$ rpki-client -vvf rpki-repo.registro.br/repo/2UWj7WMaKR7bGni5boRsb63o6UxL9C79u5ub6NnkRge2/0/0673A8A85FD75BDF7374650633566E470F5D792A.mft File: 0673A8A85FD75BDF7374650633566E470F5D792A.mft (raw, json) Hash identifier: NqZH8XXvEW1Q/KevEWdAiIbibXmT66o4DUzJSI1ypZY= Subject key identifier: 87:4D:C1:D9:23:41:90:9A:FE:CD:85:20:70:7D:7A:E1:51:91:FF:47 Authority key identifier: 06:73:A8:A8:5F:D7:5B:DF:73:74:65:06:33:56:6E:47:0F:5D:79:2A Certificate issuer: /CN=0673A8A85FD75BDF7374650633566E470F5D792A Certificate serial: 160E50E1A5A8027768275D6F5CF8CA36F2809C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0673A8A85FD75BDF7374650633566E470F5D792A.cer Subject info access: rsync://rpki-repo.registro.br/repo/2UWj7WMaKR7bGni5boRsb63o6UxL9C79u5ub6NnkRge2/0/0673A8A85FD75BDF7374650633566E470F5D792A.mft Manifest number: D3 Signing time: Thu 09 Apr 2026 09:30:02 +0000 Manifest this update: Thu 09 Apr 2026 09:25:02 +0000 Manifest next update: Fri 10 Apr 2026 12:18:02 +0000 Files and hashes: 1: 323830343a313631343a3a2f33322d3438203d3e20323633323636.roa (hash: H1ySD22gAkwKaQwiOrw+K7D23u1auOLZ3TSQPkOCeyw=) 2: 3137372e3132392e32382e302f32322d3234203d3e20323633323636.roa (hash: Upe0YPCzHj4GTIrllXLlAxIfLTx07Sm8YoEmbCifd8I=) 3: 0673A8A85FD75BDF7374650633566E470F5D792A.crl (hash: TdnpOFcVeks7IGF2BQTuBO9MzQohxkq7rvAoWefoD5U=) 4: 3137302e38322e3130382e302f32322d3234203d3e20323633323636.roa (hash: RF38Bjpp823JDXqLKsrAUYWB/3BPbPZ7MdCkTro+SRU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2UWj7WMaKR7bGni5boRsb63o6UxL9C79u5ub6NnkRge2/0/0673A8A85FD75BDF7374650633566E470F5D792A.crl rsync://rpki-repo.registro.br/repo/2UWj7WMaKR7bGni5boRsb63o6UxL9C79u5ub6NnkRge2/0/0673A8A85FD75BDF7374650633566E470F5D792A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0673A8A85FD75BDF7374650633566E470F5D792A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 10 Apr 2026 12:18:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:0e:50:e1:a5:a8:02:77:68:27:5d:6f:5c:f8:ca:36:f2:80:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0673A8A85FD75BDF7374650633566E470F5D792A Validity Not Before: Apr 9 09:25:02 2026 GMT Not After : Apr 10 12:18:02 2026 GMT Subject: CN=874DC1D92341909AFECD8520707D7AE15191FF47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:76:e3:3b:f1:38:1e:c4:7e:80:0d:62:0c:62: 21:a1:b2:7c:33:46:fd:9d:8e:96:bb:23:ca:c2:90: 4c:6d:f1:7c:1d:10:65:ef:58:4c:5d:6b:0c:96:8b: 83:0b:6b:cb:a2:9c:2b:0c:9b:04:0c:f7:32:d7:94: 31:f5:ff:37:d6:ee:d4:0a:a1:9c:fc:7a:dd:ba:64: 65:7b:1d:e3:97:4e:a9:55:ad:ff:19:e7:5a:a3:40: 5d:c3:fa:ea:84:97:18:86:af:48:30:44:e7:b0:cb: 23:ed:f2:7e:8d:88:97:c6:d7:87:8a:91:9d:d4:05: a8:f9:3e:fb:e0:f0:62:86:e1:57:c0:12:0a:6b:7e: 11:c0:6c:07:51:47:49:c9:ad:7f:86:35:33:30:97: ad:b7:20:88:22:ff:94:ee:06:1a:57:b0:bd:9f:52: 1d:f4:17:28:f0:05:59:3c:6c:79:86:f8:78:3a:c4: 4f:c0:48:13:a3:69:59:ec:20:b0:b3:3c:0e:6a:3e: e5:4d:0a:5e:ee:75:17:17:d2:c3:79:19:06:0a:3f: 7e:b4:d2:27:ef:c8:b4:73:9e:39:b2:06:3a:c2:b2: 5c:8b:fb:3a:21:92:d4:99:48:e9:9f:dd:fb:d0:09: 04:54:8d:23:90:89:b7:c9:82:91:63:84:ed:0c:f0: d8:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:4D:C1:D9:23:41:90:9A:FE:CD:85:20:70:7D:7A:E1:51:91:FF:47 X509v3 Authority Key Identifier: keyid:06:73:A8:A8:5F:D7:5B:DF:73:74:65:06:33:56:6E:47:0F:5D:79:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2UWj7WMaKR7bGni5boRsb63o6UxL9C79u5ub6NnkRge2/0/0673A8A85FD75BDF7374650633566E470F5D792A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0673A8A85FD75BDF7374650633566E470F5D792A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2UWj7WMaKR7bGni5boRsb63o6UxL9C79u5ub6NnkRge2/0/0673A8A85FD75BDF7374650633566E470F5D792A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:ef:59:61:89:36:af:a8:1c:72:5a:b5:c4:14:23:84:5f:d2: 72:9a:e9:65:df:f0:98:f0:ae:6d:fa:56:c1:e8:1b:20:4d:13: ee:ec:2f:ff:8f:2c:5e:17:b6:da:91:2b:f2:7b:c8:17:05:84: b7:88:8d:4d:3b:5e:4c:6d:26:de:01:a8:74:9b:84:5c:32:39: d7:c2:6d:21:5e:b7:98:84:1b:34:d5:bf:3a:f1:7b:5d:ef:f8: d0:07:bd:29:ca:09:4b:a6:78:87:48:8e:7f:93:f3:21:1f:d8: 82:a6:16:84:6a:88:35:f1:2d:2d:6a:82:ca:77:0d:42:92:06: fd:e0:db:99:67:b5:79:3f:06:2e:7e:15:3c:9b:b3:1f:38:93: c7:bd:ec:d2:c4:88:58:78:c2:d6:a0:57:86:2b:bb:c7:3b:34: ad:67:88:a6:f9:d6:65:28:91:11:f2:d4:23:12:c4:99:68:44: dd:15:47:56:7e:0b:e9:75:01:0a:af:8a:39:5b:c1:f8:7e:0b: bf:09:3e:f5:fa:f8:ee:e0:d4:80:cc:85:42:27:ed:01:e3:4f: e3:02:95:1c:49:6e:da:2f:56:bf:13:76:f6:d3:5d:23:5c:50: 3e:99:50:7a:8c:fe:cb:b5:e2:75:82:39:4c:dd:d7:1d:68:06: 06:f6:23:75 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgITFg5Q4aWoAndoJ11vXPjKNvKAnDANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEygwNjczQThBODVGRDc1QkRGNzM3NDY1MDYzMzU2NkU0NzBG NUQ3OTJBMB4XDTI2MDQwOTA5MjUwMloXDTI2MDQxMDEyMTgwMlowMzExMC8GA1UE AxMoODc0REMxRDkyMzQxOTA5QUZFQ0Q4NTIwNzA3RDdBRTE1MTkxRkY0NzCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJN24zvxOB7EfoANYgxiIaGyfDNG /Z2OlrsjysKQTG3xfB0QZe9YTF1rDJaLgwtry6KcKwybBAz3MteUMfX/N9bu1Aqh nPx63bpkZXsd45dOqVWt/xnnWqNAXcP66oSXGIavSDBE57DLI+3yfo2Il8bXh4qR ndQFqPk+++DwYobhV8ASCmt+EcBsB1FHScmtf4Y1MzCXrbcgiCL/lO4GGlewvZ9S HfQXKPAFWTxseYb4eDrET8BIE6NpWewgsLM8Dmo+5U0KXu51FxfSw3kZBgo/frTS J+/ItHOeObIGOsKyXIv7OiGS1JlI6Z/d+9AJBFSNI5CJt8mCkWOE7Qzw2KECAwEA AaOCAlkwggJVMB0GA1UdDgQWBBSHTcHZI0GQmv7NhSBwfXrhUZH/RzAfBgNVHSME GDAWgBQGc6ioX9db33N0ZQYzVm5HD115KjAOBgNVHQ8BAf8EBAMCB4AwgZQGA1Ud HwSBjDCBiTCBhqCBg6CBgIZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby8yVVdqN1dNYUtSN2JHbmk1Ym9Sc2I2M282VXhMOUM3OXU1dWI2Tm5rUmdl Mi8wLzA2NzNBOEE4NUZENzVCREY3Mzc0NjUwNjMzNTY2RTQ3MEY1RDc5MkEuY3Js MHgGCCsGAQUFBwEBBGwwajBoBggrBgEFBQcwAoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvMDY3M0E4QTg1RkQ3NUJERjcz NzQ2NTA2MzM1NjZFNDcwRjVENzkyQS5jZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGK BggrBgEFBQcwC4Z+cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8y VVdqN1dNYUtSN2JHbmk1Ym9Sc2I2M282VXhMOUM3OXU1dWI2Tm5rUmdlMi8wLzA2 NzNBOEE4NUZENzVCREY3Mzc0NjUwNjMzNTY2RTQ3MEY1RDc5MkEubWZ0MBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAw BgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQB771lhiTavqBxyWrXEFCOEX9Jymull3/CY8K5t+lbB6BsgTRPu7C//jyxeF7ba kSvye8gXBYS3iI1NO15MbSbeAah0m4RcMjnXwm0hXreYhBs01b868Xtd7/jQB70p yglLpniHSI5/k/MhH9iCphaEaog18S0taoLKdw1Ckgb94NuZZ7V5PwYufhU8m7Mf OJPHvezSxIhYeMLWoFeGK7vHOzStZ4im+dZlKJER8tQjEsSZaETdFUdWfgvpdQEK r4o5W8H4fgu/CT71+vju4NSAzIVCJ+0B40/jApUcSW7aL1a/E3b2010jXFA+mVB6 jP7LteJ1gjlM3dcdaAYG9iN1 -----END CERTIFICATE-----Generated at Thu Apr 9 21:41:23 2026 by rpki-client