$ rpki-client -vvf rpki-repo.registro.br/repo/2CMzwVakW37om5XPSrEQcuPGZ1CQFNzw6yvtmoRSGoLw/0/470AE1EB9714E43320F9D361336505142D7D836B.mft File: 470AE1EB9714E43320F9D361336505142D7D836B.mft (raw, json) Hash identifier: gn20tbQMDJjnOs1AtgMEBbCpmFDzrN8FsBomt4TFRLE= Subject key identifier: D8:42:BF:C4:0E:D3:9A:1F:49:8B:42:A0:B3:CD:2D:D3:AE:78:31:1D Authority key identifier: 47:0A:E1:EB:97:14:E4:33:20:F9:D3:61:33:65:05:14:2D:7D:83:6B Certificate issuer: /CN=470AE1EB9714E43320F9D361336505142D7D836B Certificate serial: 474CAC9E6C4CC26C0A533107A6B329DB3A3284C0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/470AE1EB9714E43320F9D361336505142D7D836B.cer Subject info access: rsync://rpki-repo.registro.br/repo/2CMzwVakW37om5XPSrEQcuPGZ1CQFNzw6yvtmoRSGoLw/0/470AE1EB9714E43320F9D361336505142D7D836B.mft Manifest number: 0185 Signing time: Wed 08 Apr 2026 23:47:42 +0000 Manifest this update: Wed 08 Apr 2026 23:42:42 +0000 Manifest next update: Fri 10 Apr 2026 02:17:42 +0000 Files and hashes: 1: 323830343a376534633a3a2f33322d313238203d3e20323731363135.roa (hash: OdU9UEZt02QpSGkR3fyYMJem0AChe2we0Z/o1VOpO5k=) 2: 3137372e33392e39362e302f32342d3332203d3e20323731363135.roa (hash: 1vyNuWE5jauLyptTokeHnfrLaNFayN+UWnzSx2Hk+eA=) 3: 3137372e33392e39382e302f32332d3332203d3e20323731363135.roa (hash: BdLrbEU7II3NX1HsAT1F9Ah5WD1IUR9s5CyZjRaEy4Y=) 4: 470AE1EB9714E43320F9D361336505142D7D836B.crl (hash: ng86AcCCZXvZJHpzc0x8cXiDOfhtsfZl+aQktHiTEjg=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2CMzwVakW37om5XPSrEQcuPGZ1CQFNzw6yvtmoRSGoLw/0/470AE1EB9714E43320F9D361336505142D7D836B.crl rsync://rpki-repo.registro.br/repo/2CMzwVakW37om5XPSrEQcuPGZ1CQFNzw6yvtmoRSGoLw/0/470AE1EB9714E43320F9D361336505142D7D836B.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/470AE1EB9714E43320F9D361336505142D7D836B.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 10 Apr 2026 02:17:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:4c:ac:9e:6c:4c:c2:6c:0a:53:31:07:a6:b3:29:db:3a:32:84:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=470AE1EB9714E43320F9D361336505142D7D836B Validity Not Before: Apr 8 23:42:42 2026 GMT Not After : Apr 10 02:17:42 2026 GMT Subject: CN=D842BFC40ED39A1F498B42A0B3CD2DD3AE78311D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:bc:78:98:fc:43:db:38:db:88:6f:e6:4e:6b: 0c:83:31:d4:34:1f:26:ef:5f:d8:1f:96:87:b4:28: 8e:da:3b:ee:59:df:0c:41:21:00:21:f6:1c:5e:bc: e4:69:04:9b:95:85:9f:04:a3:08:f0:30:16:a6:d1: 0d:f9:11:e9:7c:de:38:09:63:cc:ab:51:b9:30:ee: e2:db:1d:a7:77:85:2e:c0:d5:7f:2d:f7:db:d3:59: b6:e2:31:ec:c7:af:96:3e:5b:39:ac:dc:43:28:67: 93:97:1c:93:c0:6b:68:1c:3b:8a:ec:37:4e:2a:51: 87:d5:b3:2b:98:8a:7f:04:00:4d:49:87:83:2a:23: 94:b8:a7:e8:a5:5c:70:99:2c:21:f5:9e:fd:85:51: 99:34:15:dd:7d:1c:92:8e:37:4f:0d:c4:81:a0:f6: d7:13:d4:06:06:59:3d:1f:93:ee:21:e2:11:21:63: fe:ac:26:2d:9c:61:fa:fa:4d:72:b1:9a:ca:34:8f: 66:88:df:a2:08:8b:db:1b:a8:88:7e:00:00:90:15: 38:41:94:be:51:a1:64:8f:0c:24:b7:95:09:58:3e: a1:c2:41:80:f5:cb:7c:9c:8f:46:5b:ce:54:5b:15: 5f:59:03:88:07:94:ae:df:a4:8a:70:b3:9b:3f:38: b4:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:42:BF:C4:0E:D3:9A:1F:49:8B:42:A0:B3:CD:2D:D3:AE:78:31:1D X509v3 Authority Key Identifier: keyid:47:0A:E1:EB:97:14:E4:33:20:F9:D3:61:33:65:05:14:2D:7D:83:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2CMzwVakW37om5XPSrEQcuPGZ1CQFNzw6yvtmoRSGoLw/0/470AE1EB9714E43320F9D361336505142D7D836B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/470AE1EB9714E43320F9D361336505142D7D836B.