$ rpki-client -vvf rpki-repo.registro.br/repo/BVKkTZfKiLForUMhYRJyGbnYpExF4kD5AQZhi8u7SZuD/1/DF52CC90FCD2C3832840643A9E557DE85B0F59D3.mft File: DF52CC90FCD2C3832840643A9E557DE85B0F59D3.mft (raw, json) Hash identifier: pKs9otlo1d1ut31nB1RAlOJMG9t3C0QrBWCDH3oJLgQ= Subject key identifier: C2:51:91:75:B9:C0:83:20:59:F2:3B:A5:26:05:FC:E6:AD:05:C9:43 Authority key identifier: DF:52:CC:90:FC:D2:C3:83:28:40:64:3A:9E:55:7D:E8:5B:0F:59:D3 Certificate issuer: /CN=DF52CC90FCD2C3832840643A9E557DE85B0F59D3 Certificate serial: 0C514CC8115B3E43A84E4991639A7FEB21CDE1C4 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF52CC90FCD2C3832840643A9E557DE85B0F59D3.cer Subject info access: rsync://rpki-repo.registro.br/repo/BVKkTZfKiLForUMhYRJyGbnYpExF4kD5AQZhi8u7SZuD/1/DF52CC90FCD2C3832840643A9E557DE85B0F59D3.mft Manifest number: 040E Signing time: Sun 24 May 2026 07:22:18 +0000 Manifest this update: Sun 24 May 2026 07:17:18 +0000 Manifest next update: Mon 25 May 2026 08:49:18 +0000 Files and hashes: 1: 34352e3138312e3139362e302f32322d3234203d3e20323639313937.roa (hash: PYfMglksFxC5v+xgeAyjBUbMpusTFmLcGTEjqubwJ10=) 2: 323830343a363065303a3a2f33322d3336203d3e20323639313937.roa (hash: c7GGQKi6ec2DB29yrMDCE13X+Wm8vYKolg76A+4gtHA=) 3: DF52CC90FCD2C3832840643A9E557DE85B0F59D3.crl (hash: EusK3yx6GvFiGWgdmArX39K8JYd1Oly2nJrT/F9YuRs=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BVKkTZfKiLForUMhYRJyGbnYpExF4kD5AQZhi8u7SZuD/1/DF52CC90FCD2C3832840643A9E557DE85B0F59D3.crl rsync://rpki-repo.registro.br/repo/BVKkTZfKiLForUMhYRJyGbnYpExF4kD5AQZhi8u7SZuD/1/DF52CC90FCD2C3832840643A9E557DE85B0F59D3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF52CC90FCD2C3832840643A9E557DE85B0F59D3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 25 May 2026 08:49:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:51:4c:c8:11:5b:3e:43:a8:4e:49:91:63:9a:7f:eb:21:cd:e1:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF52CC90FCD2C3832840643A9E557DE85B0F59D3 Validity Not Before: May 24 07:17:18 2026 GMT Not After : May 25 08:49:18 2026 GMT Subject: CN=C2519175B9C0832059F23BA52605FCE6AD05C943 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:45:65:7e:5f:c2:8b:93:7b:c8:83:d0:70:af: a6:16:c0:ec:f1:4d:d2:f1:60:8b:85:01:58:89:18: 32:fc:69:85:29:4f:76:57:be:b1:c9:51:2d:4d:01: e3:cc:26:fa:74:34:ad:98:c6:77:61:28:7c:00:97: 62:00:75:d8:9f:31:68:07:cb:63:17:9f:92:24:a8: 50:d0:70:cb:46:5e:14:20:b7:ac:d8:ca:6d:09:94: 31:59:2b:36:87:aa:08:02:b2:76:56:c2:12:e5:ac: 1c:50:8e:76:5a:d6:ae:e4:41:ff:d2:f9:02:6f:3e: 20:dc:0f:c6:c4:21:41:7b:c3:d3:1a:45:89:f6:9d: 44:25:30:a2:b0:ab:ee:fa:b7:71:91:8c:02:e1:d2: 7f:89:d8:96:55:0c:08:82:4f:15:e6:5c:46:19:5a: 36:c2:e9:ab:24:bf:58:3c:15:10:be:67:79:33:7c: 82:00:e2:fb:40:83:b5:48:f7:6a:d0:ac:3f:fa:58: 1d:1a:ae:84:13:ac:92:3a:85:5c:ff:21:c1:04:4a: 4e:cd:9a:f9:a8:53:52:0f:3d:6f:e8:0b:3f:aa:0d: d5:eb:6f:b6:58:ec:a4:02:bf:de:97:d3:fd:69:04: 22:ec:52:99:78:d2:3d:f7:16:2e:b6:db:c3:9d:55: a6:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:51:91:75:B9:C0:83:20:59:F2:3B:A5:26:05:FC:E6:AD:05:C9:43 X509v3 