$ rpki-client -vvf rpki-repo.registro.br/repo/4pvH4MHZJZas4zHEgK2hMoy5gE5iQjdPTDp4EF96vecg/0/AA72ED85A93B5AABE6C7DF844AD99D16A90E14C8.mft File: AA72ED85A93B5AABE6C7DF844AD99D16A90E14C8.mft (raw, json) Hash identifier: PHSpNtFO5qVe+1sZxXIEFoQw7Y2JtLA6EK0RhKvdtsk= Subject key identifier: C7:27:BE:8A:79:AA:98:31:C6:BE:31:56:A5:BA:AA:C2:44:EF:38:74 Authority key identifier: AA:72:ED:85:A9:3B:5A:AB:E6:C7:DF:84:4A:D9:9D:16:A9:0E:14:C8 Certificate issuer: /CN=AA72ED85A93B5AABE6C7DF844AD99D16A90E14C8 Certificate serial: 1E57C49A6F63AF99B8AFB8C44A9FCB3ED4B5B333 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA72ED85A93B5AABE6C7DF844AD99D16A90E14C8.cer Subject info access: rsync://rpki-repo.registro.br/repo/4pvH4MHZJZas4zHEgK2hMoy5gE5iQjdPTDp4EF96vecg/0/AA72ED85A93B5AABE6C7DF844AD99D16A90E14C8.mft Manifest number: 015A Signing time: Sun 24 May 2026 08:30:01 +0000 Manifest this update: Sun 24 May 2026 08:25:01 +0000 Manifest next update: Mon 25 May 2026 11:17:01 +0000 Files and hashes: 1: AA72ED85A93B5AABE6C7DF844AD99D16A90E14C8.crl (hash: itA9AfMxMb3/WkQ19FW09iPUieNftNy7M5oyPUu1SMQ=) 2: 323830343a393539303a3a2f33322d3332203d3e20323632323837.roa (hash: cJEyc9GyTP/W9tTA5SfKcOBqQXJyoAW8IVefVuwCDF0=) 3: 323830343a393539303a3a2f33322d3332203d3e20323734353330.roa (hash: ud8H+LPpJrRZjxw5rTInN+2D3gurLBaqifOfHqRbUko=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4pvH4MHZJZas4zHEgK2hMoy5gE5iQjdPTDp4EF96vecg/0/AA72ED85A93B5AABE6C7DF844AD99D16A90E14C8.crl rsync://rpki-repo.registro.br/repo/4pvH4MHZJZas4zHEgK2hMoy5gE5iQjdPTDp4EF96vecg/0/AA72ED85A93B5AABE6C7DF844AD99D16A90E14C8.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA72ED85A93B5AABE6C7DF844AD99D16A90E14C8.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 25 May 2026 11:17:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:57:c4:9a:6f:63:af:99:b8:af:b8:c4:4a:9f:cb:3e:d4:b5:b3:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA72ED85A93B5AABE6C7DF844AD99D16A90E14C8 Validity Not Before: May 24 08:25:01 2026 GMT Not After : May 25 11:17:01 2026 GMT Subject: CN=C727BE8A79AA9831C6BE3156A5BAAAC244EF3874 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:32:ff:ad:99:0f:69:76:d4:13:29:ba:85:a7: b4:5d:fa:bb:85:d7:20:20:1d:52:9c:cc:63:51:cc: 35:7b:1b:fa:28:5c:3e:65:0f:16:5e:c2:de:9f:9d: 1c:77:63:84:eb:8a:66:ff:b7:ce:ed:45:cf:21:50: b7:a5:1e:ab:93:05:81:fc:b8:17:76:2a:3f:84:dd: 19:5e:3f:57:c6:4b:54:b5:2e:36:5a:bb:01:09:56: a2:32:cb:26:e6:a8:cc:c7:5d:94:7c:dd:3d:0f:6a: c4:81:d3:ca:9c:6b:49:ed:d1:ef:9b:c8:e4:c3:6b: b2:e3:2b:ec:60:5c:3d:c0:be:80:fe:9e:b2:61:11: 4e:ac:18:a8:53:ba:35:84:53:cd:93:67:50:4b:da: 2c:85:ff:50:d4:97:81:e3:ed:b0:9f:31:79:8d:e7: 46:65:7a:75:8e:ea:c8:88:eb:ff:f8:d5:f8:d0:8a: b9:95:0b:a3:29:34:d6:24:8a:c6:7c:15:21:de:10: e3:3f:e3:df:c7:99:ac:aa:1a:ed:4e:a3:ba:a8:92: 6d:44:7c:f7:fb:24:5a:72:01:10:4a:f8:ab:45:0e: 04:25:c1:fa:d0:b9:8d:6e:1d:67:fc:01:10:4b:30: e1:4e:c9:3a:41:08:c0:25:dd:94:b5:07:f4:27:35: 75:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:27:BE:8A:79:AA:98:31:C6:BE:31:56:A5:BA:AA:C2:44:EF:38:74 X509v3 