$ rpki-client -vvf rpki-repo.registro.br/repo/4xWzs6iszmJqhPTfHpjACsj4w57qDxdMUSViuJkLfF7U/0/B9CBAB6E2B98D7CF3F3AEE9EB8BEEDE0EE999341.mft File: B9CBAB6E2B98D7CF3F3AEE9EB8BEEDE0EE999341.mft (raw, json) Hash identifier: jt/SRz6RXPo4ggXRTm8rq/VO/8zpUTBZxChneU5NGzY= Subject key identifier: 34:C2:4B:1A:FA:3E:59:8C:75:9D:63:E6:4C:D2:27:5F:74:1D:78:B3 Authority key identifier: B9:CB:AB:6E:2B:98:D7:CF:3F:3A:EE:9E:B8:BE:ED:E0:EE:99:93:41 Certificate issuer: /CN=B9CBAB6E2B98D7CF3F3AEE9EB8BEEDE0EE999341 Certificate serial: 27CB15085C5CB065A1CF7AAB06D6AA5FBC483610 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9CBAB6E2B98D7CF3F3AEE9EB8BEEDE0EE999341.cer Subject info access: rsync://rpki-repo.registro.br/repo/4xWzs6iszmJqhPTfHpjACsj4w57qDxdMUSViuJkLfF7U/0/B9CBAB6E2B98D7CF3F3AEE9EB8BEEDE0EE999341.mft Manifest number: 0135 Signing time: Thu 09 Apr 2026 01:46:06 +0000 Manifest this update: Thu 09 Apr 2026 01:41:06 +0000 Manifest next update: Fri 10 Apr 2026 03:14:06 +0000 Files and hashes: 1: B9CBAB6E2B98D7CF3F3AEE9EB8BEEDE0EE999341.crl (hash: ND4uU73Q1nT0JDo/11fE1ySXlhPv2wX7p8SPcg5duNY=) 2: 323830343a393437343a3a2f33322d3334203d3e20323734383433.roa (hash: LGKOYiD6Tp7ttJ6lg6hcYTjD8Cvq9uUvcrgbHV50Q2w=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4xWzs6iszmJqhPTfHpjACsj4w57qDxdMUSViuJkLfF7U/0/B9CBAB6E2B98D7CF3F3AEE9EB8BEEDE0EE999341.crl rsync://rpki-repo.registro.br/repo/4xWzs6iszmJqhPTfHpjACsj4w57qDxdMUSViuJkLfF7U/0/B9CBAB6E2B98D7CF3F3AEE9EB8BEEDE0EE999341.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9CBAB6E2B98D7CF3F3AEE9EB8BEEDE0EE999341.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 10 Apr 2026 03:14:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:cb:15:08:5c:5c:b0:65:a1:cf:7a:ab:06:d6:aa:5f:bc:48:36:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B9CBAB6E2B98D7CF3F3AEE9EB8BEEDE0EE999341 Validity Not Before: Apr 9 01:41:06 2026 GMT Not After : Apr 10 03:14:06 2026 GMT Subject: CN=34C24B1AFA3E598C759D63E64CD2275F741D78B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:e1:51:4f:22:61:91:2a:3c:eb:1e:58:8d:c3: 5b:78:52:1b:5f:15:c0:0c:12:71:82:e7:4f:ad:c6: 79:f1:c4:57:c5:b3:36:34:1a:76:f4:6e:11:bd:78: 83:60:71:d5:b7:40:34:93:67:a1:01:89:1d:85:fa: b8:f2:a6:a0:a3:ea:27:4c:08:aa:8f:b6:14:44:8e: a0:44:fc:17:9f:bb:89:70:6d:7d:63:55:9f:2e:eb: 98:c0:fe:63:22:8d:3d:c1:5b:10:5b:c3:8c:3b:11: ec:5e:30:26:1c:01:8c:bd:3b:00:cb:a8:92:7b:00: 18:07:47:ed:cc:07:3a:b2:26:c9:41:75:c0:d3:f9: de:fb:5e:9c:90:f8:9c:a6:d7:7a:80:76:11:17:d9: 83:6c:b1:85:10:85:6f:c9:f8:73:06:f5:23:33:2d: eb:8a:c4:ab:e8:55:f8:64:2e:17:38:47:ca:00:cb: 4b:19:b7:fa:42:91:19:55:15:a1:02:58:40:6c:68: 91:d2:19:12:5a:7e:a5:18:b9:f9:08:55:df:97:6b: bb:04:dd:ff:9f:cf:ae:79:f1:87:f5:c6:3c:a9:4a: 4f:ab:6a:c9:a5:d6:ea:aa:15:b9:ea:fb:4e:83:af: 63:e7:45:8f:d8:74:54:d7:af:b9:cd:39:ec:b8:13: 2c:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:C2:4B:1A:FA:3E:59:8C:75:9D:63:E6:4C:D2:27:5F:74:1D:78:B3 X509v3 Authority Key Identifier: keyid:B9:CB:AB:6E:2B:98:D7:CF:3F:3A:EE:9E:B8:BE:ED:E0:EE:99:93:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4xWzs6iszmJqhPTfHpjACsj4w57qDxdMUSViuJkLfF7U/0/B9CBAB6E2B98D7CF3F3AEE9EB8BEEDE0EE999341.