$ rpki-client -vvf rpki-repo.registro.br/repo/G7TSRizDSzn3UiNP6vTB5FLU4PV7ZArZtR9wWpo4GMjX/0/8E42BB11AC6A730EA12FBD1AB05BB67B0C4F2036.mft File: 8E42BB11AC6A730EA12FBD1AB05BB67B0C4F2036.mft (raw, json) Hash identifier: iZtv+IUwKRJHv8hpejAXkU0cp68p4e8hvfnOVGrCnzk= Subject key identifier: 83:DF:2B:29:A3:D4:74:06:A1:E1:A8:63:D7:29:51:B3:F3:09:89:4D Authority key identifier: 8E:42:BB:11:AC:6A:73:0E:A1:2F:BD:1A:B0:5B:B6:7B:0C:4F:20:36 Certificate issuer: /CN=8E42BB11AC6A730EA12FBD1AB05BB67B0C4F2036 Certificate serial: 0EB7F0C0728B3192588E26A2F3551F85A636BDCE Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E42BB11AC6A730EA12FBD1AB05BB67B0C4F2036.cer Subject info access: rsync://rpki-repo.registro.br/repo/G7TSRizDSzn3UiNP6vTB5FLU4PV7ZArZtR9wWpo4GMjX/0/8E42BB11AC6A730EA12FBD1AB05BB67B0C4F2036.mft Manifest number: 0314 Signing time: Wed 08 Apr 2026 09:01:24 +0000 Manifest this update: Wed 08 Apr 2026 08:56:24 +0000 Manifest next update: Thu 09 Apr 2026 09:22:24 +0000 Files and hashes: 1: 3138392e3131332e3137362e302f32322d3332203d3e20323730333333.roa (hash: Za+tWBFZ8FpkNpw2xqU9jI81uYd92pCV0XblgjkOHpc=) 2: 8E42BB11AC6A730EA12FBD1AB05BB67B0C4F2036.crl (hash: 1cIHxV9hh+9JvKLXTpSv6x86JLRP5Cx9fo877pCH0lM=) 3: 323830343a366136343a3a2f33322d313238203d3e20323730333333.roa (hash: Ub5qyJ9P33x7eNSOBkNuMLbBSORDIs34xTWtXd2VkpA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/G7TSRizDSzn3UiNP6vTB5FLU4PV7ZArZtR9wWpo4GMjX/0/8E42BB11AC6A730EA12FBD1AB05BB67B0C4F2036.crl rsync://rpki-repo.registro.br/repo/G7TSRizDSzn3UiNP6vTB5FLU4PV7ZArZtR9wWpo4GMjX/0/8E42BB11AC6A730EA12FBD1AB05BB67B0C4F2036.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E42BB11AC6A730EA12FBD1AB05BB67B0C4F2036.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 09 Apr 2026 09:22:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:b7:f0:c0:72:8b:31:92:58:8e:26:a2:f3:55:1f:85:a6:36:bd:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E42BB11AC6A730EA12FBD1AB05BB67B0C4F2036 Validity Not Before: Apr 8 08:56:24 2026 GMT Not After : Apr 9 09:22:24 2026 GMT Subject: CN=83DF2B29A3D47406A1E1A863D72951B3F309894D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:91:bd:95:ba:94:e7:91:91:ad:2a:70:a1:a8: 66:ac:90:fc:5f:b3:b0:4a:15:64:52:f6:62:fd:c0: ae:fe:fb:47:26:49:b9:bf:59:8f:ad:ec:55:f0:b8: 40:bb:5b:8c:09:38:f8:18:c8:58:16:8b:c6:1c:c4: 01:93:46:11:b5:89:0d:d0:c4:ee:41:db:36:23:5e: 7d:1e:50:c7:d7:82:01:45:12:3f:8c:c9:1a:3e:7f: b1:72:1d:6d:3c:57:7b:00:06:62:98:cf:be:11:1b: a1:dd:9e:ae:cb:b4:31:5d:64:a0:5e:6a:d3:bf:3a: 1e:b0:99:80:b9:35:8b:ba:37:20:76:5e:10:b1:2b: 09:9a:2a:25:0a:b8:bf:54:82:ef:6b:f8:49:b1:ea: dd:8a:e4:7e:32:ec:3d:8f:c0:58:e8:e0:b1:c9:61: 7f:ec:6b:26:fa:91:d9:5d:9e:88:6f:55:ea:4b:3e: b9:06:fe:12:8a:5b:f2:c4:68:fd:6f:08:5d:7b:f6: c6:92:8b:d0:e2:cc:ac:f7:1b:c5:f9:d0:e3:c1:db: 19:dc:f2:83:d7:98:28:a3:db:99:7a:f2:45:0c:eb: 5c:fd:0e:69:38:02:69:30:92:69:e8:b9:1d:cc:e1: d2:3d:b8:2c:4c:27:c1:a6:d9:58:88:81:f0:70:7f: c1:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:DF:2B:29:A3:D4:74:06:A1:E1:A8:63:D7:29:51:B3:F3:09:89:4D X509v3 Authority Key Identifier: keyid:8E:42:BB:11:AC:6A:73:0E:A1:2F:BD:1A:B0:5B:B6:7B:0C:4F:20:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/G7TSRizDSzn3UiNP6vTB5FLU4PV7ZArZtR9wWpo4GMjX/0/8E42BB11AC6A730EA12FBD1AB05BB67B0C4F2036.