$ rpki-client -vvf rpki-repo.registro.br/repo/DKrTKjSALx8v7FpoF3vWa5XHgkwM7bUFJzeqrQjrrzRk/1/0F3EB00E01FDDECDD0D20AC7A1389E9E1350DE08.mft File: 0F3EB00E01FDDECDD0D20AC7A1389E9E1350DE08.mft (raw, json) Hash identifier: ZWEnlOpMw+vXObXzC8ummRGtzxHCNUaFl97Nhsd422k= Subject key identifier: A3:47:9F:AE:77:94:BB:69:E6:8B:24:63:91:D5:92:DB:D2:80:1C:D7 Authority key identifier: 0F:3E:B0:0E:01:FD:DE:CD:D0:D2:0A:C7:A1:38:9E:9E:13:50:DE:08 Certificate issuer: /CN=0F3EB00E01FDDECDD0D20AC7A1389E9E1350DE08 Certificate serial: 4ECBE1D7676B39A5F3D87733BE6C1491929C902D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F3EB00E01FDDECDD0D20AC7A1389E9E1350DE08.cer Subject info access: rsync://rpki-repo.registro.br/repo/DKrTKjSALx8v7FpoF3vWa5XHgkwM7bUFJzeqrQjrrzRk/1/0F3EB00E01FDDECDD0D20AC7A1389E9E1350DE08.mft Manifest number: 03D6 Signing time: Tue 07 Apr 2026 18:24:14 +0000 Manifest this update: Tue 07 Apr 2026 18:19:14 +0000 Manifest next update: Wed 08 Apr 2026 19:30:14 +0000 Files and hashes: 1: 323830343a356363303a3a2f33322d3438203d3e20323638393238.roa (hash: zHXbW09edwhrCfYMv7XkdTkFC+SlsjNe/uMJfqgkA84=) 2: 34352e3137362e31322e302f32322d3234203d3e20323638393238.roa (hash: YnntwTG6n73fryrwO6E92kkNlse661Lg9hxTqJMXuuU=) 3: 0F3EB00E01FDDECDD0D20AC7A1389E9E1350DE08.crl (hash: Z4jxbGkTBm48Yj9b5LWew9MBRFesYgI/bd34DBqIc/E=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DKrTKjSALx8v7FpoF3vWa5XHgkwM7bUFJzeqrQjrrzRk/1/0F3EB00E01FDDECDD0D20AC7A1389E9E1350DE08.crl rsync://rpki-repo.registro.br/repo/DKrTKjSALx8v7FpoF3vWa5XHgkwM7bUFJzeqrQjrrzRk/1/0F3EB00E01FDDECDD0D20AC7A1389E9E1350DE08.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F3EB00E01FDDECDD0D20AC7A1389E9E1350DE08.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 08 Apr 2026 19:30:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:cb:e1:d7:67:6b:39:a5:f3:d8:77:33:be:6c:14:91:92:9c:90:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F3EB00E01FDDECDD0D20AC7A1389E9E1350DE08 Validity Not Before: Apr 7 18:19:14 2026 GMT Not After : Apr 8 19:30:14 2026 GMT Subject: CN=A3479FAE7794BB69E68B246391D592DBD2801CD7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:f9:39:a4:81:99:f6:fc:2e:b5:2b:d9:40:a6: 0e:b9:08:c1:e1:00:e0:da:63:8f:24:56:82:2d:97: fa:da:69:a5:b6:11:93:df:89:10:ec:7f:33:63:8a: 34:7a:82:d1:9c:ac:3f:aa:59:6b:38:28:d0:76:fb: df:af:16:53:d5:87:24:f4:bb:58:c2:22:18:ed:1f: a6:71:00:ba:62:5d:77:ad:e5:71:f1:a4:37:95:58: 65:a7:f0:2d:9b:85:7f:c4:b5:b1:31:c1:b1:92:e4: 51:a5:d0:a3:d9:30:84:3a:a0:36:b8:89:62:87:6f: 6f:7a:96:a2:a4:01:79:5e:2b:c9:0c:f7:ac:1d:13: b4:27:45:76:fd:eb:ef:da:87:f5:c3:d7:6e:4f:bf: e1:b3:da:65:28:b7:d0:0d:b6:fc:c7:16:cb:87:05: 9d:a3:94:98:ec:e1:66:ec:e9:ca:b1:89:1c:35:42: 6e:36:ce:4a:11:83:16:e8:7b:7b:30:6b:5a:f9:c1: 44:19:39:ea:ab:f1:ea:4b:1e:aa:42:e2:9a:98:e7: 07:58:e3:79:2e:97:7c:eb:f7:fd:29:48:1f:18:01: a4:54:3e:7a:72:87:24:4b:f0:4e:80:c6:d2:a9:86: f0:d4:6d:7d:7a:4e:5f:6b:01:e3:ee:09:5f:fe:c6: 39:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:47:9F:AE:77:94:BB:69:E6:8B:24:63:91:D5:92:DB:D2:80:1C:D7 X509v3 Authority Key Identifier: keyid:0F:3E:B0:0E:01:FD:DE:CD:D0:D2:0A:C7:A1:38:9E:9E:13:50:DE:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DKrTKjSALx8v7FpoF3vWa5XHgkwM7bUFJzeqrQjrrzRk/1/0F3EB00E01FDDECDD0D20AC7A1389E9E1350DE08.