$ rpki-client -vvf rpki-repo.registro.br/repo/BAYS1KHUZaf1AZQhNa8wnqvyednfc6fzMb3T2Yvqazk7/0/5A3AE20076D062C545A8A8573997926813E925D8.mft File: 5A3AE20076D062C545A8A8573997926813E925D8.mft (raw, json) Hash identifier: 3JjRPkFrY5EaYrwT9Pz9vaqmtYwUgNOspleB/2Pozgc= Subject key identifier: DD:3E:8C:CB:F1:FF:98:72:1E:FC:6A:A2:F1:B9:2E:40:38:4E:B1:F2 Authority key identifier: 5A:3A:E2:00:76:D0:62:C5:45:A8:A8:57:39:97:92:68:13:E9:25:D8 Certificate issuer: /CN=5A3AE20076D062C545A8A8573997926813E925D8 Certificate serial: 05168A8FEA738818A663A933FCB5EDDFBB7C5A3E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A3AE20076D062C545A8A8573997926813E925D8.cer Subject info access: rsync://rpki-repo.registro.br/repo/BAYS1KHUZaf1AZQhNa8wnqvyednfc6fzMb3T2Yvqazk7/0/5A3AE20076D062C545A8A8573997926813E925D8.mft Manifest number: 02B1 Signing time: Wed 08 Apr 2026 17:07:11 +0000 Manifest this update: Wed 08 Apr 2026 17:02:11 +0000 Manifest next update: Thu 09 Apr 2026 20:14:11 +0000 Files and hashes: 1: 5A3AE20076D062C545A8A8573997926813E925D8.crl (hash: MS5igxwcaZ68v+DcZIHCI1Ld+v9z81UIz1Ussgnrhi0=) 2: 34352e3137362e3235322e302f32322d3234203d3e20323638393733.roa (hash: 6W+sBJcJZ2b6bj5RsmyJFMfqEinjpbph4IeKP9qOa9U=) 3: 323830343a356437343a3a2f33322d3438203d3e20323638393733.roa (hash: MsKHn0SiETNQZVMd+4wWyPuOBT80tvdac+Ej9lHHtR0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BAYS1KHUZaf1AZQhNa8wnqvyednfc6fzMb3T2Yvqazk7/0/5A3AE20076D062C545A8A8573997926813E925D8.crl rsync://rpki-repo.registro.br/repo/BAYS1KHUZaf1AZQhNa8wnqvyednfc6fzMb3T2Yvqazk7/0/5A3AE20076D062C545A8A8573997926813E925D8.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A3AE20076D062C545A8A8573997926813E925D8.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 09 Apr 2026 18:53:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:16:8a:8f:ea:73:88:18:a6:63:a9:33:fc:b5:ed:df:bb:7c:5a:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A3AE20076D062C545A8A8573997926813E925D8 Validity Not Before: Apr 8 17:02:11 2026 GMT Not After : Apr 9 20:14:11 2026 GMT Subject: CN=DD3E8CCBF1FF98721EFC6AA2F1B92E40384EB1F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:ce:fb:90:3b:81:c5:4c:62:99:3c:f9:be:73: 15:78:2f:70:a2:b7:c3:23:ca:c8:fc:d3:a9:34:e3: e1:52:76:5f:a8:3f:64:b8:f5:3f:e2:16:72:83:1b: cf:89:88:aa:9a:4c:88:03:86:4c:c3:4d:aa:65:d7: 04:2d:51:fe:b6:5d:c4:5d:7c:a3:d5:97:5a:28:ca: 61:a0:d7:73:c6:2a:fa:14:a2:71:23:15:18:dc:58: 7e:18:93:d7:92:71:8b:0a:b1:14:fc:9d:91:ee:dd: 0d:55:d6:66:46:d7:1d:bc:47:55:5e:6d:3b:6a:71: b5:14:03:ab:8b:92:66:aa:66:2b:97:b4:8f:30:d9: a1:90:22:b1:66:e1:e5:7f:dd:e6:b8:78:aa:35:ec: a7:02:4a:3d:c1:25:31:f0:e3:d3:7f:96:bf:e1:2b: 78:77:7e:8f:01:a3:84:09:8a:31:7f:9d:6b:24:ce: 44:3d:4a:b3:87:c7:d3:cd:1c:3a:8a:8a:2e:c7:99: 13:5b:62:fb:ed:a6:95:d3:06:15:8f:59:a8:27:70: 2f:ce:37:0c:d4:b9:c5:08:c7:03:b6:29:94:8f:ec: 4b:3c:44:8d:c6:ec:16:0a:bd:0f:a2:54:7a:22:cd: 21:f4:f7:71:f7:d8:ce:48:85:49:49:cf:e5:ed:a2: fa:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:3E:8C:CB:F1:FF:98:72:1E:FC:6A:A2:F1:B9:2E:40:38:4E:B1:F2 X509v3 