$ rpki-client -vvf rpki-repo.registro.br/repo/CPxhNqg5EAcghUDjU4YBeesmmKaFdqnvE3r5GK5fnyFF/1/84210C699884A23E38D45F40B27833D84A440F91.mft File: 84210C699884A23E38D45F40B27833D84A440F91.mft (raw, json) Hash identifier: 7HxaiccgXH3mMmsjfra8ZfP+/Kx1sRL9rG6n/XdyJSw= Subject key identifier: 3D:48:45:BA:98:A8:DB:6A:58:36:9B:8E:60:F7:D0:71:40:F0:C4:C3 Authority key identifier: 84:21:0C:69:98:84:A2:3E:38:D4:5F:40:B2:78:33:D8:4A:44:0F:91 Certificate issuer: /CN=84210C699884A23E38D45F40B27833D84A440F91 Certificate serial: 76180B87D8C1FCDDD36403DCEBF10CC812F3C94A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84210C699884A23E38D45F40B27833D84A440F91.cer Subject info access: rsync://rpki-repo.registro.br/repo/CPxhNqg5EAcghUDjU4YBeesmmKaFdqnvE3r5GK5fnyFF/1/84210C699884A23E38D45F40B27833D84A440F91.mft Manifest number: 03DF Signing time: Sat 11 Apr 2026 20:20:00 +0000 Manifest this update: Sat 11 Apr 2026 20:15:00 +0000 Manifest next update: Sun 12 Apr 2026 22:15:00 +0000 Files and hashes: 1: 323830343a323163303a3a2f33322d3332203d3e20323634353731.roa (hash: JQkS3aVjRYIUrDrcqdT2yRUNgeAwc+sxOIedWxAMUJI=) 2: 3133382e33362e38302e302f32322d3234203d3e20323634353731.roa (hash: W9cuh6TY+DbzNPDLc450PMX/lZENV+B6iA3ixoKigao=) 3: 84210C699884A23E38D45F40B27833D84A440F91.crl (hash: MWOUl9XFJLM5N3p6DYcbmRAXGl+Y3DtGsghVu/WTWkg=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CPxhNqg5EAcghUDjU4YBeesmmKaFdqnvE3r5GK5fnyFF/1/84210C699884A23E38D45F40B27833D84A440F91.crl rsync://rpki-repo.registro.br/repo/CPxhNqg5EAcghUDjU4YBeesmmKaFdqnvE3r5GK5fnyFF/1/84210C699884A23E38D45F40B27833D84A440F91.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84210C699884A23E38D45F40B27833D84A440F91.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 12 Apr 2026 22:15:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:18:0b:87:d8:c1:fc:dd:d3:64:03:dc:eb:f1:0c:c8:12:f3:c9:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84210C699884A23E38D45F40B27833D84A440F91 Validity Not Before: Apr 11 20:15:00 2026 GMT Not After : Apr 12 22:15:00 2026 GMT Subject: CN=3D4845BA98A8DB6A58369B8E60F7D07140F0C4C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b8:8a:c0:89:0c:a5:cf:2d:e3:90:ed:24:34: 15:cd:1e:18:7e:c6:64:27:4c:0b:95:72:1e:9c:bb: 28:59:90:da:70:2d:7e:03:01:46:16:96:dc:af:c9: 1a:00:42:c6:67:e0:2e:4d:7d:77:4b:28:52:19:82: f6:fb:22:01:5c:f8:33:39:04:a2:81:03:06:6d:75: c5:31:d0:52:70:3b:b0:ec:54:47:85:9f:5c:46:08: 29:f9:1f:61:17:8c:bd:2e:f4:ab:d5:0d:5e:f8:31: 32:2d:f2:59:a0:e4:61:c2:88:6d:0f:a1:f5:48:c2: 90:78:26:3b:45:cf:3d:13:61:6f:d2:b1:ab:44:22: a1:70:e0:bc:c9:31:02:17:e6:2b:17:92:6e:c7:3c: ec:b5:41:cf:50:b8:48:25:3d:60:5c:7e:f4:a9:19: 1d:ca:77:d1:ba:2d:f3:b5:93:6a:35:71:b5:45:cb: 88:94:fb:df:36:5e:44:14:06:23:21:17:ed:30:92: ce:fc:07:6e:5d:01:af:3f:f8:a9:3d:92:22:99:ed: 68:83:df:0a:98:d6:d7:aa:c7:4a:3d:53:f5:ee:2b: 32:71:d8:fe:0d:6e:95:62:4e:11:f7:eb:9d:52:45: 69:c7:0f:57:e8:00:8d:9f:d2:a6:c0:11:97:b4:67: 7d:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:48:45:BA:98:A8:DB:6A:58:36:9B:8E:60:F7:D0:71:40:F0:C4:C3 X509v3 Authority Key Identifier: keyid:84:21:0C:69:98:84:A2:3E:38:D4:5F:40:B2:78:33:D8:4A:44:0F:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CPxhNqg5EAcghUDjU4YBeesmmKaFdqnvE3r5GK5fnyFF/1/84210C699884A23E38D45F40B27833D84A440F91.