$ rpki-client -vvf rpki-repo.registro.br/repo/HUKJkh6LsvykeptmBqqUpjAYkZA9o2m1AzKT9Hw2vwk7/0/CDA0766699BBB6B51CB934FD4F8E86EB81DA6A99.mft File: CDA0766699BBB6B51CB934FD4F8E86EB81DA6A99.mft (raw, json) Hash identifier: TYJlV2AhWGvA12LWeDurZdACEPDVo6Gyd8nJnVyrLIU= Subject key identifier: 68:32:7D:74:00:41:17:4D:0A:27:D7:6F:F1:01:07:C8:05:F2:5C:33 Authority key identifier: CD:A0:76:66:99:BB:B6:B5:1C:B9:34:FD:4F:8E:86:EB:81:DA:6A:99 Certificate issuer: /CN=CDA0766699BBB6B51CB934FD4F8E86EB81DA6A99 Certificate serial: 1F7D9E82AF63F35AFF4C9BA72CC101B6515A520C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDA0766699BBB6B51CB934FD4F8E86EB81DA6A99.cer Subject info access: rsync://rpki-repo.registro.br/repo/HUKJkh6LsvykeptmBqqUpjAYkZA9o2m1AzKT9Hw2vwk7/0/CDA0766699BBB6B51CB934FD4F8E86EB81DA6A99.mft Manifest number: B0 Signing time: Thu 09 Apr 2026 08:49:43 +0000 Manifest this update: Thu 09 Apr 2026 08:44:43 +0000 Manifest next update: Fri 10 Apr 2026 11:21:43 +0000 Files and hashes: 1: CDA0766699BBB6B51CB934FD4F8E86EB81DA6A99.crl (hash: 9QuGwAZadJ3ccDeWACJH076hnMT7HYPCOXuXkcV70Bw=) 2: 3137302e3234352e3235312e302f32342d3234203d3e20323636303332.roa (hash: qSXhpi5jkfldkXQrU+AHOgUe+NMXk4NMgOqJ4pWavt0=) 3: 3137302e3234352e3235302e302f32342d3234203d3e20323636303332.roa (hash: RtiMjhc0R/xV0KBiKmXsvSv0eYHtVfNyftSRhy117C8=) 4: 3137302e3234352e3234382e302f32332d3234203d3e20323636303332.roa (hash: F4YhNoG7E6IcIRGjcBNDY1sB2guTnHkDoaPo1f5RKJk=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HUKJkh6LsvykeptmBqqUpjAYkZA9o2m1AzKT9Hw2vwk7/0/CDA0766699BBB6B51CB934FD4F8E86EB81DA6A99.crl rsync://rpki-repo.registro.br/repo/HUKJkh6LsvykeptmBqqUpjAYkZA9o2m1AzKT9Hw2vwk7/0/CDA0766699BBB6B51CB934FD4F8E86EB81DA6A99.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDA0766699BBB6B51CB934FD4F8E86EB81DA6A99.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 10 Apr 2026 11:21:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:7d:9e:82:af:63:f3:5a:ff:4c:9b:a7:2c:c1:01:b6:51:5a:52:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDA0766699BBB6B51CB934FD4F8E86EB81DA6A99 Validity Not Before: Apr 9 08:44:43 2026 GMT Not After : Apr 10 11:21:43 2026 GMT Subject: CN=68327D740041174D0A27D76FF10107C805F25C33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ce:52:ea:88:74:78:32:e3:c3:07:9d:e9:55: 90:a8:05:3c:5e:a3:49:09:59:3b:fd:da:37:30:41: bd:06:a7:16:9c:f7:41:47:ae:3b:3f:2c:6e:2d:2b: 94:29:82:e2:f3:03:53:7b:74:5e:70:77:e9:0b:00: 3d:18:df:74:67:4c:81:43:c6:c2:e5:08:86:a7:46: 8d:21:82:d1:dc:71:61:4d:3a:c9:6a:ec:f6:8c:0c: c2:30:d3:27:ad:78:29:42:13:8e:f7:35:cb:b2:4d: 38:a3:6c:11:7c:66:12:27:ed:39:30:a3:ec:fa:83: e1:9a:4e:de:82:cc:85:ec:4a:1d:f4:a4:c2:12:cc: aa:24:75:d4:cc:b9:0f:9b:7f:52:eb:95:4a:aa:80: 5c:66:3f:8a:dd:70:08:ed:a6:44:1d:81:fc:bc:b4: a1:ea:9c:fb:9b:06:fb:37:21:81:55:37:2a:91:03: d2:41:c5:e4:b8:78:5b:6d:1c:22:b7:5e:b4:c5:8a: 66:75:0b:0c:88:be:b4:d6:88:13:7f:72:30:b1:32: 57:2e:33:62:10:53:f3:44:38:b8:85:f9:ef:d5:8c: 50:99:14:6e:f8:ef:70:4b:61:15:83:21:6b:6e:40: ab:88:22:30:80:cb:97:6c:3a:5f:3e:ad:44:26:fa: 75:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:32:7D:74:00:41:17:4D:0A:27:D7:6F:F1:01:07:C8:05:F2:5C:33 X509v3 Authority Key Identifier: keyid:CD:A0:76:66:99:BB:B6:B5:1C:B9:34:FD:4F:8E:86:EB:81:DA:6A:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HUKJkh6LsvykeptmBqqUpjAYkZA9o2m1AzKT9Hw2vwk7/0/CDA0766699BBB6B51CB934FD4F8E86EB81DA6A99.