Authority Key Identifier: keyid:5A:3A:E2:00:76:D0:62:C5:45:A8:A8:57:39:97:92:68:13:E9:25:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BAYS1KHUZaf1AZQhNa8wnqvyednfc6fzMb3T2Yvqazk7/0/5A3AE20076D062C545A8A8573997926813E925D8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A3AE20076D062C545A8A8573997926813E925D8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BAYS1KHUZaf1AZQhNa8wnqvyednfc6fzMb3T2Yvqazk7/0/5A3AE20076D062C545A8A8573997926813E925D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:5a:e6:63:ef:77:d6:5e:55:1f:29:9e:1f:9d:3c:4e:ac:b6: 57:17:a5:b2:84:ec:94:6b:83:6e:99:24:c1:99:43:22:b6:53: 2c:c1:f1:a3:bd:cc:53:54:9e:fc:e1:ce:f6:cb:2d:62:2c:c4: c5:cd:29:86:07:f9:e8:b2:cd:3d:f6:e7:fc:cb:05:d0:43:b5: b5:f2:f7:8f:f5:f4:c8:dc:e1:01:b5:46:54:06:2a:83:b5:58: 53:99:e0:05:9d:a9:35:37:f6:c1:58:76:00:02:10:0c:58:bd: 4e:98:d7:e2:ec:09:e4:79:e9:ac:90:25:a3:81:c6:14:ee:34: 08:f1:48:63:35:e3:f6:c7:b9:2c:95:22:e2:3b:80:cc:b7:2a: 72:69:37:59:fd:c7:7d:92:4f:91:fa:e7:9c:d2:94:4b:9b:b9: 28:a1:2d:5a:fd:82:10:fe:a2:1c:38:ff:a4:4c:dd:23:15:0c: c5:2c:48:59:42:27:3a:5d:4f:c6:3f:a3:bc:63:2e:37:53:86: 2d:7e:18:b6:51:b9:26:a6:cd:50:e3:78:1b:e7:8d:80:fe:51: df:e2:11:65:4b:e0:7b:12:50:00:8c:70:61:11:a7:c0:cf:f9: ed:f4:1b:a6:d5:85:ae:9e:c9:79:4a:17:ca:27:5e:d6:19:73: b4:2b:f6:9a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUBRaKj+pziBimY6kz/LXt37t8Wj4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUEzQUUyMDA3NkQwNjJDNTQ1QThBODU3Mzk5NzkyNjgx M0U5MjVEODAeFw0yNjA0MDgxNzAyMTFaFw0yNjA0MDkyMDE0MTFaMDMxMTAvBgNV BAMTKEREM0U4Q0NCRjFGRjk4NzIxRUZDNkFBMkYxQjkyRTQwMzg0RUIxRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDazvuQO4HFTGKZPPm+cxV4L3Ci t8Mjysj806k04+FSdl+oP2S49T/iFnKDG8+JiKqaTIgDhkzDTapl1wQtUf62XcRd fKPVl1ooymGg13PGKvoUonEjFRjcWH4Yk9eScYsKsRT8nZHu3Q1V1mZG1x28R1Ve bTtqcbUUA6uLkmaqZiuXtI8w2aGQIrFm4eV/3ea4eKo17KcCSj3BJTHw49N/lr/h K3h3fo8Bo4QJijF/nWskzkQ9SrOHx9PNHDqKii7HmRNbYvvtppXTBhWPWagncC/O NwzUucUIxwO2KZSP7Es8RI3G7BYKvQ+iVHoizSH093H32M5IhUlJz+XtovqtAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU3T6My/H/mHIe/Gqi8bkuQDhOsfIwHwYDVR0j BBgwFoAUWjriAHbQYsVFqKhXOZeSaBPpJdgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQkFZUzFLSFVaYWYxQVpRaE5hOHducXZ5ZWRuZmM2ZnpNYjNUMll2cWF6 azcvMC81QTNBRTIwMDc2RDA2MkM1NDVBOEE4NTczOTk3OTI2ODEzRTkyNUQ4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVBM0FFMjAwNzZEMDYyQzU0 NUE4QTg1NzM5OTc5MjY4MTNFOTI1RDguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QkFZUzFLSFVaYWYxQVpRaE5hOHducXZ5ZWRuZmM2ZnpNYjNUMll2cWF6azcvMC81 QTNBRTIwMDc2RDA2MkM1NDVBOEE4NTczOTk3OTI2ODEzRTkyNUQ4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAyFrmY+931l5VHymeH508Tqy2VxelsoTslGuDbpkkwZlDIrZTLMHxo73MU1Se /OHO9sstYizExc0phgf56LLNPfbn/MsF0EO1tfL3j/X0yNzhAbVGVAYqg7VYU5ng BZ2pNTf2wVh2AAIQDFi9TpjX4uwJ5HnprJAlo4HGFO40CPFIYzXj9se5LJUi4juA zLcqcmk3Wf3HfZJPkfrnnNKUS5u5KKEtWv2CEP6iHDj/pEzdIxUMxSxIWUInOl1P xj+jvGMuN1OGLX4YtlG5JqbNUON4G+eNgP5R3+IRZUvgexJQAIxwYRGnwM/57fQb ptWFrp7JeUoXyide1hlztCv2mg== -----END CERTIFICATE-----Generated at Wed Apr 8 20:44:47 2026 by rpki-client