$ rpki-client -vvvf rpki-repo.registro.br/repo/7YNxeFV56zSNvKad4zZvHyKbjYXwPK3CFLSdXq1ULgMJ/0/52FD38C5D0DF365CD8DE3BD1DD0E92C1A6B69F7E.mft File: 52FD38C5D0DF365CD8DE3BD1DD0E92C1A6B69F7E.mft (raw, json) Hash identifier: 3HKnskcgm13evsYVTX95R2EqmEq78wKAjKHb/5/fvmM= Subject key identifier: DE:1A:40:17:97:D7:2D:99:7B:66:6A:13:71:20:40:D5:CB:D7:08:21 Authority key identifier: 52:FD:38:C5:D0:DF:36:5C:D8:DE:3B:D1:DD:0E:92:C1:A6:B6:9F:7E Certificate issuer: /CN=52FD38C5D0DF365CD8DE3BD1DD0E92C1A6B69F7E Certificate serial: 2A83E676AC7AB450B06E6B28378D4F83D9275221 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/52FD38C5D0DF365CD8DE3BD1DD0E92C1A6B69F7E.cer Subject info access: rsync://rpki-repo.registro.br/repo/7YNxeFV56zSNvKad4zZvHyKbjYXwPK3CFLSdXq1ULgMJ/0/52FD38C5D0DF365CD8DE3BD1DD0E92C1A6B69F7E.mft Manifest number: 0253 Signing time: Sun 23 Aug 2026 02:56:31 +0000 Manifest this update: Sun 23 Aug 2026 02:51:31 +0000 Manifest next update: Mon 24 Aug 2026 06:13:31 +0000 Files and hashes: 1: 323830343a386538633a3a2f33322d3332203d3e20323733343333.roa (hash: cfjfRWNwKN/N+UOBnbrCSS7ITr2IvrlprKg1za4Voyo=) 2: 52FD38C5D0DF365CD8DE3BD1DD0E92C1A6B69F7E.crl (hash: 3fpSvf+ocRnLs7C4pOyAzooKlQLk6evzx1e3jQY7n98=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7YNxeFV56zSNvKad4zZvHyKbjYXwPK3CFLSdXq1ULgMJ/0/52FD38C5D0DF365CD8DE3BD1DD0E92C1A6B69F7E.crl rsync://rpki-repo.registro.br/repo/7YNxeFV56zSNvKad4zZvHyKbjYXwPK3CFLSdXq1ULgMJ/0/52FD38C5D0DF365CD8DE3BD1DD0E92C1A6B69F7E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/52FD38C5D0DF365CD8DE3BD1DD0E92C1A6B69F7E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 24 Aug 2026 06:13:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:83:e6:76:ac:7a:b4:50:b0:6e:6b:28:37:8d:4f:83:d9:27:52:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52FD38C5D0DF365CD8DE3BD1DD0E92C1A6B69F7E Validity Not Before: Aug 23 02:51:31 2026 GMT Not After : Aug 24 06:13:31 2026 GMT Subject: CN=DE1A401797D72D997B666A13712040D5CBD70821 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:98:a8:78:1c:d8:f6:ff:c8:3a:c8:78:f9:86: 76:65:fd:dd:f2:04:d2:5c:33:ed:24:0d:f9:db:e4: 24:10:2d:8e:54:e1:6b:a4:4a:89:da:df:6e:4c:69: 38:5a:ab:10:c6:e2:6f:32:65:a3:d0:bc:65:3b:f6: 62:f3:8a:a7:5a:50:5c:c3:e8:93:b5:5e:9a:af:15: a2:83:3b:cd:18:ad:a7:b9:a1:98:9b:20:92:34:6f: 6d:99:fa:58:e9:4a:ca:2d:6d:66:05:65:9e:a6:a0: f5:a6:45:f6:cb:14:0d:77:42:77:73:d2:3c:52:f0: 92:3c:ce:e7:3f:b7:19:04:42:2e:b3:d5:4c:cd:71: 42:ef:ae:44:7a:ed:2b:6b:25:1e:c2:22:19:b3:8d: a8:6c:8f:21:db:29:4b:ec:13:7d:26:ab:76:19:54: 36:a6:f8:ca:77:23:04:f0:cd:f0:41:b0:5c:b9:25: 60:b7:99:77:fd:5f:4a:49:37:f1:07:84:52:b3:b5: df:6b:3c:d1:60:8c:9e:fe:13:5f:9c:03:e7:8c:21: 2d:fb:52:67:ae:6d:24:ee:bc:87:9e:27:58:84:02: 98:e9:93:fd:06:95:44:d2:2d:03:73:e2:9f:3f:46: e5:99:ae:25:50:b2:1c:d4:32:75:c7:f7:a6:cf:08: 9c:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:1A:40:17:97:D7:2D:99:7B:66:6A:13:71:20:40:D5:CB:D7:08:21 X509v3 Authority Key Identifier: