$ rpki-client -vvf rpki-repo.registro.br/repo/kyWpGA2vP9UEDYfVNXwDktBCNDgsTRrJkxzQ5Bjm237/2/67A81E20D9B7972AADDB1C394778320F56BE023B.mft File: 67A81E20D9B7972AADDB1C394778320F56BE023B.mft (raw, json) Hash identifier: gCCgPpIGAj8N+MhHi14xDRnfccrOojvh0xIXSYAmzfw= Subject key identifier: F8:F8:11:51:1E:0E:4A:30:1F:CB:04:14:7B:07:3C:B5:59:47:DC:B5 Authority key identifier: 67:A8:1E:20:D9:B7:97:2A:AD:DB:1C:39:47:78:32:0F:56:BE:02:3B Certificate issuer: /CN=67A81E20D9B7972AADDB1C394778320F56BE023B Certificate serial: 334557EC8CDC3E3D64A61C443FB468534A4C30E0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67A81E20D9B7972AADDB1C394778320F56BE023B.cer Subject info access: rsync://rpki-repo.registro.br/repo/kyWpGA2vP9UEDYfVNXwDktBCNDgsTRrJkxzQ5Bjm237/2/67A81E20D9B7972AADDB1C394778320F56BE023B.mft Manifest number: 01A6 Signing time: Wed 08 Apr 2026 10:10:03 +0000 Manifest this update: Wed 08 Apr 2026 10:05:03 +0000 Manifest next update: Thu 09 Apr 2026 11:22:03 +0000 Files and hashes: 1: 34352e3137312e3138382e302f32342d3234203d3e20323638373237.roa (hash: WoMHGLPz9m8WHyv/c8eqB/ZBTGVzLYTCYHFQS4BRiVA=) 2: 34352e3137312e3138392e302f32342d3234203d3e203533313037.roa (hash: ZfM83HfKeKzzsIlJvLRkpTey+TNllfkHWy25NrM+coc=) 3: 34352e3137312e3138392e302f32342d3234203d3e20323638373237.roa (hash: +UFS2xAxUtJTPsgIN5GML3ACDJRqNmPSE3oSqnNkiJQ=) 4: 67A81E20D9B7972AADDB1C394778320F56BE023B.crl (hash: jpSpl8NnA+Bm6dDvvBoFtJ/J7orUPTUttj+tfhL+dkw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/kyWpGA2vP9UEDYfVNXwDktBCNDgsTRrJkxzQ5Bjm237/2/67A81E20D9B7972AADDB1C394778320F56BE023B.crl rsync://rpki-repo.registro.br/repo/kyWpGA2vP9UEDYfVNXwDktBCNDgsTRrJkxzQ5Bjm237/2/67A81E20D9B7972AADDB1C394778320F56BE023B.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67A81E20D9B7972AADDB1C394778320F56BE023B.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 09 Apr 2026 11:22:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:45:57:ec:8c:dc:3e:3d:64:a6:1c:44:3f:b4:68:53:4a:4c:30:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67A81E20D9B7972AADDB1C394778320F56BE023B Validity Not Before: Apr 8 10:05:03 2026 GMT Not After : Apr 9 11:22:03 2026 GMT Subject: CN=F8F811511E0E4A301FCB04147B073CB55947DCB5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:cd:38:c8:e2:af:50:72:ae:18:98:63:01:82: 1c:f5:5c:0c:9d:40:eb:c0:1c:5b:3e:22:bf:9e:7e: d8:6d:fc:c8:25:a9:07:41:08:92:3c:04:a1:b6:b0: 85:50:25:36:36:f1:aa:f1:ba:ab:88:e4:0c:79:d8: ff:72:0c:f6:61:69:66:e8:8d:3a:56:06:11:22:59: a7:10:28:d7:82:1e:55:90:81:6c:e7:a0:06:ec:be: ce:ed:a1:1b:2c:65:e6:78:b6:1c:f8:7c:24:2f:d5: 14:f6:e8:3f:bf:2f:bc:46:6f:80:13:ec:c0:9e:d5: 43:f4:90:43:25:23:43:52:54:8f:fd:7b:e1:57:bd: 7d:a0:5c:68:c6:25:5d:2f:83:47:2a:d5:96:b8:cc: 28:88:c8:13:e0:25:66:ad:1b:40:8f:ca:18:9e:ac: d4:ee:61:12:a5:1f:0d:5f:4e:b3:55:fd:7f:b6:cf: 41:9a:7b:b8:98:2c:bd:f0:48:d3:0e:3f:f2:d9:ba: 82:9d:f7:a8:46:a0:d7:db:0d:42:d1:96:00:1a:aa: 68:0f:1e:2b:95:85:22:30:96:08:83:ad:ce:cf:83: eb:b7:3b:e7:ed:73:fb:cf:3c:c1:61:81:ee:17:e4: e9:22:27:dc:9c:64:24:fe:6f:9f:3a:ca:08:b8:1b: 39:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:F8:11:51:1E:0E:4A:30:1F:CB:04:14:7B:07:3C:B5:59:47:DC:B5 X509v3 Authority Key Identifier: keyid:67:A8:1E:20:D9:B7:97:2A:AD:DB:1C:39:47:78:32:0F:56:BE:02:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/kyWpGA2vP9UEDYfVNXwDktBCNDgsTRrJkxzQ5Bjm237/2/67A81E20D9B7972AADDB1C394778320F56BE023B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67A81E20D9B7972AADDB1C394778320F56BE023B.