$ rpki-client -vvf rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/1/CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.mft File: CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.mft (raw, json) Hash identifier: BTXb90mdQhtO6+JGIt6rYvyk+XaGcI3p6c8lV2ZbsWU= Subject key identifier: 17:25:93:68:A2:39:DF:20:2E:3E:10:09:AA:60:95:80:49:9F:DC:F4 Authority key identifier: CE:9E:7D:4F:B6:64:E3:CF:2F:C9:0E:96:04:FA:E1:98:A1:A3:02:B2 Certificate issuer: /CN=CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2 Certificate serial: 47D65914714E48748205CA78CF1EB21FB0F6AC34 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.cer Subject info access: rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/1/CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.mft Manifest number: 03E4 Signing time: Wed 08 Apr 2026 00:41:33 +0000 Manifest this update: Wed 08 Apr 2026 00:36:33 +0000 Manifest next update: Thu 09 Apr 2026 04:28:33 +0000 Files and hashes: 1: 3137302e3233332e3131342e302f32342d3234203d3e20323635303738.roa (hash: O74Dl+n7kgxIX7fp6e+Rx21Kwb0KGKe4Rd/oFvpRadw=) 2: CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.crl (hash: rUKzWzx4E8tsNyDo8N76M9b2Bn/rOewyIiyZs/FqpG4=) 3: 3137302e3233332e3131352e302f32342d3234203d3e20323635303738.roa (hash: tSMpR71UAuC2zrbdj0EWvYX2DFiB40w3XPiao4IrMLk=) 4: 3137302e3233332e3131332e302f32342d3234203d3e20323733373838.roa (hash: N2i/qBjBq5/TJnBxu2abDlDhuFcVTp1FhoYaGw4HyrY=) 5: 3137302e3233332e3131322e302f32322d3233203d3e20323635303738.roa (hash: tCHeehAWk6SX2/rRTD0d6RSK+ulyfAmwIQ9PX6N9nqk=) 6: 323830343a333237303a3a2f33322d3430203d3e20323635303738.roa (hash: xZOGYqIMw2Xb3OgmunSGGwwg8xrOZJS8s2Q0thZGd0A=) 7: 3137302e3233332e3131322e302f32342d3234203d3e20323635303738.roa (hash: bIU81f9YCjQGqnLEEAw17fgvcftmD8QjkFeC4s20MKQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/1/CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.crl rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/1/CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 09 Apr 2026 04:28:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:d6:59:14:71:4e:48:74:82:05:ca:78:cf:1e:b2:1f:b0:f6:ac:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2 Validity Not Before: Apr 8 00:36:33 2026 GMT Not After : Apr 9 04:28:33 2026 GMT Subject: CN=17259368A239DF202E3E1009AA609580499FDCF4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:36:ce:89:91:30:4c:4b:2b:e4:17:7a:a1:d0: da:a0:3c:1c:f3:f0:f9:b8:8d:11:ce:90:d7:74:6d: bd:d0:0c:79:4d:10:02:d1:53:54:06:6b:37:4e:5e: df:10:2f:66:86:30:0e:1a:e0:d1:52:56:b8:7a:2d: d3:db:67:7d:d9:a3:97:ff:ef:90:73:28:1f:b4:d6: d7:84:97:78:82:c0:d9:07:92:7d:1b:01:d6:01:f1: 87:a5:c8:f1:43:d2:2c:8f:4e:59:46:df:1b:90:f9: f7:30:d0:8d:28:11:85:75:61:41:bd:05:81:e4:74: 08:65:c3:f7:94:c8:c7:3f:3a:0f:78:8b:5f:f2:c9: 3c:b0:49:cd:5d:9f:80:6e:ac:5f:7a:9d:27:4b:b8: 92:a2:77:6a:74:89:ca:f5:c6:d3:a1:96:da:63:75: 0c:03:c1:3e:0c:b7:0e:df:8d:86:c5:6d:93:26:4a: fc:fe:1a:52:9e:79:aa:93:b8:d7:ac:36:b3:54:11: 3d:25:79:74:56:d7:a8:85:fc:e1:ec:7b:a5:22:79: 