$ rpki-client -vvf rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/35548EB6B3E5B3A2570680DBBEDAE02D653D08A8.mft File: 35548EB6B3E5B3A2570680DBBEDAE02D653D08A8.mft (raw, json) Hash identifier: l2U4uaR3rdfHpsNi+ANYgVUeeBVbinbGS4xOLjP6hyk= Subject key identifier: BE:20:1D:91:B9:86:E2:61:33:26:FD:5A:66:DC:AB:92:23:24:9C:A9 Authority key identifier: 35:54:8E:B6:B3:E5:B3:A2:57:06:80:DB:BE:DA:E0:2D:65:3D:08:A8 Certificate issuer: /CN=35548EB6B3E5B3A2570680DBBEDAE02D653D08A8 Certificate serial: 793733729979F1596D1C6568B62A8B2CFB765936 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35548EB6B3E5B3A2570680DBBEDAE02D653D08A8.cer Subject info access: rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/35548EB6B3E5B3A2570680DBBEDAE02D653D08A8.mft Manifest number: F9 Signing time: Tue 07 Apr 2026 20:03:43 +0000 Manifest this update: Tue 07 Apr 2026 19:58:43 +0000 Manifest next update: Wed 08 Apr 2026 22:51:43 +0000 Files and hashes: 1: 323830343a6465633a3a2f33322d3438203d3e203532353237.roa (hash: bFpFaity00rv0Rl3Fw0iKd35mwwPylywks1Ijj4od3E=) 2: 35548EB6B3E5B3A2570680DBBEDAE02D653D08A8.crl (hash: zq2h5IQj6yHSy4B1N1Pv/1gWbzonr+lcsoRlklE8KCg=) 3: 3137372e3135322e38302e302f32312d3234203d3e203532353237.roa (hash: HjfMgQmsO4AQ827f7sOlQn0eZw55emR1ZUO2VzusW4U=) 4: 3230302e3135302e3235322e302f32322d3234203d3e203532353237.roa (hash: OCwyX5YTdu8LfAlkRFFy9NK7vnPWDipnn8CmclsKB5s=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/35548EB6B3E5B3A2570680DBBEDAE02D653D08A8.crl rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/35548EB6B3E5B3A2570680DBBEDAE02D653D08A8.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35548EB6B3E5B3A2570680DBBEDAE02D653D08A8.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 08 Apr 2026 22:51:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:37:33:72:99:79:f1:59:6d:1c:65:68:b6:2a:8b:2c:fb:76:59:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35548EB6B3E5B3A2570680DBBEDAE02D653D08A8 Validity Not Before: Apr 7 19:58:43 2026 GMT Not After : Apr 8 22:51:43 2026 GMT Subject: CN=BE201D91B986E2613326FD5A66DCAB9223249CA9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b5:b8:b6:6d:c1:e9:12:02:6c:29:ce:58:31: 3a:24:5f:95:68:e9:8c:59:f6:63:b6:9e:a0:69:84: 67:db:b3:e1:21:e0:a0:9b:d1:2f:6d:fe:48:e2:4c: 59:0d:48:d5:7d:82:6f:9f:68:c0:1d:d5:1a:bb:b6: e0:6b:5f:b0:47:27:59:67:26:09:9a:1c:89:b1:d3: 80:01:a3:f2:17:90:49:dd:95:33:3f:99:a1:cd:a5: a2:6d:3d:98:0e:6a:e4:16:27:29:aa:a5:5c:ee:23: e5:7a:6c:07:50:01:b7:ea:c6:b2:16:b9:6e:8f:5a: f8:b7:b6:08:52:d9:51:f8:67:38:75:ce:69:51:2b: 4b:9f:57:a8:9b:0e:44:1a:d9:b1:5c:8c:3a:fd:34: 85:e1:e1:af:fb:fe:2d:a6:1d:ee:3b:5a:00:10:2c: fc:03:2c:e0:c0:af:a4:24:4a:7f:21:39:8c:12:7b: 0e:ea:05:ea:d2:b3:78:ac:64:76:38:ad:d7:dc:b7: 10:c3:1d:37:90:aa:9e:7c:97:16:b7:77:8b:37:96: 6d:20:0d:b3:dd:46:18:d9:59:f7:83:c2:d2:0a:6c: 8b:5a:99:c7:91:ef:db:f7:58:e5:5c:d9:cb:c4:37: f1:a3:1e:2b:f5:3e:85:da:3d:7b:28:42:30:ac:5b: 44:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:20:1D:91:B9:86:E2:61:33:26:FD:5A:66:DC:AB:92:23:24:9C:A9 