$ rpki-client -vvf rpki-repo.registro.br/repo/GiYTvMdkdPNFSx2W6hWVCmP6EvuqQnkCW4hgzHRSQBLC/0/C35B2425B757FAD0CEC0226AA474E0261F79D4AD.mft File: C35B2425B757FAD0CEC0226AA474E0261F79D4AD.mft (raw, json) Hash identifier: xWpnhq0UT/dBAUCkbsK083PasaLR49c56CdtwdbrZP0= Subject key identifier: D2:37:F3:3F:C6:90:20:13:8E:B2:C9:01:E0:AA:87:7D:88:79:47:29 Authority key identifier: C3:5B:24:25:B7:57:FA:D0:CE:C0:22:6A:A4:74:E0:26:1F:79:D4:AD Certificate issuer: /CN=C35B2425B757FAD0CEC0226AA474E0261F79D4AD Certificate serial: 0A5B6CCAF4AC4628CE7E793E251A479F0EDE2BF1 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C35B2425B757FAD0CEC0226AA474E0261F79D4AD.cer Subject info access: rsync://rpki-repo.registro.br/repo/GiYTvMdkdPNFSx2W6hWVCmP6EvuqQnkCW4hgzHRSQBLC/0/C35B2425B757FAD0CEC0226AA474E0261F79D4AD.mft Manifest number: 011B Signing time: Wed 08 Apr 2026 22:15:58 +0000 Manifest this update: Wed 08 Apr 2026 22:10:58 +0000 Manifest next update: Fri 10 Apr 2026 01:53:58 +0000 Files and hashes: 1: 34352e3136382e342e302f32322d3332203d3e20323638303437.roa (hash: 2jrHaa+hwH2oFt1Zl6Q8aSVdxmSJjuGdjSzRULxSjCM=) 2: AS268047.asa (hash: XFDU3GEuzuASRqL7if52+iYTZGnSFL1FsHFCeT3y1/Y=) 3: 323830343a353732343a3a2f33322d313238203d3e20323638303437.roa (hash: VO2mCl9Aq8nQpM2jsbGznOc//ApGYLZ/YC8kl2kia9I=) 4: C35B2425B757FAD0CEC0226AA474E0261F79D4AD.crl (hash: YSPGxtpYMcdXZ0mlAb9sM2+2UUTsFwUO26iUzKiu7q8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GiYTvMdkdPNFSx2W6hWVCmP6EvuqQnkCW4hgzHRSQBLC/0/C35B2425B757FAD0CEC0226AA474E0261F79D4AD.crl rsync://rpki-repo.registro.br/repo/GiYTvMdkdPNFSx2W6hWVCmP6EvuqQnkCW4hgzHRSQBLC/0/C35B2425B757FAD0CEC0226AA474E0261F79D4AD.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C35B2425B757FAD0CEC0226AA474E0261F79D4AD.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 10 Apr 2026 01:53:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:5b:6c:ca:f4:ac:46:28:ce:7e:79:3e:25:1a:47:9f:0e:de:2b:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C35B2425B757FAD0CEC0226AA474E0261F79D4AD Validity Not Before: Apr 8 22:10:58 2026 GMT Not After : Apr 10 01:53:58 2026 GMT Subject: CN=D237F33FC69020138EB2C901E0AA877D88794729 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:e3:54:95:be:09:85:2f:24:ab:33:a5:6c:41: da:2b:68:57:31:6b:26:b0:52:4c:f1:46:a7:08:22: ab:4d:62:91:3b:d1:46:31:44:4a:c4:c6:8e:d9:cb: cf:38:d7:76:f0:7d:3c:41:f9:27:28:45:5b:94:43: c1:05:30:47:6d:8c:8c:17:c3:a0:0d:3c:db:12:b6: 43:81:9e:1b:77:3e:b4:92:0b:bf:41:23:70:3d:08: 77:9a:0e:37:72:af:32:c5:d7:5f:c5:5c:8c:66:e7: e5:f7:09:f7:5a:3d:1a:b4:d4:7e:1e:cd:af:c1:44: 03:04:56:36:b9:b3:31:fd:ed:6b:0f:14:f9:7f:b8: ae:43:90:68:c2:3b:b0:79:94:62:88:db:49:8a:7c: 7d:af:5e:6e:c6:72:9a:8a:1a:dc:01:2c:c0:2c:07: 8f:58:3c:5c:ff:9b:56:1a:44:98:82:c0:6e:a1:73: c8:44:12:fc:00:54:92:90:48:1b:73:94:34:f7:92: 4f:cf:b9:6e:42:c2:83:b9:58:e2:73:f3:c1:46:5f: 79:46:5d:58:fe:70:36:99:df:52:10:10:7d:0b:56: 23:21:27:e9:4d:88:2f:35:2e:ab:f3:8c:96:83:30: f7:0a:a4:ad:4b:da:e0:c9:a7:46:ac:99:36:04:11: 62:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:37:F3:3F:C6:90:20:13:8E:B2:C9:01:E0:AA:87:7D:88:79:47:29 X509v3 Authority Key Identifier: keyid:C3:5B:24:25:B7:57:FA:D0:CE:C0:22:6A:A4:74:E0:26:1F:79:D4:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GiYTvMdkdPNFSx2W6hWVCmP6EvuqQnkCW4hgzHRSQBLC/0/C35B2425B757FAD0CEC0226AA474E0261F79D4AD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C35B2425B757FAD0CEC0226AA474E0261F79D4AD.