$ rpki-client -vvf rpki-repo.registro.br/repo/9XFzedyrYLLAHmXBafK7CK3jptMofo7H1mSCWQPR5MaC/0/8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F.mft File: 8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F.mft (raw, json) Hash identifier: spgj2P5WKg8DSNlSf8QjjwiosHNEQ4uKedkXuC+4kbA= Subject key identifier: 10:59:2B:2D:29:AF:C9:11:6B:34:80:5A:6B:F4:A3:0B:67:EE:67:33 Authority key identifier: 8C:B5:A2:51:6F:71:3C:FF:E9:D1:50:4E:79:A4:BD:3B:9A:FB:0A:0F Certificate issuer: /CN=8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F Certificate serial: 023112E9FF28CD6B158ADEF25E80CBAB5A651A8E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F.cer Subject info access: rsync://rpki-repo.registro.br/repo/9XFzedyrYLLAHmXBafK7CK3jptMofo7H1mSCWQPR5MaC/0/8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F.mft Manifest number: 01AF Signing time: Thu 09 Apr 2026 02:11:33 +0000 Manifest this update: Thu 09 Apr 2026 02:06:33 +0000 Manifest next update: Fri 10 Apr 2026 05:19:33 +0000 Files and hashes: 1: 3133382e3235352e37322e302f32322d3332203d3e20323633393539.roa (hash: waEFhBe+SjRSqQswDzUJGqZm7m+XO9yIfZZm4YTlyYw=) 2: 3137302e3233382e3234382e302f32322d3332203d3e20323633393539.roa (hash: 9vkM44Why6sGQcMypDT8T8Q9VtBz4wbE97cshJxXhpQ=) 3: 8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F.crl (hash: /jIpCsH2IvRoq4xYUhpgxXqkDp0civ3qWeukFCTYqDQ=) 4: 323830343a323836303a3a2f33322d313238203d3e20323633393539.roa (hash: oVXD5VaDUqeD9Go0IkrJ158heEh4rOl0USTusw94FRI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9XFzedyrYLLAHmXBafK7CK3jptMofo7H1mSCWQPR5MaC/0/8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F.crl rsync://rpki-repo.registro.br/repo/9XFzedyrYLLAHmXBafK7CK3jptMofo7H1mSCWQPR5MaC/0/8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 10 Apr 2026 05:19:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:31:12:e9:ff:28:cd:6b:15:8a:de:f2:5e:80:cb:ab:5a:65:1a:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F Validity Not Before: Apr 9 02:06:33 2026 GMT Not After : Apr 10 05:19:33 2026 GMT Subject: CN=10592B2D29AFC9116B34805A6BF4A30B67EE6733 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:2c:9b:79:c3:0e:ce:00:9e:9c:41:47:f7:fd: c5:1e:5d:c6:e5:e3:24:3b:99:f9:d7:50:77:9a:86: 8e:91:c7:34:4a:5f:db:82:2f:62:1a:73:57:36:ce: d0:46:0a:cb:9c:d3:a9:08:de:99:81:6a:84:8b:90: 5d:ad:9d:7f:3e:02:1d:30:d3:52:73:f1:a6:5a:64: e0:41:09:ac:56:e2:6a:be:2b:01:12:19:87:a2:97: 0e:59:96:9f:ad:69:9f:9b:94:8b:76:ab:ca:22:b9: 32:4c:c4:70:1e:78:16:ed:f1:85:33:10:c8:0c:ea: 19:44:2d:e4:af:81:aa:49:16:c9:d6:27:6d:9a:c6: 39:c2:df:a2:d3:c2:e5:f6:eb:91:d5:b8:16:d2:ec: 45:b2:4a:83:ad:ac:e1:a9:6c:15:60:90:d2:57:d8: b8:d7:4a:26:40:3e:29:fe:86:eb:ef:1b:0c:3f:8d: 03:29:65:37:61:af:1e:e5:7d:b0:12:81:a1:04:ec: c5:13:4c:31:4e:68:56:11:ca:09:cc:49:63:14:1c: 54:52:73:9a:9d:1e:d2:d4:58:9a:ec:7c:e8:df:c6: 14:f6:67:21:a8:2d:26:58:03:da:a4:67:d5:b2:c0: ad:1a:73:da:0c:89:3f:42:cc:ae:d7:63:c7:62:36: 72:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:59:2B:2D:29:AF:C9:11:6B:34:80:5A:6B:F4:A3:0B:67:EE:67:33 X509v3 Authority Key Identifier: keyid:8C:B5:A2:51:6F:71:3C:FF:E9:D1:50:4E:79:A4:BD:3B:9A:FB:0A:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9XFzedyrYLLAHmXBafK7CK3jptMofo7H1mSCWQPR5MaC/0/8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9XFzedyrYLLAHmXBafK7CK3jptMofo7H1mSCWQPR5MaC/0/8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:d4:86:6d:d3:5d:00:bb:08:2e:4f:8e:77:b9:e1:70:a8:cf: e2:04:de:f0:cd:f6:e4:c6:c4:3e:95:83:e5:b4:0f:05:95:6d: 5f:95:ed:5c:5c:14:89:ce:a4:61:d8:b2:94:b2:fa:2b:6c:65: cf:63:cc:07:b2:1d:92:16:39:d3:47:2c:ec:0a:78:3b:4c:34: f6:c9:be:92:84:a7:ea:cc:76:53:7a:cc:c9:48:96:42:e7:e6: 18:51:db:40:da:1f:0e:67:38:05:5d:e0:ef:b1:94:6a:b6:fc: 8c:f7:3d:0c:13:da:89:45:0c:0e:f8:35:27:da:c0:89:14:92: 98:35:8e:31:0d:ef:b4:b9:72:d5:6b:68:14:c3:af:f9:65:1f: f0:9e:ac:78:fa:01:f1:ac:e1:8a:b6:3a:2e:08:68:f9:34:7c: d5:f7:ef:e5:a3:3d:2b:a5:06:d6:da:2d:be:e5:78:12:f1:00: 90:b1:47:2a:36:63:08:e6:d3:f9:b0:16:2e:de:ea:42:99:b9: 31:7b:dd:df:21:36:5d:a9:a3:a4:bf:4e:d6:3e:1c:6b:a7:5c: bb:91:31:d7:ee:18:55:de:94:db:a2:08:c7:85:0d:ad:77:2c: 0d:ac:60:d8:bd:7e:8e:5d:78:0c:90:4c:5d:66:a0:3d:05:68: 4f:9f:a7:51 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUAjES6f8ozWsVit7yXoDLq1plGo4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOENCNUEyNTE2RjcxM0NGRkU5RDE1MDRFNzlBNEJEM0I5 QUZCMEEwRjAeFw0yNjA0MDkwMjA2MzNaFw0yNjA0MTAwNTE5MzNaMDMxMTAvBgNV BAMTKDEwNTkyQjJEMjlBRkM5MTE2QjM0ODA1QTZCRjRBMzBCNjdFRTY3MzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChLJt5ww7OAJ6cQUf3/cUeXcbl 4yQ7mfnXUHeaho6RxzRKX9uCL2Iac1c2ztBGCsuc06kI3pmBaoSLkF2tnX8+Ah0w 01Jz8aZaZOBBCaxW4mq+KwESGYeilw5Zlp+taZ+blIt2q8oiuTJMxHAeeBbt8YUz EMgM6hlELeSvgapJFsnWJ22axjnC36LTwuX265HVuBbS7EWySoOtrOGpbBVgkNJX 2LjXSiZAPin+huvvGww/jQMpZTdhrx7lfbASgaEE7MUTTDFOaFYRygnMSWMUHFRS c5qdHtLUWJrsfOjfxhT2ZyGoLSZYA9qkZ9WywK0ac9oMiT9CzK7XY8diNnK9AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUEFkrLSmvyRFrNIBaa/SjC2fuZzMwHwYDVR0j BBgwFoAUjLWiUW9xPP/p0VBOeaS9O5r7Cg8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOVhGemVkeXJZTExBSG1YQmFmSzdDSzNqcHRNb2ZvN0gxbVNDV1FQUjVN YUMvMC84Q0I1QTI1MTZGNzEzQ0ZGRTlEMTUwNEU3OUE0QkQzQjlBRkIwQTBGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhDQjVBMjUxNkY3MTNDRkZF OUQxNTA0RTc5QTRCRDNCOUFGQjBBMEYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OVhGemVkeXJZTExBSG1YQmFmSzdDSzNqcHRNb2ZvN0gxbVNDV1FQUjVNYUMvMC84 Q0I1QTI1MTZGNzEzQ0ZGRTlEMTUwNEU3OUE0QkQzQjlBRkIwQTBGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQdSGbdNdALsILk+Od7nhcKjP4gTe8M325MbEPpWD5bQPBZVtX5XtXFwUic6k YdiylLL6K2xlz2PMB7IdkhY500cs7Ap4O0w09sm+koSn6sx2U3rMyUiWQufmGFHb QNofDmc4BV3g77GUarb8jPc9DBPaiUUMDvg1J9rAiRSSmDWOMQ3vtLly1WtoFMOv +WUf8J6sePoB8azhirY6Lgho+TR81ffv5aM9K6UG1totvuV4EvEAkLFHKjZjCObT +bAWLt7qQpm5MXvd3yE2XamjpL9O1j4ca6dcu5Ex1+4YVd6U26IIx4UNrXcsDaxg 2L1+jl14DJBMXWagPQVoT5+nUQ== -----END CERTIFICATE-----Generated at Thu Apr 9 12:49:23 2026 by rpki-client