$ rpki-client -vvf rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/0/D0CF5320BD24F77F01CED59BA43B352C1FA19294.mft File: D0CF5320BD24F77F01CED59BA43B352C1FA19294.mft (raw, json) Hash identifier: BUFG67eEIYK4v2W6/Hk+VYuOOHVBD0GZIgcV7DMc6jA= Subject key identifier: E7:7D:C4:7E:E2:07:ED:D8:5D:44:E1:10:0A:B7:59:51:58:CF:30:79 Authority key identifier: D0:CF:53:20:BD:24:F7:7F:01:CE:D5:9B:A4:3B:35:2C:1F:A1:92:94 Certificate issuer: /CN=D0CF5320BD24F77F01CED59BA43B352C1FA19294 Certificate serial: 3BA69D09F8B9DFD7F4048807238B601BF92A0FB8 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0CF5320BD24F77F01CED59BA43B352C1FA19294.cer Subject info access: rsync://rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/0/D0CF5320BD24F77F01CED59BA43B352C1FA19294.mft Manifest number: 3D Signing time: Sun 24 May 2026 10:25:21 +0000 Manifest this update: Sun 24 May 2026 10:20:21 +0000 Manifest next update: Mon 25 May 2026 11:03:21 +0000 Files and hashes: 1: D0CF5320BD24F77F01CED59BA43B352C1FA19294.crl (hash: zCeYsxmraHHa+tontHdo7l1AB8SzIvNiVT38lZ4N0Qg=) 2: 323830343a333635633a3a2f33322d313238203d3e20323636333433.roa (hash: CTc/I4oATaUgTnMimYPthSK6cv6XoInRJAu88IlIznw=) 3: 3137302e3233392e342e302f32322d3332203d3e20323636333433.roa (hash: Ew+XSXX5kjV3yvQliJbXhg9r/kN5uUZU+7rqkq7LYtw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/0/D0CF5320BD24F77F01CED59BA43B352C1FA19294.crl rsync://rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/0/D0CF5320BD24F77F01CED59BA43B352C1FA19294.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0CF5320BD24F77F01CED59BA43B352C1FA19294.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 25 May 2026 11:03:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:a6:9d:09:f8:b9:df:d7:f4:04:88:07:23:8b:60:1b:f9:2a:0f:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0CF5320BD24F77F01CED59BA43B352C1FA19294 Validity Not Before: May 24 10:20:21 2026 GMT Not After : May 25 11:03:21 2026 GMT Subject: CN=E77DC47EE207EDD85D44E1100AB7595158CF3079 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ca:d9:ea:bb:70:7b:03:a8:5d:89:5c:ea:13: 5c:c9:56:b1:57:3b:c1:e4:65:38:36:fb:1d:5d:12: 5e:12:09:c8:d2:a9:b7:cf:ff:43:94:9d:3b:a5:78: 63:7b:48:df:a7:4d:b4:60:44:48:bf:e2:d7:cd:4c: 02:8f:d8:54:4b:45:00:3c:62:2e:f4:d7:fa:66:9e: 80:21:1f:1b:0f:9d:e2:84:fa:76:4f:78:ee:72:99: 6e:93:03:7f:f5:1b:8b:4a:1b:8f:17:96:b8:e7:97: d7:9f:3e:21:bc:ca:3a:52:3e:78:fb:63:2f:e5:f8: 1f:5d:a6:09:e3:32:fd:9e:d8:8d:f7:72:a4:f0:45: 20:f1:4c:ba:79:f2:d9:9a:17:6b:e3:e5:e7:54:f5: 7d:d8:90:b3:ed:f6:dc:6a:44:8b:87:c0:16:12:e6: 83:1a:6d:25:55:ad:0c:a9:c8:20:b2:c2:49:ff:de: 83:ab:8d:32:13:12:99:7e:3f:b7:b2:a1:22:76:de: fa:33:a9:aa:00:55:54:29:fb:05:cc:8a:bc:78:e2: 3d:44:2a:c5:f1:19:7b:62:ec:92:7d:ca:3d:3c:c6: 5e:56:00:7e:d6:b5:7d:6e:df:84:a5:1e:b8:f1:ca: 3d:9a:a8:9c:c6:d4:4a:5c:22:9c:9f:af:3f:f9:12: 51:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:7D:C4:7E:E2:07:ED:D8:5D:44:E1:10:0A:B7:59:51:58:CF:30:79 X509v3 Authority Key Identifier: keyid:D0:CF:53:20:BD:24:F7:7F:01:CE:D5:9B:A4:3B:35:2C:1F:A1:92:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/0/D0CF5320BD24F77F01CED59BA43B352C1FA19294.