$ rpki-client -vvf rpki-repo.registro.br/repo/7wnDMHM12vFdgWCrUUQeTxi4sVAi7HwhxYuPbEYJc9B4/1/98525FF70BD67C78C36BE3190E3463098E95DF2C.mft File: 98525FF70BD67C78C36BE3190E3463098E95DF2C.mft (raw, json) Hash identifier: JpKNrzcbQGWZtH9n9u1B/qm6175E+ad95JddBSTRMuk= Subject key identifier: CE:B0:C0:5F:FF:19:73:8F:87:EF:73:7C:46:9F:84:56:E1:57:0C:C5 Authority key identifier: 98:52:5F:F7:0B:D6:7C:78:C3:6B:E3:19:0E:34:63:09:8E:95:DF:2C Certificate issuer: /CN=98525FF70BD67C78C36BE3190E3463098E95DF2C Certificate serial: 12CD3A44BB4429A2B18CA090F49EE39B2534B176 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98525FF70BD67C78C36BE3190E3463098E95DF2C.cer Subject info access: rsync://rpki-repo.registro.br/repo/7wnDMHM12vFdgWCrUUQeTxi4sVAi7HwhxYuPbEYJc9B4/1/98525FF70BD67C78C36BE3190E3463098E95DF2C.mft Manifest number: 040F Signing time: Sat 23 May 2026 18:21:58 +0000 Manifest this update: Sat 23 May 2026 18:16:58 +0000 Manifest next update: Sun 24 May 2026 22:12:58 +0000 Files and hashes: 1: 98525FF70BD67C78C36BE3190E3463098E95DF2C.crl (hash: MuHl9JHOA0hOciVFzeh1lJ6xq2rdlkSFBB6/9SPcWBI=) 2: 323830343a333966633a3a2f33322d3438203d3e20323636303633.roa (hash: CgKsLGyHlMSxobtOeR+Dmgxw5TCZP8rnC65enPODVrI=) 3: 34352e342e3130342e302f32322d3234203d3e20323636303633.roa (hash: 3IzG2u9Tvm/ZvJfm67J3rQInKqJ6ykRL4gHSU5shqrA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7wnDMHM12vFdgWCrUUQeTxi4sVAi7HwhxYuPbEYJc9B4/1/98525FF70BD67C78C36BE3190E3463098E95DF2C.crl rsync://rpki-repo.registro.br/repo/7wnDMHM12vFdgWCrUUQeTxi4sVAi7HwhxYuPbEYJc9B4/1/98525FF70BD67C78C36BE3190E3463098E95DF2C.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98525FF70BD67C78C36BE3190E3463098E95DF2C.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 May 2026 22:12:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:cd:3a:44:bb:44:29:a2:b1:8c:a0:90:f4:9e:e3:9b:25:34:b1:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98525FF70BD67C78C36BE3190E3463098E95DF2C Validity Not Before: May 23 18:16:58 2026 GMT Not After : May 24 22:12:58 2026 GMT Subject: CN=CEB0C05FFF19738F87EF737C469F8456E1570CC5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:a7:dc:3d:54:68:b3:e9:9d:f1:6d:1c:8e:4b: 1a:9e:83:80:6e:d2:2b:1d:97:f9:00:25:f1:52:a4: 8a:81:4c:13:16:27:47:a6:dc:07:b0:85:1b:ce:7b: 39:59:e3:48:f4:7d:2f:1b:6b:b9:21:55:81:c7:1a: 14:a0:54:b0:ca:9d:81:e7:62:b0:80:c0:28:11:60: 18:e1:b7:33:de:c4:6a:45:1e:94:b6:22:5f:63:13: 44:99:31:cd:63:eb:73:c5:be:f9:e7:0c:83:b0:7f: 36:20:90:c4:74:fe:7b:24:a0:2b:4f:17:8e:bf:6b: 13:7a:f4:1d:95:0e:47:eb:ae:de:c2:40:8c:7c:f1: e5:b7:3b:6b:e5:5d:b8:40:2d:5e:57:f1:31:a4:55: ad:d7:3b:a3:09:20:7f:eb:94:51:1f:3b:71:cd:af: bc:6c:9a:9e:d2:3a:f2:22:dc:fa:52:9b:3d:c6:47: ec:f3:f0:2e:28:8e:3c:77:47:b7:af:e3:1d:53:05: 36:fc:9c:71:fe:e8:8e:d9:e9:99:ab:2d:d5:ff:5b: a4:a9:c5:6a:ea:ed:80:35:00:8f:d1:61:e9:90:ae: 18:f3:0c:8b:49:8e:7a:6a:a0:7f:c8:74:db:e0:4e: 93:3c:45:89:29:df:52:b3:6c:07:8f:1f:5e:f5:cd: 33:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:B0:C0:5F:FF:19:73:8F:87:EF:73:7C:46:9F:84:56:E1:57:0C:C5 X509v3 Authority Key Identifier: keyid:98:52:5F:F7:0B:D6:7C:78:C3:6B:E3:19:0E:34:63:09:8E:95:DF:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7wnDMHM12vFdgWCrUUQeTxi4sVAi7HwhxYuPbEYJc9B4/1/98525FF70BD67C78C36BE3190E3463098E95DF2C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98525FF70BD67C78C36BE3190E3463098E95DF2C.