69:f5:75:72:d0:aa:4c:64:5f:08:2a:a3:a4:b0:6e: 65:89:09:bc:18:99:84:cf:3f:d5:4e:2e:55:77:54: e2:bb:9f:9c:66:bf:0e:34:46:88:ad:a8:f8:db:8f: 3d:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:25:93:68:A2:39:DF:20:2E:3E:10:09:AA:60:95:80:49:9F:DC:F4 X509v3 Authority Key Identifier: keyid:CE:9E:7D:4F:B6:64:E3:CF:2F:C9:0E:96:04:FA:E1:98:A1:A3:02:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/1/CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/1/CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:77:95:8b:1a:a8:97:10:6f:15:ce:46:15:36:8d:5f:61:11: 46:8e:f0:54:2f:1a:2f:d1:bc:99:6d:ca:35:95:29:cf:e1:e7: d2:e1:f0:51:6c:e8:a0:14:f5:aa:ba:95:f5:0f:ce:93:77:3a: 8c:4e:1e:94:35:38:51:73:6b:c1:fb:78:ff:7c:90:22:4f:ea: e9:39:d4:58:d1:3f:b6:dd:8f:62:65:72:32:5a:65:96:28:08: 2f:85:d0:94:ef:eb:33:b0:48:48:1c:88:a2:2c:b1:8a:5e:e9: 9f:d0:30:ba:31:8e:bc:86:2f:2a:eb:0e:d8:39:60:c7:00:ba: 33:2b:86:5c:06:49:ac:74:1e:70:66:90:04:e9:b2:d7:74:df: f7:c5:17:bd:96:da:6b:5b:78:61:10:03:8b:bc:e7:8c:16:05: fa:2d:e9:0e:9f:87:c3:44:6f:e3:0f:7c:d0:a7:c7:83:39:f7: 47:57:be:5d:a8:d1:e5:45:19:7a:64:e0:bd:e5:1e:bd:9e:08: f5:fc:dd:d3:e9:bb:a8:2e:f9:78:51:77:74:53:9f:27:22:67: ce:8f:82:3c:0d:c3:37:19:36:81:e6:b6:ab:5a:0a:b6:30:82: 57:fe:25:7e:89:51:4c:f4:94:6e:06:31:66:34:45:21:4e:31: 96:ee:f9:db -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUR9ZZFHFOSHSCBcp4zx6yH7D2rDQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0U5RTdENEZCNjY0RTNDRjJGQzkwRTk2MDRGQUUxOThB MUEzMDJCMjAeFw0yNjA0MDgwMDM2MzNaFw0yNjA0MDkwNDI4MzNaMDMxMTAvBgNV BAMTKDE3MjU5MzY4QTIzOURGMjAyRTNFMTAwOUFBNjA5NTgwNDk5RkRDRjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHNs6JkTBMSyvkF3qh0NqgPBzz 8Pm4jRHOkNd0bb3QDHlNEALRU1QGazdOXt8QL2aGMA4a4NFSVrh6LdPbZ33Zo5f/ 75BzKB+01teEl3iCwNkHkn0bAdYB8YelyPFD0iyPTllG3xuQ+fcw0I0oEYV1YUG9 BYHkdAhlw/eUyMc/Og94i1/yyTywSc1dn4BurF96nSdLuJKid2p0icr1xtOhltpj dQwDwT4Mtw7fjYbFbZMmSvz+GlKeeaqTuNesNrNUET0leXRW16iF/OHse6UieWn1 dXLQqkxkXwgqo6SwbmWJCbwYmYTPP9VOLlV3VOK7n5xmvw40RoitqPjbjz2nAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUFyWTaKI53yAuPhAJqmCVgEmf3PQwHwYDVR0j BBgwFoAUzp59T7Zk488vyQ6WBPrhmKGjArIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRDZiNXRkRkt5TjQ1dzNpcGRrZFJBN0hXSnlGdTRGb0VoY1VuWVJQNVdz VHYvMS9DRTlFN0Q0RkI2NjRFM0NGMkZDOTBFOTYwNEZBRTE5OEExQTMwMkIyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NFOUU3RDRGQjY2NEUzQ0Yy RkM5MEU5NjA0RkFFMTk4QTFBMzAyQjIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RDZiNXRkRkt5TjQ1dzNpcGRrZFJBN0hXSnlGdTRGb0VoY1VuWVJQNVdzVHYvMS9D RTlFN0Q0RkI2NjRFM0NGMkZDOTBFOTYwNEZBRTE5OEExQTMwMkIyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEArHeVixqolxBvFc5GFTaNX2ERRo7wVC8aL9G8mW3KNZUpz+Hn0uHwUWzooBT1 qrqV9Q/Ok3c6jE4elDU4UXNrwft4/3yQIk/q6TnUWNE/tt2PYmVyMlplligIL4XQ lO/rM7BISByIoiyxil7pn9AwujGOvIYvKusO2DlgxwC6MyuGXAZJrHQecGaQBOmy 13Tf98UXvZbaa1t4YRADi7znjBYF+i3pDp+Hw0Rv4w980KfHgzn3R1e+XajR5UUZ emTgveUevZ4I9fzd0+m7qC75eFF3dFOfJyJnzo+CPA3DNxk2gea2q1oKtjCCV/4l folRTPSUbgYxZjRFIU4xlu752w== -----END CERTIFICATE-----Generated at Wed Apr 8 19:01:48 2026 by rpki-client