$ rpki-client -vvf rpki-repo.registro.br/repo/5T3thFF2xH21QKA7skKqFf66ZKKbAS4YXN9cnKpmgG97/0/AA07082443E431309BD477FD4F8A3F63A5BB13D3.mft File: AA07082443E431309BD477FD4F8A3F63A5BB13D3.mft (raw, json) Hash identifier: 75qAiyKeJnaVASCMJmzfZQL69LGG/xDTloeN3z3JD/o= Subject key identifier: 04:35:28:A5:FB:1F:76:E4:9F:8C:59:4C:C9:03:62:10:88:41:31:0B Authority key identifier: AA:07:08:24:43:E4:31:30:9B:D4:77:FD:4F:8A:3F:63:A5:BB:13:D3 Certificate issuer: /CN=AA07082443E431309BD477FD4F8A3F63A5BB13D3 Certificate serial: 58704E005C0D3AB82C27BD1937D04F28237A45B1 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA07082443E431309BD477FD4F8A3F63A5BB13D3.cer Subject info access: rsync://rpki-repo.registro.br/repo/5T3thFF2xH21QKA7skKqFf66ZKKbAS4YXN9cnKpmgG97/0/AA07082443E431309BD477FD4F8A3F63A5BB13D3.mft Manifest number: 34 Signing time: Thu 09 Apr 2026 14:47:27 +0000 Manifest this update: Thu 09 Apr 2026 14:42:27 +0000 Manifest next update: Fri 10 Apr 2026 18:07:27 +0000 Files and hashes: 1: 323830343a353838383a3a2f33322d313238203d3e20323638313330.roa (hash: y2c0fiI2pPIs77OHnowcOc9Y+55k+qX78RrRuRyb4Xw=) 2: 34352e3136392e3230382e302f32322d3332203d3e20323638313330.roa (hash: Z44+f/2iPWEpELCBV+JBpgpxiLmZoO+2BjgWi9KEI1U=) 3: AA07082443E431309BD477FD4F8A3F63A5BB13D3.crl (hash: v3FAExan8xgdxcVaZNEMM5vz+jNHQNROf7nmKRSa0eM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5T3thFF2xH21QKA7skKqFf66ZKKbAS4YXN9cnKpmgG97/0/AA07082443E431309BD477FD4F8A3F63A5BB13D3.crl rsync://rpki-repo.registro.br/repo/5T3thFF2xH21QKA7skKqFf66ZKKbAS4YXN9cnKpmgG97/0/AA07082443E431309BD477FD4F8A3F63A5BB13D3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA07082443E431309BD477FD4F8A3F63A5BB13D3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 10 Apr 2026 17:06:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:70:4e:00:5c:0d:3a:b8:2c:27:bd:19:37:d0:4f:28:23:7a:45:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA07082443E431309BD477FD4F8A3F63A5BB13D3 Validity Not Before: Apr 9 14:42:27 2026 GMT Not After : Apr 10 18:07:27 2026 GMT Subject: CN=043528A5FB1F76E49F8C594CC90362108841310B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:a8:63:b4:79:a3:80:10:71:7b:10:be:7b:2a: 70:1f:a3:f0:a6:a2:94:06:0c:8c:36:6b:4d:7d:63: 98:a5:a6:20:86:b4:24:0d:ff:c3:02:e6:e6:68:ff: 0d:fa:a3:6d:3e:d7:cf:c6:4e:a0:dc:9f:fe:2a:ad: b8:e4:d9:e6:17:9b:41:60:85:5d:84:b8:fd:f9:a6: 86:92:0b:ca:b8:46:f6:99:db:2f:d9:6b:c4:02:10: 5c:3a:95:27:46:3a:52:5c:f5:ed:00:1f:83:61:11: 9a:b6:23:69:f7:d1:c5:ec:0c:90:72:68:00:89:6d: 39:63:16:ff:ba:94:45:33:96:cb:3f:3f:80:0c:a7: de:7d:aa:d7:e7:af:5a:60:27:3e:12:e6:aa:5e:34: 19:2e:18:51:a8:34:f2:e5:19:63:eb:c6:8a:38:d3: 4c:fa:d1:b4:46:05:4a:c6:bc:e5:71:72:92:08:82: 05:e7:94:b9:5b:5b:f1:9d:65:20:a3:45:dc:a5:25: 29:6d:3e:00:8e:79:fc:96:19:88:a2:ce:e8:c9:d5: b0:ae:f9:93:3a:50:5a:2d:8a:6a:6e:04:59:69:67: 82:61:8c:35:93:11:ef:ef:06:71:93:ae:fa:29:86: 88:29:29:3c:77:9f:91:c3:16:fa:4d:41:c0:c1:4b: 19:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:35:28:A5:FB:1F:76:E4:9F:8C:59:4C:C9:03:62:10:88:41:31:0B X509v3 