$ rpki-client -vvf rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/0/A2A41D637E871BA0DCD8B3DB98BD91BCAB7CE398.mft File: A2A41D637E871BA0DCD8B3DB98BD91BCAB7CE398.mft (raw, json) Hash identifier: ifDsnpjUQo+B+ErkTWoMk8n02xMpOm16dnP5THnF6Zs= Subject key identifier: B1:58:53:59:7E:4B:93:D1:1F:43:4F:14:A3:F9:93:60:95:1D:28:A2 Authority key identifier: A2:A4:1D:63:7E:87:1B:A0:DC:D8:B3:DB:98:BD:91:BC:AB:7C:E3:98 Certificate issuer: /CN=A2A41D637E871BA0DCD8B3DB98BD91BCAB7CE398 Certificate serial: 54B197E4154E1E504238276CE058B7035F225121 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2A41D637E871BA0DCD8B3DB98BD91BCAB7CE398.cer Subject info access: rsync://rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/0/A2A41D637E871BA0DCD8B3DB98BD91BCAB7CE398.mft Manifest number: D9 Signing time: Wed 08 Apr 2026 13:07:47 +0000 Manifest this update: Wed 08 Apr 2026 13:02:47 +0000 Manifest next update: Thu 09 Apr 2026 17:04:47 +0000 Files and hashes: 1: A2A41D637E871BA0DCD8B3DB98BD91BCAB7CE398.crl (hash: vGHgcSrYPEmxJEOsslFPiV8m2I1eR0+WqnXucdsHKos=) 2: 34352e3232372e34372e302f32342d3234203d3e20323637303739.roa (hash: EZGoypxpjDgCbdCIfTyYn8n8vL6+KKKTHVUoAKgA9aQ=) 3: 323830343a343764343a3a2f33322d313238203d3e20323637303739.roa (hash: wfbIrO8fUPQmPXhjdkIW/u7BhFUAMK+Xv16j8Z/YqI4=) 4: 34352e3232372e34342e302f32332d3233203d3e20323637303739.roa (hash: knyavOJEwPrqGNMFx4F+80Df1Oxiv5FxxHQ/Zz30luk=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/0/A2A41D637E871BA0DCD8B3DB98BD91BCAB7CE398.crl rsync://rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/0/A2A41D637E871BA0DCD8B3DB98BD91BCAB7CE398.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2A41D637E871BA0DCD8B3DB98BD91BCAB7CE398.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 09 Apr 2026 17:04:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:b1:97:e4:15:4e:1e:50:42:38:27:6c:e0:58:b7:03:5f:22:51:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A2A41D637E871BA0DCD8B3DB98BD91BCAB7CE398 Validity Not Before: Apr 8 13:02:47 2026 GMT Not After : Apr 9 17:04:47 2026 GMT Subject: CN=B15853597E4B93D11F434F14A3F99360951D28A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:78:96:1d:e7:73:ed:37:a1:3f:24:cb:36:bb: b4:6c:fa:aa:49:a7:0c:9c:1a:c3:21:87:77:2e:c0: 78:b4:46:da:b7:d5:be:08:e2:f1:87:b9:71:17:38: 7b:f1:a7:c9:26:a8:f4:94:c1:a9:66:a0:e7:bc:c7: 07:7d:e7:1a:f0:b5:c6:d4:0a:2c:0f:be:79:69:03: 4f:b9:83:e3:e0:f3:d8:1e:f9:e0:4b:39:2a:e7:b2: da:4c:83:49:e9:45:b0:01:c7:4a:d3:28:dc:c1:34: af:b5:4e:d9:c7:cd:73:2c:d3:d5:ba:6f:3d:7a:f6: 52:fc:e5:97:6e:59:69:e6:4c:ba:b9:59:9b:6c:09: 32:d4:ec:35:d1:a5:9d:9e:94:81:9e:04:78:9b:f9: dc:57:0d:83:41:01:0f:65:8f:d4:8e:04:c3:3d:85: 3e:12:b3:2a:a1:a5:1d:9a:92:f1:cf:ff:c3:b4:b9: f8:0e:85:56:69:f7:5a:a1:75:f6:91:33:49:d4:05: 5e:ca:22:5f:0b:f4:95:a1:22:9d:35:ab:f0:43:a7: c2:16:2a:53:f9:43:bc:47:c2:14:6a:7f:cc:2c:d1: f1:95:08:f2:44:b0:e7:66:65:bc:83:89:06:53:8b: 0b:ec:d7:d0:c0:19:56:a2:12:ae:f9:e5:cc:c9:84: 87:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:58:53:59:7E:4B:93:D1:1F:43:4F:14:A3:F9:93:60:95:1D:28:A2 X509v3 Authority Key Identifier: keyid:A2:A4:1D:63:7E:87:1B:A0:DC:D8:B3:DB:98:BD:91:BC:AB:7C:E3:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/0/A2A41D637E871BA0DCD8B3DB98BD91BCAB7CE398.