$ rpki-client -vvf rpki-repo.registro.br/repo/7TNbHHdBKnhynU4f9g1M4gLwhepDVJcVip2DmveuUWcX/1/35F7B6A03CB7D21D07094BD441D3096092CB93B2.mft File: 35F7B6A03CB7D21D07094BD441D3096092CB93B2.mft (raw, json) Hash identifier: /yPh0aEMibBhn90NESwJOR/h5zqLMCweGrBXtw9qPbw= Subject key identifier: 1E:5E:22:9D:CC:8C:E5:8D:44:F3:95:B5:6C:03:FA:D5:34:C5:82:68 Authority key identifier: 35:F7:B6:A0:3C:B7:D2:1D:07:09:4B:D4:41:D3:09:60:92:CB:93:B2 Certificate issuer: /CN=35F7B6A03CB7D21D07094BD441D3096092CB93B2 Certificate serial: 4291F442282375736F5B4868D8E97D637763C8C2 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35F7B6A03CB7D21D07094BD441D3096092CB93B2.cer Subject info access: rsync://rpki-repo.registro.br/repo/7TNbHHdBKnhynU4f9g1M4gLwhepDVJcVip2DmveuUWcX/1/35F7B6A03CB7D21D07094BD441D3096092CB93B2.mft Manifest number: 03CA Signing time: Wed 08 Apr 2026 16:13:45 +0000 Manifest this update: Wed 08 Apr 2026 16:08:45 +0000 Manifest next update: Thu 09 Apr 2026 16:52:45 +0000 Files and hashes: 1: 323830313a38303a316264303a3a2f34342d3434203d3e20323636353132.roa (hash: j8cojjS2jKqtjLYigSxDCb3zq1ye+FatYxlELgusA18=) 2: 3137302e3234352e33332e302f32342d3234203d3e20323636353132.roa (hash: LjAnlFo9PWgLw7rYW+kjgv66/hd6nOlNBnX2PyZnakg=) 3: 35F7B6A03CB7D21D07094BD441D3096092CB93B2.crl (hash: n/qzlQJb9eeCgQyZKwcEPpJVaQVc52JvmT4FdXnDyj8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7TNbHHdBKnhynU4f9g1M4gLwhepDVJcVip2DmveuUWcX/1/35F7B6A03CB7D21D07094BD441D3096092CB93B2.crl rsync://rpki-repo.registro.br/repo/7TNbHHdBKnhynU4f9g1M4gLwhepDVJcVip2DmveuUWcX/1/35F7B6A03CB7D21D07094BD441D3096092CB93B2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35F7B6A03CB7D21D07094BD441D3096092CB93B2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 09 Apr 2026 16:52:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:91:f4:42:28:23:75:73:6f:5b:48:68:d8:e9:7d:63:77:63:c8:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35F7B6A03CB7D21D07094BD441D3096092CB93B2 Validity Not Before: Apr 8 16:08:45 2026 GMT Not After : Apr 9 16:52:45 2026 GMT Subject: CN=1E5E229DCC8CE58D44F395B56C03FAD534C58268 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:92:22:39:2a:e6:c9:20:1c:2e:c5:72:f5:8f: e3:a4:2b:a4:3d:9c:52:9e:4f:f8:52:f0:5c:33:85: de:6d:cc:9b:d5:2b:5e:ee:fd:39:60:40:86:34:d0: 56:0e:00:50:c2:ab:38:67:c6:7f:16:23:01:f1:de: 24:66:42:d4:df:af:79:22:8b:fc:79:05:1a:2b:44: 80:d1:7d:e3:a0:d4:b3:61:81:f6:8e:a5:42:73:08: 20:aa:d3:a5:90:bc:f3:8c:8d:ae:24:ee:f7:74:fd: 5a:e9:c2:d7:27:f4:dc:66:06:a3:ce:53:4c:48:9b: 82:e5:1d:1c:85:3e:33:15:53:02:06:7c:f2:57:e7: 60:44:37:07:2f:e3:6a:f0:2f:cd:01:15:d2:c8:d1: 68:56:59:49:ef:59:a0:61:69:b8:37:12:31:ba:8b: 70:63:b1:36:f5:1f:f8:49:91:27:17:a7:f3:93:69: 60:17:9a:a7:23:3c:0a:ad:83:ea:17:04:f3:9e:ef: 64:23:10:3c:2d:2b:23:54:e2:b1:8c:e9:e8:6b:e0: 77:47:85:6a:bb:ee:2f:a6:90:f2:0a:8e:8e:d2:73: 69:d4:4f:17:e1:02:88:4d:f3:78:a8:25:eb:99:4a: 09:4a:8a:47:7c:92:28:26:de:32:7c:ba:e0:3b:03: f9:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:5E:22:9D:CC:8C:E5:8D:44:F3:95:B5:6C:03:FA:D5:34:C5:82:68 X509v3 