$ rpki-client -vvf rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.mft File: D2991FF0EF094685597EA5146C4730F0270A9201.mft (raw, json) Hash identifier: YkGKMAN/MBFjo+BMn2OcBW5toyldYZ9drZCDV62KkxA= Subject key identifier: AA:42:7E:D0:1E:80:1E:23:EE:3A:8E:C3:A8:18:A9:24:28:72:CB:E2 Authority key identifier: D2:99:1F:F0:EF:09:46:85:59:7E:A5:14:6C:47:30:F0:27:0A:92:01 Certificate issuer: /CN=D2991FF0EF094685597EA5146C4730F0270A9201 Certificate serial: 33CD2DB9C1B50CF48EA86EED6D96E7490DADC062 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2991FF0EF094685597EA5146C4730F0270A9201.cer Subject info access: rsync://rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.mft Manifest number: 02AB Signing time: Thu 09 Apr 2026 10:37:00 +0000 Manifest this update: Thu 09 Apr 2026 10:32:00 +0000 Manifest next update: Fri 10 Apr 2026 14:09:00 +0000 Files and hashes: 1: D2991FF0EF094685597EA5146C4730F0270A9201.crl (hash: dbiz/qZeiIYe3zcFFvaw3UYz63oMZUuH+JG3uQlRiHk=) 2: 3137372e38342e32342e302f32322d3332203d3e20323632353737.roa (hash: C0u1aT3LDMhL5SLNpfi4dKOK4v/xmo0BwWf2GUw/OvQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.crl rsync://rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2991FF0EF094685597EA5146C4730F0270A9201.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 10 Apr 2026 14:09:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:cd:2d:b9:c1:b5:0c:f4:8e:a8:6e:ed:6d:96:e7:49:0d:ad:c0:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2991FF0EF094685597EA5146C4730F0270A9201 Validity Not Before: Apr 9 10:32:00 2026 GMT Not After : Apr 10 14:09:00 2026 GMT Subject: CN=AA427ED01E801E23EE3A8EC3A818A9242872CBE2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:57:ff:72:b8:9a:94:35:b6:57:71:b8:e3:69: 92:1c:4b:8b:6b:21:6d:7f:dc:8b:4e:14:a5:e5:8b: 1d:b9:92:99:79:43:1c:16:04:d0:11:5e:0e:2e:c8: 95:97:b6:97:8b:01:69:ee:d4:25:42:cf:4f:dc:14: 43:2a:c8:ec:0b:46:bb:77:e6:f9:2f:a5:e9:85:fb: 69:6c:02:91:9f:f6:fd:2e:ab:f7:37:c8:16:78:64: 84:94:62:d9:e9:d4:f6:b4:9b:a5:ab:69:4a:53:58: c1:1c:af:d3:59:d1:1c:d7:63:1e:2b:be:11:fb:52: 12:94:a2:77:a2:4c:82:60:79:f9:30:3c:61:ed:dc: 52:d5:7b:0b:5a:ff:c4:01:c9:31:b1:5b:41:63:2d: 0e:8d:67:e3:64:df:31:84:4f:1c:ba:c8:2a:87:f5: ef:23:14:2f:b0:4e:a7:e8:69:0f:89:9a:84:09:32: 1b:2b:30:bb:03:68:94:01:ff:1f:16:f3:65:8e:30: fe:71:78:7c:30:9f:52:55:60:4d:b4:fd:75:13:90: fe:be:89:97:58:22:d0:9f:b5:d6:53:0e:41:99:d3: 62:c8:25:eb:11:67:e4:66:44:90:a2:fe:51:2c:3c: 72:e8:47:30:c0:14:ca:6e:f2:c5:ac:8a:ae:73:9f: 7e:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:42:7E:D0:1E:80:1E:23:EE:3A:8E:C3:A8:18:A9:24:28:72:CB:E2 X509v3 Authority Key Identifier: keyid:D2:99:1F:F0:EF:09:46:85:59:7E:A5:14:6C:47:30:F0:27:0A:92:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2991FF0EF094685597EA5146C4730F0270A9201.