$ rpki-client -vvf rpki-repo.registro.br/repo/GkWNB2LuNoxCexi2UYrW6jzkC2UUGDZnWP5x191yoWcM/1/7CD32787AF54793C40E640D59B41C4E38532BB54.mft File: 7CD32787AF54793C40E640D59B41C4E38532BB54.mft (raw, json) Hash identifier: LAnHo6QCGiSgQg+d0hzwB5RNNd3AkmFbku2DQ43x4RM= Subject key identifier: 40:E8:71:24:ED:9D:2E:9C:5B:F5:30:11:B0:E3:9D:BE:D2:DE:76:A8 Authority key identifier: 7C:D3:27:87:AF:54:79:3C:40:E6:40:D5:9B:41:C4:E3:85:32:BB:54 Certificate issuer: /CN=7CD32787AF54793C40E640D59B41C4E38532BB54 Certificate serial: 0FA3D9EAB164C328F4EAB3E8AE5C49CBBDA6FEFF Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CD32787AF54793C40E640D59B41C4E38532BB54.cer Subject info access: rsync://rpki-repo.registro.br/repo/GkWNB2LuNoxCexi2UYrW6jzkC2UUGDZnWP5x191yoWcM/1/7CD32787AF54793C40E640D59B41C4E38532BB54.mft Manifest number: 041A Signing time: Sat 23 May 2026 18:18:41 +0000 Manifest this update: Sat 23 May 2026 18:13:41 +0000 Manifest next update: Sun 24 May 2026 21:55:41 +0000 Files and hashes: 1: 323830343a353537343a3a2f33362d3336203d3e20323637393336.roa (hash: OmifMEDKFXOg1SRetP2/Jvi2WP9LAGSHAHm6uL/zTMw=) 2: 7CD32787AF54793C40E640D59B41C4E38532BB54.crl (hash: o1gdI+WdpekIWZ7G2hbHn6EJxymqk6ICHI56xYJjFLs=) 3: 323830343a353537343a3a2f33322d3332203d3e20323637393336.roa (hash: r4TzvjtKv3tH6vAwVbyPi0hBqLs8pSqsxfQxb6vamKQ=) 4: 34352e3136362e35322e302f32322d3234203d3e20323637393336.roa (hash: 2iJs3IlaGQuwy4tMurX+N81gddg+F8h+Ovt5wJayVqI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GkWNB2LuNoxCexi2UYrW6jzkC2UUGDZnWP5x191yoWcM/1/7CD32787AF54793C40E640D59B41C4E38532BB54.crl rsync://rpki-repo.registro.br/repo/GkWNB2LuNoxCexi2UYrW6jzkC2UUGDZnWP5x191yoWcM/1/7CD32787AF54793C40E640D59B41C4E38532BB54.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CD32787AF54793C40E640D59B41C4E38532BB54.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 May 2026 21:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:a3:d9:ea:b1:64:c3:28:f4:ea:b3:e8:ae:5c:49:cb:bd:a6:fe:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7CD32787AF54793C40E640D59B41C4E38532BB54 Validity Not Before: May 23 18:13:41 2026 GMT Not After : May 24 21:55:41 2026 GMT Subject: CN=40E87124ED9D2E9C5BF53011B0E39DBED2DE76A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a4:ea:c7:97:e2:b2:21:ea:4d:ee:50:6c:8e: 02:6d:e8:3c:0f:ad:58:ea:3c:21:18:a8:8b:48:46: 57:0e:1c:d3:cb:83:f8:40:c7:f9:4e:43:a0:d1:a6: 08:e6:ad:6c:c7:b8:18:79:73:e3:4a:d2:f2:99:2a: 9e:f1:6f:8f:57:b5:00:a5:de:5f:b9:ec:e1:1c:75: 51:a2:6e:95:71:cc:10:97:29:9f:5f:56:0c:c6:58: c2:29:cf:2e:72:93:ce:75:65:b8:0e:42:0c:74:59: 3a:df:c5:ac:ed:19:ec:23:e8:f6:f8:65:3f:7d:b4: 2c:47:d6:6b:37:7e:a7:12:bb:96:aa:1d:66:e3:9a: 5d:dc:2d:21:e7:71:8c:17:20:9e:45:96:ee:f3:f0: 6c:e0:30:ef:22:c3:4b:16:15:0f:16:e1:85:5f:38: 91:18:57:74:76:a7:fe:68:72:b4:59:b9:9f:98:d8: 3b:d4:70:fb:7c:46:f6:a4:7d:71:fc:fd:71:a1:c2: ac:be:e1:ce:a8:06:4e:f2:2a:6c:ae:e4:b9:ae:ac: 6e:de:02:15:71:21:1b:19:3f:f3:5f:31:64:fc:ba: c2:bd:6b:a0:6b:7b:1c:45:4c:b1:c9:d1:97:7f:d6: 23:54:dd:e8:a4:ab:13:d4:40:3b:43:7f:84:0c:09: 46:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:E8:71:24:ED:9D:2E:9C:5B:F5:30:11:B0:E3:9D:BE:D2:DE:76:A8 X509v3 Authority Key Identifier: keyid:7C:D3:27:87:AF:54:79:3C:40:E6:40:D5:9B:41:C4:E3:85:32:BB:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GkWNB2LuNoxCexi2UYrW6jzkC2UUGDZnWP5x191yoWcM/1/7CD32787AF54793C40E640D59B41C4E38532BB54.