$ rpki-client -vvf rpki-repo.registro.br/repo/8ngwVGrofkUzzq5i66kS7mxpim8fc8HcqEfQ6LnnKexQ/0/88D1B207D5AA9728173204A8DCEB8AA6E45BBC0A.mft File: 88D1B207D5AA9728173204A8DCEB8AA6E45BBC0A.mft (raw, json) Hash identifier: d3Rzvd74kEtix3gCLtHXHsKZdfaEMepRpA2fV5v57VA= Subject key identifier: 86:47:51:3E:77:36:C7:8D:F1:23:3B:EE:D3:78:8F:47:7D:98:F9:00 Authority key identifier: 88:D1:B2:07:D5:AA:97:28:17:32:04:A8:DC:EB:8A:A6:E4:5B:BC:0A Certificate issuer: /CN=88D1B207D5AA9728173204A8DCEB8AA6E45BBC0A Certificate serial: 3509B1816AF187CB4C303735BE802EF6F7A67165 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88D1B207D5AA9728173204A8DCEB8AA6E45BBC0A.cer Subject info access: rsync://rpki-repo.registro.br/repo/8ngwVGrofkUzzq5i66kS7mxpim8fc8HcqEfQ6LnnKexQ/0/88D1B207D5AA9728173204A8DCEB8AA6E45BBC0A.mft Manifest number: F8 Signing time: Wed 08 Apr 2026 18:15:12 +0000 Manifest this update: Wed 08 Apr 2026 18:10:12 +0000 Manifest next update: Thu 09 Apr 2026 19:56:12 +0000 Files and hashes: 1: 34352e3137352e3234342e302f32322d3332203d3e20323638393233.roa (hash: Qdy1QzKRsq9JYXWTrNZjwInIzn0toipLNQD8MA3MD+g=) 2: 88D1B207D5AA9728173204A8DCEB8AA6E45BBC0A.crl (hash: 3ahf4m9RCXj51R0o/Qfw+ycZVLQQziP6kXqZWa5rzMY=) 3: 34352e3137352e3234342e302f32322d3234203d3e20313938393439.roa (hash: iSOokv3jMzPeBY9ADgHRNBxwlvxvdXV1IcX7gZrelOU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8ngwVGrofkUzzq5i66kS7mxpim8fc8HcqEfQ6LnnKexQ/0/88D1B207D5AA9728173204A8DCEB8AA6E45BBC0A.crl rsync://rpki-repo.registro.br/repo/8ngwVGrofkUzzq5i66kS7mxpim8fc8HcqEfQ6LnnKexQ/0/88D1B207D5AA9728173204A8DCEB8AA6E45BBC0A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88D1B207D5AA9728173204A8DCEB8AA6E45BBC0A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 09 Apr 2026 19:56:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:09:b1:81:6a:f1:87:cb:4c:30:37:35:be:80:2e:f6:f7:a6:71:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88D1B207D5AA9728173204A8DCEB8AA6E45BBC0A Validity Not Before: Apr 8 18:10:12 2026 GMT Not After : Apr 9 19:56:12 2026 GMT Subject: CN=8647513E7736C78DF1233BEED3788F477D98F900 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ad:a0:4b:59:dd:9d:6c:54:60:fc:6d:68:8d: b5:4d:3a:2e:b1:a8:3a:d6:31:5e:32:87:37:3b:93: 87:ad:4e:96:af:4a:8d:1c:65:d0:44:04:a4:a3:2d: 39:cc:65:7d:13:ac:e7:6f:57:7e:fd:83:e7:4b:ac: dc:ed:bb:23:4b:56:e7:30:22:34:ac:bd:37:7b:e5: 0a:c0:e2:3e:39:98:a2:77:fa:ed:30:93:67:97:e9: f9:74:d1:91:74:be:bd:f5:0b:8a:15:b0:2c:a4:f8: 79:41:b7:ac:76:ef:dd:09:c2:32:81:e8:69:aa:b9: 13:52:63:55:2c:2a:68:80:38:21:21:dc:ee:31:0e: 13:27:59:ae:33:fd:c5:13:ba:7d:10:da:4b:aa:12: fe:9f:6e:db:ce:40:d5:a7:b6:20:c6:cd:30:76:a7: 5a:46:00:c6:06:3a:7a:d4:1b:10:af:90:92:ef:a6: 07:36:0f:2c:4b:59:c9:57:24:27:04:69:4a:a4:2b: a4:87:d1:bf:79:0b:e7:c1:1e:93:29:a1:01:24:e1: b2:f2:1a:ac:a5:e1:23:ef:c5:b9:79:56:e6:2f:de: 07:ee:e0:b5:d8:bf:8c:25:2a:5c:8c:10:15:9b:ae: 13:7a:f0:1e:13:67:ae:32:2a:45:a6:95:2c:d6:53: 9b:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:47:51:3E:77:36:C7:8D:F1:23:3B:EE:D3:78:8F:47:7D:98:F9:00 X509v3 