$ rpki-client -vvf rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/72DB29ACFB9A8FA91BA7A8A94F819DEC61A0C74B.mft File: 72DB29ACFB9A8FA91BA7A8A94F819DEC61A0C74B.mft (raw, json) Hash identifier: oapJjBkuqSH6jpMSfJuu82zz2nLqSb5ZBQos4ASL/8w= Subject key identifier: 60:8D:F3:6A:CB:52:90:E7:AD:DF:A6:97:39:28:E5:D4:5E:4C:BE:96 Authority key identifier: 72:DB:29:AC:FB:9A:8F:A9:1B:A7:A8:A9:4F:81:9D:EC:61:A0:C7:4B Certificate issuer: /CN=72DB29ACFB9A8FA91BA7A8A94F819DEC61A0C74B Certificate serial: 4F023FF3C42B4B1966E35FDFAF0362D00301EC7D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72DB29ACFB9A8FA91BA7A8A94F819DEC61A0C74B.cer Subject info access: rsync://rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/72DB29ACFB9A8FA91BA7A8A94F819DEC61A0C74B.mft Manifest number: 19 Signing time: Wed 08 Apr 2026 08:58:36 +0000 Manifest this update: Wed 08 Apr 2026 08:53:36 +0000 Manifest next update: Thu 09 Apr 2026 12:36:36 +0000 Files and hashes: 1: 72DB29ACFB9A8FA91BA7A8A94F819DEC61A0C74B.crl (hash: E/VVU39IpjWkxeTYa8QdeUrhM1V1WA6sYWaW2pstKzk=) 2: 34352e3233372e32342e302f32332d3332203d3e20323638323632.roa (hash: vArVfhgGT8R3/jx9frBmP+FJTOy42OB4PQrNLGQ5JQY=) 3: 323830343a346537343a3a2f33322d313238203d3e20323638323632.roa (hash: +13PRgvgS+y2aG8SuGR6WjUhp5A78IZfd83U0qcnGvU=) 4: 34352e3233372e32362e302f32332d3332203d3e20323638323632.roa (hash: Gl3bxMn8lT6IQxXoS2WQDuL+5cF14T1T08jt+lAXZRk=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/72DB29ACFB9A8FA91BA7A8A94F819DEC61A0C74B.crl rsync://rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/72DB29ACFB9A8FA91BA7A8A94F819DEC61A0C74B.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72DB29ACFB9A8FA91BA7A8A94F819DEC61A0C74B.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 09 Apr 2026 12:36:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:02:3f:f3:c4:2b:4b:19:66:e3:5f:df:af:03:62:d0:03:01:ec:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72DB29ACFB9A8FA91BA7A8A94F819DEC61A0C74B Validity Not Before: Apr 8 08:53:36 2026 GMT Not After : Apr 9 12:36:36 2026 GMT Subject: CN=608DF36ACB5290E7ADDFA6973928E5D45E4CBE96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:a2:a4:e8:a4:cf:7c:5d:f4:33:03:ff:8a:7a: 71:fc:da:69:41:e0:80:7f:8a:ab:80:b2:68:ec:67: 2f:0b:cf:43:a4:87:00:a6:64:6e:22:d1:8d:dc:41: e7:4e:fa:03:ae:48:ac:cc:60:2d:01:04:f6:a4:33: 85:d5:cf:d7:06:fa:ec:f3:3b:5e:fd:44:82:59:a1: 98:f8:c3:9f:a3:87:66:f9:75:74:18:5f:26:83:ae: 0a:f8:74:4f:42:2d:71:2f:10:f4:f6:8c:cf:83:95: a1:b7:bc:b1:fb:03:96:27:4a:c4:52:65:dc:7d:9c: c5:54:75:b6:5b:de:84:85:81:34:72:54:8e:d4:f8: 94:2b:9a:3e:df:7b:d1:df:a6:78:bc:e4:1f:56:b5: 38:3f:8d:16:9e:b6:45:8d:44:f6:ff:d9:1c:57:72: c9:7b:e3:b6:21:13:e3:43:96:1e:44:dc:87:5b:be: 2b:ec:ca:ec:27:04:b8:7f:88:9e:f8:8e:88:24:32: 16:09:da:a4:af:4d:11:6b:61:96:97:99:19:cc:78: 39:ab:6f:52:d8:38:d7:07:b3:e9:bd:94:1e:3e:f5: e8:f5:a4:6d:f6:0c:fd:83:da:b4:38:62:ca:d3:42: 8b:67:49:43:bb:14:6e:f6:85:52:d5:b4:e0:83:b5: 59:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:8D:F3:6A:CB:52:90:E7:AD:DF:A6:97:39:28:E5:D4:5E:4C:BE:96 X509v3 Authority Key Identifier: keyid:72:DB:29:AC:FB:9A:8F:A9:1B:A7:A8:A9:4F:81:9D:EC:61:A0:C7:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/72DB29ACFB9A8FA91BA7A8A94F819DEC61A0C74B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72DB29ACFB9A8FA91BA7A8A94F819DEC61A0C74B.