$ rpki-client -vvf rpki-repo.registro.br/repo/DiedU9B7M6NxXr5xQhJdft17HNsjQS3dg6iUHrJZiVAv/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.mft File: D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.mft (raw, json) Hash identifier: q3q2t0TTmp/MNKFzNF8owFirRuNdCXgYEaGh/9xO8iA= Subject key identifier: 38:63:7A:BD:37:7C:B1:47:BD:57:8A:38:D4:B1:6C:00:AB:86:04:72 Authority key identifier: D2:24:DF:F1:98:22:C5:B2:7C:7B:CC:16:BF:D8:BE:2A:38:4F:89:AA Certificate issuer: /CN=D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA Certificate serial: 0BB416A592FC3605449617073BA9C80B00DDD699 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.cer Subject info access: rsync://rpki-repo.registro.br/repo/DiedU9B7M6NxXr5xQhJdft17HNsjQS3dg6iUHrJZiVAv/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.mft Manifest number: 03C4 Signing time: Wed 08 Apr 2026 03:56:39 +0000 Manifest this update: Wed 08 Apr 2026 03:51:39 +0000 Manifest next update: Thu 09 Apr 2026 04:41:39 +0000 Files and hashes: 1: 3136382e3139372e3230342e302f32322d3234203d3e203533313339.roa (hash: ySkyY3nq4rz0dNW8rF5gaWogxnEPCTvWUkX3gDlQytA=) 2: 3138372e3130392e38302e302f32302d3234203d3e203533313339.roa (hash: MXKjsbMHPRAw36TRxv0Iq9a292215IPlxvY87b1a0BA=) 3: 323830343a333164343a3a2f33322d3438203d3e203533313339.roa (hash: cFt8LxF28+1rkiKt5ZFM/VhjfoGWCFQ6jBy7OAjx3bg=) 4: D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.crl (hash: LYP2PN9R7ElP6/fLkGwvHNEP5t8B1ynrqkPSrSnU9D0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DiedU9B7M6NxXr5xQhJdft17HNsjQS3dg6iUHrJZiVAv/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.crl rsync://rpki-repo.registro.br/repo/DiedU9B7M6NxXr5xQhJdft17HNsjQS3dg6iUHrJZiVAv/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 09 Apr 2026 04:41:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:b4:16:a5:92:fc:36:05:44:96:17:07:3b:a9:c8:0b:00:dd:d6:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA Validity Not Before: Apr 8 03:51:39 2026 GMT Not After : Apr 9 04:41:39 2026 GMT Subject: CN=38637ABD377CB147BD578A38D4B16C00AB860472 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:55:c5:48:2d:6b:5c:79:ff:05:c8:2d:c6:ee: 67:31:92:8a:cc:0f:4d:29:79:ce:73:b4:ae:db:0c: 35:5b:6f:d3:53:6c:3d:56:63:00:19:63:58:0b:a5: 0e:bd:ca:19:76:92:9e:54:26:66:16:4b:23:69:5a: 29:74:7a:d0:bc:43:71:f6:23:67:30:41:3b:ce:76: 00:03:2b:6a:d9:a6:e4:ad:a1:b0:32:1b:87:ee:fc: 2f:0c:a2:13:72:c0:d0:ad:f2:69:3b:9e:67:3d:64: 8a:87:d3:62:9c:85:0c:01:26:92:a2:1a:f4:41:b4: 76:e7:4e:d9:4c:42:bb:58:ba:ba:4f:46:5a:9b:f6: 1c:79:16:48:f4:fd:1a:93:a7:49:54:21:bb:58:9b: aa:02:db:f3:58:04:32:40:97:b3:fa:c1:df:87:e0: 3d:43:57:32:e5:be:07:e7:86:b9:a6:0a:30:6d:69: e6:1b:ab:a1:5a:6b:fa:aa:4e:2b:31:df:89:2c:bb: c8:33:30:d6:3e:88:ef:a2:69:a3:53:8d:d2:31:9c: 91:4e:02:23:15:4d:8c:37:2a:b5:bd:0d:3a:18:ee: 82:b8:78:76:73:96:79:0d:a8:77:9b:ef:1c:9b:7e: 10:05:a4:0a:df:5d:31:b8:44:c7:63:50:17:f8:fa: