$ rpki-client -vvf rpki-repo.registro.br/repo/B4Nos3KpnfZjRgiqdjsBvFCr39jfK2vKiemW1PxHZhNX/1/DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.mft File: DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.mft (raw, json) Hash identifier: 5MeGd8aL9ABb5dMeuK4+qOczSTv5k6S8FF0Hj15QlBE= Subject key identifier: 64:89:95:6D:63:22:74:AD:4F:A5:4E:6A:4D:7A:72:0B:74:25:A7:D4 Authority key identifier: DA:48:CA:C1:AD:92:76:8B:5C:BC:61:21:9D:BA:6F:EB:CD:8A:22:3F Certificate issuer: /CN=DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F Certificate serial: 416ADEBB6E461E85256260EC5FAEFC2494A098B0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.cer Subject info access: rsync://rpki-repo.registro.br/repo/B4Nos3KpnfZjRgiqdjsBvFCr39jfK2vKiemW1PxHZhNX/1/DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.mft Manifest number: 0409 Signing time: Sun 24 May 2026 07:02:03 +0000 Manifest this update: Sun 24 May 2026 06:57:03 +0000 Manifest next update: Mon 25 May 2026 10:19:03 +0000 Files and hashes: 1: DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.crl (hash: hmYji9aS++BJhxGERPnRhSawbdDJFRmRwxd94Rdz93U=) 2: 323830343a333131383a3a2f33322d3438203d3e20323634393932.roa (hash: iZmC1t/fjeUUNQnWbsucToAMSgInG3Ark2xpwjFVDnA=) 3: 3137302e38342e39362e302f32322d3234203d3e20323634393932.roa (hash: DYGx/T5AnQgCjOey+UURzZWhb0H67r/Ia6mcIhr9I/8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/B4Nos3KpnfZjRgiqdjsBvFCr39jfK2vKiemW1PxHZhNX/1/DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.crl rsync://rpki-repo.registro.br/repo/B4Nos3KpnfZjRgiqdjsBvFCr39jfK2vKiemW1PxHZhNX/1/DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 25 May 2026 10:19:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:6a:de:bb:6e:46:1e:85:25:62:60:ec:5f:ae:fc:24:94:a0:98:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F Validity Not Before: May 24 06:57:03 2026 GMT Not After : May 25 10:19:03 2026 GMT Subject: CN=6489956D632274AD4FA54E6A4D7A720B7425A7D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:6a:89:67:7c:76:9c:1e:43:68:85:8d:d2:d1: 6b:99:77:f9:72:73:3e:3d:d1:a1:d9:ff:e7:e4:dc: 20:6e:2b:15:07:8a:16:45:3d:bb:36:53:e6:ea:26: a4:ec:47:2e:43:c5:c2:0c:65:89:e2:3a:01:0f:f9: cf:b1:7e:60:ca:80:74:91:5c:4c:54:80:56:28:8e: 4a:e8:73:13:27:ff:95:55:d1:b8:10:6e:ab:54:12: 72:7d:33:f0:a4:97:c9:5c:c5:2d:08:6c:a5:db:fc: 05:4a:c5:4a:24:43:53:33:c6:cf:4e:17:a1:fb:25: d7:10:9c:93:74:87:34:8d:d3:a2:56:08:b3:18:22: 62:62:46:16:45:2a:f6:ce:fc:10:97:48:9d:b5:8e: f9:be:24:98:86:b1:2f:d4:63:10:40:5c:c8:83:61: 97:c1:5c:a9:2d:29:a4:8d:63:65:2c:d1:c7:03:97: 6f:cc:92:7c:9c:ed:a1:16:da:36:6d:7e:61:7a:3c: cf:fd:02:66:cc:fd:99:69:a2:87:0d:13:7a:37:53: 46:a3:49:cb:ce:a4:67:91:6f:b7:b4:0f:c3:bd:df: 4b:57:40:57:75:78:89:b7:61:b7:45:a4:21:2b:84: e7:cf:01:5c:33:ba:7b:af:39:4a:a1:78:93:67:6e: 02:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:89:95:6D:63:22:74:AD:4F:A5:4E:6A:4D:7A:72:0B:74:25:A7:D4 