$ rpki-client -vvf rpki-repo.registro.br/repo/HTyh3GZCFbbAYpNH1kXoHxxitJaWYWR4P3Pog2N5BrRH/1/B8AF00843C9024B68AE3EC4331E753B7B2B422DF.mft File: B8AF00843C9024B68AE3EC4331E753B7B2B422DF.mft (raw, json) Hash identifier: 57/+nREY1KOxFsZLEmv4m7kF+ncC6N9UsVith92rAc0= Subject key identifier: 4C:63:36:1D:DF:24:F7:11:63:B1:D5:B5:24:33:88:24:26:FB:ED:AD Authority key identifier: B8:AF:00:84:3C:90:24:B6:8A:E3:EC:43:31:E7:53:B7:B2:B4:22:DF Certificate issuer: /CN=B8AF00843C9024B68AE3EC4331E753B7B2B422DF Certificate serial: 1B20260E29C1274FDA28F3643D2C1F0BE0422C62 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8AF00843C9024B68AE3EC4331E753B7B2B422DF.cer Subject info access: rsync://rpki-repo.registro.br/repo/HTyh3GZCFbbAYpNH1kXoHxxitJaWYWR4P3Pog2N5BrRH/1/B8AF00843C9024B68AE3EC4331E753B7B2B422DF.mft Manifest number: 0409 Signing time: Sun 24 May 2026 08:37:58 +0000 Manifest this update: Sun 24 May 2026 08:32:58 +0000 Manifest next update: Mon 25 May 2026 10:03:58 +0000 Files and hashes: 1: 3137302e302e36382e302f32322d3332203d3e20323634393633.roa (hash: VYej78JcpqPEEZLXLzhwSPB2VlOIApr/1pd6s3ifVWk=) 2: B8AF00843C9024B68AE3EC4331E753B7B2B422DF.crl (hash: BJlYNnCXDx2TJCsXUKvLCkQ181M8TzuOLttkhynRSXA=) 3: 323830343a333039383a3a2f33322d313238203d3e20323634393633.roa (hash: PKGVa0L+swMi+O3jto7r5DSG35H4tJns957ocZd1fek=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HTyh3GZCFbbAYpNH1kXoHxxitJaWYWR4P3Pog2N5BrRH/1/B8AF00843C9024B68AE3EC4331E753B7B2B422DF.crl rsync://rpki-repo.registro.br/repo/HTyh3GZCFbbAYpNH1kXoHxxitJaWYWR4P3Pog2N5BrRH/1/B8AF00843C9024B68AE3EC4331E753B7B2B422DF.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8AF00843C9024B68AE3EC4331E753B7B2B422DF.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 25 May 2026 10:03:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:20:26:0e:29:c1:27:4f:da:28:f3:64:3d:2c:1f:0b:e0:42:2c:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8AF00843C9024B68AE3EC4331E753B7B2B422DF Validity Not Before: May 24 08:32:58 2026 GMT Not After : May 25 10:03:58 2026 GMT Subject: CN=4C63361DDF24F71163B1D5B52433882426FBEDAD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:04:83:3b:36:ad:f3:f5:ca:f3:c5:15:2c:59: dd:71:e2:29:6b:0b:f8:25:36:dd:22:bf:cb:3d:d3: 3e:66:fb:f1:d6:86:f2:c4:83:bc:59:f1:bc:81:ef: 31:91:39:c0:6c:fc:77:5e:64:d3:ab:88:51:d0:47: cb:6b:d0:ee:4e:20:51:81:0e:6e:02:27:51:54:52: 44:20:0e:d4:80:2b:31:cf:ea:09:37:c5:cc:8f:9b: 5d:3f:b7:82:10:9e:b9:67:40:f8:f9:8c:1d:e2:af: 95:0c:d9:30:13:45:50:1c:5a:69:9a:d4:99:ac:f3: d7:9a:1b:a5:cf:90:4e:8c:3f:95:e9:9c:85:98:30: 1e:87:70:96:5a:13:f1:aa:76:89:2d:e0:3a:3e:4d: ed:ef:03:d9:15:85:2e:b2:24:67:21:7e:cb:1a:9f: 04:14:1c:44:7e:a5:d2:0c:97:03:90:10:42:75:59: ca:ff:d1:97:6a:61:74:29:43:d4:71:03:d1:74:c9: dd:9d:33:76:23:68:70:e3:70:e2:ef:8e:ab:0d:c2: 7f:18:00:0a:99:ad:1c:99:b1:c7:73:a2:c9:d6:0a: 7c:cf:17:a2:95:62:38:57:22:99:34:48:b9:24:b3: 57:65:d4:f3:15:6d:5f:02:14:8b:19:fc:90:a9:af: