$ rpki-client -vvf rpki-repo.registro.br/repo/BADbHFcJc6YziKuVnEo6junysm9keNZkQu5uA4Qs3XXC/0/8620EF4AC59B5A865792F0E67652FA1A7C5AA43A.mft File: 8620EF4AC59B5A865792F0E67652FA1A7C5AA43A.mft (raw, json) Hash identifier: zUsG/R/DhtRtGibNWs5SBOm7KE3zy8X0hKRAo13JTCo= Subject key identifier: 53:11:BA:EC:4A:CD:62:AC:A7:C4:C4:94:AE:74:70:E8:B9:52:5E:42 Authority key identifier: 86:20:EF:4A:C5:9B:5A:86:57:92:F0:E6:76:52:FA:1A:7C:5A:A4:3A Certificate issuer: /CN=8620EF4AC59B5A865792F0E67652FA1A7C5AA43A Certificate serial: 245601D22C84705B0EA23291A0A5B255D7F66A7D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8620EF4AC59B5A865792F0E67652FA1A7C5AA43A.cer Subject info access: rsync://rpki-repo.registro.br/repo/BADbHFcJc6YziKuVnEo6junysm9keNZkQu5uA4Qs3XXC/0/8620EF4AC59B5A865792F0E67652FA1A7C5AA43A.mft Manifest number: 1C Signing time: Thu 09 Apr 2026 00:28:36 +0000 Manifest this update: Thu 09 Apr 2026 00:23:36 +0000 Manifest next update: Fri 10 Apr 2026 03:04:36 +0000 Files and hashes: 1: 323830343a313838633a3a2f33322d313238203d3e203631393339.roa (hash: r0sAOrwALk90vhCFY+SkiJV3smIjQ3FbEG1QzGe8ygA=) 2: 3230302e37352e3137362e302f32312d3332203d3e203631393339.roa (hash: zO4x1TXCAHr1YUywwb/WdCGyvwPecOUmoq9Q9dERssA=) 3: 8620EF4AC59B5A865792F0E67652FA1A7C5AA43A.crl (hash: aWK4Tvl31ofJ1pY8VoRr+QYI2xkpol5kn2tybesvQfc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BADbHFcJc6YziKuVnEo6junysm9keNZkQu5uA4Qs3XXC/0/8620EF4AC59B5A865792F0E67652FA1A7C5AA43A.crl rsync://rpki-repo.registro.br/repo/BADbHFcJc6YziKuVnEo6junysm9keNZkQu5uA4Qs3XXC/0/8620EF4AC59B5A865792F0E67652FA1A7C5AA43A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8620EF4AC59B5A865792F0E67652FA1A7C5AA43A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 10 Apr 2026 03:04:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:56:01:d2:2c:84:70:5b:0e:a2:32:91:a0:a5:b2:55:d7:f6:6a:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8620EF4AC59B5A865792F0E67652FA1A7C5AA43A Validity Not Before: Apr 9 00:23:36 2026 GMT Not After : Apr 10 03:04:36 2026 GMT Subject: CN=5311BAEC4ACD62ACA7C4C494AE7470E8B9525E42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:5b:91:c7:be:5d:b8:49:d5:bf:03:b8:d6:e0: cc:e8:99:7f:d1:1f:ba:4c:a2:8d:22:da:b8:aa:30: f7:24:68:e0:c8:45:01:c3:59:0a:d8:e5:1f:70:8d: ec:48:08:12:04:60:f1:57:93:8c:ce:4d:04:1a:c9: 9d:3f:39:78:61:68:6f:db:fd:8d:69:b5:8b:94:63: 5c:ce:f2:8b:51:e8:68:a9:75:44:51:42:ac:8c:be: 98:e3:e0:bb:c0:60:18:7c:56:93:f6:04:36:56:52: 60:4b:1f:66:59:f7:33:d7:62:c9:6c:32:5c:ee:d7: b0:ba:4a:78:ef:ca:9a:1d:dc:d7:f1:cc:e4:9c:d0: 9e:a8:7b:17:7a:33:23:44:f7:4f:3b:91:55:0d:4c: e7:90:07:93:d3:92:22:ab:53:ce:bb:18:ec:d8:79: f4:14:99:65:12:32:c9:0e:cf:d7:b5:33:12:b3:0f: 34:b2:37:5f:5a:05:bd:fb:27:f9:b8:8b:97:35:bb: 58:41:ed:31:e8:4a:3c:2f:5e:9d:7f:ea:71:7d:2e: 0f:85:77:3d:d0:b9:ca:d8:cf:12:4c:47:ba:4f:11: 10:f4:96:22:75:95:bd:fa:ca:72:55:e2:30:59:38: fa:37:48:71:e0:20:f1:0c:2a:8a:5f:8c:52:68:15: 01:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:11:BA:EC:4A:CD:62:AC:A7:C4:C4:94:AE:74:70:E8:B9:52:5E:42 X509v3 Authority