$ rpki-client -vvf rpki-repo.registro.br/repo/ATWTZvtaZz4KXW23TCFUxaPQqE6cmRUBRa8G8Fpeuqf/0/CA0AB2BCB283EFEBB77229E56E86E45C9864D5CF.mft File: CA0AB2BCB283EFEBB77229E56E86E45C9864D5CF.mft (raw, json) Hash identifier: qpsQLuoygl2vUpBm+mVUDReZlWlZFbwGl0DfWZItNNc= Subject key identifier: 29:02:6E:93:4C:E4:54:35:6B:98:FF:2B:97:46:77:BA:33:F3:42:45 Authority key identifier: CA:0A:B2:BC:B2:83:EF:EB:B7:72:29:E5:6E:86:E4:5C:98:64:D5:CF Certificate issuer: /CN=CA0AB2BCB283EFEBB77229E56E86E45C9864D5CF Certificate serial: 6A080AB05A9006223CEFC8494BACBABF88DA3B08 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA0AB2BCB283EFEBB77229E56E86E45C9864D5CF.cer Subject info access: rsync://rpki-repo.registro.br/repo/ATWTZvtaZz4KXW23TCFUxaPQqE6cmRUBRa8G8Fpeuqf/0/CA0AB2BCB283EFEBB77229E56E86E45C9864D5CF.mft Manifest number: 0107 Signing time: Wed 08 Apr 2026 21:45:37 +0000 Manifest this update: Wed 08 Apr 2026 21:40:37 +0000 Manifest next update: Thu 09 Apr 2026 23:09:37 +0000 Files and hashes: 1: 3139322e3134302e36382e302f32322d3332203d3e20323636323531.roa (hash: EsQelpaQeAfU/Gzg0i25pm2jNJGfy2Qz/7ELSEE9Oeo=) 2: 323830343a336431303a3a2f33322d313238203d3e20323636323531.roa (hash: 6OM5TUR8INqK6ybskaGnuewoKzCLeWsNPgoxidg6HF0=) 3: CA0AB2BCB283EFEBB77229E56E86E45C9864D5CF.crl (hash: n5bi8knmsv9XiuVbqVms4Ct0cg+6P38QtrHN6/LTLz0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/ATWTZvtaZz4KXW23TCFUxaPQqE6cmRUBRa8G8Fpeuqf/0/CA0AB2BCB283EFEBB77229E56E86E45C9864D5CF.crl rsync://rpki-repo.registro.br/repo/ATWTZvtaZz4KXW23TCFUxaPQqE6cmRUBRa8G8Fpeuqf/0/CA0AB2BCB283EFEBB77229E56E86E45C9864D5CF.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA0AB2BCB283EFEBB77229E56E86E45C9864D5CF.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 09 Apr 2026 23:09:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:08:0a:b0:5a:90:06:22:3c:ef:c8:49:4b:ac:ba:bf:88:da:3b:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA0AB2BCB283EFEBB77229E56E86E45C9864D5CF Validity Not Before: Apr 8 21:40:37 2026 GMT Not After : Apr 9 23:09:37 2026 GMT Subject: CN=29026E934CE454356B98FF2B974677BA33F34245 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:fe:2a:22:08:b2:51:82:ef:42:1a:85:27:c6: 69:30:1b:2a:95:f6:f7:0c:b6:f6:0c:c5:5b:e9:f8: f6:19:5b:ee:44:e1:55:df:aa:e3:13:bc:08:18:f7: c7:0f:4e:9b:db:db:59:00:5f:21:c1:d7:2e:ee:86: 5c:18:37:53:7d:83:82:9a:05:89:f1:5e:3e:ca:ff: 4b:18:2b:fc:ef:8a:5c:21:89:a7:05:06:23:98:d4: 4a:89:02:99:a2:3c:f0:3e:c2:ec:d0:6d:8e:b0:55: f2:a0:d7:7a:7c:22:3f:fd:42:2a:ef:3b:67:7d:cc: 0d:af:01:34:e7:10:ba:f0:32:e0:f7:fd:07:cf:05: 89:2d:16:3a:43:75:52:30:d2:51:a7:d3:d2:89:57: 78:fa:d6:c9:73:f2:b1:a5:df:e4:5d:54:2d:c3:20: 15:e7:18:f7:47:aa:9c:0e:78:36:dd:24:96:50:2b: 75:e3:ce:44:0d:b7:5a:bc:04:aa:71:f8:53:56:96: 1c:2b:92:ab:9d:8c:9b:bb:cc:78:c7:51:c4:c7:a4: 38:f4:13:ef:f0:6a:cb:17:89:1a:34:1e:84:a4:52: 8a:4a:e2:c5:a8:82:cb:82:e2:08:49:fa:3a:c3:10: 67:c0:35:66:df:1d:db:84:a8:3a:59:2a:29:f2:0e: 5d:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:02:6E:93:4C:E4:54:35:6B:98:FF:2B:97:46:77:BA:33:F3:42:45 X509v3 Authority Key Identifier: keyid:CA:0A:B2:BC:B2:83:EF:EB:B7:72:29:E5:6E:86:E4:5C:98:64:D5:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/ATWTZvtaZz4KXW23TCFUxaPQqE6cmRUBRa8G8Fpeuqf/0/CA0AB2BCB283EFEBB77229E56E86E45C9864D5CF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA0AB2BCB283EFEBB77229E56E86E45C9864D5CF.