$ rpki-client -vvf rpki-repo.registro.br/repo/HJjgHD7kHhP1UagfV1CnLYbJjURAiUcipr95QzhnnEyk/0/9E8E1DB5C33D3FC8F8E7C993011580AA28F30BC9.mft File: 9E8E1DB5C33D3FC8F8E7C993011580AA28F30BC9.mft (raw, json) Hash identifier: ULJt3pk81ThCeUB4zmUxtZTkzHgXDtg5b686RFm13FY= Subject key identifier: 04:DE:10:DD:4E:F1:8A:B0:CB:A2:41:4E:98:2A:13:06:50:16:8E:A8 Authority key identifier: 9E:8E:1D:B5:C3:3D:3F:C8:F8:E7:C9:93:01:15:80:AA:28:F3:0B:C9 Certificate issuer: /CN=9E8E1DB5C33D3FC8F8E7C993011580AA28F30BC9 Certificate serial: 3DD03AEC34AAEF63283A577D68AF06465813C773 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E8E1DB5C33D3FC8F8E7C993011580AA28F30BC9.cer Subject info access: rsync://rpki-repo.registro.br/repo/HJjgHD7kHhP1UagfV1CnLYbJjURAiUcipr95QzhnnEyk/0/9E8E1DB5C33D3FC8F8E7C993011580AA28F30BC9.mft Manifest number: 02D2 Signing time: Wed 08 Apr 2026 16:42:09 +0000 Manifest this update: Wed 08 Apr 2026 16:37:09 +0000 Manifest next update: Thu 09 Apr 2026 20:12:09 +0000 Files and hashes: 1: 3136302e3233382e32342e302f32322d3234203d3e20323637323633.roa (hash: 2qOT4j6HG0vWun6Vyzh2Pkj1UkPidk6rSXOhaCbNHUU=) 2: 323830343a346163383a3a2f33322d3332203d3e20323637323633.roa (hash: VSH2fxDW2V0tjSJpkhSvwy0Yrc/hswmaGt0+pSH8vjk=) 3: 9E8E1DB5C33D3FC8F8E7C993011580AA28F30BC9.crl (hash: UVrkMHbkjylyVEDcFh4cOlXjC3SgZDaOkSGBrF8glbk=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HJjgHD7kHhP1UagfV1CnLYbJjURAiUcipr95QzhnnEyk/0/9E8E1DB5C33D3FC8F8E7C993011580AA28F30BC9.crl rsync://rpki-repo.registro.br/repo/HJjgHD7kHhP1UagfV1CnLYbJjURAiUcipr95QzhnnEyk/0/9E8E1DB5C33D3FC8F8E7C993011580AA28F30BC9.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E8E1DB5C33D3FC8F8E7C993011580AA28F30BC9.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 09 Apr 2026 20:12:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:d0:3a:ec:34:aa:ef:63:28:3a:57:7d:68:af:06:46:58:13:c7:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9E8E1DB5C33D3FC8F8E7C993011580AA28F30BC9 Validity Not Before: Apr 8 16:37:09 2026 GMT Not After : Apr 9 20:12:09 2026 GMT Subject: CN=04DE10DD4EF18AB0CBA2414E982A130650168EA8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:0c:c1:f4:ed:cf:4b:d0:4b:b7:bb:af:3b:a6: 70:30:a1:e5:b6:59:95:eb:ce:49:e1:eb:90:17:c4: 19:0d:6b:2f:51:a0:bb:58:58:e4:6e:01:57:1c:eb: f3:67:4e:ab:94:d4:40:ff:b9:2d:b0:9d:f4:2c:5a: ff:1e:b3:b2:42:c0:8e:52:fb:66:26:6b:30:e7:b9: c6:2e:90:d1:c1:94:6d:e4:e1:b0:c4:38:4b:db:8a: 50:65:e0:49:72:8a:a1:9a:d9:eb:73:04:c5:f1:e0: 6f:09:08:21:58:d3:35:2d:8c:01:35:aa:e4:9f:aa: d8:78:79:13:5c:07:59:49:4f:54:b7:39:c7:c4:70: 2e:df:1e:05:6b:87:20:34:56:ea:ab:9e:a1:e6:b5: 40:99:96:ca:c4:e0:a9:58:ec:87:82:c2:78:e3:48: 28:1a:17:c5:14:24:6d:9f:b0:46:c0:09:59:53:78: ba:96:ba:fc:68:7b:aa:3e:5c:38:e7:a0:e5:03:e1: 66:b8:0b:22:ca:61:ff:ac:b9:70:3d:d2:44:9d:32: bd:0c:b7:74:55:99:2f:f9:d6:0a:df:10:ac:c4:e3: a6:59:59:2c:a5:d4:24:6c:84:14:9b:db:1d:fa:10: 91:4b:29:36:52:05:b3:63:61:6a:3a:87:7d:33:e9: dd:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:DE:10:DD:4E:F1:8A:B0:CB:A2:41:4E:98:2A:13:06:50:16:8E:A8 X509v3 Authority Key Identifier: keyid:9E:8E:1D:B5:C3:3D:3F:C8:F8:E7:C9:93:01:15:80:AA:28:F3:0B:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HJjgHD7kHhP1UagfV1CnLYbJjURAiUcipr95QzhnnEyk/0/9E8E1DB5C33D3FC8F8E7C993011580AA28F30BC9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E8E1DB5C33D3FC8F8E7C993011580AA28F30BC9.