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:bf:cf:3a:91:63:8a:00:b1:52:77:1f:b2:6b:0f:d5:2f:06: 9a:11:9e:1a:20:a1:e7:05:ad:c8:b8:51:dd:af:59:f1:47:d7: 7f:60:48:34:61:a1:f9:35:fe:f5:f8:93:2c:69:d2:8e:14:8d: 0c:ec:7e:08:34:bc:d1:a3:26:70:ef:7f:f1:36:54:df:04:cb: be:e9:51:c3:73:7e:65:2e:67:4e:d1:b4:fd:43:ba:ed:15:b1: aa:92:80:08:78:9a:68:1b:18:ee:8f:48:39:48:44:9c:5c:f6: 44:ee:6d:aa:9f:5a:7a:35:52:3a:d7:69:21:f4:4c:db:b3:ae: 4e:cf:6b:e7:7d:7b:2e:66:d2:aa:51:82:c0:d6:91:87:39:f4: b5:ed:7a:e2:39:49:b9:cc:fc:18:a6:5e:c3:e5:ef:ab:b0:07: 31:36:40:cc:4a:0c:38:2f:cf:91:dd:c0:ac:75:54:55:29:40: e4:90:07:3c:65:77:8a:04:e4:13:bd:0c:60:0c:3f:c3:f2:96: ed:7e:20:03:a3:f9:c3:50:3f:98:85:ef:b9:b2:ca:a8:ba:16: f6:ea:0d:2c:55:11:18:0f:4d:e3:51:fc:8b:c2:89:90:f3:fa: 85:36:fa:5e:1a:39:92:e7:37:85:44:3b:c3:76:37:97:47:bc: ca:55:ab:ba -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUM80tucG1DPSOqG7tbZbnSQ2twGIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDI5OTFGRjBFRjA5NDY4NTU5N0VBNTE0NkM0NzMwRjAy NzBBOTIwMTAeFw0yNjA0MDkxMDMyMDBaFw0yNjA0MTAxNDA5MDBaMDMxMTAvBgNV BAMTKEFBNDI3RUQwMUU4MDFFMjNFRTNBOEVDM0E4MThBOTI0Mjg3MkNCRTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmV/9yuJqUNbZXcbjjaZIcS4tr IW1/3ItOFKXlix25kpl5QxwWBNARXg4uyJWXtpeLAWnu1CVCz0/cFEMqyOwLRrt3 5vkvpemF+2lsApGf9v0uq/c3yBZ4ZISUYtnp1Pa0m6WraUpTWMEcr9NZ0RzXYx4r vhH7UhKUoneiTIJgefkwPGHt3FLVewta/8QByTGxW0FjLQ6NZ+Nk3zGETxy6yCqH 9e8jFC+wTqfoaQ+JmoQJMhsrMLsDaJQB/x8W82WOMP5xeHwwn1JVYE20/XUTkP6+ iZdYItCftdZTDkGZ02LIJesRZ+RmRJCi/lEsPHLoRzDAFMpu8sWsiq5zn34jAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUqkJ+0B6AHiPuOo7DqBipJChyy+IwHwYDVR0j BBgwFoAU0pkf8O8JRoVZfqUUbEcw8CcKkgEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQkZRVWk1VlFaNDY3RlZvTWpIZU0ySktMU1JBQ0xIM1RraGVZOHhIUFRW RnovMC9EMjk5MUZGMEVGMDk0Njg1NTk3RUE1MTQ2QzQ3MzBGMDI3MEE5MjAxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QyOTkxRkYwRUYwOTQ2ODU1 OTdFQTUxNDZDNDczMEYwMjcwQTkyMDEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QkZRVWk1VlFaNDY3RlZvTWpIZU0ySktMU1JBQ0xIM1RraGVZOHhIUFRWRnovMC9E Mjk5MUZGMEVGMDk0Njg1NTk3RUE1MTQ2QzQ3MzBGMDI3MEE5MjAxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlb/POpFjigCxUncfsmsP1S8GmhGeGiCh5wWtyLhR3a9Z8UfXf2BINGGh+TX+ 9fiTLGnSjhSNDOx+CDS80aMmcO9/8TZU3wTLvulRw3N+ZS5nTtG0/UO67RWxqpKA CHiaaBsY7o9IOUhEnFz2RO5tqp9aejVSOtdpIfRM27OuTs9r5317LmbSqlGCwNaR hzn0te164jlJucz8GKZew+Xvq7AHMTZAzEoMOC/Pkd3ArHVUVSlA5JAHPGV3igTk E70MYAw/w/KW7X4gA6P5w1A/mIXvubLKqLoW9uoNLFURGA9N41H8i8KJkPP6hTb6 Xho5kuc3hUQ7w3Y3l0e8ylWrug== -----END CERTIFICATE-----Generated at Thu Apr 9 15:58:28 2026 by rpki-client