$ rpki-client -vvf rpki-repo.registro.br/repo/5vfhd2kEoxEivgSho5UnJiYBtXAWBx7ebFY1meZDM1gt/0/CFDE24864395D54B821566D55DFAD56DC2717A4F.mft File: CFDE24864395D54B821566D55DFAD56DC2717A4F.mft (raw, json) Hash identifier: ZatciJo9SHxbqUjShkLmjW9mB91RZecsBJuxG4aMtLI= Subject key identifier: 28:F1:22:13:EF:1D:3C:5A:D0:2B:AB:4F:B1:40:67:84:82:B3:3F:BA Authority key identifier: CF:DE:24:86:43:95:D5:4B:82:15:66:D5:5D:FA:D5:6D:C2:71:7A:4F Certificate issuer: /CN=CFDE24864395D54B821566D55DFAD56DC2717A4F Certificate serial: 297053378861DA79D0D965ADCE1CC71420325386 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFDE24864395D54B821566D55DFAD56DC2717A4F.cer Subject info access: rsync://rpki-repo.registro.br/repo/5vfhd2kEoxEivgSho5UnJiYBtXAWBx7ebFY1meZDM1gt/0/CFDE24864395D54B821566D55DFAD56DC2717A4F.mft Manifest number: D2 Signing time: Sat 23 May 2026 20:44:59 +0000 Manifest this update: Sat 23 May 2026 20:39:59 +0000 Manifest next update: Sun 24 May 2026 21:21:59 +0000 Files and hashes: 1: 323830343a383961633a3a2f33332d3333203d3e20323733363139.roa (hash: eySNpXWtJeR5WEHH6D9gUUrO/py+gmj0uFyjGnCwR4k=) 2: 323830343a383961633a383030303a3a2f33342d3334203d3e20323733363139.roa (hash: sCs5I/xxKnSn71/ptroWwjucZGA918ogCEIyQMRWm40=) 3: 323830343a383961633a3a2f33322d3332203d3e20323733363139.roa (hash: 6YR6ZiSGc7CxTkzhcIGVaCU+A/kiB1EQ85pD9gUP53k=) 4: CFDE24864395D54B821566D55DFAD56DC2717A4F.crl (hash: cCG4rUji0M7sb4H9oyfTAIJwVU+R0r/wUtAfnSBcOsA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5vfhd2kEoxEivgSho5UnJiYBtXAWBx7ebFY1meZDM1gt/0/CFDE24864395D54B821566D55DFAD56DC2717A4F.crl rsync://rpki-repo.registro.br/repo/5vfhd2kEoxEivgSho5UnJiYBtXAWBx7ebFY1meZDM1gt/0/CFDE24864395D54B821566D55DFAD56DC2717A4F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFDE24864395D54B821566D55DFAD56DC2717A4F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 May 2026 21:21:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:70:53:37:88:61:da:79:d0:d9:65:ad:ce:1c:c7:14:20:32:53:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFDE24864395D54B821566D55DFAD56DC2717A4F Validity Not Before: May 23 20:39:59 2026 GMT Not After : May 24 21:21:59 2026 GMT Subject: CN=28F12213EF1D3C5AD02BAB4FB140678482B33FBA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:07:e7:98:68:b9:59:96:55:99:c6:9a:cb:2a: 31:f0:c9:f7:37:76:e9:eb:6b:bb:0d:cf:1a:94:e2: e5:74:79:2a:a6:e2:4d:72:10:71:b1:37:db:a8:82: f2:3a:64:8a:04:31:5b:f8:04:ba:7c:34:ba:45:4a: ae:d7:de:83:51:49:5a:b9:b7:36:33:36:ea:fc:3c: fb:22:bd:36:d7:f6:cb:3c:6c:37:83:44:73:af:c7: 17:fd:3d:42:88:61:72:83:7f:4c:8a:fa:03:2a:99: 44:c0:5f:6d:c0:fd:9d:ab:9d:8a:4d:40:14:18:dd: b9:6e:9c:1a:de:65:7f:19:f3:06:e1:4f:44:67:e7: 72:a3:10:4e:ac:21:6e:cd:e2:89:90:67:2b:ca:21: 18:7f:41:54:08:38:b1:8b:f2:b7:0f:3a:97:c3:0f: 69:5b:a5:59:1a:a9:1f:3c:5a:67:9e:a2:71:f7:41: d7:8f:4c:e7:e1:84:54:e8:39:af:9d:ae:7a:74:dc: e2:77:6e:06:bd:00:3c:b9:f0:9e:c5:60:76:56:96: d4:24:35:c0:39:b9:d7:18:27:4d:ea:e6:54:42:dc: 55:b2:2c:43:a4:86:99:d5:8e:d0:b9:b8:ee:f2:40: 53:b1:94:7a:ae:36:b7:68:9d:80:2d:54:f0:e7:0b: e5:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:F1:22:13:EF:1D:3C:5A:D0:2B:AB:4F:B1:40:67:84:82:B3:3F:BA