$ rpki-client -vvf rpki-repo.registro.br/repo/4gbLmi6tRwS1koS6sa825BABAfeniStfrJ68prrgTh9d/0/D4A1B91A993197A3CE71A9BEB70852A5C2F3037A.mft File: D4A1B91A993197A3CE71A9BEB70852A5C2F3037A.mft (raw, json) Hash identifier: ebAQvAW/8FR1FqKvqvKIrOki+f7wCBfDdWeoTjqkkrc= Subject key identifier: 66:A4:AD:74:05:2A:FE:3A:AB:12:EA:A1:86:91:C3:85:7A:02:35:B8 Authority key identifier: D4:A1:B9:1A:99:31:97:A3:CE:71:A9:BE:B7:08:52:A5:C2:F3:03:7A Certificate issuer: /CN=D4A1B91A993197A3CE71A9BEB70852A5C2F3037A Certificate serial: 7B488C1997131D6B3C9648820B2C6DC1552974EC Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4A1B91A993197A3CE71A9BEB70852A5C2F3037A.cer Subject info access: rsync://rpki-repo.registro.br/repo/4gbLmi6tRwS1koS6sa825BABAfeniStfrJ68prrgTh9d/0/D4A1B91A993197A3CE71A9BEB70852A5C2F3037A.mft Manifest number: CA Signing time: Thu 26 Mar 2026 09:06:52 +0000 Manifest this update: Thu 26 Mar 2026 09:01:52 +0000 Manifest next update: Fri 27 Mar 2026 12:47:52 +0000 Files and hashes: 1: D4A1B91A993197A3CE71A9BEB70852A5C2F3037A.crl (hash: BvCXhQp0qvpEiOepCDbD/Y/fwjxLWlPRgO0HmO1WJrY=) 2: 323830343a393236383a3a2f33322d313238203d3e20323734373039.roa (hash: rEuc4lsgPPD3i+4ht/oVW+K1az6MnIpffkS/CwB3gJg=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4gbLmi6tRwS1koS6sa825BABAfeniStfrJ68prrgTh9d/0/D4A1B91A993197A3CE71A9BEB70852A5C2F3037A.crl rsync://rpki-repo.registro.br/repo/4gbLmi6tRwS1koS6sa825BABAfeniStfrJ68prrgTh9d/0/D4A1B91A993197A3CE71A9BEB70852A5C2F3037A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4A1B91A993197A3CE71A9BEB70852A5C2F3037A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 27 Mar 2026 12:47:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:48:8c:19:97:13:1d:6b:3c:96:48:82:0b:2c:6d:c1:55:29:74:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D4A1B91A993197A3CE71A9BEB70852A5C2F3037A Validity Not Before: Mar 26 09:01:52 2026 GMT Not After : Mar 27 12:47:52 2026 GMT Subject: CN=66A4AD74052AFE3AAB12EAA18691C3857A0235B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:13:57:4d:9c:7f:e2:74:bf:7d:96:4b:c6:bf: fe:c2:5f:41:38:e6:66:7a:82:32:2c:46:1a:7d:b2: c0:74:41:a7:db:ef:88:49:49:0c:10:e2:c7:cd:d5: c3:d9:99:f1:f7:c7:f7:0b:e5:1a:47:e0:6e:f0:7e: be:7e:d0:36:01:fd:78:dd:87:91:fe:68:28:68:b9: 80:26:ef:82:91:32:50:66:0b:93:1c:bf:97:92:a3: dd:c5:01:9a:17:f6:56:84:8b:29:dc:ca:b1:2c:07: 08:a2:98:f4:73:11:37:40:50:90:f6:86:69:ef:11: e9:52:db:d5:95:f0:2b:2c:31:b1:76:06:6d:a8:1f: 61:54:c6:57:ea:0d:04:fc:54:ab:bb:3e:2a:f7:da: d6:e2:97:b0:ea:e6:69:57:f0:a9:0a:62:22:e5:2c: bb:33:7f:d7:d1:9e:e9:8b:10:82:b2:75:f9:21:cf: 0c:58:6b:48:2b:6a:c9:2a:60:70:b2:e3:59:b9:15: f3:e1:23:05:5e:13:a9:40:ff:4f:13:cf:ff:22:26: 7e:d9:d5:af:4e:bf:4a:90:21:43:f2:14:c4:7d:84: 49:29:79:b8:5a:25:d9:4b:0c:21:75:05:d5:0b:61: 5d:11:d7:13:08:38:8e:24:9b:c5:f2:17:d5:f9:c9: 24:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:A4:AD:74:05:2A:FE:3A:AB:12:EA:A1:86:91:C3:85:7A:02:35:B8 X509v3 Authority Key Identifier: