$ rpki-client -vvf rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.mft File: 653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.mft (raw, json) Hash identifier: nVZrErbHXFmYckSnUpMmlbYE8/SV5s/oBfPbLwx94UY= Subject key identifier: 95:1F:F8:C2:21:7A:55:58:A7:B2:2C:73:A8:94:8A:A7:58:29:FC:F6 Authority key identifier: 65:38:37:D7:EC:A1:FE:11:45:D0:CE:15:E0:BF:89:5E:E0:6A:27:E2 Certificate issuer: /CN=653837D7ECA1FE1145D0CE15E0BF895EE06A27E2 Certificate serial: 6AC6050718EA3BC030470981A6B875A7385E27B1 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.cer Subject info access: rsync://rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.mft Manifest number: 039C Signing time: Tue 07 Apr 2026 22:15:29 +0000 Manifest this update: Tue 07 Apr 2026 22:10:29 +0000 Manifest next update: Thu 09 Apr 2026 01:52:29 +0000 Files and hashes: 1: 323830343a326432383a3a2f33322d313238203d3e20323635323634.roa (hash: ETvkOo5GFk96k4J+OJe/boHp2fy3fAAB3jwF59vvq8I=) 2: 3136382e39302e34382e302f32322d3332203d3e20323635323634.roa (hash: 0t+krdLaLLO1PS1HNXqlm8C8jvWQMEbdSWgBhuKWTEE=) 3: 3138372e39352e3132382e302f32322d3332203d3e20323635323634.roa (hash: 87KSQKhyOaz4BUhIfdPsHtVz1luy0xMKpTqPd6HwZV8=) 4: 653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.crl (hash: F58iM5zXmDJ2HOCBOJx0+TLXarLBJ+mYOxq3WefNbwc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.crl rsync://rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 09 Apr 2026 01:52:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:c6:05:07:18:ea:3b:c0:30:47:09:81:a6:b8:75:a7:38:5e:27:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=653837D7ECA1FE1145D0CE15E0BF895EE06A27E2 Validity Not Before: Apr 7 22:10:29 2026 GMT Not After : Apr 9 01:52:29 2026 GMT Subject: CN=951FF8C2217A5558A7B22C73A8948AA75829FCF6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:b9:b5:e2:fd:46:e1:2e:75:a7:70:d9:b1:c2: e4:f1:07:bb:d8:27:b1:b0:c9:57:cd:11:01:49:16: 41:e3:73:34:5a:05:1e:13:83:e2:31:58:5b:1c:54: 53:55:a3:a2:64:13:12:26:06:ac:92:32:ec:9a:a6: d1:de:1e:de:37:64:d9:db:da:35:70:c5:6b:74:f3: b9:5f:6d:4a:e2:45:35:b8:dd:34:eb:ee:2b:69:75: 08:db:e6:40:1f:67:f7:81:bc:ac:a6:de:68:0c:6c: 22:5e:ce:43:a3:a8:09:c1:1b:a2:3f:2b:d6:eb:a3: f6:c0:5e:79:9a:31:e4:2b:5b:1a:1b:d8:3b:48:d3: 9b:0a:9e:94:c1:59:6e:eb:83:f6:6c:89:01:48:1b: 18:88:8e:67:98:af:03:a3:38:0b:cf:3b:22:a3:c9: d0:b6:40:25:a4:4c:c4:bc:be:09:7a:bb:5f:96:d2: bd:82:aa:a6:ce:00:22:df:64:99:93:ce:3c:ce:26: 31:c1:34:c9:32:66:3f:4d:bc:59:83:0a:33:8f:c7: b5:c9:4e:7b:4c:8d:10:17:a6:e6:9c:c2:ea:c9:54: 6b:82:70:d3:d5:70:a2:07:53:d2:2e:53:95:8b:57: dd:74:3b:6a:42:78:70:9a:25:e9:94:0b:66:d4:2b: cb:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:1F:F8:C2:21:7A:55:58:A7:B2:2C:73:A8:94:8A:A7:58:29:FC:F6 