$ rpki-client -vvf rpki-repo.registro.br/repo/5axz5h3iCqtCsN2Eu8sjLGDKDwX9hRhQ2stM2MN2EuQA/0/BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4.mft File: BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4.mft (raw, json) Hash identifier: mTYtQ7KgvdF0L3VQnBo1a7jewdRKaCo1Er/uxBjV/YU= Subject key identifier: 77:B9:41:72:8C:4C:FC:C1:69:7E:51:92:20:3F:1D:FD:F9:B7:D0:54 Authority key identifier: BD:EA:3E:14:C3:2F:29:AC:82:ED:A1:5B:2D:4E:D1:AD:25:04:FF:A4 Certificate issuer: /CN=BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4 Certificate serial: 7ED40146F0F4E4B74431DD03EDA2F27A35B271CF Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4.cer Subject info access: rsync://rpki-repo.registro.br/repo/5axz5h3iCqtCsN2Eu8sjLGDKDwX9hRhQ2stM2MN2EuQA/0/BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4.mft Manifest number: 0421 Signing time: Fri 26 Jun 2026 20:14:06 +0000 Manifest this update: Fri 26 Jun 2026 20:09:06 +0000 Manifest next update: Sat 27 Jun 2026 22:36:06 +0000 Files and hashes: 1: 323830343a353738303a3a2f33322d3438203d3e20323632373334.roa (hash: yNFZBHyDGRYV2QlyPSN2OtoLmiWL4FZRPAEMsVOZrB0=) 2: 3138362e3139352e302e302f32302d3234203d3e20323632373334.roa (hash: 25TH8Nx19yip9EasUzX983wihZlY2EEgXhGIBNzEfyQ=) 3: BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4.crl (hash: 5bew3HXQSGQiTNKcK7IIMNEoa7j1GKZsHGEjnqlDAqo=) 4: 3138392e38342e3130362e302f32332d3234203d3e20323632373334.roa (hash: ayttGUuymegq6vSf98rBwELpDST1MxoqdryA36dSPQw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5axz5h3iCqtCsN2Eu8sjLGDKDwX9hRhQ2stM2MN2EuQA/0/BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4.crl rsync://rpki-repo.registro.br/repo/5axz5h3iCqtCsN2Eu8sjLGDKDwX9hRhQ2stM2MN2EuQA/0/BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 27 Jun 2026 22:36:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:d4:01:46:f0:f4:e4:b7:44:31:dd:03:ed:a2:f2:7a:35:b2:71:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4 Validity Not Before: Jun 26 20:09:06 2026 GMT Not After : Jun 27 22:36:06 2026 GMT Subject: CN=77B941728C4CFCC1697E5192203F1DFDF9B7D054 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:95:be:d1:74:76:c3:57:fe:2d:46:97:c4:1a: d6:07:e1:4c:ec:af:55:3f:07:ac:62:f6:57:80:71: 07:3d:b9:0c:ec:fe:b7:ee:9d:c3:8e:7d:aa:1b:4f: a6:6f:0c:cf:37:31:6b:93:01:41:0f:e4:9b:40:95: 36:d7:a8:ee:d1:14:39:37:1b:b6:e0:dc:93:42:cf: 08:3e:41:c3:8e:77:a7:e9:17:aa:e0:8c:63:08:4b: 21:cd:d2:a9:3c:f2:ba:f2:73:4c:f2:09:67:6b:d2: 25:22:ec:07:91:5a:2b:c1:cb:4b:6e:cd:b5:3d:4b: ca:92:20:fe:55:5f:03:57:b6:01:5b:66:d9:b1:d6: 64:7a:04:4d:77:44:0e:89:d3:3e:6f:a3:2d:51:7c: 51:01:48:e7:fb:46:bd:ef:aa:81:17:2a:97:49:a5: b5:1b:9a:97:07:db:60:1e:bb:a5:8c:c0:50:a5:89: 66:1b:a1:03:c8:68:46:b7:4e:0d:2f:d2:47:45:26: 4b:82:aa:6c:22:36:a6:81:d3:b7:75:f1:d0:83:81: 74:ad:73:8e:43:1b:2d:19:5c:e3:ff:34:46:63:0f: 58:b7:61:4c:59:fe:82:e4:f4:5d:f3:8c:91:ab:0e: e1:a4:88:49:db:80:df:29:8b:90:0a:a6:fc:b0:5c: 