$ rpki-client -vvf rpki-repo.registro.br/repo/GbrSUbMceuSu3Xy3CxNg6UpQfsCKbt4KyVACQ3j7gW1h/0/CDCA5D752465C82F87C02572646B39237CA981A8.mft File: CDCA5D752465C82F87C02572646B39237CA981A8.mft (raw, json) Hash identifier: RSOkR7RMZYBRxR+RGyaGw5oHppOi+mLnbkB3URSU+wA= Subject key identifier: 33:3B:18:AC:51:4D:68:AB:41:20:61:53:5E:18:F5:1A:2F:62:EA:71 Authority key identifier: CD:CA:5D:75:24:65:C8:2F:87:C0:25:72:64:6B:39:23:7C:A9:81:A8 Certificate issuer: /CN=CDCA5D752465C82F87C02572646B39237CA981A8 Certificate serial: 5B71CF68D99B51E0A3399E9A8B8150A51D6A02DC Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDCA5D752465C82F87C02572646B39237CA981A8.cer Subject info access: rsync://rpki-repo.registro.br/repo/GbrSUbMceuSu3Xy3CxNg6UpQfsCKbt4KyVACQ3j7gW1h/0/CDCA5D752465C82F87C02572646B39237CA981A8.mft Manifest number: B9 Signing time: Wed 08 Apr 2026 20:11:30 +0000 Manifest this update: Wed 08 Apr 2026 20:06:30 +0000 Manifest next update: Thu 09 Apr 2026 22:07:30 +0000 Files and hashes: 1: CDCA5D752465C82F87C02572646B39237CA981A8.crl (hash: rlsz/R4NWdwerwvSKkIv1eLmYeRpWHxLQpv52IicdeI=) 2: 3137302e37382e3137322e302f32322d3234203d3e20323636323938.roa (hash: okwdcryUzcO/1qhh0V46izFAeoY+dqkOxK9ae7wuOqg=) 3: 323830343a333561343a3a2f33322d3438203d3e20323636323938.roa (hash: B0BeiQ4Tyb9EsP+OH1dapS7buRu5QFW11gv4iICDJHU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GbrSUbMceuSu3Xy3CxNg6UpQfsCKbt4KyVACQ3j7gW1h/0/CDCA5D752465C82F87C02572646B39237CA981A8.crl rsync://rpki-repo.registro.br/repo/GbrSUbMceuSu3Xy3CxNg6UpQfsCKbt4KyVACQ3j7gW1h/0/CDCA5D752465C82F87C02572646B39237CA981A8.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDCA5D752465C82F87C02572646B39237CA981A8.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 09 Apr 2026 22:07:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:71:cf:68:d9:9b:51:e0:a3:39:9e:9a:8b:81:50:a5:1d:6a:02:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDCA5D752465C82F87C02572646B39237CA981A8 Validity Not Before: Apr 8 20:06:30 2026 GMT Not After : Apr 9 22:07:30 2026 GMT Subject: CN=333B18AC514D68AB412061535E18F51A2F62EA71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:47:1b:63:58:7d:27:c5:a3:0f:7c:1c:18:5b: 6e:ec:a4:34:2f:03:f6:f7:c7:01:a8:f9:80:42:17: 17:ea:f6:5c:d8:a8:47:01:d3:fb:82:04:10:bd:7b: 49:07:80:c7:51:29:b3:de:8f:ca:b5:48:4a:42:e1: 07:a1:68:24:65:3c:67:72:f2:49:59:48:4f:04:59: 68:27:f6:02:e8:13:c1:fc:ba:a3:1c:46:83:50:7d: 7c:5b:ad:39:3c:32:3c:14:4c:fe:32:d2:66:3a:ae: 23:70:01:99:ff:58:b6:38:0f:ff:22:5d:0f:c1:90: d8:99:ab:39:c4:07:a8:32:e9:f1:ae:f1:f5:a4:50: 22:df:5c:56:57:43:5a:fc:f0:a4:78:b3:97:b9:7a: bf:32:11:61:3a:7e:6e:65:6d:30:ed:58:36:ab:c3: de:4b:3e:d0:55:80:98:11:8a:fd:ad:8a:30:af:ec: 69:50:1d:fc:75:ce:ac:0f:ee:99:52:fb:00:66:e5: 63:46:b6:88:d9:c3:68:92:86:1f:f7:2f:20:d9:1a: e7:7e:ea:2c:66:38:14:0a:a2:24:30:7f:60:73:e0: 08:d1:6a:28:f0:c5:79:f7:a9:b3:f2:9e:1c:d3:ed: 2f:82:9d:f7:3d:d9:b1:1b:6f:5d:aa:b0:b6:c2:57: 13:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:3B:18:AC:51:4D:68:AB:41:20:61:53:5E:18:F5:1A:2F:62:EA:71 X509v3 