Authority Key Identifier: keyid:AA:07:08:24:43:E4:31:30:9B:D4:77:FD:4F:8A:3F:63:A5:BB:13:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5T3thFF2xH21QKA7skKqFf66ZKKbAS4YXN9cnKpmgG97/0/AA07082443E431309BD477FD4F8A3F63A5BB13D3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA07082443E431309BD477FD4F8A3F63A5BB13D3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5T3thFF2xH21QKA7skKqFf66ZKKbAS4YXN9cnKpmgG97/0/AA07082443E431309BD477FD4F8A3F63A5BB13D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:18:51:6f:8e:d8:e1:cf:88:b4:38:eb:2e:38:75:06:0f:aa: 7f:ec:f0:81:8e:f8:90:31:b3:28:db:1f:c4:81:a3:9b:1e:07: f8:87:18:86:2e:d7:3b:95:e7:a9:62:61:5d:53:92:43:ad:e8: 97:1a:23:a7:28:ec:87:42:ce:33:b2:cb:78:02:3d:5d:3e:5f: 9e:3f:73:d7:48:a2:17:a2:92:4c:d9:df:66:8a:39:c3:79:3b: 10:90:e2:f3:5c:4c:0a:dc:aa:5e:38:01:c5:46:71:b4:fe:ef: 25:bd:83:06:20:23:fe:9f:ae:47:ce:f3:5a:9d:cc:8a:7e:23: 93:9b:dd:93:b4:f6:c1:dc:d0:7e:31:ed:bd:c5:b1:8d:e7:b8: 1b:21:ad:c2:ca:9e:52:25:6c:70:9c:41:cd:c0:9f:0f:4c:b1: b9:d9:7b:6e:37:ba:81:91:9f:3b:06:54:72:02:67:7e:d2:7a: 1e:5b:3c:93:15:18:86:dd:58:a2:cd:a6:73:d7:62:01:92:1e: 4f:a7:4a:0f:eb:31:a2:1c:d3:80:50:db:97:ae:18:e2:57:45: 18:ed:67:1c:fe:ed:87:ee:e8:38:14:12:c9:6a:1c:e0:9e:bc: b1:10:b7:22:e7:27:f3:5e:85:78:6a:1d:18:c6:c0:35:7c:d0: 2a:78:a4:13 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUWHBOAFwNOrgsJ70ZN9BPKCN6RbEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUEwNzA4MjQ0M0U0MzEzMDlCRDQ3N0ZENEY4QTNGNjNB NUJCMTNEMzAeFw0yNjA0MDkxNDQyMjdaFw0yNjA0MTAxODA3MjdaMDMxMTAvBgNV BAMTKDA0MzUyOEE1RkIxRjc2RTQ5RjhDNTk0Q0M5MDM2MjEwODg0MTMxMEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdqGO0eaOAEHF7EL57KnAfo/Cm opQGDIw2a019Y5ilpiCGtCQN/8MC5uZo/w36o20+18/GTqDcn/4qrbjk2eYXm0Fg hV2EuP35poaSC8q4RvaZ2y/Za8QCEFw6lSdGOlJc9e0AH4NhEZq2I2n30cXsDJBy aACJbTljFv+6lEUzlss/P4AMp959qtfnr1pgJz4S5qpeNBkuGFGoNPLlGWPrxoo4 00z60bRGBUrGvOVxcpIIggXnlLlbW/GdZSCjRdylJSltPgCOefyWGYiizujJ1bCu +ZM6UFotimpuBFlpZ4JhjDWTEe/vBnGTrvophogpKTx3n5HDFvpNQcDBSxmPAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUBDUopfsfduSfjFlMyQNiEIhBMQswHwYDVR0j BBgwFoAUqgcIJEPkMTCb1Hf9T4o/Y6W7E9MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNVQzdGhGRjJ4SDIxUUtBN3NrS3FGZjY2WktLYkFTNFlYTjljbktwbWdH OTcvMC9BQTA3MDgyNDQzRTQzMTMwOUJENDc3RkQ0RjhBM0Y2M0E1QkIxM0QzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FBMDcwODI0NDNFNDMxMzA5 QkQ0NzdGRDRGOEEzRjYzQTVCQjEzRDMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NVQzdGhGRjJ4SDIxUUtBN3NrS3FGZjY2WktLYkFTNFlYTjljbktwbWdHOTcvMC9B QTA3MDgyNDQzRTQzMTMwOUJENDc3RkQ0RjhBM0Y2M0E1QkIxM0QzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXRhRb47Y4c+ItDjrLjh1Bg+qf+zwgY74kDGzKNsfxIGjmx4H+IcYhi7XO5Xn qWJhXVOSQ63olxojpyjsh0LOM7LLeAI9XT5fnj9z10iiF6KSTNnfZoo5w3k7EJDi 81xMCtyqXjgBxUZxtP7vJb2DBiAj/p+uR87zWp3Min4jk5vdk7T2wdzQfjHtvcWx jee4GyGtwsqeUiVscJxBzcCfD0yxudl7bje6gZGfOwZUcgJnftJ6Hls8kxUYht1Y os2mc9diAZIeT6dKD+sxohzTgFDbl64Y4ldFGO1nHP7th+7oOBQSyWoc4J68sRC3 Iucn816FeGodGMbANXzQKnikEw== -----END CERTIFICATE-----Generated at Thu Apr 9 17:57:34 2026 by rpki-client