b9:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:63:7A:BD:37:7C:B1:47:BD:57:8A:38:D4:B1:6C:00:AB:86:04:72 X509v3 Authority Key Identifier: keyid:D2:24:DF:F1:98:22:C5:B2:7C:7B:CC:16:BF:D8:BE:2A:38:4F:89:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DiedU9B7M6NxXr5xQhJdft17HNsjQS3dg6iUHrJZiVAv/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DiedU9B7M6NxXr5xQhJdft17HNsjQS3dg6iUHrJZiVAv/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:49:f5:90:21:82:56:36:92:65:8f:e8:ae:52:b1:a4:79:a3: 66:89:e1:78:69:91:7e:0c:ae:be:8b:00:cc:67:cf:03:69:e3: e8:f4:6c:59:76:6f:e2:5f:0a:94:f8:3e:ab:6d:23:6a:9b:8d: 7a:5a:2c:2a:00:90:d6:1e:35:6e:03:69:b6:a3:33:10:3b:b7: cf:99:dd:6c:18:4a:7c:17:1c:87:b0:7f:8d:2e:fa:de:6c:0e: c3:89:2f:59:ef:ce:90:ce:e1:cd:1f:92:0d:9b:c2:a8:38:8c: 7d:1a:5b:e4:66:23:48:87:0e:6a:b1:bf:0a:28:61:93:39:6b: cf:29:d8:c1:3d:e5:2a:6d:9f:6d:85:d3:fe:d9:e1:c5:a3:44: 70:e0:86:b9:61:f7:99:c6:73:34:2c:f9:af:7e:80:f5:76:82: bc:07:ee:c3:de:a4:e6:95:11:c8:b1:be:64:2e:c2:79:2d:19: 5f:da:f4:f5:e6:a9:ed:1c:df:d1:46:e4:70:f5:24:45:f9:05: da:a5:1e:6d:39:0f:0c:54:d1:88:ca:e5:4a:70:81:71:43:54: 77:6e:a5:35:32:cd:ed:9b:fd:d6:87:59:18:c0:8d:f0:50:0b: f1:e6:8c:d2:d4:a3:4c:64:b5:1f:af:3d:1f:46:59:89:a7:b0: f8:4f:08:e8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUC7QWpZL8NgVElhcHO6nICwDd1pkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDIyNERGRjE5ODIyQzVCMjdDN0JDQzE2QkZEOEJFMkEz ODRGODlBQTAeFw0yNjA0MDgwMzUxMzlaFw0yNjA0MDkwNDQxMzlaMDMxMTAvBgNV BAMTKDM4NjM3QUJEMzc3Q0IxNDdCRDU3OEEzOEQ0QjE2QzAwQUI4NjA0NzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1VcVILWtcef8FyC3G7mcxkorM D00pec5ztK7bDDVbb9NTbD1WYwAZY1gLpQ69yhl2kp5UJmYWSyNpWil0etC8Q3H2 I2cwQTvOdgADK2rZpuStobAyG4fu/C8MohNywNCt8mk7nmc9ZIqH02KchQwBJpKi GvRBtHbnTtlMQrtYurpPRlqb9hx5Fkj0/RqTp0lUIbtYm6oC2/NYBDJAl7P6wd+H 4D1DVzLlvgfnhrmmCjBtaeYbq6Faa/qqTisx34ksu8gzMNY+iO+iaaNTjdIxnJFO AiMVTYw3KrW9DToY7oK4eHZzlnkNqHeb7xybfhAFpArfXTG4RMdjUBf4+rltAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUOGN6vTd8sUe9V4o41LFsAKuGBHIwHwYDVR0j BBgwFoAU0iTf8ZgixbJ8e8wWv9i+KjhPiaowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRGllZFU5QjdNNk54WHI1eFFoSmRmdDE3SE5zalFTM2RnNmlVSHJKWmlW QXYvMS9EMjI0REZGMTk4MjJDNUIyN0M3QkNDMTZCRkQ4QkUyQTM4NEY4OUFBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QyMjRERkYxOTgyMkM1QjI3 QzdCQ0MxNkJGRDhCRTJBMzg0Rjg5QUEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RGllZFU5QjdNNk54WHI1eFFoSmRmdDE3SE5zalFTM2RnNmlVSHJKWmlWQXYvMS9E MjI0REZGMTk4MjJDNUIyN0M3QkNDMTZCRkQ4QkUyQTM4NEY4OUFBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEANkn1kCGCVjaSZY/orlKxpHmjZonheGmRfgyuvosAzGfPA2nj6PRsWXZv4l8K lPg+q20japuNelosKgCQ1h41bgNptqMzEDu3z5ndbBhKfBcch7B/jS763mwOw4kv We/OkM7hzR+SDZvCqDiMfRpb5GYjSIcOarG/CihhkzlrzynYwT3lKm2fbYXT/tnh xaNEcOCGuWH3mcZzNCz5r36A9XaCvAfuw96k5pURyLG+ZC7CeS0ZX9r09eap7Rzf 0UbkcPUkRfkF2qUebTkPDFTRiMrlSnCBcUNUd26lNTLN7Zv91odZGMCN8FAL8eaM 0tSjTGS1H689H0ZZiaew+E8I6A== -----END CERTIFICATE-----Generated at Wed Apr 8 19:04:52 2026 by rpki-client