$ rpki-client -vvf rpki-repo.registro.br/repo/3tJGjvr6ueVqSSbFuvgSHnzNEyR2VkJHwMcu9TA9mamE/1/EC08655821585A0A5B7D6A0E52FC74EF51F90E73.mft File: EC08655821585A0A5B7D6A0E52FC74EF51F90E73.mft (raw, json) Hash identifier: Jgm9IIU2j5e5x6V0FZsTVCK9i7xPjRIgwMtERCJ+rko= Subject key identifier: 7D:D4:93:5D:3E:CE:A8:E6:39:74:66:E0:8B:24:C9:74:4D:03:5B:1E Authority key identifier: EC:08:65:58:21:58:5A:0A:5B:7D:6A:0E:52:FC:74:EF:51:F9:0E:73 Certificate issuer: /CN=EC08655821585A0A5B7D6A0E52FC74EF51F90E73 Certificate serial: 69EF10D6A73BD92265975355636E88FECD048056 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC08655821585A0A5B7D6A0E52FC74EF51F90E73.cer Subject info access: rsync://rpki-repo.registro.br/repo/3tJGjvr6ueVqSSbFuvgSHnzNEyR2VkJHwMcu9TA9mamE/1/EC08655821585A0A5B7D6A0E52FC74EF51F90E73.mft Manifest number: 040A Signing time: Sun 24 May 2026 11:20:00 +0000 Manifest this update: Sun 24 May 2026 11:15:00 +0000 Manifest next update: Mon 25 May 2026 12:53:00 +0000 Files and hashes: 1: 323830343a6438303a3a2f33322d3438203d3e203532363335.roa (hash: yIxx+1uXSKknCqHCviLEWctdsXSzXhbqTqYK8AIE7/k=) 2: 3137372e3132352e32302e302f32322d3234203d3e203532363335.roa (hash: hyiWb13Y+Gxrn9BgVELs6AugDwt9PomXRiGZvHGSJpM=) 3: EC08655821585A0A5B7D6A0E52FC74EF51F90E73.crl (hash: gjxKYQxsu7JWRxYt+f3GS2YA01nE7LYSVZS3ga/rgUk=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3tJGjvr6ueVqSSbFuvgSHnzNEyR2VkJHwMcu9TA9mamE/1/EC08655821585A0A5B7D6A0E52FC74EF51F90E73.crl rsync://rpki-repo.registro.br/repo/3tJGjvr6ueVqSSbFuvgSHnzNEyR2VkJHwMcu9TA9mamE/1/EC08655821585A0A5B7D6A0E52FC74EF51F90E73.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC08655821585A0A5B7D6A0E52FC74EF51F90E73.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 25 May 2026 12:53:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:ef:10:d6:a7:3b:d9:22:65:97:53:55:63:6e:88:fe:cd:04:80:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC08655821585A0A5B7D6A0E52FC74EF51F90E73 Validity Not Before: May 24 11:15:00 2026 GMT Not After : May 25 12:53:00 2026 GMT Subject: CN=7DD4935D3ECEA8E6397466E08B24C9744D035B1E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ad:f3:ee:2f:d5:a5:bf:70:0f:53:51:b2:a8: da:91:2c:82:74:86:69:46:f1:37:e6:13:85:fa:d9: 4a:e7:e3:61:4a:01:ce:d1:74:14:a8:f0:c0:4b:da: 81:23:f5:da:d7:b3:c9:1f:f1:24:88:d6:0c:da:26: 9f:d7:46:45:d1:aa:a3:64:ed:40:81:95:10:ee:54: eb:9e:d8:dc:3a:d5:b5:56:07:52:11:ae:7b:37:44: e0:ed:6c:ea:61:41:75:bf:02:54:0e:0c:7b:b4:95: 7c:9b:93:59:b2:b4:c1:5f:32:94:b6:70:db:b7:94: bc:bf:87:aa:00:a3:d1:6f:48:43:8f:1d:78:c7:9b: fc:b5:b7:a0:06:3c:e4:5c:de:cf:50:1b:98:95:08: 31:32:cc:93:47:bc:1d:61:4b:bf:a1:c3:38:4a:77: fa:a0:93:13:a5:85:98:74:2e:b4:72:f1:ff:62:f5: 53:44:cf:50:8d:d0:24:5b:e7:25:d6:c5:2d:1d:e6: 6f:27:2b:95:8a:5b:89:78:a0:78:9e:05:19:30:73: 7e:2a:5e:5e:a0:42:71:64:5d:46:63:7b:00:42:a8: 29:25:b1:96:13:30:e7:4c:c7:cf:fd:3e:56:11:01: 3b:8c:61:5e:62:0c:11:c1:ef:1b:01:a6:42:fa:c5: 31:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:D4:93:5D:3E:CE:A8:E6:39:74:66:E0:8B:24:C9:74:4D:03:5B:1E X509v3 Authority Key Identifier: keyid:EC:08:65:58:21:58:5A:0A:5B:7D:6A:0E:52:FC:74:EF:51:F9:0E:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3tJGjvr6ueVqSSbFuvgSHnzNEyR2VkJHwMcu9TA9mamE/1/EC08655821585A0A5B7D6A0E52FC74EF51F90E73.