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0CF5320BD24F77F01CED59BA43B352C1FA19294.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/0/D0CF5320BD24F77F01CED59BA43B352C1FA19294.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:b1:36:dd:f6:8f:76:c2:1f:2e:3b:d0:80:67:a3:57:fd:c1: de:8d:76:66:d7:cf:2e:d5:e8:41:f2:ad:9a:33:1a:3f:53:42: 4d:a5:10:3f:a0:fe:c9:a7:78:b2:5b:68:28:83:8b:18:9b:2b: ec:5c:e9:bf:e0:51:38:64:7b:9e:5f:78:fb:82:1c:18:64:7e: a5:cd:fc:04:11:7a:81:10:0b:66:aa:c1:d2:4f:48:4b:d2:7d: 11:48:74:30:7a:f4:1e:e0:c0:e1:f8:5b:dd:31:00:b4:8a:60: 43:f1:e6:a2:7d:d0:8f:df:a2:c6:62:c5:db:17:e4:3b:ae:cc: 9b:78:c6:1b:70:dd:8f:63:41:ef:5d:e9:64:7d:56:e6:f4:05: 70:27:8a:fd:e7:68:63:7c:66:67:ca:27:44:a7:2f:a2:1f:32: 71:41:e0:7b:d6:47:11:3c:6e:45:90:4d:1b:43:29:e8:b1:1e: 01:64:97:e9:d0:a4:d3:7a:a8:06:60:13:09:db:f6:61:e7:2a: d6:95:72:5f:9f:16:52:85:05:05:85:8a:fc:b6:f1:07:e7:9e: ef:a8:30:aa:aa:3a:8c:07:26:04:d5:58:31:2d:c1:27:dc:c8: 90:00:d8:82:c5:85:96:0f:94:22:23:8a:29:4a:36:6d:de:d6: ec:f8:b6:12 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUO6adCfi539f0BIgHI4tgG/kqD7gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDBDRjUzMjBCRDI0Rjc3RjAxQ0VENTlCQTQzQjM1MkMx RkExOTI5NDAeFw0yNjA1MjQxMDIwMjFaFw0yNjA1MjUxMTAzMjFaMDMxMTAvBgNV BAMTKEU3N0RDNDdFRTIwN0VERDg1RDQ0RTExMDBBQjc1OTUxNThDRjMwNzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/ytnqu3B7A6hdiVzqE1zJVrFX O8HkZTg2+x1dEl4SCcjSqbfP/0OUnTuleGN7SN+nTbRgREi/4tfNTAKP2FRLRQA8 Yi701/pmnoAhHxsPneKE+nZPeO5ymW6TA3/1G4tKG48Xlrjnl9efPiG8yjpSPnj7 Yy/l+B9dpgnjMv2e2I33cqTwRSDxTLp58tmaF2vj5edU9X3YkLPt9txqRIuHwBYS 5oMabSVVrQypyCCywkn/3oOrjTITEpl+P7eyoSJ23vozqaoAVVQp+wXMirx44j1E KsXxGXti7JJ9yj08xl5WAH7WtX1u34SlHrjxyj2aqJzG1EpcIpyfrz/5ElEjAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU533EfuIH7dhdROEQCrdZUVjPMHkwHwYDVR0j BBgwFoAU0M9TIL0k938BztWbpDs1LB+hkpQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRUtNTjZWbUNuSjNhbWQ4cndSVzlmR1paZ0JLOWRCbXFiemRCd21tZ3Bl U2UvMC9EMENGNTMyMEJEMjRGNzdGMDFDRUQ1OUJBNDNCMzUyQzFGQTE5Mjk0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QwQ0Y1MzIwQkQyNEY3N0Yw MUNFRDU5QkE0M0IzNTJDMUZBMTkyOTQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RUtNTjZWbUNuSjNhbWQ4cndSVzlmR1paZ0JLOWRCbXFiemRCd21tZ3BlU2UvMC9E MENGNTMyMEJEMjRGNzdGMDFDRUQ1OUJBNDNCMzUyQzFGQTE5Mjk0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJrE23faPdsIfLjvQgGejV/3B3o12ZtfPLtXoQfKtmjMaP1NCTaUQP6D+yad4 sltoKIOLGJsr7Fzpv+BROGR7nl94+4IcGGR+pc38BBF6gRALZqrB0k9IS9J9EUh0 MHr0HuDA4fhb3TEAtIpgQ/Hmon3Qj9+ixmLF2xfkO67Mm3jGG3Ddj2NB713pZH1W 5vQFcCeK/edoY3xmZ8onRKcvoh8ycUHge9ZHETxuRZBNG0Mp6LEeAWSX6dCk03qo BmATCdv2Yecq1pVyX58WUoUFBYWK/LbxB+ee76gwqqo6jAcmBNVYMS3BJ9zIkADY gsWFlg+UIiOKKUo2bd7W7Pi2Eg== -----END CERTIFICATE-----Generated at Sun May 24 12:48:08 2026 by rpki-client