$ rpki-client -vvf rpki-repo.registro.br/repo/SohvjFHKXppkNQk7QbqyejN5fPkZ2cGrP49r6uAQvcs/0/4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355.mft File: 4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355.mft (raw, json) Hash identifier: AECWwdUkMMTbGJtjmNxB55FDIasySqHmOPxWpJPPjbo= Subject key identifier: 36:E9:52:0B:70:AF:5F:91:32:AE:1F:95:18:EA:10:A9:F2:17:D3:CE Authority key identifier: 4B:80:B2:0B:D7:40:DF:8A:FC:F0:F8:C5:A6:FE:B8:B9:E5:30:63:55 Certificate issuer: /CN=4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355 Certificate serial: 5A4AE959728EE6BF5CA84C8762290740B6F51FB2 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355.cer Subject info access: rsync://rpki-repo.registro.br/repo/SohvjFHKXppkNQk7QbqyejN5fPkZ2cGrP49r6uAQvcs/0/4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355.mft Manifest number: 0255 Signing time: Tue 07 Apr 2026 19:02:45 +0000 Manifest this update: Tue 07 Apr 2026 18:57:44 +0000 Manifest next update: Wed 08 Apr 2026 22:27:44 +0000 Files and hashes: 1: 3230312e3135302e3132302e302f32322d3234203d3e203631383632.roa (hash: qiIda+t4xOiFoeZalH1Neo+rgjYTYSXkUJWodvETyrw=) 2: 3133382e3138352e3137322e302f32322d3234203d3e203631383632.roa (hash: cKvg8yrZZKi+ggPtkL5V5SGtMmkJkC8tKoYg3IexQrg=) 3: 4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355.crl (hash: 6kOb31lrcmTHSEEXnOJ2tpeOgaEqnroQzxDB2SqUHic=) 4: 323830343a316137633a3a2f33322d3334203d3e203631383632.roa (hash: aGhB8GwGGOw4fjLbwd2dHG8lWAcKkK2gTduDVziPQPU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/SohvjFHKXppkNQk7QbqyejN5fPkZ2cGrP49r6uAQvcs/0/4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355.crl rsync://rpki-repo.registro.br/repo/SohvjFHKXppkNQk7QbqyejN5fPkZ2cGrP49r6uAQvcs/0/4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 08 Apr 2026 22:27:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:4a:e9:59:72:8e:e6:bf:5c:a8:4c:87:62:29:07:40:b6:f5:1f:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355 Validity Not Before: Apr 7 18:57:44 2026 GMT Not After : Apr 8 22:27:44 2026 GMT Subject: CN=36E9520B70AF5F9132AE1F9518EA10A9F217D3CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e0:f8:67:e2:34:57:ea:c2:5a:58:1c:20:59: cb:9e:1f:20:34:08:9d:3c:f3:6d:50:11:82:8e:aa: 38:7a:17:ad:91:87:81:85:b1:44:bd:13:4e:f6:4f: df:a0:74:d6:6b:56:2b:b1:7c:1e:0e:77:e4:69:80: b2:d8:10:9e:8a:df:4a:f8:cd:f7:a7:4f:8a:12:b3: c7:24:c3:a3:77:83:f0:01:e1:af:38:67:a2:57:2d: 08:a3:70:bb:dd:02:6a:e6:55:03:c5:31:1b:63:6b: 8b:10:bb:80:96:67:d2:70:ef:c5:f9:18:b0:5f:16: ee:14:44:5e:81:d5:58:51:42:7f:7c:fa:9e:87:09: 06:c5:3d:18:4c:20:7d:59:82:83:6d:0c:f3:ed:2a: 7c:05:4a:bc:dd:97:ee:7a:dc:7b:81:ea:0b:db:db: f2:4a:ed:a7:1c:15:f6:db:99:6c:5c:07:b2:c2:66: 43:47:cf:ef:f3:d5:06:73:99:84:4e:1c:c0:b0:a4: a9:6d:3b:6d:b6:73:9b:19:f5:55:4d:ee:4a:1d:ab: 56:16:df:53:4f:a9:59:0d:18:2b:0d:b8:1a:cb:a3: 0e:d5:f3:7a:f4:f6:1e:7d:5a:46:eb:0b:0b:15:16: 5e:11:a3:e0:40:cd:1d:e2:ea:1f:83:3a:12:31:17: 