Authority Key Identifier: keyid:35:F7:B6:A0:3C:B7:D2:1D:07:09:4B:D4:41:D3:09:60:92:CB:93:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7TNbHHdBKnhynU4f9g1M4gLwhepDVJcVip2DmveuUWcX/1/35F7B6A03CB7D21D07094BD441D3096092CB93B2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35F7B6A03CB7D21D07094BD441D3096092CB93B2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7TNbHHdBKnhynU4f9g1M4gLwhepDVJcVip2DmveuUWcX/1/35F7B6A03CB7D21D07094BD441D3096092CB93B2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c6:3d:65:c4:ef:88:c4:90:42:6c:91:e2:33:21:ea:cd:48:af: c5:7d:e3:df:4f:34:0b:82:db:3a:4a:e9:22:56:1d:8c:26:77: 47:4a:fc:88:14:48:45:51:2b:f2:d5:3b:bf:74:15:d1:ff:53: 39:e1:f4:7c:17:64:c2:e8:3b:34:c0:fa:5e:a1:e7:e4:4b:1c: 9e:0a:fa:da:8f:f7:5e:db:f3:ba:3b:51:0e:f9:9c:35:61:aa: 3e:f5:4e:24:27:c7:b5:c4:0f:0b:fc:e7:33:ec:d8:c9:a2:14: 31:55:df:67:86:b5:78:ee:06:55:99:de:61:d2:c3:89:89:aa: dc:73:3c:55:9c:40:fc:4c:be:c5:e2:ad:55:6e:6a:e4:c6:ec: ce:33:8c:7c:8d:5d:96:41:c9:49:1f:68:52:5f:db:30:8b:34: 9b:62:75:56:bd:7d:1e:73:dd:01:aa:91:30:71:95:47:48:ab: eb:2b:bf:d7:d9:57:18:d2:07:aa:30:50:09:d1:8e:eb:2a:5a: ff:0a:4a:e3:f9:ff:e2:9a:9f:3c:f1:be:ce:80:2e:c0:af:91: bd:1f:3b:46:25:ec:ff:c6:9c:b1:d9:17:7a:25:da:5c:a2:7c: 0e:b8:9e:98:3d:48:f1:5c:cf:8f:cd:18:37:dc:23:15:3f:1a: 95:09:06:16 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUQpH0QigjdXNvW0ho2Ol9Y3djyMIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzVGN0I2QTAzQ0I3RDIxRDA3MDk0QkQ0NDFEMzA5NjA5 MkNCOTNCMjAeFw0yNjA0MDgxNjA4NDVaFw0yNjA0MDkxNjUyNDVaMDMxMTAvBgNV BAMTKDFFNUUyMjlEQ0M4Q0U1OEQ0NEYzOTVCNTZDMDNGQUQ1MzRDNTgyNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRkiI5KubJIBwuxXL1j+OkK6Q9 nFKeT/hS8Fwzhd5tzJvVK17u/TlgQIY00FYOAFDCqzhnxn8WIwHx3iRmQtTfr3ki i/x5BRorRIDRfeOg1LNhgfaOpUJzCCCq06WQvPOMja4k7vd0/Vrpwtcn9NxmBqPO U0xIm4LlHRyFPjMVUwIGfPJX52BENwcv42rwL80BFdLI0WhWWUnvWaBhabg3EjG6 i3BjsTb1H/hJkScXp/OTaWAXmqcjPAqtg+oXBPOe72QjEDwtKyNU4rGM6ehr4HdH hWq77i+mkPIKjo7Sc2nUTxfhAohN83ioJeuZSglKikd8kigm3jJ8uuA7A/ndAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUHl4incyM5Y1E85W1bAP61TTFgmgwHwYDVR0j BBgwFoAUNfe2oDy30h0HCUvUQdMJYJLLk7IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN1ROYkhIZEJLbmh5blU0ZjlnMU00Z0x3aGVwRFZKY1ZpcDJEbXZldVVX Y1gvMS8zNUY3QjZBMDNDQjdEMjFEMDcwOTRCRDQ0MUQzMDk2MDkyQ0I5M0IyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM1RjdCNkEwM0NCN0QyMUQw NzA5NEJENDQxRDMwOTYwOTJDQjkzQjIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v N1ROYkhIZEJLbmh5blU0ZjlnMU00Z0x3aGVwRFZKY1ZpcDJEbXZldVVXY1gvMS8z NUY3QjZBMDNDQjdEMjFEMDcwOTRCRDQ0MUQzMDk2MDkyQ0I5M0IyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAxj1lxO+IxJBCbJHiMyHqzUivxX3j3080C4LbOkrpIlYdjCZ3R0r8iBRIRVEr 8tU7v3QV0f9TOeH0fBdkwug7NMD6XqHn5Escngr62o/3XtvzujtRDvmcNWGqPvVO JCfHtcQPC/znM+zYyaIUMVXfZ4a1eO4GVZneYdLDiYmq3HM8VZxA/Ey+xeKtVW5q 5MbszjOMfI1dlkHJSR9oUl/bMIs0m2J1Vr19HnPdAaqRMHGVR0ir6yu/19lXGNIH qjBQCdGO6ypa/wpK4/n/4pqfPPG+zoAuwK+RvR87RiXs/8acsdkXeiXaXKJ8Drie mD1I8VzPj80YN9wjFT8alQkGFg== -----END CERTIFICATE-----Generated at Wed Apr 8 20:22:45 2026 by rpki-client