$ rpki-client -vvf rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.mft File: 8BAE9C90EBC5082F802055EFAA6360C661BF85CE.mft (raw, json) Hash identifier: QwcepVO0z27GY3ydlQG+STSWO2VAo5SfXmOz5wYd2HQ= Subject key identifier: 8C:2B:99:A7:8A:B5:4B:45:66:64:3E:01:0E:87:9A:2E:A3:84:EF:C1 Authority key identifier: 8B:AE:9C:90:EB:C5:08:2F:80:20:55:EF:AA:63:60:C6:61:BF:85:CE Certificate issuer: /CN=8BAE9C90EBC5082F802055EFAA6360C661BF85CE Certificate serial: 206A077B2DA9B8F61FA6F0CF6881208CFA935AD3 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.cer Subject info access: rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.mft Manifest number: 03D9 Signing time: Sat 23 May 2026 22:43:06 +0000 Manifest this update: Sat 23 May 2026 22:38:06 +0000 Manifest next update: Mon 25 May 2026 00:57:06 +0000 Files and hashes: 1: 3133382e3138352e3233362e302f32322d3234203d3e20323633393139.roa (hash: KYkcxrUCG5d2OgDxXVUc4Ip1FNkjOzjKHcyZw6KqQbM=) 2: 3137302e302e3230382e302f32322d3234203d3e20323633393139.roa (hash: e4E3vMJmvzuFUBj3Gl3MPDMXsuyK/NWYw9KKWpE7NIU=) 3: 8BAE9C90EBC5082F802055EFAA6360C661BF85CE.crl (hash: 5RNqC89iEYf2OHP/8f+4MKAphbm1dSJB1Q0dgkdiuZQ=) 4: 323830343a323762633a3a2f33322d3438203d3e20323633393139.roa (hash: w/YO1KIf4eo5zvFM926/mpG6uypq9a8w/nPaoqyoSig=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.crl rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 25 May 2026 00:57:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:6a:07:7b:2d:a9:b8:f6:1f:a6:f0:cf:68:81:20:8c:fa:93:5a:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BAE9C90EBC5082F802055EFAA6360C661BF85CE Validity Not Before: May 23 22:38:06 2026 GMT Not After : May 25 00:57:06 2026 GMT Subject: CN=8C2B99A78AB54B4566643E010E879A2EA384EFC1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:40:32:0f:d5:a6:9a:3d:af:b6:86:a4:57:ee: 91:8c:2a:7d:90:9f:10:ec:9d:e1:bc:49:5d:8b:50: 86:4a:8c:0c:11:66:6a:29:b2:77:ae:a4:ab:2a:39: 7f:5e:77:90:80:0a:5d:36:4d:fa:70:0d:91:cf:31: e3:a8:c9:3f:f7:4a:1f:ea:9f:92:32:94:6f:cf:d9: 93:c4:83:52:b2:19:e1:85:06:20:69:6c:1b:9b:61: 76:0d:01:4c:81:7e:5a:3e:a3:b4:bb:21:3b:b4:0c: 91:f7:30:44:18:58:04:21:b5:ab:34:c5:89:1f:d6: f6:cb:1e:9d:d5:b7:76:4b:84:01:72:44:60:6a:1b: f0:56:0c:de:76:50:b5:45:ec:04:5d:d5:96:0b:3c: 40:3b:bc:e0:8c:ff:c4:3e:5a:a1:a8:eb:63:8e:c6: a2:bb:6d:be:0b:c8:63:09:bd:74:4e:09:69:98:a1: d0:c3:01:e5:c3:26:4d:4a:53:96:5e:57:91:f8:40: 50:10:12:87:e7:b0:8e:2d:f3:65:1b:77:a9:7e:49: 54:52:21:10:b4:99:23:6e:a3:77:dc:da:2c:b0:33: 32:09:bd:76:d1:90:69:fd:ad:34:28:0a:06:a8:c9: fe:d5:4c:ee:4a:2e:78:cd:af:b2:42:4e:8a:40:ec: 26:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:2B:99:A7:8A:B5:4B:45:66:64:3E:01:0E:87:9A:2E:A3:84:EF:C1 