$ rpki-client -vvf rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/D05E9D7E25FDD9255E0A8745221B447549A33F95.mft File: D05E9D7E25FDD9255E0A8745221B447549A33F95.mft (raw, json) Hash identifier: DCa5kOEm4FPO7Q6rGhjvdOMGLwq5kLE70IZJmCC08Dc= Subject key identifier: C7:BE:0F:37:7F:9A:77:83:41:CD:91:31:35:CF:EC:8C:F9:E8:3D:21 Authority key identifier: D0:5E:9D:7E:25:FD:D9:25:5E:0A:87:45:22:1B:44:75:49:A3:3F:95 Certificate issuer: /CN=D05E9D7E25FDD9255E0A8745221B447549A33F95 Certificate serial: 02065568439EC92971F441C5B223973236EDAC2B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D05E9D7E25FDD9255E0A8745221B447549A33F95.cer Subject info access: rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/D05E9D7E25FDD9255E0A8745221B447549A33F95.mft Manifest number: 0266 Signing time: Tue 07 Apr 2026 22:54:37 +0000 Manifest this update: Tue 07 Apr 2026 22:49:37 +0000 Manifest next update: Thu 09 Apr 2026 00:27:37 +0000 Files and hashes: 1: 323830343a6165303a3a2f33322d3438203d3e203238333532.roa (hash: WK2/EUSFCF0+POImuZxdo4PkzAiZEagbEMrA6lR3i+0=) 2: D05E9D7E25FDD9255E0A8745221B447549A33F95.crl (hash: 9+uklb/9CnsTLdCmQlQpBt0Awkf+WAr6u62OC8YvQVk=) 3: 3138392e35312e3139322e302f32302d3234203d3e203238333532.roa (hash: PB1ThcHpGUiYKK6rJjMNZeWu+9DjJy3ozelOjZG+jvY=) 4: 3138372e302e34382e302f32302d3234203d3e203238333532.roa (hash: 1B1pvPtKm5B2uk/BjwRlSj3vQCDmSKAtgx4Kol56A+I=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/D05E9D7E25FDD9255E0A8745221B447549A33F95.crl rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/D05E9D7E25FDD9255E0A8745221B447549A33F95.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D05E9D7E25FDD9255E0A8745221B447549A33F95.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 09 Apr 2026 00:27:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:06:55:68:43:9e:c9:29:71:f4:41:c5:b2:23:97:32:36:ed:ac:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D05E9D7E25FDD9255E0A8745221B447549A33F95 Validity Not Before: Apr 7 22:49:37 2026 GMT Not After : Apr 9 00:27:37 2026 GMT Subject: CN=C7BE0F377F9A778341CD913135CFEC8CF9E83D21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:bb:99:03:54:e0:4f:17:f1:07:1c:12:cc:1c: c4:2e:6f:dd:5c:98:26:2b:af:aa:73:65:ff:5b:34: b5:18:eb:be:67:47:d6:ab:3c:af:31:e0:3c:43:9f: e6:40:53:52:bb:a2:a1:d1:58:5f:47:6e:89:ee:16: 22:57:53:1d:89:35:9e:47:0b:5b:62:0f:02:50:db: f8:af:18:5f:14:55:6d:5c:c1:60:f8:2a:46:8f:62: 3f:9c:97:5d:13:87:ce:ff:80:bc:b0:19:58:30:08: 39:fa:4e:bc:f9:9d:67:72:be:35:4c:b2:83:b1:d3: 5a:53:7f:2a:5f:99:43:36:3d:32:6d:99:79:b3:4a: b4:b3:79:ed:78:f1:6d:f6:d0:6b:3a:4e:5f:cb:e7: 26:ee:b6:47:f1:6a:25:64:6e:17:fc:50:22:53:98: 6d:fb:66:2a:f5:8c:d6:0b:8f:37:63:c8:f5:d3:52: f3:4c:75:92:cf:d9:29:08:b2:87:34:73:a2:af:62: 25:0c:34:ee:27:40:12:27:31:8e:33:b9:ed:35:3b: 16:9d:0a:47:4e:6f:1c:a1:20:16:ea:f2:7c:cb:b4: c4:97:eb:33:dd:16:86:6b:3e:bb:94:24:f8:ca:dc: 1b:8e:1f:8a:ec:30:42:18:ae:02:d2:21:b1:5e:08: df:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:BE:0F:37:7F:9A:77:83:41:CD:91:31:35:CF:EC:8C:F9:E8:3D:21 X509v3 Authority Key Identifier: keyid:D0:5E:9D:7E:25:FD:D9:25:5E:0A:87:45:22:1B:44:75:49:A3:3F:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/D05E9D7E25FDD9255E0A8745221B447549A33F95.