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC08655821585A0A5B7D6A0E52FC74EF51F90E73.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3tJGjvr6ueVqSSbFuvgSHnzNEyR2VkJHwMcu9TA9mamE/1/EC08655821585A0A5B7D6A0E52FC74EF51F90E73.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:24:d3:bf:39:09:f7:2a:30:cb:e2:3b:c2:ca:fa:14:b4:a3: 5a:a2:08:15:3d:c3:f0:4a:12:a7:45:4e:45:c7:3e:e5:20:8d: 52:ce:93:80:a2:be:0a:5e:16:6d:38:29:72:9b:21:5a:f8:6e: 4b:7b:14:0b:32:ec:23:45:02:46:e9:ad:2a:ce:b2:73:de:12: 13:7e:03:62:c6:f3:99:67:93:5f:bc:48:58:6d:6f:6b:68:82: e1:f2:1b:c4:bb:8f:4c:4e:0b:93:41:e7:8e:b2:bb:29:9c:cc: b1:dd:95:c5:18:33:86:7c:c4:37:b4:63:d8:1f:76:d0:19:46: fc:24:d6:37:b0:f8:95:91:19:59:c3:8d:ab:11:20:43:9f:ca: 8b:56:b3:3a:eb:d0:47:38:d3:42:1e:73:2c:07:32:88:4f:c6: 6f:b7:f8:f3:72:79:61:ce:ea:26:d7:bb:e4:4d:e4:d0:cb:bb: a7:38:2a:d5:3f:1d:7e:34:38:f1:f2:fa:cb:32:ee:41:b1:a5: f4:11:9a:2a:ae:d6:82:8a:c9:2b:75:48:7c:28:b4:45:e5:47: 4b:e8:37:b9:e3:e2:9c:cd:67:06:eb:01:b2:a0:28:c2:56:46: d9:9d:58:9d:99:0f:74:c1:4c:ac:d7:e1:5f:20:a1:17:9a:b9: e2:44:55:7c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUae8Q1qc72SJll1NVY26I/s0EgFYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUMwODY1NTgyMTU4NUEwQTVCN0Q2QTBFNTJGQzc0RUY1 MUY5MEU3MzAeFw0yNjA1MjQxMTE1MDBaFw0yNjA1MjUxMjUzMDBaMDMxMTAvBgNV BAMTKDdERDQ5MzVEM0VDRUE4RTYzOTc0NjZFMDhCMjRDOTc0NEQwMzVCMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6rfPuL9Wlv3APU1GyqNqRLIJ0 hmlG8TfmE4X62Urn42FKAc7RdBSo8MBL2oEj9drXs8kf8SSI1gzaJp/XRkXRqqNk 7UCBlRDuVOue2Nw61bVWB1IRrns3RODtbOphQXW/AlQODHu0lXybk1mytMFfMpS2 cNu3lLy/h6oAo9FvSEOPHXjHm/y1t6AGPORc3s9QG5iVCDEyzJNHvB1hS7+hwzhK d/qgkxOlhZh0LrRy8f9i9VNEz1CN0CRb5yXWxS0d5m8nK5WKW4l4oHieBRkwc34q Xl6gQnFkXUZjewBCqCklsZYTMOdMx8/9PlYRATuMYV5iDBHB7xsBpkL6xTFpAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUfdSTXT7OqOY5dGbgiyTJdE0DWx4wHwYDVR0j BBgwFoAU7AhlWCFYWgpbfWoOUvx071H5DnMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM3RKR2p2cjZ1ZVZxU1NiRnV2Z1NIbnpORXlSMlZrSkh3TWN1OVRBOW1h bUUvMS9FQzA4NjU1ODIxNTg1QTBBNUI3RDZBMEU1MkZDNzRFRjUxRjkwRTczLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VDMDg2NTU4MjE1ODVBMEE1 QjdENkEwRTUyRkM3NEVGNTFGOTBFNzMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M3RKR2p2cjZ1ZVZxU1NiRnV2Z1NIbnpORXlSMlZrSkh3TWN1OVRBOW1hbUUvMS9F QzA4NjU1ODIxNTg1QTBBNUI3RDZBMEU1MkZDNzRFRjUxRjkwRTczLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGyTTvzkJ9yowy+I7wsr6FLSjWqIIFT3D8EoSp0VORcc+5SCNUs6TgKK+Cl4W bTgpcpshWvhuS3sUCzLsI0UCRumtKs6yc94SE34DYsbzmWeTX7xIWG1va2iC4fIb xLuPTE4Lk0HnjrK7KZzMsd2VxRgzhnzEN7Rj2B920BlG/CTWN7D4lZEZWcONqxEg Q5/Ki1azOuvQRzjTQh5zLAcyiE/Gb7f483J5Yc7qJte75E3k0Mu7pzgq1T8dfjQ4 8fL6yzLuQbGl9BGaKq7WgorJK3VIfCi0ReVHS+g3uePinM1nBusBsqAowlZG2Z1Y nZkPdMFMrNfhXyChF5q54kRVfA== -----END CERTIFICATE-----Generated at Sun May 24 14:45:12 2026 by rpki-client