$ rpki-client -vvf rpki-repo.registro.br/repo/2K3CiMg8wprt4kdYXYLdWxnhDAhF3Nd99oZoZeANhue7/0/417A3C46308D4692153B994B72E51599225B4979.mft File: 417A3C46308D4692153B994B72E51599225B4979.mft (raw, json) Hash identifier: HN0sWaaa8mzqpLvp3nxzWkrVcfIq3d+Nw8mB6aghBa4= Subject key identifier: F0:6D:F0:75:C5:DA:8C:B2:7C:E5:DD:F8:89:82:DE:45:75:AC:3A:38 Authority key identifier: 41:7A:3C:46:30:8D:46:92:15:3B:99:4B:72:E5:15:99:22:5B:49:79 Certificate issuer: /CN=417A3C46308D4692153B994B72E51599225B4979 Certificate serial: 29F207311FA0CCDB3D5E50BCC83F4323C68B43F1 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/417A3C46308D4692153B994B72E51599225B4979.cer Subject info access: rsync://rpki-repo.registro.br/repo/2K3CiMg8wprt4kdYXYLdWxnhDAhF3Nd99oZoZeANhue7/0/417A3C46308D4692153B994B72E51599225B4979.mft Manifest number: AE Signing time: Thu 09 Apr 2026 03:43:08 +0000 Manifest this update: Thu 09 Apr 2026 03:38:08 +0000 Manifest next update: Fri 10 Apr 2026 05:57:08 +0000 Files and hashes: 1: 323830343a363861303a3a2f33322d313238203d3e20323639373035.roa (hash: zhdfCF+qRAETjvfVQ6OraQ2dmSybxhayrJCM+QSnLjw=) 2: 3138392e3230312e3234382e302f32322d3332203d3e20323639373035.roa (hash: 67ErBlbOvFpg0hvnl1IkwlbuCRkTDA6ZZMEUfu5lUqE=) 3: 417A3C46308D4692153B994B72E51599225B4979.crl (hash: 5hXvdgSq26mvuDIEahhp84j4BorC6TJ5z0zeRDq/e7k=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2K3CiMg8wprt4kdYXYLdWxnhDAhF3Nd99oZoZeANhue7/0/417A3C46308D4692153B994B72E51599225B4979.crl rsync://rpki-repo.registro.br/repo/2K3CiMg8wprt4kdYXYLdWxnhDAhF3Nd99oZoZeANhue7/0/417A3C46308D4692153B994B72E51599225B4979.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/417A3C46308D4692153B994B72E51599225B4979.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 10 Apr 2026 05:57:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:f2:07:31:1f:a0:cc:db:3d:5e:50:bc:c8:3f:43:23:c6:8b:43:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=417A3C46308D4692153B994B72E51599225B4979 Validity Not Before: Apr 9 03:38:08 2026 GMT Not After : Apr 10 05:57:08 2026 GMT Subject: CN=F06DF075C5DA8CB27CE5DDF88982DE4575AC3A38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:aa:e2:b5:9e:70:1a:df:c4:97:3d:8d:70:b8: e8:2e:b6:16:a4:3a:3d:41:38:68:e2:cd:c0:9f:35: 32:19:5a:fb:d4:8a:cd:1d:46:d2:1c:f6:9f:38:4b: 64:07:11:ae:01:56:6d:e4:53:b1:d4:15:fd:91:5f: 3f:f5:ae:f6:99:a7:51:47:da:ef:ea:58:f8:3d:74: d9:dc:7f:f8:61:57:d5:0d:24:9a:2d:73:57:07:e2: 4f:35:a3:f0:74:73:22:bf:15:00:bc:91:09:9f:c2: cd:65:87:7c:5d:06:32:86:0e:a0:cd:86:b5:47:2e: 55:c9:b0:ad:4b:bb:ae:ee:23:9c:65:ab:93:9a:00: 2c:e3:8a:2b:03:1a:10:0f:ae:3e:65:d0:d2:1c:ba: 3c:eb:96:7c:d0:76:2e:b5:ab:a7:bf:ef:f4:7f:22: d3:89:ea:4f:04:20:bb:36:60:8c:a5:50:c9:0f:5c: cf:99:41:09:07:1d:6f:67:12:d8:ba:42:22:83:5a: 0b:34:c9:d2:ad:4a:85:d7:fc:a1:58:e9:a2:c9:a8: ed:60:f9:0a:fd:91:82:42:88:5f:df:55:65:9d:eb: 0e:24:00:3e:14:e7:07:b8:fa:f7:4d:f5:f9:54:fb: e9:96:5b:c2:94:b4:94:41:ec:18:a6:88:16:11:05: 1f:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:6D:F0:75:C5:DA:8C:B2:7C:E5:DD:F8:89:82:DE:45:75:AC:3A:38 X509v3 Authority Key Identifier: keyid:41:7A:3C:46:30:8D:46:92:15:3B:99:4B:72:E5:15:99:22:5B:49:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2K3CiMg8wprt4kdYXYLdWxnhDAhF3Nd99oZoZeANhue7/0/417A3C46308D4692153B994B72E51599225B4979.