$ rpki-client -vvf rpki-repo.registro.br/repo/4pvH4MHZJZas4zHEgK2hMoy5gE5iQjdPTDp4EF96vecg/0/AA72ED85A93B5AABE6C7DF844AD99D16A90E14C8.mft File: AA72ED85A93B5AABE6C7DF844AD99D16A90E14C8.mft (raw, json) Hash identifier: UdRSXCr84gsMiXCViQ0wYTSI/ojcPNrSvb/DjIMD0oE= Subject key identifier: 93:3A:28:D2:5B:41:3E:1F:09:94:BD:90:6B:CA:19:50:FB:D5:50:68 Authority key identifier: AA:72:ED:85:A9:3B:5A:AB:E6:C7:DF:84:4A:D9:9D:16:A9:0E:14:C8 Certificate issuer: /CN=AA72ED85A93B5AABE6C7DF844AD99D16A90E14C8 Certificate serial: 43F9E03F99D310CC875491CE52594768923ABF9F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA72ED85A93B5AABE6C7DF844AD99D16A90E14C8.cer Subject info access: rsync://rpki-repo.registro.br/repo/4pvH4MHZJZas4zHEgK2hMoy5gE5iQjdPTDp4EF96vecg/0/AA72ED85A93B5AABE6C7DF844AD99D16A90E14C8.mft Manifest number: 011E Signing time: Wed 08 Apr 2026 21:05:00 +0000 Manifest this update: Wed 08 Apr 2026 21:00:00 +0000 Manifest next update: Thu 09 Apr 2026 22:28:00 +0000 Files and hashes: 1: AA72ED85A93B5AABE6C7DF844AD99D16A90E14C8.crl (hash: mv6FlD+nJTwA1CwdyYpHNCDdtIeYqvktXY14qmuUC50=) 2: 323830343a393539303a3a2f33322d3332203d3e20323734353330.roa (hash: ud8H+LPpJrRZjxw5rTInN+2D3gurLBaqifOfHqRbUko=) 3: 323830343a393539303a3a2f33322d3332203d3e20323632323837.roa (hash: cJEyc9GyTP/W9tTA5SfKcOBqQXJyoAW8IVefVuwCDF0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4pvH4MHZJZas4zHEgK2hMoy5gE5iQjdPTDp4EF96vecg/0/AA72ED85A93B5AABE6C7DF844AD99D16A90E14C8.crl rsync://rpki-repo.registro.br/repo/4pvH4MHZJZas4zHEgK2hMoy5gE5iQjdPTDp4EF96vecg/0/AA72ED85A93B5AABE6C7DF844AD99D16A90E14C8.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA72ED85A93B5AABE6C7DF844AD99D16A90E14C8.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 09 Apr 2026 22:28:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:f9:e0:3f:99:d3:10:cc:87:54:91:ce:52:59:47:68:92:3a:bf:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA72ED85A93B5AABE6C7DF844AD99D16A90E14C8 Validity Not Before: Apr 8 21:00:00 2026 GMT Not After : Apr 9 22:28:00 2026 GMT Subject: CN=933A28D25B413E1F0994BD906BCA1950FBD55068 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:22:b3:b5:9f:98:32:aa:0a:cc:8c:08:80:fa: e5:17:d7:dc:72:ce:ea:aa:2d:52:bb:ff:5e:cb:a6: 8e:60:c2:f3:8a:bf:38:18:0f:b3:0d:ff:35:b1:d5: db:69:30:9b:42:86:3c:cf:f4:ad:d0:9e:f2:3d:c9: d8:e2:ef:6b:a2:7f:c2:41:54:d2:f0:fd:43:42:7f: bc:df:06:00:92:1f:f8:54:3e:3a:0f:9e:ec:f8:66: 20:fa:eb:f2:11:63:7b:51:6a:a5:74:bd:b8:ef:f4: f2:6a:5e:b0:c8:70:c1:a0:fb:bd:5c:ed:4d:45:ca: 5c:7c:fb:4e:4b:a0:d3:66:7f:1f:42:eb:c1:e9:fc: ca:ba:1e:49:06:53:92:0b:c5:94:bf:4a:d4:7e:f7: 5c:0c:94:2b:8e:9b:22:bd:95:d8:22:a3:13:01:4a: b6:97:f6:1a:ce:89:01:0b:d8:0c:75:ce:fd:90:0a: 62:6b:00:f2:a2:2c:dd:e2:b6:80:b9:98:09:61:26: 80:7a:e4:27:ee:82:96:eb:cc:f3:dc:1a:93:2b:da: 33:f1:dd:fa:a4:f2:66:a7:c8:74:60:9d:db:66:cf: a9:cd:d5:c9:dc:ab:01:d1:42:7f:7e:ca:0d:6d:31: 28:c9:d8:ae:83:cf:20:41:aa:6e:94:e9:a0:54:28: 52:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:3A:28:D2:5B:41:3E:1F:09:94:BD:90:6B:CA:19:50:FB:D5:50:68 X509v3 