$ rpki-client -vvf rpki-repo.registro.br/repo/8JcKxBdJ5NX9e8ynTZCvvUKivX7P8hqaTAw6hKikPL7s/1/4E4DCA5E9F4558BA38892642829692F839F2A231.mft File: 4E4DCA5E9F4558BA38892642829692F839F2A231.mft (raw, json) Hash identifier: hzNilL5mlHVpvVp279aOIElR+veSuXl9lY6MNp0Idlk= Subject key identifier: 8C:81:46:79:1F:67:78:70:D6:2B:98:A7:B1:36:D3:28:56:06:CD:7D Authority key identifier: 4E:4D:CA:5E:9F:45:58:BA:38:89:26:42:82:96:92:F8:39:F2:A2:31 Certificate issuer: /CN=4E4DCA5E9F4558BA38892642829692F839F2A231 Certificate serial: 52691D832742947684D9F0DCB226432242807398 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E4DCA5E9F4558BA38892642829692F839F2A231.cer Subject info access: rsync://rpki-repo.registro.br/repo/8JcKxBdJ5NX9e8ynTZCvvUKivX7P8hqaTAw6hKikPL7s/1/4E4DCA5E9F4558BA38892642829692F839F2A231.mft Manifest number: 03D2 Signing time: Wed 08 Apr 2026 00:39:57 +0000 Manifest this update: Wed 08 Apr 2026 00:34:57 +0000 Manifest next update: Thu 09 Apr 2026 04:06:57 +0000 Files and hashes: 1: 34352e3137362e32342e302f32322d3234203d3e20323638393339.roa (hash: LdklPkgAUBVjbzt7Bbmrrf9v5PHk+gh5VfV9IbmwHbU=) 2: 323830343a356365633a3a2f33322d3438203d3e20323638393339.roa (hash: eBS/qeAaKflXSwgMJBnt/4fu0LT+Ws1i2QlvqziTifM=) 3: 4E4DCA5E9F4558BA38892642829692F839F2A231.crl (hash: IuiCs5ZlNTIag/KlXnPPf2fvBZvH9ksltjFvKCba0Zg=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8JcKxBdJ5NX9e8ynTZCvvUKivX7P8hqaTAw6hKikPL7s/1/4E4DCA5E9F4558BA38892642829692F839F2A231.crl rsync://rpki-repo.registro.br/repo/8JcKxBdJ5NX9e8ynTZCvvUKivX7P8hqaTAw6hKikPL7s/1/4E4DCA5E9F4558BA38892642829692F839F2A231.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E4DCA5E9F4558BA38892642829692F839F2A231.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 09 Apr 2026 04:06:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:69:1d:83:27:42:94:76:84:d9:f0:dc:b2:26:43:22:42:80:73:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4E4DCA5E9F4558BA38892642829692F839F2A231 Validity Not Before: Apr 8 00:34:57 2026 GMT Not After : Apr 9 04:06:57 2026 GMT Subject: CN=8C8146791F677870D62B98A7B136D3285606CD7D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:09:25:94:e5:0e:c8:be:85:54:70:a1:e8:97: d6:b9:ae:6d:10:f7:e7:60:3d:68:8e:84:d7:92:69: 7c:7b:fb:a2:82:1f:51:f0:d3:7b:9d:92:22:63:30: bf:31:82:03:d8:05:68:24:36:17:59:09:58:c1:d7: 06:35:30:fe:50:12:55:07:3d:a6:41:77:a4:af:07: bc:0f:a5:ad:53:09:8d:d7:14:ee:13:92:d1:be:cb: 80:91:08:e8:95:a4:b0:d2:90:51:13:43:e0:b3:59: 2b:0a:ba:13:00:90:14:26:65:31:fc:ac:57:7d:f0: fb:8c:16:a8:01:f2:5c:f7:21:ee:91:ac:ef:b7:ea: 20:d8:8f:49:d0:20:22:23:35:58:84:62:b2:27:84: 81:5f:dd:f2:cd:71:07:34:b9:e8:23:6f:50:36:03: ee:16:72:22:38:70:7d:98:cd:f9:8b:5f:4d:08:dc: a6:b2:8c:f8:cd:81:f8:61:b6:84:83:6e:bf:d8:27: 6f:87:df:1a:e1:70:32:d2:71:c5:1e:09:ed:18:76: b7:0f:92:b8:54:b8:a0:a0:f1:32:79:a4:38:e8:84: 60:f1:6a:2c:63:f1:ea:37:bd:1e:62:09:58:15:02: 25:ee:8f:9f:12:87:04:42:b4:75:7c:69:dc:65:68: eb:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:81:46:79:1F:67:78:70:D6:2B:98:A7:B1:36:D3:28:56:06:CD:7D X509v3 Authority Key Identifier: keyid:4E:4D:CA:5E:9F:45:58:BA:38:89:26:42:82:96:92:F8:39:F2:A2:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8JcKxBdJ5NX9e8ynTZCvvUKivX7P8hqaTAw6hKikPL7s/1/4E4DCA5E9F4558BA38892642829692F839F2A231.