$ rpki-client -vvf rpki-repo.registro.br/repo/Ek4i23aVgceGAWNX5BCGdVaDGQfdHS14XtNemENntgxe/1/89B059C223BA0AD41E99D2508292698CA59D4D51.mft File: 89B059C223BA0AD41E99D2508292698CA59D4D51.mft (raw, json) Hash identifier: VfzNSUW9dJLmYxG2NcJRcimYzyczIihZPw23ryQDgRs= Subject key identifier: CA:A9:E9:21:8A:45:B9:87:2E:71:43:28:65:E0:39:A3:96:58:D3:09 Authority key identifier: 89:B0:59:C2:23:BA:0A:D4:1E:99:D2:50:82:92:69:8C:A5:9D:4D:51 Certificate issuer: /CN=89B059C223BA0AD41E99D2508292698CA59D4D51 Certificate serial: 54C9FD9C08839BF3BD4F2B058E4839735DBF8CCA Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89B059C223BA0AD41E99D2508292698CA59D4D51.cer Subject info access: rsync://rpki-repo.registro.br/repo/Ek4i23aVgceGAWNX5BCGdVaDGQfdHS14XtNemENntgxe/1/89B059C223BA0AD41E99D2508292698CA59D4D51.mft Manifest number: 03D4 Signing time: Wed 08 Apr 2026 15:51:02 +0000 Manifest this update: Wed 08 Apr 2026 15:46:02 +0000 Manifest next update: Thu 09 Apr 2026 16:00:02 +0000 Files and hashes: 1: 89B059C223BA0AD41E99D2508292698CA59D4D51.crl (hash: bw9Eqeb2kXbzCffH06oFoXi85768VywHHJ/ZtoJ0rOg=) 2: 3138362e3139332e302e302f32302d3234203d3e203533313334.roa (hash: 8Lltl4dvhjLL3J4ydUxxo0lYfAs+cBWcFNNxGaJea0I=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Ek4i23aVgceGAWNX5BCGdVaDGQfdHS14XtNemENntgxe/1/89B059C223BA0AD41E99D2508292698CA59D4D51.crl rsync://rpki-repo.registro.br/repo/Ek4i23aVgceGAWNX5BCGdVaDGQfdHS14XtNemENntgxe/1/89B059C223BA0AD41E99D2508292698CA59D4D51.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89B059C223BA0AD41E99D2508292698CA59D4D51.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 09 Apr 2026 16:00:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:c9:fd:9c:08:83:9b:f3:bd:4f:2b:05:8e:48:39:73:5d:bf:8c:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89B059C223BA0AD41E99D2508292698CA59D4D51 Validity Not Before: Apr 8 15:46:02 2026 GMT Not After : Apr 9 16:00:02 2026 GMT Subject: CN=CAA9E9218A45B9872E71432865E039A39658D309 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:68:0a:d3:45:53:71:fb:43:c3:eb:65:3d:bb: 06:44:8b:27:f7:f8:92:05:24:03:0e:30:7b:5c:73: 40:3d:e2:f8:d9:a8:4f:2e:46:aa:ae:f4:c9:ca:d9: 69:21:ae:4e:e3:a2:e0:db:a7:76:77:db:3b:9f:04: f5:1f:4d:eb:eb:7b:73:6c:31:24:d7:d2:d7:f2:f8: 7b:6d:0a:71:bc:95:94:2e:c6:3f:56:8b:3a:c3:d0: ac:ab:ef:d6:7e:56:6a:d2:f1:46:f6:86:cc:c0:c5: 0a:9d:0f:a8:40:69:fe:d3:41:af:a0:25:48:92:47: a8:99:96:b1:2f:b1:e8:d7:a1:d4:ac:27:f0:37:00: a9:3d:3e:6a:3a:28:1a:6d:bc:00:60:55:bb:45:15: 4a:32:d6:2b:81:3c:da:0e:1b:2b:b7:24:3f:b6:0d: 57:32:0f:98:08:85:57:ce:00:92:13:8c:41:95:b7: ea:69:d9:e9:ce:20:f1:2e:30:cc:37:c1:b8:a3:8d: 2d:0a:b6:3b:24:61:a0:94:54:91:ee:4d:ce:80:79: 95:54:0d:c0:c4:1c:fc:f0:06:0b:fd:4b:07:df:54: 59:57:dd:56:91:91:f0:95:10:0f:00:a1:61:96:52: 89:aa:ec:d7:e6:cc:20:ed:86:bb:48:31:bb:55:e4: 18:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:A9:E9:21:8A:45:B9:87:2E:71:43:28:65:E0:39:A3:96:58:D3:09 X509v3 Authority Key Identifier: keyid:89:B0:59:C2:23:BA:0A:D4:1E:99:D2:50:82:92:69:8C:A5:9D:4D:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Ek4i23aVgceGAWNX5BCGdVaDGQfdHS14XtNemENntgxe/1/89B059C223BA0AD41E99D2508292698CA59D4D51.