372e35352e3230382e302f32302d3234203d3e20323632353331.roa (hash: QrPEgq8qf94IetiMlwxL37bJ0aAndHB4MPgf10k40/A=) 2: 3137372e35352e3232332e312f33322d3332203d3e20323632353331.roa (hash: HoUvLIl8HePEcrX2UoRuuKDWB/IjHNUJTu4b4dsaoGY=) 3: 314A8609354C2E3C1725893D521D35CC5FC4AFDB.crl (hash: D7BNFSZnj6zxrNtT+MGR7edOma4ko0uFZaOx7oC3NnQ=) 4: 323830343a3561343a3a2f33322d3430203d3e20323632353331.roa (hash: AKP3mmNxQyjhPK33iWfjsbRvSG6or5dFMmjwhwRG0rg=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4uMJQphfXda8F8Mm4rK6Tsozgjd8LgXn6Ac37sZbLXKm/1/314A8609354C2E3C1725893D521D35CC5FC4AFDB.crl rsync://rpki-repo.registro.br/repo/4uMJQphfXda8F8Mm4rK6Tsozgjd8LgXn6Ac37sZbLXKm/1/314A8609354C2E3C1725893D521D35CC5FC4AFDB.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/314A8609354C2E3C1725893D521D35CC5FC4AFDB.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 08 Apr 2026 20:32:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:82:f3:a9:5e:5f:10:22:3c:f4:9a:51:b2:7d:1d:c8:c3:26:28:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=314A8609354C2E3C1725893D521D35CC5FC4AFDB Validity Not Before: Apr 7 19:42:29 2026 GMT Not After : Apr 8 20:32:29 2026 GMT Subject: CN=2335E724C6769AF4C6124A9FFC5693D45BC0B79C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:62:d9:2a:25:ce:44:2a:7f:e7:ed:5f:5a:66: 22:b2:ef:98:ce:a7:00:e6:c2:45:bd:5b:3b:4f:b4: c0:3e:c3:fe:58:60:ab:5a:71:c0:46:74:b4:f5:85: 4b:f9:59:76:7c:f2:78:b1:f6:26:f1:34:76:15:02: f2:91:7b:b4:37:21:9c:25:88:45:a3:68:d1:2a:83: 1f:7a:77:54:0d:13:37:07:70:12:07:e3:71:23:f1: 44:b1:f5:8e:2e:df:d5:b6:16:f9:ee:2c:08:86:bd: 56:65:9e:2a:a7:58:64:63:db:b6:62:26:80:ae:c7: 83:ca:9d:11:5e:51:16:98:dc:12:61:63:f7:9b:e4: c5:64:a8:16:2e:32:9e:a6:a7:9d:e5:47:2b:6f:75: 62:cf:ac:f0:f2:11:32:a8:b9:92:5f:1b:7f:79:7c: 66:0a:6d:0c:05:f2:33:a9:24:66:85:0c:8e:85:8f: 68:f2:1e:03:4d:d4:2b:16:64:a5:82:38:e5:8c:c5: 3f:a3:a9:81:ad:41:8a:98:56:8a:96:4d:0e:6e:b7: 58:a5:54:a9:73:09:07:8c:3f:75:10:03:d0:fb:42: 33:b4:a5:c7:99:55:67:3a:d7:7e:a5:c9:1d:04:c2: 94:e3:eb:9f:05:f8:0b:6e:d0:eb:8d:e2:16:e0:df: 3d:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:35:E7:24:C6:76:9A:F4:C6:12:4A:9F:FC:56:93:D4:5B:C0:B7:9C X509v3 Authority Key Identifier: keyid:31:4A:86:09:35:4C:2E:3C:17:25:89:3D:52:1D:35:CC:5F:C4:AF:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4uMJQphfXda8F8Mm4rK6Tsozgjd8LgXn6Ac37sZbLXKm/1/314A8609354C2E3C1725893D521D35CC5FC4AFDB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/314A8609354C2E3C1725893D521D35CC5FC4AFDB.