X509v3 Authority Key Identifier: keyid:DA:48:CA:C1:AD:92:76:8B:5C:BC:61:21:9D:BA:6F:EB:CD:8A:22:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/B4Nos3KpnfZjRgiqdjsBvFCr39jfK2vKiemW1PxHZhNX/1/DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/B4Nos3KpnfZjRgiqdjsBvFCr39jfK2vKiemW1PxHZhNX/1/DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:8a:c7:b4:1b:80:1f:29:f5:a1:b4:6f:b6:66:e3:ce:6a:7d: 77:22:1d:b4:52:83:73:91:ae:9c:b0:67:1d:25:56:dc:3d:2a: e4:35:1a:82:50:e0:28:4b:5a:32:c2:bd:23:af:1e:15:cf:df: 32:1b:be:8d:b5:99:99:d5:e0:17:d2:06:a8:32:76:16:f9:ef: 86:ee:5c:1d:91:73:3b:6a:8b:76:23:b2:60:9e:05:05:49:76: fa:3f:98:5d:6a:81:71:b7:00:06:af:3d:21:20:70:c9:3a:21: b8:3c:e4:84:e8:64:2a:97:44:c8:d2:c3:f1:24:15:f2:d6:df: 5a:a0:b7:cb:ce:c0:c5:07:1b:02:c1:22:e9:f9:4c:78:3e:5b: 64:c8:bd:99:f4:24:45:a6:b3:31:22:db:8c:4c:56:0b:dd:31: d1:f7:a5:9d:30:bb:de:21:71:67:84:6c:4b:4c:6b:f3:c3:05: bd:e7:44:cf:9b:3e:e0:80:63:d6:97:aa:99:ff:f7:d8:57:70: 0e:4e:3e:46:ff:b6:f3:91:64:49:7e:27:89:81:6c:bb:b1:6d: 8e:91:13:9d:af:e5:4c:b2:4e:dc:73:f6:49:5a:06:e4:27:e0: 6f:8a:2d:40:f4:55:c4:28:30:ef:72:c6:79:f6:11:cb:a4:7e: c0:64:fd:f1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUQWreu25GHoUlYmDsX678JJSgmLAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREE0OENBQzFBRDkyNzY4QjVDQkM2MTIxOURCQTZGRUJD RDhBMjIzRjAeFw0yNjA1MjQwNjU3MDNaFw0yNjA1MjUxMDE5MDNaMDMxMTAvBgNV BAMTKDY0ODk5NTZENjMyMjc0QUQ0RkE1NEU2QTREN0E3MjBCNzQyNUE3RDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYaolnfHacHkNohY3S0WuZd/ly cz490aHZ/+fk3CBuKxUHihZFPbs2U+bqJqTsRy5DxcIMZYniOgEP+c+xfmDKgHSR XExUgFYojkrocxMn/5VV0bgQbqtUEnJ9M/Ckl8lcxS0IbKXb/AVKxUokQ1Mzxs9O F6H7JdcQnJN0hzSN06JWCLMYImJiRhZFKvbO/BCXSJ21jvm+JJiGsS/UYxBAXMiD YZfBXKktKaSNY2Us0ccDl2/Mknyc7aEW2jZtfmF6PM/9AmbM/ZlpoocNE3o3U0aj ScvOpGeRb7e0D8O930tXQFd1eIm3YbdFpCErhOfPAVwzunuvOUqheJNnbgL5AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUZImVbWMidK1PpU5qTXpyC3Qlp9QwHwYDVR0j BBgwFoAU2kjKwa2SdotcvGEhnbpv682KIj8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQjROb3MzS3BuZlpqUmdpcWRqc0J2RkNyMzlqZksydktpZW1XMVB4SFpo TlgvMS9EQTQ4Q0FDMUFEOTI3NjhCNUNCQzYxMjE5REJBNkZFQkNEOEEyMjNGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RBNDhDQUMxQUQ5Mjc2OEI1 Q0JDNjEyMTlEQkE2RkVCQ0Q4QTIyM0YuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QjROb3MzS3BuZlpqUmdpcWRqc0J2RkNyMzlqZksydktpZW1XMVB4SFpoTlgvMS9E QTQ4Q0FDMUFEOTI3NjhCNUNCQzYxMjE5REJBNkZFQkNEOEEyMjNGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAuIrHtBuAHyn1obRvtmbjzmp9dyIdtFKDc5GunLBnHSVW3D0q5DUaglDgKEta MsK9I68eFc/fMhu+jbWZmdXgF9IGqDJ2Fvnvhu5cHZFzO2qLdiOyYJ4FBUl2+j+Y XWqBcbcABq89ISBwyTohuDzkhOhkKpdEyNLD8SQV8tbfWqC3y87AxQcbAsEi6flM eD5bZMi9mfQkRaazMSLbjExWC90x0felnTC73iFxZ4RsS0xr88MFvedEz5s+4IBj 1peqmf/32FdwDk4+Rv+285FkSX4niYFsu7FtjpETna/lTLJO3HP2SVoG5Cfgb4ot QPRVxCgw73LGefYRy6R+wGT98Q== -----END CERTIFICATE-----Generated at Sun May 24 14:14:01 2026 by rpki-client