keyid:D4:A1:B9:1A:99:31:97:A3:CE:71:A9:BE:B7:08:52:A5:C2:F3:03:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4gbLmi6tRwS1koS6sa825BABAfeniStfrJ68prrgTh9d/0/D4A1B91A993197A3CE71A9BEB70852A5C2F3037A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4A1B91A993197A3CE71A9BEB70852A5C2F3037A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4gbLmi6tRwS1koS6sa825BABAfeniStfrJ68prrgTh9d/0/D4A1B91A993197A3CE71A9BEB70852A5C2F3037A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:cd:9a:e2:ad:86:62:33:b9:96:49:21:87:2a:82:04:0c:e1: 37:0a:cb:23:09:de:c6:79:a8:52:69:ee:66:cb:ef:29:51:2f: f4:19:12:05:9c:62:88:68:a4:41:9c:3a:1c:85:ff:ce:45:48: aa:b1:49:bc:77:db:63:4c:88:6f:fc:fa:83:d6:07:99:c7:a8: 70:d6:e4:0a:52:f0:46:e7:4a:3c:44:45:8c:3b:02:04:98:0d: ea:38:8e:9a:fd:1e:f1:36:e2:59:c9:8c:f9:9a:05:d2:06:22: 64:63:6c:d0:9f:b5:c9:71:a7:42:a9:4b:8f:a9:91:b3:89:e9: 09:0f:75:7d:b3:f8:3a:12:9c:b1:e0:e7:87:d1:64:a5:cc:5b: e9:df:01:43:d8:fb:c9:52:ee:24:a1:6f:e0:57:66:65:e5:32: 40:86:74:67:fc:57:6d:98:0b:ef:32:d5:27:ff:4c:75:98:b3: d1:29:51:0d:f8:b2:9a:6c:31:bd:02:80:00:83:09:94:d2:b4: 3e:35:8e:df:9e:eb:25:d6:06:bb:d4:0e:71:56:8d:ae:2c:66: ae:61:dc:ca:c7:41:48:36:d5:46:20:19:32:e0:cb:c5:cd:10: 0e:22:98:b1:ae:63:72:95:b3:b4:f6:ed:be:40:9f:de:76:87: a3:d7:ea:03 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUe0iMGZcTHWs8lkiCCyxtwVUpdOwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDRBMUI5MUE5OTMxOTdBM0NFNzFBOUJFQjcwODUyQTVD MkYzMDM3QTAeFw0yNjAzMjYwOTAxNTJaFw0yNjAzMjcxMjQ3NTJaMDMxMTAvBgNV BAMTKDY2QTRBRDc0MDUyQUZFM0FBQjEyRUFBMTg2OTFDMzg1N0EwMjM1QjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5E1dNnH/idL99lkvGv/7CX0E4 5mZ6gjIsRhp9ssB0Qafb74hJSQwQ4sfN1cPZmfH3x/cL5RpH4G7wfr5+0DYB/Xjd h5H+aChouYAm74KRMlBmC5Mcv5eSo93FAZoX9laEiyncyrEsBwiimPRzETdAUJD2 hmnvEelS29WV8CssMbF2Bm2oH2FUxlfqDQT8VKu7Pir32tbil7Dq5mlX8KkKYiLl LLszf9fRnumLEIKydfkhzwxYa0graskqYHCy41m5FfPhIwVeE6lA/08Tz/8iJn7Z 1a9Ov0qQIUPyFMR9hEkpebhaJdlLDCF1BdULYV0R1xMIOI4km8XyF9X5ySTHAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUZqStdAUq/jqrEuqhhpHDhXoCNbgwHwYDVR0j BBgwFoAU1KG5Gpkxl6POcam+twhSpcLzA3owDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNGdiTG1pNnRSd1Mxa29TNnNhODI1QkFCQWZlbmlTdGZySjY4cHJyZ1Ro OWQvMC9ENEExQjkxQTk5MzE5N0EzQ0U3MUE5QkVCNzA4NTJBNUMyRjMwMzdBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q0QTFCOTFBOTkzMTk3QTND RTcxQTlCRUI3MDg1MkE1QzJGMzAzN0EuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NGdiTG1pNnRSd1Mxa29TNnNhODI1QkFCQWZlbmlTdGZySjY4cHJyZ1RoOWQvMC9E NEExQjkxQTk5MzE5N0EzQ0U3MUE5QkVCNzA4NTJBNUMyRjMwMzdBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqM2a4q2GYjO5lkkhhyqCBAzhNwrLIwnexnmoUmnuZsvvKVEv9BkSBZxiiGik QZw6HIX/zkVIqrFJvHfbY0yIb/z6g9YHmceocNbkClLwRudKPERFjDsCBJgN6jiO mv0e8TbiWcmM+ZoF0gYiZGNs0J+1yXGnQqlLj6mRs4npCQ91fbP4OhKcseDnh9Fk pcxb6d8BQ9j7yVLuJKFv4FdmZeUyQIZ0Z/xXbZgL7zLVJ/9MdZiz0SlRDfiymmwx vQKAAIMJlNK0PjWO357rJdYGu9QOcVaNrixmrmHcysdBSDbVRiAZMuDLxc0QDiKY sa5jcpWztPbtvkCf3naHo9fqAw== -----END CERTIFICATE-----Generated at Fri Mar 27 02:37:52 2026 by rpki-client