$ rpki-client -vvf rpki-repo.registro.br/repo/GrjCZc1B1Sr84CtJvQiuF5hSGpPVWFx5rcrzgN9nxSAQ/0/4953FCF2CB79202B7A3BF5A289C56ED26EC0BAA3.mft File: 4953FCF2CB79202B7A3BF5A289C56ED26EC0BAA3.mft (raw, json) Hash identifier: S+LlEuTHXgrjgV1x71WgkkJt8wKMYEiD1pujJxsyjYQ= Subject key identifier: 62:95:15:3D:DC:E3:AA:DA:09:D6:6A:45:E0:8B:E1:CD:42:2A:DA:F6 Authority key identifier: 49:53:FC:F2:CB:79:20:2B:7A:3B:F5:A2:89:C5:6E:D2:6E:C0:BA:A3 Certificate issuer: /CN=4953FCF2CB79202B7A3BF5A289C56ED26EC0BAA3 Certificate serial: 08A9D276D1BB669B2EBEB7F65468B423F5D09A88 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4953FCF2CB79202B7A3BF5A289C56ED26EC0BAA3.cer Subject info access: rsync://rpki-repo.registro.br/repo/GrjCZc1B1Sr84CtJvQiuF5hSGpPVWFx5rcrzgN9nxSAQ/0/4953FCF2CB79202B7A3BF5A289C56ED26EC0BAA3.mft Manifest number: 21 Signing time: Thu 09 Apr 2026 11:33:20 +0000 Manifest this update: Thu 09 Apr 2026 11:28:20 +0000 Manifest next update: Fri 10 Apr 2026 11:59:20 +0000 Files and hashes: 1: 4953FCF2CB79202B7A3BF5A289C56ED26EC0BAA3.crl (hash: zV7NQbzfdrXUkYPsHgXeMhjItdc51eroIDgV5GMwE30=) 2: 323830343a393365633a3a2f33322d313238203d3e20323734383039.roa (hash: YhpJz8sonIu/hzKMiB2EPpkfdbYwzSA+RMx+5kCoTmQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GrjCZc1B1Sr84CtJvQiuF5hSGpPVWFx5rcrzgN9nxSAQ/0/4953FCF2CB79202B7A3BF5A289C56ED26EC0BAA3.crl rsync://rpki-repo.registro.br/repo/GrjCZc1B1Sr84CtJvQiuF5hSGpPVWFx5rcrzgN9nxSAQ/0/4953FCF2CB79202B7A3BF5A289C56ED26EC0BAA3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4953FCF2CB79202B7A3BF5A289C56ED26EC0BAA3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 10 Apr 2026 11:59:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:a9:d2:76:d1:bb:66:9b:2e:be:b7:f6:54:68:b4:23:f5:d0:9a:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4953FCF2CB79202B7A3BF5A289C56ED26EC0BAA3 Validity Not Before: Apr 9 11:28:20 2026 GMT Not After : Apr 10 11:59:20 2026 GMT Subject: CN=6295153DDCE3AADA09D66A45E08BE1CD422ADAF6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:1a:b1:0c:c8:d6:8d:26:48:77:a3:2b:d4:5f: 81:51:68:ea:5c:58:8f:79:18:aa:b2:47:7e:e7:ca: e9:e1:53:43:c4:b7:95:56:8d:34:8e:1e:8c:eb:b7: cf:62:37:31:63:91:f9:88:bc:51:75:f3:b4:70:d7: 4f:34:50:07:fe:0b:33:15:54:44:d9:6d:b2:b4:59: a5:cb:f0:b1:68:46:53:61:38:1d:62:66:12:dc:16: c6:a9:57:0f:ff:2e:91:e7:74:4e:7c:ac:8d:b6:61: 06:14:37:b0:24:a9:f7:72:6d:9c:90:dd:49:46:65: b3:f3:f5:ea:53:32:e2:6e:6c:38:00:40:5a:e6:8a: af:d3:11:d3:ed:c3:ed:d0:8e:df:35:31:cd:10:e2: e2:9d:bb:ef:bb:2e:f9:8e:e4:46:37:62:1b:96:43: a0:d2:cc:2b:79:14:43:6b:47:ca:ec:36:a1:7a:50: 43:80:a8:38:ab:81:7e:c7:05:5d:65:c2:73:ce:eb: 1b:76:b8:5c:82:77:5c:47:ed:b8:ac:ad:2a:3c:17: 13:e3:6b:fd:db:48:04:61:3a:71:a0:1f:38:c1:0b: b0:fd:fe:71:36:57:bf:67:0b:a8:e8:18:16:7d:59: 40:9d:63:a1:55:db:ae:46:0e:2f:93:06:2f:c0:5d: 5e:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:95:15:3D:DC:E3:AA:DA:09:D6:6A:45:E0:8B:E1:CD:42:2A:DA:F6 X509v3 Authority Key Identifier: keyid:49:53:FC:F2:CB:79:20:2B:7A:3B:F5:A2:89:C5:6E:D2:6E:C0:BA:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GrjCZc1B1Sr84CtJvQiuF5hSGpPVWFx5rcrzgN9nxSAQ/0/4953FCF2CB79202B7A3BF5A289C56ED26EC0BAA3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4953FCF2CB79202B7A3BF5A289C56ED26EC0BAA3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GrjCZc1B1Sr84CtJvQiuF5hSGpPVWFx5rcrzgN9nxSAQ/0/4953FCF2CB79202B7A3BF5A289C56ED26EC0BAA3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:7f:70:da:d9:f7:17:99:95:8a:45:4d:cc:1f:31:20:57:96: f8:75:a7:02:d1:5e:cd:04:cd:1c:d9:6f:55:db:bb:7f:97:8b: 7b:2c:43:3d:01:22:f4:c9:ef:99:c8:7c:a4:aa:12:0f:3a:eb: 88:45:33:17:3b:6e:82:2b:c8:29:cb:1d:0c:59:cf:18:67:2c: cc:d4:18:59:ad:32:9f:26:84:0c:e9:89:e1:90:f8:9c:c9:70: a0:64:3c:48:89:11:90:2a:2d:ef:22:e2:08:ba:9c:cf:64:c4: a5:08:f7:bd:34:3a:bf:58:20:b0:ee:85:42:67:07:5a:66:66: a2:17:15:98:eb:32:88:6e:fb:bd:d3:3b:50:d2:fc:25:bf:79: 40:24:48:8f:3a:75:f5:6b:2d:c4:a6:ea:3f:3b:c5:f1:55:87: 69:96:c6:24:3e:f9:b3:7a:30:0f:72:86:37:e1:8d:b6:bd:32: dc:b6:20:de:04:fb:d5:78:90:a4:40:0c:7f:97:87:46:ee:d5: c5:5b:bc:29:9b:9a:04:8b:b4:15:02:97:5b:45:46:4e:c3:c8: f7:60:3c:9e:f5:3d:28:58:d2:4c:d7:d8:fd:70:9a:23:d8:32: 96:03:35:7f:04:f2:cd:da:42:de:38:5d:21:3f:1e:d6:12:31: d9:16:c7:ad -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUCKnSdtG7Zpsuvrf2VGi0I/XQmogwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDk1M0ZDRjJDQjc5MjAyQjdBM0JGNUEyODlDNTZFRDI2 RUMwQkFBMzAeFw0yNjA0MDkxMTI4MjBaFw0yNjA0MTAxMTU5MjBaMDMxMTAvBgNV BAMTKDYyOTUxNTNERENFM0FBREEwOUQ2NkE0NUUwOEJFMUNENDIyQURBRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzGrEMyNaNJkh3oyvUX4FRaOpc WI95GKqyR37nyunhU0PEt5VWjTSOHozrt89iNzFjkfmIvFF187Rw1080UAf+CzMV VETZbbK0WaXL8LFoRlNhOB1iZhLcFsapVw//LpHndE58rI22YQYUN7AkqfdybZyQ 3UlGZbPz9epTMuJubDgAQFrmiq/TEdPtw+3Qjt81Mc0Q4uKdu++7LvmO5EY3YhuW Q6DSzCt5FENrR8rsNqF6UEOAqDirgX7HBV1lwnPO6xt2uFyCd1xH7bisrSo8FxPj a/3bSARhOnGgHzjBC7D9/nE2V79nC6joGBZ9WUCdY6FV265GDi+TBi/AXV4bAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUYpUVPdzjqtoJ1mpF4IvhzUIq2vYwHwYDVR0j BBgwFoAUSVP88st5ICt6O/WiicVu0m7AuqMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR3JqQ1pjMUIxU3I4NEN0SnZRaXVGNWhTR3BQVldGeDVyY3J6Z045bnhT QVEvMC80OTUzRkNGMkNCNzkyMDJCN0EzQkY1QTI4OUM1NkVEMjZFQzBCQUEzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ5NTNGQ0YyQ0I3OTIwMkI3 QTNCRjVBMjg5QzU2RUQyNkVDMEJBQTMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R3JqQ1pjMUIxU3I4NEN0SnZRaXVGNWhTR3BQVldGeDVyY3J6Z045bnhTQVEvMC80 OTUzRkNGMkNCNzkyMDJCN0EzQkY1QTI4OUM1NkVEMjZFQzBCQUEzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfH9w2tn3F5mVikVNzB8xIFeW+HWnAtFezQTNHNlvVdu7f5eLeyxDPQEi9Mnv mch8pKoSDzrriEUzFztugivIKcsdDFnPGGcszNQYWa0ynyaEDOmJ4ZD4nMlwoGQ8 SIkRkCot7yLiCLqcz2TEpQj3vTQ6v1ggsO6FQmcHWmZmohcVmOsyiG77vdM7UNL8 Jb95QCRIjzp19WstxKbqPzvF8VWHaZbGJD75s3owD3KGN+GNtr0y3LYg3gT71XiQ pEAMf5eHRu7VxVu8KZuaBIu0FQKXW0VGTsPI92A8nvU9KFjSTNfY/XCaI9gylgM1 fwTyzdpC3jhdIT8e1hIx2RbHrQ== -----END CERTIFICATE-----Generated at Thu Apr 9 14:11:32 2026 by rpki-client