Authority Key Identifier: keyid:DF:52:CC:90:FC:D2:C3:83:28:40:64:3A:9E:55:7D:E8:5B:0F:59:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BVKkTZfKiLForUMhYRJyGbnYpExF4kD5AQZhi8u7SZuD/1/DF52CC90FCD2C3832840643A9E557DE85B0F59D3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF52CC90FCD2C3832840643A9E557DE85B0F59D3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BVKkTZfKiLForUMhYRJyGbnYpExF4kD5AQZhi8u7SZuD/1/DF52CC90FCD2C3832840643A9E557DE85B0F59D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:87:bc:de:a4:02:97:09:2d:2c:7b:0e:eb:4c:a0:29:6c:1b: 1b:68:a1:9f:fa:4a:7e:89:0c:1f:4a:0c:95:38:93:5a:67:17: 1c:57:f7:44:e1:76:4d:c9:95:88:67:a9:9e:ab:ac:ad:54:50: 87:4e:45:3f:96:3c:4a:d1:68:81:b0:73:c3:c6:77:15:41:36: c8:3e:f1:72:ba:00:b5:59:03:f1:de:30:97:78:99:66:5c:65: b6:e1:81:ad:60:eb:a9:cc:bf:c8:ca:24:9d:74:3b:44:dd:20: dc:d4:cd:c1:a7:aa:96:e2:30:64:e6:dd:56:24:f5:a8:13:77: 69:44:65:9e:c5:8f:8b:5f:ae:59:61:fb:98:88:4f:53:70:00: b9:c8:9d:1a:79:a1:28:c7:bd:cb:98:dd:3d:3f:a3:2d:a5:47: 72:08:84:10:e3:23:c5:e7:c9:89:9a:4c:5a:02:10:cc:5c:31: c4:ec:c9:6a:39:35:8b:f8:7e:67:88:87:ef:60:ae:a5:65:32: 35:d9:c5:9f:6d:76:3b:23:8f:b4:44:6d:51:a9:02:d4:cf:ce: e8:1a:01:26:55:38:60:08:f4:af:58:fe:85:a0:ab:4e:d0:da: a7:00:5c:ed:21:c1:c1:bc:3c:b7:37:1f:e2:3e:1a:bb:41:4f: 2f:e7:67:be -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUDFFMyBFbPkOoTkmRY5p/6yHN4cQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREY1MkNDOTBGQ0QyQzM4MzI4NDA2NDNBOUU1NTdERTg1 QjBGNTlEMzAeFw0yNjA1MjQwNzE3MThaFw0yNjA1MjUwODQ5MThaMDMxMTAvBgNV BAMTKEMyNTE5MTc1QjlDMDgzMjA1OUYyM0JBNTI2MDVGQ0U2QUQwNUM5NDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPRWV+X8KLk3vIg9Bwr6YWwOzx TdLxYIuFAViJGDL8aYUpT3ZXvrHJUS1NAePMJvp0NK2YxndhKHwAl2IAddifMWgH y2MXn5IkqFDQcMtGXhQgt6zYym0JlDFZKzaHqggCsnZWwhLlrBxQjnZa1q7kQf/S +QJvPiDcD8bEIUF7w9MaRYn2nUQlMKKwq+76t3GRjALh0n+J2JZVDAiCTxXmXEYZ WjbC6askv1g8FRC+Z3kzfIIA4vtAg7VI92rQrD/6WB0aroQTrJI6hVz/IcEESk7N mvmoU1IPPW/oCz+qDdXrb7ZY7KQCv96X0/1pBCLsUpl40j33Fi6228OdVaYPAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUwlGRdbnAgyBZ8julJgX85q0FyUMwHwYDVR0j BBgwFoAU31LMkPzSw4MoQGQ6nlV96FsPWdMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQlZLa1RaZktpTEZvclVNaFlSSnlHYm5ZcEV4RjRrRDVBUVpoaTh1N1Na dUQvMS9ERjUyQ0M5MEZDRDJDMzgzMjg0MDY0M0E5RTU1N0RFODVCMEY1OUQzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RGNTJDQzkwRkNEMkMzODMy ODQwNjQzQTlFNTU3REU4NUIwRjU5RDMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QlZLa1RaZktpTEZvclVNaFlSSnlHYm5ZcEV4RjRrRDVBUVpoaTh1N1NadUQvMS9E RjUyQ0M5MEZDRDJDMzgzMjg0MDY0M0E5RTU1N0RFODVCMEY1OUQzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAboe83qQClwktLHsO60ygKWwbG2ihn/pKfokMH0oMlTiTWmcXHFf3ROF2TcmV iGepnqusrVRQh05FP5Y8StFogbBzw8Z3FUE2yD7xcroAtVkD8d4wl3iZZlxltuGB rWDrqcy/yMoknXQ7RN0g3NTNwaeqluIwZObdViT1qBN3aURlnsWPi1+uWWH7mIhP U3AAucidGnmhKMe9y5jdPT+jLaVHcgiEEOMjxefJiZpMWgIQzFwxxOzJajk1i/h+ Z4iH72CupWUyNdnFn212OyOPtERtUakC1M/O6BoBJlU4YAj0r1j+haCrTtDapwBc 7SHBwbw8tzcf4j4au0FPL+dnvg== -----END CERTIFICATE-----Generated at Sun May 24 14:14:05 2026 by rpki-client