$ rpki-client -vvf rpki-repo.registro.br/repo/8nqBCzwiEjuVoeyqRQtcdwyzh7EM74gv87CNdVyciWJR/0/95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781.mft File: 95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781.mft (raw, json) Hash identifier: PPgs+rIVZQt0dO4G3leUWWL7RqzOm/FHsChp5B/53rs= Subject key identifier: E2:73:45:D9:8D:8F:2B:6A:46:AB:BA:06:BA:B3:B9:10:D2:61:33:84 Authority key identifier: 95:F2:AC:B3:83:DE:FB:23:DF:BE:E3:45:AD:99:82:FF:D0:EF:B7:81 Certificate issuer: /CN=95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781 Certificate serial: 6D308EF6D8667CF573614227F37A596B22C77319 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781.cer Subject info access: rsync://rpki-repo.registro.br/repo/8nqBCzwiEjuVoeyqRQtcdwyzh7EM74gv87CNdVyciWJR/0/95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781.mft Manifest number: 021D Signing time: Thu 09 Apr 2026 02:08:56 +0000 Manifest this update: Thu 09 Apr 2026 02:03:56 +0000 Manifest next update: Fri 10 Apr 2026 06:07:56 +0000 Files and hashes: 1: 95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781.crl (hash: nnCVFicqCa1qPC3QNHpVkjkBd9SaN6UBrCypNy44qac=) 2: 323830343a386631343a3a2f33322d313238203d3e20323733343636.roa (hash: xRHq3FrnsuXXGnMheQhOwmAdl2aTk5vbSrnCnte9cU4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8nqBCzwiEjuVoeyqRQtcdwyzh7EM74gv87CNdVyciWJR/0/95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781.crl rsync://rpki-repo.registro.br/repo/8nqBCzwiEjuVoeyqRQtcdwyzh7EM74gv87CNdVyciWJR/0/95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 10 Apr 2026 06:07:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:30:8e:f6:d8:66:7c:f5:73:61:42:27:f3:7a:59:6b:22:c7:73:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781 Validity Not Before: Apr 9 02:03:56 2026 GMT Not After : Apr 10 06:07:56 2026 GMT Subject: CN=E27345D98D8F2B6A46ABBA06BAB3B910D2613384 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:85:0b:57:87:53:5b:26:3d:30:b6:ef:94:6c: 2e:9d:e7:77:37:ee:48:ea:50:19:6e:90:41:c5:9f: 97:19:24:a6:f2:d6:8f:0a:4b:5e:bb:bd:b4:eb:26: 11:5f:da:b6:ac:30:5d:b5:8d:bd:b8:03:0c:80:d3: d7:cf:a9:60:ed:f4:af:43:96:d0:a4:67:9a:3d:3c: f2:ae:c3:19:9b:53:1f:55:8d:4f:11:c5:a1:ea:47: d1:56:cc:90:0f:af:c2:f6:a8:43:dc:62:99:f2:65: 9a:d5:17:be:a7:fb:30:7a:4a:b6:ab:9a:30:10:96: ba:67:01:83:bd:16:94:6e:bc:3b:93:29:cd:e3:da: 7b:fb:69:21:fa:5d:fa:1e:ad:fe:4b:bc:57:0c:6c: 20:e1:1c:58:24:f4:03:99:82:75:81:6e:60:67:f8: a4:08:32:82:0c:b5:89:fb:4b:b8:92:4c:e8:00:48: 5b:70:38:1d:18:7b:7a:ab:fd:37:e6:53:7f:58:99: 18:ea:02:08:92:ab:91:d6:24:d2:bf:2c:c6:7a:1c: ac:5b:d7:39:19:e8:ad:4d:0e:11:93:9b:40:28:a1: 6e:50:02:d2:d4:dd:7a:6e:f5:6d:d1:75:78:a8:71: 2b:90:97:93:90:d0:a1:85:b7:d9:02:0a:ae:a3:b0: 9a:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:73:45:D9:8D:8F:2B:6A:46:AB:BA:06:BA:B3:B9:10:D2:61:33:84 X509v3 Authority Key Identifier: keyid:95:F2:AC:B3:83:DE:FB:23:DF:BE:E3:45:AD:99:82:FF:D0:EF:B7:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8nqBCzwiEjuVoeyqRQtcdwyzh7EM74gv87CNdVyciWJR/0/95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8nqBCzwiEjuVoeyqRQtcdwyzh7EM74gv87CNdVyciWJR/0/95F2ACB383DEFB23DFBEE345AD9982FFD0EFB781.