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9CBAB6E2B98D7CF3F3AEE9EB8BEEDE0EE999341.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xWzs6iszmJqhPTfHpjACsj4w57qDxdMUSViuJkLfF7U/0/B9CBAB6E2B98D7CF3F3AEE9EB8BEEDE0EE999341.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:e4:b5:10:9d:ac:59:a7:ca:8c:e3:4b:6f:fc:6b:28:c2:96: 59:fd:39:37:c3:b7:4b:bc:29:2f:7a:2c:ec:06:87:52:81:9e: 70:dd:ec:b6:fe:bf:ae:c4:e1:58:73:8f:57:cc:b2:fa:8e:3a: 8e:fa:1f:9f:47:25:e3:bb:a6:9e:5b:39:b8:d0:d3:50:eb:d9: 07:cd:7c:55:93:25:07:6b:7a:a1:0e:9b:e9:eb:bb:2c:b5:5d: 10:71:33:30:c2:7a:fe:dd:c2:69:dc:e4:bd:fb:be:68:b7:39: 05:74:5f:7d:19:ba:74:3d:4b:b8:98:d1:ff:77:dd:24:21:11: 50:eb:2c:e4:be:66:9c:7a:2b:46:da:c2:22:4c:9f:5e:a8:9a: 01:06:6e:12:92:a0:39:d4:92:36:3f:3d:72:35:d7:c6:64:c0: 25:a9:5a:50:c6:84:54:cb:c0:8f:93:e2:ae:4d:c6:ed:5c:59: 06:80:60:cc:a3:e6:cb:d0:78:3a:65:f7:ef:5f:47:de:f4:36: 10:34:ca:b9:84:43:89:12:0f:d7:8b:81:92:33:d6:ad:10:8f: 0b:de:9b:a2:22:27:cf:d7:c4:89:bf:38:69:4f:fd:61:2e:1c: 94:58:bd:a7:22:b9:56:e7:84:5b:50:f0:fb:4c:70:2b:bd:d8: c3:93:d7:c7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUJ8sVCFxcsGWhz3qrBtaqX7xINhAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjlDQkFCNkUyQjk4RDdDRjNGM0FFRTlFQjhCRUVERTBF RTk5OTM0MTAeFw0yNjA0MDkwMTQxMDZaFw0yNjA0MTAwMzE0MDZaMDMxMTAvBgNV BAMTKDM0QzI0QjFBRkEzRTU5OEM3NTlENjNFNjRDRDIyNzVGNzQxRDc4QjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP4VFPImGRKjzrHliNw1t4Uhtf FcAMEnGC50+txnnxxFfFszY0Gnb0bhG9eINgcdW3QDSTZ6EBiR2F+rjypqCj6idM CKqPthREjqBE/Befu4lwbX1jVZ8u65jA/mMijT3BWxBbw4w7EexeMCYcAYy9OwDL qJJ7ABgHR+3MBzqyJslBdcDT+d77XpyQ+Jym13qAdhEX2YNssYUQhW/J+HMG9SMz LeuKxKvoVfhkLhc4R8oAy0sZt/pCkRlVFaECWEBsaJHSGRJafqUYufkIVd+Xa7sE 3f+fz6558Yf1xjypSk+rasml1uqqFbnq+06Dr2PnRY/YdFTXr7nNOey4EyztAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUNMJLGvo+WYx1nWPmTNInX3QdeLMwHwYDVR0j BBgwFoAUucurbiuY188/Ou6euL7t4O6Zk0EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNHhXenM2aXN6bUpxaFBUZkhwakFDc2o0dzU3cUR4ZE1VU1ZpdUprTGZG N1UvMC9COUNCQUI2RTJCOThEN0NGM0YzQUVFOUVCOEJFRURFMEVFOTk5MzQxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I5Q0JBQjZFMkI5OEQ3Q0Yz RjNBRUU5RUI4QkVFREUwRUU5OTkzNDEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NHhXenM2aXN6bUpxaFBUZkhwakFDc2o0dzU3cUR4ZE1VU1ZpdUprTGZGN1UvMC9C OUNCQUI2RTJCOThEN0NGM0YzQUVFOUVCOEJFRURFMEVFOTk5MzQxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcOS1EJ2sWafKjONLb/xrKMKWWf05N8O3S7wpL3os7AaHUoGecN3stv6/rsTh WHOPV8yy+o46jvofn0cl47umnls5uNDTUOvZB818VZMlB2t6oQ6b6eu7LLVdEHEz MMJ6/t3Cadzkvfu+aLc5BXRffRm6dD1LuJjR/3fdJCERUOss5L5mnHorRtrCIkyf XqiaAQZuEpKgOdSSNj89cjXXxmTAJalaUMaEVMvAj5Pirk3G7VxZBoBgzKPmy9B4 OmX3719H3vQ2EDTKuYRDiRIP14uBkjPWrRCPC96boiInz9fEib84aU/9YS4clFi9 pyK5VueEW1Dw+0xwK73Yw5PXxw== -----END CERTIFICATE-----Generated at Thu Apr 9 13:02:35 2026 by rpki-client