$ rpki-client -vvf rpki-repo.registro.br/repo/3sHkDgcrhfqA53N7opJ2rnPF5cPFuByv223i6QgxrnvZ/1/DCD7A1ADD4DEBD23B1C5FAD5E60BC269D2AD100F.mft File: DCD7A1ADD4DEBD23B1C5FAD5E60BC269D2AD100F.mft (raw, json) Hash identifier: 3zK4XFdhlVUAFyV73z5yNmljQc7WLRdaMzRVUBT4ODI= Subject key identifier: 44:DB:19:A3:9C:12:B5:17:E2:42:3A:2E:33:AE:C5:3A:5F:9A:68:7C Authority key identifier: DC:D7:A1:AD:D4:DE:BD:23:B1:C5:FA:D5:E6:0B:C2:69:D2:AD:10:0F Certificate issuer: /CN=DCD7A1ADD4DEBD23B1C5FAD5E60BC269D2AD100F Certificate serial: 4C8FE01E93B6BD0A053A030BA0C05E1F0C1C2CEC Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCD7A1ADD4DEBD23B1C5FAD5E60BC269D2AD100F.cer Subject info access: rsync://rpki-repo.registro.br/repo/3sHkDgcrhfqA53N7opJ2rnPF5cPFuByv223i6QgxrnvZ/1/DCD7A1ADD4DEBD23B1C5FAD5E60BC269D2AD100F.mft Manifest number: 040C Signing time: Sat 23 May 2026 19:50:00 +0000 Manifest this update: Sat 23 May 2026 19:45:00 +0000 Manifest next update: Sun 24 May 2026 23:19:00 +0000 Files and hashes: 1: 3138312e3233322e3230302e302f32322d3234203d3e20323731343839.roa (hash: 6m4zbH4CvrVkkMH6P+svwQ9mp9NdGtkwxoG3HBYiSzk=) 2: 323830343a376335343a3a2f33322d3438203d3e20323731343839.roa (hash: o3enRyNbzWXBypRyf4X8XM36ZbDvaLOcZyQ7nwnBtuU=) 3: DCD7A1ADD4DEBD23B1C5FAD5E60BC269D2AD100F.crl (hash: bLQuKTG326fGyL4xVOtHR9IIYaONqkiv0FUm4ieLwm0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3sHkDgcrhfqA53N7opJ2rnPF5cPFuByv223i6QgxrnvZ/1/DCD7A1ADD4DEBD23B1C5FAD5E60BC269D2AD100F.crl rsync://rpki-repo.registro.br/repo/3sHkDgcrhfqA53N7opJ2rnPF5cPFuByv223i6QgxrnvZ/1/DCD7A1ADD4DEBD23B1C5FAD5E60BC269D2AD100F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCD7A1ADD4DEBD23B1C5FAD5E60BC269D2AD100F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 May 2026 23:19:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:8f:e0:1e:93:b6:bd:0a:05:3a:03:0b:a0:c0:5e:1f:0c:1c:2c:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DCD7A1ADD4DEBD23B1C5FAD5E60BC269D2AD100F Validity Not Before: May 23 19:45:00 2026 GMT Not After : May 24 23:19:00 2026 GMT Subject: CN=44DB19A39C12B517E2423A2E33AEC53A5F9A687C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:a6:2d:8f:35:e6:e1:9f:54:31:06:09:1c:6c: c5:44:7c:77:b3:77:23:03:db:5d:d4:00:af:80:69: 14:bc:45:e1:b8:90:03:fd:b2:e2:13:58:ed:cc:b7: 4a:27:e6:9f:a7:11:1e:c7:19:c6:a3:46:0f:6a:6b: 0b:9d:c9:19:60:8a:b2:75:c5:c1:49:30:70:02:bd: fa:b8:23:50:11:26:60:8e:53:34:ab:e6:3a:e7:d5: ea:8e:64:58:9b:19:0b:f6:5b:45:22:2f:ca:7b:40: 68:ad:91:3c:32:16:9f:19:33:3b:f6:0e:5c:a5:5f: 47:e1:46:0f:9a:a6:d4:a1:96:83:f1:7f:bb:36:7d: e8:0c:8d:fa:ed:46:c8:68:d3:57:dc:ea:0d:5d:52: b0:6e:26:e9:23:61:22:b1:ff:84:46:32:b8:47:61: 8a:ef:23:98:99:2a:f9:96:bc:01:31:05:a2:cb:72: 4f:e3:49:95:fb:4f:7f:1e:e0:50:cd:b9:87:16:62: 2e:b3:58:84:d4:5c:93:6e:fc:b6:4e:23:1b:a4:a7: f8:6c:fe:93:b2:c7:4c:f0:a7:47:5b:0e:98:62:d3: 14:ed:0e:d9:75:8d:5b:24:16:59:1a:c1:1d:57:17: f5:bd:da:81:63:56:b3:ef:5b:5a:bb:87:7f:04:e9: 2d:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:DB:19:A3:9C:12:B5:17:E2:42:3A:2E:33:AE:C5:3A:5F:9A:68:7C X509v3 