Authority Key Identifier: keyid:88:D1:B2:07:D5:AA:97:28:17:32:04:A8:DC:EB:8A:A6:E4:5B:BC:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8ngwVGrofkUzzq5i66kS7mxpim8fc8HcqEfQ6LnnKexQ/0/88D1B207D5AA9728173204A8DCEB8AA6E45BBC0A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88D1B207D5AA9728173204A8DCEB8AA6E45BBC0A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ngwVGrofkUzzq5i66kS7mxpim8fc8HcqEfQ6LnnKexQ/0/88D1B207D5AA9728173204A8DCEB8AA6E45BBC0A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:ad:ce:0d:24:d0:d6:42:da:4b:ba:c4:db:92:d1:47:64:3e: 26:cc:e9:e7:3f:e8:16:52:ce:4c:3f:1f:d7:c7:6b:22:a4:ec: a8:79:94:be:c8:b7:6a:7d:2a:b3:ed:f1:da:46:04:7a:cb:10: 95:46:25:c8:c2:d7:d0:fb:c0:7b:d3:1c:de:0c:f9:0b:51:5c: 2d:65:25:96:8b:93:0e:92:f6:50:2b:ef:98:65:bc:51:32:80: 33:67:2a:a6:69:57:a4:7c:37:fd:70:54:98:d0:d7:93:4c:c1: e7:89:07:53:52:0c:7e:13:eb:1b:91:c2:13:c7:57:04:06:73: 0a:9c:4c:53:f4:16:86:6f:5d:cc:5f:33:4b:aa:bc:87:13:2c: 70:cc:03:03:72:b8:a0:27:a9:c5:8d:95:ad:60:26:26:ef:52: 63:8d:dd:6b:3c:a0:b2:fb:f2:78:d0:7a:d3:2e:2e:e9:71:b6: 50:e5:a7:0b:e3:cc:c5:20:bc:aa:e3:58:a5:4c:22:f5:69:15: 82:9e:08:ae:e1:dc:45:cf:66:d2:b0:72:86:3e:a3:89:fe:f1: 87:9c:4e:2c:61:b1:57:81:34:ba:b1:f8:22:88:ba:12:5e:b3: 41:58:a4:84:c0:8b:27:57:06:6e:36:61:32:84:03:28:fe:7c: 22:d6:53:fc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUNQmxgWrxh8tMMDc1voAu9vemcWUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODhEMUIyMDdENUFBOTcyODE3MzIwNEE4RENFQjhBQTZF NDVCQkMwQTAeFw0yNjA0MDgxODEwMTJaFw0yNjA0MDkxOTU2MTJaMDMxMTAvBgNV BAMTKDg2NDc1MTNFNzczNkM3OERGMTIzM0JFRUQzNzg4RjQ3N0Q5OEY5MDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpraBLWd2dbFRg/G1ojbVNOi6x qDrWMV4yhzc7k4etTpavSo0cZdBEBKSjLTnMZX0TrOdvV379g+dLrNztuyNLVucw IjSsvTd75QrA4j45mKJ3+u0wk2eX6fl00ZF0vr31C4oVsCyk+HlBt6x2790JwjKB 6GmquRNSY1UsKmiAOCEh3O4xDhMnWa4z/cUTun0Q2kuqEv6fbtvOQNWntiDGzTB2 p1pGAMYGOnrUGxCvkJLvpgc2DyxLWclXJCcEaUqkK6SH0b95C+fBHpMpoQEk4bLy Gqyl4SPvxbl5VuYv3gfu4LXYv4wlKlyMEBWbrhN68B4TZ64yKkWmlSzWU5tLAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUhkdRPnc2x43xIzvu03iPR32Y+QAwHwYDVR0j BBgwFoAUiNGyB9WqlygXMgSo3OuKpuRbvAowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOG5nd1ZHcm9ma1V6enE1aTY2a1M3bXhwaW04ZmM4SGNxRWZRNkxubktl eFEvMC84OEQxQjIwN0Q1QUE5NzI4MTczMjA0QThEQ0VCOEFBNkU0NUJCQzBBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg4RDFCMjA3RDVBQTk3Mjgx NzMyMDRBOERDRUI4QUE2RTQ1QkJDMEEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OG5nd1ZHcm9ma1V6enE1aTY2a1M3bXhwaW04ZmM4SGNxRWZRNkxubktleFEvMC84 OEQxQjIwN0Q1QUE5NzI4MTczMjA0QThEQ0VCOEFBNkU0NUJCQzBBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAN63ODSTQ1kLaS7rE25LRR2Q+Jszp5z/oFlLOTD8f18drIqTsqHmUvsi3an0q s+3x2kYEessQlUYlyMLX0PvAe9Mc3gz5C1FcLWUllouTDpL2UCvvmGW8UTKAM2cq pmlXpHw3/XBUmNDXk0zB54kHU1IMfhPrG5HCE8dXBAZzCpxMU/QWhm9dzF8zS6q8 hxMscMwDA3K4oCepxY2VrWAmJu9SY43dazygsvvyeNB60y4u6XG2UOWnC+PMxSC8 quNYpUwi9WkVgp4IruHcRc9m0rByhj6jif7xh5xOLGGxV4E0urH4Ioi6El6zQVik hMCLJ1cGbjZhMoQDKP58ItZT/A== -----END CERTIFICATE-----Generated at Thu Apr 9 11:11:37 2026 by rpki-client