$ rpki-client -vvf rpki-repo.registro.br/repo/At42ADg6ixAnwtn1F7PUXKrvBvA2F1u12XRd6KqHTFnk/0/C22FD9ADC6578F0FEE0AE63FDDE59FBC199F989E.mft File: C22FD9ADC6578F0FEE0AE63FDDE59FBC199F989E.mft (raw, json) Hash identifier: HtHIqQP9TfBnj/RfPnXn+j8wwzNCaBgA9R0ytvX+LyY= Subject key identifier: 20:28:EC:03:12:37:93:EC:D5:77:AE:6A:3D:AF:93:15:AD:BF:F2:78 Authority key identifier: C2:2F:D9:AD:C6:57:8F:0F:EE:0A:E6:3F:DD:E5:9F:BC:19:9F:98:9E Certificate issuer: /CN=C22FD9ADC6578F0FEE0AE63FDDE59FBC199F989E Certificate serial: 5E7619A5D2A05510A0C1DEAFA91556D87DCD6C5F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C22FD9ADC6578F0FEE0AE63FDDE59FBC199F989E.cer Subject info access: rsync://rpki-repo.registro.br/repo/At42ADg6ixAnwtn1F7PUXKrvBvA2F1u12XRd6KqHTFnk/0/C22FD9ADC6578F0FEE0AE63FDDE59FBC199F989E.mft Manifest number: 012A Signing time: Sun 24 May 2026 01:05:54 +0000 Manifest this update: Sun 24 May 2026 01:00:54 +0000 Manifest next update: Mon 25 May 2026 04:44:54 +0000 Files and hashes: 1: 323830343a316134383a3a2f33322d3430203d3e203631383530.roa (hash: hGp3W6CCDaRQVPbWgz13luBmF5rIMQM69JgWAiwIbVw=) 2: C22FD9ADC6578F0FEE0AE63FDDE59FBC199F989E.crl (hash: PFCnR0nRK1RFkp6S+WlIr1XJ2P/SAf2dmPdtWMN6OVQ=) 3: 3230312e3134392e3131322e302f32322d3234203d3e203631383530.roa (hash: 0frBI2dIgpCDX/qFwaP8qZ1qNv9qMBMaetM+/AXzJz4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/At42ADg6ixAnwtn1F7PUXKrvBvA2F1u12XRd6KqHTFnk/0/C22FD9ADC6578F0FEE0AE63FDDE59FBC199F989E.crl rsync://rpki-repo.registro.br/repo/At42ADg6ixAnwtn1F7PUXKrvBvA2F1u12XRd6KqHTFnk/0/C22FD9ADC6578F0FEE0AE63FDDE59FBC199F989E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C22FD9ADC6578F0FEE0AE63FDDE59FBC199F989E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 25 May 2026 04:44:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:76:19:a5:d2:a0:55:10:a0:c1:de:af:a9:15:56:d8:7d:cd:6c:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C22FD9ADC6578F0FEE0AE63FDDE59FBC199F989E Validity Not Before: May 24 01:00:54 2026 GMT Not After : May 25 04:44:54 2026 GMT Subject: CN=2028EC03123793ECD577AE6A3DAF9315ADBFF278 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b2:ba:6b:a5:ba:eb:48:ef:01:e6:a5:2a:be: 44:79:e6:95:f2:37:a3:e5:b7:86:15:5d:ea:b0:0e: 56:40:40:52:9d:ab:2e:10:05:b2:cf:13:8e:69:d9: b4:ce:2b:d7:d4:4f:d9:92:6c:44:fe:8c:ee:42:bf: ef:25:80:3b:04:77:7b:fc:68:cf:d9:b0:8f:49:49: 23:e5:1d:fc:7e:15:42:92:19:d3:a5:31:d3:e7:c0: 9f:d1:a4:58:df:95:c2:28:ef:15:6e:d1:16:56:ff: 67:22:54:cd:22:b6:68:66:5f:6a:b5:11:33:8e:d9: ee:6a:0f:0b:71:ba:05:4f:42:ce:4d:0f:87:8e:62: 5b:ef:71:0d:20:e0:6e:eb:53:df:02:8d:8e:1a:ac: 9d:1a:d4:12:5a:60:e7:e7:32:ea:ca:3c:23:c9:79: f1:ea:77:c6:5e:2d:aa:6e:17:a9:21:ad:af:c3:c9: 9d:4d:20:a8:af:61:bd:71:cf:46:a8:ef:5d:d7:f6: d5:d1:99:0a:c1:b9:c5:38:6b:f6:82:77:1c:82:2e: 5f:0b:8f:58:b3:f5:e8:29:db:9a:e7:00:b1:80:fa: 14:f2:e6:76:2e:d9:ed:a1:f7:5c:15:1e:dc:df:75: cd:f6:1a:bd:8c:2d:66:85:d2:f9:83:85:df:d5:86: 57:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:28:EC:03:12:37:93:EC:D5:77:AE:6A:3D:AF:93:15:AD:BF:F2:78 X509v3 