$ rpki-client -vvf rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/0/2159A2A607956D399271CDC6A3AC1E80617FEEE1.mft File: 2159A2A607956D399271CDC6A3AC1E80617FEEE1.mft (raw, json) Hash identifier: vqMGs2lRE9FxN1YafuCFelTdkN7mZPKpwRmUTQliyuA= Subject key identifier: 38:2B:1A:E5:FE:49:4D:B4:87:BB:2A:86:72:FE:F7:90:99:14:2B:3E Authority key identifier: 21:59:A2:A6:07:95:6D:39:92:71:CD:C6:A3:AC:1E:80:61:7F:EE:E1 Certificate issuer: /CN=2159A2A607956D399271CDC6A3AC1E80617FEEE1 Certificate serial: 14531214E8CB200B0DE3CA7644217CF0F53FFB63 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2159A2A607956D399271CDC6A3AC1E80617FEEE1.cer Subject info access: rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/0/2159A2A607956D399271CDC6A3AC1E80617FEEE1.mft Manifest number: 0F Signing time: Sun 24 May 2026 08:04:22 +0000 Manifest this update: Sun 24 May 2026 07:59:22 +0000 Manifest next update: Mon 25 May 2026 10:39:22 +0000 Files and hashes: 1: 2159A2A607956D399271CDC6A3AC1E80617FEEE1.crl (hash: QskTn6nWCyxCuxGaScG4NKrOrvPpfol1WB5ih6DWUaE=) 2: 323830343a6233383a3a2f33322d3438203d3e203532373538.roa (hash: yFx3ehbs6kD1O83Pz1zQ+DNga8Y7rEsJ/HhUCporP4Y=) 3: 3137372e33382e3138342e302f32312d3234203d3e203532373538.roa (hash: 3GyCzw9okLmCV3Lo5NKPmIHHgFYBF0+I3/BzpS37XJo=) 4: 3230312e3133312e3234302e302f32312d3234203d3e203532373538.roa (hash: C3+R5TJjILqRWqKKZFKMcGNRlcVwLelyy+SPnF/wG10=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/0/2159A2A607956D399271CDC6A3AC1E80617FEEE1.crl rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/0/2159A2A607956D399271CDC6A3AC1E80617FEEE1.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2159A2A607956D399271CDC6A3AC1E80617FEEE1.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 25 May 2026 10:39:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:53:12:14:e8:cb:20:0b:0d:e3:ca:76:44:21:7c:f0:f5:3f:fb:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2159A2A607956D399271CDC6A3AC1E80617FEEE1 Validity Not Before: May 24 07:59:22 2026 GMT Not After : May 25 10:39:22 2026 GMT Subject: CN=382B1AE5FE494DB487BB2A8672FEF79099142B3E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:31:ce:b8:fe:d1:9e:c0:85:61:3f:00:a5:75: d0:eb:d8:14:63:36:f5:4a:57:42:61:69:a8:b9:9a: fb:1a:6a:f6:0e:52:76:37:c9:09:82:7f:52:c7:76: 05:f7:08:10:a9:e3:b0:aa:2f:d9:49:8f:9f:a9:ad: ff:9c:63:2d:6c:79:07:a1:a3:27:8e:2f:03:22:d6: d3:df:7e:2a:94:fe:d1:9c:4c:2c:aa:65:55:c9:71: 70:5c:83:50:f4:7c:e0:65:e0:dd:84:58:b5:c1:d2: 40:74:fe:c7:f3:0e:03:f7:5a:d7:a7:82:25:fd:1d: b7:72:00:93:96:f4:d0:59:6d:98:80:78:b0:a8:79: 5b:0c:b8:31:46:ac:a8:a3:61:5a:f1:95:e5:96:fd: 1f:7e:44:05:05:d1:ed:f9:1d:f7:0b:8a:e6:f3:20: ea:bc:7d:ca:92:3d:06:e8:dd:d1:88:ef:28:29:41: ce:69:91:66:87:b7:c9:be:13:4c:45:67:cc:5f:b6: 24:60:79:51:30:6e:02:5e:5c:24:01:b3:97:57:1a: c7:ef:31:7d:46:95:ca:83:37:7c:4d:f3:0c:70:39: 99:b1:11:ee:8d:4a:9b:8d:83:2d:f6:e0:ff:33:d8: c2:be:47:e0:90:50:12:00:77:f9:3e:79:a7:b4:44: e5:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:2B:1A:E5:FE:49:4D:B4:87:BB:2A:86:72:FE:F7:90:99:14:2B:3E X509v3 Authority Key Identifier: keyid:21:59:A2:A6:07:95:6D:39:92:71:CD:C6:A3:AC:1E:80:61:7F:EE:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/0/2159A2A607956D399271CDC6A3AC1E80617FEEE1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2159A2A607956D399271CDC6A3AC1E80617FEEE1.