$ rpki-client -vvf rpki-repo.registro.br/repo/BihkiDR1zFdi55xn12kGyYSNuswzMgVcyxSQz9ifFfzj/0/CA9298E26EC7D83F990DD29EFD395097A928590F.mft File: CA9298E26EC7D83F990DD29EFD395097A928590F.mft (raw, json) Hash identifier: 6MpfpkSdqxiTfro25HfavOlpkxQYM8AzdZYOnZrLD7c= Subject key identifier: 68:1D:91:F4:13:B8:71:51:0F:8C:BC:0F:7F:45:96:5A:65:61:64:3E Authority key identifier: CA:92:98:E2:6E:C7:D8:3F:99:0D:D2:9E:FD:39:50:97:A9:28:59:0F Certificate issuer: /CN=CA9298E26EC7D83F990DD29EFD395097A928590F Certificate serial: 40922D85ADD0EE4AE1646B18144FBA0202146026 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA9298E26EC7D83F990DD29EFD395097A928590F.cer Subject info access: rsync://rpki-repo.registro.br/repo/BihkiDR1zFdi55xn12kGyYSNuswzMgVcyxSQz9ifFfzj/0/CA9298E26EC7D83F990DD29EFD395097A928590F.mft Manifest number: 02FB Signing time: Wed 08 Apr 2026 21:58:45 +0000 Manifest this update: Wed 08 Apr 2026 21:53:45 +0000 Manifest next update: Fri 10 Apr 2026 00:38:45 +0000 Files and hashes: 1: 323830343a316165633a3a2f33322d3438203d3e203631363938.roa (hash: IFrUYpuj0d1bgr14YmgI4By335jGYf5cwE1I2H0w90A=) 2: 3133312e302e3136342e302f32322d3234203d3e203631363938.roa (hash: wtyTmXZbRgRsfoJNHLj8NWX0CbM90+xKZ4dA+uKkbSs=) 3: CA9298E26EC7D83F990DD29EFD395097A928590F.crl (hash: nGoHKi07ctHHpWDU5SYffK6AiXGv8MooNXfoktBbTTk=) 4: 3136382e3232372e38302e302f32322d3234203d3e203631363938.roa (hash: S1X3FDjegEq67IqZtyansbQSwefFYc5W5CadNAvGNo4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BihkiDR1zFdi55xn12kGyYSNuswzMgVcyxSQz9ifFfzj/0/CA9298E26EC7D83F990DD29EFD395097A928590F.crl rsync://rpki-repo.registro.br/repo/BihkiDR1zFdi55xn12kGyYSNuswzMgVcyxSQz9ifFfzj/0/CA9298E26EC7D83F990DD29EFD395097A928590F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA9298E26EC7D83F990DD29EFD395097A928590F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 10 Apr 2026 00:38:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:92:2d:85:ad:d0:ee:4a:e1:64:6b:18:14:4f:ba:02:02:14:60:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA9298E26EC7D83F990DD29EFD395097A928590F Validity Not Before: Apr 8 21:53:45 2026 GMT Not After : Apr 10 00:38:45 2026 GMT Subject: CN=681D91F413B871510F8CBC0F7F45965A6561643E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:f5:01:c8:79:05:c0:e1:17:ac:0e:0f:30:e3: d1:c6:f0:06:ad:90:0c:22:df:f3:9f:d4:4b:54:2d: 0f:9e:81:31:c4:97:41:bb:41:be:59:a5:f2:5e:49: 3a:be:d1:07:3e:28:3d:d6:44:67:33:66:24:ec:33: c5:16:02:ea:2e:d6:5c:d0:b0:b0:6d:13:17:2d:d0: 79:14:bc:cc:29:d1:fa:9d:80:5c:a7:12:11:a5:74: b8:05:8c:00:fb:f1:09:f6:d4:a7:90:62:af:95:fd: 7b:14:20:e2:c3:05:4a:c3:b5:1a:80:00:a3:0a:43: 7b:d9:57:c7:41:0d:7b:b6:cb:8c:3f:f0:57:c3:96: a0:bd:62:99:e2:df:70:3b:ba:d5:4d:17:7b:b5:e3: 32:ec:13:06:17:ad:30:8e:18:94:8c:e7:02:7b:8e: eb:d4:ea:79:38:a5:39:b9:86:fd:99:5e:cf:72:f5: cb:54:c7:e6:51:e3:8e:fa:c1:8e:cf:c6:83:29:cd: 53:d3:a7:0d:43:7a:91:a6:cb:48:9f:6c:ce:01:e0: 2d:af:f3:b9:4f:71:52:6c:1d:49:d4:29:27:67:dc: ff:9b:0d:27:44:2e:44:60:53:b3:49:d4:6e:bb:c1: bd:8c:b1:ab:83:de:e6:ef:45:c8:f5:4a:43:11:63: a1:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:1D:91:F4:13:B8:71:51:0F:8C:BC:0F:7F:45:96:5A:65:61:64:3E