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2A41D637E871BA0DCD8B3DB98BD91BCAB7CE398.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/0/A2A41D637E871BA0DCD8B3DB98BD91BCAB7CE398.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:f9:d7:05:4c:e7:b6:52:be:ea:24:cb:eb:b4:6b:9b:c2:b1: 1c:b8:c6:b8:0d:b3:b0:90:3b:c2:10:40:c6:a9:ff:96:08:7e: 7a:8c:32:7d:dc:8f:db:99:c2:b2:3a:9e:5e:86:23:87:06:d2: ca:7d:1e:e5:04:e0:4c:10:cf:9c:fa:8b:61:e1:01:e0:a5:1e: cb:a1:e2:fc:23:be:c6:03:51:fd:be:dd:14:7d:80:9f:20:67: 88:20:c3:1b:92:ab:d2:dd:c1:4f:fa:36:d6:6c:74:19:13:35: ed:d5:b0:ef:ec:50:b2:6c:85:83:8c:3d:1e:5e:73:b0:e9:84: d1:cd:bd:8e:48:2e:05:7e:6e:5c:f2:c2:75:2c:39:c2:c8:b8: 55:4b:0d:a7:bd:a3:c3:2a:82:af:53:84:6c:59:7d:ea:a9:54: a7:99:c4:a0:e9:36:6a:87:0e:4e:cf:c4:48:d7:65:6c:88:bc: 21:b6:c9:5d:08:6b:bf:30:60:d9:41:11:b1:09:16:ae:94:45: 3c:4a:ea:7e:9e:88:59:de:22:ff:fe:17:99:5c:de:da:3f:72: b0:81:8d:06:f5:24:d8:22:35:17:11:2d:95:0f:de:f8:2e:f4: e1:48:b1:35:56:d2:e4:64:4b:30:b3:5a:1d:2f:c9:09:c0:a1: f0:1b:ed:12 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUVLGX5BVOHlBCOCds4Fi3A18iUSEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTJBNDFENjM3RTg3MUJBMERDRDhCM0RCOThCRDkxQkNB QjdDRTM5ODAeFw0yNjA0MDgxMzAyNDdaFw0yNjA0MDkxNzA0NDdaMDMxMTAvBgNV BAMTKEIxNTg1MzU5N0U0QjkzRDExRjQzNEYxNEEzRjk5MzYwOTUxRDI4QTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNeJYd53PtN6E/JMs2u7Rs+qpJ pwycGsMhh3cuwHi0Rtq31b4I4vGHuXEXOHvxp8kmqPSUwalmoOe8xwd95xrwtcbU CiwPvnlpA0+5g+Pg89ge+eBLOSrnstpMg0npRbABx0rTKNzBNK+1TtnHzXMs09W6 bz169lL85ZduWWnmTLq5WZtsCTLU7DXRpZ2elIGeBHib+dxXDYNBAQ9lj9SOBMM9 hT4SsyqhpR2akvHP/8O0ufgOhVZp91qhdfaRM0nUBV7KIl8L9JWhIp01q/BDp8IW KlP5Q7xHwhRqf8ws0fGVCPJEsOdmZbyDiQZTiwvs19DAGVaiEq755czJhIcnAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUsVhTWX5Lk9EfQ08Uo/mTYJUdKKIwHwYDVR0j BBgwFoAUoqQdY36HG6Dc2LPbmL2RvKt845gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNndjVVo2eWNHTVo0WENvOWYzUXlkdEppVUdGanBzcm94Y2l1ZldaZmRy QXUvMC9BMkE0MUQ2MzdFODcxQkEwRENEOEIzREI5OEJEOTFCQ0FCN0NFMzk4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0EyQTQxRDYzN0U4NzFCQTBE Q0Q4QjNEQjk4QkQ5MUJDQUI3Q0UzOTguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NndjVVo2eWNHTVo0WENvOWYzUXlkdEppVUdGanBzcm94Y2l1ZldaZmRyQXUvMC9B MkE0MUQ2MzdFODcxQkEwRENEOEIzREI5OEJEOTFCQ0FCN0NFMzk4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEABfnXBUzntlK+6iTL67Rrm8KxHLjGuA2zsJA7whBAxqn/lgh+eowyfdyP25nC sjqeXoYjhwbSyn0e5QTgTBDPnPqLYeEB4KUey6Hi/CO+xgNR/b7dFH2AnyBniCDD G5Kr0t3BT/o21mx0GRM17dWw7+xQsmyFg4w9Hl5zsOmE0c29jkguBX5uXPLCdSw5 wsi4VUsNp72jwyqCr1OEbFl96qlUp5nEoOk2aocOTs/ESNdlbIi8IbbJXQhrvzBg 2UERsQkWrpRFPErqfp6IWd4i//4XmVze2j9ysIGNBvUk2CI1FxEtlQ/e+C704Uix NVbS5GRLMLNaHS/JCcCh8BvtEg== -----END CERTIFICATE-----Generated at Wed Apr 8 19:27:40 2026 by rpki-client