$ rpki-client -vvf rpki-repo.registro.br/repo/HEBLrTPaDnazxzgkMNuNEsmTb84J8L7YK3Z8prKVd9CJ/0/472E3E98396BB3EBAFB5979EFA79754CD73163FD.mft File: 472E3E98396BB3EBAFB5979EFA79754CD73163FD.mft (raw, json) Hash identifier: rZstnI9Cj1gvUXKSbXcMAazaqd9NJiRyG3JNMvy5Qc4= Subject key identifier: B8:E9:51:53:92:36:0E:FE:FE:B6:3A:6D:D5:E3:48:FB:65:BD:08:D8 Authority key identifier: 47:2E:3E:98:39:6B:B3:EB:AF:B5:97:9E:FA:79:75:4C:D7:31:63:FD Certificate issuer: /CN=472E3E98396BB3EBAFB5979EFA79754CD73163FD Certificate serial: 38E6A73B87EA17BFAA1E4418F9AE13DB290001 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/472E3E98396BB3EBAFB5979EFA79754CD73163FD.cer Subject info access: rsync://rpki-repo.registro.br/repo/HEBLrTPaDnazxzgkMNuNEsmTb84J8L7YK3Z8prKVd9CJ/0/472E3E98396BB3EBAFB5979EFA79754CD73163FD.mft Manifest number: 14 Signing time: Sat 23 May 2026 18:24:44 +0000 Manifest this update: Sat 23 May 2026 18:19:44 +0000 Manifest next update: Sun 24 May 2026 19:40:44 +0000 Files and hashes: 1: 323830343a376264383a3a2f33322d3334203d3e20323731343538.roa (hash: gAdoA7SSa86gPBQqVPbdnELj5dkdm5Iz7zHaY4p2xU4=) 2: 3230312e3133312e34362e302f32342d3234203d3e20323731343538.roa (hash: T+ZoX/D494ZjPRGKzAG75vxr0zRdD68JcXiQ29/f8w0=) 3: 472E3E98396BB3EBAFB5979EFA79754CD73163FD.crl (hash: OI93xw1Rt5CwcFIOWRX6CktoTa/K3FXfMOeeysIQ9fA=) 4: 3138372e3130322e3131312e302f32342d3234203d3e20323731343538.roa (hash: vUrHsqnj9kkb6VSuSoIhEa9dNFN+RZ7bkeXLb9XytA8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HEBLrTPaDnazxzgkMNuNEsmTb84J8L7YK3Z8prKVd9CJ/0/472E3E98396BB3EBAFB5979EFA79754CD73163FD.crl rsync://rpki-repo.registro.br/repo/HEBLrTPaDnazxzgkMNuNEsmTb84J8L7YK3Z8prKVd9CJ/0/472E3E98396BB3EBAFB5979EFA79754CD73163FD.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/472E3E98396BB3EBAFB5979EFA79754CD73163FD.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 May 2026 19:40:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:e6:a7:3b:87:ea:17:bf:aa:1e:44:18:f9:ae:13:db:29:00:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=472E3E98396BB3EBAFB5979EFA79754CD73163FD Validity Not Before: May 23 18:19:44 2026 GMT Not After : May 24 19:40:44 2026 GMT Subject: CN=B8E9515392360EFEFEB63A6DD5E348FB65BD08D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:50:c0:5c:e8:4a:b0:ce:f3:95:67:f1:45:6e: 83:db:80:ef:b6:61:ea:61:8e:ca:7f:2e:c8:5f:48: bc:a4:36:92:99:e0:29:f0:9c:0b:ff:4e:2e:b9:98: b3:a0:89:f1:04:af:3b:47:a0:98:62:61:5d:2e:cc: d4:43:ae:17:a3:67:0e:80:c4:85:19:1a:d1:e3:0e: 0c:b9:8a:1e:c2:9f:01:70:17:e2:97:de:d8:28:10: 63:0d:ff:44:55:82:79:88:cb:59:38:73:f1:a5:d7: 6b:0d:85:fa:c9:aa:a7:18:ef:50:da:66:a0:2c:ee: 45:60:6b:f8:d1:10:1e:e2:ae:cf:eb:57:90:16:7e: a8:90:9a:ba:6e:47:d1:4f:6b:bf:5d:51:99:85:d5: 42:fa:23:23:4d:38:60:3d:9a:31:01:44:48:ef:7a: fd:39:59:2c:56:b6:8d:8e:b0:1e:33:ff:c0:39:13: b2:0e:51:e0:0e:49:b9:79:f3:4f:e0:bf:bb:46:f5: 50:57:a6:4e:12:6b:31:b4:82:76:05:da:30:03:fc: b4:03:57:76:15:ef:4e:70:53:de:cd:ef:99:36:1e: 9a:37:0b:5b:73:9e:09:8f:74:a6:ff:40:4b:db:67: 92:f9:6a:92:06:1f:dc:0e:86:2b:61:a9:6b:90:02: 58:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:E9:51:53:92:36:0E:FE:FE:B6:3A:6D:D5:E3:48:FB:65:BD:08:D8 X509v3 Authority Key Identifier: keyid:47:2E:3E:98:39:6B:B3:EB:AF:B5:97:9E:FA:79:75:4C:D7:31:63:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HEBLrTPaDnazxzgkMNuNEsmTb84J8L7YK3Z8prKVd9CJ/0/472E3E98396BB3EBAFB5979EFA79754CD73163FD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/472E3E98396BB3EBAFB5979EFA79754CD73163FD.