$ rpki-client -vvf rpki-repo.registro.br/repo/8MsaFtuPntCFCqg6hfpSgVmqy2whrJeCY8AJPv4enV6P/0/86864B7419B870C1E8E0A4BEA9E38FC483637AD0.mft File: 86864B7419B870C1E8E0A4BEA9E38FC483637AD0.mft (raw, json) Hash identifier: 1kl/6rAPKrfDHBGFz5knv1AxhU9FiEjxNkQml6Sfcug= Subject key identifier: D5:33:F1:F9:8D:2D:30:76:3B:3F:5A:03:EF:D2:18:88:07:20:59:DE Authority key identifier: 86:86:4B:74:19:B8:70:C1:E8:E0:A4:BE:A9:E3:8F:C4:83:63:7A:D0 Certificate issuer: /CN=86864B7419B870C1E8E0A4BEA9E38FC483637AD0 Certificate serial: 5DEE1A18CB21BF4536367C4E4C855EF3522883AF Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86864B7419B870C1E8E0A4BEA9E38FC483637AD0.cer Subject info access: rsync://rpki-repo.registro.br/repo/8MsaFtuPntCFCqg6hfpSgVmqy2whrJeCY8AJPv4enV6P/0/86864B7419B870C1E8E0A4BEA9E38FC483637AD0.mft Manifest number: 03B7 Signing time: Wed 08 Apr 2026 21:43:06 +0000 Manifest this update: Wed 08 Apr 2026 21:38:06 +0000 Manifest next update: Fri 10 Apr 2026 01:13:06 +0000 Files and hashes: 1: 3137372e35352e33322e302f32302d3234203d3e20323632343832.roa (hash: lLNB2cBPThclys7QPsArqC9me72DMbdsI4Zz8WzSw64=) 2: 86864B7419B870C1E8E0A4BEA9E38FC483637AD0.crl (hash: l4oHvjGYjvjhHuvzahKjGgOyHJS7ZlWj0xvoA2xH0jU=) 3: 323830343a323638383a3a2f33322d3438203d3e20323632343832.roa (hash: FE+/LhWzgs6/8u7xni4X7XMQNGvzfOnmYGtcz3qODSU=) 4: 3133382e3138352e3231322e302f32322d3234203d3e20323632343832.roa (hash: xtY9QWt7T6w5HnwQncN+dv6Ov2L/n+R17LFJvJHr9ho=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8MsaFtuPntCFCqg6hfpSgVmqy2whrJeCY8AJPv4enV6P/0/86864B7419B870C1E8E0A4BEA9E38FC483637AD0.crl rsync://rpki-repo.registro.br/repo/8MsaFtuPntCFCqg6hfpSgVmqy2whrJeCY8AJPv4enV6P/0/86864B7419B870C1E8E0A4BEA9E38FC483637AD0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86864B7419B870C1E8E0A4BEA9E38FC483637AD0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 10 Apr 2026 01:13:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:ee:1a:18:cb:21:bf:45:36:36:7c:4e:4c:85:5e:f3:52:28:83:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86864B7419B870C1E8E0A4BEA9E38FC483637AD0 Validity Not Before: Apr 8 21:38:06 2026 GMT Not After : Apr 10 01:13:06 2026 GMT Subject: CN=D533F1F98D2D30763B3F5A03EFD21888072059DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:25:62:42:a2:1d:cd:7b:f3:31:04:9a:2d:6e: a3:4a:48:af:78:d5:d6:d2:a8:dd:d5:c0:20:50:eb: ad:73:bc:6a:c3:89:a0:55:88:eb:7e:b0:5e:b1:aa: 3d:28:1b:b3:64:bf:fd:83:7b:01:13:8e:95:21:49: 4f:46:2f:8c:1d:fb:27:7b:0d:1d:4d:72:53:30:91: e1:ef:97:31:11:39:d4:88:63:dd:11:38:56:b7:f4: ed:4b:61:8f:f3:7b:1d:29:53:29:71:9c:9f:1a:2b: 6d:b4:3d:b7:2f:cd:05:ac:c1:bc:f7:e4:c2:a8:f0: 60:b3:d3:f5:9f:09:ed:d1:01:82:e3:9b:dc:fb:a8: 66:62:1a:8a:64:94:dc:4b:68:a0:bd:d5:a2:d4:96: 45:fc:8f:a0:a0:4e:51:41:ed:4c:e0:ea:d6:2d:f5: 11:ef:1d:8b:57:54:e1:4f:a3:5d:1a:7e:17:e3:5c: 07:ec:0e:03:a4:03:91:97:b5:8e:bc:aa:5b:38:85: a3:3d:83:3b:3d:de:21:77:e4:3b:85:31:50:98:d1: a6:ad:8a:9d:61:f4:cf:ec:5a:6d:f9:cd:52:10:81: ad:58:e0:01:a8:4b:d5:2d:3c:38:90:d9:0c:2d:0a: b0:d5:a8:b9:0a:1d:b8:08:2a:8e:54:9f:7d:d7:ea: 2b:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:33:F1:F9:8D:2D:30:76:3B:3F:5A:03:EF:D2:18:88:07:20:59:DE