$ rpki-client -vvf rpki-repo.registro.br/repo/Fc8fxPneRMbQVUe9pcwfhSWW4sb3TunVPY7d5vt7QmzF/0/23A45196211651E8A4484F360D708F4E265B4320.mft File: 23A45196211651E8A4484F360D708F4E265B4320.mft (raw, json) Hash identifier: TXUbULfQG813AXQ/a1xItjR0zkv1qTMPL8dATGiwHGI= Subject key identifier: A2:0A:1A:53:53:40:28:46:35:C4:09:F0:B6:F7:DE:52:85:91:9A:BF Authority key identifier: 23:A4:51:96:21:16:51:E8:A4:48:4F:36:0D:70:8F:4E:26:5B:43:20 Certificate issuer: /CN=23A45196211651E8A4484F360D708F4E265B4320 Certificate serial: 516874E5C27D99DA26E808EEE7F6D889148EB265 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23A45196211651E8A4484F360D708F4E265B4320.cer Subject info access: rsync://rpki-repo.registro.br/repo/Fc8fxPneRMbQVUe9pcwfhSWW4sb3TunVPY7d5vt7QmzF/0/23A45196211651E8A4484F360D708F4E265B4320.mft Manifest number: 0131 Signing time: Thu 09 Apr 2026 10:16:18 +0000 Manifest this update: Thu 09 Apr 2026 10:11:18 +0000 Manifest next update: Fri 10 Apr 2026 13:49:18 +0000 Files and hashes: 1: 34352e3137392e38342e302f32332d3332203d3e20323639303639.roa (hash: aUWjQTk0hgYIXtz5YpZP+Ar4U41t37b6UXQIDro6NCw=) 2: 323830343a356566633a3a2f33322d313238203d3e20323639303639.roa (hash: lzP0xeUMLoX9dWyjd9n03TrAU0arlK1Lb4gv3Lt8koM=) 3: 23A45196211651E8A4484F360D708F4E265B4320.crl (hash: 1VehEbrMkmAYKostkDuYTGtmbYDZ+kjtAkXe7Z8vBOQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Fc8fxPneRMbQVUe9pcwfhSWW4sb3TunVPY7d5vt7QmzF/0/23A45196211651E8A4484F360D708F4E265B4320.crl rsync://rpki-repo.registro.br/repo/Fc8fxPneRMbQVUe9pcwfhSWW4sb3TunVPY7d5vt7QmzF/0/23A45196211651E8A4484F360D708F4E265B4320.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23A45196211651E8A4484F360D708F4E265B4320.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 10 Apr 2026 13:49:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:68:74:e5:c2:7d:99:da:26:e8:08:ee:e7:f6:d8:89:14:8e:b2:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23A45196211651E8A4484F360D708F4E265B4320 Validity Not Before: Apr 9 10:11:18 2026 GMT Not After : Apr 10 13:49:18 2026 GMT Subject: CN=A20A1A535340284635C409F0B6F7DE5285919ABF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:6c:09:a3:b6:4e:24:68:12:a2:77:99:e0:3d: 37:a3:59:a3:e9:fe:d3:aa:5f:c8:ea:46:50:83:b5: d3:5e:4f:83:ad:20:f6:a6:2e:c6:ed:19:e3:34:6f: b8:dd:0a:7f:12:9f:77:c8:5e:21:dc:63:2e:de:0b: 8b:a6:65:c6:f0:46:9c:e0:33:7b:49:83:7e:95:68: 1d:44:23:d5:a5:dd:20:70:38:d6:ce:bd:75:ab:cf: 49:d0:84:d6:1a:41:cd:58:3a:1b:9d:ae:b3:f9:78: 38:77:ef:e7:ae:83:21:e7:5f:42:6b:12:a2:52:8f: b1:ba:a9:ad:a4:41:db:c8:7a:c7:1e:5c:bc:c4:45: 0a:ee:3a:fa:48:02:cd:ae:b2:aa:66:c2:79:c0:e6: d5:bf:ba:b7:c5:10:67:d6:50:c0:ce:43:6f:b0:2a: 5d:c1:85:4e:91:c0:d9:f0:8c:29:9a:d2:56:26:7c: d3:20:c9:45:3e:a1:16:72:32:2d:53:5b:7c:55:78: 7c:b4:81:45:5e:e2:3d:82:56:80:f9:32:b8:d5:80: 2e:84:93:fd:36:af:44:0e:1d:49:0d:82:f1:69:b4: 14:48:86:84:47:74:b8:d5:d5:40:ad:f8:a4:8b:b3: 6a:53:5d:02:48:79:eb:28:33:f3:9c:41:3d:87:11: 5f:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:0A:1A:53:53:40:28:46:35:C4:09:F0:B6:F7:DE:52:85:91:9A:BF X509v3 Authority Key Identifier: keyid:23:A4:51:96:21:16:51:E8:A4:48:4F:36:0D:70:8F:4E:26:5B:43:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Fc8fxPneRMbQVUe9pcwfhSWW4sb3TunVPY7d5vt7QmzF/0/23A45196211651E8A4484F360D708F4E265B4320.