$ rpki-client -vvf rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.mft File: 2D59905C3FCA5BDA34D7101B088D80451D026C47.mft (raw, json) Hash identifier: BQYBD0ViH4meSWBTkq6J/xfJBP6iL+KCzvDT1rphARc= Subject key identifier: E6:01:BE:D8:21:CB:FC:46:E1:BD:95:43:33:FA:87:8F:7B:A0:BC:6C Authority key identifier: 2D:59:90:5C:3F:CA:5B:DA:34:D7:10:1B:08:8D:80:45:1D:02:6C:47 Certificate issuer: /CN=2D59905C3FCA5BDA34D7101B088D80451D026C47 Certificate serial: 671AFAA4F29005BD5B7BE6B1407CE4EEF2FA9707 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.cer Subject info access: rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.mft Manifest number: 040E Signing time: Sun 24 May 2026 10:59:33 +0000 Manifest this update: Sun 24 May 2026 10:54:33 +0000 Manifest next update: Mon 25 May 2026 14:07:33 +0000 Files and hashes: 1: 3137302e38302e3130302e302f32322d3234203d3e20323634323333.roa (hash: qV9NZPspM3KKVhmVe1DENEA4d8wOeW2+jk1EM4bR4c0=) 2: 323830343a323439633a3a2f33322d3438203d3e20323634323333.roa (hash: BCUCHvZ6lEHs09wycHj5SXJHCb72dl7JptkA3RY+Zc4=) 3: 2D59905C3FCA5BDA34D7101B088D80451D026C47.crl (hash: XNfZg5vzFfPFIKVS82qRrdjrrYBnQRgsFbzyKbwiosI=) 4: 3133382e3131372e3131362e302f32322d3234203d3e20323634323333.roa (hash: J7bbVsqDbFPyg+gwra+5+pRDDykaqcSlWQ/kD7KeIGo=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.crl rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 25 May 2026 14:07:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:1a:fa:a4:f2:90:05:bd:5b:7b:e6:b1:40:7c:e4:ee:f2:fa:97:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D59905C3FCA5BDA34D7101B088D80451D026C47 Validity Not Before: May 24 10:54:33 2026 GMT Not After : May 25 14:07:33 2026 GMT Subject: CN=E601BED821CBFC46E1BD954333FA878F7BA0BC6C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:07:27:27:47:2c:96:5a:f1:63:27:63:25:a3: 78:96:c0:e7:2c:43:9a:33:8f:01:4e:23:52:7e:c8: 8e:ee:9b:49:f9:61:8f:9c:bd:a3:0d:be:6c:d4:d2: 2c:dc:ef:54:ae:72:14:4f:95:45:a3:61:f0:b8:ee: 5a:de:cf:11:af:4f:73:24:d4:5b:a4:2c:b7:e9:33: e3:dc:47:28:4d:44:33:65:79:bc:e1:6f:a5:e2:2c: d9:b2:c1:44:f3:1a:cd:45:d1:07:3c:57:52:29:ed: ca:12:f8:f8:3d:43:e4:26:ad:c0:17:e9:f2:1a:25: d3:8a:69:2c:cc:44:a1:4a:bf:fc:c7:e4:57:f1:7e: 61:a4:99:09:fd:8a:e3:9d:87:7c:1a:53:bd:db:ec: 38:ad:27:2c:dd:a9:78:d2:e7:02:e6:08:90:5d:e0: cd:60:be:0a:be:17:74:5c:25:6f:d9:0f:2e:4e:02: c4:89:64:aa:1e:b8:ac:62:47:4a:d6:1c:93:ca:09: 36:54:13:5d:66:d8:6d:ff:30:95:73:9d:23:6b:44: 11:86:55:8e:c2:a9:28:f3:75:81:2a:4b:e6:15:58: b8:3a:c6:a8:ba:cd:a0:d1:1e:f3:b3:bd:77:06:a6: 58:16:99:23:fb:aa:6a:88:93:65:dc:c3:0e:ff:ec: b8:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:01:BE:D8:21:CB:FC:46:E1:BD:95:43:33:FA:87:8F:7B:A0:BC:6C