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HEBLrTPaDnazxzgkMNuNEsmTb84J8L7YK3Z8prKVd9CJ/0/472E3E98396BB3EBAFB5979EFA79754CD73163FD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:0d:de:dc:f0:ad:96:f6:86:ff:6a:61:5b:a7:f5:21:16:6d: 73:bd:b8:6d:1f:ec:4a:17:a6:9c:a1:23:93:e1:78:9a:5c:b7: 60:69:7c:4a:37:97:43:99:5a:f8:35:02:e5:78:61:78:7c:87: 54:2e:63:76:52:ac:74:06:f9:6f:cd:c4:3e:a9:26:b4:5e:0c: 33:9c:60:fc:57:25:6b:da:23:5b:6b:f8:26:07:cc:d0:65:ae: ed:80:18:37:35:c0:61:df:ad:ba:a6:63:44:cd:5f:63:40:3b: 10:db:27:04:1b:59:af:18:40:3c:d6:35:07:c2:83:cd:39:40: a3:e9:cb:69:61:8e:ae:fe:2a:cb:b3:88:1f:b9:be:1c:0f:76: a1:74:6f:26:ae:4f:7d:3c:8e:24:4c:f5:dc:fe:de:e8:e1:94: a1:24:96:89:8d:9c:8b:98:32:be:20:5f:a6:6f:bd:1c:01:20: 03:4c:fe:26:d0:59:89:2a:9b:76:1a:74:58:2b:72:92:96:05: 80:95:57:b7:d9:7d:08:67:2b:55:ce:44:cd:38:f7:34:17:b4: e6:34:e0:55:44:f5:95:a6:48:fc:67:a3:20:84:ef:06:e6:fd: bc:c1:05:a5:92:04:7a:21:28:44:22:65:d4:95:3a:7c:ba:b5: 76:41:f5:da -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgITOOanO4fqF7+qHkQY+a4T2ykAATANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyg0NzJFM0U5ODM5NkJCM0VCQUZCNTk3OUVGQTc5NzU0Q0Q3 MzE2M0ZEMB4XDTI2MDUyMzE4MTk0NFoXDTI2MDUyNDE5NDA0NFowMzExMC8GA1UE AxMoQjhFOTUxNTM5MjM2MEVGRUZFQjYzQTZERDVFMzQ4RkI2NUJEMDhEODCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAM9QwFzoSrDO85Vn8UVug9uA77Zh 6mGOyn8uyF9IvKQ2kpngKfCcC/9OLrmYs6CJ8QSvO0egmGJhXS7M1EOuF6NnDoDE hRka0eMODLmKHsKfAXAX4pfe2CgQYw3/RFWCeYjLWThz8aXXaw2F+smqpxjvUNpm oCzuRWBr+NEQHuKuz+tXkBZ+qJCaum5H0U9rv11RmYXVQvojI004YD2aMQFESO96 /TlZLFa2jY6wHjP/wDkTsg5R4A5JuXnzT+C/u0b1UFemThJrMbSCdgXaMAP8tANX dhXvTnBT3s3vmTYemjcLW3OeCY90pv9AS9tnkvlqkgYf3A6GK2Gpa5ACWEMCAwEA AaOCAlkwggJVMB0GA1UdDgQWBBS46VFTkjYO/v62Om3V40j7Zb0I2DAfBgNVHSME GDAWgBRHLj6YOWuz66+1l576eXVM1zFj/TAOBgNVHQ8BAf8EBAMCB4AwgZQGA1Ud HwSBjDCBiTCBhqCBg6CBgIZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9IRUJMclRQYURuYXp4emdrTU51TkVzbVRiODRKOEw3WUszWjhwcktWZDlD Si8wLzQ3MkUzRTk4Mzk2QkIzRUJBRkI1OTc5RUZBNzk3NTRDRDczMTYzRkQuY3Js MHgGCCsGAQUFBwEBBGwwajBoBggrBgEFBQcwAoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNDcyRTNFOTgzOTZCQjNFQkFG QjU5NzlFRkE3OTc1NENENzMxNjNGRC5jZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGK BggrBgEFBQcwC4Z+cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9I RUJMclRQYURuYXp4emdrTU51TkVzbVRiODRKOEw3WUszWjhwcktWZDlDSi8wLzQ3 MkUzRTk4Mzk2QkIzRUJBRkI1OTc5RUZBNzk3NTRDRDczMTYzRkQubWZ0MBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAw BgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCCDd7c8K2W9ob/amFbp/UhFm1zvbhtH+xKF6acoSOT4XiaXLdgaXxKN5dDmVr4 NQLleGF4fIdULmN2Uqx0BvlvzcQ+qSa0XgwznGD8VyVr2iNba/gmB8zQZa7tgBg3 NcBh3626pmNEzV9jQDsQ2ycEG1mvGEA81jUHwoPNOUCj6ctpYY6u/irLs4gfub4c D3ahdG8mrk99PI4kTPXc/t7o4ZShJJaJjZyLmDK+IF+mb70cASADTP4m0FmJKpt2 GnRYK3KSlgWAlVe32X0IZytVzkTNOPc0F7TmNOBVRPWVpkj8Z6MghO8G5v28wQWl kgR6IShEImXUlTp8urV2QfXa -----END CERTIFICATE-----Generated at Sun May 24 12:48:12 2026 by rpki-client