$ rpki-client -vvf rpki-repo.registro.br/repo/HtwWDikdvR1YYjULLBzkE2BBBQZuWHLgPtx1Lh2YJsqg/1/43230BA37049255C04E85C87D9F4BDD3B9313605.mft File: 43230BA37049255C04E85C87D9F4BDD3B9313605.mft (raw, json) Hash identifier: nsyFoS3lHGaZzjacUjmlFLbF4ZkCZkplZ7jgFxwKHRY= Subject key identifier: D0:C4:D2:69:16:C7:B2:2B:69:C4:17:50:AA:28:DA:63:8B:12:90:C9 Authority key identifier: 43:23:0B:A3:70:49:25:5C:04:E8:5C:87:D9:F4:BD:D3:B9:31:36:05 Certificate issuer: /CN=43230BA37049255C04E85C87D9F4BDD3B9313605 Certificate serial: 4D6A974F52BB9D396848B72E06724735B6B81F66 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43230BA37049255C04E85C87D9F4BDD3B9313605.cer Subject info access: rsync://rpki-repo.registro.br/repo/HtwWDikdvR1YYjULLBzkE2BBBQZuWHLgPtx1Lh2YJsqg/1/43230BA37049255C04E85C87D9F4BDD3B9313605.mft Manifest number: 03D1 Signing time: Tue 07 Apr 2026 23:53:00 +0000 Manifest this update: Tue 07 Apr 2026 23:48:00 +0000 Manifest next update: Thu 09 Apr 2026 02:26:00 +0000 Files and hashes: 1: 3139312e372e3136382e302f32312d3234203d3e20323632383631.roa (hash: 1IHIztD+R8B7aYdP7wuNoDyk63HEbzqm4EctFN0Xl8o=) 2: 3137372e31302e3232342e302f32312d3234203d3e20323632383631.roa (hash: 02Ifct7s18goEyBDeWIdKu9ey75R5DkhKyls76plavU=) 3: 323830343a313435303a3a2f33322d3438203d3e20323632383631.roa (hash: Pc0GYVoJPbFj/fEq02BoaRQfPi2MbpirquiRIrEikGI=) 4: 43230BA37049255C04E85C87D9F4BDD3B9313605.crl (hash: 2kL159tDMw4oJyDodOkwdwvGvBOyltsaGimZX3T2H5w=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HtwWDikdvR1YYjULLBzkE2BBBQZuWHLgPtx1Lh2YJsqg/1/43230BA37049255C04E85C87D9F4BDD3B9313605.crl rsync://rpki-repo.registro.br/repo/HtwWDikdvR1YYjULLBzkE2BBBQZuWHLgPtx1Lh2YJsqg/1/43230BA37049255C04E85C87D9F4BDD3B9313605.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43230BA37049255C04E85C87D9F4BDD3B9313605.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 09 Apr 2026 02:26:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:6a:97:4f:52:bb:9d:39:68:48:b7:2e:06:72:47:35:b6:b8:1f:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43230BA37049255C04E85C87D9F4BDD3B9313605 Validity Not Before: Apr 7 23:48:00 2026 GMT Not After : Apr 9 02:26:00 2026 GMT Subject: CN=D0C4D26916C7B22B69C41750AA28DA638B1290C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:84:d6:6b:bb:56:f6:c3:93:3f:41:c3:22:d3: ac:8e:d7:16:65:86:db:de:87:ed:54:5d:18:b3:04: 08:b8:e1:cc:d5:aa:0a:24:c4:48:7d:cd:9f:b4:49: c7:6e:ef:bb:df:94:8c:9e:57:e5:50:a7:69:91:61: d8:60:ed:eb:67:b5:82:5b:0e:ee:92:9e:11:34:ed: b4:02:41:da:c1:31:86:12:fd:7e:a5:12:6c:c7:4a: 8b:9c:ef:68:2d:fb:58:68:32:8c:57:64:36:00:07: 71:f2:7b:bb:91:be:c7:b9:d3:a3:6b:29:98:f8:73: 31:f6:61:7b:ca:45:7e:10:5a:f2:db:a0:97:0a:dc: 89:3f:9a:bf:e9:38:5d:57:a1:0e:81:ca:ea:b5:d4: 47:27:41:ac:f9:14:f3:da:01:78:da:2e:e2:2c:ff: 16:4b:a2:a6:0c:f9:6c:d5:fe:eb:b9:0e:8c:e9:86: ae:63:2d:09:f9:5e:da:68:40:bc:0d:07:a1:b9:5d: 8c:70:ad:6f:50:7e:a5:05:43:a4:02:f4:de:38:41: b9:f8:94:66:5e:ba:1a:c8:b9:33:50:d3:d6:c1:0a: 72:7f:8e:75:64:4a:d7:4f:db:71:86:c2:ae:ca:05: 6f:32:3f:8a:12:d2:0d:45:31:5e:59:ff:75:aa:4b: 9c:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:C4:D2:69:16:C7:B2:2B:69:C4:17:50:AA:28:DA:63:8B:12:90:C9 X509v3 Authority Key Identifier: keyid:43:23:0B:A3:70:49:25:5C:04:E8:5C:87:D9:F4:BD:D3:B9:31:36:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HtwWDikdvR1YYjULLBzkE2BBBQZuWHLgPtx1Lh2YJsqg/1/43230BA37049255C04E85C87D9F4BDD3B9313605.