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDA0766699BBB6B51CB934FD4F8E86EB81DA6A99.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HUKJkh6LsvykeptmBqqUpjAYkZA9o2m1AzKT9Hw2vwk7/0/CDA0766699BBB6B51CB934FD4F8E86EB81DA6A99.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:ba:ed:b8:93:f3:eb:a7:75:6a:7f:89:e6:cd:f7:18:71:f0: 30:ab:e5:0d:2c:a7:e9:bb:93:df:00:67:f0:72:62:48:50:e3: 33:71:5c:ae:41:ac:90:69:5e:b5:b9:d3:02:a8:68:69:81:74: 2a:85:a7:0c:70:c7:21:22:fa:89:23:16:0d:0e:da:52:be:81: b0:1e:d9:81:b6:a6:d5:d1:5c:8a:85:dd:7e:92:d5:d7:50:e7: 06:34:72:a1:d9:da:80:ca:95:b0:31:1a:52:75:0c:cf:09:a7: bb:ce:0c:a7:6b:f8:73:18:e2:cc:b7:ba:db:13:66:00:93:32: cb:4e:48:fa:6c:cb:bb:bb:60:ec:a9:f8:0d:4e:9d:39:36:eb: 68:33:d5:83:bd:90:ff:65:33:f3:a5:0a:6f:69:80:3b:8e:49: b1:d9:90:5e:64:71:c2:07:66:5b:25:c9:bd:50:2f:14:b8:8c: 78:9b:59:a8:10:26:15:a3:6c:04:df:8e:8c:7e:58:c7:56:96: 1b:2f:9f:0d:2d:68:85:c2:19:a0:0d:c7:cd:07:f3:f3:17:cb: a6:5c:93:9f:4f:3c:70:3b:b9:00:65:c3:95:da:f0:fe:fa:e4: 41:dd:d6:b8:39:90:f2:f5:bb:2f:10:22:07:5a:8f:32:17:98: cf:63:ec:42 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUH32egq9j81r/TJunLMEBtlFaUgwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RBMDc2NjY5OUJCQjZCNTFDQjkzNEZENEY4RTg2RUI4 MURBNkE5OTAeFw0yNjA0MDkwODQ0NDNaFw0yNjA0MTAxMTIxNDNaMDMxMTAvBgNV BAMTKDY4MzI3RDc0MDA0MTE3NEQwQTI3RDc2RkYxMDEwN0M4MDVGMjVDMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEzlLqiHR4MuPDB53pVZCoBTxe o0kJWTv92jcwQb0Gpxac90FHrjs/LG4tK5QpguLzA1N7dF5wd+kLAD0Y33RnTIFD xsLlCIanRo0hgtHccWFNOslq7PaMDMIw0yeteClCE473NcuyTTijbBF8ZhIn7Tkw o+z6g+GaTt6CzIXsSh30pMISzKokddTMuQ+bf1LrlUqqgFxmP4rdcAjtpkQdgfy8 tKHqnPubBvs3IYFVNyqRA9JBxeS4eFttHCK3XrTFimZ1CwyIvrTWiBN/cjCxMlcu M2IQU/NEOLiF+e/VjFCZFG7473BLYRWDIWtuQKuIIjCAy5dsOl8+rUQm+nV/AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUaDJ9dABBF00KJ9dv8QEHyAXyXDMwHwYDVR0j BBgwFoAUzaB2Zpm7trUcuTT9T46G64HaapkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSFVLSmtoNkxzdnlrZXB0bUJxcVVwakFZa1pBOW8ybTFBektUOUh3MnZ3 azcvMC9DREEwNzY2Njk5QkJCNkI1MUNCOTM0RkQ0RjhFODZFQjgxREE2QTk5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NEQTA3NjY2OTlCQkI2QjUx Q0I5MzRGRDRGOEU4NkVCODFEQTZBOTkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SFVLSmtoNkxzdnlrZXB0bUJxcVVwakFZa1pBOW8ybTFBektUOUh3MnZ3azcvMC9D REEwNzY2Njk5QkJCNkI1MUNCOTM0RkQ0RjhFODZFQjgxREE2QTk5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEASrrtuJPz66d1an+J5s33GHHwMKvlDSyn6buT3wBn8HJiSFDjM3FcrkGskGle tbnTAqhoaYF0KoWnDHDHISL6iSMWDQ7aUr6BsB7Zgbam1dFcioXdfpLV11DnBjRy odnagMqVsDEaUnUMzwmnu84Mp2v4cxjizLe62xNmAJMyy05I+mzLu7tg7Kn4DU6d OTbraDPVg72Q/2Uz86UKb2mAO45JsdmQXmRxwgdmWyXJvVAvFLiMeJtZqBAmFaNs BN+OjH5Yx1aWGy+fDS1ohcIZoA3HzQfz8xfLplyTn088cDu5AGXDldrw/vrkQd3W uDmQ8vW7LxAiB1qPMheYz2PsQg== -----END CERTIFICATE-----Generated at Thu Apr 9 19:16:40 2026 by rpki-client