X509v3 Authority Key Identifier: keyid:2D:59:90:5C:3F:CA:5B:DA:34:D7:10:1B:08:8D:80:45:1D:02:6C:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:e2:fd:94:1e:ca:91:61:9c:bc:95:a9:b3:1f:a5:63:56:d1: a5:15:70:e9:00:18:0b:2e:89:93:01:5c:41:04:0c:58:0c:18: 7e:b8:eb:09:b1:d7:dc:0c:b7:a8:a2:1c:52:78:b3:79:54:00: 0a:2f:54:18:6d:8b:6b:c8:d8:d8:80:df:bd:da:11:fb:13:22: aa:31:d9:b2:75:07:aa:36:8a:da:32:73:df:e6:0f:37:a4:ba: 45:93:7b:4b:1e:24:9a:8c:40:a3:0e:a7:3d:98:f8:8f:c1:02: ae:c9:e0:b4:4d:c4:42:60:2e:4e:3b:dc:fe:d0:5e:e5:5d:c6: 19:db:f8:0b:79:cd:0a:cc:b8:fc:2a:fc:d9:e0:05:af:43:6b: 6a:d4:ed:a4:e5:d9:13:9c:81:94:d6:a8:0a:7c:e6:49:69:22: 8b:22:63:bd:dd:3c:25:f8:51:bc:ac:a5:38:85:c2:00:15:42: 64:d5:ed:33:3e:f5:cd:c8:44:2b:3a:45:33:99:f0:de:91:bb: 1c:d5:78:59:d1:ed:d0:b9:6b:b7:d0:95:ab:63:72:4a:24:c3: 18:cf:42:19:82:e1:84:00:7f:88:dd:d8:cb:3b:1d:90:bd:a8: 54:be:31:c4:2a:ee:a4:8c:2e:62:a4:e9:08:bc:7b:24:e6:99: cd:a6:bd:df -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUZxr6pPKQBb1be+axQHzk7vL6lwcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQ1OTkwNUMzRkNBNUJEQTM0RDcxMDFCMDg4RDgwNDUx RDAyNkM0NzAeFw0yNjA1MjQxMDU0MzNaFw0yNjA1MjUxNDA3MzNaMDMxMTAvBgNV BAMTKEU2MDFCRUQ4MjFDQkZDNDZFMUJEOTU0MzMzRkE4NzhGN0JBMEJDNkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtBycnRyyWWvFjJ2Mlo3iWwOcs Q5ozjwFOI1J+yI7um0n5YY+cvaMNvmzU0izc71SuchRPlUWjYfC47lrezxGvT3Mk 1FukLLfpM+PcRyhNRDNlebzhb6XiLNmywUTzGs1F0Qc8V1Ip7coS+Pg9Q+QmrcAX 6fIaJdOKaSzMRKFKv/zH5FfxfmGkmQn9iuOdh3waU73b7DitJyzdqXjS5wLmCJBd 4M1gvgq+F3RcJW/ZDy5OAsSJZKoeuKxiR0rWHJPKCTZUE11m2G3/MJVznSNrRBGG VY7CqSjzdYEqS+YVWLg6xqi6zaDRHvOzvXcGplgWmSP7qmqIk2Xcww7/7LilAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU5gG+2CHL/EbhvZVDM/qHj3ugvGwwHwYDVR0j BBgwFoAULVmQXD/KW9o01xAbCI2ARR0CbEcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRFRTcmFVZEFXV0xoVVlYOXVkM2N5bnlYSDZaZVdjQVZDOHpjR29GaFA5 QUgvMS8yRDU5OTA1QzNGQ0E1QkRBMzRENzEwMUIwODhEODA0NTFEMDI2QzQ3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJENTk5MDVDM0ZDQTVCREEz NEQ3MTAxQjA4OEQ4MDQ1MUQwMjZDNDcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RFRTcmFVZEFXV0xoVVlYOXVkM2N5bnlYSDZaZVdjQVZDOHpjR29GaFA5QUgvMS8y RDU5OTA1QzNGQ0E1QkRBMzRENzEwMUIwODhEODA0NTFEMDI2QzQ3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOuL9lB7KkWGcvJWpsx+lY1bRpRVw6QAYCy6JkwFcQQQMWAwYfrjrCbHX3Ay3 qKIcUnizeVQACi9UGG2La8jY2IDfvdoR+xMiqjHZsnUHqjaK2jJz3+YPN6S6RZN7 Sx4kmoxAow6nPZj4j8ECrsngtE3EQmAuTjvc/tBe5V3GGdv4C3nNCsy4/Cr82eAF r0NratTtpOXZE5yBlNaoCnzmSWkiiyJjvd08JfhRvKylOIXCABVCZNXtMz71zchE KzpFM5nw3pG7HNV4WdHt0Llrt9CVq2NySiTDGM9CGYLhhAB/iN3YyzsdkL2oVL4x xCrupIwuYqTpCLx7JOaZzaa93w== -----END CERTIFICATE-----Generated at Sun May 24 15:31:52 2026 by rpki-client