$ rpki-client -vvf rpki-repo.registro.br/repo/HxyUKJHXAY3JCx2TFwWEaGNndWBm3deFbufnBiPra8Tq/0/C9B44C42CE2194CF2AED5F3F1C5F9E7D28D22EAC.mft File: C9B44C42CE2194CF2AED5F3F1C5F9E7D28D22EAC.mft (raw, json) Hash identifier: VVvdvg3wNuF3s8ZwiIs22pjag3atp+Im/2201r0BRc0= Subject key identifier: F1:EE:2C:31:C5:6C:D5:07:6E:30:12:09:6D:C8:FF:34:DF:F4:06:4C Authority key identifier: C9:B4:4C:42:CE:21:94:CF:2A:ED:5F:3F:1C:5F:9E:7D:28:D2:2E:AC Certificate issuer: /CN=C9B44C42CE2194CF2AED5F3F1C5F9E7D28D22EAC Certificate serial: C2880C07FB67D01529CECE0DA385C844F7B474 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9B44C42CE2194CF2AED5F3F1C5F9E7D28D22EAC.cer Subject info access: rsync://rpki-repo.registro.br/repo/HxyUKJHXAY3JCx2TFwWEaGNndWBm3deFbufnBiPra8Tq/0/C9B44C42CE2194CF2AED5F3F1C5F9E7D28D22EAC.mft Manifest number: 012D Signing time: Wed 08 Apr 2026 18:40:28 +0000 Manifest this update: Wed 08 Apr 2026 18:35:28 +0000 Manifest next update: Thu 09 Apr 2026 20:45:28 +0000 Files and hashes: 1: C9B44C42CE2194CF2AED5F3F1C5F9E7D28D22EAC.crl (hash: 5HtEdEI7GELYhBqftxzRf63xnhIIoMqxUiLCNLSCW1w=) 2: 3137302e3234362e3232342e302f32322d3332203d3e20323634303531.roa (hash: ai1fq1d0v27iy15z6wZaaZtUTWGC9NDlAklm01QMFAU=) 3: 3134332e3133372e3136302e302f32322d3332203d3e20323634303531.roa (hash: 6odTTXV/YEt0Dl4aWNPP6L1GAoNrXc5ZxFO+rO0cG3A=) 4: 323830343a326130343a3a2f33322d313238203d3e20323634303531.roa (hash: RSDuNCVU1VTlfLD/mOTkHE5pcS11RZ6Pk8iJjzVZgVU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HxyUKJHXAY3JCx2TFwWEaGNndWBm3deFbufnBiPra8Tq/0/C9B44C42CE2194CF2AED5F3F1C5F9E7D28D22EAC.crl rsync://rpki-repo.registro.br/repo/HxyUKJHXAY3JCx2TFwWEaGNndWBm3deFbufnBiPra8Tq/0/C9B44C42CE2194CF2AED5F3F1C5F9E7D28D22EAC.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9B44C42CE2194CF2AED5F3F1C5F9E7D28D22EAC.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 09 Apr 2026 20:45:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: c2:88:0c:07:fb:67:d0:15:29:ce:ce:0d:a3:85:c8:44:f7:b4:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C9B44C42CE2194CF2AED5F3F1C5F9E7D28D22EAC Validity Not Before: Apr 8 18:35:28 2026 GMT Not After : Apr 9 20:45:28 2026 GMT Subject: CN=F1EE2C31C56CD5076E3012096DC8FF34DFF4064C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:5e:88:29:16:92:19:b1:7c:61:b7:f5:5c:6e: ad:b5:6f:bb:cf:fe:ab:b0:20:45:a9:ca:5d:10:2d: f8:b7:ba:61:1b:46:25:b9:fb:c6:30:bd:c4:9b:65: bd:10:7a:a0:8c:99:27:70:24:e9:66:9f:8b:98:9d: d9:07:f2:35:da:75:87:9c:ab:13:f4:4a:26:d7:1a: 28:f8:30:af:ad:0a:42:88:16:43:36:ef:3a:39:59: f8:56:a8:85:0e:85:f5:81:10:25:f5:d3:41:da:cb: 04:4c:7b:5f:c8:1f:90:04:2e:8b:0a:a6:f4:2e:a0: d4:ce:7e:64:10:00:b3:3e:fd:5b:9c:e2:74:af:4d: 2e:ee:7d:c2:17:76:60:ce:62:f6:2e:0f:df:24:5e: 91:bc:20:75:ae:03:b9:9f:92:df:d1:73:ad:3a:69: f7:9f:4d:08:56:d6:b8:2e:02:24:e9:3d:33:8d:8b: fc:47:04:0a:1d:e5:38:2c:01:75:55:8a:e9:b1:a8: ef:ed:a8:f8:93:d4:77:2c:ff:ef:7a:81:09:a7:ae: a9:2a:5a:a0:3c:93:73:8b:57:34:54:e1:25:1f:11: e2:b1:44:d0:52:8b:94:4b:4a:e4:67:9c:e6:8a:ed: 45:bb:a8:5a:af:a8:70:64:2e:a7:e4:3b:7c:5d:59: 5d:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:EE:2C:31:C5:6C:D5:07:6E:30:12:09:6D:C8:FF:34:DF:F4:06:4C X509v3 Authority Key Identifier: keyid:C9:B4:4C:42:CE:21:94:CF:2A:ED:5F:3F:1C:5F:9E:7D:28:D2:2E:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HxyUKJHXAY3JCx2TFwWEaGNndWBm3deFbufnBiPra8Tq/0/C9B44C42CE2194CF2AED5F3F1C5F9E7D28D22EAC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9B44C42CE2194CF2AED5F3F1C5F9E7D28D22EAC.