7c:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:E9:52:0B:70:AF:5F:91:32:AE:1F:95:18:EA:10:A9:F2:17:D3:CE X509v3 Authority Key Identifier: keyid:4B:80:B2:0B:D7:40:DF:8A:FC:F0:F8:C5:A6:FE:B8:B9:E5:30:63:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/SohvjFHKXppkNQk7QbqyejN5fPkZ2cGrP49r6uAQvcs/0/4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/SohvjFHKXppkNQk7QbqyejN5fPkZ2cGrP49r6uAQvcs/0/4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:99:4d:36:67:7c:3b:59:b1:81:f0:6b:16:d8:73:d7:a5:0e: 33:fb:4b:9a:26:f9:ca:1d:65:75:e4:cd:41:01:c9:8f:e4:14: 93:33:5a:eb:50:83:89:be:1c:72:49:36:24:c5:16:e7:8c:3c: 46:8e:3e:07:7c:44:2e:72:7c:a2:bd:9d:7d:31:8a:a9:50:50: 27:6d:07:e9:f8:7a:99:7e:6f:e0:1f:c3:c3:85:37:dc:d0:88: d9:63:55:71:4f:27:c4:88:29:62:12:01:4a:5f:57:32:d7:f2: 2d:9c:55:b2:db:e9:fa:3d:49:64:3c:e6:b9:fa:0d:6b:d2:95: d3:08:57:5e:ef:47:2b:43:e0:fc:e5:c3:6a:b1:bb:68:e7:57: 15:22:d9:fb:16:a9:53:ac:50:98:47:5a:da:e3:10:81:3d:e9: a7:1f:7c:7e:87:5a:7d:e7:2d:9f:fc:ba:b5:31:d9:ae:20:9c: b3:38:26:5a:38:7f:86:6b:37:50:2b:60:9e:30:6d:4a:70:4d: cf:26:b2:5b:77:67:e5:34:88:d4:28:4c:26:45:8d:33:74:95: e9:0c:47:85:87:e6:71:87:62:5b:79:6d:df:9d:12:ae:bc:e4: 15:fc:9c:6f:bc:bc:f2:75:3d:38:a3:19:4b:61:ca:a0:88:17: 6e:49:75:b6 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUWkrpWXKO5r9cqEyHYikHQLb1H7IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEI4MEIyMEJENzQwREY4QUZDRjBGOEM1QTZGRUI4QjlF NTMwNjM1NTAeFw0yNjA0MDcxODU3NDRaFw0yNjA0MDgyMjI3NDRaMDMxMTAvBgNV BAMTKDM2RTk1MjBCNzBBRjVGOTEzMkFFMUY5NTE4RUExMEE5RjIxN0QzQ0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC94Phn4jRX6sJaWBwgWcueHyA0 CJ08821QEYKOqjh6F62Rh4GFsUS9E072T9+gdNZrViuxfB4Od+RpgLLYEJ6K30r4 zfenT4oSs8ckw6N3g/AB4a84Z6JXLQijcLvdAmrmVQPFMRtja4sQu4CWZ9Jw78X5 GLBfFu4URF6B1VhRQn98+p6HCQbFPRhMIH1ZgoNtDPPtKnwFSrzdl+563HuB6gvb 2/JK7accFfbbmWxcB7LCZkNHz+/z1QZzmYROHMCwpKltO222c5sZ9VVN7kodq1YW 31NPqVkNGCsNuBrLow7V83r09h59WkbrCwsVFl4Ro+BAzR3i6h+DOhIxF3xXAgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUNulSC3CvX5Eyrh+VGOoQqfIX084wHwYDVR0j BBgwFoAUS4CyC9dA34r88PjFpv64ueUwY1UwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9Tb2h2akZIS1hwcGtOUWs3UWJxeWVqTjVmUGtaMmNHclA0OXI2dUFRdmNz LzAvNEI4MEIyMEJENzQwREY4QUZDRjBGOEM1QTZGRUI4QjlFNTMwNjM1NS5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS80QjgwQjIwQkQ3NDBERjhBRkNG MEY4QzVBNkZFQjhCOUU1MzA2MzU1LmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL1Nv aHZqRkhLWHBwa05RazdRYnF5ZWpONWZQa1oyY0dyUDQ5cjZ1QVF2Y3MvMC80Qjgw QjIwQkQ3NDBERjhBRkNGMEY4QzVBNkZFQjhCOUU1MzA2MzU1Lm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA aplNNmd8O1mxgfBrFthz16UOM/tLmib5yh1ldeTNQQHJj+QUkzNa61CDib4cckk2 JMUW54w8Ro4+B3xELnJ8or2dfTGKqVBQJ20H6fh6mX5v4B/Dw4U33NCI2WNVcU8n xIgpYhIBSl9XMtfyLZxVstvp+j1JZDzmufoNa9KV0whXXu9HK0Pg/OXDarG7aOdX FSLZ+xapU6xQmEda2uMQgT3ppx98fodafectn/y6tTHZriCcszgmWjh/hms3UCtg njBtSnBNzyayW3dn5TSI1ChMJkWNM3SV6QxHhYfmcYdiW3lt350SrrzkFfycb7y8 8nU9OKMZS2HKoIgXbkl1tg== -----END CERTIFICATE-----Generated at Wed Apr 8 10:59:15 2026 by rpki-client