$ rpki-client -vvf rpki-repo.registro.br/repo/2AB7Y3TgSBND1YfMGCJaLmG5Rdw6uzEhwmoBkNKvrQTR/0/883F9EED8D520E746FE5A46BDE2594C335F2E812.mft File: 883F9EED8D520E746FE5A46BDE2594C335F2E812.mft (raw, json) Hash identifier: PBJ8rvlAIBdlnx0Dcm73FtTTIfq7kndBvKxXSkBf/pM= Subject key identifier: 88:7F:8D:24:DB:C8:58:F8:7A:67:4A:8E:D9:37:92:B7:A4:68:C1:1E Authority key identifier: 88:3F:9E:ED:8D:52:0E:74:6F:E5:A4:6B:DE:25:94:C3:35:F2:E8:12 Certificate issuer: /CN=883F9EED8D520E746FE5A46BDE2594C335F2E812 Certificate serial: 15EE65F821C686FA7C6565BB90814007A921A6C0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/883F9EED8D520E746FE5A46BDE2594C335F2E812.cer Subject info access: rsync://rpki-repo.registro.br/repo/2AB7Y3TgSBND1YfMGCJaLmG5Rdw6uzEhwmoBkNKvrQTR/0/883F9EED8D520E746FE5A46BDE2594C335F2E812.mft Manifest number: 022D Signing time: Sun 24 May 2026 08:46:42 +0000 Manifest this update: Sun 24 May 2026 08:41:42 +0000 Manifest next update: Mon 25 May 2026 10:37:42 +0000 Files and hashes: 1: 883F9EED8D520E746FE5A46BDE2594C335F2E812.crl (hash: xmpLEV2QaEeqdR7lwOvm9lg+VQ44A+LjX3yOiKgAy1w=) 2: 323830343a3936343a3a2f33322d3634203d3e20323633303830.roa (hash: B0HrhdJpYTo2VYADD+2Ul9NZVStdBga+S+kuIKD5omA=) 3: 3138372e33332e34382e302f32312d3234203d3e20323633303830.roa (hash: dCbRedceE4R2ls/EQGYkNwrcrEWOn87sNodrA8RojOI=) 4: 3138392e3230312e3230382e302f32302d3234203d3e20323633303830.roa (hash: jgv4Nk+ncTsmvI8wJnUhe1ZmH6ezFLKX6NigkRihtog=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2AB7Y3TgSBND1YfMGCJaLmG5Rdw6uzEhwmoBkNKvrQTR/0/883F9EED8D520E746FE5A46BDE2594C335F2E812.crl rsync://rpki-repo.registro.br/repo/2AB7Y3TgSBND1YfMGCJaLmG5Rdw6uzEhwmoBkNKvrQTR/0/883F9EED8D520E746FE5A46BDE2594C335F2E812.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/883F9EED8D520E746FE5A46BDE2594C335F2E812.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 25 May 2026 10:37:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:ee:65:f8:21:c6:86:fa:7c:65:65:bb:90:81:40:07:a9:21:a6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=883F9EED8D520E746FE5A46BDE2594C335F2E812 Validity Not Before: May 24 08:41:42 2026 GMT Not After : May 25 10:37:42 2026 GMT Subject: CN=887F8D24DBC858F87A674A8ED93792B7A468C11E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:33:39:51:62:14:62:a3:df:02:ab:03:4c:2f: 71:af:0b:9b:e1:5b:6d:8c:7b:8b:ee:20:19:0e:a2: bc:64:cd:ad:2d:f8:bc:a8:8f:bc:f4:cd:f7:74:2c: a1:1b:b4:d1:cd:b4:15:0c:aa:f7:40:b7:4f:70:d5: bb:00:aa:33:1b:6b:d0:f8:be:8b:32:51:3a:e6:44: dc:85:10:76:44:b9:a5:bf:6a:28:aa:5c:10:92:e7: 76:00:48:52:04:5b:b2:f5:13:70:c9:93:84:d8:e3: e8:e1:82:80:2a:53:db:25:eb:ff:71:6a:bf:7c:11: 6a:66:bc:fe:e2:a1:87:4b:c7:19:0b:6a:25:59:02: 49:10:40:a3:d7:ab:6a:c4:e2:5a:c4:39:bb:5f:f6: 92:02:50:cf:b3:dd:b4:eb:53:1b:03:10:68:42:f4: dc:7c:40:9a:d9:dc:47:1f:38:53:d7:29:fa:0c:44: c3:52:c6:1d:45:99:9d:a4:47:86:9e:aa:7e:3d:05: 55:ae:1f:0b:f6:b4:dd:03:97:ab:ce:c5:5b:ea:8b: d0:b9:9d:e9:ca:cc:56:79:f8:bc:bd:f5:14:e6:d7: b3:2b:96:c6:bd:17:9f:cf:86:23:96:6b:1c:9b:6e: 99:f8:e5:1a:86:3c:46:af:f6:1e:31:24:c5:3f:39: c2:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:7F:8D:24:DB:C8:58:F8:7A:67:4A:8E:D9:37:92:B7:A4:68:C1:1E X509v3 Authority Key Identifier: keyid:88:3F:9E:ED:8D:52:0E:74:6F:E5:A4:6B:DE:25:94:C3:35:F2:E8:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2AB7Y3TgSBND1YfMGCJaLmG5Rdw6uzEhwmoBkNKvrQTR/0/883F9EED8D520E746FE5A46BDE2594C335F2E812.