$ rpki-client -vvf rpki-repo.registro.br/repo/8FvPpppVPKtcjUzomxrDzARnKKPC3v1YgEganxE9CiJm/0/335754947982AA4BA9BAB5FBEDF022101E9E7C37.mft File: 335754947982AA4BA9BAB5FBEDF022101E9E7C37.mft (raw, json) Hash identifier: ZjLc0UYWJJhdz2XzVIj8U+tg8AKBYeYoLRP9QKy7wEA= Subject key identifier: 2D:D4:87:2C:8C:F0:2E:AB:2F:81:0F:A8:58:A8:8B:9A:7C:90:6C:58 Authority key identifier: 33:57:54:94:79:82:AA:4B:A9:BA:B5:FB:ED:F0:22:10:1E:9E:7C:37 Certificate issuer: /CN=335754947982AA4BA9BAB5FBEDF022101E9E7C37 Certificate serial: 1DF09FD1F8ED776A54F20EAD6101121A4B6E7274 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/335754947982AA4BA9BAB5FBEDF022101E9E7C37.cer Subject info access: rsync://rpki-repo.registro.br/repo/8FvPpppVPKtcjUzomxrDzARnKKPC3v1YgEganxE9CiJm/0/335754947982AA4BA9BAB5FBEDF022101E9E7C37.mft Manifest number: 0247 Signing time: Thu 09 Apr 2026 04:18:34 +0000 Manifest this update: Thu 09 Apr 2026 04:13:34 +0000 Manifest next update: Fri 10 Apr 2026 04:45:34 +0000 Files and hashes: 1: 323830343a313439383a3a2f33322d3333203d3e20323633333339.roa (hash: lrt9m9KHUbukNCn8dOZrytK++O1RZkIyXXUxJyBraJg=) 2: 335754947982AA4BA9BAB5FBEDF022101E9E7C37.crl (hash: rNyP3kTodyPUNvUzqLVbPlwNdXiuv9NSOPpCvYRNnOg=) 3: 3139312e33362e3139322e302f32302d3234203d3e20323633333339.roa (hash: 7K4RELyhHAgbM01PxPDvy4ovOmsceAf3XF6/mLBemfE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8FvPpppVPKtcjUzomxrDzARnKKPC3v1YgEganxE9CiJm/0/335754947982AA4BA9BAB5FBEDF022101E9E7C37.crl rsync://rpki-repo.registro.br/repo/8FvPpppVPKtcjUzomxrDzARnKKPC3v1YgEganxE9CiJm/0/335754947982AA4BA9BAB5FBEDF022101E9E7C37.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/335754947982AA4BA9BAB5FBEDF022101E9E7C37.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 10 Apr 2026 04:45:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:f0:9f:d1:f8:ed:77:6a:54:f2:0e:ad:61:01:12:1a:4b:6e:72:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=335754947982AA4BA9BAB5FBEDF022101E9E7C37 Validity Not Before: Apr 9 04:13:34 2026 GMT Not After : Apr 10 04:45:34 2026 GMT Subject: CN=2DD4872C8CF02EAB2F810FA858A88B9A7C906C58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:ab:10:43:89:93:cd:9b:73:7f:27:1e:07:42: 86:2f:81:72:ca:87:a7:35:1f:b1:05:b1:81:18:b0: 58:56:77:63:47:93:b6:39:16:7c:cd:b8:41:32:a8: a9:78:6a:1a:36:3d:32:e8:6a:3c:cb:74:d3:d8:84: b9:41:d3:a9:97:6d:17:c8:33:1a:70:0c:7c:9c:1e: e6:53:ab:99:cc:65:86:3e:97:3d:f1:7e:d9:be:74: 97:2d:f3:e9:4c:02:08:d3:af:10:46:90:cc:ff:68: 18:6b:9a:10:97:9b:d4:c2:2a:e3:9c:39:05:4d:cc: 8c:d0:af:c3:5d:ae:07:b2:77:f0:17:46:8c:e6:c1: a6:78:b0:83:30:89:f8:0e:cc:05:0d:6f:ea:20:45: 76:7a:c6:5a:7b:df:53:db:3a:34:4e:ae:13:ec:21: 0b:1e:b2:d1:a9:8f:57:51:f9:e4:21:d8:23:82:dc: 18:a0:b0:4a:bf:76:4f:45:48:5d:01:24:ad:b6:a8: c9:8f:84:26:c2:8b:5b:e8:01:2f:3d:5d:d0:fe:96: 6b:58:2a:56:ae:e9:82:27:49:89:a8:59:b6:30:65: b5:ea:d1:aa:46:22:8f:86:cb:25:34:c2:e6:56:6f: c5:41:7b:79:01:4f:03:33:e3:9b:da:4e:8f:1d:62: 13:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:D4:87:2C:8C:F0:2E:AB:2F:81:0F:A8:58:A8:8B:9A:7C:90:6C:58 X509v3 Authority Key Identifier: keyid:33:57:54:94:79:82:AA:4B:A9:BA:B5:FB:ED:F0:22:10:1E:9E:7C:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8FvPpppVPKtcjUzomxrDzARnKKPC3v1YgEganxE9CiJm/0/335754947982AA4BA9BAB5FBEDF022101E9E7C37.