$ rpki-client -vvf rpki-repo.registro.br/repo/DiUmZcXnEMHdmeRVFnef9w4M85szfqeGMpX8AiYndRxz/0/5D12A1312FB5F75D6295FAB2BD568B4EEB6F5B60.mft File: 5D12A1312FB5F75D6295FAB2BD568B4EEB6F5B60.mft (raw, json) Hash identifier: qYznbpUmW/HeJCBMsQ0e2ApARNW/mUSFYzpQcwsl2+I= Subject key identifier: A8:6A:68:79:45:79:78:7C:EF:FC:54:22:93:AF:00:A9:49:CA:68:22 Authority key identifier: 5D:12:A1:31:2F:B5:F7:5D:62:95:FA:B2:BD:56:8B:4E:EB:6F:5B:60 Certificate issuer: /CN=5D12A1312FB5F75D6295FAB2BD568B4EEB6F5B60 Certificate serial: 17E0D06FBC42892FDEC6B16253FAEB0D22B304E3 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D12A1312FB5F75D6295FAB2BD568B4EEB6F5B60.cer Subject info access: rsync://rpki-repo.registro.br/repo/DiUmZcXnEMHdmeRVFnef9w4M85szfqeGMpX8AiYndRxz/0/5D12A1312FB5F75D6295FAB2BD568B4EEB6F5B60.mft Manifest number: 34 Signing time: Thu 09 Apr 2026 06:58:56 +0000 Manifest this update: Thu 09 Apr 2026 06:53:56 +0000 Manifest next update: Fri 10 Apr 2026 10:19:56 +0000 Files and hashes: 1: 5D12A1312FB5F75D6295FAB2BD568B4EEB6F5B60.crl (hash: 5KnEXjbBjvUhQ11+oiVyT+7NR/P2egfgEw+RvDzMajI=) 2: 323830343a323363303a3a2f33312d313238203d3e203236323138.roa (hash: z7aSjIWivhLjqWDVK3yChFTk5zq/YZzCCFB7i9gPQls=) 3: 3230302e3135322e33322e302f32302d3332203d3e203236323138.roa (hash: mlaZnm4zNril5/3iBJoOH0e4mcn4jxAx4GE/+qpO8j8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DiUmZcXnEMHdmeRVFnef9w4M85szfqeGMpX8AiYndRxz/0/5D12A1312FB5F75D6295FAB2BD568B4EEB6F5B60.crl rsync://rpki-repo.registro.br/repo/DiUmZcXnEMHdmeRVFnef9w4M85szfqeGMpX8AiYndRxz/0/5D12A1312FB5F75D6295FAB2BD568B4EEB6F5B60.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D12A1312FB5F75D6295FAB2BD568B4EEB6F5B60.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 10 Apr 2026 10:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:e0:d0:6f:bc:42:89:2f:de:c6:b1:62:53:fa:eb:0d:22:b3:04:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5D12A1312FB5F75D6295FAB2BD568B4EEB6F5B60 Validity Not Before: Apr 9 06:53:56 2026 GMT Not After : Apr 10 10:19:56 2026 GMT Subject: CN=A86A68794579787CEFFC542293AF00A949CA6822 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:e6:43:bc:58:40:ed:dd:c9:93:b8:05:ac:94: bb:5b:8a:55:e6:14:10:16:69:aa:25:fa:f1:7d:4f: cc:9d:92:73:32:c4:76:8d:13:b1:36:9d:84:09:27: 18:a9:a2:5f:d0:01:7c:36:f6:83:94:89:18:72:76: d8:ad:1e:dd:57:ca:f7:68:45:c1:d4:33:9a:da:48: c8:cd:13:46:70:14:59:b6:35:3a:f9:fa:a4:0c:61: 68:88:93:7a:77:4c:50:da:d4:37:6e:88:e8:93:96: 15:4e:89:e1:93:9a:81:28:03:08:85:54:ad:cf:61: 79:9f:ab:57:c6:a2:44:32:d0:91:77:ed:90:7d:20: cf:be:2a:94:cc:5d:5a:8a:b8:59:b1:0d:17:4c:e5: c3:46:f7:3e:ab:f6:65:9f:3d:de:20:61:30:32:1b: f2:2d:02:0c:23:51:fb:f1:cf:aa:c6:4a:5a:c4:6e: 2e:6e:56:81:3d:a3:d6:45:29:d6:be:6c:89:13:ef: 8f:2c:76:17:a5:87:d8:9c:c8:70:bc:ad:bc:63:a5: 62:55:55:66:a0:d1:ac:27:1b:54:98:f6:ad:84:71: 66:84:68:19:2d:4b:e2:8b:09:9f:ae:60:67:3b:95: ef:1b:2e:57:e1:87:03:7e:1e:de:4b:62:0c:28:01: b2:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:6A:68:79:45:79:78:7C:EF:FC:54:22:93:AF:00:A9:49:CA:68:22 X509v3 Authority Key Identifier: keyid:5D:12:A1:31:2F:B5:F7:5D:62:95:FA:B2:BD:56:8B:4E:EB:6F:5B:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DiUmZcXnEMHdmeRVFnef9w4M85szfqeGMpX8AiYndRxz/0/5D12A1312FB5F75D6295FAB2BD568B4EEB6F5B60.