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43230BA37049255C04E85C87D9F4BDD3B9313605.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HtwWDikdvR1YYjULLBzkE2BBBQZuWHLgPtx1Lh2YJsqg/1/43230BA37049255C04E85C87D9F4BDD3B9313605.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:16:30:92:be:55:58:e6:b3:49:33:bd:97:03:76:4f:27:93: b5:30:0e:93:8d:e7:f9:82:a1:22:06:37:d1:57:68:d0:41:23: ac:60:a0:6e:16:52:f6:3f:8e:a6:71:3b:7a:5f:8f:30:03:35: 62:6e:3e:14:5d:ed:c0:e2:b8:1c:01:01:90:b3:13:52:1f:81: 80:b9:77:21:7c:d8:f8:ee:5e:33:2b:78:69:2d:ed:0a:f8:2a: 8f:a1:d2:8d:e0:93:5b:9c:2f:2a:c7:82:5e:0b:6a:7a:63:31: 8b:6f:b8:67:8e:b7:ce:b0:f6:40:6f:3e:96:d5:77:0e:64:99: a2:97:5d:39:87:b1:88:f7:d8:d7:81:1b:6a:ec:4d:e5:48:f2: 6c:cd:13:bb:e1:2b:71:23:eb:0b:30:3e:76:0b:f6:34:a8:fa: 53:d4:db:f0:64:60:d9:0f:99:7f:8c:ca:8b:90:88:94:b2:35: 9f:62:af:ff:e3:02:b1:4a:95:bd:4e:50:49:fb:91:70:3e:b5: ac:2d:a4:26:e0:68:ab:4c:03:c2:bb:06:4b:03:f1:89:76:36: ef:ae:ae:c6:ef:44:ec:52:de:d8:c8:89:58:82:5c:3e:4d:40: 39:ce:bb:57:a1:b3:3b:62:77:fe:6d:3e:0a:8b:da:09:be:f6: 6c:a4:4d:5d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUTWqXT1K7nTloSLcuBnJHNba4H2YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDMyMzBCQTM3MDQ5MjU1QzA0RTg1Qzg3RDlGNEJERDNC OTMxMzYwNTAeFw0yNjA0MDcyMzQ4MDBaFw0yNjA0MDkwMjI2MDBaMDMxMTAvBgNV BAMTKEQwQzREMjY5MTZDN0IyMkI2OUM0MTc1MEFBMjhEQTYzOEIxMjkwQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjhNZru1b2w5M/QcMi06yO1xZl htveh+1UXRizBAi44czVqgokxEh9zZ+0Scdu77vflIyeV+VQp2mRYdhg7etntYJb Du6SnhE07bQCQdrBMYYS/X6lEmzHSouc72gt+1hoMoxXZDYAB3Hye7uRvse506Nr KZj4czH2YXvKRX4QWvLboJcK3Ik/mr/pOF1XoQ6Byuq11EcnQaz5FPPaAXjaLuIs /xZLoqYM+WzV/uu5Dozphq5jLQn5XtpoQLwNB6G5XYxwrW9QfqUFQ6QC9N44Qbn4 lGZeuhrIuTNQ09bBCnJ/jnVkStdP23GGwq7KBW8yP4oS0g1FMV5Z/3WqS5xxAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU0MTSaRbHsitpxBdQqijaY4sSkMkwHwYDVR0j BBgwFoAUQyMLo3BJJVwE6FyH2fS907kxNgUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSHR3V0Rpa2R2UjFZWWpVTExCemtFMkJCQlFadVdITGdQdHgxTGgyWUpz cWcvMS80MzIzMEJBMzcwNDkyNTVDMDRFODVDODdEOUY0QkREM0I5MzEzNjA1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQzMjMwQkEzNzA0OTI1NUMw NEU4NUM4N0Q5RjRCREQzQjkzMTM2MDUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SHR3V0Rpa2R2UjFZWWpVTExCemtFMkJCQlFadVdITGdQdHgxTGgyWUpzcWcvMS80 MzIzMEJBMzcwNDkyNTVDMDRFODVDODdEOUY0QkREM0I5MzEzNjA1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgBYwkr5VWOazSTO9lwN2TyeTtTAOk43n+YKhIgY30Vdo0EEjrGCgbhZS9j+O pnE7el+PMAM1Ym4+FF3twOK4HAEBkLMTUh+BgLl3IXzY+O5eMyt4aS3tCvgqj6HS jeCTW5wvKseCXgtqemMxi2+4Z463zrD2QG8+ltV3DmSZopddOYexiPfY14EbauxN 5UjybM0Tu+ErcSPrCzA+dgv2NKj6U9Tb8GRg2Q+Zf4zKi5CIlLI1n2Kv/+MCsUqV vU5QSfuRcD61rC2kJuBoq0wDwrsGSwPxiXY2766uxu9E7FLe2MiJWIJcPk1AOc67 V6GzO2J3/m0+CovaCb72bKRNXQ== -----END CERTIFICATE-----Generated at Wed Apr 8 11:22:30 2026 by rpki-client