X509v3 Authority Key Identifier: keyid:CF:DE:24:86:43:95:D5:4B:82:15:66:D5:5D:FA:D5:6D:C2:71:7A:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5vfhd2kEoxEivgSho5UnJiYBtXAWBx7ebFY1meZDM1gt/0/CFDE24864395D54B821566D55DFAD56DC2717A4F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFDE24864395D54B821566D55DFAD56DC2717A4F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5vfhd2kEoxEivgSho5UnJiYBtXAWBx7ebFY1meZDM1gt/0/CFDE24864395D54B821566D55DFAD56DC2717A4F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:cb:b1:42:f5:87:18:78:b1:f9:27:51:8e:77:2e:0f:f5:82: 99:0b:b6:10:34:35:e4:24:98:c1:56:45:c5:75:26:14:df:17: 56:ef:70:d9:f2:ad:74:ea:ca:cb:f1:e0:cd:e5:df:5e:59:e1: 19:74:4d:36:6b:9f:cf:a3:7b:10:b3:95:51:a7:b9:66:82:c8: 76:0f:7a:b0:60:0f:84:a5:20:14:14:c9:e3:fd:26:df:01:bb: 46:c0:80:aa:4b:83:c9:ef:0c:70:35:f5:6d:5b:d2:67:3e:bd: 84:22:96:1d:74:70:3f:21:fd:ce:97:ab:1c:a8:70:7b:98:af: f7:79:5e:6b:33:79:5a:eb:a3:45:dc:92:48:7f:b3:fb:ca:0a: f3:0d:74:c5:42:66:39:5a:d6:01:c8:28:bb:90:7d:e9:36:48: c3:15:d5:a4:3f:8f:60:00:a8:54:af:23:a8:2d:28:3c:8c:e6: 6c:81:68:e3:5a:e1:f8:c2:55:d8:f9:3e:06:47:9d:0f:1f:eb: 8a:0b:a6:3e:03:dc:11:d2:c8:6a:82:26:a7:c0:00:1f:61:09: 48:58:18:d2:08:c7:85:5d:5d:5a:98:7d:75:07:40:7b:16:17: 44:07:7d:33:59:17:fb:14:44:da:88:7d:b6:d2:c3:69:50:98: ff:51:da:ef -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUKXBTN4hh2nnQ2WWtzhzHFCAyU4YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZERTI0ODY0Mzk1RDU0QjgyMTU2NkQ1NURGQUQ1NkRD MjcxN0E0RjAeFw0yNjA1MjMyMDM5NTlaFw0yNjA1MjQyMTIxNTlaMDMxMTAvBgNV BAMTKDI4RjEyMjEzRUYxRDNDNUFEMDJCQUI0RkIxNDA2Nzg0ODJCMzNGQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEB+eYaLlZllWZxprLKjHwyfc3 dunra7sNzxqU4uV0eSqm4k1yEHGxN9uogvI6ZIoEMVv4BLp8NLpFSq7X3oNRSVq5 tzYzNur8PPsivTbX9ss8bDeDRHOvxxf9PUKIYXKDf0yK+gMqmUTAX23A/Z2rnYpN QBQY3blunBreZX8Z8wbhT0Rn53KjEE6sIW7N4omQZyvKIRh/QVQIOLGL8rcPOpfD D2lbpVkaqR88WmeeonH3QdePTOfhhFToOa+drnp03OJ3bga9ADy58J7FYHZWltQk NcA5udcYJ03q5lRC3FWyLEOkhpnVjtC5uO7yQFOxlHquNrdonYAtVPDnC+XNAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUKPEiE+8dPFrQK6tPsUBnhIKzP7owHwYDVR0j BBgwFoAUz94khkOV1UuCFWbVXfrVbcJxek8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNXZmaGQya0VveEVpdmdTaG81VW5KaVlCdFhBV0J4N2ViRlkxbWVaRE0x Z3QvMC9DRkRFMjQ4NjQzOTVENTRCODIxNTY2RDU1REZBRDU2REMyNzE3QTRGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NGREUyNDg2NDM5NUQ1NEI4 MjE1NjZENTVERkFENTZEQzI3MTdBNEYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NXZmaGQya0VveEVpdmdTaG81VW5KaVlCdFhBV0J4N2ViRlkxbWVaRE0xZ3QvMC9D RkRFMjQ4NjQzOTVENTRCODIxNTY2RDU1REZBRDU2REMyNzE3QTRGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhcuxQvWHGHix+SdRjncuD/WCmQu2EDQ15CSYwVZFxXUmFN8XVu9w2fKtdOrK y/HgzeXfXlnhGXRNNmufz6N7ELOVUae5ZoLIdg96sGAPhKUgFBTJ4/0m3wG7RsCA qkuDye8McDX1bVvSZz69hCKWHXRwPyH9zperHKhwe5iv93leazN5WuujRdySSH+z +8oK8w10xUJmOVrWAcgou5B96TZIwxXVpD+PYACoVK8jqC0oPIzmbIFo41rh+MJV 2Pk+BkedDx/rigumPgPcEdLIaoImp8AAH2EJSFgY0gjHhV1dWph9dQdAexYXRAd9 M1kX+xRE2oh9ttLDaVCY/1Ha7w== -----END CERTIFICATE-----Generated at Sun May 24 13:37:16 2026 by rpki-client