X509v3 Authority Key Identifier: keyid:35:54:8E:B6:B3:E5:B3:A2:57:06:80:DB:BE:DA:E0:2D:65:3D:08:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/35548EB6B3E5B3A2570680DBBEDAE02D653D08A8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35548EB6B3E5B3A2570680DBBEDAE02D653D08A8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/35548EB6B3E5B3A2570680DBBEDAE02D653D08A8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:8f:c1:00:2a:f3:8f:51:c2:3f:1e:09:54:0b:7d:3b:96:a8: 6e:7c:34:19:ae:f0:23:04:60:04:19:aa:10:4f:c4:44:3f:21: a3:ac:48:88:90:36:c6:ab:bb:73:d0:88:d2:3a:e9:a2:1c:02: 1f:82:3f:cb:05:c9:36:82:f5:95:7f:4e:9b:0c:8f:e8:c5:f3: 99:40:f5:19:5f:76:23:07:55:98:39:90:e2:88:b9:5f:6b:de: 93:54:c5:1b:a4:11:ff:92:94:af:6d:44:74:a9:a5:2a:4b:f6: 11:46:fd:f0:58:4e:40:1a:ae:d5:70:83:5b:0a:20:07:86:12: 14:4f:9d:b6:9b:16:27:55:0d:fb:a7:69:45:09:2a:14:f2:67: 97:ef:32:01:72:9a:eb:f3:95:7a:ae:ff:8b:92:40:4e:c5:27: fd:8b:23:4c:c2:d4:11:cf:6f:53:5d:b3:80:16:6e:bd:44:41: 71:cc:ef:92:e3:b2:13:e0:6b:ef:f7:af:7e:0c:48:b7:0d:cd: ba:53:ef:bc:36:46:60:89:8c:41:c7:aa:89:b5:99:19:66:af: 31:bc:ce:14:5c:3a:e7:84:6e:23:48:24:b2:89:7d:c5:ce:68: 97:57:4b:7c:d4:ab:33:92:d6:ee:03:0f:27:5c:b2:56:b4:5f: fd:c6:de:e2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUeTczcpl58VltHGVotiqLLPt2WTYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzU1NDhFQjZCM0U1QjNBMjU3MDY4MERCQkVEQUUwMkQ2 NTNEMDhBODAeFw0yNjA0MDcxOTU4NDNaFw0yNjA0MDgyMjUxNDNaMDMxMTAvBgNV BAMTKEJFMjAxRDkxQjk4NkUyNjEzMzI2RkQ1QTY2RENBQjkyMjMyNDlDQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCztbi2bcHpEgJsKc5YMTokX5Vo 6YxZ9mO2nqBphGfbs+Eh4KCb0S9t/kjiTFkNSNV9gm+faMAd1Rq7tuBrX7BHJ1ln JgmaHImx04ABo/IXkEndlTM/maHNpaJtPZgOauQWJymqpVzuI+V6bAdQAbfqxrIW uW6PWvi3tghS2VH4Zzh1zmlRK0ufV6ibDkQa2bFcjDr9NIXh4a/7/i2mHe47WgAQ LPwDLODAr6QkSn8hOYwSew7qBerSs3isZHY4rdfctxDDHTeQqp58lxa3d4s3lm0g DbPdRhjZWfeDwtIKbItamceR79v3WOVc2cvEN/GjHiv1PoXaPXsoQjCsW0TzAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUviAdkbmG4mEzJv1aZtyrkiMknKkwHwYDVR0j BBgwFoAUNVSOtrPls6JXBoDbvtrgLWU9CKgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSExYWEhFaDZSNEJXQUJ3WjZKdGNSUGl1S0RRaU5aZnM3R1k5V2RlZ2da SkovMC8zNTU0OEVCNkIzRTVCM0EyNTcwNjgwREJCRURBRTAyRDY1M0QwOEE4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM1NTQ4RUI2QjNFNUIzQTI1 NzA2ODBEQkJFREFFMDJENjUzRDA4QTguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SExYWEhFaDZSNEJXQUJ3WjZKdGNSUGl1S0RRaU5aZnM3R1k5V2RlZ2daSkovMC8z NTU0OEVCNkIzRTVCM0EyNTcwNjgwREJCRURBRTAyRDY1M0QwOEE4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEARo/BACrzj1HCPx4JVAt9O5aobnw0Ga7wIwRgBBmqEE/ERD8ho6xIiJA2xqu7 c9CI0jrpohwCH4I/ywXJNoL1lX9OmwyP6MXzmUD1GV92IwdVmDmQ4oi5X2vek1TF G6QR/5KUr21EdKmlKkv2EUb98FhOQBqu1XCDWwogB4YSFE+dtpsWJ1UN+6dpRQkq FPJnl+8yAXKa6/OVeq7/i5JATsUn/YsjTMLUEc9vU12zgBZuvURBcczvkuOyE+Br 7/evfgxItw3NulPvvDZGYImMQceqibWZGWavMbzOFFw654RuI0gksol9xc5ol1dL fNSrM5LW7gMPJ1yyVrRf/cbe4g== -----END CERTIFICATE-----Generated at Wed Apr 8 08:06:08 2026 by rpki-client