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89B059C223BA0AD41E99D2508292698CA59D4D51.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ek4i23aVgceGAWNX5BCGdVaDGQfdHS14XtNemENntgxe/1/89B059C223BA0AD41E99D2508292698CA59D4D51.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:51:48:e2:d5:71:da:8d:cc:be:10:4f:6e:01:60:b7:50:bb: bf:e9:dc:ec:0d:b0:2b:28:51:9a:ac:a2:3e:0a:6e:7c:3e:d0: 7b:8f:22:f1:62:50:68:49:45:ee:0f:a7:19:7b:8b:4c:6b:6f: 22:8f:88:b6:62:c4:cf:ac:93:01:e0:d9:2f:56:bf:36:8a:f6: 1c:26:21:bc:d5:59:25:8e:ea:85:33:34:a1:9a:bb:fc:14:02: 4e:2f:ce:e2:48:2b:9b:87:f5:57:2e:c6:93:23:6c:db:af:95: 4f:30:fd:8c:98:7e:0d:82:fe:ec:84:6a:b1:9b:71:b4:18:0b: 5a:d0:3d:36:a1:5c:8b:2a:36:ab:86:d8:46:fa:d4:47:12:3a: e1:e6:76:ad:b3:09:68:18:5f:9d:15:9a:d5:6b:4e:6d:34:83: d9:12:03:26:5f:81:a4:98:58:7c:e6:47:12:d0:d3:60:cb:4f: 36:8f:f2:a1:b9:6f:dc:f6:7d:7d:44:2a:b9:2c:38:5a:64:59: 95:19:a3:e3:00:ed:0d:62:c7:56:5e:38:17:29:9e:71:92:da: 60:c4:da:cc:54:7c:35:b9:dd:76:d1:0f:0c:c2:ea:46:fd:20: 41:2e:19:26:13:5d:ec:a3:28:b0:8b:9f:22:2f:f0:2c:25:8a: 6a:29:4b:9d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUVMn9nAiDm/O9TysFjkg5c12/jMowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODlCMDU5QzIyM0JBMEFENDFFOTlEMjUwODI5MjY5OENB NTlENEQ1MTAeFw0yNjA0MDgxNTQ2MDJaFw0yNjA0MDkxNjAwMDJaMDMxMTAvBgNV BAMTKENBQTlFOTIxOEE0NUI5ODcyRTcxNDMyODY1RTAzOUEzOTY1OEQzMDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYaArTRVNx+0PD62U9uwZEiyf3 +JIFJAMOMHtcc0A94vjZqE8uRqqu9MnK2Wkhrk7jouDbp3Z32zufBPUfTevre3Ns MSTX0tfy+HttCnG8lZQuxj9WizrD0Kyr79Z+VmrS8Ub2hszAxQqdD6hAaf7TQa+g JUiSR6iZlrEvsejXodSsJ/A3AKk9Pmo6KBptvABgVbtFFUoy1iuBPNoOGyu3JD+2 DVcyD5gIhVfOAJITjEGVt+pp2enOIPEuMMw3wbijjS0KtjskYaCUVJHuTc6AeZVU DcDEHPzwBgv9SwffVFlX3VaRkfCVEA8AoWGWUomq7NfmzCDthrtIMbtV5BhlAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUyqnpIYpFuYcucUMoZeA5o5ZY0wkwHwYDVR0j BBgwFoAUibBZwiO6CtQemdJQgpJpjKWdTVEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRWs0aTIzYVZnY2VHQVdOWDVCQ0dkVmFER1FmZEhTMTRYdE5lbUVObnRn eGUvMS84OUIwNTlDMjIzQkEwQUQ0MUU5OUQyNTA4MjkyNjk4Q0E1OUQ0RDUxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg5QjA1OUMyMjNCQTBBRDQx RTk5RDI1MDgyOTI2OThDQTU5RDRENTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RWs0aTIzYVZnY2VHQVdOWDVCQ0dkVmFER1FmZEhTMTRYdE5lbUVObnRneGUvMS84 OUIwNTlDMjIzQkEwQUQ0MUU5OUQyNTA4MjkyNjk4Q0E1OUQ0RDUxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAVFI4tVx2o3MvhBPbgFgt1C7v+nc7A2wKyhRmqyiPgpufD7Qe48i8WJQaElF 7g+nGXuLTGtvIo+ItmLEz6yTAeDZL1a/Nor2HCYhvNVZJY7qhTM0oZq7/BQCTi/O 4kgrm4f1Vy7GkyNs26+VTzD9jJh+DYL+7IRqsZtxtBgLWtA9NqFciyo2q4bYRvrU RxI64eZ2rbMJaBhfnRWa1WtObTSD2RIDJl+BpJhYfOZHEtDTYMtPNo/yoblv3PZ9 fUQquSw4WmRZlRmj4wDtDWLHVl44FymecZLaYMTazFR8NbnddtEPDMLqRv0gQS4Z JhNd7KMosIufIi/wLCWKailLnQ== -----END CERTIFICATE-----Generated at Wed Apr 8 23:09:18 2026 by rpki-client