$ rpki-client -vvf rpki-repo.registro.br/repo/GDfRpQgSEJjwBg5pGK8Np4x779c7CZCZBAE24APNip8V/1/8DE54B0B23A5AEC0281AFC60995BBCE113A92423.mft File: 8DE54B0B23A5AEC0281AFC60995BBCE113A92423.mft (raw, json) Hash identifier: xoGgKtl8s+U32sVylY6RvQWLFgJmrJTkj6Hy+VpKKvQ= Subject key identifier: A5:F3:4A:F0:E0:5A:61:C1:E6:A2:70:B4:99:AD:CB:12:01:4A:C1:43 Authority key identifier: 8D:E5:4B:0B:23:A5:AE:C0:28:1A:FC:60:99:5B:BC:E1:13:A9:24:23 Certificate issuer: /CN=8DE54B0B23A5AEC0281AFC60995BBCE113A92423 Certificate serial: 6D84D21EF55379903E029B909AE0AD4AB22EB17B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DE54B0B23A5AEC0281AFC60995BBCE113A92423.cer Subject info access: rsync://rpki-repo.registro.br/repo/GDfRpQgSEJjwBg5pGK8Np4x779c7CZCZBAE24APNip8V/1/8DE54B0B23A5AEC0281AFC60995BBCE113A92423.mft Manifest number: 02B1 Signing time: Thu 09 Apr 2026 10:32:11 +0000 Manifest this update: Thu 09 Apr 2026 10:27:11 +0000 Manifest next update: Fri 10 Apr 2026 13:46:11 +0000 Files and hashes: 1: 8DE54B0B23A5AEC0281AFC60995BBCE113A92423.crl (hash: VZB/LDrvPLwGMPp0DO9hrNKoi+t+V3JvlmmH/B1frms=) 2: 323830343a323531303a3a2f33322d3438203d3e20323634323537.roa (hash: nto9EgJXC/dWG0WEdavSKMEwi3srLv0jSlA+N/kLPP4=) 3: 3133382e3131382e3130382e302f32322d3234203d3e20323634323537.roa (hash: V5tvgEYxwqyrBiZbfBmfrrGfxjZimkFzr+SP4Ye2TY8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GDfRpQgSEJjwBg5pGK8Np4x779c7CZCZBAE24APNip8V/1/8DE54B0B23A5AEC0281AFC60995BBCE113A92423.crl rsync://rpki-repo.registro.br/repo/GDfRpQgSEJjwBg5pGK8Np4x779c7CZCZBAE24APNip8V/1/8DE54B0B23A5AEC0281AFC60995BBCE113A92423.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DE54B0B23A5AEC0281AFC60995BBCE113A92423.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 10 Apr 2026 13:41:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:84:d2:1e:f5:53:79:90:3e:02:9b:90:9a:e0:ad:4a:b2:2e:b1:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8DE54B0B23A5AEC0281AFC60995BBCE113A92423 Validity Not Before: Apr 9 10:27:11 2026 GMT Not After : Apr 10 13:46:11 2026 GMT Subject: CN=A5F34AF0E05A61C1E6A270B499ADCB12014AC143 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e2:2d:a2:9a:c3:f9:67:d1:f6:d8:06:17:ee: 0d:c4:4a:4b:ab:8f:d6:4a:95:a1:aa:8e:0d:57:bc: b4:a6:16:12:34:30:1f:10:30:2f:02:72:0d:cf:3b: 2b:4b:8c:97:e8:5c:a5:e2:b5:3a:ee:10:13:91:64: b4:40:9e:95:10:eb:25:46:ca:fc:06:e3:51:52:bb: 58:17:1c:4b:69:8a:8f:d1:fb:3b:29:79:e9:b1:66: b6:f9:d2:c5:19:25:30:b8:9f:db:6f:be:1d:10:c2: ce:80:a4:47:8b:94:c0:4b:c8:06:dd:43:5d:04:34: 00:55:27:07:41:07:be:47:a9:9d:7b:a1:9a:1b:91: 3f:ec:fc:50:15:cd:a5:df:b2:f6:e1:09:e3:1b:66: 6a:5c:a3:81:7a:ed:ba:07:2a:a9:49:61:fc:c6:8f: e4:04:64:a9:9a:ce:50:d0:3e:47:76:e6:a5:c1:81: 04:4e:c7:f5:14:8a:a0:9b:05:8b:b5:8e:22:13:32: 50:ec:0d:cd:16:d6:6f:a7:61:b3:9e:0c:cd:c1:49: c6:ee:9f:3b:56:59:f9:8d:2d:f2:57:b1:57:63:d2: ad:fc:cf:c4:e2:ed:bd:c4:86:36:ef:9c:7c:fe:a5: f9:5a:45:a8:3c:cb:ca:f7:79:15:af:6d:be:db:95: 30:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:F3:4A:F0:E0:5A:61:C1:E6:A2:70:B4:99:AD:CB:12:01:4A:C1:43 X509v3 Authority Key Identifier: keyid:8D:E5:4B:0B:23:A5:AE:C0:28:1A:FC:60:99:5B:BC:E1:13:A9:24:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GDfRpQgSEJjwBg5pGK8Np4x779c7CZCZBAE24APNip8V/1/8DE54B0B23A5AEC0281AFC60995BBCE113A92423.