$ rpki-client -vvf rpki-repo.registro.br/repo/A2XbZyVbAPDYNGk6kM85VE3r24EjGaX6wYCmQFLuZ92Q/0/23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA.mft File: 23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA.mft (raw, json) Hash identifier: wlsXJTXe7lmXuYbOfWACVAkjKH5HgWb43k1/dRL1i3M= Subject key identifier: CA:85:82:45:06:0B:B9:96:F4:3F:42:05:1C:59:2E:AC:0C:77:BA:49 Authority key identifier: 23:AC:A8:39:EC:B4:6C:C3:B5:BD:6C:86:BF:69:97:C1:8E:82:77:DA Certificate issuer: /CN=23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA Certificate serial: 1B10CA365B2BDA3C6C5EC6F70C52733E670F3E3E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA.cer Subject info access: rsync://rpki-repo.registro.br/repo/A2XbZyVbAPDYNGk6kM85VE3r24EjGaX6wYCmQFLuZ92Q/0/23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA.mft Manifest number: 0371 Signing time: Thu 09 Apr 2026 09:22:07 +0000 Manifest this update: Thu 09 Apr 2026 09:17:07 +0000 Manifest next update: Fri 10 Apr 2026 12:48:07 +0000 Files and hashes: 1: 23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA.crl (hash: xeRVaCY/5TdCg0uZculdTn8PgAeuTAFHXI4AY4tjVxg=) 2: 323830343a336634383a3a2f33322d313238203d3e20323636363530.roa (hash: ZJt7R5RQ3S+69oulqrX88V0+D552Dy8CGU/EA/kjGd0=) 3: 3132382e3230312e3231362e302f32322d3332203d3e20323636363530.roa (hash: FxlWVMnEAk1FgS1ovjov0z5sBUPXKG9Ay1g80zpcdbI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/A2XbZyVbAPDYNGk6kM85VE3r24EjGaX6wYCmQFLuZ92Q/0/23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA.crl rsync://rpki-repo.registro.br/repo/A2XbZyVbAPDYNGk6kM85VE3r24EjGaX6wYCmQFLuZ92Q/0/23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 10 Apr 2026 12:48:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:10:ca:36:5b:2b:da:3c:6c:5e:c6:f7:0c:52:73:3e:67:0f:3e:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA Validity Not Before: Apr 9 09:17:07 2026 GMT Not After : Apr 10 12:48:07 2026 GMT Subject: CN=CA858245060BB996F43F42051C592EAC0C77BA49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:2e:b5:11:7d:87:82:8c:04:c2:3a:2b:f9:84: 3d:d5:30:ba:e1:05:39:d7:8c:68:70:91:83:ae:bb: 4b:32:dc:0a:01:37:38:20:92:23:d7:ae:bf:6c:30: 9d:c3:f5:23:b0:64:7f:aa:8a:94:91:8c:53:8a:5c: 80:ce:9b:ee:55:f9:39:3e:95:64:5c:64:20:b7:10: e9:a0:35:01:6e:cb:3a:1f:92:12:32:34:f6:1b:59: 1f:c4:e3:6d:79:21:29:5a:da:14:b5:2c:fc:33:1f: 07:63:7d:3e:15:da:ac:61:c7:b8:b4:b5:d3:9c:1c: 59:83:a1:e1:1b:35:74:bb:c9:9c:7c:3b:a3:45:93: f5:f9:6b:06:b3:5c:1d:10:9c:06:ca:0a:78:45:6b: 58:d7:53:42:59:3f:77:a6:8b:cf:67:e0:55:45:96: ea:00:bd:f2:f0:aa:5f:09:93:11:38:6b:47:6a:4e: 88:4a:1b:46:e8:38:66:0e:51:51:e0:2e:87:ed:e4: bc:49:f3:1f:54:27:be:5a:d3:f6:7d:9d:17:9e:f4: 2d:54:ab:3a:e2:a2:4d:69:ed:e2:f2:1a:d5:cd:77: 85:9a:c8:ad:42:82:d4:82:3f:cc:b3:41:2d:2d:95: 93:51:04:d1:85:5e:8d:a4:38:1a:ed:9f:a6:b8:72: 95:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:85:82:45:06:0B:B9:96:F4:3F:42:05:1C:59:2E:AC:0C:77:BA:49 