$ rpki-client -vvf rpki-repo.registro.br/repo/HJindbE6S8b1HgmWqWqK93r1Twc6U8GbwPQSXykxdPSP/0/CA336EA2A2165CECAC40EB5F29E14BF0A1DDF0B9.mft File: CA336EA2A2165CECAC40EB5F29E14BF0A1DDF0B9.mft (raw, json) Hash identifier: lhOk44fTm9/6mGOKYnUVIUm/e/0+TeG5qEQN7cR9iM8= Subject key identifier: C5:DB:3C:85:04:7C:C2:74:25:17:C1:E2:AB:C1:33:9B:20:C8:AE:CB Authority key identifier: CA:33:6E:A2:A2:16:5C:EC:AC:40:EB:5F:29:E1:4B:F0:A1:DD:F0:B9 Certificate issuer: /CN=CA336EA2A2165CECAC40EB5F29E14BF0A1DDF0B9 Certificate serial: 3EB0F2215D0FE8E5050FF63C0BD4B2832AE5D55E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA336EA2A2165CECAC40EB5F29E14BF0A1DDF0B9.cer Subject info access: rsync://rpki-repo.registro.br/repo/HJindbE6S8b1HgmWqWqK93r1Twc6U8GbwPQSXykxdPSP/0/CA336EA2A2165CECAC40EB5F29E14BF0A1DDF0B9.mft Manifest number: EE Signing time: Thu 09 Apr 2026 05:32:46 +0000 Manifest this update: Thu 09 Apr 2026 05:27:46 +0000 Manifest next update: Fri 10 Apr 2026 08:32:46 +0000 Files and hashes: 1: 323830343a326363633a3a2f33322d3336203d3e20323635323434.roa (hash: wIDnu+J18o0K4dHTA/4p4Ei5Q4YGV98gF8GQiDmQd4E=) 2: CA336EA2A2165CECAC40EB5F29E14BF0A1DDF0B9.crl (hash: CLS1YpP3BqGaX1e7rIaJfiwc4uThlQM+e9m9wyweJJY=) 3: 3136382e302e33362e302f32322d3234203d3e20323635323434.roa (hash: oIH6yi7sSGDk1vAzgCfYR2J0+DP7VwZ9p5vQHsh0Q60=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HJindbE6S8b1HgmWqWqK93r1Twc6U8GbwPQSXykxdPSP/0/CA336EA2A2165CECAC40EB5F29E14BF0A1DDF0B9.crl rsync://rpki-repo.registro.br/repo/HJindbE6S8b1HgmWqWqK93r1Twc6U8GbwPQSXykxdPSP/0/CA336EA2A2165CECAC40EB5F29E14BF0A1DDF0B9.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA336EA2A2165CECAC40EB5F29E14BF0A1DDF0B9.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 10 Apr 2026 08:32:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:b0:f2:21:5d:0f:e8:e5:05:0f:f6:3c:0b:d4:b2:83:2a:e5:d5:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA336EA2A2165CECAC40EB5F29E14BF0A1DDF0B9 Validity Not Before: Apr 9 05:27:46 2026 GMT Not After : Apr 10 08:32:46 2026 GMT Subject: CN=C5DB3C85047CC2742517C1E2ABC1339B20C8AECB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:45:a5:7d:ef:e2:27:81:80:d5:de:9c:2e:f7: de:3c:36:d2:28:f6:54:d0:5a:8a:8e:28:7f:e8:2f: bc:62:f0:ca:38:33:32:e1:6a:07:8f:32:31:35:55: 9a:e5:6c:98:e8:9a:53:2e:ef:c2:73:9c:31:fd:1a: 29:fe:a4:3b:af:6f:64:3a:fd:f4:b1:d9:fa:97:a7: d6:c9:a6:11:93:92:bc:cd:b5:cc:b5:f3:6f:f9:aa: eb:d8:67:45:08:48:d9:be:02:a1:88:5c:a0:20:69: 68:24:9a:09:3d:aa:90:d7:8a:4e:8c:7c:e0:88:c8: 8e:bf:eb:e3:90:50:6e:cd:ec:dc:d1:0d:48:f8:b6: 01:e9:e9:70:41:af:6f:82:c5:2a:a2:88:3d:78:53: 72:c9:ad:94:20:2f:53:1a:62:9d:fe:2f:5b:53:25: e4:36:a5:c8:74:64:ca:89:60:db:56:0d:fb:33:94: 2b:c4:81:a6:3c:89:c1:41:1d:03:a5:02:f5:dc:90: b3:3b:51:1a:b4:a1:1b:68:c9:d1:74:ca:14:35:98: a3:3f:5b:77:c6:53:45:e7:33:ae:89:c2:2f:13:66: 7e:50:cd:63:37:0b:4c:3e:74:07:13:38:25:0f:f2: a9:0c:7b:53:17:ac:4b:88:6f:40:9e:f5:d7:82:1c: aa:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:DB:3C:85:04:7C:C2:74:25:17:C1:E2:AB:C1:33:9B:20:C8:AE:CB X509v3 Authority Key Identifier: keyid:CA:33:6E:A2:A2:16:5C:EC:AC:40:EB:5F:29:E1:4B:F0:A1:DD:F0:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HJindbE6S8b1HgmWqWqK93r1Twc6U8GbwPQSXykxdPSP/0/CA336EA2A2165CECAC40EB5F29E14BF0A1DDF0B9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA336EA2A2165CECAC40EB5F29E14BF0A1DDF0B9.