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E4DCA5E9F4558BA38892642829692F839F2A231.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8JcKxBdJ5NX9e8ynTZCvvUKivX7P8hqaTAw6hKikPL7s/1/4E4DCA5E9F4558BA38892642829692F839F2A231.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:e5:e5:b7:2a:31:fc:2a:a6:5a:a4:c3:fb:8c:07:89:94:40: c5:88:74:e2:11:fe:88:37:36:f0:30:e8:ee:65:de:2d:46:ac: 4e:df:3e:bf:ee:19:16:f9:1a:f2:4a:e4:fb:68:a0:ad:11:0f: bf:d8:13:aa:1b:c6:a2:d0:cc:49:3d:d4:35:6c:1d:28:71:e7: 0c:eb:b2:d6:ed:96:55:db:e7:ed:00:fa:26:04:60:7e:18:ed: d8:ad:08:7e:18:13:6e:67:9e:c3:de:bf:e8:2b:b5:fa:78:81: e1:e9:a0:e2:fe:77:43:54:f5:28:1a:d4:b5:34:a9:74:f2:48: 7a:72:ec:93:4d:cf:cc:e3:3d:db:b0:cc:60:31:ac:40:76:e2: a1:2d:82:07:94:fc:04:54:12:e0:27:10:38:3b:a1:48:05:53: 34:79:5d:b3:b2:e3:15:f9:10:de:5c:73:b9:f9:b9:f7:8c:5f: ab:fe:ad:0d:f2:9f:b8:89:d0:79:b9:65:25:02:85:e6:f2:99: 9a:60:6a:25:0f:99:7e:62:47:d5:22:8d:aa:7c:03:cb:1c:63: e8:c3:2d:3e:35:90:48:88:4c:58:bb:7c:f4:41:e2:07:d0:28: e3:c3:5d:2f:83:b2:76:69:e9:c7:d8:dd:ab:95:6d:a7:3b:d6: f8:d1:90:8b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUUmkdgydClHaE2fDcsiZDIkKAc5gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEU0RENBNUU5RjQ1NThCQTM4ODkyNjQyODI5NjkyRjgz OUYyQTIzMTAeFw0yNjA0MDgwMDM0NTdaFw0yNjA0MDkwNDA2NTdaMDMxMTAvBgNV BAMTKDhDODE0Njc5MUY2Nzc4NzBENjJCOThBN0IxMzZEMzI4NTYwNkNEN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDACSWU5Q7IvoVUcKHol9a5rm0Q 9+dgPWiOhNeSaXx7+6KCH1Hw03udkiJjML8xggPYBWgkNhdZCVjB1wY1MP5QElUH PaZBd6SvB7wPpa1TCY3XFO4TktG+y4CRCOiVpLDSkFETQ+CzWSsKuhMAkBQmZTH8 rFd98PuMFqgB8lz3Ie6RrO+36iDYj0nQICIjNViEYrInhIFf3fLNcQc0uegjb1A2 A+4WciI4cH2YzfmLX00I3KayjPjNgfhhtoSDbr/YJ2+H3xrhcDLSccUeCe0YdrcP krhUuKCg8TJ5pDjohGDxaixj8eo3vR5iCVgVAiXuj58ShwRCtHV8adxlaOvdAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUjIFGeR9neHDWK5insTbTKFYGzX0wHwYDVR0j BBgwFoAUTk3KXp9FWLo4iSZCgpaS+DnyojEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOEpjS3hCZEo1Tlg5ZTh5blRaQ3Z2VUtpdlg3UDhocWFUQXc2aEtpa1BM N3MvMS80RTREQ0E1RTlGNDU1OEJBMzg4OTI2NDI4Mjk2OTJGODM5RjJBMjMxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRFNERDQTVFOUY0NTU4QkEz ODg5MjY0MjgyOTY5MkY4MzlGMkEyMzEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OEpjS3hCZEo1Tlg5ZTh5blRaQ3Z2VUtpdlg3UDhocWFUQXc2aEtpa1BMN3MvMS80 RTREQ0E1RTlGNDU1OEJBMzg4OTI2NDI4Mjk2OTJGODM5RjJBMjMxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAK+Xltyox/CqmWqTD+4wHiZRAxYh04hH+iDc28DDo7mXeLUasTt8+v+4ZFvka 8krk+2igrREPv9gTqhvGotDMST3UNWwdKHHnDOuy1u2WVdvn7QD6JgRgfhjt2K0I fhgTbmeew96/6Cu1+niB4emg4v53Q1T1KBrUtTSpdPJIenLsk03PzOM927DMYDGs QHbioS2CB5T8BFQS4CcQODuhSAVTNHlds7LjFfkQ3lxzufm594xfq/6tDfKfuInQ ebllJQKF5vKZmmBqJQ+ZfmJH1SKNqnwDyxxj6MMtPjWQSIhMWLt89EHiB9Ao48Nd L4Oydmnpx9jdq5VtpzvW+NGQiw== -----END CERTIFICATE-----Generated at Wed Apr 8 18:20:38 2026 by rpki-client