$ rpki-client -vvf rpki-repo.registro.br/repo/4oWon9ukj5YKgYfECdsH4rb97JUFpcX2tZF2qS6M9662/0/40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.mft File: 40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.mft (raw, json) Hash identifier: nASWnVle1BbIAFRio3aU0NQ88xfRzhCt4QxvvxmbWn8= Subject key identifier: 41:4B:62:10:0D:B4:7A:F9:6B:57:E9:43:16:0E:A8:03:F2:F2:76:3B Authority key identifier: 40:BB:14:A2:FD:8B:81:10:30:42:BF:32:FA:C9:B2:D9:0A:CF:8A:FE Certificate issuer: /CN=40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE Certificate serial: 18501225A75A8F7CF029A8866CF54D0FFDF1D07C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.cer Subject info access: rsync://rpki-repo.registro.br/repo/4oWon9ukj5YKgYfECdsH4rb97JUFpcX2tZF2qS6M9662/0/40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.mft Manifest number: 01CC Signing time: Wed 08 Apr 2026 22:35:48 +0000 Manifest this update: Wed 08 Apr 2026 22:30:48 +0000 Manifest next update: Fri 10 Apr 2026 00:05:48 +0000 Files and hashes: 1: 34352e3138392e33322e302f32342d3234203d3e20323734373633.roa (hash: dVjcviFWXYeWBqHTTFPwdaZwhjw7qRSb+GF5EQiZphc=) 2: 34352e3138392e33332e302f32342d3234203d3e20323734373633.roa (hash: 94RYiufY7USp0r1Hhmx7uAPsAj5eXGZhHiDHteIZcag=) 3: 34352e3138392e33342e302f32342d3234203d3e20323734373633.roa (hash: eKMv22IVOxxguiqksCRMXS9NAY1MhABH5nL+QkbIqCg=) 4: 34352e3138392e33352e302f32342d3234203d3e20323734373633.roa (hash: GUnuNUq25OqK8U34niiFHmYG8FgYW5BaLNMMEqea2oU=) 5: 40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.crl (hash: AmIhiEB8A+PP+kz0sfUqfx5DnAluITONbhFWx78ZzxU=) 6: 323830343a393333343a666630303a3a2f34302d3430203d3e20323734373633.roa (hash: Y/91UtAKoquFsWubq6LOKvQldnEvym4LP9Ysec9nxMw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4oWon9ukj5YKgYfECdsH4rb97JUFpcX2tZF2qS6M9662/0/40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.crl rsync://rpki-repo.registro.br/repo/4oWon9ukj5YKgYfECdsH4rb97JUFpcX2tZF2qS6M9662/0/40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 10 Apr 2026 00:05:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:50:12:25:a7:5a:8f:7c:f0:29:a8:86:6c:f5:4d:0f:fd:f1:d0:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE Validity Not Before: Apr 8 22:30:48 2026 GMT Not After : Apr 10 00:05:48 2026 GMT Subject: CN=414B62100DB47AF96B57E943160EA803F2F2763B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:2b:78:29:dd:93:eb:6b:21:0d:9c:f8:1c:4e: c1:f4:ed:3b:26:fd:6e:a0:ab:e0:dc:06:19:c9:5f: fc:37:07:03:fe:0c:4c:e2:db:50:9f:af:b4:f6:45: 06:47:60:33:a5:fd:36:17:24:27:7d:a3:ac:d3:d2: ec:34:81:ee:b2:de:3e:4d:51:02:b4:74:3c:14:d8: 86:64:2d:75:76:fd:69:94:3d:e2:ec:64:3e:d2:ac: 92:4a:c3:e3:5b:f7:17:76:9f:8c:f8:0a:0b:34:ed: 27:d7:20:a1:ce:52:72:28:43:f5:9e:9e:e6:0b:4e: 45:25:7b:2d:1a:1d:5a:47:5e:5f:1d:1e:c8:0b:46: 30:d5:77:b7:02:c2:23:8b:a8:43:78:fc:01:13:91: 4b:f7:1c:52:41:3d:de:fc:64:2b:e2:9e:41:ea:a9: 02:7a:11:1a:bd:74:9b:74:af:6d:fe:b2:8c:c9:ca: ae:2c:22:0e:e7:98:15:20:08:bb:33:90:35:b1:a9: f0:97:64:18:3b:6e:19:29:1f:87:7a:d5:6f:4f:85: e1:60:af:e4:e6:3c:3a:40:a6:bd:c7:a9:d5:77:61: 