$ rpki-client -vvf rpki-repo.registro.br/repo/D1duEuF8eLBtiWqeB6zFnvGjJs7NvtBnu37borKVzjdH/0/AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.mft File: AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.mft (raw, json) Hash identifier: jUzWSJEf8VHqT+JuZIkxKlI8wEc/9/nQj8CkXrQVXfY= Subject key identifier: BE:AC:0F:E9:E0:91:09:86:20:BE:68:16:67:19:F2:BA:AA:F4:42:A5 Authority key identifier: AA:07:8E:8F:5E:A4:EF:EF:8E:70:03:E0:A9:B2:11:65:B5:AB:81:D4 Certificate issuer: /CN=AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4 Certificate serial: 750A4B3F60F8CCD6AD0EBF9A3F124CA407D7AEB2 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.cer Subject info access: rsync://rpki-repo.registro.br/repo/D1duEuF8eLBtiWqeB6zFnvGjJs7NvtBnu37borKVzjdH/0/AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.mft Manifest number: 0355 Signing time: Wed 08 Apr 2026 09:29:16 +0000 Manifest this update: Wed 08 Apr 2026 09:24:16 +0000 Manifest next update: Thu 09 Apr 2026 09:37:16 +0000 Files and hashes: 1: AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.crl (hash: y7sbdj1sfV88rYb6fr7HyfHZC8X84y6TPLS28TFz6X0=) 2: 34352e3137332e36342e302f32322d3330203d3e20323636303033.roa (hash: P6G6AZFRp5kqOosNoCryglvvtcBc6hA5DOR0IbYdZVw=) 3: 3138312e3139312e39362e302f32322d3332203d3e20323636303033.roa (hash: rpzTvujFf5WqwOlcgDZSFzIkdHepRTqi1III3eflS2U=) 4: 323830343a343131383a3a2f33322d3634203d3e20323636303033.roa (hash: 77PgPUhXMiY+0pD6ukxK9PeS+HQTTgL9ZfKKPVRrA3Y=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/D1duEuF8eLBtiWqeB6zFnvGjJs7NvtBnu37borKVzjdH/0/AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.crl rsync://rpki-repo.registro.br/repo/D1duEuF8eLBtiWqeB6zFnvGjJs7NvtBnu37borKVzjdH/0/AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 09 Apr 2026 09:37:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:0a:4b:3f:60:f8:cc:d6:ad:0e:bf:9a:3f:12:4c:a4:07:d7:ae:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4 Validity Not Before: Apr 8 09:24:16 2026 GMT Not After : Apr 9 09:37:16 2026 GMT Subject: CN=BEAC0FE9E091098620BE68166719F2BAAAF442A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d5:73:23:0c:dd:17:9c:79:97:4a:54:4b:1c: 7e:8f:4a:0e:a7:fe:0a:5a:53:11:4d:02:ca:10:25: 77:b7:b8:db:ac:78:ad:45:07:6d:29:51:bf:65:65: 7a:1e:78:5e:31:94:b1:f7:ed:90:b7:e1:74:32:ef: 78:34:41:b6:a7:b5:31:69:7c:85:da:49:d3:8b:d6: 6a:8d:f4:21:97:01:75:fd:84:2a:4c:bd:7f:b6:65: 11:aa:69:9a:c2:3f:d4:a5:6e:ad:73:0d:0b:dd:f5: 75:48:52:4c:28:2e:20:90:cd:1a:4b:31:32:7e:3d: ee:62:08:8d:d3:6d:bc:ee:34:a6:84:e1:fa:a1:69: 28:1c:a2:09:ae:1a:98:54:2c:58:f9:30:ad:64:12: b1:c1:ba:45:ae:15:05:24:63:5a:39:39:b9:4d:f3: 85:7b:06:b5:17:27:96:be:ea:31:be:7b:5b:09:21: d7:fa:83:f6:67:28:ec:63:1f:58:4d:11:32:ab:5b: 7f:0a:dc:04:5b:79:f7:5e:25:15:ae:7e:aa:ee:4f: 5f:90:38:7d:30:3e:a7:fd:e9:a1:cd:f3:29:b0:3c: 24:ca:4f:21:b8:dc:f5:b5:2c:ca:26:a5:2e:5d:cf: ba:64:bd:50:fe:37:f3:64:2b:aa:ed:5d:9b:4e:9b: 