Authority Key Identifier: keyid:CD:CA:5D:75:24:65:C8:2F:87:C0:25:72:64:6B:39:23:7C:A9:81:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GbrSUbMceuSu3Xy3CxNg6UpQfsCKbt4KyVACQ3j7gW1h/0/CDCA5D752465C82F87C02572646B39237CA981A8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDCA5D752465C82F87C02572646B39237CA981A8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GbrSUbMceuSu3Xy3CxNg6UpQfsCKbt4KyVACQ3j7gW1h/0/CDCA5D752465C82F87C02572646B39237CA981A8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:b3:d3:ce:65:62:fc:08:b1:df:1b:bb:78:d4:96:d7:d0:eb: 8d:2b:50:d8:b1:76:17:4c:3e:06:2c:7f:d8:36:13:60:61:5b: dc:36:fa:ba:13:10:b7:44:9a:ea:77:79:3a:d2:d6:5f:82:3f: 8b:c4:16:21:27:93:5b:09:08:f4:45:bb:7d:18:c0:51:db:eb: cc:a3:6d:fa:b0:b4:ab:db:92:0c:e2:16:47:82:a7:20:ac:c4: e3:64:6e:a6:e5:e8:f0:c9:73:52:09:08:64:18:47:1a:3b:fa: d6:64:70:83:f7:9b:b7:52:6b:b2:84:4c:14:52:79:60:14:80: 41:17:42:48:ca:8e:34:1d:fb:f0:db:cf:0c:30:ae:ea:02:01: eb:19:be:b0:97:eb:d6:2f:83:e5:8f:aa:36:37:f6:87:2a:43: 39:1c:cd:66:c4:7a:da:54:8c:2e:9e:17:18:90:e7:a5:f8:ff: e6:93:22:52:51:1f:16:8c:51:d1:6c:87:55:a7:3a:e1:1d:ef: 5e:d9:e5:52:28:dc:1c:fb:c2:31:f7:30:ff:f7:6b:0b:cf:ae: ce:d2:0d:32:e6:d2:69:d6:93:74:50:db:80:a6:be:94:fb:d8: 28:30:d7:22:e4:db:7c:53:67:9d:7f:5a:34:1d:65:28:12:0b: 31:93:26:49 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUW3HPaNmbUeCjOZ6ai4FQpR1qAtwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RDQTVENzUyNDY1QzgyRjg3QzAyNTcyNjQ2QjM5MjM3 Q0E5ODFBODAeFw0yNjA0MDgyMDA2MzBaFw0yNjA0MDkyMjA3MzBaMDMxMTAvBgNV BAMTKDMzM0IxOEFDNTE0RDY4QUI0MTIwNjE1MzVFMThGNTFBMkY2MkVBNzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1RxtjWH0nxaMPfBwYW27spDQv A/b3xwGo+YBCFxfq9lzYqEcB0/uCBBC9e0kHgMdRKbPej8q1SEpC4QehaCRlPGdy 8klZSE8EWWgn9gLoE8H8uqMcRoNQfXxbrTk8MjwUTP4y0mY6riNwAZn/WLY4D/8i XQ/BkNiZqznEB6gy6fGu8fWkUCLfXFZXQ1r88KR4s5e5er8yEWE6fm5lbTDtWDar w95LPtBVgJgRiv2tijCv7GlQHfx1zqwP7plS+wBm5WNGtojZw2iShh/3LyDZGud+ 6ixmOBQKoiQwf2Bz4AjRaijwxXn3qbPynhzT7S+Cnfc92bEbb12qsLbCVxM7AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUMzsYrFFNaKtBIGFTXhj1Gi9i6nEwHwYDVR0j BBgwFoAUzcpddSRlyC+HwCVyZGs5I3ypgagwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR2JyU1ViTWNldVN1M1h5M0N4Tmc2VXBRZnNDS2J0NEt5VkFDUTNqN2dX MWgvMC9DRENBNUQ3NTI0NjVDODJGODdDMDI1NzI2NDZCMzkyMzdDQTk4MUE4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NEQ0E1RDc1MjQ2NUM4MkY4 N0MwMjU3MjY0NkIzOTIzN0NBOTgxQTguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R2JyU1ViTWNldVN1M1h5M0N4Tmc2VXBRZnNDS2J0NEt5VkFDUTNqN2dXMWgvMC9D RENBNUQ3NTI0NjVDODJGODdDMDI1NzI2NDZCMzkyMzdDQTk4MUE4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbbPTzmVi/Aix3xu7eNSW19DrjStQ2LF2F0w+Bix/2DYTYGFb3Db6uhMQt0Sa 6nd5OtLWX4I/i8QWISeTWwkI9EW7fRjAUdvrzKNt+rC0q9uSDOIWR4KnIKzE42Ru puXo8MlzUgkIZBhHGjv61mRwg/ebt1JrsoRMFFJ5YBSAQRdCSMqONB378NvPDDCu 6gIB6xm+sJfr1i+D5Y+qNjf2hypDORzNZsR62lSMLp4XGJDnpfj/5pMiUlEfFoxR 0WyHVac64R3vXtnlUijcHPvCMfcw//drC8+uztINMubSadaTdFDbgKa+lPvYKDDX IuTbfFNnnX9aNB1lKBILMZMmSQ== -----END CERTIFICATE-----Generated at Thu Apr 9 11:13:20 2026 by rpki-client