5f:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:B9:41:72:8C:4C:FC:C1:69:7E:51:92:20:3F:1D:FD:F9:B7:D0:54 X509v3 Authority Key Identifier: keyid:BD:EA:3E:14:C3:2F:29:AC:82:ED:A1:5B:2D:4E:D1:AD:25:04:FF:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5axz5h3iCqtCsN2Eu8sjLGDKDwX9hRhQ2stM2MN2EuQA/0/BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5axz5h3iCqtCsN2Eu8sjLGDKDwX9hRhQ2stM2MN2EuQA/0/BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:b5:d3:2c:db:90:3a:a1:f6:b2:e6:5b:78:ea:d4:a4:32:e9: 33:41:ae:62:33:62:33:57:92:8e:da:a5:ff:51:fe:b7:78:13: f2:52:59:ca:04:4a:7e:f0:c2:0d:f0:28:12:a1:0e:e8:fc:72: 5b:04:7e:40:2a:ef:f7:8f:1c:9e:da:0e:27:66:47:c2:3b:b9: f3:71:5c:d0:9e:26:09:6f:d4:7d:2f:88:40:4d:0e:32:59:f9: 42:e0:7e:99:df:96:04:99:4f:45:9d:22:99:04:f0:81:31:9a: 40:3b:ab:2d:a0:52:f8:90:68:12:a5:85:18:64:b6:cc:5f:01: 01:4a:45:50:18:e4:13:4b:b5:22:fd:41:68:c1:7d:1a:c2:4d: 5c:bb:85:4d:38:f6:f9:0a:c5:c0:af:78:95:64:d3:56:de:bc: 05:dc:e4:df:54:41:ac:77:41:d0:21:bb:b3:d9:4e:38:39:fd: 13:ef:a1:b5:ef:1b:1f:c1:ae:d7:97:00:f4:ff:8f:57:1f:4a: c9:e7:8f:56:63:00:ed:8c:a0:f4:fd:27:57:c3:63:9a:a0:b9: 8b:63:9c:a3:6d:71:40:3d:9f:25:e3:8f:38:7b:d6:8b:d4:1b: 25:72:52:a0:63:d3:79:5b:31:c9:ee:91:e7:e1:b2:28:0b:db: af:9d:6a:16 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUftQBRvD05LdEMd0D7aLyejWycc8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkRFQTNFMTRDMzJGMjlBQzgyRURBMTVCMkQ0RUQxQUQy NTA0RkZBNDAeFw0yNjA2MjYyMDA5MDZaFw0yNjA2MjcyMjM2MDZaMDMxMTAvBgNV BAMTKDc3Qjk0MTcyOEM0Q0ZDQzE2OTdFNTE5MjIwM0YxREZERjlCN0QwNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDllb7RdHbDV/4tRpfEGtYH4Uzs r1U/B6xi9leAcQc9uQzs/rfuncOOfaobT6ZvDM83MWuTAUEP5JtAlTbXqO7RFDk3 G7bg3JNCzwg+QcOOd6fpF6rgjGMISyHN0qk88rryc0zyCWdr0iUi7AeRWivBy0tu zbU9S8qSIP5VXwNXtgFbZtmx1mR6BE13RA6J0z5voy1RfFEBSOf7Rr3vqoEXKpdJ pbUbmpcH22Aeu6WMwFCliWYboQPIaEa3Tg0v0kdFJkuCqmwiNqaB07d18dCDgXSt c45DGy0ZXOP/NEZjD1i3YUxZ/oLk9F3zjJGrDuGkiEnbgN8pi5AKpvywXF/FAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUd7lBcoxM/MFpflGSID8d/fm30FQwHwYDVR0j BBgwFoAUveo+FMMvKayC7aFbLU7RrSUE/6QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNWF4ejVoM2lDcXRDc04yRXU4c2pMR0RLRHdYOWhSaFEyc3RNMk1OMkV1 UUEvMC9CREVBM0UxNEMzMkYyOUFDODJFREExNUIyRDRFRDFBRDI1MDRGRkE0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JERUEzRTE0QzMyRjI5QUM4 MkVEQTE1QjJENEVEMUFEMjUwNEZGQTQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NWF4ejVoM2lDcXRDc04yRXU4c2pMR0RLRHdYOWhSaFEyc3RNMk1OMkV1UUEvMC9C REVBM0UxNEMzMkYyOUFDODJFREExNUIyRDRFRDFBRDI1MDRGRkE0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZbXTLNuQOqH2suZbeOrUpDLpM0GuYjNiM1eSjtql/1H+t3gT8lJZygRKfvDC DfAoEqEO6PxyWwR+QCrv948cntoOJ2ZHwju583Fc0J4mCW/UfS+IQE0OMln5QuB+ md+WBJlPRZ0imQTwgTGaQDurLaBS+JBoEqWFGGS2zF8BAUpFUBjkE0u1Iv1BaMF9 GsJNXLuFTTj2+QrFwK94lWTTVt68Bdzk31RBrHdB0CG7s9lOODn9E++hte8bH8Gu 15cA9P+PVx9KyeePVmMA7Yyg9P0nV8NjmqC5i2Oco21xQD2fJeOPOHvWi9QbJXJS oGPTeVsxye6R5+GyKAvbr51qFg== -----END CERTIFICATE-----Generated at Sat Jun 27 12:16:14 2026 by rpki-client