$ rpki-client -vvf rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/1/2AADFACED9C75E320914697A02E254A3D463839A.mft File: 2AADFACED9C75E320914697A02E254A3D463839A.mft (raw, json) Hash identifier: mBGBS8MITI4WNX5A/y0YplyYgHSPXXDpFsrw4V46JLs= Subject key identifier: 22:28:82:E4:58:2E:FF:FC:14:C6:43:95:D6:EE:BD:28:A9:22:8A:D1 Authority key identifier: 2A:AD:FA:CE:D9:C7:5E:32:09:14:69:7A:02:E2:54:A3:D4:63:83:9A Certificate issuer: /CN=2AADFACED9C75E320914697A02E254A3D463839A Certificate serial: 55533B40743BDF5814BC27B7CB0F3E989ACB5B5A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AADFACED9C75E320914697A02E254A3D463839A.cer Subject info access: rsync://rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/1/2AADFACED9C75E320914697A02E254A3D463839A.mft Manifest number: 03CF Signing time: Wed 08 Apr 2026 08:27:29 +0000 Manifest this update: Wed 08 Apr 2026 08:22:29 +0000 Manifest next update: Thu 09 Apr 2026 12:05:29 +0000 Files and hashes: 1: 2AADFACED9C75E320914697A02E254A3D463839A.crl (hash: kuiX41dHJV8SvKMI/UZ6Ec2omqFJExNwKRi5S+mY0C0=) 2: 3138372e3131312e31362e302f32302d3234203d3e203533313230.roa (hash: Wl3NM8LcidtB9ABien1wpKt4MxmMwZ7mN01Y9qxRLP8=) 3: 323830343a316465383a3a2f33322d3434203d3e203533313230.roa (hash: Nr+GaVgOM2KaxkMsqzw8YASCuxHUI3aExeAauUF/zmg=) 4: 3134312e3139332e3135312e302f32342d3234203d3e203533313230.roa (hash: yzKUpRe3y8LUWcm83z69Jaw9iWkJf+qC/m+2IVHZxlc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/1/2AADFACED9C75E320914697A02E254A3D463839A.crl rsync://rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/1/2AADFACED9C75E320914697A02E254A3D463839A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AADFACED9C75E320914697A02E254A3D463839A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 09 Apr 2026 12:05:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:53:3b:40:74:3b:df:58:14:bc:27:b7:cb:0f:3e:98:9a:cb:5b:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2AADFACED9C75E320914697A02E254A3D463839A Validity Not Before: Apr 8 08:22:29 2026 GMT Not After : Apr 9 12:05:29 2026 GMT Subject: CN=222882E4582EFFFC14C64395D6EEBD28A9228AD1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:b7:e6:86:d0:07:64:c9:a0:05:3a:89:ad:c3: 3c:1b:99:e1:ab:a0:33:46:8a:0b:a2:40:89:fb:94: 21:40:91:f0:56:69:e7:53:4e:0f:59:3c:13:cf:25: 28:4a:30:fd:d8:c1:2a:ca:dd:3d:18:ac:f2:7d:c6: ab:74:27:5c:c6:a7:58:7c:61:4d:64:39:82:2d:b0: 45:07:f5:39:49:36:28:41:40:72:f8:5e:37:1e:51: 8b:27:ed:cd:a2:56:93:fb:89:d2:91:d3:80:41:c8: d2:80:ca:8c:5f:c7:99:7e:99:fc:8c:79:02:8d:de: ce:a6:71:25:1f:88:46:1b:d8:20:95:c0:e1:21:dc: 85:f3:68:0a:09:5d:19:7d:9b:15:20:d7:05:e4:39: 1d:9e:76:65:81:ca:1d:8b:31:0e:67:f9:b0:5e:85: fd:ed:11:c6:75:61:be:21:34:49:30:4c:32:99:db: 90:f5:f2:81:8b:28:ee:fb:22:9e:7a:50:d8:a9:71: 69:e2:94:ae:13:72:27:dc:2f:79:68:9f:bc:76:ad: c9:76:c9:7c:6a:a5:85:8d:d3:49:b8:7f:3b:22:13: 83:a3:35:ac:2c:1e:0a:a1:18:28:ce:1b:18:84:64: 50:07:3f:fa:8c:f4:82:5e:52:90:6a:fd:ca:6a:55: c6:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:28:82:E4:58:2E:FF:FC:14:C6:43:95:D6:EE:BD:28:A9:22:8A:D1 