$ rpki-client -vvf rpki-repo.registro.br/repo/4dBKbGiNo7F2Z7bGBQMse3rrJNXgjNV5KVR2DhGWSKa5/0/BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.mft File: BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.mft (raw, json) Hash identifier: CQqodoi9YxyKAEbCRk772SLAcxmBCO9HnM5FblgVcVU= Subject key identifier: 9A:C3:9A:DD:13:B2:F9:81:E4:E2:EA:B9:B2:41:53:27:7A:69:6A:DA Authority key identifier: BA:57:D2:39:D2:DC:0A:C2:57:37:3A:7B:BA:D5:18:86:AA:5D:4C:46 Certificate issuer: /CN=BA57D239D2DC0AC257373A7BBAD51886AA5D4C46 Certificate serial: 0507B1D147A5DB2F6EF7E833F71AE36138E373AE Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.cer Subject info access: rsync://rpki-repo.registro.br/repo/4dBKbGiNo7F2Z7bGBQMse3rrJNXgjNV5KVR2DhGWSKa5/0/BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.mft Manifest number: 01A4 Signing time: Sun 24 May 2026 12:07:20 +0000 Manifest this update: Sun 24 May 2026 12:02:20 +0000 Manifest next update: Mon 25 May 2026 12:58:20 +0000 Files and hashes: 1: 323830343a393339303a3a2f33322d3438203d3e203631363233.roa (hash: LG7owg69fyxfKV8rigMC7sBkP5B19iTBtW4UQCyl/2Q=) 2: 3133382e3138362e31362e302f32322d3234203d3e203631363233.roa (hash: JWwJnqFVLfb7s0xn8ymrfclHa6+SS+4LbQrsuCJSidU=) 3: BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.crl (hash: l4IUxQto7g/JH1g24HgPfA9WzRvvXmntxC3NkFTcz9Q=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4dBKbGiNo7F2Z7bGBQMse3rrJNXgjNV5KVR2DhGWSKa5/0/BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.crl rsync://rpki-repo.registro.br/repo/4dBKbGiNo7F2Z7bGBQMse3rrJNXgjNV5KVR2DhGWSKa5/0/BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 25 May 2026 12:51:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:07:b1:d1:47:a5:db:2f:6e:f7:e8:33:f7:1a:e3:61:38:e3:73:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA57D239D2DC0AC257373A7BBAD51886AA5D4C46 Validity Not Before: May 24 12:02:20 2026 GMT Not After : May 25 12:58:20 2026 GMT Subject: CN=9AC39ADD13B2F981E4E2EAB9B24153277A696ADA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b4:c3:b5:5b:77:80:e2:27:8c:b4:40:80:23: ab:0e:b6:95:db:82:53:d8:b8:55:4f:1c:53:e9:57: 7a:d3:c1:7a:44:ed:c8:d9:3b:9f:04:ce:f3:a3:5e: 88:8d:7a:44:f6:af:59:e8:1a:8b:80:74:6b:f3:a2: 47:62:ae:0f:35:a4:96:84:a8:a0:e4:b9:64:19:1f: 19:6d:0e:a2:f7:3a:25:45:29:12:7b:cc:05:53:4a: 7a:2a:e0:32:ab:a5:03:04:14:28:53:95:86:85:ca: af:7d:3e:62:62:5a:a5:aa:bd:ad:06:71:4a:78:a9: 77:59:43:62:49:3a:63:0e:8e:c9:d5:3c:b8:77:61: 65:b6:0d:f1:ca:95:51:da:11:a1:57:57:42:1e:d7: 73:87:d8:c9:16:61:5f:fe:20:6a:2e:1c:e1:9c:77: 13:aa:50:7f:78:a6:fe:9e:65:8e:f8:71:73:4b:60: 83:19:4c:77:55:98:df:16:48:cf:5d:03:d8:0a:f3: 5c:b8:72:d6:20:e8:46:27:18:b8:d9:48:09:d5:10: 93:5d:f7:92:a6:07:bb:a8:fd:df:0e:ee:b8:3b:2b: af:45:68:61:8b:35:a8:9d:06:e4:8a:f8:df:cb:0d: 6b:c0:47:da:29:9d:44:c3:38:f6:ad:02:d3:8b:3a: 3f:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:C3:9A:DD:13:B2:F9:81:E4:E2:EA:B9:B2:41:53:27:7A:69:6A:DA X509v3 Authority Key Identifier: keyid:BA:57:D2:39:D2:DC:0A:C2:57:37:3A:7B:BA:D5:18:86:AA:5D:4C:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4dBKbGiNo7F2Z7bGBQMse3rrJNXgjNV5KVR2DhGWSKa5/0/BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dBKbGiNo7F2Z7bGBQMse3rrJNXgjNV5KVR2DhGWSKa5/0/BA57D239D2DC0AC257373A7BBAD51886AA5D4C46.