$ rpki-client -vvf rpki-repo.registro.br/repo/5NWgGTnyPJTvvhBYW48ViTn1WKh8icyStVecxq7yTzVt/0/D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.mft File: D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.mft (raw, json) Hash identifier: lPkBaJXuLaUaKnCAxj4p2MycK43QyXkrZxu1QzdaJ6A= Subject key identifier: 6A:A2:16:76:6B:D9:5C:B6:D4:79:9B:7D:C8:8C:09:7E:0A:48:F0:B6 Authority key identifier: D8:BA:7C:35:A5:C2:42:05:89:B3:0C:33:D9:CF:13:74:50:5F:3D:BC Certificate issuer: /CN=D8BA7C35A5C2420589B30C33D9CF1374505F3DBC Certificate serial: 3FF58A2F5E28A98D4DCD34E39D444A6772829DC0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.cer Subject info access: rsync://rpki-repo.registro.br/repo/5NWgGTnyPJTvvhBYW48ViTn1WKh8icyStVecxq7yTzVt/0/D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.mft Manifest number: 026A Signing time: Sun 24 May 2026 00:18:58 +0000 Manifest this update: Sun 24 May 2026 00:13:58 +0000 Manifest next update: Mon 25 May 2026 00:35:58 +0000 Files and hashes: 1: 3137302e3233332e32302e302f32322d3234203d3e20323638323839.roa (hash: nJHKWcaMdxBbjOC5bhFit9A5idnCknzOdY01So/X9KM=) 2: 34352e3233372e3230302e302f32322d3234203d3e20323638323839.roa (hash: E0joDVbK7d76B68vuV8WXolFT2AAlH6oKz3TDd96iqs=) 3: D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.crl (hash: xf+1gTL9XRUtNNKELE8wApOJkZPKVW5wBG3fxm0G+Us=) 4: 323830343a346565343a3a2f33322d3438203d3e20323638323839.roa (hash: CpJuHDvAI+/wiKeDtSMafBkRDb76lm4oyzY5Bieg4T4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5NWgGTnyPJTvvhBYW48ViTn1WKh8icyStVecxq7yTzVt/0/D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.crl rsync://rpki-repo.registro.br/repo/5NWgGTnyPJTvvhBYW48ViTn1WKh8icyStVecxq7yTzVt/0/D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 25 May 2026 00:35:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:f5:8a:2f:5e:28:a9:8d:4d:cd:34:e3:9d:44:4a:67:72:82:9d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D8BA7C35A5C2420589B30C33D9CF1374505F3DBC Validity Not Before: May 24 00:13:58 2026 GMT Not After : May 25 00:35:58 2026 GMT Subject: CN=6AA216766BD95CB6D4799B7DC88C097E0A48F0B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:fe:79:de:3b:f3:5d:d9:72:92:87:6c:ab:58: cc:e4:ab:99:6b:c7:7e:b7:e8:cb:b6:a6:a6:89:a9: 83:80:12:3f:5f:31:f5:75:5f:0f:ee:b0:8f:b9:a0: f5:d0:b3:df:2a:90:f9:9c:84:db:32:31:9c:f7:a7: 45:dc:7f:1a:db:c0:1f:8d:63:b0:b3:71:be:98:17: cb:db:96:e2:a3:84:89:6d:f7:f5:2f:f3:65:e3:f4: 18:43:7f:9d:0c:ed:bc:89:be:1f:81:51:67:35:00: a3:c3:a0:84:44:14:e4:75:cd:f4:f5:8f:77:cf:28: 96:6d:95:53:37:b7:41:b4:a0:eb:99:75:53:a2:24: 2a:d6:c2:41:97:14:aa:6c:34:17:59:87:c2:77:e6: 61:16:9f:2c:f2:70:da:dc:3e:b4:d1:a2:f9:bd:10: 53:f0:a8:a2:ac:67:e5:f9:f2:06:17:1f:2d:9d:0e: 5b:ea:81:65:06:b6:e7:35:eb:36:c7:5a:07:0f:f0: 0f:57:2a:d3:33:fd:19:4e:71:23:cf:cd:58:c1:c1: 5b:39:3c:04:ce:fa:ca:63:c9:a1:d7:cc:f7:50:93: 8e:ff:ff:5e:59:37:ec:ac:07:44:da:5a:de:9f:8a: 7f:a7:b6:24:49:db:94:ae:46:bd:15:76:f9:ab:a3: 74:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:A2:16:76:6B:D9:5C:B6:D4:79:9B:7D:C8:8C:09:7E:0A:48:F0:B6 X509v3 Authority Key Identifier: keyid:D8:BA:7C:35:A5:C2:42:05:89:B3:0C:33:D9:CF:13:74:50:5F:3D:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5NWgGTnyPJTvvhBYW48ViTn1WKh8icyStVecxq7yTzVt/0/D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5NWgGTnyPJTvvhBYW48ViTn1WKh8icyStVecxq7yTzVt/0/D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:0c:bc:91:74:85:c2:b0:a1:7e:de:9d:88:b9:c3:90:08:75: 5d:14:06:17:31:8a:53:30:d7:36:c0:c7:6c:d5:89:b6:30:1b: 9b:a1:82:2f:e5:52:a6:ce:46:1a:a6:dd:a5:82:c5:0e:8e:81: b3:3e:c5:c2:50:6e:c5:aa:d5:90:a4:5a:61:ff:49:29:af:4c: 42:29:d9:88:50:77:1b:90:ad:1c:90:df:74:89:77:bf:bd:62: a5:22:a8:44:e9:72:ba:84:5a:5b:33:05:40:23:64:40:a2:75: 59:06:eb:69:c9:5c:b1:d0:e9:e7:a5:f5:9b:b8:74:98:aa:41: 99:79:a3:4e:65:fe:f9:10:b4:9f:ed:5d:87:3c:89:70:7a:bb: 24:ad:75:af:70:49:35:a3:c2:9f:80:a1:39:c1:db:78:92:ec: ef:2f:01:2a:91:04:65:89:25:22:e7:1f:4a:51:8f:12:67:3b: b3:ba:ca:1a:0a:6e:01:75:30:b9:ef:31:1c:b3:93:68:47:c9: c9:ea:2f:d5:c7:ae:d5:b1:89:45:71:6c:8c:23:90:9f:f3:13: c9:8e:90:e9:ba:0d:cf:a1:a8:d1:8a:d0:76:db:a3:fb:87:47: bb:49:3c:75:70:98:bc:68:58:81:d7:a7:14:f6:b5:69:f4:b6: e2:fe:34:a1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUP/WKL14oqY1NzTTjnURKZ3KCncAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDhCQTdDMzVBNUMyNDIwNTg5QjMwQzMzRDlDRjEzNzQ1 MDVGM0RCQzAeFw0yNjA1MjQwMDEzNThaFw0yNjA1MjUwMDM1NThaMDMxMTAvBgNV BAMTKDZBQTIxNjc2NkJEOTVDQjZENDc5OUI3REM4OEMwOTdFMEE0OEYwQjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2/nneO/Nd2XKSh2yrWMzkq5lr x3636Mu2pqaJqYOAEj9fMfV1Xw/usI+5oPXQs98qkPmchNsyMZz3p0XcfxrbwB+N Y7Czcb6YF8vbluKjhIlt9/Uv82Xj9BhDf50M7byJvh+BUWc1AKPDoIREFOR1zfT1 j3fPKJZtlVM3t0G0oOuZdVOiJCrWwkGXFKpsNBdZh8J35mEWnyzycNrcPrTRovm9 EFPwqKKsZ+X58gYXHy2dDlvqgWUGtuc16zbHWgcP8A9XKtMz/RlOcSPPzVjBwVs5 PATO+spjyaHXzPdQk47//15ZN+ysB0TaWt6fin+ntiRJ25SuRr0Vdvmro3SjAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUaqIWdmvZXLbUeZt9yIwJfgpI8LYwHwYDVR0j BBgwFoAU2Lp8NaXCQgWJswwz2c8TdFBfPbwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNU5XZ0dUbnlQSlR2dmhCWVc0OFZpVG4xV0toOGljeVN0VmVjeHE3eVR6 VnQvMC9EOEJBN0MzNUE1QzI0MjA1ODlCMzBDMzNEOUNGMTM3NDUwNUYzREJDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q4QkE3QzM1QTVDMjQyMDU4 OUIzMEMzM0Q5Q0YxMzc0NTA1RjNEQkMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NU5XZ0dUbnlQSlR2dmhCWVc0OFZpVG4xV0toOGljeVN0VmVjeHE3eVR6VnQvMC9E OEJBN0MzNUE1QzI0MjA1ODlCMzBDMzNEOUNGMTM3NDUwNUYzREJDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkgy8kXSFwrChft6diLnDkAh1XRQGFzGKUzDXNsDHbNWJtjAbm6GCL+VSps5G GqbdpYLFDo6Bsz7FwlBuxarVkKRaYf9JKa9MQinZiFB3G5CtHJDfdIl3v71ipSKo ROlyuoRaWzMFQCNkQKJ1WQbraclcsdDp56X1m7h0mKpBmXmjTmX++RC0n+1dhzyJ cHq7JK11r3BJNaPCn4ChOcHbeJLs7y8BKpEEZYklIucfSlGPEmc7s7rKGgpuAXUw ue8xHLOTaEfJyeov1ceu1bGJRXFsjCOQn/MTyY6Q6boNz6Go0YrQdtuj+4dHu0k8 dXCYvGhYgdenFPa1afS24v40oQ== -----END CERTIFICATE-----Generated at Sun May 24 14:18:56 2026 by rpki-client