X509v3 Authority Key Identifier: keyid:2A:AD:FA:CE:D9:C7:5E:32:09:14:69:7A:02:E2:54:A3:D4:63:83:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/1/2AADFACED9C75E320914697A02E254A3D463839A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AADFACED9C75E320914697A02E254A3D463839A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/1/2AADFACED9C75E320914697A02E254A3D463839A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:c7:39:b9:29:73:7f:ad:68:d7:09:4c:50:5c:6e:17:74:ee: 6e:2e:50:29:28:90:0d:d0:10:85:fe:14:e8:0a:01:02:49:f5: 79:52:3d:b3:51:a0:79:b6:b0:d5:1d:cc:4e:69:61:47:84:b3: 4b:b2:5a:9e:54:1a:d5:64:76:52:e4:f2:83:42:f3:a1:bf:70: 7b:3e:5a:f4:76:15:85:ea:0d:a2:2d:cf:80:ca:19:5e:73:4d: de:80:fe:fd:fd:57:af:68:84:78:4b:ef:a3:d8:10:cb:e4:1d: cc:1b:22:27:87:42:05:d8:48:dd:ed:3d:4f:14:91:14:24:42: 32:ad:0d:62:ff:cf:2d:3b:ca:0a:11:9f:8c:be:07:41:cf:7e: 4d:7f:0f:a2:59:4b:1e:65:e2:3f:1c:97:22:42:38:c1:c9:7d: ee:3b:bc:1b:ec:07:6b:06:f3:d5:f6:86:74:53:db:17:b9:3f: d6:d1:34:8c:f6:b6:c0:94:f0:17:75:e9:1f:75:54:49:14:3b: 84:b3:be:92:e5:b1:1c:90:02:e4:18:31:41:8d:8f:af:11:ab: bf:95:94:1f:1b:60:d5:75:42:83:52:bf:1a:8a:f3:96:c1:dd: 44:c8:66:31:c5:23:22:13:04:6b:1d:59:bf:8b:24:d5:07:d7: 6d:fc:97:ac -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUVVM7QHQ731gUvCe3yw8+mJrLW1owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFBREZBQ0VEOUM3NUUzMjA5MTQ2OTdBMDJFMjU0QTNE NDYzODM5QTAeFw0yNjA0MDgwODIyMjlaFw0yNjA0MDkxMjA1MjlaMDMxMTAvBgNV BAMTKDIyMjg4MkU0NTgyRUZGRkMxNEM2NDM5NUQ2RUVCRDI4QTkyMjhBRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTt+aG0AdkyaAFOomtwzwbmeGr oDNGiguiQIn7lCFAkfBWaedTTg9ZPBPPJShKMP3YwSrK3T0YrPJ9xqt0J1zGp1h8 YU1kOYItsEUH9TlJNihBQHL4XjceUYsn7c2iVpP7idKR04BByNKAyoxfx5l+mfyM eQKN3s6mcSUfiEYb2CCVwOEh3IXzaAoJXRl9mxUg1wXkOR2edmWByh2LMQ5n+bBe hf3tEcZ1Yb4hNEkwTDKZ25D18oGLKO77Ip56UNipcWnilK4TcifcL3lon7x2rcl2 yXxqpYWN00m4fzsiE4OjNawsHgqhGCjOGxiEZFAHP/qM9IJeUpBq/cpqVcZjAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUIiiC5Fgu//wUxkOV1u69KKkiitEwHwYDVR0j BBgwFoAUKq36ztnHXjIJFGl6AuJUo9Rjg5owDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSHVyY0FKek1GTEY4ZTRncEg2SmVqUkRxM2p2UEpqYmttMW05bVJCU0Ru eW8vMS8yQUFERkFDRUQ5Qzc1RTMyMDkxNDY5N0EwMkUyNTRBM0Q0NjM4MzlBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJBQURGQUNFRDlDNzVFMzIw OTE0Njk3QTAyRTI1NEEzRDQ2MzgzOUEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SHVyY0FKek1GTEY4ZTRncEg2SmVqUkRxM2p2UEpqYmttMW05bVJCU0RueW8vMS8y QUFERkFDRUQ5Qzc1RTMyMDkxNDY5N0EwMkUyNTRBM0Q0NjM4MzlBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbMc5uSlzf61o1wlMUFxuF3Tubi5QKSiQDdAQhf4U6AoBAkn1eVI9s1Ggebaw 1R3MTmlhR4SzS7JanlQa1WR2UuTyg0Lzob9wez5a9HYVheoNoi3PgMoZXnNN3oD+ /f1Xr2iEeEvvo9gQy+QdzBsiJ4dCBdhI3e09TxSRFCRCMq0NYv/PLTvKChGfjL4H Qc9+TX8PollLHmXiPxyXIkI4wcl97ju8G+wHawbz1faGdFPbF7k/1tE0jPa2wJTw F3XpH3VUSRQ7hLO+kuWxHJAC5BgxQY2PrxGrv5WUHxtg1XVCg1K/GorzlsHdRMhm McUjIhMEax1Zv4sk1QfXbfyXrA== -----END CERTIFICATE-----Generated at Wed Apr 8 23:41:59 2026 by rpki-client