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/ATWTZvtaZz4KXW23TCFUxaPQqE6cmRUBRa8G8Fpeuqf/0/CA0AB2BCB283EFEBB77229E56E86E45C9864D5CF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:4b:94:12:89:cb:e8:bd:c9:e8:79:7e:d9:3d:4c:c9:fe:c1: 73:d4:8f:8c:93:ff:10:35:a0:10:54:42:a1:d0:71:b6:dc:70: ec:b9:f2:b1:15:7d:5a:1e:60:ed:38:23:e1:d6:22:97:92:ec: 6c:53:a6:93:fa:91:32:db:f2:d9:9b:f8:f0:a4:dd:9e:cd:65: e9:83:1e:e0:6a:e3:8e:0e:52:08:f7:98:03:2d:a0:98:28:a5: 60:95:9c:b5:cd:ff:02:16:4b:23:62:cc:6f:42:78:1c:21:31: 0a:ad:04:17:cb:40:12:ec:d2:3b:1c:b4:73:8e:a5:b7:2b:a7: c2:f2:ac:b9:64:bf:e3:6b:1a:f0:17:16:db:d6:e7:d0:a1:f5: 50:d5:24:ff:da:0c:28:0e:c3:77:2d:ba:4a:d1:c7:48:db:84: 9d:ee:55:68:e7:5b:42:91:d4:ba:8f:48:4f:5d:26:ea:83:15: 52:12:d7:58:49:d8:c4:d3:d4:4e:de:c5:27:00:63:81:19:eb: e6:40:0d:25:12:d1:f2:05:ee:35:90:cc:a2:67:ea:78:61:85: c7:42:e4:2a:59:b9:ba:6a:dd:0e:20:0c:06:7e:49:88:81:d9: 11:da:cd:46:13:66:22:3d:64:54:20:c7:38:74:7a:12:a6:5c: 26:a5:4d:fc -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUaggKsFqQBiI878hJS6y6v4jaOwgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0EwQUIyQkNCMjgzRUZFQkI3NzIyOUU1NkU4NkU0NUM5 ODY0RDVDRjAeFw0yNjA0MDgyMTQwMzdaFw0yNjA0MDkyMzA5MzdaMDMxMTAvBgNV BAMTKDI5MDI2RTkzNENFNDU0MzU2Qjk4RkYyQjk3NDY3N0JBMzNGMzQyNDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi/ioiCLJRgu9CGoUnxmkwGyqV 9vcMtvYMxVvp+PYZW+5E4VXfquMTvAgY98cPTpvb21kAXyHB1y7uhlwYN1N9g4Ka BYnxXj7K/0sYK/zvilwhiacFBiOY1EqJApmiPPA+wuzQbY6wVfKg13p8Ij/9Qirv O2d9zA2vATTnELrwMuD3/QfPBYktFjpDdVIw0lGn09KJV3j61slz8rGl3+RdVC3D IBXnGPdHqpwOeDbdJJZQK3XjzkQNt1q8BKpx+FNWlhwrkqudjJu7zHjHUcTHpDj0 E+/wassXiRo0HoSkUopK4sWogsuC4ghJ+jrDEGfANWbfHduEqDpZKinyDl1HAgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUKQJuk0zkVDVrmP8rl0Z3ujPzQkUwHwYDVR0j BBgwFoAUygqyvLKD7+u3cinlbobkXJhk1c8wDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9BVFdUWnZ0YVp6NEtYVzIzVENGVXhhUFFxRTZjbVJVQlJhOEc4RnBldXFm LzAvQ0EwQUIyQkNCMjgzRUZFQkI3NzIyOUU1NkU4NkU0NUM5ODY0RDVDRi5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9DQTBBQjJCQ0IyODNFRkVCQjc3 MjI5RTU2RTg2RTQ1Qzk4NjRENUNGLmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0FU V1RadnRhWno0S1hXMjNUQ0ZVeGFQUXFFNmNtUlVCUmE4RzhGcGV1cWYvMC9DQTBB QjJCQ0IyODNFRkVCQjc3MjI5RTU2RTg2RTQ1Qzk4NjRENUNGLm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA NEuUEonL6L3J6Hl+2T1Myf7Bc9SPjJP/EDWgEFRCodBxttxw7LnysRV9Wh5g7Tgj 4dYil5LsbFOmk/qRMtvy2Zv48KTdns1l6YMe4Grjjg5SCPeYAy2gmCilYJWctc3/ AhZLI2LMb0J4HCExCq0EF8tAEuzSOxy0c46ltyunwvKsuWS/42sa8BcW29bn0KH1 UNUk/9oMKA7Ddy26StHHSNuEne5VaOdbQpHUuo9IT10m6oMVUhLXWEnYxNPUTt7F JwBjgRnr5kANJRLR8gXuNZDMomfqeGGFx0LkKlm5umrdDiAMBn5JiIHZEdrNRhNm Ij1kVCDHOHR6EqZcJqVN/A== -----END CERTIFICATE-----Generated at Thu Apr 9 14:28:46 2026 by rpki-client