Authority Key Identifier: keyid:DC:D7:A1:AD:D4:DE:BD:23:B1:C5:FA:D5:E6:0B:C2:69:D2:AD:10:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3sHkDgcrhfqA53N7opJ2rnPF5cPFuByv223i6QgxrnvZ/1/DCD7A1ADD4DEBD23B1C5FAD5E60BC269D2AD100F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCD7A1ADD4DEBD23B1C5FAD5E60BC269D2AD100F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3sHkDgcrhfqA53N7opJ2rnPF5cPFuByv223i6QgxrnvZ/1/DCD7A1ADD4DEBD23B1C5FAD5E60BC269D2AD100F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:32:d0:bc:15:e7:54:8b:df:72:24:5e:b7:6b:21:f5:ae:56: f2:ee:03:23:e1:b0:01:f1:18:cb:11:3a:bf:f3:27:e4:f5:38: fb:f0:81:08:da:66:fe:f1:6f:84:d5:61:3c:3b:7d:3c:45:0d: f6:90:33:4d:aa:77:cb:71:7d:50:c7:ad:3d:91:16:08:1e:44: 49:a0:eb:bc:08:65:63:1c:d2:5f:0e:0f:ae:75:70:3f:9f:e1: 28:99:27:ea:38:8c:e4:ef:d3:85:c0:d0:16:cf:ce:7b:06:40: f0:70:a8:1e:b7:28:88:df:a4:e5:f8:a2:99:d5:43:91:6c:fe: b7:6d:d7:c8:03:7a:c5:36:44:6b:be:10:64:b4:c9:f5:22:f6: f1:1f:7d:b9:90:12:91:62:b4:8f:df:f2:9f:ab:ec:25:62:b5: d8:51:ce:7f:07:3d:69:a2:51:66:ff:fe:c4:ff:29:13:8b:4e: f6:b8:3c:2e:a4:2e:eb:1d:f2:b0:4e:a2:4f:f8:70:5e:60:15: c1:1c:13:66:da:52:67:a8:06:ce:1d:fb:70:de:79:ac:ff:a4: 3c:b6:46:04:dc:d7:5d:2f:6a:f1:bc:28:5a:d1:10:93:16:1d: 44:f9:aa:fb:db:ad:07:9f:40:0f:9c:3f:00:e6:88:fa:9d:e6: ed:07:92:d6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUTI/gHpO2vQoFOgMLoMBeHwwcLOwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRENEN0ExQURENERFQkQyM0IxQzVGQUQ1RTYwQkMyNjlE MkFEMTAwRjAeFw0yNjA1MjMxOTQ1MDBaFw0yNjA1MjQyMzE5MDBaMDMxMTAvBgNV BAMTKDQ0REIxOUEzOUMxMkI1MTdFMjQyM0EyRTMzQUVDNTNBNUY5QTY4N0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtpi2PNebhn1QxBgkcbMVEfHez dyMD213UAK+AaRS8ReG4kAP9suITWO3Mt0on5p+nER7HGcajRg9qawudyRlgirJ1 xcFJMHACvfq4I1ARJmCOUzSr5jrn1eqOZFibGQv2W0UiL8p7QGitkTwyFp8ZMzv2 DlylX0fhRg+aptShloPxf7s2fegMjfrtRsho01fc6g1dUrBuJukjYSKx/4RGMrhH YYrvI5iZKvmWvAExBaLLck/jSZX7T38e4FDNuYcWYi6zWITUXJNu/LZOIxukp/hs /pOyx0zwp0dbDphi0xTtDtl1jVskFlkawR1XF/W92oFjVrPvW1q7h38E6S1bAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQURNsZo5wStRfiQjouM67FOl+aaHwwHwYDVR0j BBgwFoAU3NehrdTevSOxxfrV5gvCadKtEA8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM3NIa0RnY3JoZnFBNTNON29wSjJyblBGNWNQRnVCeXYyMjNpNlFneHJu dlovMS9EQ0Q3QTFBREQ0REVCRDIzQjFDNUZBRDVFNjBCQzI2OUQyQUQxMDBGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RDRDdBMUFERDRERUJEMjNC MUM1RkFENUU2MEJDMjY5RDJBRDEwMEYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M3NIa0RnY3JoZnFBNTNON29wSjJyblBGNWNQRnVCeXYyMjNpNlFneHJudlovMS9E Q0Q3QTFBREQ0REVCRDIzQjFDNUZBRDVFNjBCQzI2OUQyQUQxMDBGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWzLQvBXnVIvfciRet2sh9a5W8u4DI+GwAfEYyxE6v/Mn5PU4+/CBCNpm/vFv hNVhPDt9PEUN9pAzTap3y3F9UMetPZEWCB5ESaDrvAhlYxzSXw4PrnVwP5/hKJkn 6jiM5O/ThcDQFs/OewZA8HCoHrcoiN+k5fiimdVDkWz+t23XyAN6xTZEa74QZLTJ 9SL28R99uZASkWK0j9/yn6vsJWK12FHOfwc9aaJRZv/+xP8pE4tO9rg8LqQu6x3y sE6iT/hwXmAVwRwTZtpSZ6gGzh37cN55rP+kPLZGBNzXXS9q8bwoWtEQkxYdRPmq +9utB59AD5w/AOaI+p3m7QeS1g== -----END CERTIFICATE-----Generated at Sun May 24 14:44:39 2026 by rpki-client