$ rpki-client -vvf rpki-repo.registro.br/repo/FkKsXz3HgtZQBwSgr67hasDv5YQwpYtyQYtnPjFPWjpJ/0/8AA7FC80CEE8DB7AA9EF850F86EAFAB222EBB0F8.mft File: 8AA7FC80CEE8DB7AA9EF850F86EAFAB222EBB0F8.mft (raw, json) Hash identifier: tGcCOhEoZmXl1tIUjXpLkq20RtHX63qrdqhDfBO5D0M= Subject key identifier: 1F:BF:D2:08:C1:E7:A8:0C:A6:59:57:AB:EC:52:31:E5:A7:DA:0B:B2 Authority key identifier: 8A:A7:FC:80:CE:E8:DB:7A:A9:EF:85:0F:86:EA:FA:B2:22:EB:B0:F8 Certificate issuer: /CN=8AA7FC80CEE8DB7AA9EF850F86EAFAB222EBB0F8 Certificate serial: 3737D09070B815088B2EDEF386EA4158DE50B5CA Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AA7FC80CEE8DB7AA9EF850F86EAFAB222EBB0F8.cer Subject info access: rsync://rpki-repo.registro.br/repo/FkKsXz3HgtZQBwSgr67hasDv5YQwpYtyQYtnPjFPWjpJ/0/8AA7FC80CEE8DB7AA9EF850F86EAFAB222EBB0F8.mft Manifest number: 07 Signing time: Thu 09 Apr 2026 08:00:59 +0000 Manifest this update: Thu 09 Apr 2026 07:55:59 +0000 Manifest next update: Fri 10 Apr 2026 11:20:59 +0000 Files and hashes: 1: 34352e3138362e3138342e302f32322d3332203d3e20323639343436.roa (hash: A/bGn0M8I11kkBKL1Dc8DIL7FIf9wKcH2GOFHDWUBGo=) 2: 323830343a363463303a3a2f33322d313238203d3e20323639343436.roa (hash: hs6q1hStmZQII04PhysFNXRC8WSUjJye1T2F5jvEh+o=) 3: 8AA7FC80CEE8DB7AA9EF850F86EAFAB222EBB0F8.crl (hash: 4PZ0nazl2Bsweazs3F2YWjHWRGoDP56ubaew+Wcvkf8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/FkKsXz3HgtZQBwSgr67hasDv5YQwpYtyQYtnPjFPWjpJ/0/8AA7FC80CEE8DB7AA9EF850F86EAFAB222EBB0F8.crl rsync://rpki-repo.registro.br/repo/FkKsXz3HgtZQBwSgr67hasDv5YQwpYtyQYtnPjFPWjpJ/0/8AA7FC80CEE8DB7AA9EF850F86EAFAB222EBB0F8.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AA7FC80CEE8DB7AA9EF850F86EAFAB222EBB0F8.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 10 Apr 2026 11:20:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:37:d0:90:70:b8:15:08:8b:2e:de:f3:86:ea:41:58:de:50:b5:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AA7FC80CEE8DB7AA9EF850F86EAFAB222EBB0F8 Validity Not Before: Apr 9 07:55:59 2026 GMT Not After : Apr 10 11:20:59 2026 GMT Subject: CN=1FBFD208C1E7A80CA65957ABEC5231E5A7DA0BB2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:22:02:1b:0d:27:db:7e:cd:91:b9:64:ba:0a: 57:85:c2:9c:ee:86:a2:dc:39:fb:7d:b9:9d:6d:f3: 5c:fc:33:4f:77:cd:41:f4:83:85:7e:7f:78:89:ef: fd:50:be:33:8b:cf:d3:cb:b9:66:60:61:6f:10:e9: c0:7b:4d:30:2c:3c:da:1a:d7:14:c3:ba:09:a0:36: 0a:c4:ab:96:aa:16:9d:3e:49:9c:5a:c6:90:11:8a: 72:32:3b:c4:aa:45:81:4c:2e:f0:5b:ca:13:84:32: e1:78:bf:ba:34:c2:ba:39:af:d8:e0:24:8e:43:14: f4:20:9b:57:11:52:c3:a1:20:42:66:8f:b0:ad:d1: 57:20:da:7d:ba:9c:f2:74:a5:02:ac:b3:cd:fc:a3: f2:e4:73:0a:2f:3d:9f:95:a2:c7:4e:26:f5:12:59: bf:63:b6:4a:3e:b4:38:55:06:a9:1e:04:b8:07:13: b8:82:32:3b:7b:36:67:a1:66:56:b5:f1:6b:82:5d: 98:c6:a5:c7:99:51:1b:8c:5c:87:6c:bc:2b:2b:0a: cf:e4:d6:3f:d9:4b:c2:7c:97:c6:47:7f:cb:35:24: bc:fa:0d:e6:fa:f0:a8:0a:d1:6b:2b:39:f3:0a:d1: 9e:38:bc:6d:4d:34:53:30:39:17:06:c7:a2:ea:f3: 08:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:BF:D2:08:C1:E7:A8:0C:A6:59:57:AB:EC:52:31:E5:A7:DA:0B:B2 X509v3 