$ rpki-client -vvf rpki-repo.registro.br/repo/2PZKbCnRur4otvv2knzNpxWJrnqLg32zYf8NHLzDw6pT/0/0CA1F86A709765A7CD152F713BB3F55F2EE1B556.mft File: 0CA1F86A709765A7CD152F713BB3F55F2EE1B556.mft (raw, json) Hash identifier: 3ugvKgrQuyOcIYKkGChXHnk7mouRN3u99X/sH5SS9tc= Subject key identifier: 25:2B:B1:5C:7F:87:5F:82:AD:0E:C6:03:04:9E:6E:16:D1:E9:19:BB Authority key identifier: 0C:A1:F8:6A:70:97:65:A7:CD:15:2F:71:3B:B3:F5:5F:2E:E1:B5:56 Certificate issuer: /CN=0CA1F86A709765A7CD152F713BB3F55F2EE1B556 Certificate serial: 31F19611EE57B3E80BFB4171B85DC25009920DCA Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CA1F86A709765A7CD152F713BB3F55F2EE1B556.cer Subject info access: rsync://rpki-repo.registro.br/repo/2PZKbCnRur4otvv2knzNpxWJrnqLg32zYf8NHLzDw6pT/0/0CA1F86A709765A7CD152F713BB3F55F2EE1B556.mft Manifest number: 05 Signing time: Thu 09 Apr 2026 01:24:26 +0000 Manifest this update: Thu 09 Apr 2026 01:19:26 +0000 Manifest next update: Fri 10 Apr 2026 03:01:26 +0000 Files and hashes: 1: 0CA1F86A709765A7CD152F713BB3F55F2EE1B556.crl (hash: uPKrtRul0dUCmOiRQgNkkPvFC8/vdL2nqWQyADuNXL0=) 2: 323830343a313861343a3a2f33322d3438203d3e203631393435.roa (hash: zG9p2gmYO/fEqc2msRtR+vBTBr/dsVxHBxbXwsjpWdw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2PZKbCnRur4otvv2knzNpxWJrnqLg32zYf8NHLzDw6pT/0/0CA1F86A709765A7CD152F713BB3F55F2EE1B556.crl rsync://rpki-repo.registro.br/repo/2PZKbCnRur4otvv2knzNpxWJrnqLg32zYf8NHLzDw6pT/0/0CA1F86A709765A7CD152F713BB3F55F2EE1B556.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CA1F86A709765A7CD152F713BB3F55F2EE1B556.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 10 Apr 2026 03:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:f1:96:11:ee:57:b3:e8:0b:fb:41:71:b8:5d:c2:50:09:92:0d:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0CA1F86A709765A7CD152F713BB3F55F2EE1B556 Validity Not Before: Apr 9 01:19:26 2026 GMT Not After : Apr 10 03:01:26 2026 GMT Subject: CN=252BB15C7F875F82AD0EC603049E6E16D1E919BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:31:2c:0f:3a:4a:e4:4b:d2:bc:15:fd:cc:fb: 2e:23:95:20:a0:f2:00:91:96:26:c8:ee:28:37:67: ba:91:dc:a4:03:54:d1:db:4c:48:c7:da:1c:be:76: dc:f9:9d:d2:9a:96:10:56:8f:ea:ca:b1:9a:40:48: 2d:9c:b5:06:95:41:20:88:b5:7a:04:ad:20:8f:a2: 4e:2a:d0:65:78:b8:90:25:65:29:2d:9d:52:7d:be: b7:8e:1d:98:8c:13:17:62:39:4a:e9:bf:ba:aa:94: 78:ae:bb:d4:4d:43:bc:7b:56:98:42:e4:9e:d3:90: 77:65:57:d6:ee:9b:15:b7:eb:ef:b8:ba:77:40:50: a3:39:30:b9:cc:41:f1:18:59:c7:15:9d:5b:43:2f: d8:e3:9b:53:66:99:3a:f8:f8:15:1c:20:cd:93:3f: cd:37:17:be:54:5a:d1:de:08:58:fb:e6:4e:65:f4: ce:f2:71:7d:59:e7:25:9f:7f:f6:c7:e5:31:23:6a: ed:2d:33:27:06:65:70:72:1d:07:a6:9e:39:6d:87: de:78:f5:7f:88:2e:c6:d3:33:1b:6d:59:fe:55:ce: 64:a4:16:38:a3:7a:f3:f2:34:fb:2b:a2:ab:18:40: ee:c2:61:c7:78:25:8c:86:ff:05:95:62:3b:2a:56: 47:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:2B:B1:5C:7F:87:5F:82:AD:0E:C6:03:04:9E:6E:16:D1:E9:19:BB X509v3 Authority Key Identifier: keyid:0C:A1:F8:6A:70:97:65:A7:CD:15:2F:71:3B:B3:F5:5F:2E:E1:B5:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2PZKbCnRur4otvv2knzNpxWJrnqLg32zYf8NHLzDw6pT/0/0CA1F86A709765A7CD152F713BB3F55F2EE1B556.