$ rpki-client -vvf rpki-repo.registro.br/repo/9agnSTwt74qCS5prJFwwKVkU4oDpbHGgawnjXpYpoXGG/0/CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.mft File: CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.mft (raw, json) Hash identifier: YvH/TyDVVJQ0tNf+zjNoReGUnhGp3z4UK8i6KJngtVg= Subject key identifier: 28:68:51:96:32:3E:73:CF:90:13:7C:DE:37:65:77:A2:99:B9:0E:C7 Authority key identifier: CA:20:EF:C0:B9:9A:8A:86:B4:B4:CF:A1:07:B0:01:D5:08:B7:29:0D Certificate issuer: /CN=CA20EFC0B99A8A86B4B4CFA107B001D508B7290D Certificate serial: 0F3D979A4952315FF62988E5BC10C660D47FE820 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.cer Subject info access: rsync://rpki-repo.registro.br/repo/9agnSTwt74qCS5prJFwwKVkU4oDpbHGgawnjXpYpoXGG/0/CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.mft Manifest number: 03B9 Signing time: Wed 08 Apr 2026 21:21:09 +0000 Manifest this update: Wed 08 Apr 2026 21:16:09 +0000 Manifest next update: Thu 09 Apr 2026 23:15:09 +0000 Files and hashes: 1: 3137392e39372e31362e302f32312d3234203d3e203238313831.roa (hash: HhuJluM4nYK24Tc4tYGLjGkrvHzMKI7PN1TuD9//pC4=) 2: CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.crl (hash: ApVK9uYgs/LoOO0vCH3jVUKpjPupsb85tXfNmH03Xtk=) 3: 323830343a6461633a3a2f33322d3438203d3e203238313831.roa (hash: n1WfTF/69k+pEm38xUTBsvz2MS47ihd3zEekd1/O7ZY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9agnSTwt74qCS5prJFwwKVkU4oDpbHGgawnjXpYpoXGG/0/CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.crl rsync://rpki-repo.registro.br/repo/9agnSTwt74qCS5prJFwwKVkU4oDpbHGgawnjXpYpoXGG/0/CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 09 Apr 2026 23:15:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:3d:97:9a:49:52:31:5f:f6:29:88:e5:bc:10:c6:60:d4:7f:e8:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA20EFC0B99A8A86B4B4CFA107B001D508B7290D Validity Not Before: Apr 8 21:16:09 2026 GMT Not After : Apr 9 23:15:09 2026 GMT Subject: CN=28685196323E73CF90137CDE376577A299B90EC7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:b9:64:66:a9:78:7d:49:37:7c:64:d9:67:93: 4d:cb:9c:34:f3:f0:35:e6:ff:b2:59:62:cc:5c:4e: bf:a2:5f:82:7d:d8:c4:38:0e:c5:12:47:3b:24:34: 33:72:82:68:7b:14:aa:0a:aa:ae:54:4f:d7:15:6b: 03:4d:41:34:e3:de:ee:63:1f:0a:d4:49:2f:3d:96: 5d:50:e5:f0:26:40:2d:da:8d:7e:f3:2f:5b:c0:84: 3c:43:0c:43:ed:6a:2d:ce:44:3f:fe:c4:87:8d:ab: 6a:80:0d:29:10:ec:01:0d:65:33:36:d2:94:35:da: cd:d5:6c:5c:e0:a9:e7:cf:af:47:36:54:6b:e4:fa: e0:e2:e1:92:0a:07:bf:d5:cf:df:c7:45:70:d2:da: 8e:9c:76:0f:d5:d5:e6:4a:5c:8d:33:0f:2c:ae:74: 11:4f:90:6c:db:63:a4:8e:35:76:9e:bb:60:53:de: 29:48:5c:2f:3f:16:ef:46:17:f3:04:b2:dd:58:91: 1c:9b:e2:67:fa:4a:1a:be:c7:5e:96:72:38:f3:1e: cf:d9:85:23:47:ff:3c:2c:a4:bf:c0:c6:e4:c9:b7: 02:e4:36:5b:62:9d:c8:c2:19:e2:4f:b0:b6:90:2b: cd:b8:14:a3:0f:f2:43:98:d8:99:ba:91:ee:8e:d1: c7:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:68:51:96:32:3E:73:CF:90:13:7C:DE:37:65:77:A2:99:B9:0E:C7 