Key Identifier: keyid:86:20:EF:4A:C5:9B:5A:86:57:92:F0:E6:76:52:FA:1A:7C:5A:A4:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BADbHFcJc6YziKuVnEo6junysm9keNZkQu5uA4Qs3XXC/0/8620EF4AC59B5A865792F0E67652FA1A7C5AA43A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8620EF4AC59B5A865792F0E67652FA1A7C5AA43A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BADbHFcJc6YziKuVnEo6junysm9keNZkQu5uA4Qs3XXC/0/8620EF4AC59B5A865792F0E67652FA1A7C5AA43A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:d3:36:2c:27:e7:4e:72:89:44:2d:bb:3d:1d:4e:99:4c:6d: b6:72:17:d1:c4:ed:08:40:e5:68:62:c7:ca:10:e0:df:e0:f0: 11:8e:fa:f2:d4:a5:29:cc:52:22:b9:74:ca:f6:0b:d7:7f:c7: 0f:41:37:b5:18:7e:b3:7a:97:7e:10:e7:01:e4:e2:ee:1b:2b: 4e:03:d2:10:11:77:07:b9:2c:23:f5:a4:4b:3f:20:8a:a6:21: fa:ef:fe:15:c2:7b:21:c7:c3:f3:87:d0:8a:8e:66:1b:8e:3c: 80:66:76:25:0a:53:9e:bb:2c:7e:d0:54:0f:17:27:59:19:01: 8b:b0:ca:5f:a4:d2:3d:b2:16:de:5d:d3:2e:72:28:d5:87:3f: 12:34:a3:7d:71:e0:5b:b4:6e:50:ec:e0:49:4b:44:b5:c3:f8: 3b:9e:eb:9b:00:de:36:3a:b0:f0:c2:be:32:80:2d:35:22:b9: 32:5a:be:f3:8f:e3:13:e8:cd:58:80:4d:dc:22:65:a3:ff:12: d3:d4:1b:66:d6:d0:df:e1:61:e2:c5:df:36:b9:6e:36:59:66: 93:b8:51:c8:0f:9f:b1:9a:6b:dc:fa:b7:64:04:bb:a1:f9:1c: 51:be:37:27:68:d1:ae:e1:c9:23:ae:7f:e9:ab:20:86:1f:d2: fa:b2:72:04 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUJFYB0iyEcFsOojKRoKWyVdf2an0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODYyMEVGNEFDNTlCNUE4NjU3OTJGMEU2NzY1MkZBMUE3 QzVBQTQzQTAeFw0yNjA0MDkwMDIzMzZaFw0yNjA0MTAwMzA0MzZaMDMxMTAvBgNV BAMTKDUzMTFCQUVDNEFDRDYyQUNBN0M0QzQ5NEFFNzQ3MEU4Qjk1MjVFNDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfW5HHvl24SdW/A7jW4MzomX/R H7pMoo0i2riqMPckaODIRQHDWQrY5R9wjexICBIEYPFXk4zOTQQayZ0/OXhhaG/b /Y1ptYuUY1zO8otR6GipdURRQqyMvpjj4LvAYBh8VpP2BDZWUmBLH2ZZ9zPXYsls Mlzu17C6Snjvypod3NfxzOSc0J6oexd6MyNE9087kVUNTOeQB5PTkiKrU867GOzY efQUmWUSMskOz9e1MxKzDzSyN19aBb37J/m4i5c1u1hB7THoSjwvXp1/6nF9Lg+F dz3QucrYzxJMR7pPERD0liJ1lb36ynJV4jBZOPo3SHHgIPEMKopfjFJoFQHfAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUUxG67ErNYqynxMSUrnRw6LlSXkIwHwYDVR0j BBgwFoAUhiDvSsWbWoZXkvDmdlL6GnxapDowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQkFEYkhGY0pjNll6aUt1Vm5FbzZqdW55c205a2VOWmtRdTV1QTRRczNY WEMvMC84NjIwRUY0QUM1OUI1QTg2NTc5MkYwRTY3NjUyRkExQTdDNUFBNDNBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg2MjBFRjRBQzU5QjVBODY1 NzkyRjBFNjc2NTJGQTFBN0M1QUE0M0EuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QkFEYkhGY0pjNll6aUt1Vm5FbzZqdW55c205a2VOWmtRdTV1QTRRczNYWEMvMC84 NjIwRUY0QUM1OUI1QTg2NTc5MkYwRTY3NjUyRkExQTdDNUFBNDNBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgNM2LCfnTnKJRC27PR1OmUxttnIX0cTtCEDlaGLHyhDg3+DwEY768tSlKcxS Irl0yvYL13/HD0E3tRh+s3qXfhDnAeTi7hsrTgPSEBF3B7ksI/WkSz8giqYh+u/+ FcJ7IcfD84fQio5mG448gGZ2JQpTnrssftBUDxcnWRkBi7DKX6TSPbIW3l3TLnIo 1Yc/EjSjfXHgW7RuUOzgSUtEtcP4O57rmwDeNjqw8MK+MoAtNSK5Mlq+84/jE+jN WIBN3CJlo/8S09QbZtbQ3+Fh4sXfNrluNllmk7hRyA+fsZpr3Pq3ZAS7ofkcUb43 J2jRruHJI65/6asghh/S+rJyBA== -----END CERTIFICATE-----Generated at Thu Apr 9 16:41:21 2026 by rpki-client