Authority Key Identifier: keyid:C2:2F:D9:AD:C6:57:8F:0F:EE:0A:E6:3F:DD:E5:9F:BC:19:9F:98:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/At42ADg6ixAnwtn1F7PUXKrvBvA2F1u12XRd6KqHTFnk/0/C22FD9ADC6578F0FEE0AE63FDDE59FBC199F989E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C22FD9ADC6578F0FEE0AE63FDDE59FBC199F989E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/At42ADg6ixAnwtn1F7PUXKrvBvA2F1u12XRd6KqHTFnk/0/C22FD9ADC6578F0FEE0AE63FDDE59FBC199F989E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e8:10:34:25:bc:23:9e:3f:a0:26:9c:70:89:5c:33:91:e8:46: 01:0e:08:64:28:df:59:ab:85:8a:bc:ee:72:1f:6e:8b:df:2b: f3:b4:7d:df:a5:11:7a:04:bc:71:d6:5f:56:94:0e:44:8d:ee: 9e:63:07:40:9c:df:c6:36:4e:18:52:35:81:52:15:0f:58:18: 56:9a:4b:f3:eb:c5:e1:58:3e:05:2a:02:ae:d4:e6:64:58:fe: 33:46:58:bc:66:17:3e:76:c2:47:aa:08:51:ee:3a:47:bf:d3: b1:c8:00:c2:70:ca:6b:9e:e9:8e:24:20:24:83:2c:ec:52:0b: d4:13:92:4d:2a:09:5b:e6:5d:a0:b5:cd:d7:ea:d1:fb:c8:a3: 31:1c:13:11:b2:0c:82:82:57:65:aa:b6:4b:8f:6e:c5:d0:9e: da:4e:8f:1e:9b:55:03:a4:24:8a:4d:55:aa:b9:46:40:36:9a: d1:70:3e:b4:4c:b9:a1:45:6d:c4:a7:03:2d:83:49:0a:32:5b: ab:f9:db:fe:ef:a8:cb:ef:ed:82:e6:37:e8:72:67:bd:32:93: 03:04:fa:16:e9:99:a1:3f:1f:5f:d6:e6:5a:4f:68:2e:7d:44: 33:51:bd:d7:b0:6d:7c:be:32:53:61:a5:cf:6e:7d:b1:48:7f: 8c:5d:1e:5f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUXnYZpdKgVRCgwd6vqRVW2H3NbF8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzIyRkQ5QURDNjU3OEYwRkVFMEFFNjNGRERFNTlGQkMx OTlGOTg5RTAeFw0yNjA1MjQwMTAwNTRaFw0yNjA1MjUwNDQ0NTRaMDMxMTAvBgNV BAMTKDIwMjhFQzAzMTIzNzkzRUNENTc3QUU2QTNEQUY5MzE1QURCRkYyNzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8srprpbrrSO8B5qUqvkR55pXy N6Plt4YVXeqwDlZAQFKdqy4QBbLPE45p2bTOK9fUT9mSbET+jO5Cv+8lgDsEd3v8 aM/ZsI9JSSPlHfx+FUKSGdOlMdPnwJ/RpFjflcIo7xVu0RZW/2ciVM0itmhmX2q1 ETOO2e5qDwtxugVPQs5ND4eOYlvvcQ0g4G7rU98CjY4arJ0a1BJaYOfnMurKPCPJ efHqd8ZeLapuF6khra/DyZ1NIKivYb1xz0ao713X9tXRmQrBucU4a/aCdxyCLl8L j1iz9egp25rnALGA+hTy5nYu2e2h91wVHtzfdc32Gr2MLWaF0vmDhd/VhlfxAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUICjsAxI3k+zVd65qPa+TFa2/8ngwHwYDVR0j BBgwFoAUwi/ZrcZXjw/uCuY/3eWfvBmfmJ4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQXQ0MkFEZzZpeEFud3RuMUY3UFVYS3J2QnZBMkYxdTEyWFJkNktxSFRG bmsvMC9DMjJGRDlBREM2NTc4RjBGRUUwQUU2M0ZEREU1OUZCQzE5OUY5ODlFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MyMkZEOUFEQzY1NzhGMEZF RTBBRTYzRkRERTU5RkJDMTk5Rjk4OUUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QXQ0MkFEZzZpeEFud3RuMUY3UFVYS3J2QnZBMkYxdTEyWFJkNktxSFRGbmsvMC9D MjJGRDlBREM2NTc4RjBGRUUwQUU2M0ZEREU1OUZCQzE5OUY5ODlFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEA6BA0Jbwjnj+gJpxwiVwzkehGAQ4IZCjfWauFirzuch9ui98r87R936URegS8 cdZfVpQORI3unmMHQJzfxjZOGFI1gVIVD1gYVppL8+vF4Vg+BSoCrtTmZFj+M0ZY vGYXPnbCR6oIUe46R7/TscgAwnDKa57pjiQgJIMs7FIL1BOSTSoJW+ZdoLXN1+rR +8ijMRwTEbIMgoJXZaq2S49uxdCe2k6PHptVA6Qkik1VqrlGQDaa0XA+tEy5oUVt xKcDLYNJCjJbq/nb/u+oy+/tguY36HJnvTKTAwT6FumZoT8fX9bmWk9oLn1EM1G9 17BtfL4yU2Glz259sUh/jF0eXw== -----END CERTIFICATE-----Generated at Sun May 24 14:09:41 2026 by rpki-client