$ rpki-client -vvf rpki-repo.registro.br/repo/2CMzwVakW37om5XPSrEQcuPGZ1CQFNzw6yvtmoRSGoLw/0/470AE1EB9714E43320F9D361336505142D7D836B.mft File: 470AE1EB9714E43320F9D361336505142D7D836B.mft (raw, json) Hash identifier: 0dF4Ol++nqd1wwGDfRRbnM1NTR/bhSOzcnY4MTUmutU= Subject key identifier: C5:6C:54:64:14:E0:7B:79:14:9F:18:EF:C4:C4:EB:68:7D:FE:FB:8E Authority key identifier: 47:0A:E1:EB:97:14:E4:33:20:F9:D3:61:33:65:05:14:2D:7D:83:6B Certificate issuer: /CN=470AE1EB9714E43320F9D361336505142D7D836B Certificate serial: 27AA2C114ECDB5AA9F0C1BA285D86E246EE77A1C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/470AE1EB9714E43320F9D361336505142D7D836B.cer Subject info access: rsync://rpki-repo.registro.br/repo/2CMzwVakW37om5XPSrEQcuPGZ1CQFNzw6yvtmoRSGoLw/0/470AE1EB9714E43320F9D361336505142D7D836B.mft Manifest number: 01C1 Signing time: Sat 23 May 2026 22:11:20 +0000 Manifest this update: Sat 23 May 2026 22:06:20 +0000 Manifest next update: Mon 25 May 2026 00:09:20 +0000 Files and hashes: 1: 3137372e33392e39382e302f32332d3332203d3e20323731363135.roa (hash: BdLrbEU7II3NX1HsAT1F9Ah5WD1IUR9s5CyZjRaEy4Y=) 2: 3137372e33392e39362e302f32342d3332203d3e20323731363135.roa (hash: 1vyNuWE5jauLyptTokeHnfrLaNFayN+UWnzSx2Hk+eA=) 3: 323830343a376534633a3a2f33322d313238203d3e20323731363135.roa (hash: OdU9UEZt02QpSGkR3fyYMJem0AChe2we0Z/o1VOpO5k=) 4: 470AE1EB9714E43320F9D361336505142D7D836B.crl (hash: Gdny7G4ApzG8P+Rlnci+PZd36YRsrxf1CeU07BuSM3U=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2CMzwVakW37om5XPSrEQcuPGZ1CQFNzw6yvtmoRSGoLw/0/470AE1EB9714E43320F9D361336505142D7D836B.crl rsync://rpki-repo.registro.br/repo/2CMzwVakW37om5XPSrEQcuPGZ1CQFNzw6yvtmoRSGoLw/0/470AE1EB9714E43320F9D361336505142D7D836B.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/470AE1EB9714E43320F9D361336505142D7D836B.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 25 May 2026 00:09:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:aa:2c:11:4e:cd:b5:aa:9f:0c:1b:a2:85:d8:6e:24:6e:e7:7a:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=470AE1EB9714E43320F9D361336505142D7D836B Validity Not Before: May 23 22:06:20 2026 GMT Not After : May 25 00:09:20 2026 GMT Subject: CN=C56C546414E07B79149F18EFC4C4EB687DFEFB8E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:80:d5:f1:44:90:93:79:35:93:a1:0f:8c:56: d7:df:56:d1:cc:e3:57:ef:de:8a:2b:05:68:64:22: 8e:1a:bc:06:19:2e:59:57:e4:ca:67:fd:ac:a6:33: ce:e5:32:f4:e6:0b:54:7e:9c:86:79:7f:27:98:a2: be:54:e6:7d:f6:f0:76:20:70:1e:13:a4:de:5c:64: 9e:ec:7e:6f:32:f5:20:f5:c7:fc:65:0f:28:a9:a3: 61:b4:41:8f:b4:9a:33:84:e0:ec:42:d9:af:8c:a8: d2:62:43:8c:bb:56:6f:f4:8e:ef:5a:c2:a8:0c:87: d4:c6:1b:84:a6:35:37:4d:9e:16:84:ad:23:72:82: 45:16:72:7b:ad:35:d0:5b:cd:c0:ad:95:80:0a:44: 18:d3:63:83:53:42:f7:f9:eb:34:7f:96:be:a4:cb: 2a:be:da:56:5f:9f:9c:0b:6e:16:f8:22:aa:f0:9c: b6:95:b4:16:99:84:83:28:2c:cf:68:40:28:b4:01: 59:12:df:9e:31:ee:77:ca:c9:6b:d5:8d:56:f5:0b: a4:07:fc:67:60:1a:4d:18:bc:6a:a9:45:6f:25:0c: 4f:27:40:66:9c:e1:ee:af:ba:e3:90:1a:01:3f:4d: eb:61:d6:63:1f:8e:4f:c7:dc:19:ca:d3:19:bf:df: 49:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:6C:54:64:14:E0:7B:79:14:9F:18:EF:C4:C4:EB:68:7D:FE:FB:8E X509v3 Authority Key Identifier: keyid:47:0A:E1:EB:97:14:E4:33:20:F9:D3:61:33:65:05:14:2D:7D:83:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2CMzwVakW37om5XPSrEQcuPGZ1CQFNzw6yvtmoRSGoLw/0/470AE1EB9714E43320F9D361336505142D7D836B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/470AE1EB9714E43320F9D361336505142D7D836B.