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HxyUKJHXAY3JCx2TFwWEaGNndWBm3deFbufnBiPra8Tq/0/C9B44C42CE2194CF2AED5F3F1C5F9E7D28D22EAC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:8b:ea:7b:03:97:9c:9d:dd:7b:bc:e8:c6:80:ad:47:36:cf: 06:18:e0:88:28:8f:94:26:f1:9b:2f:f8:43:a6:46:ef:65:19: eb:99:7a:2d:91:e3:b2:06:7d:e8:c9:50:cd:ee:4a:c2:1a:ce: 74:71:52:79:ca:f7:46:e5:5b:33:b4:88:b8:a1:f8:91:de:0e: 25:64:81:94:61:11:e9:90:84:c6:c7:23:e4:2b:a9:95:9c:0f: 31:84:1b:61:92:42:9d:23:8e:56:cd:01:71:cd:7b:c3:4b:3e: f5:0c:a4:5d:6b:b1:f3:84:8d:3f:93:c9:d8:06:52:81:ee:d5: 56:38:45:cd:9e:38:7c:e0:9e:dc:3d:fc:c3:d4:d6:e9:ca:f4: 5c:ad:e5:41:96:6d:37:eb:96:99:c8:4a:21:8b:db:24:2d:16: 47:44:28:67:4d:1f:91:0a:4b:b9:49:4d:d2:57:87:c7:d3:52: bc:9f:bb:58:1c:0e:70:b8:08:03:4d:e5:b2:92:91:ff:85:c8: 01:3e:cf:77:cd:96:c0:01:3d:1c:1c:e7:88:2c:9a:68:34:94: 6c:6c:71:17:ca:9d:51:8d:05:0d:5b:6d:7d:7b:ac:45:28:21: 9b:6c:60:0e:7f:c5:42:97:c1:2e:cf:45:16:bd:47:65:4e:8a: 78:00:f8:04 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUAMKIDAf7Z9AVKc7ODaOFyET3tHQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzlCNDRDNDJDRTIxOTRDRjJBRUQ1RjNGMUM1RjlFN0Qy OEQyMkVBQzAeFw0yNjA0MDgxODM1MjhaFw0yNjA0MDkyMDQ1MjhaMDMxMTAvBgNV BAMTKEYxRUUyQzMxQzU2Q0Q1MDc2RTMwMTIwOTZEQzhGRjM0REZGNDA2NEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8XogpFpIZsXxht/Vcbq21b7vP /quwIEWpyl0QLfi3umEbRiW5+8YwvcSbZb0QeqCMmSdwJOlmn4uYndkH8jXadYec qxP0SibXGij4MK+tCkKIFkM27zo5WfhWqIUOhfWBECX100HaywRMe1/IH5AELosK pvQuoNTOfmQQALM+/Vuc4nSvTS7ufcIXdmDOYvYuD98kXpG8IHWuA7mfkt/Rc606 afefTQhW1rguAiTpPTONi/xHBAod5TgsAXVViumxqO/tqPiT1Hcs/+96gQmnrqkq WqA8k3OLVzRU4SUfEeKxRNBSi5RLSuRnnOaK7UW7qFqvqHBkLqfkO3xdWV0JAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU8e4sMcVs1QduMBIJbcj/NN/0BkwwHwYDVR0j BBgwFoAUybRMQs4hlM8q7V8/HF+efSjSLqwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSHh5VUtKSFhBWTNKQ3gyVEZ3V0VhR05uZFdCbTNkZUZidWZuQmlQcmE4 VHEvMC9DOUI0NEM0MkNFMjE5NENGMkFFRDVGM0YxQzVGOUU3RDI4RDIyRUFDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M5QjQ0QzQyQ0UyMTk0Q0Yy QUVENUYzRjFDNUY5RTdEMjhEMjJFQUMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SHh5VUtKSFhBWTNKQ3gyVEZ3V0VhR05uZFdCbTNkZUZidWZuQmlQcmE4VHEvMC9D OUI0NEM0MkNFMjE5NENGMkFFRDVGM0YxQzVGOUU3RDI4RDIyRUFDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEARovqewOXnJ3de7zoxoCtRzbPBhjgiCiPlCbxmy/4Q6ZG72UZ65l6LZHjsgZ9 6MlQze5KwhrOdHFSecr3RuVbM7SIuKH4kd4OJWSBlGER6ZCExscj5CuplZwPMYQb YZJCnSOOVs0Bcc17w0s+9QykXWux84SNP5PJ2AZSge7VVjhFzZ44fOCe3D38w9TW 6cr0XK3lQZZtN+uWmchKIYvbJC0WR0QoZ00fkQpLuUlN0leHx9NSvJ+7WBwOcLgI A03lspKR/4XIAT7Pd82WwAE9HBzniCyaaDSUbGxxF8qdUY0FDVttfXusRSghm2xg Dn/FQpfBLs9FFr1HZU6KeAD4BA== -----END CERTIFICATE-----Generated at Thu Apr 9 13:03:32 2026 by rpki-client