Authority Key Identifier: keyid:AA:72:ED:85:A9:3B:5A:AB:E6:C7:DF:84:4A:D9:9D:16:A9:0E:14:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4pvH4MHZJZas4zHEgK2hMoy5gE5iQjdPTDp4EF96vecg/0/AA72ED85A93B5AABE6C7DF844AD99D16A90E14C8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA72ED85A93B5AABE6C7DF844AD99D16A90E14C8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4pvH4MHZJZas4zHEgK2hMoy5gE5iQjdPTDp4EF96vecg/0/AA72ED85A93B5AABE6C7DF844AD99D16A90E14C8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:e5:d2:51:c4:86:3b:9e:0d:1e:d7:76:3e:04:61:4a:52:23: 78:3e:9b:03:e3:69:fc:a0:8f:3f:31:28:9d:16:b5:5d:86:c0: b6:5b:06:6b:ca:3e:c8:cb:9c:a5:13:75:b0:cc:0a:bf:d2:53: 68:f2:19:21:1f:ff:fd:00:6d:72:4c:de:18:6a:60:74:96:cb: 07:9d:a0:e7:ca:5a:c6:1d:68:97:09:85:38:e4:70:e1:5b:6e: cd:e7:08:c8:01:c7:29:1f:64:d6:29:83:d3:32:4b:40:d8:aa: 42:51:2f:72:0c:c5:4d:3f:fd:43:8b:5b:e3:76:94:c1:34:2a: f2:99:2d:83:06:06:d6:84:c7:3f:46:2b:25:5b:fc:7d:e4:b4: 7a:7f:31:8c:e1:25:54:a1:17:8c:55:3a:60:62:33:f7:df:fd: 1b:07:4f:9d:ea:42:2b:3b:5f:a4:fe:ee:ab:9b:1d:b7:3b:54: 89:f2:51:ea:b1:56:4f:9a:80:f5:d9:06:6b:d6:76:61:75:06: 08:4b:2b:c1:0e:77:b8:07:99:ae:d7:49:88:44:4c:2d:0b:9b: 72:17:fb:f7:45:68:a2:b9:1c:31:b3:d6:49:23:6f:15:5a:fb: af:d1:bf:14:5f:a3:fb:e0:49:14:2b:a8:58:d9:be:77:bd:9e: e9:b9:20:87 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUHlfEmm9jr5m4r7jESp/LPtS1szMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUE3MkVEODVBOTNCNUFBQkU2QzdERjg0NEFEOTlEMTZB OTBFMTRDODAeFw0yNjA1MjQwODI1MDFaFw0yNjA1MjUxMTE3MDFaMDMxMTAvBgNV BAMTKEM3MjdCRThBNzlBQTk4MzFDNkJFMzE1NkE1QkFBQUMyNDRFRjM4NzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXMv+tmQ9pdtQTKbqFp7Rd+ruF 1yAgHVKczGNRzDV7G/ooXD5lDxZewt6fnRx3Y4Trimb/t87tRc8hULelHquTBYH8 uBd2Kj+E3RleP1fGS1S1LjZauwEJVqIyyybmqMzHXZR83T0PasSB08qca0nt0e+b yOTDa7LjK+xgXD3AvoD+nrJhEU6sGKhTujWEU82TZ1BL2iyF/1DUl4Hj7bCfMXmN 50ZlenWO6siI6//41fjQirmVC6MpNNYkisZ8FSHeEOM/49/HmayqGu1Oo7qokm1E fPf7JFpyARBK+KtFDgQlwfrQuY1uHWf8ARBLMOFOyTpBCMAl3ZS1B/QnNXXZAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUxye+inmqmDHGvjFWpbqqwkTvOHQwHwYDVR0j BBgwFoAUqnLthak7Wqvmx9+EStmdFqkOFMgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNHB2SDRNSFpKWmFzNHpIRWdLMmhNb3k1Z0U1aVFqZFBURHA0RUY5NnZl Y2cvMC9BQTcyRUQ4NUE5M0I1QUFCRTZDN0RGODQ0QUQ5OUQxNkE5MEUxNEM4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FBNzJFRDg1QTkzQjVBQUJF NkM3REY4NDRBRDk5RDE2QTkwRTE0QzguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NHB2SDRNSFpKWmFzNHpIRWdLMmhNb3k1Z0U1aVFqZFBURHA0RUY5NnZlY2cvMC9B QTcyRUQ4NUE5M0I1QUFCRTZDN0RGODQ0QUQ5OUQxNkE5MEUxNEM4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEApeXSUcSGO54NHtd2PgRhSlIjeD6bA+Np/KCPPzEonRa1XYbAtlsGa8o+yMuc pRN1sMwKv9JTaPIZIR///QBtckzeGGpgdJbLB52g58paxh1olwmFOORw4VtuzecI yAHHKR9k1imD0zJLQNiqQlEvcgzFTT/9Q4tb43aUwTQq8pktgwYG1oTHP0YrJVv8 feS0en8xjOElVKEXjFU6YGIz99/9GwdPnepCKztfpP7uq5sdtztUifJR6rFWT5qA 9dkGa9Z2YXUGCEsrwQ53uAeZrtdJiERMLQubchf790VoorkcMbPWSSNvFVr7r9G/ FF+j++BJFCuoWNm+d72e6bkghw== -----END CERTIFICATE-----Generated at Sun May 24 16:19:48 2026 by rpki-client