0d:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:AC:0F:E9:E0:91:09:86:20:BE:68:16:67:19:F2:BA:AA:F4:42:A5 X509v3 Authority Key Identifier: keyid:AA:07:8E:8F:5E:A4:EF:EF:8E:70:03:E0:A9:B2:11:65:B5:AB:81:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/D1duEuF8eLBtiWqeB6zFnvGjJs7NvtBnu37borKVzjdH/0/AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/D1duEuF8eLBtiWqeB6zFnvGjJs7NvtBnu37borKVzjdH/0/AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:b6:30:19:cc:38:a3:d0:07:96:3d:1e:c7:d2:5f:1d:ea:a5: 52:b7:68:15:11:c3:af:11:55:06:b9:8f:c9:eb:57:00:29:d3: e1:96:5e:22:94:8d:c4:4c:c8:74:64:c0:1f:20:4b:69:58:8e: 03:94:3c:f0:28:1c:ca:b4:77:8d:3e:8f:59:cf:6e:f7:d9:df: e5:e3:c7:10:6b:45:65:e9:86:cc:59:bb:51:fe:a7:ed:82:2b: 5d:f8:a6:0e:b9:46:9e:a1:73:fa:e7:1e:11:98:65:52:62:67: 79:53:ad:e6:59:6b:cc:42:ce:37:ad:ca:dc:bb:ea:cd:00:a5: 6c:d7:21:09:fe:10:81:6b:34:cc:b8:92:47:51:34:09:ad:ef: 23:f2:04:21:e9:8b:3e:d4:82:bb:ad:71:69:b5:f0:99:dc:e8: 06:ba:e4:22:e2:ea:bd:49:cd:e4:f7:d2:67:5f:0e:2a:36:3e: d9:81:13:af:ee:70:7a:46:b9:e6:10:98:8d:13:19:07:b3:c4: 8c:fe:52:4e:8e:7b:9d:79:dd:97:58:41:c4:2e:90:df:2e:5a: 1b:52:40:90:4c:89:8f:51:76:39:23:57:bb:ad:a2:cd:da:e5: 9c:67:68:e0:b6:bc:63:8d:2f:f6:af:97:48:25:dc:e3:f6:6d: d0:28:e6:1a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUdQpLP2D4zNatDr+aPxJMpAfXrrIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUEwNzhFOEY1RUE0RUZFRjhFNzAwM0UwQTlCMjExNjVC NUFCODFENDAeFw0yNjA0MDgwOTI0MTZaFw0yNjA0MDkwOTM3MTZaMDMxMTAvBgNV BAMTKEJFQUMwRkU5RTA5MTA5ODYyMEJFNjgxNjY3MTlGMkJBQUFGNDQyQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC81XMjDN0XnHmXSlRLHH6PSg6n /gpaUxFNAsoQJXe3uNuseK1FB20pUb9lZXoeeF4xlLH37ZC34XQy73g0QbantTFp fIXaSdOL1mqN9CGXAXX9hCpMvX+2ZRGqaZrCP9Slbq1zDQvd9XVIUkwoLiCQzRpL MTJ+Pe5iCI3TbbzuNKaE4fqhaSgcogmuGphULFj5MK1kErHBukWuFQUkY1o5OblN 84V7BrUXJ5a+6jG+e1sJIdf6g/ZnKOxjH1hNETKrW38K3ARbefdeJRWufqruT1+Q OH0wPqf96aHN8ymwPCTKTyG43PW1LMompS5dz7pkvVD+N/NkK6rtXZtOmw0TAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUvqwP6eCRCYYgvmgWZxnyuqr0QqUwHwYDVR0j BBgwFoAUqgeOj16k7++OcAPgqbIRZbWrgdQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRDFkdUV1RjhlTEJ0aVdxZUI2ekZudkdqSnM3TnZ0Qm51Mzdib3JLVnpq ZEgvMC9BQTA3OEU4RjVFQTRFRkVGOEU3MDAzRTBBOUIyMTE2NUI1QUI4MUQ0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FBMDc4RThGNUVBNEVGRUY4 RTcwMDNFMEE5QjIxMTY1QjVBQjgxRDQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RDFkdUV1RjhlTEJ0aVdxZUI2ekZudkdqSnM3TnZ0Qm51Mzdib3JLVnpqZEgvMC9B QTA3OEU4RjVFQTRFRkVGOEU3MDAzRTBBOUIyMTE2NUI1QUI4MUQ0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEANbYwGcw4o9AHlj0ex9JfHeqlUrdoFRHDrxFVBrmPyetXACnT4ZZeIpSNxEzI dGTAHyBLaViOA5Q88CgcyrR3jT6PWc9u99nf5ePHEGtFZemGzFm7Uf6n7YIrXfim DrlGnqFz+uceEZhlUmJneVOt5llrzELON63K3LvqzQClbNchCf4QgWs0zLiSR1E0 Ca3vI/IEIemLPtSCu61xabXwmdzoBrrkIuLqvUnN5PfSZ18OKjY+2YETr+5weka5 5hCYjRMZB7PEjP5STo57nXndl1hBxC6Q3y5aG1JAkEyJj1F2OSNXu62izdrlnGdo 4La8Y40v9q+XSCXc4/Zt0CjmGg== -----END CERTIFICATE-----Generated at Wed Apr 8 17:46:55 2026 by rpki-client