$ rpki-client -vvf rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/CA2ED340034D0368230850867C30E245990118A2.mft File: CA2ED340034D0368230850867C30E245990118A2.mft (raw, json) Hash identifier: q8+WgquT2JtSnzfUorpYblFULYG1qWlRdcGAi4lXQ7Q= Subject key identifier: CF:1D:47:76:C0:5F:F1:9C:13:24:37:11:F4:1F:45:4E:43:AA:56:1D Authority key identifier: CA:2E:D3:40:03:4D:03:68:23:08:50:86:7C:30:E2:45:99:01:18:A2 Certificate issuer: /CN=CA2ED340034D0368230850867C30E245990118A2 Certificate serial: 596002DDEE64628B54E01A19F254CD6C65DAD0A4 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA2ED340034D0368230850867C30E245990118A2.cer Subject info access: rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/CA2ED340034D0368230850867C30E245990118A2.mft Manifest number: 045A Signing time: Wed 08 Apr 2026 07:40:00 +0000 Manifest this update: Wed 08 Apr 2026 07:35:00 +0000 Manifest next update: Thu 09 Apr 2026 07:40:00 +0000 Files and hashes: 1: 323830343a336438303a3a2f33322d3332203d3e20323636353335.roa (hash: qACtYGAGjQIYzRF9TbvLGtYIE8yVLT/zZZ6QQjlw7Tc=) 2: 3136302e3233382e3136302e302f32322d3232203d3e20323636353335.roa (hash: wHbI+HZw0d0+VVKI2O6UiIL7xxlmxDe0dzs6WnffOtM=) 3: 3136302e3233382e3136302e302f32332d3233203d3e20323636353335.roa (hash: mnXKGK0Sb3JfSD9qwtiqL+zB6Uxf7pRYFU72tIF3RgE=) 4: CA2ED340034D0368230850867C30E245990118A2.crl (hash: 727sz6Siz0gaMmaoQOLi2SU04D8GoAxhiagAZEAdchA=) 5: 3136302e3233382e3136312e302f32342d3234203d3e20323636353335.roa (hash: bECPbuRuBrIOnjdoBKScCAXjGsCP8o1jcCme3zamF0s=) 6: 3136302e3233382e3136322e302f32332d3233203d3e20323636353335.roa (hash: ZciEocyNThB8Dt9USSnp55XhUpsQwG4rnTD6Z4ERIeo=) 7: 323830343a336438303a3a2f33342d3334203d3e20323636353335.roa (hash: Ya6TTh4UGpO9OA9I2t2ljb687rAyfDeWzm8gruldMvY=) 8: 3136302e3233382e3136302e302f32342d3234203d3e20323636353335.roa (hash: TxlG0812plpjPhvcX/d0Olltq3zIPufdkiSuAoXprqk=) 9: 3136302e3233382e3136322e302f32342d3234203d3e20323636353335.roa (hash: Mpe5/idJmRp1cNXJYCyARrtABVfhbdPKne04ORvkzmY=) 10: 323830343a336438303a3a2f33332d3333203d3e20323636353335.roa (hash: z9igj7MGsmtf/1Sy9zcE0T7tcBaO8/e+SL2nDBel2m8=) 11: 3136302e3233382e3136332e302f32342d3234203d3e20323636353335.roa (hash: DqP5mf5U6YxJGBly2hzV6Uavn9AYJNW8SE/1OzFbx28=) 12: 323830343a336438303a383030303a3a2f33332d3333203d3e20323636353335.roa (hash: h97iUgEEBkr3O+lUMEj/QD+0mK6bNS7G42zz0AhsaHM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/CA2ED340034D0368230850867C30E245990118A2.crl rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/CA2ED340034D0368230850867C30E245990118A2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA2ED340034D0368230850867C30E245990118A2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 