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HJindbE6S8b1HgmWqWqK93r1Twc6U8GbwPQSXykxdPSP/0/CA336EA2A2165CECAC40EB5F29E14BF0A1DDF0B9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:01:a2:b5:05:ce:74:97:99:c3:d8:a0:31:b2:0b:2d:67:f7: fa:2e:e8:5a:b2:c3:89:2b:53:8b:17:25:cb:75:1e:78:1b:88: 68:23:cb:33:91:c2:74:0c:37:e3:ad:f4:61:98:72:40:87:cf: 4f:38:dd:6f:20:af:97:69:fd:37:9f:16:87:a9:a8:97:0f:e8: 01:d6:a4:8c:6f:30:a5:4a:54:7b:46:06:17:e6:b7:84:2a:4f: 0e:a7:b2:db:3b:54:e9:11:8f:a2:79:4b:ce:9b:f7:6b:d3:a1: 97:8e:17:b8:8d:dd:1e:09:86:05:ff:c1:46:96:f9:40:38:ad: 54:83:cb:c4:71:9e:6b:8f:63:0d:28:8d:78:16:20:40:89:9c: 1f:e7:e6:fe:84:04:bb:d9:67:39:fc:30:81:33:40:e5:db:83: 99:98:d1:49:c3:9c:6d:16:43:de:15:52:48:3d:92:05:eb:8b: d2:01:00:03:ba:a9:75:fd:81:f6:7e:7c:8a:32:a6:fd:c2:ba: 45:c6:7d:e3:ce:78:d3:49:e7:14:4d:3c:f8:49:d4:90:f4:9f: a7:cc:27:99:f7:75:a8:95:51:33:db:c8:0f:a2:ac:06:93:a9: 5b:a9:7c:8a:53:9b:2b:68:1d:1d:5f:d7:da:2c:5d:24:29:98: e1:3c:c8:a0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUPrDyIV0P6OUFD/Y8C9Sygyrl1V4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0EzMzZFQTJBMjE2NUNFQ0FDNDBFQjVGMjlFMTRCRjBB MURERjBCOTAeFw0yNjA0MDkwNTI3NDZaFw0yNjA0MTAwODMyNDZaMDMxMTAvBgNV BAMTKEM1REIzQzg1MDQ3Q0MyNzQyNTE3QzFFMkFCQzEzMzlCMjBDOEFFQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSRaV97+IngYDV3pwu9948NtIo 9lTQWoqOKH/oL7xi8Mo4MzLhagePMjE1VZrlbJjomlMu78JznDH9Gin+pDuvb2Q6 /fSx2fqXp9bJphGTkrzNtcy182/5quvYZ0UISNm+AqGIXKAgaWgkmgk9qpDXik6M fOCIyI6/6+OQUG7N7NzRDUj4tgHp6XBBr2+CxSqiiD14U3LJrZQgL1MaYp3+L1tT JeQ2pch0ZMqJYNtWDfszlCvEgaY8icFBHQOlAvXckLM7URq0oRtoydF0yhQ1mKM/ W3fGU0XnM66Jwi8TZn5QzWM3C0w+dAcTOCUP8qkMe1MXrEuIb0Ce9deCHKprAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUxds8hQR8wnQlF8Hiq8EzmyDIrsswHwYDVR0j BBgwFoAUyjNuoqIWXOysQOtfKeFL8KHd8LkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSEppbmRiRTZTOGIxSGdtV3FXcUs5M3IxVHdjNlU4R2J3UFFTWHlreGRQ U1AvMC9DQTMzNkVBMkEyMTY1Q0VDQUM0MEVCNUYyOUUxNEJGMEExRERGMEI5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NBMzM2RUEyQTIxNjVDRUNB QzQwRUI1RjI5RTE0QkYwQTFEREYwQjkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SEppbmRiRTZTOGIxSGdtV3FXcUs5M3IxVHdjNlU4R2J3UFFTWHlreGRQU1AvMC9D QTMzNkVBMkEyMTY1Q0VDQUM0MEVCNUYyOUUxNEJGMEExRERGMEI5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKwGitQXOdJeZw9igMbILLWf3+i7oWrLDiStTixcly3UeeBuIaCPLM5HCdAw3 4630YZhyQIfPTzjdbyCvl2n9N58Wh6molw/oAdakjG8wpUpUe0YGF+a3hCpPDqey 2ztU6RGPonlLzpv3a9Ohl44XuI3dHgmGBf/BRpb5QDitVIPLxHGea49jDSiNeBYg QImcH+fm/oQEu9lnOfwwgTNA5duDmZjRScOcbRZD3hVSSD2SBeuL0gEAA7qpdf2B 9n58ijKm/cK6RcZ9485400nnFE08+EnUkPSfp8wnmfd1qJVRM9vID6KsBpOpW6l8 ilObK2gdHV/X2ixdJCmY4TzIoA== -----END CERTIFICATE-----Generated at Thu Apr 9 16:45:17 2026 by rpki-client