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/335754947982AA4BA9BAB5FBEDF022101E9E7C37.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8FvPpppVPKtcjUzomxrDzARnKKPC3v1YgEganxE9CiJm/0/335754947982AA4BA9BAB5FBEDF022101E9E7C37.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:a5:92:b1:b5:31:6c:e9:3a:85:db:b3:58:e3:2e:83:6d:e2: d6:1d:71:f2:39:1a:5d:60:eb:b5:90:f5:ae:b2:51:68:88:08: 7e:50:9e:28:64:27:4d:e6:ff:67:5d:e3:d2:b3:42:2b:56:78: a9:fb:20:8c:7e:5d:72:2c:fd:41:df:d7:8f:df:7f:5d:52:e6: ec:5d:4e:e0:fe:a4:73:6f:4d:72:5a:19:25:db:f4:5c:7a:68: df:91:ad:04:d9:05:f6:d7:da:13:fb:e3:04:21:79:5b:8a:f8: e8:96:5f:13:ba:d4:6e:4d:e0:d1:1e:b2:2d:cf:34:92:5c:5b: 4b:00:80:01:19:eb:2e:b1:79:7a:7d:04:66:e2:b7:1a:5b:fc: 29:e1:55:3f:d2:91:a4:a1:83:55:9b:0a:39:da:83:18:f4:cd: 60:e0:c1:82:0f:a4:83:31:f5:b0:1e:6a:a6:c8:9f:79:9d:64: 94:26:1a:f8:f9:4d:c7:de:59:5c:da:26:54:dd:dc:4f:9d:60: 5d:2c:cb:92:0a:ad:5c:af:78:6a:11:34:4d:57:69:c6:78:46: 1c:c2:c6:e1:34:22:0b:b5:d2:95:ab:c6:cc:b0:ee:1d:a2:ec: 4d:47:ae:7f:5c:e6:c5:eb:06:96:eb:0a:3f:fe:3b:97:3b:38: 5d:5b:f4:07 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUHfCf0fjtd2pU8g6tYQESGktucnQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzM1NzU0OTQ3OTgyQUE0QkE5QkFCNUZCRURGMDIyMTAx RTlFN0MzNzAeFw0yNjA0MDkwNDEzMzRaFw0yNjA0MTAwNDQ1MzRaMDMxMTAvBgNV BAMTKDJERDQ4NzJDOENGMDJFQUIyRjgxMEZBODU4QTg4QjlBN0M5MDZDNTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVqxBDiZPNm3N/Jx4HQoYvgXLK h6c1H7EFsYEYsFhWd2NHk7Y5FnzNuEEyqKl4aho2PTLoajzLdNPYhLlB06mXbRfI MxpwDHycHuZTq5nMZYY+lz3xftm+dJct8+lMAgjTrxBGkMz/aBhrmhCXm9TCKuOc OQVNzIzQr8Ndrgeyd/AXRozmwaZ4sIMwifgOzAUNb+ogRXZ6xlp731PbOjROrhPs IQsestGpj1dR+eQh2COC3BigsEq/dk9FSF0BJK22qMmPhCbCi1voAS89XdD+lmtY Klau6YInSYmoWbYwZbXq0apGIo+GyyU0wuZWb8VBe3kBTwMz45vaTo8dYhNnAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQULdSHLIzwLqsvgQ+oWKiLmnyQbFgwHwYDVR0j BBgwFoAUM1dUlHmCqkupurX77fAiEB6efDcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOEZ2UHBwcFZQS3RjalV6b214ckR6QVJuS0tQQzN2MVlnRWdhbnhFOUNp Sm0vMC8zMzU3NTQ5NDc5ODJBQTRCQTlCQUI1RkJFREYwMjIxMDFFOUU3QzM3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMzNTc1NDk0Nzk4MkFBNEJB OUJBQjVGQkVERjAyMjEwMUU5RTdDMzcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OEZ2UHBwcFZQS3RjalV6b214ckR6QVJuS0tQQzN2MVlnRWdhbnhFOUNpSm0vMC8z MzU3NTQ5NDc5ODJBQTRCQTlCQUI1RkJFREYwMjIxMDFFOUU3QzM3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiqWSsbUxbOk6hduzWOMug23i1h1x8jkaXWDrtZD1rrJRaIgIflCeKGQnTeb/ Z13j0rNCK1Z4qfsgjH5dciz9Qd/Xj99/XVLm7F1O4P6kc29NcloZJdv0XHpo35Gt BNkF9tfaE/vjBCF5W4r46JZfE7rUbk3g0R6yLc80klxbSwCAARnrLrF5en0EZuK3 Glv8KeFVP9KRpKGDVZsKOdqDGPTNYODBgg+kgzH1sB5qpsifeZ1klCYa+PlNx95Z XNomVN3cT51gXSzLkgqtXK94ahE0TVdpxnhGHMLG4TQiC7XSlavGzLDuHaLsTUeu f1zmxesGlusKP/47lzs4XVv0Bw== -----END CERTIFICATE-----Generated at Thu Apr 9 11:13:37 2026 by rpki-client