$ rpki-client -vvf rpki-repo.registro.br/repo/CKnPxhksQHRuqgsakFRxumt4XRcgo7gQVGdSz9hTFFoq/0/7162F9F3C7B8AF4AD2D8313E9D00B32AE35D3023.mft File: 7162F9F3C7B8AF4AD2D8313E9D00B32AE35D3023.mft (raw, json) Hash identifier: NxoH5nLdDXE06Cq6S256FXN6XxDcr1Pe99CMgfNFXE8= Subject key identifier: 85:BC:AD:A1:DD:28:6C:2F:22:51:95:9B:8B:80:02:92:22:63:FE:D3 Authority key identifier: 71:62:F9:F3:C7:B8:AF:4A:D2:D8:31:3E:9D:00:B3:2A:E3:5D:30:23 Certificate issuer: /CN=7162F9F3C7B8AF4AD2D8313E9D00B32AE35D3023 Certificate serial: 2AAD55818D842A9DF9FD91E54A0FDE855796AB96 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7162F9F3C7B8AF4AD2D8313E9D00B32AE35D3023.cer Subject info access: rsync://rpki-repo.registro.br/repo/CKnPxhksQHRuqgsakFRxumt4XRcgo7gQVGdSz9hTFFoq/0/7162F9F3C7B8AF4AD2D8313E9D00B32AE35D3023.mft Manifest number: D5 Signing time: Wed 08 Apr 2026 03:35:04 +0000 Manifest this update: Wed 08 Apr 2026 03:30:04 +0000 Manifest next update: Thu 09 Apr 2026 03:53:04 +0000 Files and hashes: 1: 7162F9F3C7B8AF4AD2D8313E9D00B32AE35D3023.crl (hash: mcvvf2qvbVH7nNjuDKWZFbIhzelXo24m/b/bBAev/EA=) 2: 3230312e3138322e36342e302f32322d3234203d3e20323637353031.roa (hash: Cb9uBAF2EaOUHmrHAFVYmgpxWgVV9Rb8YyF72RVTEL8=) 3: 323830343a343237343a3a2f33322d3438203d3e20323637353031.roa (hash: gkg5WucXeB39IkBNzUJ/wROSzkjcCy2rjzLCNwKcOIE=) 4: 34352e3138332e3133322e302f32322d3234203d3e20323637353031.roa (hash: MgiPJKjQ74ldpmf673lk0UClRYBtZCsAHjX15iwaiGU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CKnPxhksQHRuqgsakFRxumt4XRcgo7gQVGdSz9hTFFoq/0/7162F9F3C7B8AF4AD2D8313E9D00B32AE35D3023.crl rsync://rpki-repo.registro.br/repo/CKnPxhksQHRuqgsakFRxumt4XRcgo7gQVGdSz9hTFFoq/0/7162F9F3C7B8AF4AD2D8313E9D00B32AE35D3023.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7162F9F3C7B8AF4AD2D8313E9D00B32AE35D3023.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 09 Apr 2026 03:53:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:ad:55:81:8d:84:2a:9d:f9:fd:91:e5:4a:0f:de:85:57:96:ab:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7162F9F3C7B8AF4AD2D8313E9D00B32AE35D3023 Validity Not Before: Apr 8 03:30:04 2026 GMT Not After : Apr 9 03:53:04 2026 GMT Subject: CN=85BCADA1DD286C2F2251959B8B8002922263FED3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a6:ac:f3:e8:f0:79:71:46:ff:bc:9f:e8:b0: c6:5e:9a:86:f6:72:8e:db:b2:75:1d:d0:c2:5b:99: 03:6d:e7:79:80:12:5f:4d:53:be:a7:d8:0d:a3:0f: d1:9b:3e:b0:fc:0e:e3:e1:35:9f:32:ad:bf:b6:88: ac:d8:98:70:b7:de:cf:ba:f3:b9:8c:ad:dd:85:87: 78:5c:9e:a0:47:6b:54:04:99:ed:06:a4:dd:c4:2d: 1a:bd:3e:b5:9f:97:c3:33:fe:a4:30:82:31:1f:80: 89:71:77:1a:d3:4f:e5:46:5f:a8:41:c3:33:00:02: 31:b3:7c:30:eb:8d:21:9f:d2:04:6a:71:b8:06:97: 14:82:01:68:42:8c:41:8a:5c:24:52:c3:ad:be:c2: a8:ec:46:e0:11:68:7a:9e:6b:39:4a:20:fe:1a:67: 68:52:9c:8c:13:5b:be:61:1c:b2:80:77:90:9d:1a: 65:b3:bb:94:15:b2:10:48:a5:b9:13:89:ba:e6:68: 77:71:e0:f0:ed:0f:80:8b:0a:1c:a3:e6:fe:cf:61: c4:34:8e:de:cd:50:31:2d:11:ab:f2:b6:fc:b1:aa: 17:26:28:87:d1:72:5a:2f:84:5f:1b:ab:a1:43:64: bf:32:3d:a1:a3:be:cd:e6:b5:ff:ab:55:71:3c:89: df:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:BC:AD:A1:DD:28:6C:2F:22:51:95:9B:8B:80:02:92:22:63:FE:D3 X509v3 Authority Key Identifier: keyid:71:62:F9:F3:C7:B8:AF:4A:D2:D8:31:3E:9D:00:B3:2A:E3:5D:30:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CKnPxhksQHRuqgsakFRxumt4XRcgo7gQVGdSz9hTFFoq/0/7162F9F3C7B8AF4AD2D8313E9D00B32AE35D3023.