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DE54B0B23A5AEC0281AFC60995BBCE113A92423.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GDfRpQgSEJjwBg5pGK8Np4x779c7CZCZBAE24APNip8V/1/8DE54B0B23A5AEC0281AFC60995BBCE113A92423.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:87:82:a4:ae:3c:4f:6a:3f:f7:a1:03:3f:46:b9:9b:b6:3e: cf:d1:06:45:5c:2e:9a:cb:05:db:a8:54:85:7f:2f:5b:71:98: 1f:a7:f5:ba:88:25:f9:fa:e9:8b:df:0f:15:41:4c:23:a5:5d: ba:e2:a2:48:aa:0b:72:f4:19:c1:71:58:83:1c:46:f2:b4:d4: 1c:ae:ee:ba:07:5b:c1:52:87:56:5a:f8:3c:03:6d:2e:63:14: 0b:de:c2:d3:ec:33:c6:2b:b3:f2:6e:fe:c7:77:64:fe:cb:a8: 6e:c2:db:f3:b6:b5:4e:f3:6d:f4:b3:32:23:65:34:5e:c3:8c: 95:66:08:18:7e:10:43:bd:c3:e0:d4:4b:09:16:d3:91:dd:c9: 3c:af:ce:7d:f0:92:19:34:50:84:90:b8:2b:59:69:4b:e3:66: 04:75:f0:98:a0:96:7a:4d:85:a5:f7:7d:46:7a:bf:86:0f:b6: 99:43:95:36:89:92:40:a8:b1:a9:bf:4e:0a:d2:91:ee:80:bc: cb:2a:6d:be:68:09:6a:04:1c:07:49:0b:6a:14:b4:27:81:73: 71:02:e5:2a:9a:90:22:29:f6:7d:53:74:02:41:f2:85:73:bf: 2c:0a:87:7c:c5:82:79:56:ce:c1:53:a1:ab:26:a9:e3:e7:90: 01:5d:3d:8c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUbYTSHvVTeZA+ApuQmuCtSrIusXswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOERFNTRCMEIyM0E1QUVDMDI4MUFGQzYwOTk1QkJDRTEx M0E5MjQyMzAeFw0yNjA0MDkxMDI3MTFaFw0yNjA0MTAxMzQ2MTFaMDMxMTAvBgNV BAMTKEE1RjM0QUYwRTA1QTYxQzFFNkEyNzBCNDk5QURDQjEyMDE0QUMxNDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB4i2imsP5Z9H22AYX7g3ESkur j9ZKlaGqjg1XvLSmFhI0MB8QMC8Ccg3POytLjJfoXKXitTruEBORZLRAnpUQ6yVG yvwG41FSu1gXHEtpio/R+zspeemxZrb50sUZJTC4n9tvvh0Qws6ApEeLlMBLyAbd Q10ENABVJwdBB75HqZ17oZobkT/s/FAVzaXfsvbhCeMbZmpco4F67boHKqlJYfzG j+QEZKmazlDQPkd25qXBgQROx/UUiqCbBYu1jiITMlDsDc0W1m+nYbOeDM3BScbu nztWWfmNLfJXsVdj0q38z8Ti7b3EhjbvnHz+pflaRag8y8r3eRWvbb7blTAzAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUpfNK8OBaYcHmonC0ma3LEgFKwUMwHwYDVR0j BBgwFoAUjeVLCyOlrsAoGvxgmVu84ROpJCMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR0RmUnBRZ1NFSmp3Qmc1cEdLOE5wNHg3NzljN0NaQ1pCQUUyNEFQTmlw OFYvMS84REU1NEIwQjIzQTVBRUMwMjgxQUZDNjA5OTVCQkNFMTEzQTkyNDIzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhERTU0QjBCMjNBNUFFQzAy ODFBRkM2MDk5NUJCQ0UxMTNBOTI0MjMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R0RmUnBRZ1NFSmp3Qmc1cEdLOE5wNHg3NzljN0NaQ1pCQUUyNEFQTmlwOFYvMS84 REU1NEIwQjIzQTVBRUMwMjgxQUZDNjA5OTVCQkNFMTEzQTkyNDIzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAm4eCpK48T2o/96EDP0a5m7Y+z9EGRVwumssF26hUhX8vW3GYH6f1uogl+frp i98PFUFMI6VduuKiSKoLcvQZwXFYgxxG8rTUHK7uugdbwVKHVlr4PANtLmMUC97C 0+wzxiuz8m7+x3dk/suobsLb87a1TvNt9LMyI2U0XsOMlWYIGH4QQ73D4NRLCRbT kd3JPK/OffCSGTRQhJC4K1lpS+NmBHXwmKCWek2Fpfd9Rnq/hg+2mUOVNomSQKix qb9OCtKR7oC8yyptvmgJagQcB0kLahS0J4FzcQLlKpqQIin2fVN0AkHyhXO/LAqH fMWCeVbOwVOhqyap4+eQAV09jA== -----END CERTIFICATE-----Generated at Thu Apr 9 14:29:32 2026 by rpki-client