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/417A3C46308D4692153B994B72E51599225B4979.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2K3CiMg8wprt4kdYXYLdWxnhDAhF3Nd99oZoZeANhue7/0/417A3C46308D4692153B994B72E51599225B4979.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:8b:36:5f:e0:8c:f5:f9:5f:92:9b:8d:5d:ad:95:9a:4d:14: 71:e9:e3:c0:e8:12:49:2a:58:65:0c:0a:54:de:24:c4:b0:cf: 4c:2b:d5:89:71:90:6d:57:63:70:0b:fa:0b:60:da:d1:e6:b5: 32:2f:4d:12:7d:29:e8:82:e3:f5:79:4d:86:13:51:64:b8:78: d6:a8:9f:95:e0:7b:7e:43:3e:58:ff:db:c4:9b:96:1e:1b:23: d7:3f:53:a0:54:8c:da:42:f7:8b:2e:1b:81:24:dd:7e:0c:cf: 62:99:13:5f:5c:ee:86:3e:a9:a3:32:43:e5:80:94:56:fe:27: 63:49:a0:25:d8:b8:f5:bd:9a:66:bc:99:6a:6d:67:b4:93:21: 88:a0:aa:2f:79:dd:56:4e:e8:19:af:3e:64:96:8a:f6:ee:f9: 77:46:34:a5:08:9f:8a:c8:a9:cc:d4:9b:e4:2b:92:91:6c:73: 18:38:c7:a6:87:c2:f8:fb:4e:d4:79:e9:4c:24:aa:d0:76:b0: 60:d3:e6:19:61:a7:df:ba:6b:9e:d9:dd:d8:b1:ae:4f:24:bb: a2:d2:6f:67:fc:5a:09:c5:b2:d4:08:a8:48:25:7d:37:2a:08: 80:b5:53:87:80:06:6c:be:b6:ec:1e:8d:0a:23:0e:75:9f:98: c6:73:09:18 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUKfIHMR+gzNs9XlC8yD9DI8aLQ/EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDE3QTNDNDYzMDhENDY5MjE1M0I5OTRCNzJFNTE1OTky MjVCNDk3OTAeFw0yNjA0MDkwMzM4MDhaFw0yNjA0MTAwNTU3MDhaMDMxMTAvBgNV BAMTKEYwNkRGMDc1QzVEQThDQjI3Q0U1RERGODg5ODJERTQ1NzVBQzNBMzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkquK1nnAa38SXPY1wuOguthak Oj1BOGjizcCfNTIZWvvUis0dRtIc9p84S2QHEa4BVm3kU7HUFf2RXz/1rvaZp1FH 2u/qWPg9dNncf/hhV9UNJJotc1cH4k81o/B0cyK/FQC8kQmfws1lh3xdBjKGDqDN hrVHLlXJsK1Lu67uI5xlq5OaACzjiisDGhAPrj5l0NIcujzrlnzQdi61q6e/7/R/ ItOJ6k8EILs2YIylUMkPXM+ZQQkHHW9nEti6QiKDWgs0ydKtSoXX/KFY6aLJqO1g +Qr9kYJCiF/fVWWd6w4kAD4U5we4+vdN9flU++mWW8KUtJRB7BimiBYRBR+1AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU8G3wdcXajLJ85d34iYLeRXWsOjgwHwYDVR0j BBgwFoAUQXo8RjCNRpIVO5lLcuUVmSJbSXkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMkszQ2lNZzh3cHJ0NGtkWVhZTGRXeG5oREFoRjNOZDk5b1pvWmVBTmh1 ZTcvMC80MTdBM0M0NjMwOEQ0NjkyMTUzQjk5NEI3MkU1MTU5OTIyNUI0OTc5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQxN0EzQzQ2MzA4RDQ2OTIx NTNCOTk0QjcyRTUxNTk5MjI1QjQ5NzkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MkszQ2lNZzh3cHJ0NGtkWVhZTGRXeG5oREFoRjNOZDk5b1pvWmVBTmh1ZTcvMC80 MTdBM0M0NjMwOEQ0NjkyMTUzQjk5NEI3MkU1MTU5OTIyNUI0OTc5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKos2X+CM9flfkpuNXa2Vmk0UcenjwOgSSSpYZQwKVN4kxLDPTCvViXGQbVdj cAv6C2Da0ea1Mi9NEn0p6ILj9XlNhhNRZLh41qifleB7fkM+WP/bxJuWHhsj1z9T oFSM2kL3iy4bgSTdfgzPYpkTX1zuhj6pozJD5YCUVv4nY0mgJdi49b2aZryZam1n tJMhiKCqL3ndVk7oGa8+ZJaK9u75d0Y0pQifisipzNSb5CuSkWxzGDjHpofC+PtO 1HnpTCSq0HawYNPmGWGn37prntnd2LGuTyS7otJvZ/xaCcWy1AioSCV9NyoIgLVT h4AGbL627B6NCiMOdZ+YxnMJGA== -----END CERTIFICATE-----Generated at Thu Apr 9 13:07:54 2026 by rpki-client