8e:19:31:ae:58:78:b5:96:81:5d:38:56:02:f5:19: 5e:02:ec:3a:68:a0:85:86:27:7f:be:30:8e:25:8b: f9:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:4B:62:10:0D:B4:7A:F9:6B:57:E9:43:16:0E:A8:03:F2:F2:76:3B X509v3 Authority Key Identifier: keyid:40:BB:14:A2:FD:8B:81:10:30:42:BF:32:FA:C9:B2:D9:0A:CF:8A:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4oWon9ukj5YKgYfECdsH4rb97JUFpcX2tZF2qS6M9662/0/40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4oWon9ukj5YKgYfECdsH4rb97JUFpcX2tZF2qS6M9662/0/40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:ad:e8:9c:15:fe:4f:0e:bb:0b:1a:e5:d6:06:0f:9c:97:97: 08:64:a7:7a:80:df:8f:bc:9a:56:d7:65:20:da:9a:64:e6:13: 3c:bf:41:53:9f:32:dd:9a:28:d9:a8:22:51:98:91:79:e8:8a: f3:40:f6:fc:f1:12:a2:be:e1:83:f8:8c:a4:5f:36:ab:89:ed: 7a:89:92:6e:33:7f:a4:b6:d9:f6:bb:46:ea:3c:c5:28:2c:c7: 08:c1:94:9f:20:a8:44:e7:aa:b1:76:2d:38:99:d7:9e:49:f8: 39:4e:ff:f5:ac:ac:9e:b2:39:fa:5e:42:5d:49:83:fa:d1:7b: 85:84:8e:8d:ba:80:58:06:89:f1:51:99:f9:6b:91:69:7b:d3: 19:4e:07:66:64:d1:03:11:f3:0d:5d:a6:b0:3d:a6:38:7c:a2: 1c:6c:28:39:86:76:82:92:d8:9a:ec:ab:b6:ca:00:c6:cc:79: fd:b8:0d:5e:a1:e8:94:82:10:ea:e8:7d:3d:fd:80:61:bc:b8: cd:68:37:43:8d:1d:f0:1f:a4:da:f9:f3:19:97:ed:8a:d1:b4: 2e:b2:9f:5d:86:2c:8c:de:fa:85:ba:3b:61:59:34:4d:7c:02: 16:66:8b:6e:c2:91:d7:37:d9:95:85:20:a9:84:c3:87:c1:39: 49:09:24:f2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUGFASJadaj3zwKaiGbPVND/3x0HwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDBCQjE0QTJGRDhCODExMDMwNDJCRjMyRkFDOUIyRDkw QUNGOEFGRTAeFw0yNjA0MDgyMjMwNDhaFw0yNjA0MTAwMDA1NDhaMDMxMTAvBgNV BAMTKDQxNEI2MjEwMERCNDdBRjk2QjU3RTk0MzE2MEVBODAzRjJGMjc2M0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoK3gp3ZPrayENnPgcTsH07Tsm /W6gq+DcBhnJX/w3BwP+DEzi21Cfr7T2RQZHYDOl/TYXJCd9o6zT0uw0ge6y3j5N UQK0dDwU2IZkLXV2/WmUPeLsZD7SrJJKw+Nb9xd2n4z4Cgs07SfXIKHOUnIoQ/We nuYLTkUley0aHVpHXl8dHsgLRjDVd7cCwiOLqEN4/AETkUv3HFJBPd78ZCvinkHq qQJ6ERq9dJt0r23+sozJyq4sIg7nmBUgCLszkDWxqfCXZBg7bhkpH4d61W9PheFg r+TmPDpApr3HqdV3YY4ZMa5YeLWWgV04VgL1GV4C7DpooIWGJ3++MI4li/lFAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUQUtiEA20evlrV+lDFg6oA/LydjswHwYDVR0j BBgwFoAUQLsUov2LgRAwQr8y+smy2QrPiv4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNG9Xb245dWtqNVlLZ1lmRUNkc0g0cmI5N0pVRnBjWDJ0WkYycVM2TTk2 NjIvMC80MEJCMTRBMkZEOEI4MTEwMzA0MkJGMzJGQUM5QjJEOTBBQ0Y4QUZFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQwQkIxNEEyRkQ4QjgxMTAz MDQyQkYzMkZBQzlCMkQ5MEFDRjhBRkUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NG9Xb245dWtqNVlLZ1lmRUNkc0g0cmI5N0pVRnBjWDJ0WkYycVM2TTk2NjIvMC80 MEJCMTRBMkZEOEI4MTEwMzA0MkJGMzJGQUM5QjJEOTBBQ0Y4QUZFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEApa3onBX+Tw67Cxrl1gYPnJeXCGSneoDfj7yaVtdlINqaZOYTPL9BU58y3Zoo 2agiUZiReeiK80D2/PESor7hg/iMpF82q4nteomSbjN/pLbZ9rtG6jzFKCzHCMGU nyCoROeqsXYtOJnXnkn4OU7/9aysnrI5+l5CXUmD+tF7hYSOjbqAWAaJ8VGZ+WuR aXvTGU4HZmTRAxHzDV2msD2mOHyiHGwoOYZ2gpLYmuyrtsoAxsx5/bgNXqHolIIQ 6uh9Pf2AYby4zWg3Q40d8B+k2vnzGZftitG0LrKfXYYsjN76hbo7YVk0TXwCFmaL bsKR1zfZlYUgqYTDh8E5SQkk8g== -----END CERTIFICATE-----Generated at Thu Apr 9 14:14:06 2026 by rpki-client