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7162F9F3C7B8AF4AD2D8313E9D00B32AE35D3023.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CKnPxhksQHRuqgsakFRxumt4XRcgo7gQVGdSz9hTFFoq/0/7162F9F3C7B8AF4AD2D8313E9D00B32AE35D3023.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:f8:f9:9b:52:14:3a:8c:cf:a9:67:44:87:ee:c3:94:de:e5: 20:ea:68:8e:8e:c4:9b:e6:bb:ba:ff:7a:d6:86:a1:b7:4e:67: 38:26:a0:58:26:a6:a4:26:22:3b:1e:b5:82:af:6b:41:3c:8c: ce:6d:75:3a:cc:7b:b2:84:f7:f9:da:90:28:8b:e0:7c:12:3a: 24:b5:e8:7a:ae:f5:9b:09:2a:e6:f3:3f:ab:a1:a3:ae:63:ef: f0:17:08:14:66:26:24:55:6a:41:8c:4c:dc:0e:12:c3:7b:b0: 71:de:79:3f:b4:98:21:bc:d7:44:9a:7e:de:b9:d8:6d:c6:e5: 77:a9:5a:0b:b2:43:bb:91:e6:97:32:5d:a6:b5:8d:fa:00:73: 1c:f4:e8:43:d5:e9:20:ae:de:0a:6b:e9:76:5f:2e:7c:db:41: ce:2c:f8:a8:6c:dd:89:db:70:15:bc:8c:2c:00:03:d1:05:0c: 8b:35:10:b2:15:a0:30:2c:80:e3:eb:16:88:2e:a7:03:a6:9c: 69:83:f5:d8:7d:f1:ed:dd:7e:6a:16:14:ec:32:f2:a8:8c:61: 2f:5f:3e:09:14:83:d1:2c:e6:e1:09:4e:d8:1e:07:91:68:f1: fa:c7:49:bd:64:26:e4:35:ad:f3:fe:6c:1a:7e:b1:c1:a4:5b: 6b:73:ce:5c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUKq1VgY2EKp35/ZHlSg/ehVeWq5YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzE2MkY5RjNDN0I4QUY0QUQyRDgzMTNFOUQwMEIzMkFF MzVEMzAyMzAeFw0yNjA0MDgwMzMwMDRaFw0yNjA0MDkwMzUzMDRaMDMxMTAvBgNV BAMTKDg1QkNBREExREQyODZDMkYyMjUxOTU5QjhCODAwMjkyMjI2M0ZFRDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDpqzz6PB5cUb/vJ/osMZemob2 co7bsnUd0MJbmQNt53mAEl9NU76n2A2jD9GbPrD8DuPhNZ8yrb+2iKzYmHC33s+6 87mMrd2Fh3hcnqBHa1QEme0GpN3ELRq9PrWfl8Mz/qQwgjEfgIlxdxrTT+VGX6hB wzMAAjGzfDDrjSGf0gRqcbgGlxSCAWhCjEGKXCRSw62+wqjsRuARaHqeazlKIP4a Z2hSnIwTW75hHLKAd5CdGmWzu5QVshBIpbkTibrmaHdx4PDtD4CLChyj5v7PYcQ0 jt7NUDEtEavytvyxqhcmKIfRclovhF8bq6FDZL8yPaGjvs3mtf+rVXE8id8zAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUhbytod0obC8iUZWbi4ACkiJj/tMwHwYDVR0j BBgwFoAUcWL588e4r0rS2DE+nQCzKuNdMCMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ0tuUHhoa3NRSFJ1cWdzYWtGUnh1bXQ0WFJjZ283Z1FWR2RTejloVEZG b3EvMC83MTYyRjlGM0M3QjhBRjRBRDJEODMxM0U5RDAwQjMyQUUzNUQzMDIzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzcxNjJGOUYzQzdCOEFGNEFE MkQ4MzEzRTlEMDBCMzJBRTM1RDMwMjMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q0tuUHhoa3NRSFJ1cWdzYWtGUnh1bXQ0WFJjZ283Z1FWR2RTejloVEZGb3EvMC83 MTYyRjlGM0M3QjhBRjRBRDJEODMxM0U5RDAwQjMyQUUzNUQzMDIzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYvj5m1IUOozPqWdEh+7DlN7lIOpojo7Em+a7uv961oaht05nOCagWCampCYi Ox61gq9rQTyMzm11Osx7soT3+dqQKIvgfBI6JLXoeq71mwkq5vM/q6GjrmPv8BcI FGYmJFVqQYxM3A4Sw3uwcd55P7SYIbzXRJp+3rnYbcbld6laC7JDu5HmlzJdprWN +gBzHPToQ9XpIK7eCmvpdl8ufNtBziz4qGzdidtwFbyMLAAD0QUMizUQshWgMCyA 4+sWiC6nA6acaYP12H3x7d1+ahYU7DLyqIxhL18+CRSD0Szm4QlO2B4HkWjx+sdJ vWQm5DWt8/5sGn6xwaRba3POXA== -----END CERTIFICATE-----Generated at Wed Apr 8 16:42:05 2026 by rpki-client