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84210C699884A23E38D45F40B27833D84A440F91.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CPxhNqg5EAcghUDjU4YBeesmmKaFdqnvE3r5GK5fnyFF/1/84210C699884A23E38D45F40B27833D84A440F91.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:bd:5d:b1:1d:55:55:51:57:1b:f8:76:7a:a7:10:6d:4a:f7: d3:97:b3:bd:e8:51:86:7c:d1:ad:53:d3:cd:bb:80:16:d8:e7: 7e:5c:e9:c4:5e:9b:f8:21:9c:0c:46:38:14:f0:4d:a7:b4:be: e7:dc:5e:cc:c0:74:b5:d8:9e:71:11:2e:7e:08:a6:8b:61:4c: c1:34:ec:be:56:e9:1f:5d:1a:05:e2:f1:96:26:7b:54:17:e9: cd:ed:d9:4b:eb:15:0b:13:99:86:10:34:5a:f2:de:36:47:b6: 49:a4:99:4e:e3:03:df:4c:ea:7c:22:0d:e6:9c:99:b6:e1:2e: b7:4e:8f:0b:63:03:bb:65:15:b8:73:ef:0a:13:10:25:90:de: 34:e0:1e:01:7c:de:f4:f9:9f:d0:12:95:7b:8b:2f:f1:ce:83: d0:25:f3:3d:ad:5e:61:bd:7a:5f:77:d1:83:76:00:93:6f:c8: 4c:e3:52:ea:b6:5f:d6:b0:bd:bd:3a:51:ef:df:38:b6:19:4f: 99:29:15:a6:35:32:46:f3:89:5b:af:64:76:70:dc:3c:c3:0f: 1c:43:05:b0:30:62:a4:9a:40:d7:af:c4:2f:f5:45:1e:a5:44: 90:05:7e:35:ab:1a:4a:d2:26:4c:79:32:55:4c:51:90:82:1e: 3d:e0:fb:10 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUdhgLh9jB/N3TZAPc6/EMyBLzyUowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQyMTBDNjk5ODg0QTIzRTM4RDQ1RjQwQjI3ODMzRDg0 QTQ0MEY5MTAeFw0yNjA0MTEyMDE1MDBaFw0yNjA0MTIyMjE1MDBaMDMxMTAvBgNV BAMTKDNENDg0NUJBOThBOERCNkE1ODM2OUI4RTYwRjdEMDcxNDBGMEM0QzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1uIrAiQylzy3jkO0kNBXNHhh+ xmQnTAuVch6cuyhZkNpwLX4DAUYWltyvyRoAQsZn4C5NfXdLKFIZgvb7IgFc+DM5 BKKBAwZtdcUx0FJwO7DsVEeFn1xGCCn5H2EXjL0u9KvVDV74MTIt8lmg5GHCiG0P ofVIwpB4JjtFzz0TYW/SsatEIqFw4LzJMQIX5isXkm7HPOy1Qc9QuEglPWBcfvSp GR3Kd9G6LfO1k2o1cbVFy4iU+982XkQUBiMhF+0wks78B25dAa8/+Kk9kiKZ7WiD 3wqY1teqx0o9U/XuKzJx2P4NbpViThH3651SRWnHD1foAI2f0qbAEZe0Z30BAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUPUhFupio22pYNpuOYPfQcUDwxMMwHwYDVR0j BBgwFoAUhCEMaZiEoj441F9Asngz2EpED5EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ1B4aE5xZzVFQWNnaFVEalU0WUJlZXNtbUthRmRxbnZFM3I1R0s1Zm55 RkYvMS84NDIxMEM2OTk4ODRBMjNFMzhENDVGNDBCMjc4MzNEODRBNDQwRjkxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg0MjEwQzY5OTg4NEEyM0Uz OEQ0NUY0MEIyNzgzM0Q4NEE0NDBGOTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q1B4aE5xZzVFQWNnaFVEalU0WUJlZXNtbUthRmRxbnZFM3I1R0s1Zm55RkYvMS84 NDIxMEM2OTk4ODRBMjNFMzhENDVGNDBCMjc4MzNEODRBNDQwRjkxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOb1dsR1VVVFXG/h2eqcQbUr305ezvehRhnzRrVPTzbuAFtjnflzpxF6b+CGc DEY4FPBNp7S+59xezMB0tdiecREufgimi2FMwTTsvlbpH10aBeLxliZ7VBfpze3Z S+sVCxOZhhA0WvLeNke2SaSZTuMD30zqfCIN5pyZtuEut06PC2MDu2UVuHPvChMQ JZDeNOAeAXze9Pmf0BKVe4sv8c6D0CXzPa1eYb16X3fRg3YAk2/ITONS6rZf1rC9 vTpR7984thlPmSkVpjUyRvOJW69kdnDcPMMPHEMFsDBipJpA16/EL/VFHqVEkAV+ NasaStImTHkyVUxRkIIePeD7EA== -----END CERTIFICATE-----Generated at Sun Apr 12 08:16:11 2026 by rpki-client