X509v3 Authority Key Identifier: keyid:CA:20:EF:C0:B9:9A:8A:86:B4:B4:CF:A1:07:B0:01:D5:08:B7:29:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9agnSTwt74qCS5prJFwwKVkU4oDpbHGgawnjXpYpoXGG/0/CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9agnSTwt74qCS5prJFwwKVkU4oDpbHGgawnjXpYpoXGG/0/CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:d3:ae:04:a7:13:dc:8c:3d:12:84:6f:e5:7b:bb:02:ff:9b: 61:aa:be:c1:b1:7f:56:a0:b4:33:6f:1f:9a:5d:e1:fb:35:83: 56:38:f6:56:51:0d:84:3c:f6:1b:5f:82:8e:b3:d3:80:0f:a5: 6a:2e:9b:2a:73:41:fe:d0:6e:20:c0:8b:e5:37:b8:8d:73:2d: ba:42:db:a7:77:b0:12:7f:98:e3:50:9a:6f:5a:67:e8:11:13: 2c:c5:5e:1f:2a:d1:96:bd:20:13:9f:51:e4:2e:26:18:61:5e: 8c:b4:47:f5:2b:cc:05:7b:3b:b8:7d:19:0c:2e:e3:b5:b5:f7: e4:76:cf:c6:a1:d9:49:5a:5e:df:d7:4e:97:e0:b3:29:9a:d9: e1:e6:1a:c3:0b:65:5c:ec:51:c3:50:2c:e8:98:fb:35:31:1c: 02:a8:ba:e4:09:69:5e:4e:9d:53:23:28:fc:94:4f:b8:30:c4: 05:f4:f1:b7:6a:3f:4c:fa:22:71:b5:ab:c0:fc:ac:36:5a:20: 93:73:c2:6d:55:f6:6f:97:69:a6:6c:93:94:5e:96:cf:09:d9: 86:13:de:0a:14:27:f4:c0:c3:a7:ec:bd:fd:4a:00:5a:8b:6e: 73:5f:8b:19:cf:50:94:bc:1a:3c:59:3d:f1:ab:83:bb:99:23: 33:7a:d4:6e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUDz2XmklSMV/2KYjlvBDGYNR/6CAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0EyMEVGQzBCOTlBOEE4NkI0QjRDRkExMDdCMDAxRDUw OEI3MjkwRDAeFw0yNjA0MDgyMTE2MDlaFw0yNjA0MDkyMzE1MDlaMDMxMTAvBgNV BAMTKDI4Njg1MTk2MzIzRTczQ0Y5MDEzN0NERTM3NjU3N0EyOTlCOTBFQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcuWRmqXh9STd8ZNlnk03LnDTz 8DXm/7JZYsxcTr+iX4J92MQ4DsUSRzskNDNygmh7FKoKqq5UT9cVawNNQTTj3u5j HwrUSS89ll1Q5fAmQC3ajX7zL1vAhDxDDEPtai3ORD/+xIeNq2qADSkQ7AENZTM2 0pQ12s3VbFzgqefPr0c2VGvk+uDi4ZIKB7/Vz9/HRXDS2o6cdg/V1eZKXI0zDyyu dBFPkGzbY6SONXaeu2BT3ilIXC8/Fu9GF/MEst1YkRyb4mf6Shq+x16WcjjzHs/Z hSNH/zwspL/AxuTJtwLkNltincjCGeJPsLaQK824FKMP8kOY2Jm6ke6O0cfxAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUKGhRljI+c8+QE3zeN2V3opm5DscwHwYDVR0j BBgwFoAUyiDvwLmaioa0tM+hB7AB1Qi3KQ0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOWFnblNUd3Q3NHFDUzVwckpGd3dLVmtVNG9EcGJIR2dhd25qWHBZcG9Y R0cvMC9DQTIwRUZDMEI5OUE4QTg2QjRCNENGQTEwN0IwMDFENTA4QjcyOTBELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NBMjBFRkMwQjk5QThBODZC NEI0Q0ZBMTA3QjAwMUQ1MDhCNzI5MEQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OWFnblNUd3Q3NHFDUzVwckpGd3dLVmtVNG9EcGJIR2dhd25qWHBZcG9YR0cvMC9D QTIwRUZDMEI5OUE4QTg2QjRCNENGQTEwN0IwMDFENTA4QjcyOTBELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmtOuBKcT3Iw9EoRv5Xu7Av+bYaq+wbF/VqC0M28fml3h+zWDVjj2VlENhDz2 G1+CjrPTgA+lai6bKnNB/tBuIMCL5Te4jXMtukLbp3ewEn+Y41Cab1pn6BETLMVe HyrRlr0gE59R5C4mGGFejLRH9SvMBXs7uH0ZDC7jtbX35HbPxqHZSVpe39dOl+Cz KZrZ4eYawwtlXOxRw1As6Jj7NTEcAqi65AlpXk6dUyMo/JRPuDDEBfTxt2o/TPoi cbWrwPysNlogk3PCbVX2b5dppmyTlF6WzwnZhhPeChQn9MDDp+y9/UoAWotuc1+L Gc9QlLwaPFk98auDu5kjM3rUbg== -----END CERTIFICATE-----Generated at Thu Apr 9 14:50:38 2026 by rpki-client