$ rpki-client -vvf rpki-repo.registro.br/repo/FAtTXjvrsoSZEfqpgQx65FcGnaco1ENgZmQgFf9BKXQL/0/32C2F909A73EFDFF0C595419D622D6A53EAEA292.mft File: 32C2F909A73EFDFF0C595419D622D6A53EAEA292.mft (raw, json) Hash identifier: R8XPQAJ01DE37bOm/mgfSBBgYOhb1cYWzNDkc9mUy20= Subject key identifier: 84:97:A9:70:FB:33:A5:E3:32:45:77:D6:86:22:45:4D:A4:4C:E5:35 Authority key identifier: 32:C2:F9:09:A7:3E:FD:FF:0C:59:54:19:D6:22:D6:A5:3E:AE:A2:92 Certificate issuer: /CN=32C2F909A73EFDFF0C595419D622D6A53EAEA292 Certificate serial: 29EFBEFAFC06BB143A8FE9E9B73D4330BE37ADE2 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32C2F909A73EFDFF0C595419D622D6A53EAEA292.cer Subject info access: rsync://rpki-repo.registro.br/repo/FAtTXjvrsoSZEfqpgQx65FcGnaco1ENgZmQgFf9BKXQL/0/32C2F909A73EFDFF0C595419D622D6A53EAEA292.mft Manifest number: 0210 Signing time: Wed 08 Apr 2026 08:01:13 +0000 Manifest this update: Wed 08 Apr 2026 07:56:13 +0000 Manifest next update: Thu 09 Apr 2026 08:44:13 +0000 Files and hashes: 1: 3138362e3235302e32342e302f32322d3234203d3e20323633303839.roa (hash: 6XSGPRyZdyBXpZ6cYsl7+qkVSBOZqTLT6o58cw7GkbI=) 2: 323830343a326136303a3a2f33322d3438203d3e20323633303839.roa (hash: Th5wPVswSqDJtcL5S2UzL40H/zPAbyGBzIzRvHoX2gU=) 3: 32C2F909A73EFDFF0C595419D622D6A53EAEA292.crl (hash: 5Co4qAa14eb1JnAtIS8tNKLnvFKKodRQkHHS9f6tpvQ=) 4: 3136382e3139352e3233322e302f32322d3234203d3e20323633303839.roa (hash: jPq9RnrGJrof6wDzigt2dH0rp4sIWSgKd03mEWAnSR8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/FAtTXjvrsoSZEfqpgQx65FcGnaco1ENgZmQgFf9BKXQL/0/32C2F909A73EFDFF0C595419D622D6A53EAEA292.crl rsync://rpki-repo.registro.br/repo/FAtTXjvrsoSZEfqpgQx65FcGnaco1ENgZmQgFf9BKXQL/0/32C2F909A73EFDFF0C595419D622D6A53EAEA292.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32C2F909A73EFDFF0C595419D622D6A53EAEA292.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 09 Apr 2026 08:44:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:ef:be:fa:fc:06:bb:14:3a:8f:e9:e9:b7:3d:43:30:be:37:ad:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32C2F909A73EFDFF0C595419D622D6A53EAEA292 Validity Not Before: Apr 8 07:56:13 2026 GMT Not After : Apr 9 08:44:13 2026 GMT Subject: CN=8497A970FB33A5E3324577D68622454DA44CE535 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:00:d7:04:b4:fb:7f:a4:31:fa:b4:52:87:73: 88:a3:9d:1d:6f:6e:5d:f3:35:0f:6c:57:ef:44:49: 95:e4:78:17:6d:ba:94:8e:10:ba:39:d0:44:cc:12: de:6d:d9:d8:50:12:49:f7:28:a8:3e:2c:2a:c8:db: 43:92:13:06:f8:9e:b0:d3:90:25:53:93:06:e5:cd: a8:2f:54:b6:81:00:d6:c2:4a:00:3b:3c:a5:8c:55: c6:2e:12:ce:4f:05:a3:06:6b:75:d7:33:55:bc:94: f4:3f:ea:d8:a0:c0:2d:db:13:9f:8e:16:b0:32:ec: bc:cb:1c:5e:47:d0:e5:53:10:10:b4:8a:3f:38:f5: 42:0c:08:a1:29:0c:4c:ec:07:9d:aa:14:18:a5:8c: 09:b0:06:0d:ee:dd:28:ba:64:60:f7:75:c4:1b:cb: 51:f5:15:af:2a:91:32:1a:7f:8d:b6:32:d7:28:72: 31:ab:b0:1a:75:68:af:d3:35:29:d8:31:b2:66:06: 18:f9:52:68:ec:df:3b:cc:06:71:51:42:d5:fb:27: 58:a0:e7:41:21:76:1a:b3:1f:7b:3e:dc:b6:a2:0a: c3:ce:66:7a:29:d9:75:66:77:99:b8:16:bb:f4:60: 67:db:03:46:bb:d7:4d:25:96:f1:6f:52:23:cc:e7: c9:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:97:A9:70:FB:33:A5:E3:32:45:77:D6:86:22:45:4D:A4:4C:E5:35 X509v3 Authority Key Identifier: keyid:32:C2:F9:09:A7:3E:FD:FF:0C:59:54:19:D6:22:D6:A5:3E:AE:A2:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/FAtTXjvrsoSZEfqpgQx65FcGnaco1ENgZmQgFf9BKXQL/0/32C2F909A73EFDFF0C595419D622D6A53EAEA292.