Authority Key Identifier: keyid:8A:A7:FC:80:CE:E8:DB:7A:A9:EF:85:0F:86:EA:FA:B2:22:EB:B0:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/FkKsXz3HgtZQBwSgr67hasDv5YQwpYtyQYtnPjFPWjpJ/0/8AA7FC80CEE8DB7AA9EF850F86EAFAB222EBB0F8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AA7FC80CEE8DB7AA9EF850F86EAFAB222EBB0F8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/FkKsXz3HgtZQBwSgr67hasDv5YQwpYtyQYtnPjFPWjpJ/0/8AA7FC80CEE8DB7AA9EF850F86EAFAB222EBB0F8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:47:e2:a8:61:69:f1:bc:c9:84:26:e8:04:19:6a:c9:a8:87: 5e:a8:e0:2b:bd:b9:70:2c:2e:57:48:e9:2f:fd:8d:97:e9:96: 05:e1:c5:04:4b:1c:2b:a5:64:75:11:d8:b0:3a:a0:7f:17:68: a7:e1:f1:97:f0:c2:f0:52:26:ce:9f:1e:5e:9d:93:d3:7c:d2: 63:13:37:08:0c:a4:d3:63:60:31:c5:f1:76:1e:ec:e3:64:28: 70:7d:35:a2:fe:d7:51:42:26:57:bc:ca:56:07:52:1b:8f:c0: 2a:84:96:5e:b3:a5:73:2e:f1:b3:dd:8a:4d:a4:a1:a0:c1:31: 10:0a:0f:77:f2:60:d0:fa:92:82:b9:78:9a:87:21:67:f0:84: 60:26:8d:32:06:5d:c9:01:22:58:62:60:b8:fa:fa:ce:9f:8e: c7:7d:6b:a3:05:e5:95:f4:38:ee:7b:65:3c:24:ea:4b:26:2a: bb:66:33:ce:3d:4b:a5:a2:27:96:54:ce:c3:26:ea:fd:28:41: 26:b1:63:8a:f2:f7:08:08:d2:b9:06:bd:0d:a5:36:7c:fb:bf: 91:62:f6:1e:ca:d0:a6:b6:85:89:56:f7:d7:e4:65:36:a7:a6: 75:b9:1a:6a:99:8d:d0:bc:d6:b6:9d:cf:0f:b8:ad:f8:ec:f3: 3c:d6:af:51 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUNzfQkHC4FQiLLt7zhupBWN5QtcowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEFBN0ZDODBDRUU4REI3QUE5RUY4NTBGODZFQUZBQjIy MkVCQjBGODAeFw0yNjA0MDkwNzU1NTlaFw0yNjA0MTAxMTIwNTlaMDMxMTAvBgNV BAMTKDFGQkZEMjA4QzFFN0E4MENBNjU5NTdBQkVDNTIzMUU1QTdEQTBCQjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHIgIbDSfbfs2RuWS6CleFwpzu hqLcOft9uZ1t81z8M093zUH0g4V+f3iJ7/1QvjOLz9PLuWZgYW8Q6cB7TTAsPNoa 1xTDugmgNgrEq5aqFp0+SZxaxpARinIyO8SqRYFMLvBbyhOEMuF4v7o0wro5r9jg JI5DFPQgm1cRUsOhIEJmj7Ct0Vcg2n26nPJ0pQKss838o/LkcwovPZ+VosdOJvUS Wb9jtko+tDhVBqkeBLgHE7iCMjt7NmehZla18WuCXZjGpceZURuMXIdsvCsrCs/k 1j/ZS8J8l8ZHf8s1JLz6Deb68KgK0WsrOfMK0Z44vG1NNFMwORcGx6Lq8wgfAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUH7/SCMHnqAymWVer7FIx5afaC7IwHwYDVR0j BBgwFoAUiqf8gM7o23qp74UPhur6siLrsPgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRmtLc1h6M0hndFpRQndTZ3I2N2hhc0R2NVlRd3BZdHlRWXRuUGpGUFdq cEovMC84QUE3RkM4MENFRThEQjdBQTlFRjg1MEY4NkVBRkFCMjIyRUJCMEY4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhBQTdGQzgwQ0VFOERCN0FB OUVGODUwRjg2RUFGQUIyMjJFQkIwRjguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RmtLc1h6M0hndFpRQndTZ3I2N2hhc0R2NVlRd3BZdHlRWXRuUGpGUFdqcEovMC84 QUE3RkM4MENFRThEQjdBQTlFRjg1MEY4NkVBRkFCMjIyRUJCMEY4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAq0fiqGFp8bzJhCboBBlqyaiHXqjgK725cCwuV0jpL/2Nl+mWBeHFBEscK6Vk dRHYsDqgfxdop+Hxl/DC8FImzp8eXp2T03zSYxM3CAyk02NgMcXxdh7s42QocH01 ov7XUUImV7zKVgdSG4/AKoSWXrOlcy7xs92KTaShoMExEAoPd/Jg0PqSgrl4moch Z/CEYCaNMgZdyQEiWGJguPr6zp+Ox31rowXllfQ47ntlPCTqSyYqu2Yzzj1LpaIn llTOwybq/ShBJrFjivL3CAjSuQa9DaU2fPu/kWL2HsrQpraFiVb31+RlNqemdbka apmN0LzWtp3PD7it+OzzPNavUQ== -----END CERTIFICATE-----Generated at Thu Apr 9 15:35:56 2026 by rpki-client