Authority Key Identifier: keyid:AA:72:ED:85:A9:3B:5A:AB:E6:C7:DF:84:4A:D9:9D:16:A9:0E:14:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4pvH4MHZJZas4zHEgK2hMoy5gE5iQjdPTDp4EF96vecg/0/AA72ED85A93B5AABE6C7DF844AD99D16A90E14C8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA72ED85A93B5AABE6C7DF844AD99D16A90E14C8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4pvH4MHZJZas4zHEgK2hMoy5gE5iQjdPTDp4EF96vecg/0/AA72ED85A93B5AABE6C7DF844AD99D16A90E14C8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:94:a0:74:42:6c:64:b7:be:f9:6a:e4:00:d8:b2:f7:7a:dc: 7a:cc:c5:9d:38:d6:70:77:75:6a:2b:a3:1f:43:13:f7:e1:a4: e3:6a:b4:ed:cc:05:1b:76:7d:00:32:de:cc:8b:be:4b:ce:e4: 4b:e8:d4:6e:d9:de:92:30:bf:2b:fb:1e:6a:dc:ce:1b:ac:6b: f3:a9:f7:38:74:71:d5:3d:d2:84:dc:8b:60:21:5a:a4:c7:68: 71:56:f1:a8:e9:35:09:5f:13:9b:cd:d7:fb:12:b0:13:75:88: 2a:ed:50:8e:37:cb:10:ae:bb:82:38:ca:a0:f8:5f:bd:0d:ba: 93:b9:ee:0c:fa:fa:76:0f:49:df:47:cb:4b:0d:07:ff:45:da: 24:9e:f0:a9:a0:f5:81:28:bd:a0:c5:90:92:ba:fb:76:2d:39: 04:44:08:dd:91:3c:2d:0e:b0:b4:ae:98:75:7c:da:4b:58:2e: 2a:44:2f:64:84:3e:7d:7e:04:16:d6:1d:5a:26:e9:9b:b9:d5: 0b:33:d5:59:f4:ba:de:94:b6:61:98:1d:86:25:11:63:31:c4: ad:d2:9d:45:66:17:39:dd:e2:b7:5b:13:4e:6e:c7:ba:05:57: 76:a5:f0:2b:16:5e:ff:70:eb:99:62:74:b7:e4:12:9e:b9:e4: 2d:92:8e:d5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUQ/ngP5nTEMyHVJHOUllHaJI6v58wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUE3MkVEODVBOTNCNUFBQkU2QzdERjg0NEFEOTlEMTZB OTBFMTRDODAeFw0yNjA0MDgyMTAwMDBaFw0yNjA0MDkyMjI4MDBaMDMxMTAvBgNV BAMTKDkzM0EyOEQyNUI0MTNFMUYwOTk0QkQ5MDZCQ0ExOTUwRkJENTUwNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZIrO1n5gyqgrMjAiA+uUX19xy zuqqLVK7/17Lpo5gwvOKvzgYD7MN/zWx1dtpMJtChjzP9K3QnvI9ydji72uif8JB VNLw/UNCf7zfBgCSH/hUPjoPnuz4ZiD66/IRY3tRaqV0vbjv9PJqXrDIcMGg+71c 7U1Fylx8+05LoNNmfx9C68Hp/Mq6HkkGU5ILxZS/StR+91wMlCuOmyK9ldgioxMB SraX9hrOiQEL2Ax1zv2QCmJrAPKiLN3itoC5mAlhJoB65CfugpbrzPPcGpMr2jPx 3fqk8manyHRgndtmz6nN1cncqwHRQn9+yg1tMSjJ2K6DzyBBqm6U6aBUKFIhAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUkzoo0ltBPh8JlL2Qa8oZUPvVUGgwHwYDVR0j BBgwFoAUqnLthak7Wqvmx9+EStmdFqkOFMgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNHB2SDRNSFpKWmFzNHpIRWdLMmhNb3k1Z0U1aVFqZFBURHA0RUY5NnZl Y2cvMC9BQTcyRUQ4NUE5M0I1QUFCRTZDN0RGODQ0QUQ5OUQxNkE5MEUxNEM4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FBNzJFRDg1QTkzQjVBQUJF NkM3REY4NDRBRDk5RDE2QTkwRTE0QzguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NHB2SDRNSFpKWmFzNHpIRWdLMmhNb3k1Z0U1aVFqZFBURHA0RUY5NnZlY2cvMC9B QTcyRUQ4NUE5M0I1QUFCRTZDN0RGODQ0QUQ5OUQxNkE5MEUxNEM4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEABpSgdEJsZLe++WrkANiy93rceszFnTjWcHd1aiujH0MT9+Gk42q07cwFG3Z9 ADLezIu+S87kS+jUbtnekjC/K/seatzOG6xr86n3OHRx1T3ShNyLYCFapMdocVbx qOk1CV8Tm83X+xKwE3WIKu1QjjfLEK67gjjKoPhfvQ26k7nuDPr6dg9J30fLSw0H /0XaJJ7wqaD1gSi9oMWQkrr7di05BEQI3ZE8LQ6wtK6YdXzaS1guKkQvZIQ+fX4E FtYdWibpm7nVCzPVWfS63pS2YZgdhiURYzHErdKdRWYXOd3it1sTTm7HugVXdqXw KxZe/3DrmWJ0t+QSnrnkLZKO1Q== -----END CERTIFICATE-----Generated at Thu Apr 9 13:18:42 2026 by rpki-client