X509v3 Authority Key Identifier: keyid:23:AC:A8:39:EC:B4:6C:C3:B5:BD:6C:86:BF:69:97:C1:8E:82:77:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/A2XbZyVbAPDYNGk6kM85VE3r24EjGaX6wYCmQFLuZ92Q/0/23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2XbZyVbAPDYNGk6kM85VE3r24EjGaX6wYCmQFLuZ92Q/0/23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:8f:ce:68:94:68:51:b7:5d:f5:c7:ab:39:4b:b3:b5:3a:10: c8:27:68:64:4a:b9:7c:fa:6e:b8:ff:88:77:f8:03:b1:8a:b3: 2d:4c:a0:05:56:f7:b4:02:22:73:7e:ee:da:fb:91:c9:17:dc: 56:bf:9a:ba:e7:5c:7a:35:bb:cf:66:b6:0c:69:15:a0:de:1e: df:54:39:7c:82:57:86:0d:f4:28:de:4a:79:d3:4e:4c:a8:57: db:a3:36:9f:0b:9e:37:76:e8:a8:ed:5f:50:99:47:27:e9:62: 84:b6:be:22:02:73:04:a6:90:1d:0a:a8:2b:47:41:d1:ab:a7: 4d:78:ca:43:6d:85:6e:7a:58:d6:56:58:ec:05:2e:3d:a4:d9: 5e:b2:d7:99:dd:02:b6:50:0b:17:3b:b4:f4:48:f3:14:92:1a: c9:29:82:c2:b7:2f:33:f8:c8:4b:6f:46:03:39:79:e2:4f:c3: ec:c4:47:a9:37:a8:ea:33:c3:b7:0d:9b:c0:3f:8c:90:07:3e: d1:ca:2f:d0:45:80:af:a6:c1:2e:30:21:7b:07:03:24:9f:85: fe:c7:cd:36:a9:fe:4d:3e:2c:8b:f5:64:96:6f:6b:cd:43:11: bc:81:c2:8a:31:c3:56:12:70:2e:be:8f:02:c5:72:7f:a3:a6: 6f:27:4e:45 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUGxDKNlsr2jxsXsb3DFJzPmcPPj4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjNBQ0E4MzlFQ0I0NkNDM0I1QkQ2Qzg2QkY2OTk3QzE4 RTgyNzdEQTAeFw0yNjA0MDkwOTE3MDdaFw0yNjA0MTAxMjQ4MDdaMDMxMTAvBgNV BAMTKENBODU4MjQ1MDYwQkI5OTZGNDNGNDIwNTFDNTkyRUFDMEM3N0JBNDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnLrURfYeCjATCOiv5hD3VMLrh BTnXjGhwkYOuu0sy3AoBNzggkiPXrr9sMJ3D9SOwZH+qipSRjFOKXIDOm+5V+Tk+ lWRcZCC3EOmgNQFuyzofkhIyNPYbWR/E4215ISla2hS1LPwzHwdjfT4V2qxhx7i0 tdOcHFmDoeEbNXS7yZx8O6NFk/X5awazXB0QnAbKCnhFa1jXU0JZP3emi89n4FVF luoAvfLwql8JkxE4a0dqTohKG0boOGYOUVHgLoft5LxJ8x9UJ75a0/Z9nRee9C1U qzriok1p7eLyGtXNd4WayK1CgtSCP8yzQS0tlZNRBNGFXo2kOBrtn6a4cpWzAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUyoWCRQYLuZb0P0IFHFkurAx3ukkwHwYDVR0j BBgwFoAUI6yoOey0bMO1vWyGv2mXwY6Cd9owDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQTJYYlp5VmJBUERZTkdrNmtNODVWRTNyMjRFakdhWDZ3WUNtUUZMdVo5 MlEvMC8yM0FDQTgzOUVDQjQ2Q0MzQjVCRDZDODZCRjY5OTdDMThFODI3N0RBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIzQUNBODM5RUNCNDZDQzNC NUJENkM4NkJGNjk5N0MxOEU4Mjc3REEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QTJYYlp5VmJBUERZTkdrNmtNODVWRTNyMjRFakdhWDZ3WUNtUUZMdVo5MlEvMC8y M0FDQTgzOUVDQjQ2Q0MzQjVCRDZDODZCRjY5OTdDMThFODI3N0RBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAi4/OaJRoUbdd9cerOUuztToQyCdoZEq5fPpuuP+Id/gDsYqzLUygBVb3tAIi c37u2vuRyRfcVr+auudcejW7z2a2DGkVoN4e31Q5fIJXhg30KN5KedNOTKhX26M2 nwueN3boqO1fUJlHJ+lihLa+IgJzBKaQHQqoK0dB0aunTXjKQ22FbnpY1lZY7AUu PaTZXrLXmd0CtlALFzu09EjzFJIaySmCwrcvM/jIS29GAzl54k/D7MRHqTeo6jPD tw2bwD+MkAc+0cov0EWAr6bBLjAhewcDJJ+F/sfNNqn+TT4si/Vklm9rzUMRvIHC ijHDVhJwLr6PAsVyf6OmbydORQ== -----END CERTIFICATE-----Generated at Thu Apr 9 16:45:11 2026 by rpki-client