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7wnDMHM12vFdgWCrUUQeTxi4sVAi7HwhxYuPbEYJc9B4/1/98525FF70BD67C78C36BE3190E3463098E95DF2C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:e8:6e:8b:a1:20:c6:33:5a:fa:69:92:de:90:eb:07:6d:ec: 4a:30:84:ae:21:c4:cb:85:0b:34:4b:b4:1a:b4:4c:6a:ee:99: 3b:b9:e0:19:c3:7c:41:24:b4:50:bf:da:89:d6:cb:ff:79:2c: e4:b4:dd:11:bf:4c:17:21:1d:cf:a7:5d:d1:72:2c:ca:05:bb: 7b:f4:10:e5:92:c6:85:06:2b:09:a8:5e:d4:20:ae:ab:d1:34: a1:38:f6:ea:50:b0:7f:bd:6c:7f:47:4f:d4:7f:fd:09:e5:5a: 8f:28:9a:cd:a6:fc:f4:4c:a2:f0:62:2e:55:61:25:0a:0f:1f: ea:27:10:8e:79:5a:8a:38:ac:b1:e2:75:0f:8e:7a:1b:24:61: 82:76:76:af:3c:1a:26:07:e4:d0:94:7a:c7:87:24:07:61:10: 64:e3:e5:71:84:f5:65:3d:66:36:54:af:4d:30:28:d0:1e:54: 97:d4:b9:a1:e4:fb:a6:9f:01:61:6a:a3:39:ec:f3:c7:46:8a: 9a:00:4c:57:f9:c3:d5:9a:2d:71:cd:8c:0c:c6:65:16:a7:c9: 11:4f:71:d4:49:a0:50:c8:6b:90:b8:cf:77:99:c0:66:96:e6: aa:a4:e4:59:8c:b1:9a:e7:e0:d4:56:36:fd:78:f8:f5:ac:e3: 25:a6:f2:10 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUEs06RLtEKaKxjKCQ9J7jmyU0sXYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTg1MjVGRjcwQkQ2N0M3OEMzNkJFMzE5MEUzNDYzMDk4 RTk1REYyQzAeFw0yNjA1MjMxODE2NThaFw0yNjA1MjQyMjEyNThaMDMxMTAvBgNV BAMTKENFQjBDMDVGRkYxOTczOEY4N0VGNzM3QzQ2OUY4NDU2RTE1NzBDQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYp9w9VGiz6Z3xbRyOSxqeg4Bu 0isdl/kAJfFSpIqBTBMWJ0em3AewhRvOezlZ40j0fS8ba7khVYHHGhSgVLDKnYHn YrCAwCgRYBjhtzPexGpFHpS2Il9jE0SZMc1j63PFvvnnDIOwfzYgkMR0/nskoCtP F46/axN69B2VDkfrrt7CQIx88eW3O2vlXbhALV5X8TGkVa3XO6MJIH/rlFEfO3HN r7xsmp7SOvIi3PpSmz3GR+zz8C4ojjx3R7ev4x1TBTb8nHH+6I7Z6ZmrLdX/W6Sp xWrq7YA1AI/RYemQrhjzDItJjnpqoH/IdNvgTpM8RYkp31KzbAePH171zTPVAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUzrDAX/8Zc4+H73N8Rp+EVuFXDMUwHwYDVR0j BBgwFoAUmFJf9wvWfHjDa+MZDjRjCY6V3ywwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN3duRE1ITTEydkZkZ1dDclVVUWVUeGk0c1ZBaTdId2h4WXVQYkVZSmM5 QjQvMS85ODUyNUZGNzBCRDY3Qzc4QzM2QkUzMTkwRTM0NjMwOThFOTVERjJDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk4NTI1RkY3MEJENjdDNzhD MzZCRTMxOTBFMzQ2MzA5OEU5NURGMkMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v N3duRE1ITTEydkZkZ1dDclVVUWVUeGk0c1ZBaTdId2h4WXVQYkVZSmM5QjQvMS85 ODUyNUZGNzBCRDY3Qzc4QzM2QkUzMTkwRTM0NjMwOThFOTVERjJDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAn+hui6EgxjNa+mmS3pDrB23sSjCEriHEy4ULNEu0GrRMau6ZO7ngGcN8QSS0 UL/aidbL/3ks5LTdEb9MFyEdz6dd0XIsygW7e/QQ5ZLGhQYrCahe1CCuq9E0oTj2 6lCwf71sf0dP1H/9CeVajyiazab89Eyi8GIuVWElCg8f6icQjnlaijisseJ1D456 GyRhgnZ2rzwaJgfk0JR6x4ckB2EQZOPlcYT1ZT1mNlSvTTAo0B5Ul9S5oeT7pp8B YWqjOezzx0aKmgBMV/nD1Zotcc2MDMZlFqfJEU9x1EmgUMhrkLjPd5nAZpbmqqTk WYyxmufg1FY2/Xj49azjJabyEA== -----END CERTIFICATE-----Generated at Sun May 24 12:51:25 2026 by rpki-client