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D05E9D7E25FDD9255E0A8745221B447549A33F95.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/D05E9D7E25FDD9255E0A8745221B447549A33F95.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:97:ae:f3:9c:91:b6:cd:6c:0a:0b:5d:f0:95:aa:5a:a9:ed: 39:5e:81:05:b8:90:0c:b7:f0:6a:4d:93:7b:da:17:79:bb:84: b9:b9:41:1b:d3:c0:b7:6b:10:e9:a6:3b:c4:c3:32:29:84:6b: 13:06:7f:14:13:a5:67:53:b5:3f:f7:1f:59:13:70:65:07:a4: e7:fe:aa:c1:84:fe:6e:ae:93:dc:55:4f:19:dc:9a:23:bf:36: a9:4f:1d:a5:c8:9b:55:57:38:d6:2a:de:1c:d0:c9:f8:bc:55: 60:39:d3:36:93:71:4f:53:e8:e1:3c:42:b4:7f:ee:38:fb:a8: d1:b6:03:c1:68:2a:d0:cf:a3:08:f9:df:49:05:71:02:e3:0b: 91:b6:36:f7:dc:25:77:f5:7f:4e:4d:9f:49:0d:89:e3:b5:b5: 84:25:cc:6b:d6:14:b7:83:0f:3d:f0:fe:79:ce:5b:99:17:91: bc:b1:67:65:c5:94:3a:c3:09:8d:89:0b:50:1b:5c:c6:72:6e: cb:1d:98:91:c6:3e:12:9a:81:14:b9:4d:5e:61:1e:fd:2e:2a: 21:f6:54:4c:75:06:fd:ef:c0:de:9e:85:a6:34:66:1d:81:6b: df:58:59:b2:06:fa:a3:98:db:46:7a:d8:fc:83:8d:e9:c8:7f: d2:4c:7f:69 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUAgZVaEOeySlx9EHFsiOXMjbtrCswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDA1RTlEN0UyNUZERDkyNTVFMEE4NzQ1MjIxQjQ0NzU0 OUEzM0Y5NTAeFw0yNjA0MDcyMjQ5MzdaFw0yNjA0MDkwMDI3MzdaMDMxMTAvBgNV BAMTKEM3QkUwRjM3N0Y5QTc3ODM0MUNEOTEzMTM1Q0ZFQzhDRjlFODNEMjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5u5kDVOBPF/EHHBLMHMQub91c mCYrr6pzZf9bNLUY675nR9arPK8x4DxDn+ZAU1K7oqHRWF9HbonuFiJXUx2JNZ5H C1tiDwJQ2/ivGF8UVW1cwWD4KkaPYj+cl10Th87/gLywGVgwCDn6Trz5nWdyvjVM soOx01pTfypfmUM2PTJtmXmzSrSzee148W320Gs6Tl/L5ybutkfxaiVkbhf8UCJT mG37Zir1jNYLjzdjyPXTUvNMdZLP2SkIsoc0c6KvYiUMNO4nQBInMY4zue01Oxad CkdObxyhIBbq8nzLtMSX6zPdFoZrPruUJPjK3BuOH4rsMEIYrgLSIbFeCN+/AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUx74PN3+ad4NBzZExNc/sjPnoPSEwHwYDVR0j BBgwFoAU0F6dfiX92SVeCodFIhtEdUmjP5UwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOGk2ODZQYktMWHZHY0ZXcjZ2cHN5R3VXdDdDRHczVDFYQ0Y1bXpxdG9l SHMvMC9EMDVFOUQ3RTI1RkREOTI1NUUwQTg3NDUyMjFCNDQ3NTQ5QTMzRjk1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QwNUU5RDdFMjVGREQ5MjU1 RTBBODc0NTIyMUI0NDc1NDlBMzNGOTUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OGk2ODZQYktMWHZHY0ZXcjZ2cHN5R3VXdDdDRHczVDFYQ0Y1bXpxdG9lSHMvMC9E MDVFOUQ3RTI1RkREOTI1NUUwQTg3NDUyMjFCNDQ3NTQ5QTMzRjk1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOZeu85yRts1sCgtd8JWqWqntOV6BBbiQDLfwak2Te9oXebuEublBG9PAt2sQ 6aY7xMMyKYRrEwZ/FBOlZ1O1P/cfWRNwZQek5/6qwYT+bq6T3FVPGdyaI782qU8d pcibVVc41ireHNDJ+LxVYDnTNpNxT1Po4TxCtH/uOPuo0bYDwWgq0M+jCPnfSQVx AuMLkbY299wld/V/Tk2fSQ2J47W1hCXMa9YUt4MPPfD+ec5bmReRvLFnZcWUOsMJ jYkLUBtcxnJuyx2YkcY+EpqBFLlNXmEe/S4qIfZUTHUG/e/A3p6FpjRmHYFr31hZ sgb6o5jbRnrY/ION6ch/0kx/aQ== -----END CERTIFICATE-----Generated at Wed Apr 8 17:48:09 2026 by rpki-client