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32C2F909A73EFDFF0C595419D622D6A53EAEA292.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/FAtTXjvrsoSZEfqpgQx65FcGnaco1ENgZmQgFf9BKXQL/0/32C2F909A73EFDFF0C595419D622D6A53EAEA292.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:12:d4:3e:34:6f:41:4d:d6:5a:94:e6:75:69:aa:9d:9f:77: 50:95:33:43:97:20:bf:a7:d6:2a:2d:2d:cc:cc:8c:b1:f4:59: ea:57:d0:80:80:5b:1f:43:8f:7e:02:ea:be:bc:d6:44:c5:30: 4c:03:85:a2:b7:a0:90:fe:00:10:93:80:0b:bc:e9:29:3e:0d: d3:35:25:64:6c:77:7f:15:d2:4f:03:07:96:43:dd:54:c1:bb: 5c:5e:9e:07:f7:91:22:92:c7:c5:58:1b:e8:6f:12:87:8a:3e: 12:4a:f9:ae:fc:0e:5f:f7:35:84:97:7c:aa:b7:29:aa:a0:df: c7:e7:aa:f7:05:3c:aa:6e:d8:63:f4:1f:c9:f5:02:c2:54:01: 65:53:5c:73:4e:67:6c:5f:67:c0:bc:ca:ab:a3:e4:de:bb:4a: e2:1e:0e:04:4b:c8:20:2f:ef:50:d5:d6:81:90:ef:1a:5f:cb: d4:f5:ae:38:2f:d5:a5:40:7a:f7:db:6f:2e:5b:03:2d:11:45: 9d:8c:a0:25:e4:f8:98:42:c5:09:10:eb:28:f5:fe:3d:a5:fb: 59:6e:d9:96:72:63:4d:08:82:aa:7e:e9:d6:73:a2:29:c8:e1: ed:ff:d7:4f:70:c5:e4:b3:a6:31:ee:2c:10:b1:04:86:8c:1e: b6:ee:59:25 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUKe+++vwGuxQ6j+nptz1DML43reIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzJDMkY5MDlBNzNFRkRGRjBDNTk1NDE5RDYyMkQ2QTUz RUFFQTI5MjAeFw0yNjA0MDgwNzU2MTNaFw0yNjA0MDkwODQ0MTNaMDMxMTAvBgNV BAMTKDg0OTdBOTcwRkIzM0E1RTMzMjQ1NzdENjg2MjI0NTREQTQ0Q0U1MzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdANcEtPt/pDH6tFKHc4ijnR1v bl3zNQ9sV+9ESZXkeBdtupSOELo50ETMEt5t2dhQEkn3KKg+LCrI20OSEwb4nrDT kCVTkwblzagvVLaBANbCSgA7PKWMVcYuEs5PBaMGa3XXM1W8lPQ/6tigwC3bE5+O FrAy7LzLHF5H0OVTEBC0ij849UIMCKEpDEzsB52qFBiljAmwBg3u3Si6ZGD3dcQb y1H1Fa8qkTIaf422MtcocjGrsBp1aK/TNSnYMbJmBhj5Umjs3zvMBnFRQtX7J1ig 50EhdhqzH3s+3LaiCsPOZnop2XVmd5m4Frv0YGfbA0a7100llvFvUiPM58mlAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUhJepcPszpeMyRXfWhiJFTaRM5TUwHwYDVR0j BBgwFoAUMsL5Cac+/f8MWVQZ1iLWpT6uopIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRkF0VFhqdnJzb1NaRWZxcGdReDY1RmNHbmFjbzFFTmdabVFnRmY5QktY UUwvMC8zMkMyRjkwOUE3M0VGREZGMEM1OTU0MTlENjIyRDZBNTNFQUVBMjkyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMyQzJGOTA5QTczRUZERkYw QzU5NTQxOUQ2MjJENkE1M0VBRUEyOTIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RkF0VFhqdnJzb1NaRWZxcGdReDY1RmNHbmFjbzFFTmdabVFnRmY5QktYUUwvMC8z MkMyRjkwOUE3M0VGREZGMEM1OTU0MTlENjIyRDZBNTNFQUVBMjkyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfBLUPjRvQU3WWpTmdWmqnZ93UJUzQ5cgv6fWKi0tzMyMsfRZ6lfQgIBbH0OP fgLqvrzWRMUwTAOForegkP4AEJOAC7zpKT4N0zUlZGx3fxXSTwMHlkPdVMG7XF6e B/eRIpLHxVgb6G8Sh4o+Ekr5rvwOX/c1hJd8qrcpqqDfx+eq9wU8qm7YY/QfyfUC wlQBZVNcc05nbF9nwLzKq6Pk3rtK4h4OBEvIIC/vUNXWgZDvGl/L1PWuOC/VpUB6 99tvLlsDLRFFnYygJeT4mELFCRDrKPX+PaX7WW7ZlnJjTQiCqn7p1nOiKcjh7f/X T3DF5LOmMe4sELEEhowetu5ZJQ== -----END CERTIFICATE-----Generated at Wed Apr 8 15:41:55 2026 by rpki-client