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23A45196211651E8A4484F360D708F4E265B4320.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fc8fxPneRMbQVUe9pcwfhSWW4sb3TunVPY7d5vt7QmzF/0/23A45196211651E8A4484F360D708F4E265B4320.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:65:53:7e:ce:02:d6:61:f4:34:fc:b4:95:7c:ec:de:fd:51: 27:0d:f6:d6:d1:72:18:56:98:5f:22:9f:1b:7c:f5:ee:6b:3c: 15:2c:2e:ab:26:31:ea:66:67:1e:e2:0b:f8:8b:39:b6:62:fe: e1:bd:ca:a7:f2:cc:d0:ca:72:9a:a1:20:c3:dc:f1:15:38:24: 56:86:38:9d:5c:07:8d:74:35:6c:07:f1:32:1d:8e:6a:85:60: 43:94:6c:cf:e6:54:bd:74:cf:81:10:97:45:72:8a:9f:b3:a4: ba:84:d5:20:08:d3:91:ba:fe:3f:7e:e3:6e:ac:1c:b1:88:fe: 98:ba:87:00:37:78:89:2e:a6:63:d3:74:45:49:8f:f4:a5:b5: d6:0d:be:b9:5d:e0:a8:8b:5c:87:e7:89:49:03:13:a9:00:94: e6:7d:cd:54:45:0b:33:14:d0:33:2b:9f:86:ef:c5:7e:82:04: 27:15:c0:e9:86:66:85:20:2f:d9:fe:62:33:2e:af:eb:33:53: 73:ff:f2:52:79:47:85:be:e4:31:40:a3:50:be:ec:df:be:4e: 50:18:ff:15:c4:64:c0:db:dc:4a:68:df:4a:d8:eb:96:77:11: c2:c3:29:21:3a:75:d8:4d:74:d5:ec:f4:98:93:be:db:02:f3: 5f:b7:c5:29 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUUWh05cJ9mdom6Aju5/bYiRSOsmUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjNBNDUxOTYyMTE2NTFFOEE0NDg0RjM2MEQ3MDhGNEUy NjVCNDMyMDAeFw0yNjA0MDkxMDExMThaFw0yNjA0MTAxMzQ5MThaMDMxMTAvBgNV BAMTKEEyMEExQTUzNTM0MDI4NDYzNUM0MDlGMEI2RjdERTUyODU5MTlBQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRbAmjtk4kaBKid5ngPTejWaPp /tOqX8jqRlCDtdNeT4OtIPamLsbtGeM0b7jdCn8Sn3fIXiHcYy7eC4umZcbwRpzg M3tJg36VaB1EI9Wl3SBwONbOvXWrz0nQhNYaQc1YOhudrrP5eDh37+eugyHnX0Jr EqJSj7G6qa2kQdvIesceXLzERQruOvpIAs2usqpmwnnA5tW/urfFEGfWUMDOQ2+w Kl3BhU6RwNnwjCma0lYmfNMgyUU+oRZyMi1TW3xVeHy0gUVe4j2CVoD5MrjVgC6E k/02r0QOHUkNgvFptBRIhoRHdLjV1UCt+KSLs2pTXQJIeesoM/OcQT2HEV8HAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUogoaU1NAKEY1xAnwtvfeUoWRmr8wHwYDVR0j BBgwFoAUI6RRliEWUeikSE82DXCPTiZbQyAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRmM4ZnhQbmVSTWJRVlVlOXBjd2ZoU1dXNHNiM1R1blZQWTdkNXZ0N1Ft ekYvMC8yM0E0NTE5NjIxMTY1MUU4QTQ0ODRGMzYwRDcwOEY0RTI2NUI0MzIwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIzQTQ1MTk2MjExNjUxRThB NDQ4NEYzNjBENzA4RjRFMjY1QjQzMjAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RmM4ZnhQbmVSTWJRVlVlOXBjd2ZoU1dXNHNiM1R1blZQWTdkNXZ0N1FtekYvMC8y M0E0NTE5NjIxMTY1MUU4QTQ0ODRGMzYwRDcwOEY0RTI2NUI0MzIwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhWVTfs4C1mH0NPy0lXzs3v1RJw321tFyGFaYXyKfG3z17ms8FSwuqyYx6mZn HuIL+Is5tmL+4b3Kp/LM0MpymqEgw9zxFTgkVoY4nVwHjXQ1bAfxMh2OaoVgQ5Rs z+ZUvXTPgRCXRXKKn7OkuoTVIAjTkbr+P37jbqwcsYj+mLqHADd4iS6mY9N0RUmP 9KW11g2+uV3gqItch+eJSQMTqQCU5n3NVEULMxTQMyufhu/FfoIEJxXA6YZmhSAv 2f5iMy6v6zNTc//yUnlHhb7kMUCjUL7s375OUBj/FcRkwNvcSmjfStjrlncRwsMp ITp12E101ez0mJO+2wLzX7fFKQ== -----END CERTIFICATE-----Generated at Thu Apr 9 12:58:33 2026 by rpki-client