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2CMzwVakW37om5XPSrEQcuPGZ1CQFNzw6yvtmoRSGoLw/0/470AE1EB9714E43320F9D361336505142D7D836B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:73:89:96:ad:99:d2:17:41:87:9c:63:44:27:b8:7e:8b:8c: 79:fd:90:cf:05:71:f0:92:f6:d6:d9:ed:f9:98:0c:3a:59:4a: ca:7b:c3:2c:80:db:56:52:46:4f:92:bf:fc:ae:14:05:24:54: 28:0e:31:1a:de:58:b6:ed:82:f2:93:e1:69:f7:e7:9c:66:5b: 3a:fc:b4:fe:83:e6:39:cd:ba:11:8a:37:e2:28:dd:36:21:a0: ee:5d:5f:4f:0d:16:bc:da:50:3e:ca:c8:d6:2a:3b:08:38:b6: 4c:9c:82:36:7c:ba:88:c5:45:f6:43:d6:dc:9e:ac:d5:df:1d: 8c:9c:e4:7b:51:c9:7a:c2:08:91:c0:0f:39:35:8e:53:eb:92: d4:f3:77:ba:0a:41:84:aa:d8:67:ac:ed:db:e4:a0:91:6a:28: d5:94:a3:78:a2:df:75:a8:3d:3c:f1:96:d6:2c:13:a9:97:01: 1c:91:a6:56:d2:a4:45:42:89:65:06:d5:d8:e3:4f:cd:4c:fe: f3:6b:eb:94:fd:41:4c:70:1b:db:ce:b9:8d:c8:fc:08:ae:31: ba:5a:6f:f6:56:e7:a7:28:5f:10:77:3f:fd:d1:e7:3a:e6:9a: 93:0d:86:47:1a:56:b6:47:55:d7:87:a1:fa:6d:88:79:82:e4: 1e:48:9a:74 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUJ6osEU7NtaqfDBuihdhuJG7nehwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDcwQUUxRUI5NzE0RTQzMzIwRjlEMzYxMzM2NTA1MTQy RDdEODM2QjAeFw0yNjA1MjMyMjA2MjBaFw0yNjA1MjUwMDA5MjBaMDMxMTAvBgNV BAMTKEM1NkM1NDY0MTRFMDdCNzkxNDlGMThFRkM0QzRFQjY4N0RGRUZCOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKgNXxRJCTeTWToQ+MVtffVtHM 41fv3oorBWhkIo4avAYZLllX5Mpn/aymM87lMvTmC1R+nIZ5fyeYor5U5n328HYg cB4TpN5cZJ7sfm8y9SD1x/xlDyipo2G0QY+0mjOE4OxC2a+MqNJiQ4y7Vm/0ju9a wqgMh9TGG4SmNTdNnhaErSNygkUWcnutNdBbzcCtlYAKRBjTY4NTQvf56zR/lr6k yyq+2lZfn5wLbhb4IqrwnLaVtBaZhIMoLM9oQCi0AVkS354x7nfKyWvVjVb1C6QH /GdgGk0YvGqpRW8lDE8nQGac4e6vuuOQGgE/Teth1mMfjk/H3BnK0xm/30lfAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUxWxUZBTge3kUnxjvxMTraH3++44wHwYDVR0j BBgwFoAURwrh65cU5DMg+dNhM2UFFC19g2swDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMkNNendWYWtXMzdvbTVYUFNyRVFjdVBHWjFDUUZOenc2eXZ0bW9SU0dv THcvMC80NzBBRTFFQjk3MTRFNDMzMjBGOUQzNjEzMzY1MDUxNDJEN0Q4MzZCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ3MEFFMUVCOTcxNEU0MzMy MEY5RDM2MTMzNjUwNTE0MkQ3RDgzNkIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MkNNendWYWtXMzdvbTVYUFNyRVFjdVBHWjFDUUZOenc2eXZ0bW9SU0dvTHcvMC80 NzBBRTFFQjk3MTRFNDMzMjBGOUQzNjEzMzY1MDUxNDJEN0Q4MzZCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhnOJlq2Z0hdBh5xjRCe4fouMef2QzwVx8JL21tnt+ZgMOllKynvDLIDbVlJG T5K//K4UBSRUKA4xGt5Ytu2C8pPhaffnnGZbOvy0/oPmOc26EYo34ijdNiGg7l1f Tw0WvNpQPsrI1io7CDi2TJyCNny6iMVF9kPW3J6s1d8djJzke1HJesIIkcAPOTWO U+uS1PN3ugpBhKrYZ6zt2+SgkWoo1ZSjeKLfdag9PPGW1iwTqZcBHJGmVtKkRUKJ ZQbV2ONPzUz+82vrlP1BTHAb2865jcj8CK4xulpv9lbnpyhfEHc//dHnOuaakw2G RxpWtkdV14eh+m2IeYLkHkiadA== -----END CERTIFICATE-----Generated at Sun May 24 13:36:43 2026 by rpki-client