09 Apr 2026 07:40:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:60:02:dd:ee:64:62:8b:54:e0:1a:19:f2:54:cd:6c:65:da:d0:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA2ED340034D0368230850867C30E245990118A2 Validity Not Before: Apr 8 07:35:00 2026 GMT Not After : Apr 9 07:40:00 2026 GMT Subject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ubject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:48:ab:94:ca:08:07:23:cd:8f:40:32:3f:ff: 4b:75:a4:b6:b7:42:8a:f3:a8:24:06:d6:bc:a2:c1: bb:6f:17:59:3b:ec:05:84:51:6e:d3:f9:0f:a2:9f: e7:0e:eb:d5:f9:53:84:b1:2a:27:95:b7:21:df:54: f0:cb:78:5d:69:63:c7:d8:33:33:5d:0b:98:f9:ad: 4b:7f:81:d6:cc:3a:1f:e7:17:af:a7:dc:ad:36:35: 24:9d:5a:0f:41:8e:8b:f7:3e:f8:eb:14:e9:b2:90: b1:d0:19:30:4a:ff:58:94:f4:5d:c3:54:2d:35:0f: 6b:f8:71:a2:24:20:ed:30:c8:49:98:fc:b5:84:d0: ec:f2:21:9e:91:84:65:f6:e0:51:8a:27:c0:94:ed: 27:a4:6d:da:41:c7:a3:08:61:29:6a:b0:4a:65:0a: 6a:4e:2a:8a:59:6f:dc:b9:1b:bf:0f:de:36:23:a1: 92:4f:fa:f1:cc:d1:9f:0b:84:b5:35:33:58:b8:ea: ee:a5:59:28:4d:f5:d9:b0:ad:48:50:7d:e7:9e:f4: 82:cf:ec:aa:b0:06:15:3a:83:9b:83:04:25:20:32: 08:a6:01:51:48:88:43:e2:e5:73:b6:e0:2b:71:25: 76:56:1e:8a:42:e7:80:81:60:73:02:8d:b4:b6:9d: 50:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:1D:47:76:C0:5F:F1:9C:13:24:37:11:F4:1F:45:4E:43:AA:56:1D X509v3 Authority Key Identifier: keyid:CA:2E:D3:40:03:4D:03:68:23:08:50:86:7C:30:E2:45:99:01:18:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/CA2ED340034D0368230850867C30E245990118A2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA2ED340034D0368230850867C30E245990118A2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/CA2ED340034D0368230850867C30E245990118A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:98:2c:52:fa:43:69:54:be:54:8e:51:b6:f5:b3:cd:b3:d1: 13:96:1c:d8:bc:c1:89:c2:06:eb:ce:70:66:04:94:35:38:e7: e7:1f:bd:c5:da:f9:86:7e:60:d6:40:33:c9:ce:2e:94:28:04: 3d:b5:ce:ba:fb:70:36:54:9a:33:2b:88:8a:1c:0f:58:d1:61: 51:07:32:6c:60:7f:02:0f:78:e8:0d:3e:e3:7a:9c:99:64:cb: 7d:e6:e2:80:a2:85:a8:68:7f:34:37:65:20:e1:dc:fe:68:7b: fe:e8:7b:09:83:19:1a:ec:af:58:c5:48:ca:67:bb:89:1e:8c: e6:52:9d:7d:fe:f8:3b:91:6c:41:68:aa:61:f7:db:65:a5:ef: 22:c6:3b:b1:7e:74:63:90:8b:b4:f9:82:35:c3:88:28:2a:dc: ff:13:07:d3:a0:3a:6b:c2:02:b2:2c:62:d2:8a:a3:31:3d:5c: 63:8e:7e:eb:38:de:97:f9:8e:4a:3d:77:48:ac:4e:9c:2c:bc: cf:6d:da:93:62:91:41:ea:80:0c:a1:6d:2b:00:80:c4:c6:76: da:a7:a9:c5:cc:f5:3f:21:29:13:7f:f2:59:b9:ba:04:0c:f6: d0:f6:14:e7:29:d7:74:7b:2c:f1:1d:61:f4:6b:97:41:76:79: c6:6f:7b:8e -----BEGIN CERTIFICATE----- MIIHSzCCBjOgAwIBAgIUWWAC3e5kYotU4BoZ8lTNbGXa0KQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0EyRUQzNDAwMzREMDM2ODIzMDg1MDg2N0MzMEUyNDU5 OTAxMThBMjAeFw0yNjA0MDgwNzM1MDBaFw0yNjA0MDkwNzQwMDBaMIICLTGCAikw ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzk0OEFCOTRDQTA4MDcyM0NE OEY0MDMyM0ZGRjRCNzVBNEI2Qjc0MjhBRjNBODI0MDZENkJDQTJDMUJCNkYxNzU5 M0JFQzA1ODQ1MTZFRDNGOTBGQTI5RkU3MEVFQkQ1Rjk1Mzg0QjEyQTI3OTVCNzIx REY1NEYwQ0I3ODVENjk2M0M3RDgzMzMzNUQwQjk4RjlBRDRCN0Y4MUQ2Q0MzQTFG RTcxN0FGQTdEQ0FEMzYzNTI0OUQ1QTBGNDE4RThCRjczRUY4RUIxNEU5QjI5MEIx RDAxOTMwNEFGRjU4OTRGNDVEQzM1NDJEMzUwRjZCRjg3MUEyMjQyMEVEMzBDODQ5 OThGQ0I1ODREMEVDRjIyMTlFOTE4NDY1RjZFMDUxOEEyN0MwOTRFRDI3QTQ2RERB NDFDN0EzMDg2MTI5NkFCMDRBNjUwQTZBNEUyQThBNTk2RkRDQjkxQkJGMEZERTM2 MjNBMTkyNEZGQUYxQ0NEMTlGMEI4NEI1MzUzMzU4QjhFQUVFQTU1OTI4NERGNUQ5 QjBBRDQ4NTA3REU3OUVGNDgyQ0ZFQ0FBQjAwNjE1M0E4MzlCODMwNDI1MjAzMjA4 QTYwMTUxNDg4ODQzRTJFNTczQjZFMDJCNzEyNTc2NTYxRThBNDJFNzgwODE2MDcz MDI4REI0QjY5RDUwMzUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A MIIBCgKCAQEAyUirlMoIByPNj0AyP/9LdaS2t0KK86gkBta8osG7bxdZO+wFhFFu 0/kPop/nDuvV+VOEsSonlbch31Twy3hdaWPH2DMzXQuY+a1Lf4HWzDof5xevp9yt NjUknVoPQY6L9z746xTpspCx0BkwSv9YlPRdw1QtNQ9r+HGiJCDtMMhJmPy1hNDs 8iGekYRl9uBRiifAlO0npG3aQcejCGEparBKZQpqTiqKWW/cuRu/D942I6GST/rx zNGfC4S1NTNYuOrupVkoTfXZsK1IUH3nnvSCz+yqsAYVOoObgwQlIDIIpgFRSIhD 4uVztuArcSV2Vh6KQueAgWBzAo20tp1QNQIDAQABo4ICWTCCAlUwHQYDVR0OBBYE FM8dR3bAX/GcEyQ3EfQfRU5DqlYdMB8GA1UdIwQYMBaAFMou00ADTQNoIwhQhnww 4kWZARiiMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0VSbXpFdnpidTFlTWk4 RXZIVEhXaWtrQXhQQVQ4SlpBamNvY2MyZExqUkx5LzEvQ0EyRUQzNDAwMzREMDM2 ODIzMDg1MDg2N0MzMEUyNDU5OTAxMThBMi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p Y2JyX3JlcG8vMS9DQTJFRDM0MDAzNEQwMzY4MjMwODUwODY3QzMwRTI0NTk5MDEx OEEyLmNlcjCBnQYIKwYBBQUHAQsEgZAwgY0wgYoGCCsGAQUFBzALhn5yc3luYzov L3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0VSbXpFdnpidTFlTWk4RXZIVEhX aWtrQXhQQVQ4SlpBamNvY2MyZExqUkx5LzEvQ0EyRUQzNDAwMzREMDM2ODIzMDg1 MDg2N0MzMEUyNDU5OTAxMThBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAJiYLFL6Q2lUvlSOUbb1s82z 0ROWHNi8wYnCBuvOcGYElDU45+cfvcXa+YZ+YNZAM8nOLpQoBD21zrr7cDZUmjMr iIocD1jRYVEHMmxgfwIPeOgNPuN6nJlky33m4oCihahofzQ3ZSDh3P5oe/7oewmD GRrsr1jFSMpnu4kejOZSnX3++DuRbEFoqmH322Wl7yLGO7F+dGOQi7T5gjXDiCgq 3P8TB9OgOmvCArIsYtKKozE9XGOOfus43pf5jko9d0isTpwsvM9t2pNikUHqgAyh bSsAgMTGdtqnqcXM9T8hKRN/8lm5ugQM9tD2FOcp13R7LPEdYfRrl0F2ecZve44= -----END CERTIFICATE-----Generated at Wed Apr 8 14:51:40 2026 by rpki-client