$ rpki-client -vvf rpki-repo.registro.br/repo/5NWgGTnyPJTvvhBYW48ViTn1WKh8icyStVecxq7yTzVt/0/D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.mft File: D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.mft (raw, json) Hash identifier: SuZKBXkpAawHogscEueS7lXKI4PDKUlxiAySk78Q3vY= Subject key identifier: E0:E8:A6:1E:18:80:81:9E:E7:4A:09:D0:23:C8:25:65:64:78:C7:D7 Authority key identifier: D8:BA:7C:35:A5:C2:42:05:89:B3:0C:33:D9:CF:13:74:50:5F:3D:BC Certificate issuer: /CN=D8BA7C35A5C2420589B30C33D9CF1374505F3DBC Certificate serial: 7AA23D1DC932C50D52696A71AF72B9B1089C978A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.cer Subject info access: rsync://rpki-repo.registro.br/repo/5NWgGTnyPJTvvhBYW48ViTn1WKh8icyStVecxq7yTzVt/0/D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.mft Manifest number: 022C Signing time: Tue 07 Apr 2026 18:53:57 +0000 Manifest this update: Tue 07 Apr 2026 18:48:57 +0000 Manifest next update: Wed 08 Apr 2026 22:17:57 +0000 Files and hashes: 1: 3137302e3233332e32302e302f32322d3234203d3e20323638323839.roa (hash: nJHKWcaMdxBbjOC5bhFit9A5idnCknzOdY01So/X9KM=) 2: 323830343a346565343a3a2f33322d3438203d3e20323638323839.roa (hash: CpJuHDvAI+/wiKeDtSMafBkRDb76lm4oyzY5Bieg4T4=) 3: D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.crl (hash: L6BYplCdd+rDmxkHHF/kHmJRyrp2/2XS3NCQ2bdQVFc=) 4: 34352e3233372e3230302e302f32322d3234203d3e20323638323839.roa (hash: E0joDVbK7d76B68vuV8WXolFT2AAlH6oKz3TDd96iqs=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5NWgGTnyPJTvvhBYW48ViTn1WKh8icyStVecxq7yTzVt/0/D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.crl rsync://rpki-repo.registro.br/repo/5NWgGTnyPJTvvhBYW48ViTn1WKh8icyStVecxq7yTzVt/0/D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 08 Apr 2026 22:17:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:a2:3d:1d:c9:32:c5:0d:52:69:6a:71:af:72:b9:b1:08:9c:97:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D8BA7C35A5C2420589B30C33D9CF1374505F3DBC Validity Not Before: Apr 7 18:48:57 2026 GMT Not After : Apr 8 22:17:57 2026 GMT Subject: CN=E0E8A61E1880819EE74A09D023C825656478C7D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:87:be:2e:60:19:64:48:86:95:de:ed:4c:d9: 34:91:54:0c:3e:ff:6a:71:21:7e:de:2d:54:b7:84: 6e:72:24:4d:a7:81:b1:a4:23:2b:57:97:89:a1:52: 1d:19:82:25:b6:c1:1a:77:10:5f:7b:6a:1b:5d:a7: 28:de:e1:ea:fb:b6:98:cc:7b:74:65:36:63:cd:6e: 48:99:9c:e5:9d:9c:a3:97:c6:85:f3:e7:59:3c:42: a5:9b:fa:0a:65:f6:9b:ee:00:bb:67:bd:67:1f:c5: 49:89:30:4a:64:4f:63:a7:93:6b:23:a4:c7:9a:61: 98:96:8e:37:a2:39:bc:f0:1a:83:bb:45:02:8d:32: 1b:c0:ee:18:37:19:6a:db:55:12:70:d6:2f:91:18: 73:5f:e9:d9:34:09:a9:d6:75:22:9d:44:63:5c:15: a6:73:42:8b:b7:90:ac:f9:ed:bb:75:d0:67:1c:68: 10:2f:a1:b9:7c:cf:71:6b:7b:13:1b:b7:f7:3d:9f: ec:e1:0d:69:75:84:de:23:40:1c:92:e7:0a:42:47: 38:d5:39:f0:82:f4:6f:78:8b:08:e8:a4:8d:3d:c0: 4e:a9:e7:88:20:bb:0b:66:2c:a6:06:23:f2:d3:32: f9:6a:5e:5f:46:96:fa:4e:7f:bc:99:6a:45:a4:de: cc:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:E8:A6:1E:18:80:81:9E:E7:4A:09:D0:23:C8:25:65:64:78:C7:D7 X509v3 Authority Key Identifier: keyid:D8:BA:7C:35:A5:C2:42:05:89:B3:0C:33:D9:CF:13:74:50:5F:3D:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5NWgGTnyPJTvvhBYW48ViTn1WKh8icyStVecxq7yTzVt/0/D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5NWgGTnyPJTvvhBYW48ViTn1WKh8icyStVecxq7yTzVt/0/D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:15:66:48:e2:d5:d8:a1:1d:7b:dd:1e:cd:92:8b:60:84:15: 14:87:e4:c8:74:10:08:72:d3:6a:b4:53:b1:06:ff:17:df:4a: cf:05:f8:83:47:9a:62:47:5b:b4:2e:10:71:8c:8f:97:fc:cf: e1:bb:95:03:1e:fd:9f:5e:e6:98:7d:13:2e:a1:1f:f1:ca:f3: ec:25:4f:65:71:25:e5:cb:72:10:db:04:1c:ba:92:b0:2b:a9: 99:14:f5:63:49:11:88:5c:81:ea:e2:c1:b0:40:63:ae:7c:b7: 7f:90:94:35:0f:f7:fc:04:71:9a:9e:8a:d2:f4:e5:0b:08:36: 4d:57:a1:7a:0c:26:5c:87:ed:0a:fd:7f:7d:b1:2d:a2:85:9d: d2:77:39:ec:6b:2f:a0:18:ae:03:91:de:b6:64:c3:65:df:65: b6:5f:63:12:05:d7:dc:25:9b:fd:69:7b:b9:9c:cd:ef:4d:05: b8:3a:ce:e0:40:6c:42:28:94:22:bd:a6:5b:a0:f6:05:3b:27: 58:6f:f6:91:83:e2:7a:8b:c6:d8:67:cf:d1:ef:9d:5f:8f:ba: 58:7c:f0:df:5e:c1:82:0d:06:e2:3d:09:17:cb:1c:dd:99:13: ac:81:69:89:36:64:70:8a:61:fa:40:25:3b:62:44:6c:18:f1: 59:d4:12:33 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUeqI9HckyxQ1SaWpxr3K5sQicl4owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDhCQTdDMzVBNUMyNDIwNTg5QjMwQzMzRDlDRjEzNzQ1 MDVGM0RCQzAeFw0yNjA0MDcxODQ4NTdaFw0yNjA0MDgyMjE3NTdaMDMxMTAvBgNV BAMTKEUwRThBNjFFMTg4MDgxOUVFNzRBMDlEMDIzQzgyNTY1NjQ3OEM3RDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQh74uYBlkSIaV3u1M2TSRVAw+ /2pxIX7eLVS3hG5yJE2ngbGkIytXl4mhUh0ZgiW2wRp3EF97ahtdpyje4er7tpjM e3RlNmPNbkiZnOWdnKOXxoXz51k8QqWb+gpl9pvuALtnvWcfxUmJMEpkT2Onk2sj pMeaYZiWjjeiObzwGoO7RQKNMhvA7hg3GWrbVRJw1i+RGHNf6dk0CanWdSKdRGNc FaZzQou3kKz57bt10GccaBAvobl8z3FrexMbt/c9n+zhDWl1hN4jQByS5wpCRzjV OfCC9G94iwjopI09wE6p54gguwtmLKYGI/LTMvlqXl9GlvpOf7yZakWk3swVAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU4OimHhiAgZ7nSgnQI8glZWR4x9cwHwYDVR0j BBgwFoAU2Lp8NaXCQgWJswwz2c8TdFBfPbwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNU5XZ0dUbnlQSlR2dmhCWVc0OFZpVG4xV0toOGljeVN0VmVjeHE3eVR6 VnQvMC9EOEJBN0MzNUE1QzI0MjA1ODlCMzBDMzNEOUNGMTM3NDUwNUYzREJDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q4QkE3QzM1QTVDMjQyMDU4 OUIzMEMzM0Q5Q0YxMzc0NTA1RjNEQkMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NU5XZ0dUbnlQSlR2dmhCWVc0OFZpVG4xV0toOGljeVN0VmVjeHE3eVR6VnQvMC9E OEJBN0MzNUE1QzI0MjA1ODlCMzBDMzNEOUNGMTM3NDUwNUYzREJDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIRVmSOLV2KEde90ezZKLYIQVFIfkyHQQCHLTarRTsQb/F99KzwX4g0eaYkdb tC4QcYyPl/zP4buVAx79n17mmH0TLqEf8crz7CVPZXEl5ctyENsEHLqSsCupmRT1 Y0kRiFyB6uLBsEBjrny3f5CUNQ/3/ARxmp6K0vTlCwg2TVehegwmXIftCv1/fbEt ooWd0nc57GsvoBiuA5HetmTDZd9ltl9jEgXX3CWb/Wl7uZzN700FuDrO4EBsQiiU Ir2mW6D2BTsnWG/2kYPieovG2GfP0e+dX4+6WHzw317Bgg0G4j0JF8sc3ZkTrIFp iTZkcIph+kAlO2JEbBjxWdQSMw== -----END CERTIFICATE-----Generated at Wed Apr 8 11:15:48 2026 by rpki-client