keyid:52:FD:38:C5:D0:DF:36:5C:D8:DE:3B:D1:DD:0E:92:C1:A6:B6:9F:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7YNxeFV56zSNvKad4zZvHyKbjYXwPK3CFLSdXq1ULgMJ/0/52FD38C5D0DF365CD8DE3BD1DD0E92C1A6B69F7E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/52FD38C5D0DF365CD8DE3BD1DD0E92C1A6B69F7E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7YNxeFV56zSNvKad4zZvHyKbjYXwPK3CFLSdXq1ULgMJ/0/52FD38C5D0DF365CD8DE3BD1DD0E92C1A6B69F7E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:e6:e5:8a:83:6e:62:2d:9b:e9:72:21:c5:dc:de:53:f3:d6: fb:f3:ed:57:88:c0:4e:fc:98:00:8a:56:a0:3b:8f:d0:24:fb: f7:64:11:b3:b8:e7:6e:61:d8:46:9f:fd:4a:c8:99:5d:a1:d0: 60:be:d5:c0:8b:75:f5:6c:c2:a4:40:ec:ee:06:d3:53:1f:14: 65:b9:c9:cc:85:34:c0:ec:3f:9d:78:35:24:30:59:cf:1c:cf: 8e:11:c4:79:14:c3:de:84:77:da:2a:4c:19:cc:7c:90:22:e4: ba:7d:3c:1f:e5:71:ce:88:46:54:9e:50:64:94:f6:4d:86:8a: a5:9a:fc:0e:b9:80:ce:e0:3a:cc:6e:8f:0a:9f:cc:4c:c3:2e: 61:b1:3b:74:77:eb:95:81:c9:c2:75:ba:39:ba:40:08:a6:79: 68:2f:a5:ef:68:b2:f5:16:21:d4:9d:ca:9a:a8:ff:bb:88:28: 49:f7:52:81:77:27:de:8d:34:41:be:29:fd:67:fe:07:c5:25: 09:55:12:2e:6c:33:ac:50:75:29:6d:ea:79:27:bf:32:3d:78: a3:6d:53:6b:5c:f2:90:2f:33:86:e7:cd:6d:b6:01:0d:e2:3f: 88:9d:f8:87:43:f7:7f:15:ff:5c:ce:12:da:0f:78:48:6c:e6: da:3f:48:5a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUKoPmdqx6tFCwbmsoN41Pg9knUiEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTJGRDM4QzVEMERGMzY1Q0Q4REUzQkQxREQwRTkyQzFB NkI2OUY3RTAeFw0yNjA4MjMwMjUxMzFaFw0yNjA4MjQwNjEzMzFaMDMxMTAvBgNV BAMTKERFMUE0MDE3OTdENzJEOTk3QjY2NkExMzcxMjA0MEQ1Q0JENzA4MjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBmKh4HNj2/8g6yHj5hnZl/d3y BNJcM+0kDfnb5CQQLY5U4WukSona325MaThaqxDG4m8yZaPQvGU79mLziqdaUFzD 6JO1XpqvFaKDO80Yrae5oZibIJI0b22Z+ljpSsotbWYFZZ6moPWmRfbLFA13Qndz 0jxS8JI8zuc/txkEQi6z1UzNcULvrkR67StrJR7CIhmzjahsjyHbKUvsE30mq3YZ VDam+Mp3IwTwzfBBsFy5JWC3mXf9X0pJN/EHhFKztd9rPNFgjJ7+E1+cA+eMIS37 UmeubSTuvIeeJ1iEApjpk/0GlUTSLQNz4p8/RuWZriVQshzUMnXH96bPCJyZAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU3hpAF5fXLZl7ZmoTcSBA1cvXCCEwHwYDVR0j BBgwFoAUUv04xdDfNlzY3jvR3Q6Swaa2n34wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN1lOeGVGVjU2elNOdkthZDR6WnZIeUtiallYd1BLM0NGTFNkWHExVUxn TUovMC81MkZEMzhDNUQwREYzNjVDRDhERTNCRDFERDBFOTJDMUE2QjY5RjdFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzUyRkQzOEM1RDBERjM2NUNE OERFM0JEMUREMEU5MkMxQTZCNjlGN0UuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v N1lOeGVGVjU2elNOdkthZDR6WnZIeUtiallYd1BLM0NGTFNkWHExVUxnTUovMC81 MkZEMzhDNUQwREYzNjVDRDhERTNCRDFERDBFOTJDMUE2QjY5RjdFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEApOblioNuYi2b6XIhxdzeU/PW+/PtV4jATvyYAIpWoDuP0CT792QRs7jnbmHY Rp/9SsiZXaHQYL7VwIt19WzCpEDs7gbTUx8UZbnJzIU0wOw/nXg1JDBZzxzPjhHE eRTD3oR32ipMGcx8kCLkun08H+VxzohGVJ5QZJT2TYaKpZr8DrmAzuA6zG6PCp/M TMMuYbE7dHfrlYHJwnW6ObpACKZ5aC+l72iy9RYh1J3Kmqj/u4goSfdSgXcn3o00 Qb4p/Wf+B8UlCVUSLmwzrFB1KW3qeSe/Mj14o21Ta1zykC8zhufNbbYBDeI/iJ34 h0P3fxX/XM4S2g94SGzm2j9IWg== -----END CERTIFICATE-----Generated at Sun Aug 23 19:09:27 2026 by rpki-client