$ rpki-client -vvf rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.mft File: 9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.mft (raw, json) Hash identifier: SaGx5zF+NaiAc00Pni0UAM9OOibiiPabTAd8lBDooTI= Subject key identifier: 89:D7:C5:63:32:1D:E8:E7:99:16:D0:D9:14:BD:69:A6:62:44:1B:47 Authority key identifier: 9B:40:C2:CC:13:EA:B5:03:45:ED:AC:FA:CC:15:DB:43:E6:0B:85:A2 Certificate issuer: /CN=9B40C2CC13EAB50345EDACFACC15DB43E60B85A2 Certificate serial: 26B0D42C03622C00651085301686D7BC898C4F7C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.cer Subject info access: rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.mft Manifest number: 0241 Signing time: Wed 08 Apr 2026 12:42:18 +0000 Manifest this update: Wed 08 Apr 2026 12:37:18 +0000 Manifest next update: Thu 09 Apr 2026 14:43:18 +0000 Files and hashes: 1: 9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.crl (hash: YqFwjKGkjD3Vp3CohhyFHSjUo4pvdTuRsvaxk1f8ukQ=) 2: 3139302e3131322e3135362e302f32322d3234203d3e20323639373132.roa (hash: XsvSwhJsvhiN3zT4zP/EO47T43tGtKD9SfW4Q24OOT4=) 3: 323830343a363862633a3a2f33322d3334203d3e20323639373132.roa (hash: 8RPnTiQ7wXRMCXsqv1axTDou5GdSXQ84NpnMqja7IR4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.crl rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 09 Apr 2026 14:43:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:b0:d4:2c:03:62:2c:00:65:10:85:30:16:86:d7:bc:89:8c:4f:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B40C2CC13EAB50345EDACFACC15DB43E60B85A2 Validity Not Before: Apr 8 12:37:18 2026 GMT Not After : Apr 9 14:43:18 2026 GMT Subject: CN=89D7C563321DE8E79916D0D914BD69A662441B47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:6a:a1:d2:60:0c:b6:00:d2:83:dd:3e:f6:69: 44:e9:72:7b:71:be:71:9c:a6:c2:43:ca:57:71:81: a7:dc:bd:41:95:b1:3d:2e:5c:dd:57:15:b7:28:be: 25:2d:3d:78:50:b5:df:76:2f:d7:54:ba:f9:cd:34: b7:f0:30:8e:2f:12:93:40:ea:80:9a:95:31:a0:c2: 81:9f:62:7b:3e:07:7e:da:07:6b:45:ab:e7:55:2e: 87:aa:28:93:38:77:fe:33:97:af:47:55:aa:7e:be: f2:b8:21:af:76:f4:f0:c8:63:08:e1:ac:d3:c8:d6: 6c:61:fe:67:69:ae:3d:69:39:9f:a7:c5:a5:36:0e: 0b:73:c7:84:15:90:41:e1:d1:70:38:a0:f3:69:bb: d4:10:c4:7a:cf:63:39:fc:b4:fd:34:a5:97:6b:7d: 89:1a:cd:75:fd:df:5a:bb:52:b1:08:04:06:54:fe: 67:ef:68:58:a6:cc:4e:1a:ee:51:7b:9f:4f:4b:04: 37:e6:c2:8f:3b:37:39:ba:f4:5f:8d:d1:ee:d1:50: e8:e5:19:c1:4e:a0:c1:43:e1:d6:50:57:a9:7d:7a: 0f:c8:72:67:3d:28:08:ff:96:2b:12:ce:4f:a9:c3: 59:db:4b:c1:18:39:ed:aa:d8:24:fb:76:a0:6c:1c: 38:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:D7:C5:63:32:1D:E8:E7:99:16:D0:D9:14:BD:69:A6:62:44:1B:47 X509v3 Authority Key Identifier: keyid:9B:40:C2:CC:13:EA:B5:03:45:ED:AC:FA:CC:15:DB:43:E6:0B:85:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:66:6c:b6:d2:f9:6d:77:49:c9:7d:6a:c4:3e:29:ea:30:b6: c0:10:55:a7:05:83:88:8f:5b:40:0c:dc:b8:e3:3d:40:cf:0a: 24:ce:69:27:d4:21:e0:34:9e:5a:96:e4:e9:09:9a:28:93:e5: 61:8a:76:4a:26:19:de:ff:5b:e3:a9:33:64:cf:6a:fd:d7:d4: 43:44:fe:45:ec:9c:1b:68:49:71:ba:a1:19:2d:52:e2:aa:c3: 36:d2:dd:86:20:4b:98:40:c9:ed:ec:00:44:cf:34:71:8a:a9: e6:b6:94:35:d5:2e:f4:80:4d:93:02:c2:d4:b3:01:6e:37:f9: fa:db:0c:2f:eb:83:3a:08:0b:c5:32:43:61:3e:1d:51:b1:e0: 51:5c:76:9d:02:3b:c8:be:d1:7b:2f:42:ab:4f:96:e9:6e:af: 1a:42:f0:1d:01:8a:42:5c:31:19:97:95:45:22:0d:80:91:f0: 58:fe:e3:25:ac:91:45:4c:e5:95:7e:d8:80:3a:60:bf:d2:82: 60:44:13:b9:c4:2f:06:52:fb:bb:88:5d:e0:c9:0c:4b:d0:7e: da:24:63:f8:d4:53:a2:5a:3a:5e:f1:49:e6:2b:a9:cb:15:2f: bd:ac:fb:a1:63:60:a9:46:79:44:b7:1e:cc:7e:2c:0d:26:5e: 01:83:a1:b1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUJrDULANiLABlEIUwFobXvImMT3wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUI0MEMyQ0MxM0VBQjUwMzQ1RURBQ0ZBQ0MxNURCNDNF NjBCODVBMjAeFw0yNjA0MDgxMjM3MThaFw0yNjA0MDkxNDQzMThaMDMxMTAvBgNV BAMTKDg5RDdDNTYzMzIxREU4RTc5OTE2RDBEOTE0QkQ2OUE2NjI0NDFCNDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkaqHSYAy2ANKD3T72aUTpcntx vnGcpsJDyldxgafcvUGVsT0uXN1XFbcoviUtPXhQtd92L9dUuvnNNLfwMI4vEpNA 6oCalTGgwoGfYns+B37aB2tFq+dVLoeqKJM4d/4zl69HVap+vvK4Ia929PDIYwjh rNPI1mxh/mdprj1pOZ+nxaU2Dgtzx4QVkEHh0XA4oPNpu9QQxHrPYzn8tP00pZdr fYkazXX931q7UrEIBAZU/mfvaFimzE4a7lF7n09LBDfmwo87Nzm69F+N0e7RUOjl GcFOoMFD4dZQV6l9eg/Icmc9KAj/lisSzk+pw1nbS8EYOe2q2CT7dqBsHDjpAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUidfFYzId6OeZFtDZFL1ppmJEG0cwHwYDVR0j BBgwFoAUm0DCzBPqtQNF7az6zBXbQ+YLhaIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQnpOejVkQkUya01ZR25BZnhFc05ZTHY3YU1UOG00eXhQNjNZdjgyTGRt MmcvMC85QjQwQzJDQzEzRUFCNTAzNDVFREFDRkFDQzE1REI0M0U2MEI4NUEyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlCNDBDMkNDMTNFQUI1MDM0 NUVEQUNGQUNDMTVEQjQzRTYwQjg1QTIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QnpOejVkQkUya01ZR25BZnhFc05ZTHY3YU1UOG00eXhQNjNZdjgyTGRtMmcvMC85 QjQwQzJDQzEzRUFCNTAzNDVFREFDRkFDQzE1REI0M0U2MEI4NUEyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZmZsttL5bXdJyX1qxD4p6jC2wBBVpwWDiI9bQAzcuOM9QM8KJM5pJ9Qh4DSe Wpbk6QmaKJPlYYp2SiYZ3v9b46kzZM9q/dfUQ0T+ReycG2hJcbqhGS1S4qrDNtLd hiBLmEDJ7ewARM80cYqp5raUNdUu9IBNkwLC1LMBbjf5+tsML+uDOggLxTJDYT4d UbHgUVx2nQI7yL7Rey9Cq0+W6W6vGkLwHQGKQlwxGZeVRSINgJHwWP7jJayRRUzl lX7YgDpgv9KCYEQTucQvBlL7u4hd4MkMS9B+2iRj+NRTolo6XvFJ5iupyxUvvaz7 oWNgqUZ5RLcezH4sDSZeAYOhsQ== -----END CERTIFICATE-----Generated at Wed Apr 8 15:45:16 2026 by rpki-client