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E42BB11AC6A730EA12FBD1AB05BB67B0C4F2036.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/G7TSRizDSzn3UiNP6vTB5FLU4PV7ZArZtR9wWpo4GMjX/0/8E42BB11AC6A730EA12FBD1AB05BB67B0C4F2036.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:b3:59:64:1e:53:a5:76:b2:29:53:46:b4:fe:d8:f1:ad:16: 2f:57:97:96:88:08:0e:29:6f:92:91:28:2b:b7:f1:dc:5d:96: 1b:6a:a3:73:b0:3b:dc:f8:d6:7c:64:f3:ff:cd:b7:85:9d:d2: b4:95:3c:c5:cc:92:06:f0:bf:e0:15:ce:e9:01:00:4f:0d:19: 3d:d8:6c:8e:14:fa:32:c2:48:f2:3e:c7:73:50:cc:4f:a8:a2: 17:90:82:3f:ec:73:fc:ac:0c:34:e6:80:57:d4:82:c1:65:17: 3e:f4:df:b5:58:e7:cc:d4:fb:05:c4:c0:b5:8c:69:2a:b9:8a: 42:ce:11:a0:13:5b:5c:23:84:34:4a:25:87:e8:1b:64:1b:8a: cc:89:bf:5b:8b:ca:25:16:a6:12:80:04:12:e2:f9:7e:32:6e: 1c:e5:4f:fb:68:71:9e:7c:c9:b3:78:32:15:21:a0:5c:f0:41: 34:5f:02:af:fe:61:84:d3:19:c6:d8:06:0b:c5:22:7d:d2:57: 58:99:36:01:84:c2:7c:87:05:1e:9d:04:ff:57:64:c8:4f:5d: 2d:0d:42:05:85:2b:31:94:7f:49:f6:44:e0:99:46:83:6d:c9: b4:5e:31:c7:2f:66:f6:37:20:21:8a:3a:2f:0a:9d:2d:7f:21: 14:1d:12:7c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUDrfwwHKLMZJYjiai81UfhaY2vc4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEU0MkJCMTFBQzZBNzMwRUExMkZCRDFBQjA1QkI2N0Iw QzRGMjAzNjAeFw0yNjA0MDgwODU2MjRaFw0yNjA0MDkwOTIyMjRaMDMxMTAvBgNV BAMTKDgzREYyQjI5QTNENDc0MDZBMUUxQTg2M0Q3Mjk1MUIzRjMwOTg5NEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCekb2VupTnkZGtKnChqGaskPxf s7BKFWRS9mL9wK7++0cmSbm/WY+t7FXwuEC7W4wJOPgYyFgWi8YcxAGTRhG1iQ3Q xO5B2zYjXn0eUMfXggFFEj+MyRo+f7FyHW08V3sABmKYz74RG6Hdnq7LtDFdZKBe atO/Oh6wmYC5NYu6NyB2XhCxKwmaKiUKuL9Ugu9r+Emx6t2K5H4y7D2PwFjo4LHJ YX/sayb6kdldnohvVepLPrkG/hKKW/LEaP1vCF179saSi9DizKz3G8X50OPB2xnc 8oPXmCij25l68kUM61z9Dmk4AmkwkmnouR3M4dI9uCxMJ8Gm2ViIgfBwf8F9AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUg98rKaPUdAah4ahj1ylRs/MJiU0wHwYDVR0j BBgwFoAUjkK7Eaxqcw6hL70asFu2ewxPIDYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRzdUU1JpekRTem4zVWlOUDZ2VEI1RkxVNFBWN1pBclp0Ujl3V3BvNEdN algvMC84RTQyQkIxMUFDNkE3MzBFQTEyRkJEMUFCMDVCQjY3QjBDNEYyMDM2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhFNDJCQjExQUM2QTczMEVB MTJGQkQxQUIwNUJCNjdCMEM0RjIwMzYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RzdUU1JpekRTem4zVWlOUDZ2VEI1RkxVNFBWN1pBclp0Ujl3V3BvNEdNalgvMC84 RTQyQkIxMUFDNkE3MzBFQTEyRkJEMUFCMDVCQjY3QjBDNEYyMDM2Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAoLNZZB5TpXayKVNGtP7Y8a0WL1eXlogIDilvkpEoK7fx3F2WG2qjc7A73PjW fGTz/823hZ3StJU8xcySBvC/4BXO6QEATw0ZPdhsjhT6MsJI8j7Hc1DMT6iiF5CC P+xz/KwMNOaAV9SCwWUXPvTftVjnzNT7BcTAtYxpKrmKQs4RoBNbXCOENEolh+gb ZBuKzIm/W4vKJRamEoAEEuL5fjJuHOVP+2hxnnzJs3gyFSGgXPBBNF8Cr/5hhNMZ xtgGC8UifdJXWJk2AYTCfIcFHp0E/1dkyE9dLQ1CBYUrMZR/SfZE4JlGg23JtF4x xy9m9jcgIYo6LwqdLX8hFB0SfA== -----END CERTIFICATE-----Generated at Wed Apr 8 17:11:56 2026 by rpki-client