X509v3 Authority Key Identifier: keyid:8B:AE:9C:90:EB:C5:08:2F:80:20:55:EF:AA:63:60:C6:61:BF:85:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:3f:4d:9b:e3:b0:96:be:e8:ec:8e:1f:40:b4:72:50:26:f5: a3:cc:0f:ab:ed:7f:9c:6c:01:6a:4d:c2:02:89:3b:9f:88:45: 1c:c0:f2:d7:2a:ec:f4:d4:1e:07:2a:b2:c3:39:f8:f7:66:a2: db:0f:c9:f1:f7:b9:da:37:80:42:1d:6f:32:8a:75:36:e7:d0: 65:93:7a:9a:a5:a7:4a:55:4f:53:53:4f:0a:9f:80:1a:a6:77: 9b:9d:2a:6d:df:4a:9f:88:8f:ce:63:be:7e:5b:6b:10:7f:0b: 08:81:e5:c7:aa:2c:c3:a9:c3:ab:93:3c:ec:1f:29:78:65:eb: b7:c5:55:07:39:bb:2d:2f:05:37:1f:26:73:35:99:65:be:17: 44:f9:86:d1:12:f4:97:85:ca:39:1e:61:69:69:f0:dd:ec:a9: 0e:55:4d:2b:2e:fc:06:56:4e:01:9a:34:bf:c0:9d:34:12:56: 64:d8:ec:9c:89:41:3c:a0:25:2e:6b:08:1c:5b:f6:72:5b:b1: a9:82:83:b5:47:1b:79:db:7a:fa:61:5b:6e:ad:b8:f4:b2:a0: 1f:b1:27:14:4f:7a:54:09:af:93:c9:bd:d1:ca:44:7d:a6:de: b6:31:3f:0d:cb:05:c7:e4:f0:a5:9f:e6:02:61:32:e7:34:dd: 4d:95:f1:51 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUIGoHey2puPYfpvDPaIEgjPqTWtMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJBRTlDOTBFQkM1MDgyRjgwMjA1NUVGQUE2MzYwQzY2 MUJGODVDRTAeFw0yNjA1MjMyMjM4MDZaFw0yNjA1MjUwMDU3MDZaMDMxMTAvBgNV BAMTKDhDMkI5OUE3OEFCNTRCNDU2NjY0M0UwMTBFODc5QTJFQTM4NEVGQzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGQDIP1aaaPa+2hqRX7pGMKn2Q nxDsneG8SV2LUIZKjAwRZmopsneupKsqOX9ed5CACl02TfpwDZHPMeOoyT/3Sh/q n5IylG/P2ZPEg1KyGeGFBiBpbBubYXYNAUyBflo+o7S7ITu0DJH3MEQYWAQhtas0 xYkf1vbLHp3Vt3ZLhAFyRGBqG/BWDN52ULVF7ARd1ZYLPEA7vOCM/8Q+WqGo62OO xqK7bb4LyGMJvXROCWmYodDDAeXDJk1KU5ZeV5H4QFAQEofnsI4t82Ubd6l+SVRS IRC0mSNuo3fc2iywMzIJvXbRkGn9rTQoCgaoyf7VTO5KLnjNr7JCTopA7CanAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUjCuZp4q1S0VmZD4BDoeaLqOE78EwHwYDVR0j BBgwFoAUi66ckOvFCC+AIFXvqmNgxmG/hc4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNGNHMm9iRVVZZk1LaFdBWDQ1N25GZ3pvVFhZU3RpTEs0RGFFMzRWRFNL ODUvMS84QkFFOUM5MEVCQzUwODJGODAyMDU1RUZBQTYzNjBDNjYxQkY4NUNFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhCQUU5QzkwRUJDNTA4MkY4 MDIwNTVFRkFBNjM2MEM2NjFCRjg1Q0UuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NGNHMm9iRVVZZk1LaFdBWDQ1N25GZ3pvVFhZU3RpTEs0RGFFMzRWRFNLODUvMS84 QkFFOUM5MEVCQzUwODJGODAyMDU1RUZBQTYzNjBDNjYxQkY4NUNFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEARj9Nm+Owlr7o7I4fQLRyUCb1o8wPq+1/nGwBak3CAok7n4hFHMDy1yrs9NQe Byqywzn492ai2w/J8fe52jeAQh1vMop1NufQZZN6mqWnSlVPU1NPCp+AGqZ3m50q bd9Kn4iPzmO+fltrEH8LCIHlx6osw6nDq5M87B8peGXrt8VVBzm7LS8FNx8mczWZ Zb4XRPmG0RL0l4XKOR5haWnw3eypDlVNKy78BlZOAZo0v8CdNBJWZNjsnIlBPKAl LmsIHFv2cluxqYKDtUcbedt6+mFbbq249LKgH7EnFE96VAmvk8m90cpEfabetjE/ DcsFx+TwpZ/mAmEy5zTdTZXxUQ== -----END CERTIFICATE-----Generated at Sun May 24 14:11:00 2026 by rpki-client