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:b0:f1:80:11:8c:77:3f:00:b1:e7:46:ed:ca:19:cc:cc:b7: bd:b2:ab:0d:06:8a:d7:0c:e4:df:e7:a3:bb:be:a3:60:7e:7f: bc:e7:e3:d7:68:4e:1b:2e:fc:8d:00:b3:61:c0:7d:ff:c3:b4: fa:79:e3:35:80:63:80:af:a5:81:a6:68:41:2b:cc:cf:3e:b0: 83:33:d6:21:88:25:e7:a8:0d:9d:b9:d9:07:37:d2:e3:d6:d7: 39:3e:d8:08:5b:d6:e3:11:36:b2:5b:c1:f3:04:dc:cf:5f:ae: cd:38:69:59:25:56:76:d1:20:f3:26:1d:88:da:67:e2:3e:f1: 20:51:f7:90:b5:eb:ee:f2:01:eb:9c:59:47:eb:a2:04:cb:03: bc:ae:54:77:8c:e2:1d:35:21:1b:b0:00:16:fc:70:4b:7a:5d: c2:91:7f:6d:61:ca:55:88:f6:67:2b:b2:00:69:c2:66:e7:ff: 5d:72:30:1a:74:64:0d:d8:c3:0b:f6:ea:63:4b:ce:12:4d:33: 5c:62:61:5b:57:48:9c:01:66:44:91:be:1e:8e:43:8f:a0:51: 22:5c:d4:76:e5:78:25:50:cc:93:9e:1e:00:ef:c5:cd:ff:a6: d2:52:2b:2a:f6:fb:77:ef:02:d3:25:6d:a2:73:3a:7c:fd:fe: 23:33:50:e6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUbTCO9thmfPVzYUIn83pZayLHcxkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTVGMkFDQjM4M0RFRkIyM0RGQkVFMzQ1QUQ5OTgyRkZE MEVGQjc4MTAeFw0yNjA0MDkwMjAzNTZaFw0yNjA0MTAwNjA3NTZaMDMxMTAvBgNV BAMTKEUyNzM0NUQ5OEQ4RjJCNkE0NkFCQkEwNkJBQjNCOTEwRDI2MTMzODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCchQtXh1NbJj0wtu+UbC6d53c3 7kjqUBlukEHFn5cZJKby1o8KS167vbTrJhFf2rasMF21jb24AwyA09fPqWDt9K9D ltCkZ5o9PPKuwxmbUx9VjU8RxaHqR9FWzJAPr8L2qEPcYpnyZZrVF76n+zB6Srar mjAQlrpnAYO9FpRuvDuTKc3j2nv7aSH6Xfoerf5LvFcMbCDhHFgk9AOZgnWBbmBn +KQIMoIMtYn7S7iSTOgASFtwOB0Ye3qr/TfmU39YmRjqAgiSq5HWJNK/LMZ6HKxb 1zkZ6K1NDhGTm0AooW5QAtLU3Xpu9W3RdXiocSuQl5OQ0KGFt9kCCq6jsJqnAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU4nNF2Y2PK2pGq7oGurO5ENJhM4QwHwYDVR0j BBgwFoAUlfKss4Pe+yPfvuNFrZmC/9Dvt4EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOG5xQkN6d2lFanVWb2V5cVJRdGNkd3l6aDdFTTc0Z3Y4N0NOZFZ5Y2lX SlIvMC85NUYyQUNCMzgzREVGQjIzREZCRUUzNDVBRDk5ODJGRkQwRUZCNzgxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk1RjJBQ0IzODNERUZCMjNE RkJFRTM0NUFEOTk4MkZGRDBFRkI3ODEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OG5xQkN6d2lFanVWb2V5cVJRdGNkd3l6aDdFTTc0Z3Y4N0NOZFZ5Y2lXSlIvMC85 NUYyQUNCMzgzREVGQjIzREZCRUUzNDVBRDk5ODJGRkQwRUZCNzgxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWLDxgBGMdz8AsedG7coZzMy3vbKrDQaK1wzk3+eju76jYH5/vOfj12hOGy78 jQCzYcB9/8O0+nnjNYBjgK+lgaZoQSvMzz6wgzPWIYgl56gNnbnZBzfS49bXOT7Y CFvW4xE2slvB8wTcz1+uzThpWSVWdtEg8yYdiNpn4j7xIFH3kLXr7vIB65xZR+ui BMsDvK5Ud4ziHTUhG7AAFvxwS3pdwpF/bWHKVYj2ZyuyAGnCZuf/XXIwGnRkDdjD C/bqY0vOEk0zXGJhW1dInAFmRJG+Ho5Dj6BRIlzUduV4JVDMk54eAO/Fzf+m0lIr Kvb7d+8C0yVtonM6fP3+IzNQ5g== -----END CERTIFICATE-----Generated at Thu Apr 9 16:52:08 2026 by rpki-client