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CA1F86A709765A7CD152F713BB3F55F2EE1B556.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2PZKbCnRur4otvv2knzNpxWJrnqLg32zYf8NHLzDw6pT/0/0CA1F86A709765A7CD152F713BB3F55F2EE1B556.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:22:97:57:5a:1b:c5:6a:7f:f4:0c:39:12:d3:aa:b5:4b:79: 8b:b4:86:c7:0f:66:60:2c:a3:03:08:1e:10:0c:5b:f5:52:04: d9:aa:72:a9:c0:51:74:e9:a5:df:12:e3:6e:9a:76:06:6e:20: 76:22:99:6c:17:5f:de:73:6e:fb:69:f9:39:e3:f1:22:70:93: 7e:6b:9a:31:9c:d1:b2:8d:3f:30:82:39:0c:10:c3:ef:e3:44: 2e:8f:70:ec:ea:f9:d0:f7:40:c7:b6:93:6e:c3:cb:e4:f8:e1: ac:69:80:89:6c:88:0c:ef:66:af:23:2c:e7:ae:22:7b:46:6d: 86:33:c4:1f:8e:99:81:66:ec:93:1f:1c:b1:ce:d3:f1:7d:ee: fa:25:21:44:34:b6:78:36:ce:2f:a7:eb:5f:73:89:1f:02:d2: 23:b5:cb:3d:11:80:b8:b0:e7:35:b9:3c:bb:e9:2d:04:43:e0: ff:4d:21:08:60:15:d1:e5:61:00:a8:7f:da:87:a5:f7:84:13: 13:f6:97:3c:8f:b9:26:93:9d:19:91:14:f0:86:9c:6c:5d:5c: 19:d0:30:c3:84:28:11:11:3a:74:a0:6e:c6:e1:32:ae:19:d9: a0:ee:f7:4a:fa:11:0f:e7:75:fd:cd:b9:20:0f:5d:5b:a1:0b: b0:8b:7c:ec -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUMfGWEe5Xs+gL+0FxuF3CUAmSDcowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMENBMUY4NkE3MDk3NjVBN0NEMTUyRjcxM0JCM0Y1NUYy RUUxQjU1NjAeFw0yNjA0MDkwMTE5MjZaFw0yNjA0MTAwMzAxMjZaMDMxMTAvBgNV BAMTKDI1MkJCMTVDN0Y4NzVGODJBRDBFQzYwMzA0OUU2RTE2RDFFOTE5QkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8MSwPOkrkS9K8Ff3M+y4jlSCg 8gCRlibI7ig3Z7qR3KQDVNHbTEjH2hy+dtz5ndKalhBWj+rKsZpASC2ctQaVQSCI tXoErSCPok4q0GV4uJAlZSktnVJ9vreOHZiMExdiOUrpv7qqlHiuu9RNQ7x7VphC 5J7TkHdlV9bumxW36++4undAUKM5MLnMQfEYWccVnVtDL9jjm1NmmTr4+BUcIM2T P803F75UWtHeCFj75k5l9M7ycX1Z5yWff/bH5TEjau0tMycGZXByHQemnjlth954 9X+ILsbTMxttWf5VzmSkFjijevPyNPsroqsYQO7CYcd4JYyG/wWVYjsqVkcHAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUJSuxXH+HX4KtDsYDBJ5uFtHpGbswHwYDVR0j BBgwFoAUDKH4anCXZafNFS9xO7P1Xy7htVYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMlBaS2JDblJ1cjRvdHZ2Mmtuek5weFdKcm5xTGczMnpZZjhOSEx6RHc2 cFQvMC8wQ0ExRjg2QTcwOTc2NUE3Q0QxNTJGNzEzQkIzRjU1RjJFRTFCNTU2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBDQTFGODZBNzA5NzY1QTdD RDE1MkY3MTNCQjNGNTVGMkVFMUI1NTYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MlBaS2JDblJ1cjRvdHZ2Mmtuek5weFdKcm5xTGczMnpZZjhOSEx6RHc2cFQvMC8w Q0ExRjg2QTcwOTc2NUE3Q0QxNTJGNzEzQkIzRjU1RjJFRTFCNTU2Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGyKXV1obxWp/9Aw5EtOqtUt5i7SGxw9mYCyjAwgeEAxb9VIE2apyqcBRdOml 3xLjbpp2Bm4gdiKZbBdf3nNu+2n5OePxInCTfmuaMZzRso0/MII5DBDD7+NELo9w 7Or50PdAx7aTbsPL5PjhrGmAiWyIDO9mryMs564ie0ZthjPEH46ZgWbskx8csc7T 8X3u+iUhRDS2eDbOL6frX3OJHwLSI7XLPRGAuLDnNbk8u+ktBEPg/00hCGAV0eVh AKh/2oel94QTE/aXPI+5JpOdGZEU8IacbF1cGdAww4QoERE6dKBuxuEyrhnZoO73 SvoRD+d1/c25IA9dW6ELsIt87A== -----END CERTIFICATE-----Generated at Thu Apr 9 12:48:20 2026 by rpki-client