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CD32787AF54793C40E640D59B41C4E38532BB54.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GkWNB2LuNoxCexi2UYrW6jzkC2UUGDZnWP5x191yoWcM/1/7CD32787AF54793C40E640D59B41C4E38532BB54.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:34:ce:68:17:13:1f:11:62:67:15:95:e0:f0:fc:e5:2d:85: 7b:66:56:17:cc:6e:a7:60:fd:8a:20:23:f1:d7:6a:6a:35:4c: ea:7e:21:08:0c:3d:f8:32:7c:0f:72:86:3c:7b:c3:b4:3a:fe: 94:b8:85:84:f6:58:3f:e6:4b:80:f2:20:ba:1d:bf:15:24:16: f8:af:a8:0e:82:55:94:98:5b:71:39:44:04:03:92:d6:b3:f5: 7e:b2:5b:37:eb:e9:c3:f5:f6:41:be:f4:df:a3:61:46:e2:69: 3d:88:51:da:f9:b2:05:d0:a5:a6:79:38:48:f5:1b:fa:74:21: d9:60:c9:0c:1a:23:70:33:7d:0b:c8:f4:bd:80:dc:de:24:cf: 1f:c4:a5:bc:9e:0e:1d:79:fd:3c:b6:ff:c9:b9:75:74:57:8e: a7:69:82:1d:b6:6a:7e:c9:6d:ef:a3:26:7a:ed:00:5a:ab:96: cc:25:69:4a:8c:6c:47:e9:78:68:42:ad:04:32:7f:ab:d9:a1: 2a:e1:6b:19:d1:21:64:b8:e0:83:10:44:0d:53:96:82:2e:f6: 5b:48:9a:e5:87:a8:23:1f:17:a7:80:e8:53:b4:a0:ab:0a:d3: 3e:3a:2c:e7:b1:ff:fc:b8:7d:fe:b5:fd:b2:a3:6b:a8:bb:1a: 5f:6d:76:10 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUD6PZ6rFkwyj06rPorlxJy72m/v8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0NEMzI3ODdBRjU0NzkzQzQwRTY0MEQ1OUI0MUM0RTM4 NTMyQkI1NDAeFw0yNjA1MjMxODEzNDFaFw0yNjA1MjQyMTU1NDFaMDMxMTAvBgNV BAMTKDQwRTg3MTI0RUQ5RDJFOUM1QkY1MzAxMUIwRTM5REJFRDJERTc2QTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9pOrHl+KyIepN7lBsjgJt6DwP rVjqPCEYqItIRlcOHNPLg/hAx/lOQ6DRpgjmrWzHuBh5c+NK0vKZKp7xb49XtQCl 3l+57OEcdVGibpVxzBCXKZ9fVgzGWMIpzy5yk851ZbgOQgx0WTrfxaztGewj6Pb4 ZT99tCxH1ms3fqcSu5aqHWbjml3cLSHncYwXIJ5Flu7z8GzgMO8iw0sWFQ8W4YVf OJEYV3R2p/5ocrRZuZ+Y2DvUcPt8RvakfXH8/XGhwqy+4c6oBk7yKmyu5LmurG7e AhVxIRsZP/NfMWT8usK9a6BrexxFTLHJ0Zd/1iNU3eikqxPUQDtDf4QMCUYtAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUQOhxJO2dLpxb9TARsOOdvtLedqgwHwYDVR0j BBgwFoAUfNMnh69UeTxA5kDVm0HE44Uyu1QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR2tXTkIyTHVOb3hDZXhpMlVZclc2anprQzJVVUdEWm5XUDV4MTkxeW9X Y00vMS83Q0QzMjc4N0FGNTQ3OTNDNDBFNjQwRDU5QjQxQzRFMzg1MzJCQjU0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdDRDMyNzg3QUY1NDc5M0M0 MEU2NDBENTlCNDFDNEUzODUzMkJCNTQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R2tXTkIyTHVOb3hDZXhpMlVZclc2anprQzJVVUdEWm5XUDV4MTkxeW9XY00vMS83 Q0QzMjc4N0FGNTQ3OTNDNDBFNjQwRDU5QjQxQzRFMzg1MzJCQjU0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhTTOaBcTHxFiZxWV4PD85S2Fe2ZWF8xup2D9iiAj8ddqajVM6n4hCAw9+DJ8 D3KGPHvDtDr+lLiFhPZYP+ZLgPIguh2/FSQW+K+oDoJVlJhbcTlEBAOS1rP1frJb N+vpw/X2Qb7036NhRuJpPYhR2vmyBdClpnk4SPUb+nQh2WDJDBojcDN9C8j0vYDc 3iTPH8SlvJ4OHXn9PLb/ybl1dFeOp2mCHbZqfslt76Mmeu0AWquWzCVpSoxsR+l4 aEKtBDJ/q9mhKuFrGdEhZLjggxBEDVOWgi72W0ia5YeoIx8Xp4DoU7SgqwrTPjos 57H//Lh9/rX9sqNrqLsaX212EA== -----END CERTIFICATE-----Generated at Sun May 24 14:15:25 2026 by rpki-client