X509v3 Authority Key Identifier: keyid:CA:92:98:E2:6E:C7:D8:3F:99:0D:D2:9E:FD:39:50:97:A9:28:59:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BihkiDR1zFdi55xn12kGyYSNuswzMgVcyxSQz9ifFfzj/0/CA9298E26EC7D83F990DD29EFD395097A928590F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA9298E26EC7D83F990DD29EFD395097A928590F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BihkiDR1zFdi55xn12kGyYSNuswzMgVcyxSQz9ifFfzj/0/CA9298E26EC7D83F990DD29EFD395097A928590F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:90:d4:a3:4e:84:ee:d5:70:4d:d5:fa:c3:e0:81:b3:1f:5d: 08:15:71:9c:11:d5:37:eb:d5:5b:50:3a:20:e5:f5:97:9a:73: f8:b7:f8:a8:44:77:62:0b:fd:d9:dd:29:e2:96:be:cd:5b:6f: 4e:99:44:f5:5e:be:d7:26:36:a1:46:84:d5:f1:b5:42:4f:2c: e4:38:b4:1e:91:71:0a:2a:56:9d:bd:70:38:df:c1:0f:ad:25: 74:0a:5f:d3:9b:fa:c8:7a:78:f7:b9:ef:26:58:19:b9:00:54: 60:df:e3:fb:ff:63:8a:54:42:29:93:53:87:4b:c0:d5:fe:f2: 3d:ce:16:d5:c6:2f:e3:f6:3c:2e:15:02:29:aa:2b:23:fb:b1: 1b:8c:69:10:3c:69:5d:6d:14:dc:79:08:4d:10:fe:d9:d1:65: 50:b6:5b:3e:c1:e9:92:b5:88:bc:21:e8:59:bc:84:c5:1a:3f: bc:09:38:ac:b1:49:6e:0f:c3:d2:51:fa:48:b4:92:ec:a2:fb: 3d:c5:1c:e9:7e:e6:54:52:53:11:74:f4:03:06:48:2f:de:c0: 6d:9d:92:b0:9d:86:0e:91:62:c3:ee:95:e4:70:58:32:bd:d7: 0a:6c:85:14:f1:74:d9:00:c2:86:86:f2:aa:51:a8:46:d5:7f: 73:a3:e9:8b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUQJItha3Q7krhZGsYFE+6AgIUYCYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0E5Mjk4RTI2RUM3RDgzRjk5MEREMjlFRkQzOTUwOTdB OTI4NTkwRjAeFw0yNjA0MDgyMTUzNDVaFw0yNjA0MTAwMDM4NDVaMDMxMTAvBgNV BAMTKDY4MUQ5MUY0MTNCODcxNTEwRjhDQkMwRjdGNDU5NjVBNjU2MTY0M0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR9QHIeQXA4ResDg8w49HG8Aat kAwi3/Of1EtULQ+egTHEl0G7Qb5ZpfJeSTq+0Qc+KD3WRGczZiTsM8UWAuou1lzQ sLBtExct0HkUvMwp0fqdgFynEhGldLgFjAD78Qn21KeQYq+V/XsUIOLDBUrDtRqA AKMKQ3vZV8dBDXu2y4w/8FfDlqC9Ypni33A7utVNF3u14zLsEwYXrTCOGJSM5wJ7 juvU6nk4pTm5hv2ZXs9y9ctUx+ZR4476wY7PxoMpzVPTpw1DepGmy0ifbM4B4C2v 87lPcVJsHUnUKSdn3P+bDSdELkRgU7NJ1G67wb2MsauD3ubvRcj1SkMRY6HxAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUaB2R9BO4cVEPjLwPf0WWWmVhZD4wHwYDVR0j BBgwFoAUypKY4m7H2D+ZDdKe/TlQl6koWQ8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQmloa2lEUjF6RmRpNTV4bjEya0d5WVNOdXN3ek1nVmN5eFNRejlpZkZm emovMC9DQTkyOThFMjZFQzdEODNGOTkwREQyOUVGRDM5NTA5N0E5Mjg1OTBGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NBOTI5OEUyNkVDN0Q4M0Y5 OTBERDI5RUZEMzk1MDk3QTkyODU5MEYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Qmloa2lEUjF6RmRpNTV4bjEya0d5WVNOdXN3ek1nVmN5eFNRejlpZkZmemovMC9D QTkyOThFMjZFQzdEODNGOTkwREQyOUVGRDM5NTA5N0E5Mjg1OTBGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEACpDUo06E7tVwTdX6w+CBsx9dCBVxnBHVN+vVW1A6IOX1l5pz+Lf4qER3Ygv9 2d0p4pa+zVtvTplE9V6+1yY2oUaE1fG1Qk8s5Di0HpFxCipWnb1wON/BD60ldApf 05v6yHp497nvJlgZuQBUYN/j+/9jilRCKZNTh0vA1f7yPc4W1cYv4/Y8LhUCKaor I/uxG4xpEDxpXW0U3HkITRD+2dFlULZbPsHpkrWIvCHoWbyExRo/vAk4rLFJbg/D 0lH6SLSS7KL7PcUc6X7mVFJTEXT0AwZIL97AbZ2SsJ2GDpFiw+6V5HBYMr3XCmyF FPF02QDChobyqlGoRtV/c6Ppiw== -----END CERTIFICATE-----Generated at Thu Apr 9 12:52:50 2026 by rpki-client