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2CMzwVakW37om5XPSrEQcuPGZ1CQFNzw6yvtmoRSGoLw/0/470AE1EB9714E43320F9D361336505142D7D836B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:94:04:3b:46:1d:a7:78:04:4a:6b:b6:f8:c9:ce:17:7f:5c: 80:d9:f1:da:5b:85:20:0e:4f:f9:b2:98:6d:58:a9:f7:b6:7c: fb:4f:a9:90:b8:ec:10:6a:88:2f:a3:30:c1:c6:c0:64:7c:ca: 28:fb:9e:dc:b5:a9:1a:22:fc:46:91:09:b0:07:9d:ac:7d:0b: 3a:7f:6d:59:99:9a:e7:e1:b7:ba:66:98:a4:2a:7a:e4:b8:00: 62:ac:1b:85:52:e1:67:2c:ea:ec:51:e9:04:56:dd:52:97:82: fe:80:60:e6:18:f4:06:e3:24:f2:36:ac:6d:1d:09:57:3b:81: c4:f4:49:ab:72:b2:58:fd:1a:08:ce:4e:22:1e:17:39:59:ac: 74:f9:49:0c:24:1e:4c:d9:7c:39:e1:b8:92:61:eb:d7:4b:dc: 39:e9:62:85:2d:bd:9e:98:8f:e1:82:ef:7b:6c:70:6c:5e:ca: c6:c0:b5:42:c3:f1:62:eb:4f:8d:aa:c3:3e:82:91:15:37:45: 23:9c:8f:8f:b5:d7:c4:85:eb:1e:df:89:86:70:c1:ef:0d:fb: 2f:a4:82:0a:ed:47:4f:7a:e5:ba:38:6f:5f:d8:b0:7a:52:b3: b5:8b:02:8e:d6:15:f7:e0:9c:7a:06:cd:c0:be:b1:e0:73:64: d5:8c:3d:f8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUR0ysnmxMwmwKUzEHprMp2zoyhMAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDcwQUUxRUI5NzE0RTQzMzIwRjlEMzYxMzM2NTA1MTQy RDdEODM2QjAeFw0yNjA0MDgyMzQyNDJaFw0yNjA0MTAwMjE3NDJaMDMxMTAvBgNV BAMTKEQ4NDJCRkM0MEVEMzlBMUY0OThCNDJBMEIzQ0QyREQzQUU3ODMxMUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXvHiY/EPbONuIb+ZOawyDMdQ0 HybvX9gfloe0KI7aO+5Z3wxBIQAh9hxevORpBJuVhZ8EowjwMBam0Q35Eel83jgJ Y8yrUbkw7uLbHad3hS7A1X8t99vTWbbiMezHr5Y+Wzms3EMoZ5OXHJPAa2gcO4rs N04qUYfVsyuYin8EAE1Jh4MqI5S4p+ilXHCZLCH1nv2FUZk0Fd19HJKON08NxIGg 9tcT1AYGWT0fk+4h4hEhY/6sJi2cYfr6TXKxmso0j2aI36IIi9sbqIh+AACQFThB lL5RoWSPDCS3lQlYPqHCQYD1y3ycj0ZbzlRbFV9ZA4gHlK7fpIpws5s/OLT7AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU2EK/xA7Tmh9Ji0Kgs80t0654MR0wHwYDVR0j BBgwFoAURwrh65cU5DMg+dNhM2UFFC19g2swDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMkNNendWYWtXMzdvbTVYUFNyRVFjdVBHWjFDUUZOenc2eXZ0bW9SU0dv THcvMC80NzBBRTFFQjk3MTRFNDMzMjBGOUQzNjEzMzY1MDUxNDJEN0Q4MzZCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ3MEFFMUVCOTcxNEU0MzMy MEY5RDM2MTMzNjUwNTE0MkQ3RDgzNkIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MkNNendWYWtXMzdvbTVYUFNyRVFjdVBHWjFDUUZOenc2eXZ0bW9SU0dvTHcvMC80 NzBBRTFFQjk3MTRFNDMzMjBGOUQzNjEzMzY1MDUxNDJEN0Q4MzZCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtJQEO0Ydp3gESmu2+MnOF39cgNnx2luFIA5P+bKYbVip97Z8+0+pkLjsEGqI L6MwwcbAZHzKKPue3LWpGiL8RpEJsAedrH0LOn9tWZma5+G3umaYpCp65LgAYqwb hVLhZyzq7FHpBFbdUpeC/oBg5hj0BuMk8jasbR0JVzuBxPRJq3KyWP0aCM5OIh4X OVmsdPlJDCQeTNl8OeG4kmHr10vcOelihS29npiP4YLve2xwbF7KxsC1QsPxYutP jarDPoKRFTdFI5yPj7XXxIXrHt+JhnDB7w37L6SCCu1HT3rlujhvX9iwelKztYsC jtYV9+CcegbNwL6x4HNk1Yw9+A== -----END CERTIFICATE-----Generated at Thu Apr 9 11:11:13 2026 by rpki-client