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/kyWpGA2vP9UEDYfVNXwDktBCNDgsTRrJkxzQ5Bjm237/2/67A81E20D9B7972AADDB1C394778320F56BE023B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:b6:c4:20:77:40:ab:ec:9d:27:bb:99:88:66:bc:14:ba:a5: 4a:99:dc:fd:81:36:15:e7:44:7e:93:4e:17:cf:8c:a5:54:6f: ad:27:88:17:be:ed:3d:43:2d:65:32:00:77:3c:ab:ed:f4:b7: 26:99:56:24:24:19:5b:7a:ac:3b:bc:c1:fe:8b:48:83:4c:d1: 9d:70:11:da:bd:18:d9:e7:0c:14:05:06:26:0f:b5:16:ef:6b: 03:fe:a0:31:b0:58:8d:dc:f9:60:67:79:b3:47:36:68:dd:69: f2:9e:37:92:f6:64:89:f3:46:e5:65:42:d9:ac:77:55:51:22: 81:1c:30:40:b8:09:34:ce:4b:ed:51:48:68:c1:05:a0:bc:81: 74:3c:02:4d:76:0b:33:a3:a9:33:f4:d4:95:db:ef:28:a4:8e: 49:73:8b:81:6f:33:6e:2d:07:f3:d6:1e:fa:a7:e4:d2:34:9d: e7:1d:4d:f9:54:15:84:4d:c8:86:b8:cf:85:c3:29:bd:e2:70: eb:fb:af:5b:da:45:81:01:e6:48:39:9e:62:0f:8f:db:bf:26: 3c:95:7e:84:d2:a3:4f:eb:f9:95:30:8a:d1:37:a5:77:a6:3a: d1:4c:35:1e:72:b5:6d:3d:e0:1e:15:ec:ac:34:a6:63:33:ae: df:8a:ec:70 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUM0VX7IzcPj1kphxEP7RoU0pMMOAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjdBODFFMjBEOUI3OTcyQUFEREIxQzM5NDc3ODMyMEY1 NkJFMDIzQjAeFw0yNjA0MDgxMDA1MDNaFw0yNjA0MDkxMTIyMDNaMDMxMTAvBgNV BAMTKEY4RjgxMTUxMUUwRTRBMzAxRkNCMDQxNDdCMDczQ0I1NTk0N0RDQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpzTjI4q9Qcq4YmGMBghz1XAyd QOvAHFs+Ir+eftht/MglqQdBCJI8BKG2sIVQJTY28arxuquI5Ax52P9yDPZhaWbo jTpWBhEiWacQKNeCHlWQgWznoAbsvs7toRssZeZ4thz4fCQv1RT26D+/L7xGb4AT 7MCe1UP0kEMlI0NSVI/9e+FXvX2gXGjGJV0vg0cq1Za4zCiIyBPgJWatG0CPyhie rNTuYRKlHw1fTrNV/X+2z0Gae7iYLL3wSNMOP/LZuoKd96hGoNfbDULRlgAaqmgP HiuVhSIwlgiDrc7Pg+u3O+ftc/vPPMFhge4X5OkiJ9ycZCT+b586ygi4GzkNAgMB AAGjggJWMIICUjAdBgNVHQ4EFgQU+PgRUR4OSjAfywQUewc8tVlH3LUwHwYDVR0j BBgwFoAUZ6geINm3lyqt2xw5R3gyD1a+AjswDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9reVdwR0EydlA5VUVEWWZWTlh3RGt0QkNORGdzVFJySmt4elE1QmptMjM3 LzIvNjdBODFFMjBEOUI3OTcyQUFEREIxQzM5NDc3ODMyMEY1NkJFMDIzQi5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS82N0E4MUUyMEQ5Qjc5NzJBQURE QjFDMzk0Nzc4MzIwRjU2QkUwMjNCLmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL2t5 V3BHQTJ2UDlVRURZZlZOWHdEa3RCQ05EZ3NUUnJKa3h6UTVCam0yMzcvMi82N0E4 MUUyMEQ5Qjc5NzJBQUREQjFDMzk0Nzc4MzIwRjU2QkUwMjNCLm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA hbbEIHdAq+ydJ7uZiGa8FLqlSpnc/YE2FedEfpNOF8+MpVRvrSeIF77tPUMtZTIA dzyr7fS3JplWJCQZW3qsO7zB/otIg0zRnXAR2r0Y2ecMFAUGJg+1Fu9rA/6gMbBY jdz5YGd5s0c2aN1p8p43kvZkifNG5WVC2ax3VVEigRwwQLgJNM5L7VFIaMEFoLyB dDwCTXYLM6OpM/TUldvvKKSOSXOLgW8zbi0H89Ye+qfk0jSd5x1N+VQVhE3IhrjP hcMpveJw6/uvW9pFgQHmSDmeYg+P278mPJV+hNKjT+v5lTCK0Teld6Y60Uw1HnK1 bT3gHhXsrDSmYzOu34rscA== -----END CERTIFICATE-----Generated at Wed Apr 8 19:54:40 2026 by rpki-client