$ rpki-client -vvf rpki-repo.registro.br/repo/Bh2hLcxvVNMzUbC4a4jrnAsurvTHQo4TTPSW5Sm71cw3/0/BDFB74614E38AE431842ACDCD3D045E6CFC4AF37.mft File: BDFB74614E38AE431842ACDCD3D045E6CFC4AF37.mft (raw, json) Hash identifier: xQEmev1l76tN/7AL3V0ns/5a9AVXLQIfl4qxP8I9vPU= Subject key identifier: 49:1B:28:18:94:35:50:5E:53:7D:CA:C9:D7:69:AB:14:5D:0C:72:66 Authority key identifier: BD:FB:74:61:4E:38:AE:43:18:42:AC:DC:D3:D0:45:E6:CF:C4:AF:37 Certificate issuer: /CN=BDFB74614E38AE431842ACDCD3D045E6CFC4AF37 Certificate serial: 7D459C6E9C73AD7D706CE87161D212BB52EE6A27 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDFB74614E38AE431842ACDCD3D045E6CFC4AF37.cer Subject info access: rsync://rpki-repo.registro.br/repo/Bh2hLcxvVNMzUbC4a4jrnAsurvTHQo4TTPSW5Sm71cw3/0/BDFB74614E38AE431842ACDCD3D045E6CFC4AF37.mft Manifest number: 29 Signing time: Sun 24 May 2026 03:25:02 +0000 Manifest this update: Sun 24 May 2026 03:20:02 +0000 Manifest next update: Mon 25 May 2026 06:13:02 +0000 Files and hashes: 1: BDFB74614E38AE431842ACDCD3D045E6CFC4AF37.crl (hash: Iux+p+oVO5erOK1MhAGGImYBNZxAy64edUM3/hAfhrw=) 2: 3136342e3136332e3135362e302f32322d3234203d3e20323635393537.roa (hash: txNGUFH6H5nKqs5HOgPitq0yV2hT9RBqZlzi7aoy6Rk=) 3: 323830343a343036383a3a2f33322d3438203d3e20323635393537.roa (hash: hv/xzrUXf/F88x5g4i2+j0iw463q85dSDf06yCwHjM4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Bh2hLcxvVNMzUbC4a4jrnAsurvTHQo4TTPSW5Sm71cw3/0/BDFB74614E38AE431842ACDCD3D045E6CFC4AF37.crl rsync://rpki-repo.registro.br/repo/Bh2hLcxvVNMzUbC4a4jrnAsurvTHQo4TTPSW5Sm71cw3/0/BDFB74614E38AE431842ACDCD3D045E6CFC4AF37.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDFB74614E38AE431842ACDCD3D045E6CFC4AF37.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 25 May 2026 06:13:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:45:9c:6e:9c:73:ad:7d:70:6c:e8:71:61:d2:12:bb:52:ee:6a:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDFB74614E38AE431842ACDCD3D045E6CFC4AF37 Validity Not Before: May 24 03:20:02 2026 GMT Not After : May 25 06:13:02 2026 GMT Subject: CN=491B28189435505E537DCAC9D769AB145D0C7266 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:73:33:d1:92:0a:3e:8e:cd:4e:f6:26:b2:f6: 17:66:36:e7:5a:f3:f3:62:f6:8c:af:0a:9e:6e:17: c2:48:c6:53:eb:12:eb:64:a0:43:62:fc:71:19:e2: 5f:3c:71:32:63:e5:b9:e1:86:21:80:9f:34:76:8a: 53:a3:5c:8f:d3:52:4e:48:9d:f5:41:14:f4:d6:61: 93:fb:67:1d:bc:e9:45:55:51:a1:06:56:f9:8c:40: ae:5e:bd:86:70:ef:02:5f:50:5d:31:75:68:ba:5c: 52:74:79:2a:28:71:5f:fb:4c:06:25:27:83:98:b9: aa:05:86:dd:04:fd:25:59:20:96:70:60:56:54:76: e3:4b:af:16:74:2c:6c:3b:43:87:dd:69:af:5c:36: 0c:5d:8a:ef:16:50:f8:4a:52:df:6b:76:87:7e:b3: 38:f6:4d:54:a9:02:33:a1:fa:c6:4a:f0:f0:d0:76: fe:b0:37:a6:97:e1:ac:0e:55:66:eb:30:c7:b6:70: e8:30:cc:be:48:87:58:55:fb:1f:74:f0:28:34:99: 7c:a1:87:0d:4e:dc:a5:b5:5e:c0:e2:c4:d2:3c:d4: fd:e4:11:58:06:b0:e2:84:30:5b:9d:d9:cd:2a:c9: e7:cf:e7:14:b2:b3:82:32:76:3f:66:e7:0b:39:ad: 5b:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:1B:28:18:94:35:50:5E:53:7D:CA:C9:D7:69:AB:14:5D:0C:72:66 X509v3 Authority Key Identifier: keyid:BD:FB:74:61:4E:38:AE:43:18:42:AC:DC:D3:D0:45:E6:CF:C4:AF:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Bh2hLcxvVNMzUbC4a4jrnAsurvTHQo4TTPSW5Sm71cw3/0/BDFB74614E38AE431842ACDCD3D045E6CFC4AF37.