X509v3 Authority Key Identifier: keyid:65:38:37:D7:EC:A1:FE:11:45:D0:CE:15:E0:BF:89:5E:E0:6A:27:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:8b:5f:fb:1d:c4:46:a1:0e:4c:a7:95:ce:69:c9:06:6c:cc: ef:8d:9e:eb:37:05:4a:7c:18:16:d5:d9:ca:9f:b1:5e:f3:9a: 6e:8e:93:9c:7e:7b:59:83:d3:f6:7d:60:cb:0b:d4:58:ea:9b: 4b:f4:33:9b:04:5f:ab:02:b2:26:fe:90:37:9c:2a:3a:76:b3: bc:04:54:44:28:53:ae:64:2b:59:8d:48:ef:87:dd:94:06:bc: 60:f1:b5:fe:3b:b0:da:a0:94:45:af:44:18:9c:1f:fb:94:d4: 31:ba:11:6d:34:2e:3b:12:b1:c4:6e:b3:5b:67:d6:f2:80:65: 5b:6c:d5:a5:72:42:9a:f7:0a:41:c9:1d:14:a1:be:87:93:26: f3:fe:a4:e8:39:0b:c1:00:04:aa:9a:5b:91:fa:0d:31:92:46: 08:92:19:d0:33:9f:6c:ac:09:39:60:7f:9f:ba:1e:c9:0d:bd: f2:ee:74:22:96:8d:e5:5c:29:1a:98:a7:d9:6e:46:63:91:a9: 52:55:74:58:b5:23:49:31:ee:17:37:ed:e8:2b:e2:d3:f6:e4: 67:45:cd:63:4b:af:d4:c9:19:fc:00:65:fe:90:c3:e3:55:3f: 4e:47:c2:a2:b8:4a:0f:03:e0:5b:99:cc:fe:68:b5:60:75:20: d3:55:71:bd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUasYFBxjqO8AwRwmBprh1pzheJ7EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjUzODM3RDdFQ0ExRkUxMTQ1RDBDRTE1RTBCRjg5NUVF MDZBMjdFMjAeFw0yNjA0MDcyMjEwMjlaFw0yNjA0MDkwMTUyMjlaMDMxMTAvBgNV BAMTKDk1MUZGOEMyMjE3QTU1NThBN0IyMkM3M0E4OTQ4QUE3NTgyOUZDRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlubXi/UbhLnWncNmxwuTxB7vY J7GwyVfNEQFJFkHjczRaBR4Tg+IxWFscVFNVo6JkExImBqySMuyaptHeHt43ZNnb 2jVwxWt087lfbUriRTW43TTr7itpdQjb5kAfZ/eBvKym3mgMbCJezkOjqAnBG6I/ K9bro/bAXnmaMeQrWxob2DtI05sKnpTBWW7rg/ZsiQFIGxiIjmeYrwOjOAvPOyKj ydC2QCWkTMS8vgl6u1+W0r2CqqbOACLfZJmTzjzOJjHBNMkyZj9NvFmDCjOPx7XJ TntMjRAXpuacwurJVGuCcNPVcKIHU9IuU5WLV910O2pCeHCaJemUC2bUK8u7AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUlR/4wiF6VVinsixzqJSKp1gp/PYwHwYDVR0j BBgwFoAUZTg31+yh/hFF0M4V4L+JXuBqJ+IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNUxwZUpHOWZmVDVDbmhEYmhuN0FkdXl1TGJFQTlBaFdXNXdpUG9IYUZl UFMvMC82NTM4MzdEN0VDQTFGRTExNDVEMENFMTVFMEJGODk1RUUwNkEyN0UyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY1MzgzN0Q3RUNBMUZFMTE0 NUQwQ0UxNUUwQkY4OTVFRTA2QTI3RTIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NUxwZUpHOWZmVDVDbmhEYmhuN0FkdXl1TGJFQTlBaFdXNXdpUG9IYUZlUFMvMC82 NTM4MzdEN0VDQTFGRTExNDVEMENFMTVFMEJGODk1RUUwNkEyN0UyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIItf+x3ERqEOTKeVzmnJBmzM742e6zcFSnwYFtXZyp+xXvOabo6TnH57WYPT 9n1gywvUWOqbS/QzmwRfqwKyJv6QN5wqOnazvARURChTrmQrWY1I74fdlAa8YPG1 /juw2qCURa9EGJwf+5TUMboRbTQuOxKxxG6zW2fW8oBlW2zVpXJCmvcKQckdFKG+ h5Mm8/6k6DkLwQAEqppbkfoNMZJGCJIZ0DOfbKwJOWB/n7oeyQ298u50IpaN5Vwp Gpin2W5GY5GpUlV0WLUjSTHuFzft6Cvi0/bkZ0XNY0uv1MkZ/ABl/pDD41U/TkfC orhKDwPgW5nM/mi1YHUg01VxvQ== -----END CERTIFICATE-----Generated at Wed Apr 8 09:33:32 2026 by rpki-client