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption dc:47:c2:48:f2:94:bf:7d:01:ed:bd:9b:cc:ed:c4:2a:86:5e: 9b:c3:a1:9b:b8:69:1f:58:83:f9:11:6b:4c:48:da:9b:91:ce: 50:a6:ba:8f:89:df:ca:09:79:14:f0:ee:f4:1e:0b:d8:f2:2e: 5d:a8:82:35:92:04:22:a7:5f:a2:4f:22:d3:73:05:a5:37:2d: b1:ee:c2:d0:86:3c:fd:65:96:6d:38:de:94:d0:b5:89:77:1e: a1:7c:68:db:94:a6:0f:d2:0b:f5:99:41:0e:83:3e:70:cf:bf: e2:67:91:be:82:3f:c4:0e:3a:a6:5f:a4:57:17:d0:52:d8:f3: 30:80:dd:66:77:f1:d1:ca:0c:03:b5:1e:d2:ef:08:92:a1:a0: 7a:57:be:55:9b:8e:00:26:4f:3a:68:a6:e1:a8:54:06:23:85: 58:a6:81:8b:46:1b:9b:1a:4b:95:0a:cb:8a:ed:54:b2:75:73: ea:bd:0a:15:64:1a:57:42:9b:47:bc:f4:3b:3e:dd:7f:fb:15: e5:05:da:76:ff:04:8f:49:00:89:da:6b:c4:5f:b9:3b:3e:6e: 03:39:39:f9:ce:46:7b:67:87:57:63:d1:d4:a8:9d:81:bd:5d: 96:4a:d4:75:b9:f8:b1:12:04:08:ca:31:fd:19:40:0f:9f:47: c3:9d:ac:fd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUBQex0Uel2y9u9+gz9xrjYTjjc64wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE1N0QyMzlEMkRDMEFDMjU3MzczQTdCQkFENTE4ODZB QTVENEM0NjAeFw0yNjA1MjQxMjAyMjBaFw0yNjA1MjUxMjU4MjBaMDMxMTAvBgNV BAMTKDlBQzM5QUREMTNCMkY5ODFFNEUyRUFCOUIyNDE1MzI3N0E2OTZBREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCtMO1W3eA4ieMtECAI6sOtpXb glPYuFVPHFPpV3rTwXpE7cjZO58EzvOjXoiNekT2r1noGouAdGvzokdirg81pJaE qKDkuWQZHxltDqL3OiVFKRJ7zAVTSnoq4DKrpQMEFChTlYaFyq99PmJiWqWqva0G cUp4qXdZQ2JJOmMOjsnVPLh3YWW2DfHKlVHaEaFXV0Ie13OH2MkWYV/+IGouHOGc dxOqUH94pv6eZY74cXNLYIMZTHdVmN8WSM9dA9gK81y4ctYg6EYnGLjZSAnVEJNd 95KmB7uo/d8O7rg7K69FaGGLNaidBuSK+N/LDWvAR9opnUTDOPatAtOLOj/5AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUmsOa3ROy+YHk4uq5skFTJ3ppatowHwYDVR0j BBgwFoAUulfSOdLcCsJXNzp7utUYhqpdTEYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNGRCS2JHaU5vN0YyWjdiR0JRTXNlM3JySk5YZ2pOVjVLVlIyRGhHV1NL YTUvMC9CQTU3RDIzOUQyREMwQUMyNTczNzNBN0JCQUQ1MTg4NkFBNUQ0QzQ2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JBNTdEMjM5RDJEQzBBQzI1 NzM3M0E3QkJBRDUxODg2QUE1RDRDNDYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NGRCS2JHaU5vN0YyWjdiR0JRTXNlM3JySk5YZ2pOVjVLVlIyRGhHV1NLYTUvMC9C QTU3RDIzOUQyREMwQUMyNTczNzNBN0JCQUQ1MTg4NkFBNUQ0QzQ2Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEA3EfCSPKUv30B7b2bzO3EKoZem8Ohm7hpH1iD+RFrTEjam5HOUKa6j4nfygl5 FPDu9B4L2PIuXaiCNZIEIqdfok8i03MFpTctse7C0IY8/WWWbTjelNC1iXceoXxo 25SmD9IL9ZlBDoM+cM+/4meRvoI/xA46pl+kVxfQUtjzMIDdZnfx0coMA7Ue0u8I kqGgele+VZuOACZPOmim4ahUBiOFWKaBi0YbmxpLlQrLiu1UsnVz6r0KFWQaV0Kb R7z0Oz7df/sV5QXadv8Ej0kAidprxF+5Oz5uAzk5+c5Ge2eHV2PR1Kidgb1dlkrU dbn4sRIECMox/RlAD59Hw52s/Q== -----END CERTIFICATE-----Generated at Sun May 24 13:33:30 2026 by rpki-client