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/72DB29ACFB9A8FA91BA7A8A94F819DEC61A0C74B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:2e:e1:bb:17:1e:26:6d:15:23:11:78:2f:b3:4d:72:9a:94: a8:a2:c8:96:45:e9:64:c7:58:d6:6b:bf:73:ff:f5:c4:84:63: ce:32:27:c7:82:cc:85:5e:5c:60:f0:a8:f2:8a:ab:6a:68:ea: f5:ae:d9:f1:75:cd:e7:8f:d2:d2:ac:83:c9:44:4c:b0:bf:0c: 16:14:d0:fe:eb:73:59:d0:7c:d0:0c:38:d5:ab:b8:e2:af:38: f5:10:ac:74:d3:d7:ab:64:99:5a:c1:5b:62:d6:eb:8b:a6:20: 00:7b:da:e2:8f:2b:ef:26:b9:2f:a8:b0:c2:18:ca:0a:15:1b: c8:c2:1a:e9:82:3c:d3:98:86:c8:f6:68:cf:9c:fb:a2:c7:e8: 2f:de:a2:c0:07:63:c1:03:06:4a:07:7c:17:07:07:66:27:14: 38:e3:40:0b:d6:49:11:22:31:47:35:d9:d6:5e:28:0f:10:94: c5:00:a2:8c:ec:a9:e5:8c:22:08:aa:26:79:ad:d9:53:0f:1e: 03:be:c0:11:c7:c8:19:6a:17:3e:6c:b6:d5:40:85:b8:17:9c: 75:77:eb:1f:d5:c7:fa:d5:6d:b2:12:44:05:84:28:f8:2d:b9: 6f:8e:6a:17:0b:cc:84:e6:36:7a:cb:fd:6e:d9:b1:1c:cb:bc: 55:dd:49:d4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUTwI/88QrSxlm41/frwNi0AMB7H0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzJEQjI5QUNGQjlBOEZBOTFCQTdBOEE5NEY4MTlERUM2 MUEwQzc0QjAeFw0yNjA0MDgwODUzMzZaFw0yNjA0MDkxMjM2MzZaMDMxMTAvBgNV BAMTKDYwOERGMzZBQ0I1MjkwRTdBRERGQTY5NzM5MjhFNUQ0NUU0Q0JFOTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnoqTopM98XfQzA/+KenH82mlB 4IB/iquAsmjsZy8Lz0OkhwCmZG4i0Y3cQedO+gOuSKzMYC0BBPakM4XVz9cG+uzz O179RIJZoZj4w5+jh2b5dXQYXyaDrgr4dE9CLXEvEPT2jM+DlaG3vLH7A5YnSsRS Zdx9nMVUdbZb3oSFgTRyVI7U+JQrmj7fe9Hfpni85B9WtTg/jRaetkWNRPb/2RxX csl747YhE+NDlh5E3IdbvivsyuwnBLh/iJ74jogkMhYJ2qSvTRFrYZaXmRnMeDmr b1LYONcHs+m9lB4+9ej1pG32DP2D2rQ4YsrTQotnSUO7FG72hVLVtOCDtVk3AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUYI3zastSkOet36aXOSjl1F5MvpYwHwYDVR0j BBgwFoAUctsprPuaj6kbp6ipT4Gd7GGgx0swDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ3RYaE5vRHB6YlpOaldUcjlLcjJZUWc3SmhGNmUxVkhqY25GazdYM1Rl VmovMC83MkRCMjlBQ0ZCOUE4RkE5MUJBN0E4QTk0RjgxOURFQzYxQTBDNzRCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzcyREIyOUFDRkI5QThGQTkx QkE3QThBOTRGODE5REVDNjFBMEM3NEIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q3RYaE5vRHB6YlpOaldUcjlLcjJZUWc3SmhGNmUxVkhqY25GazdYM1RlVmovMC83 MkRCMjlBQ0ZCOUE4RkE5MUJBN0E4QTk0RjgxOURFQzYxQTBDNzRCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEACS7huxceJm0VIxF4L7NNcpqUqKLIlkXpZMdY1mu/c//1xIRjzjInx4LMhV5c YPCo8oqramjq9a7Z8XXN54/S0qyDyURMsL8MFhTQ/utzWdB80Aw41au44q849RCs dNPXq2SZWsFbYtbri6YgAHva4o8r7ya5L6iwwhjKChUbyMIa6YI805iGyPZoz5z7 osfoL96iwAdjwQMGSgd8FwcHZicUOONAC9ZJESIxRzXZ1l4oDxCUxQCijOyp5Ywi CKomea3ZUw8eA77AEcfIGWoXPmy21UCFuBecdXfrH9XH+tVtshJEBYQo+C25b45q FwvMhOY2esv9btmxHMu8Vd1J1A== -----END CERTIFICATE-----Generated at Wed Apr 8 16:25:20 2026 by rpki-client