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F3EB00E01FDDECDD0D20AC7A1389E9E1350DE08.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DKrTKjSALx8v7FpoF3vWa5XHgkwM7bUFJzeqrQjrrzRk/1/0F3EB00E01FDDECDD0D20AC7A1389E9E1350DE08.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:e0:4f:4e:f8:99:56:45:9a:24:b7:21:d1:51:bc:69:5c:b0: ee:51:ab:cd:81:b8:9f:f7:72:67:44:d2:ab:97:ba:84:d2:45: b1:8e:d5:14:33:98:59:af:7d:94:37:da:44:56:b8:ea:7b:b1: e6:39:79:c6:1e:7c:c4:c4:20:c9:42:65:13:03:ac:15:1a:85: ec:11:64:d4:f0:f6:8e:de:8d:c8:d3:e9:bf:cb:b4:b5:b4:71: 86:6e:b7:45:6b:9e:e6:d9:8b:0b:ff:02:2b:cf:e6:aa:33:b7: 95:48:a0:9c:ef:76:d1:c0:6e:b9:75:ea:30:7f:40:04:d5:1d: 86:c1:17:8e:ef:73:bf:d4:1d:88:51:f3:6b:73:1a:b2:0f:48: 50:3f:fd:fb:d9:95:3b:b8:e2:1b:c6:67:49:1b:8e:be:e3:63: 61:e7:3f:e7:ba:99:9a:58:24:89:16:f5:07:f7:6e:f9:b3:ca: df:e8:7e:c5:bb:d8:a1:2f:71:e2:90:5d:a7:cf:33:0b:05:0e: 86:3b:14:df:5e:b4:db:33:2d:d0:0a:49:9e:5b:e5:26:8f:e1: 11:fb:8d:89:51:3e:ba:38:f3:3a:70:18:60:4e:68:07:78:bb: 3d:1d:8d:ac:27:a6:10:43:a2:89:61:92:71:2b:2a:a6:b4:3a: fa:21:e6:19 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUTsvh12drOaXz2HczvmwUkZKckC0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEYzRUIwMEUwMUZEREVDREQwRDIwQUM3QTEzODlFOUUx MzUwREUwODAeFw0yNjA0MDcxODE5MTRaFw0yNjA0MDgxOTMwMTRaMDMxMTAvBgNV BAMTKEEzNDc5RkFFNzc5NEJCNjlFNjhCMjQ2MzkxRDU5MkRCRDI4MDFDRDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3+TmkgZn2/C61K9lApg65CMHh AODaY48kVoItl/raaaW2EZPfiRDsfzNjijR6gtGcrD+qWWs4KNB2+9+vFlPVhyT0 u1jCIhjtH6ZxALpiXXet5XHxpDeVWGWn8C2bhX/EtbExwbGS5FGl0KPZMIQ6oDa4 iWKHb296lqKkAXleK8kM96wdE7QnRXb96+/ah/XD125Pv+Gz2mUot9ANtvzHFsuH BZ2jlJjs4Wbs6cqxiRw1Qm42zkoRgxboe3swa1r5wUQZOeqr8epLHqpC4pqY5wdY 43kul3zr9/0pSB8YAaRUPnpyhyRL8E6AxtKphvDUbX16Tl9rAePuCV/+xjkRAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUo0efrneUu2nmiyRjkdWS29KAHNcwHwYDVR0j BBgwFoAUDz6wDgH93s3Q0grHoTienhNQ3ggwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vREtyVEtqU0FMeDh2N0Zwb0YzdldhNVhIZ2t3TTdiVUZKemVxclFqcnJ6 UmsvMS8wRjNFQjAwRTAxRkRERUNERDBEMjBBQzdBMTM4OUU5RTEzNTBERTA4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBGM0VCMDBFMDFGRERFQ0RE MEQyMEFDN0ExMzg5RTlFMTM1MERFMDguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v REtyVEtqU0FMeDh2N0Zwb0YzdldhNVhIZ2t3TTdiVUZKemVxclFqcnJ6UmsvMS8w RjNFQjAwRTAxRkRERUNERDBEMjBBQzdBMTM4OUU5RTEzNTBERTA4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmeBPTviZVkWaJLch0VG8aVyw7lGrzYG4n/dyZ0TSq5e6hNJFsY7VFDOYWa99 lDfaRFa46nux5jl5xh58xMQgyUJlEwOsFRqF7BFk1PD2jt6NyNPpv8u0tbRxhm63 RWue5tmLC/8CK8/mqjO3lUignO920cBuuXXqMH9ABNUdhsEXju9zv9QdiFHza3Ma sg9IUD/9+9mVO7jiG8ZnSRuOvuNjYec/57qZmlgkiRb1B/du+bPK3+h+xbvYoS9x 4pBdp88zCwUOhjsU31602zMt0ApJnlvlJo/hEfuNiVE+ujjzOnAYYE5oB3i7PR2N rCemEEOiiWGScSsqprQ6+iHmGQ== -----END CERTIFICATE-----Generated at Wed Apr 8 13:12:07 2026 by rpki-client