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D12A1312FB5F75D6295FAB2BD568B4EEB6F5B60.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DiUmZcXnEMHdmeRVFnef9w4M85szfqeGMpX8AiYndRxz/0/5D12A1312FB5F75D6295FAB2BD568B4EEB6F5B60.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:01:7a:23:cb:1a:06:9f:82:2c:f6:91:af:42:40:6a:34:e3: 9c:57:f2:c6:15:5b:30:4d:0b:19:4f:45:0f:69:ec:d0:9b:27: 46:1c:4e:38:f1:b9:12:0b:8e:01:98:c3:60:fa:8d:44:e4:9b: 2c:b8:54:65:01:8c:0f:a8:a9:9d:56:48:19:5b:53:fa:12:92: 63:7c:72:c5:a8:86:35:f6:b0:bf:06:55:fc:54:cb:be:21:85: d5:1e:f4:e7:43:d7:8b:be:51:9d:f2:58:cd:4a:cf:42:66:12: 69:bf:c3:74:dc:3a:11:b2:37:38:4f:c0:ea:e2:32:5b:10:f2: 74:4b:2d:9d:c5:83:bc:56:9a:4e:ab:eb:0b:a7:36:d0:34:be: ec:e1:70:6a:5c:fb:e3:d5:ab:8c:1d:c3:fb:f4:10:74:42:ca: 1b:de:23:cd:35:e8:ca:81:08:6d:79:d7:81:ff:6b:d0:3d:6a: 7d:ef:30:8a:e9:2b:02:55:14:ba:c3:09:e2:a2:85:48:f1:a3: e8:2f:e5:5d:98:18:9c:9e:0d:7c:61:23:49:e9:4a:c3:46:c3: 94:35:31:0d:65:7c:aa:da:38:39:c9:e8:05:78:f4:3f:84:53: 9b:cf:ac:f7:62:24:24:3e:8e:4b:e1:b7:5e:12:35:66:78:15: e4:4f:46:39 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUF+DQb7xCiS/exrFiU/rrDSKzBOMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUQxMkExMzEyRkI1Rjc1RDYyOTVGQUIyQkQ1NjhCNEVF QjZGNUI2MDAeFw0yNjA0MDkwNjUzNTZaFw0yNjA0MTAxMDE5NTZaMDMxMTAvBgNV BAMTKEE4NkE2ODc5NDU3OTc4N0NFRkZDNTQyMjkzQUYwMEE5NDlDQTY4MjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCX5kO8WEDt3cmTuAWslLtbilXm FBAWaaol+vF9T8ydknMyxHaNE7E2nYQJJxipol/QAXw29oOUiRhydtitHt1Xyvdo RcHUM5raSMjNE0ZwFFm2NTr5+qQMYWiIk3p3TFDa1DduiOiTlhVOieGTmoEoAwiF VK3PYXmfq1fGokQy0JF37ZB9IM++KpTMXVqKuFmxDRdM5cNG9z6r9mWfPd4gYTAy G/ItAgwjUfvxz6rGSlrEbi5uVoE9o9ZFKda+bIkT748sdhelh9icyHC8rbxjpWJV VWag0awnG1SY9q2EcWaEaBktS+KLCZ+uYGc7le8bLlfhhwN+Ht5LYgwoAbJ1AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUqGpoeUV5eHzv/FQik68AqUnKaCIwHwYDVR0j BBgwFoAUXRKhMS+1911ilfqyvVaLTutvW2AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRGlVbVpjWG5FTUhkbWVSVkZuZWY5dzRNODVzemZxZUdNcFg4QWlZbmRS eHovMC81RDEyQTEzMTJGQjVGNzVENjI5NUZBQjJCRDU2OEI0RUVCNkY1QjYwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVEMTJBMTMxMkZCNUY3NUQ2 Mjk1RkFCMkJENTY4QjRFRUI2RjVCNjAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RGlVbVpjWG5FTUhkbWVSVkZuZWY5dzRNODVzemZxZUdNcFg4QWlZbmRSeHovMC81 RDEyQTEzMTJGQjVGNzVENjI5NUZBQjJCRDU2OEI0RUVCNkY1QjYwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfgF6I8saBp+CLPaRr0JAajTjnFfyxhVbME0LGU9FD2ns0JsnRhxOOPG5EguO AZjDYPqNROSbLLhUZQGMD6ipnVZIGVtT+hKSY3xyxaiGNfawvwZV/FTLviGF1R70 50PXi75RnfJYzUrPQmYSab/DdNw6EbI3OE/A6uIyWxDydEstncWDvFaaTqvrC6c2 0DS+7OFwalz749WrjB3D+/QQdELKG94jzTXoyoEIbXnXgf9r0D1qfe8wiukrAlUU usMJ4qKFSPGj6C/lXZgYnJ4NfGEjSelKw0bDlDUxDWV8qto4OcnoBXj0P4RTm8+s 92IkJD6OS+G3XhI1ZngV5E9GOQ== -----END CERTIFICATE-----Generated at Thu Apr 9 16:41:15 2026 by rpki-client