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/883F9EED8D520E746FE5A46BDE2594C335F2E812.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2AB7Y3TgSBND1YfMGCJaLmG5Rdw6uzEhwmoBkNKvrQTR/0/883F9EED8D520E746FE5A46BDE2594C335F2E812.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:30:28:9b:13:62:e0:f4:aa:b7:39:d9:99:44:cd:a8:91:cf: a7:06:a8:84:a0:8e:d6:99:86:ff:52:60:c4:f8:ab:f8:59:8d: 4e:8b:f6:96:ad:f1:a9:68:46:3c:5e:d5:c4:98:d5:8e:70:de: aa:4e:5b:dc:42:48:20:51:35:01:57:6d:54:96:e9:66:02:c9: 6b:8d:d1:52:f0:f8:d5:ee:97:fe:36:3d:6f:55:5e:49:e6:b4: 59:8f:20:6c:a1:42:b8:f1:19:fe:d4:8e:ab:45:5b:fc:a1:09: 8a:ad:03:a9:57:61:29:be:7d:98:d5:2c:76:cc:e5:a9:ee:ce: 82:0f:47:2d:e2:be:33:37:cc:04:39:e7:39:d3:56:93:7e:98: 41:32:fa:16:d6:4a:56:55:8b:ce:a0:95:19:cb:48:27:f7:59: 39:f3:ba:37:e0:11:83:de:67:99:50:d6:95:64:32:94:c8:94: 04:ca:35:8c:af:64:84:c1:03:9e:f6:a6:c7:5e:bd:ba:94:6d: 07:58:f5:06:fe:fc:0f:d1:1d:c4:bc:f0:df:c8:2b:e1:6b:fd: 17:96:43:43:24:af:20:37:db:17:03:fe:9a:ea:2c:71:54:5c: b0:53:20:5d:db:71:b4:c2:31:55:cd:35:83:96:81:40:a2:20: 61:6f:2c:4b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUFe5l+CHGhvp8ZWW7kIFAB6khpsAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODgzRjlFRUQ4RDUyMEU3NDZGRTVBNDZCREUyNTk0QzMz NUYyRTgxMjAeFw0yNjA1MjQwODQxNDJaFw0yNjA1MjUxMDM3NDJaMDMxMTAvBgNV BAMTKDg4N0Y4RDI0REJDODU4Rjg3QTY3NEE4RUQ5Mzc5MkI3QTQ2OEMxMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqMzlRYhRio98CqwNML3GvC5vh W22Me4vuIBkOorxkza0t+Lyoj7z0zfd0LKEbtNHNtBUMqvdAt09w1bsAqjMba9D4 vosyUTrmRNyFEHZEuaW/aiiqXBCS53YASFIEW7L1E3DJk4TY4+jhgoAqU9sl6/9x ar98EWpmvP7ioYdLxxkLaiVZAkkQQKPXq2rE4lrEObtf9pICUM+z3bTrUxsDEGhC 9Nx8QJrZ3EcfOFPXKfoMRMNSxh1FmZ2kR4aeqn49BVWuHwv2tN0Dl6vOxVvqi9C5 nenKzFZ5+Ly99RTm17Mrlsa9F5/PhiOWaxybbpn45RqGPEav9h4xJMU/OcKJAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUiH+NJNvIWPh6Z0qO2TeSt6RowR4wHwYDVR0j BBgwFoAUiD+e7Y1SDnRv5aRr3iWUwzXy6BIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMkFCN1kzVGdTQk5EMVlmTUdDSmFMbUc1UmR3NnV6RWh3bW9Ca05LdnJR VFIvMC84ODNGOUVFRDhENTIwRTc0NkZFNUE0NkJERTI1OTRDMzM1RjJFODEyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg4M0Y5RUVEOEQ1MjBFNzQ2 RkU1QTQ2QkRFMjU5NEMzMzVGMkU4MTIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MkFCN1kzVGdTQk5EMVlmTUdDSmFMbUc1UmR3NnV6RWh3bW9Ca05LdnJRVFIvMC84 ODNGOUVFRDhENTIwRTc0NkZFNUE0NkJERTI1OTRDMzM1RjJFODEyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPjAomxNi4PSqtznZmUTNqJHPpwaohKCO1pmG/1JgxPir+FmNTov2lq3xqWhG PF7VxJjVjnDeqk5b3EJIIFE1AVdtVJbpZgLJa43RUvD41e6X/jY9b1VeSea0WY8g bKFCuPEZ/tSOq0Vb/KEJiq0DqVdhKb59mNUsdszlqe7Ogg9HLeK+MzfMBDnnOdNW k36YQTL6FtZKVlWLzqCVGctIJ/dZOfO6N+ARg95nmVDWlWQylMiUBMo1jK9khMED nvamx169upRtB1j1Bv78D9EdxLzw38gr4Wv9F5ZDQySvIDfbFwP+muoscVRcsFMg XdtxtMIxVc01g5aBQKIgYW8sSw== -----END CERTIFICATE-----Generated at Sun May 24 14:16:22 2026 by rpki-client