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GiYTvMdkdPNFSx2W6hWVCmP6EvuqQnkCW4hgzHRSQBLC/0/C35B2425B757FAD0CEC0226AA474E0261F79D4AD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:c5:1c:0c:3f:b8:47:eb:37:43:40:77:3f:cc:ac:26:05:77: cb:cc:93:59:d3:c5:33:29:67:0c:dd:63:61:6c:67:89:34:c5: 58:b2:9d:c1:33:26:08:66:27:eb:22:c0:1b:40:7a:e6:8b:28: 70:80:7b:af:4a:07:f5:31:0d:3f:ca:63:0a:c1:07:b5:6d:0b: 93:3a:c6:2e:88:34:71:df:8f:3e:53:16:29:50:d3:d6:10:fc: cb:24:53:df:0a:c7:1b:43:58:03:0f:ab:bd:f2:e2:3a:55:e6: 2a:3a:d9:95:8d:a5:d8:5f:04:65:1e:16:0e:c3:02:bd:54:26: 03:e8:f9:0e:ee:b3:1e:b9:7c:62:32:b1:2e:51:d0:81:f5:78: c1:1a:54:24:9a:98:98:68:05:7c:f0:fe:c4:73:5d:ef:4a:c5: 96:a6:d6:0d:d4:92:4b:9a:2b:6d:39:be:8a:e2:48:cf:20:2b: cd:83:24:da:3f:a3:93:30:e0:da:d0:a8:f5:8f:23:6b:78:c3: 9b:48:cd:f3:74:ad:78:b6:8f:3e:7d:2c:40:03:a5:72:4f:1e: 34:d8:c5:1c:4b:a5:53:f2:7a:0b:34:e6:37:19:0b:41:24:90: 82:c6:a2:ef:1e:46:c2:d8:fb:18:05:00:05:3a:ca:ef:e6:88: eb:e0:d8:7d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUCltsyvSsRijOfnk+JRpHnw7eK/EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzM1QjI0MjVCNzU3RkFEMENFQzAyMjZBQTQ3NEUwMjYx Rjc5RDRBRDAeFw0yNjA0MDgyMjEwNThaFw0yNjA0MTAwMTUzNThaMDMxMTAvBgNV BAMTKEQyMzdGMzNGQzY5MDIwMTM4RUIyQzkwMUUwQUE4NzdEODg3OTQ3MjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe41SVvgmFLySrM6VsQdoraFcx ayawUkzxRqcIIqtNYpE70UYxRErExo7Zy88413bwfTxB+ScoRVuUQ8EFMEdtjIwX w6ANPNsStkOBnht3PrSSC79BI3A9CHeaDjdyrzLF11/FXIxm5+X3CfdaPRq01H4e za/BRAMEVja5szH97WsPFPl/uK5DkGjCO7B5lGKI20mKfH2vXm7GcpqKGtwBLMAs B49YPFz/m1YaRJiCwG6hc8hEEvwAVJKQSBtzlDT3kk/PuW5CwoO5WOJz88FGX3lG XVj+cDaZ31IQEH0LViMhJ+lNiC81LqvzjJaDMPcKpK1L2uDJp0asmTYEEWJ7AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU0jfzP8aQIBOOsskB4KqHfYh5RykwHwYDVR0j BBgwFoAUw1skJbdX+tDOwCJqpHTgJh951K0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR2lZVHZNZGtkUE5GU3gyVzZoV1ZDbVA2RXZ1cVFua0NXNGhnekhSU1FC TEMvMC9DMzVCMjQyNUI3NTdGQUQwQ0VDMDIyNkFBNDc0RTAyNjFGNzlENEFELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MzNUIyNDI1Qjc1N0ZBRDBD RUMwMjI2QUE0NzRFMDI2MUY3OUQ0QUQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R2lZVHZNZGtkUE5GU3gyVzZoV1ZDbVA2RXZ1cVFua0NXNGhnekhSU1FCTEMvMC9D MzVCMjQyNUI3NTdGQUQwQ0VDMDIyNkFBNDc0RTAyNjFGNzlENEFELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAicUcDD+4R+s3Q0B3P8ysJgV3y8yTWdPFMylnDN1jYWxniTTFWLKdwTMmCGYn 6yLAG0B65osocIB7r0oH9TENP8pjCsEHtW0LkzrGLog0cd+PPlMWKVDT1hD8yyRT 3wrHG0NYAw+rvfLiOlXmKjrZlY2l2F8EZR4WDsMCvVQmA+j5Du6zHrl8YjKxLlHQ gfV4wRpUJJqYmGgFfPD+xHNd70rFlqbWDdSSS5orbTm+iuJIzyArzYMk2j+jkzDg 2tCo9Y8ja3jDm0jN83SteLaPPn0sQAOlck8eNNjFHEulU/J6CzTmNxkLQSSQgsai 7x5Gwtj7GAUABTrK7+aI6+DYfQ== -----END CERTIFICATE-----Generated at Thu Apr 9 14:27:07 2026 by rpki-client