$ rpki-client -vvf rpki-repo.registro.br/repo/9ZCCEBaEZTSwhZiVVEkY4xCtM2jUWTw8BNUQwmS7e2cw/0/42B4F8826E02D25EC18C82827EE46A2A3BABB18B.mft File: 42B4F8826E02D25EC18C82827EE46A2A3BABB18B.mft (raw, json) Hash identifier: H+/UIECeL/vAAnF3LToZEcnKO5D8wScKy+ReqDXRxig= Subject key identifier: 3A:2B:A8:D5:8D:76:FB:9A:67:AA:80:4B:72:43:4B:D1:93:EE:80:11 Authority key identifier: 42:B4:F8:82:6E:02:D2:5E:C1:8C:82:82:7E:E4:6A:2A:3B:AB:B1:8B Certificate issuer: /CN=42B4F8826E02D25EC18C82827EE46A2A3BABB18B Certificate serial: 7F70444C4BDA5F946688AFB03541057F8E4BE1D5 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42B4F8826E02D25EC18C82827EE46A2A3BABB18B.cer Subject info access: rsync://rpki-repo.registro.br/repo/9ZCCEBaEZTSwhZiVVEkY4xCtM2jUWTw8BNUQwmS7e2cw/0/42B4F8826E02D25EC18C82827EE46A2A3BABB18B.mft Manifest number: 27 Signing time: Wed 08 Apr 2026 20:32:21 +0000 Manifest this update: Wed 08 Apr 2026 20:27:21 +0000 Manifest next update: Thu 09 Apr 2026 21:02:21 +0000 Files and hashes: 1: 42B4F8826E02D25EC18C82827EE46A2A3BABB18B.crl (hash: BhH5H/2fvwhNtZq+3b3TgyHEPJnuaA+V07uc0lKYfH0=) 2: 323830343a316264633a3a2f33322d313238203d3e203631373533.roa (hash: W8LVw9F+VT1zN3hIX/ClkcpKHRrmibIRP+0XMwBJ0dI=) 3: 3133312e3130302e31362e302f32322d3332203d3e203631373533.roa (hash: XxoUCfaKzFdO4B3lK0cVZvNjF4YBH8BGzPiA1ZBbY0g=) 4: 3136382e3138312e3233322e302f32322d3332203d3e203631373533.roa (hash: aq6eiaScz90kF//U/uDr0TDg5K5uL0jN12ubsQHdvvo=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9ZCCEBaEZTSwhZiVVEkY4xCtM2jUWTw8BNUQwmS7e2cw/0/42B4F8826E02D25EC18C82827EE46A2A3BABB18B.crl rsync://rpki-repo.registro.br/repo/9ZCCEBaEZTSwhZiVVEkY4xCtM2jUWTw8BNUQwmS7e2cw/0/42B4F8826E02D25EC18C82827EE46A2A3BABB18B.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42B4F8826E02D25EC18C82827EE46A2A3BABB18B.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 09 Apr 2026 21:02:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:70:44:4c:4b:da:5f:94:66:88:af:b0:35:41:05:7f:8e:4b:e1:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42B4F8826E02D25EC18C82827EE46A2A3BABB18B Validity Not Before: Apr 8 20:27:21 2026 GMT Not After : Apr 9 21:02:21 2026 GMT Subject: CN=3A2BA8D58D76FB9A67AA804B72434BD193EE8011 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:e8:1c:e2:63:1b:05:ec:f4:9b:b5:2f:90:e3: 9d:73:a7:e4:9d:36:2c:c4:fa:68:e6:fc:b0:ff:22: 0b:81:f9:82:7b:a3:2a:7c:7d:be:16:68:1b:f1:68: d2:21:36:46:b2:f6:38:4a:1a:b3:cb:57:29:c7:72: 41:38:84:57:67:40:83:9c:23:7f:03:92:f7:de:55: b9:88:f5:fa:2d:41:d3:88:f8:73:aa:42:26:f9:1b: 0f:69:2f:f2:e9:11:90:9f:15:22:e6:8b:ce:39:58: b9:36:94:2a:f5:5b:8d:c7:1c:b9:42:4f:43:9e:7b: 0d:d6:ce:b3:e1:ed:d0:5a:c5:be:8f:01:e6:38:a5: ec:91:36:e7:10:71:81:8c:20:8c:3e:67:74:cd:0f: 89:f3:ff:eb:ff:0a:08:c6:8c:c9:d9:0a:3a:d5:90: db:0c:93:67:7b:81:82:f0:71:67:3b:a4:e6:bb:25: 8f:13:40:76:6d:0b:be:67:3f:78:59:54:c8:b0:b0: 83:0f:14:58:08:58:2b:46:26:ff:6d:89:48:c4:8f: 32:0a:a2:38:a7:a3:c5:00:65:89:b4:6b:e2:12:5e: 10:7c:b6:23:76:7f:3a:d0:ed:fa:2f:fb:10:b8:28: 33:8b:26:01:e5:92:b9:b9:f6:68:db:73:f2:88:3b: b8:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:2B:A8:D5:8D:76:FB:9A:67:AA:80:4B:72:43:4B:D1:93:EE:80:11 X509v3 Authority Key Identifier: keyid:42:B4:F8:82:6E:02:D2:5E:C1:8C:82:82:7E:E4:6A:2A:3B:AB:B1:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9ZCCEBaEZTSwhZiVVEkY4xCtM2jUWTw8BNUQwmS7e2cw/0/42B4F8826E02D25EC18C82827EE46A2A3BABB18B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42B4F8826E02D25EC18C82827EE46A2A3BABB18B.