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/0/2159A2A607956D399271CDC6A3AC1E80617FEEE1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:33:bc:df:23:3c:8a:88:88:a5:cd:a2:89:27:14:f1:e7:c7: 93:23:41:82:c1:9a:66:72:29:01:e0:75:e5:69:99:ae:bc:1d: e6:dd:15:84:68:31:03:42:bc:af:e5:08:ad:a8:fa:5c:14:59: b0:66:b5:dc:49:95:00:b5:4b:5d:34:e6:11:2f:06:a4:21:dc: c4:60:00:8a:a7:eb:c0:62:f9:7a:af:f9:cc:b1:58:c8:1b:24: 49:63:99:1b:3c:c0:f1:ff:a0:86:10:2d:1e:47:ef:e6:20:e6: 5b:74:36:25:72:a7:a8:65:53:47:60:a1:cb:a1:06:09:65:ee: d1:a6:3b:eb:f3:3a:82:e4:84:52:0c:0b:0c:e4:7f:c4:af:0f: 4d:7a:45:d2:94:24:5e:08:13:41:ef:5b:bf:b3:f3:06:5a:e0: fc:97:87:c9:24:41:b4:46:d2:85:d3:ff:ca:d4:72:d7:49:73: 8a:f2:f9:ff:d0:45:8c:c1:fd:4d:9b:c3:c9:d8:cb:cc:3e:f0: 55:93:1f:68:08:7f:ac:0f:7d:c2:51:1e:85:c8:b7:9e:7b:3e: 49:e2:8b:73:a7:0f:bc:f9:e4:09:3d:0a:15:80:74:69:ec:49: e5:15:67:6c:58:71:bd:c3:7a:8c:bb:b1:c0:9c:76:04:7b:d1: 8e:69:29:f6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUFFMSFOjLIAsN48p2RCF88PU/+2MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE1OUEyQTYwNzk1NkQzOTkyNzFDREM2QTNBQzFFODA2 MTdGRUVFMTAeFw0yNjA1MjQwNzU5MjJaFw0yNjA1MjUxMDM5MjJaMDMxMTAvBgNV BAMTKDM4MkIxQUU1RkU0OTREQjQ4N0JCMkE4NjcyRkVGNzkwOTkxNDJCM0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjMc64/tGewIVhPwClddDr2BRj NvVKV0Jhaai5mvsaavYOUnY3yQmCf1LHdgX3CBCp47CqL9lJj5+prf+cYy1seQeh oyeOLwMi1tPffiqU/tGcTCyqZVXJcXBcg1D0fOBl4N2EWLXB0kB0/sfzDgP3Wten giX9HbdyAJOW9NBZbZiAeLCoeVsMuDFGrKijYVrxleWW/R9+RAUF0e35HfcLiubz IOq8fcqSPQbo3dGI7ygpQc5pkWaHt8m+E0xFZ8xftiRgeVEwbgJeXCQBs5dXGsfv MX1GlcqDN3xN8wxwOZmxEe6NSpuNgy324P8z2MK+R+CQUBIAd/k+eae0ROWvAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUOCsa5f5JTbSHuyqGcv73kJkUKz4wHwYDVR0j BBgwFoAUIVmipgeVbTmScc3Go6wegGF/7uEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR25yREU2MTdxa2ppN2o0ODVtdXR1OWRXNkFhd3BvVlN5UzNqYVR4YjR1 c2gvMC8yMTU5QTJBNjA3OTU2RDM5OTI3MUNEQzZBM0FDMUU4MDYxN0ZFRUUxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIxNTlBMkE2MDc5NTZEMzk5 MjcxQ0RDNkEzQUMxRTgwNjE3RkVFRTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R25yREU2MTdxa2ppN2o0ODVtdXR1OWRXNkFhd3BvVlN5UzNqYVR4YjR1c2gvMC8y MTU5QTJBNjA3OTU2RDM5OTI3MUNEQzZBM0FDMUU4MDYxN0ZFRUUxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFjO83yM8ioiIpc2iiScU8efHkyNBgsGaZnIpAeB15WmZrrwd5t0VhGgxA0K8 r+UIraj6XBRZsGa13EmVALVLXTTmES8GpCHcxGAAiqfrwGL5eq/5zLFYyBskSWOZ GzzA8f+ghhAtHkfv5iDmW3Q2JXKnqGVTR2Chy6EGCWXu0aY76/M6guSEUgwLDOR/ xK8PTXpF0pQkXggTQe9bv7PzBlrg/JeHySRBtEbShdP/ytRy10lzivL5/9BFjMH9 TZvDydjLzD7wVZMfaAh/rA99wlEehci3nns+SeKLc6cPvPnkCT0KFYB0aexJ5RVn bFhxvcN6jLuxwJx2BHvRjmkp9g== -----END CERTIFICATE-----Generated at Sun May 24 12:47:58 2026 by rpki-client