$ rpki-client -vvf rpki-repo.registro.br/repo/CTtUbo2eqp8cGauVkQCTifHQuaeE5VfSiYp4TwXeX1J9/0/DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7.mft File: DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7.mft (raw, json) Hash identifier: rvxHHQghUl3EsakzLUJ5t1iJujxONwoj8ZqTB1/Dpw0= Subject key identifier: 98:B9:8D:9D:7E:05:88:D9:0C:54:2E:43:EF:77:19:84:9B:B5:33:2E Authority key identifier: DF:34:AF:E4:C3:52:59:EA:0E:0A:B9:3A:34:0D:F1:39:E8:6B:8D:B7 Certificate issuer: /CN=DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7 Certificate serial: 081C69825D8188EEA4A813156A9BD14EEE5904EA Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7.cer Subject info access: rsync://rpki-repo.registro.br/repo/CTtUbo2eqp8cGauVkQCTifHQuaeE5VfSiYp4TwXeX1J9/0/DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7.mft Manifest number: 0170 Signing time: Wed 08 Apr 2026 23:25:32 +0000 Manifest this update: Wed 08 Apr 2026 23:20:32 +0000 Manifest next update: Fri 10 Apr 2026 01:02:32 +0000 Files and hashes: 1: DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7.crl (hash: NfokONEQVRx6jlPUae9ZnA5brAzKIA+iojxhGVscv2w=) 2: 323830343a386532303a3a2f33322d313238203d3e20323733343034.roa (hash: +rQtNxAInELK5ARSncrEa6aoX0jAyBJS0K9vEo2MC/M=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CTtUbo2eqp8cGauVkQCTifHQuaeE5VfSiYp4TwXeX1J9/0/DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7.crl rsync://rpki-repo.registro.br/repo/CTtUbo2eqp8cGauVkQCTifHQuaeE5VfSiYp4TwXeX1J9/0/DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 10 Apr 2026 01:02:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:1c:69:82:5d:81:88:ee:a4:a8:13:15:6a:9b:d1:4e:ee:59:04:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7 Validity Not Before: Apr 8 23:20:32 2026 GMT Not After : Apr 10 01:02:32 2026 GMT Subject: CN=98B98D9D7E0588D90C542E43EF7719849BB5332E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:2b:14:ea:bd:db:69:62:43:ea:5d:66:60:4b: f0:18:c1:20:40:68:f5:cc:a6:f6:8b:ba:7a:ab:86: d5:7c:2b:6d:85:92:58:64:08:7c:34:f7:be:f2:21: 7c:b3:98:47:ba:af:3a:17:1c:ed:39:05:ca:5d:a9: ac:f3:ef:81:10:7b:d5:28:34:dd:91:53:62:1d:79: 1c:50:e1:72:91:36:98:7d:ef:2f:cc:94:dd:2f:4f: b5:cc:a9:10:81:ac:2c:9f:c7:e2:22:9d:bb:04:ab: c6:18:8f:a9:e3:e4:65:d0:c5:54:f7:7b:52:c8:c0: 40:2f:8b:1a:ab:b7:f4:ec:ce:59:96:2f:f6:a7:ab: 77:ff:2f:95:1b:ca:74:ec:51:24:e6:4f:10:61:b2: 3f:ed:92:48:2d:d9:0d:e1:47:1b:6c:01:f4:18:89: 3a:1f:08:b5:05:45:42:4d:60:49:64:16:4a:09:59: 3d:f4:cc:00:64:fa:f8:88:eb:d8:1e:b9:54:83:30: ce:76:d1:a5:49:94:7e:0c:4d:57:5b:5d:cf:bf:f6: 21:7f:5b:1e:77:5d:ca:28:1e:dd:cb:7a:b4:9e:38: e7:24:23:8b:ea:88:52:13:af:5b:9f:d7:b1:2a:8b: 53:df:36:2a:69:3d:a6:3e:73:8b:71:81:34:e5:46: e7:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:B9:8D:9D:7E:05:88:D9:0C:54:2E:43:EF:77:19:84:9B:B5:33:2E X509v3 Authority Key Identifier: keyid:DF:34:AF:E4:C3:52:59:EA:0E:0A:B9:3A:34:0D:F1:39:E8:6B:8D:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CTtUbo2eqp8cGauVkQCTifHQuaeE5VfSiYp4TwXeX1J9/0/DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CTtUbo2eqp8cGauVkQCTifHQuaeE5VfSiYp4TwXeX1J9/0/DF34AFE4C35259EA0E0AB93A340DF139E86B8DB7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:9f:66:79:4b:c3:be:7c:cc:0f:79:85:54:13:26:46:dc:57: c1:02:4d:1a:0d:58:d4:65:d8:1b:2a:97:b8:68:25:d9:44:f1: da:a0:81:d0:5a:e7:7d:3a:fc:78:de:e0:79:1d:a4:93:fa:02: 53:19:55:fe:e4:38:2a:fb:c7:f4:0c:6d:37:16:4a:46:0b:19: 4d:cc:1b:81:bb:88:7d:89:3f:33:81:8d:64:5f:c7:e2:04:42: 3a:62:b4:52:e4:cb:3e:dd:2f:7a:9f:e9:42:6e:db:c4:4a:4f: cd:46:4e:7a:49:0e:2e:fa:18:69:3c:99:b7:20:de:d7:d1:33: 54:eb:13:40:2a:d7:02:f0:14:72:4c:d1:b9:61:d5:ad:62:97: ce:62:12:83:72:e2:de:7f:a0:46:ef:03:88:54:86:f3:35:95: 39:c6:d4:9e:39:e8:57:57:9d:13:dc:77:3a:96:72:a5:bd:6f: 01:98:47:1d:4c:e7:f9:b8:ad:96:6e:88:88:af:48:c9:9b:dc: ea:82:6e:8d:ce:1d:95:4e:8f:a6:2a:5f:59:f7:45:d8:6c:fc: 23:21:be:06:05:fc:7f:ac:2c:27:ed:48:aa:2d:c6:bb:ab:08: 0a:3a:d1:4a:b4:60:07:9c:84:36:f8:ad:c6:df:a5:b9:ff:63: 1e:3f:3b:65 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUCBxpgl2BiO6kqBMVapvRTu5ZBOowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREYzNEFGRTRDMzUyNTlFQTBFMEFCOTNBMzQwREYxMzlF ODZCOERCNzAeFw0yNjA0MDgyMzIwMzJaFw0yNjA0MTAwMTAyMzJaMDMxMTAvBgNV BAMTKDk4Qjk4RDlEN0UwNTg4RDkwQzU0MkU0M0VGNzcxOTg0OUJCNTMzMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqKxTqvdtpYkPqXWZgS/AYwSBA aPXMpvaLunqrhtV8K22FklhkCHw0977yIXyzmEe6rzoXHO05Bcpdqazz74EQe9Uo NN2RU2IdeRxQ4XKRNph97y/MlN0vT7XMqRCBrCyfx+IinbsEq8YYj6nj5GXQxVT3 e1LIwEAvixqrt/TszlmWL/anq3f/L5UbynTsUSTmTxBhsj/tkkgt2Q3hRxtsAfQY iTofCLUFRUJNYElkFkoJWT30zABk+viI69geuVSDMM520aVJlH4MTVdbXc+/9iF/ Wx53XcooHt3LerSeOOckI4vqiFITr1uf17Eqi1PfNippPaY+c4txgTTlRud7AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUmLmNnX4FiNkMVC5D73cZhJu1My4wHwYDVR0j BBgwFoAU3zSv5MNSWeoOCrk6NA3xOehrjbcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ1R0VWJvMmVxcDhjR2F1VmtRQ1RpZkhRdWFlRTVWZlNpWXA0VHdYZVgx SjkvMC9ERjM0QUZFNEMzNTI1OUVBMEUwQUI5M0EzNDBERjEzOUU4NkI4REI3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RGMzRBRkU0QzM1MjU5RUEw RTBBQjkzQTM0MERGMTM5RTg2QjhEQjcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q1R0VWJvMmVxcDhjR2F1VmtRQ1RpZkhRdWFlRTVWZlNpWXA0VHdYZVgxSjkvMC9E RjM0QUZFNEMzNTI1OUVBMEUwQUI5M0EzNDBERjEzOUU4NkI4REI3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWJ9meUvDvnzMD3mFVBMmRtxXwQJNGg1Y1GXYGyqXuGgl2UTx2qCB0FrnfTr8 eN7geR2kk/oCUxlV/uQ4KvvH9AxtNxZKRgsZTcwbgbuIfYk/M4GNZF/H4gRCOmK0 UuTLPt0vep/pQm7bxEpPzUZOekkOLvoYaTyZtyDe19EzVOsTQCrXAvAUckzRuWHV rWKXzmISg3Li3n+gRu8DiFSG8zWVOcbUnjnoV1edE9x3OpZypb1vAZhHHUzn+bit lm6IiK9IyZvc6oJujc4dlU6PpipfWfdF2Gz8IyG+BgX8f6wsJ+1Iqi3Gu6sICjrR SrRgB5yENvitxt+luf9jHj87ZQ== -----END CERTIFICATE-----Generated at Thu Apr 9 13:02:08 2026 by rpki-client