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4uMJQphfXda8F8Mm4rK6Tsozgjd8LgXn6Ac37sZbLXKm/1/314A8609354C2E3C1725893D521D35CC5FC4AFDB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:33:6d:a6:d3:d2:c6:53:88:64:d6:43:24:0a:d0:40:0a:9c: 85:88:c7:83:66:be:9a:19:95:58:ad:9b:41:99:2a:47:b1:8e: be:bf:1d:18:98:c6:84:e4:0a:74:bb:e3:4a:21:90:c3:7b:fb: 86:08:e5:8c:94:21:0a:bb:9b:05:26:be:7e:e9:37:50:55:15: a2:ca:bd:a7:6e:f0:85:ad:97:c0:1b:58:66:54:e3:d2:b3:e7: 52:27:44:53:6b:70:a8:4f:b4:52:85:72:a6:c0:6b:d5:ff:18: 76:89:a9:24:18:62:87:6b:95:1f:fb:b1:ea:36:df:37:64:e8: fe:85:52:38:80:bf:5a:cb:91:b0:b9:ea:98:69:e0:4c:7a:7c: 82:22:f4:2a:a2:32:8e:47:a1:0c:9b:c9:ff:19:3c:06:f7:13: 7a:17:14:44:9d:b6:09:0e:e9:93:89:8a:20:53:73:74:81:c6: 49:3e:3e:bf:4d:1e:5d:e4:6c:e2:db:34:c9:5d:c4:68:39:1a: 81:54:16:37:16:de:0b:99:ae:58:3f:ac:54:a2:66:27:fa:b3: ee:90:d1:8f:95:8b:53:b9:f3:eb:29:0c:a0:21:d8:11:19:79: e2:fb:7c:44:2b:c2:99:75:4c:f9:81:c2:c1:90:b8:1c:39:53: 42:35:1a:78 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUbILzqV5fECI89JpRsn0dyMMmKMkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzE0QTg2MDkzNTRDMkUzQzE3MjU4OTNENTIxRDM1Q0M1 RkM0QUZEQjAeFw0yNjA0MDcxOTQyMjlaFw0yNjA0MDgyMDMyMjlaMDMxMTAvBgNV BAMTKDIzMzVFNzI0QzY3NjlBRjRDNjEyNEE5RkZDNTY5M0Q0NUJDMEI3OUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFYtkqJc5EKn/n7V9aZiKy75jO pwDmwkW9WztPtMA+w/5YYKtaccBGdLT1hUv5WXZ88nix9ibxNHYVAvKRe7Q3IZwl iEWjaNEqgx96d1QNEzcHcBIH43Ej8USx9Y4u39W2FvnuLAiGvVZlniqnWGRj27Zi JoCux4PKnRFeURaY3BJhY/eb5MVkqBYuMp6mp53lRytvdWLPrPDyETKouZJfG395 fGYKbQwF8jOpJGaFDI6Fj2jyHgNN1CsWZKWCOOWMxT+jqYGtQYqYVoqWTQ5ut1il VKlzCQeMP3UQA9D7QjO0pceZVWc6136lyR0EwpTj658F+Atu0OuN4hbg3z0fAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUIzXnJMZ2mvTGEkqf/FaT1FvAt5wwHwYDVR0j BBgwFoAUMUqGCTVMLjwXJYk9Uh01zF/Er9swDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNHVNSlFwaGZYZGE4RjhNbTRySzZUc296Z2pkOExnWG42QWMzN3NaYkxY S20vMS8zMTRBODYwOTM1NEMyRTNDMTcyNTg5M0Q1MjFEMzVDQzVGQzRBRkRCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMxNEE4NjA5MzU0QzJFM0Mx NzI1ODkzRDUyMUQzNUNDNUZDNEFGREIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NHVNSlFwaGZYZGE4RjhNbTRySzZUc296Z2pkOExnWG42QWMzN3NaYkxYS20vMS8z MTRBODYwOTM1NEMyRTNDMTcyNTg5M0Q1MjFEMzVDQzVGQzRBRkRCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaDNtptPSxlOIZNZDJArQQAqchYjHg2a+mhmVWK2bQZkqR7GOvr8dGJjGhOQK dLvjSiGQw3v7hgjljJQhCrubBSa+fuk3UFUVosq9p27wha2XwBtYZlTj0rPnUidE U2twqE+0UoVypsBr1f8YdompJBhih2uVH/ux6jbfN2To/oVSOIC/WsuRsLnqmGng THp8giL0KqIyjkehDJvJ/xk8BvcTehcURJ22CQ7pk4mKIFNzdIHGST4+v00eXeRs 4ts0yV3EaDkagVQWNxbeC5muWD+sVKJmJ/qz7pDRj5WLU7nz6ykMoCHYERl54vt8 RCvCmXVM+YHCwZC4HDlTQjUaeA== -----END CERTIFICATE-----Generated at Wed Apr 8 14:42:29 2026 by rpki-client