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDFB74614E38AE431842ACDCD3D045E6CFC4AF37.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bh2hLcxvVNMzUbC4a4jrnAsurvTHQo4TTPSW5Sm71cw3/0/BDFB74614E38AE431842ACDCD3D045E6CFC4AF37.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:dc:4f:2a:02:4e:3d:5a:9c:50:aa:93:70:8d:31:94:9d:90: cf:23:c8:e9:8d:5c:9e:d3:49:14:5b:47:45:90:86:92:92:4f: 3c:14:3e:a2:4a:07:c3:93:a3:bc:73:01:3d:a2:ab:ef:10:d6: 3b:79:3b:da:3b:bb:c1:8b:da:c6:97:f3:8a:a1:95:e8:ef:38: b5:92:41:11:71:d3:72:67:89:12:6e:93:c6:ef:ab:e6:fb:1b: ae:3e:cb:12:0d:8c:9f:0c:2a:d5:65:33:99:12:50:3d:27:89: f5:2a:a4:66:db:38:91:c9:ac:09:09:a9:16:8c:cf:ef:a7:ce: 87:1c:0a:92:e6:ee:a9:ca:e6:29:15:8c:9b:d3:53:54:d0:fb: b7:d2:41:3f:f5:03:49:77:7b:18:a8:e2:cb:fa:4d:20:4a:cd: be:ef:78:25:6b:1d:d4:81:df:39:71:75:62:da:b1:e0:42:da: e9:d1:04:1b:f3:72:60:4e:f6:93:72:dd:02:db:2f:66:14:46: f8:2d:37:43:c7:a0:af:d9:cc:06:19:d7:2b:8d:a4:c1:d9:65: 3e:80:67:20:02:a9:df:ca:84:52:96:4f:55:22:96:9f:19:b5: 37:7a:12:bc:db:11:3d:d2:59:21:ca:26:85:ac:34:e3:b6:68: d6:37:e4:61 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUfUWcbpxzrX1wbOhxYdISu1LuaicwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkRGQjc0NjE0RTM4QUU0MzE4NDJBQ0RDRDNEMDQ1RTZD RkM0QUYzNzAeFw0yNjA1MjQwMzIwMDJaFw0yNjA1MjUwNjEzMDJaMDMxMTAvBgNV BAMTKDQ5MUIyODE4OTQzNTUwNUU1MzdEQ0FDOUQ3NjlBQjE0NUQwQzcyNjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKczPRkgo+js1O9iay9hdmNuda 8/Ni9oyvCp5uF8JIxlPrEutkoENi/HEZ4l88cTJj5bnhhiGAnzR2ilOjXI/TUk5I nfVBFPTWYZP7Zx286UVVUaEGVvmMQK5evYZw7wJfUF0xdWi6XFJ0eSoocV/7TAYl J4OYuaoFht0E/SVZIJZwYFZUduNLrxZ0LGw7Q4fdaa9cNgxdiu8WUPhKUt9rdod+ szj2TVSpAjOh+sZK8PDQdv6wN6aX4awOVWbrMMe2cOgwzL5Ih1hV+x908Cg0mXyh hw1O3KW1XsDixNI81P3kEVgGsOKEMFud2c0qyefP5xSys4Iydj9m5ws5rVtNAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUSRsoGJQ1UF5TfcrJ12mrFF0McmYwHwYDVR0j BBgwFoAUvft0YU44rkMYQqzc09BF5s/ErzcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQmgyaExjeHZWTk16VWJDNGE0anJuQXN1cnZUSFFvNFRUUFNXNVNtNzFj dzMvMC9CREZCNzQ2MTRFMzhBRTQzMTg0MkFDRENEM0QwNDVFNkNGQzRBRjM3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JERkI3NDYxNEUzOEFFNDMx ODQyQUNEQ0QzRDA0NUU2Q0ZDNEFGMzcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QmgyaExjeHZWTk16VWJDNGE0anJuQXN1cnZUSFFvNFRUUFNXNVNtNzFjdzMvMC9C REZCNzQ2MTRFMzhBRTQzMTg0MkFDRENEM0QwNDVFNkNGQzRBRjM3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmdxPKgJOPVqcUKqTcI0xlJ2QzyPI6Y1cntNJFFtHRZCGkpJPPBQ+okoHw5Oj vHMBPaKr7xDWO3k72ju7wYvaxpfziqGV6O84tZJBEXHTcmeJEm6Txu+r5vsbrj7L Eg2Mnwwq1WUzmRJQPSeJ9SqkZts4kcmsCQmpFozP76fOhxwKkubuqcrmKRWMm9NT VND7t9JBP/UDSXd7GKjiy/pNIErNvu94JWsd1IHfOXF1Ytqx4ELa6dEEG/NyYE72 k3LdAtsvZhRG+C03Q8egr9nMBhnXK42kwdllPoBnIAKp38qEUpZPVSKWnxm1N3oS vNsRPdJZIcomhaw047Zo1jfkYQ== -----END CERTIFICATE-----Generated at Sun May 24 18:45:09 2026 by rpki-client