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HJjgHD7kHhP1UagfV1CnLYbJjURAiUcipr95QzhnnEyk/0/9E8E1DB5C33D3FC8F8E7C993011580AA28F30BC9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:b7:2d:da:76:97:4d:34:51:f4:da:fe:a9:d4:c3:d2:49:d3: cc:7d:4a:47:be:a1:15:e6:5a:2b:4c:8c:d1:d5:68:e9:cb:c8: 07:95:c2:cc:b9:28:34:de:a6:3f:c0:f2:3d:4f:9e:85:3e:e9: 92:e3:fc:6d:44:08:6f:3d:7e:51:dd:30:40:cd:9b:75:54:18: 83:ab:95:70:01:c4:cf:cd:2b:b3:7f:b1:27:6d:8c:33:86:ca: b3:5d:45:be:84:d6:d9:a1:28:e3:14:20:6a:7e:27:19:66:5c: 39:0e:e2:fd:b6:49:5c:99:35:da:e1:f3:4b:e4:e7:09:c7:38: 85:2a:2b:4e:af:2a:70:2a:2b:31:be:23:51:b8:48:c1:c7:bf: d4:71:3d:30:09:15:6b:ba:66:4b:6a:11:23:da:ac:30:2f:39: 30:9c:cd:40:62:e4:c0:7e:a8:79:9c:3a:db:15:a4:a5:7c:cb: a8:cd:2b:e2:4d:64:0f:30:d5:35:f7:8b:60:77:b7:dd:ef:8b: 73:8a:ee:75:11:af:df:c8:15:34:f6:9c:d6:41:9b:7e:03:85: e2:1a:89:0d:a7:cc:b5:62:de:b9:e9:2b:d3:81:bd:67:86:28: 7b:c2:6b:9e:a6:13:51:a0:78:e8:69:f9:26:2b:ac:21:0c:55: b5:a4:b5:7d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUPdA67DSq72MoOld9aK8GRlgTx3MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUU4RTFEQjVDMzNEM0ZDOEY4RTdDOTkzMDExNTgwQUEy OEYzMEJDOTAeFw0yNjA0MDgxNjM3MDlaFw0yNjA0MDkyMDEyMDlaMDMxMTAvBgNV BAMTKDA0REUxMERENEVGMThBQjBDQkEyNDE0RTk4MkExMzA2NTAxNjhFQTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNDMH07c9L0Eu3u687pnAwoeW2 WZXrzknh65AXxBkNay9RoLtYWORuAVcc6/NnTquU1ED/uS2wnfQsWv8es7JCwI5S +2YmazDnucYukNHBlG3k4bDEOEvbilBl4ElyiqGa2etzBMXx4G8JCCFY0zUtjAE1 quSfqth4eRNcB1lJT1S3OcfEcC7fHgVrhyA0VuqrnqHmtUCZlsrE4KlY7IeCwnjj SCgaF8UUJG2fsEbACVlTeLqWuvxoe6o+XDjnoOUD4Wa4CyLKYf+suXA90kSdMr0M t3RVmS/51grfEKzE46ZZWSyl1CRshBSb2x36EJFLKTZSBbNjYWo6h30z6d1tAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUBN4Q3U7xirDLokFOmCoTBlAWjqgwHwYDVR0j BBgwFoAUno4dtcM9P8j458mTARWAqijzC8kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSEpqZ0hEN2tIaFAxVWFnZlYxQ25MWWJKalVSQWlVY2lwcjk1UXpobm5F eWsvMC85RThFMURCNUMzM0QzRkM4RjhFN0M5OTMwMTE1ODBBQTI4RjMwQkM5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlFOEUxREI1QzMzRDNGQzhG OEU3Qzk5MzAxMTU4MEFBMjhGMzBCQzkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SEpqZ0hEN2tIaFAxVWFnZlYxQ25MWWJKalVSQWlVY2lwcjk1UXpobm5FeWsvMC85 RThFMURCNUMzM0QzRkM4RjhFN0M5OTMwMTE1ODBBQTI4RjMwQkM5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnbct2naXTTRR9Nr+qdTD0knTzH1KR76hFeZaK0yM0dVo6cvIB5XCzLkoNN6m P8DyPU+ehT7pkuP8bUQIbz1+Ud0wQM2bdVQYg6uVcAHEz80rs3+xJ22MM4bKs11F voTW2aEo4xQgan4nGWZcOQ7i/bZJXJk12uHzS+TnCcc4hSorTq8qcCorMb4jUbhI wce/1HE9MAkVa7pmS2oRI9qsMC85MJzNQGLkwH6oeZw62xWkpXzLqM0r4k1kDzDV NfeLYHe33e+Lc4rudRGv38gVNPac1kGbfgOF4hqJDafMtWLeuekr04G9Z4Yoe8Jr nqYTUaB46Gn5JiusIQxVtaS1fQ== -----END CERTIFICATE-----Generated at Thu Apr 9 11:11:36 2026 by rpki-client