X509v3 Authority Key Identifier: keyid:86:86:4B:74:19:B8:70:C1:E8:E0:A4:BE:A9:E3:8F:C4:83:63:7A:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8MsaFtuPntCFCqg6hfpSgVmqy2whrJeCY8AJPv4enV6P/0/86864B7419B870C1E8E0A4BEA9E38FC483637AD0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86864B7419B870C1E8E0A4BEA9E38FC483637AD0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8MsaFtuPntCFCqg6hfpSgVmqy2whrJeCY8AJPv4enV6P/0/86864B7419B870C1E8E0A4BEA9E38FC483637AD0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:05:ea:9c:54:77:b5:76:d8:b7:22:2a:45:46:f2:d6:49:43: 77:5f:91:2e:c7:dd:5f:3e:9e:cd:e6:9b:cd:6e:14:32:32:a9: f9:e1:05:17:b6:a9:0b:2a:e5:ce:2c:aa:7d:ef:6d:ca:d7:19: 1c:a7:69:b5:3b:34:1d:61:e2:8d:80:eb:ca:f6:a1:5f:4c:28: f2:3a:30:5f:2e:fb:61:46:2a:40:72:fb:ee:18:7f:26:93:ec: e2:f5:bc:e0:6d:e0:27:76:4e:e4:88:36:79:30:9d:53:63:5a: 98:8c:e4:08:f1:7d:d8:1d:27:5a:ea:59:0e:24:f9:9b:77:3b: 60:ed:b5:d4:5e:7f:6b:e0:79:f5:0f:b3:ef:8a:6c:c1:81:59: 71:c2:ba:ef:7d:05:46:aa:b6:a1:1e:1d:c1:df:d6:4f:34:69: b3:7d:b8:0a:a2:59:a4:c0:08:6a:6b:9d:ba:47:f2:d5:61:aa: 30:a2:9b:99:b5:62:c2:58:c4:e4:bc:b9:cb:ec:29:34:b1:f9: 44:e8:bf:d0:80:d9:a8:45:95:b7:49:06:1e:32:ce:80:f5:b4: 22:87:26:ef:f1:eb:6b:93:ca:49:63:a2:77:c4:9a:2d:6e:ff: 7e:43:8d:bd:14:8e:8c:d4:72:a4:00:ee:34:bf:34:41:35:9a: 4b:96:27:cf -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUXe4aGMshv0U2NnxOTIVe81Iog68wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODY4NjRCNzQxOUI4NzBDMUU4RTBBNEJFQTlFMzhGQzQ4 MzYzN0FEMDAeFw0yNjA0MDgyMTM4MDZaFw0yNjA0MTAwMTEzMDZaMDMxMTAvBgNV BAMTKEQ1MzNGMUY5OEQyRDMwNzYzQjNGNUEwM0VGRDIxODg4MDcyMDU5REUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4JWJCoh3Ne/MxBJotbqNKSK94 1dbSqN3VwCBQ661zvGrDiaBViOt+sF6xqj0oG7Nkv/2DewETjpUhSU9GL4wd+yd7 DR1NclMwkeHvlzEROdSIY90ROFa39O1LYY/zex0pUylxnJ8aK220PbcvzQWswbz3 5MKo8GCz0/WfCe3RAYLjm9z7qGZiGopklNxLaKC91aLUlkX8j6CgTlFB7Uzg6tYt 9RHvHYtXVOFPo10afhfjXAfsDgOkA5GXtY68qls4haM9gzs93iF35DuFMVCY0aat ip1h9M/sWm35zVIQga1Y4AGoS9UtPDiQ2QwtCrDVqLkKHbgIKo5Un33X6iujAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU1TPx+Y0tMHY7P1oD79IYiAcgWd4wHwYDVR0j BBgwFoAUhoZLdBm4cMHo4KS+qeOPxINjetAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOE1zYUZ0dVBudENGQ3FnNmhmcFNnVm1xeTJ3aHJKZUNZOEFKUHY0ZW5W NlAvMC84Njg2NEI3NDE5Qjg3MEMxRThFMEE0QkVBOUUzOEZDNDgzNjM3QUQwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg2ODY0Qjc0MTlCODcwQzFF OEUwQTRCRUE5RTM4RkM0ODM2MzdBRDAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OE1zYUZ0dVBudENGQ3FnNmhmcFNnVm1xeTJ3aHJKZUNZOEFKUHY0ZW5WNlAvMC84 Njg2NEI3NDE5Qjg3MEMxRThFMEE0QkVBOUUzOEZDNDgzNjM3QUQwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEATwXqnFR3tXbYtyIqRUby1klDd1+RLsfdXz6ezeabzW4UMjKp+eEFF7apCyrl ziyqfe9tytcZHKdptTs0HWHijYDryvahX0wo8jowXy77YUYqQHL77hh/JpPs4vW8 4G3gJ3ZO5Ig2eTCdU2NamIzkCPF92B0nWupZDiT5m3c7YO211F5/a+B59Q+z74ps wYFZccK6730FRqq2oR4dwd/WTzRps324CqJZpMAIamudukfy1WGqMKKbmbViwljE 5Ly5y+wpNLH5ROi/0IDZqEWVt0kGHjLOgPW0Iocm7/Hra5PKSWOid8SaLW7/fkON vRSOjNRypADuNL80QTWaS5Ynzw== -----END CERTIFICATE-----Generated at Thu Apr 9 11:11:20 2026 by rpki-client