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9ZCCEBaEZTSwhZiVVEkY4xCtM2jUWTw8BNUQwmS7e2cw/0/42B4F8826E02D25EC18C82827EE46A2A3BABB18B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:80:11:78:d6:34:70:e7:b4:c5:29:82:b6:3c:96:88:e1:76: b3:76:9d:04:38:7d:15:63:8c:65:92:5f:fb:d8:76:cf:89:d4: 43:1d:6f:0d:4a:1e:f0:4e:a7:c1:9b:65:1a:1b:5f:32:67:3e: b2:e0:d1:6d:39:2d:84:75:83:7f:78:59:6f:d3:bc:3c:c8:fe: 7f:4b:76:61:c8:cd:05:d1:14:27:ba:80:b6:14:89:8f:6f:12: b2:79:f2:ab:e2:ec:5a:30:2c:72:c5:64:88:e1:ee:eb:ab:ff: 24:80:d0:c1:c0:3a:fd:52:5c:58:d6:f3:80:93:4c:32:86:05: a3:da:1c:85:4a:95:63:b7:0e:4e:d9:d4:d2:e3:f5:1f:e1:09: 06:c4:a7:e5:51:31:a9:f6:ab:b5:14:64:10:be:71:f5:57:55: 2e:55:a3:72:2e:03:c9:cf:1c:3e:a7:07:12:bf:05:16:86:cb: 05:3c:b9:a6:7d:0a:53:e4:e7:a4:83:87:a7:ad:be:f0:0b:f3: 57:8e:24:a3:f4:a5:e1:e5:26:68:bd:d6:bc:e6:c9:60:a2:91: 97:63:1f:10:c1:6c:30:84:71:a7:c8:27:f0:6b:21:9f:7f:1a: f2:d4:5a:51:8c:69:c6:3e:e6:ce:4d:0a:3f:66:16:8f:0c:32: 00:ab:99:48 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUf3BETEvaX5RmiK+wNUEFf45L4dUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDJCNEY4ODI2RTAyRDI1RUMxOEM4MjgyN0VFNDZBMkEz QkFCQjE4QjAeFw0yNjA0MDgyMDI3MjFaFw0yNjA0MDkyMTAyMjFaMDMxMTAvBgNV BAMTKDNBMkJBOEQ1OEQ3NkZCOUE2N0FBODA0QjcyNDM0QkQxOTNFRTgwMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD46BziYxsF7PSbtS+Q451zp+Sd NizE+mjm/LD/IguB+YJ7oyp8fb4WaBvxaNIhNkay9jhKGrPLVynHckE4hFdnQIOc I38DkvfeVbmI9fotQdOI+HOqQib5Gw9pL/LpEZCfFSLmi845WLk2lCr1W43HHLlC T0Oeew3WzrPh7dBaxb6PAeY4peyRNucQcYGMIIw+Z3TND4nz/+v/CgjGjMnZCjrV kNsMk2d7gYLwcWc7pOa7JY8TQHZtC75nP3hZVMiwsIMPFFgIWCtGJv9tiUjEjzIK ojino8UAZYm0a+ISXhB8tiN2fzrQ7fov+xC4KDOLJgHlkrm59mjbc/KIO7g/AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUOiuo1Y12+5pnqoBLckNL0ZPugBEwHwYDVR0j BBgwFoAUQrT4gm4C0l7BjIKCfuRqKjursYswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOVpDQ0VCYUVaVFN3aFppVlZFa1k0eEN0TTJqVVdUdzhCTlVRd21TN2Uy Y3cvMC80MkI0Rjg4MjZFMDJEMjVFQzE4QzgyODI3RUU0NkEyQTNCQUJCMThCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQyQjRGODgyNkUwMkQyNUVD MThDODI4MjdFRTQ2QTJBM0JBQkIxOEIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OVpDQ0VCYUVaVFN3aFppVlZFa1k0eEN0TTJqVVdUdzhCTlVRd21TN2UyY3cvMC80 MkI0Rjg4MjZFMDJEMjVFQzE4QzgyODI3RUU0NkEyQTNCQUJCMThCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEARoAReNY0cOe0xSmCtjyWiOF2s3adBDh9FWOMZZJf+9h2z4nUQx1vDUoe8E6n wZtlGhtfMmc+suDRbTkthHWDf3hZb9O8PMj+f0t2YcjNBdEUJ7qAthSJj28Ssnny q+LsWjAscsVkiOHu66v/JIDQwcA6/VJcWNbzgJNMMoYFo9ochUqVY7cOTtnU0uP1 H+EJBsSn5VExqfartRRkEL5x9VdVLlWjci4Dyc8cPqcHEr8FFobLBTy5pn0KU+Tn pIOHp62+8AvzV44ko/Sl4eUmaL3WvObJYKKRl2MfEMFsMIRxp8gn8Gshn38a8tRa UYxpxj7mzk0KP2YWjwwyAKuZSA== -----END CERTIFICATE-----Generated at Thu Apr 9 14:10:51 2026 by rpki-client