$ rpki-client -vvf rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.mft File: D539CF929B6A6A2B9596B922F417FAD917799ED7.mft (raw, json) Hash identifier: /oB6TyZRMD6BL5HnJp9P65lLsq2zYtWy9yF5+TOVTXg= Subject key identifier: 41:ED:2E:72:91:C9:92:9C:4F:69:5D:D6:D6:8F:D2:F9:34:2D:A2:A9 Authority key identifier: D5:39:CF:92:9B:6A:6A:2B:95:96:B9:22:F4:17:FA:D9:17:79:9E:D7 Certificate issuer: /CN=D539CF929B6A6A2B9596B922F417FAD917799ED7 Certificate serial: 652113FD7917CC6785658FAD24F0944BAF884999 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.cer Subject info access: rsync://rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.mft Manifest number: 03D7 Signing time: Wed 08 Apr 2026 16:08:12 +0000 Manifest this update: Wed 08 Apr 2026 16:03:12 +0000 Manifest next update: Thu 09 Apr 2026 16:24:12 +0000 Files and hashes: 1: D539CF929B6A6A2B9596B922F417FAD917799ED7.crl (hash: Rigl2VBKMXsyuzSsQrjRRaZYP2mZXwUegHy6mfDVKzs=) 2: 34352e3232382e3134302e302f32322d3234203d3e20323637313032.roa (hash: eP0r+wZovEoOi3AFVmS1ks40+jUeBeX9l/i7mThdIlg=) 3: 323830343a343832633a3a2f33322d3438203d3e20323637313032.roa (hash: LEA9vDzQJLKKOYYh86Ctx9GDjZX9B441ozGpSCmd91s=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.crl rsync://rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 09 Apr 2026 16:24:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:21:13:fd:79:17:cc:67:85:65:8f:ad:24:f0:94:4b:af:88:49:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D539CF929B6A6A2B9596B922F417FAD917799ED7 Validity Not Before: Apr 8 16:03:12 2026 GMT Not After : Apr 9 16:24:12 2026 GMT Subject: CN=41ED2E7291C9929C4F695DD6D68FD2F9342DA2A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:f1:e0:fb:65:1c:6b:f8:7d:2b:5e:5f:e9:f9: fc:e0:14:66:9d:1e:4f:d4:09:91:d1:6d:b2:f2:21: 45:f1:4a:08:b4:19:24:8c:76:19:52:a3:c5:a4:45: f4:4c:c7:94:18:bd:39:ef:a3:83:e0:47:31:75:da: ef:87:29:0b:4d:97:ea:f1:61:6b:d4:8f:a9:c0:4a: 49:2e:e8:df:81:58:b0:97:0c:37:a3:f3:9a:49:55: 0b:52:06:91:11:19:56:e9:8f:92:52:a7:d0:72:19: 28:37:e9:06:c4:7d:ae:a2:13:5e:3f:18:c9:5b:c7: d2:bd:95:14:60:a1:1c:c0:71:2e:cb:9b:cf:f8:16: e6:a3:24:86:01:c2:ab:86:31:20:d6:27:12:f3:a2: 62:4b:c2:fc:18:df:38:64:ae:b2:5a:7d:16:d3:28: 6d:c1:a4:52:cd:41:fd:74:4f:de:da:07:a3:b8:ad: 0c:68:fe:59:4f:ef:f9:05:6a:d1:6d:71:ca:cf:06: 93:ac:67:28:39:f4:ca:91:99:d9:3e:b1:ba:2d:c6: 83:86:cf:82:02:63:a9:fb:90:ca:ee:cc:23:2e:8d: 53:0d:ef:6a:5e:fd:8b:1f:79:83:af:0b:e4:22:41: 73:1a:e4:a2:7c:34:97:76:32:98:42:ad:ec:65:06: a1:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:ED:2E:72:91:C9:92:9C:4F:69:5D:D6:D6:8F:D2:F9:34:2D:A2:A9 X509v3 Authority Key Identifier: keyid:D5:39:CF:92:9B:6A:6A:2B:95:96:B9:22:F4:17:FA:D9:17:79:9E:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:f9:72:58:b4:2e:84:10:f7:3d:ae:6a:e3:b7:49:94:5f:3f: 2a:b6:16:ee:37:6d:10:20:b5:34:1a:a7:ef:ad:48:39:84:fb: eb:8c:5d:49:17:a5:a6:41:95:90:f9:45:66:2d:cb:f7:f6:31: 09:10:62:8b:6a:2d:b1:b2:22:21:2e:18:e8:43:4e:0e:fe:f7: da:21:7a:2c:de:60:60:37:65:fa:eb:0a:e0:f7:10:52:bf:c1: 33:26:d9:89:e3:3e:8f:26:bb:32:53:7a:3c:5d:cb:b5:0c:5a: 3c:74:6c:60:ce:6f:a0:5e:95:7c:a9:25:ae:84:b1:49:88:c9: 2f:35:29:1d:a4:e6:db:52:48:a0:15:d4:c8:6a:ea:70:df:c7: d3:36:57:e8:2f:91:8d:10:8a:dc:96:d3:73:51:e3:0e:34:f1: f1:36:d0:94:44:4c:0b:27:d2:8c:3a:74:d6:8a:c8:bc:f4:be: ae:71:d3:09:c2:a1:f2:03:10:d5:35:16:ab:76:84:9c:e0:62: a7:a1:a4:85:08:41:6f:7d:e1:c2:e8:7f:1a:e8:5c:6a:57:f7: 89:17:09:fd:8a:98:3b:9b:2b:cb:05:09:d3:0f:c7:f9:48:44: 4a:61:6c:72:22:d3:1a:14:f6:fb:bf:44:bd:11:73:c1:bc:71: 95:28:3b:85 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUZSET/XkXzGeFZY+tJPCUS6+ISZkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDUzOUNGOTI5QjZBNkEyQjk1OTZCOTIyRjQxN0ZBRDkx Nzc5OUVENzAeFw0yNjA0MDgxNjAzMTJaFw0yNjA0MDkxNjI0MTJaMDMxMTAvBgNV BAMTKDQxRUQyRTcyOTFDOTkyOUM0RjY5NURENkQ2OEZEMkY5MzQyREEyQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDi8eD7ZRxr+H0rXl/p+fzgFGad Hk/UCZHRbbLyIUXxSgi0GSSMdhlSo8WkRfRMx5QYvTnvo4PgRzF12u+HKQtNl+rx YWvUj6nASkku6N+BWLCXDDej85pJVQtSBpERGVbpj5JSp9ByGSg36QbEfa6iE14/ GMlbx9K9lRRgoRzAcS7Lm8/4FuajJIYBwquGMSDWJxLzomJLwvwY3zhkrrJafRbT KG3BpFLNQf10T97aB6O4rQxo/llP7/kFatFtccrPBpOsZyg59MqRmdk+sbotxoOG z4ICY6n7kMruzCMujVMN72pe/YsfeYOvC+QiQXMa5KJ8NJd2MphCrexlBqGRAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUQe0ucpHJkpxPaV3W1o/S+TQtoqkwHwYDVR0j BBgwFoAU1TnPkptqaiuVlrki9Bf62Rd5ntcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRHRhM1dIWDVjd3E4OGdmTEVjclBlYWp0Ulh2QVB1UFhYTHoxc3NONzNT M1QvMS9ENTM5Q0Y5MjlCNkE2QTJCOTU5NkI5MjJGNDE3RkFEOTE3Nzk5RUQ3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q1MzlDRjkyOUI2QTZBMkI5 NTk2QjkyMkY0MTdGQUQ5MTc3OTlFRDcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RHRhM1dIWDVjd3E4OGdmTEVjclBlYWp0Ulh2QVB1UFhYTHoxc3NONzNTM1QvMS9E NTM5Q0Y5MjlCNkE2QTJCOTU5NkI5MjJGNDE3RkFEOTE3Nzk5RUQ3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAb/lyWLQuhBD3Pa5q47dJlF8/KrYW7jdtECC1NBqn761IOYT764xdSRelpkGV kPlFZi3L9/YxCRBii2otsbIiIS4Y6ENODv732iF6LN5gYDdl+usK4PcQUr/BMybZ ieM+jya7MlN6PF3LtQxaPHRsYM5voF6VfKklroSxSYjJLzUpHaTm21JIoBXUyGrq cN/H0zZX6C+RjRCK3JbTc1HjDjTx8TbQlERMCyfSjDp01orIvPS+rnHTCcKh8gMQ 1TUWq3aEnOBip6GkhQhBb33hwuh/Guhcalf3iRcJ/YqYO5srywUJ0w/H+UhESmFs ciLTGhT2+79EvRFzwbxxlSg7hQ== -----END CERTIFICATE-----Generated at Wed Apr 8 21:45:44 2026 by rpki-client