c3:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:63:36:1D:DF:24:F7:11:63:B1:D5:B5:24:33:88:24:26:FB:ED:AD X509v3 Authority Key Identifier: keyid:B8:AF:00:84:3C:90:24:B6:8A:E3:EC:43:31:E7:53:B7:B2:B4:22:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HTyh3GZCFbbAYpNH1kXoHxxitJaWYWR4P3Pog2N5BrRH/1/B8AF00843C9024B68AE3EC4331E753B7B2B422DF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8AF00843C9024B68AE3EC4331E753B7B2B422DF.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HTyh3GZCFbbAYpNH1kXoHxxitJaWYWR4P3Pog2N5BrRH/1/B8AF00843C9024B68AE3EC4331E753B7B2B422DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:fd:56:20:13:6e:12:b9:03:7f:d0:0d:41:93:30:de:32:f9: 86:95:df:b4:fd:82:55:b3:26:07:99:e0:4d:58:9b:62:2a:af: 48:f6:92:1b:cb:c8:b6:82:43:93:3f:16:85:a1:77:ce:e9:65: 5f:24:02:ab:98:bb:83:8b:76:a3:8e:77:d3:07:89:f7:dd:b9: 3a:ba:92:6b:8e:c1:85:2e:78:d3:e0:88:64:38:0b:ea:5d:10: cd:3d:42:80:0d:05:4c:d8:8f:ea:38:44:b3:ac:2f:65:cd:2a: 43:c1:b6:b1:42:19:20:f1:d8:77:f2:20:d0:70:13:a9:6f:31: 9f:a9:77:5e:fb:70:ea:c5:02:a3:57:e1:f0:ab:37:4d:14:91: 9d:e1:4a:45:e6:64:be:39:9c:6c:1f:5f:ad:c3:e4:0c:af:97: 63:54:83:7c:41:b6:30:f0:15:1a:b9:e0:4d:8d:80:d3:51:e1: 8d:d0:34:1a:7b:09:df:7e:3b:96:96:db:51:95:77:53:b0:c5: 64:89:7c:be:94:1e:a6:64:21:e4:84:4a:d8:2e:58:fd:04:e0: 7f:1f:54:5f:c7:7e:b4:be:57:2f:45:3e:45:d0:a8:0f:91:19: 8e:cd:0e:88:1b:fb:79:c7:58:c0:81:09:e7:14:aa:e2:b1:ee: b4:00:4f:d7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUGyAmDinBJ0/aKPNkPSwfC+BCLGIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhBRjAwODQzQzkwMjRCNjhBRTNFQzQzMzFFNzUzQjdC MkI0MjJERjAeFw0yNjA1MjQwODMyNThaFw0yNjA1MjUxMDAzNThaMDMxMTAvBgNV BAMTKDRDNjMzNjFEREYyNEY3MTE2M0IxRDVCNTI0MzM4ODI0MjZGQkVEQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDBIM7Nq3z9crzxRUsWd1x4ilr C/glNt0iv8s90z5m+/HWhvLEg7xZ8byB7zGROcBs/HdeZNOriFHQR8tr0O5OIFGB Dm4CJ1FUUkQgDtSAKzHP6gk3xcyPm10/t4IQnrlnQPj5jB3ir5UM2TATRVAcWmma 1Jms89eaG6XPkE6MP5XpnIWYMB6HcJZaE/Gqdokt4Do+Te3vA9kVhS6yJGchfssa nwQUHER+pdIMlwOQEEJ1Wcr/0ZdqYXQpQ9RxA9F0yd2dM3YjaHDjcOLvjqsNwn8Y AAqZrRyZscdzosnWCnzPF6KVYjhXIpk0SLkks1dl1PMVbV8CFIsZ/JCpr8NfAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUTGM2Hd8k9xFjsdW1JDOIJCb77a0wHwYDVR0j BBgwFoAUuK8AhDyQJLaK4+xDMedTt7K0It8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSFR5aDNHWkNGYmJBWXBOSDFrWG9IeHhpdEphV1lXUjRQM1BvZzJONUJy UkgvMS9COEFGMDA4NDNDOTAyNEI2OEFFM0VDNDMzMUU3NTNCN0IyQjQyMkRGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I4QUYwMDg0M0M5MDI0QjY4 QUUzRUM0MzMxRTc1M0I3QjJCNDIyREYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SFR5aDNHWkNGYmJBWXBOSDFrWG9IeHhpdEphV1lXUjRQM1BvZzJONUJyUkgvMS9C OEFGMDA4NDNDOTAyNEI2OEFFM0VDNDMzMUU3NTNCN0IyQjQyMkRGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhv1WIBNuErkDf9ANQZMw3jL5hpXftP2CVbMmB5ngTVibYiqvSPaSG8vItoJD kz8WhaF3zullXyQCq5i7g4t2o4530weJ9925OrqSa47BhS540+CIZDgL6l0QzT1C gA0FTNiP6jhEs6wvZc0qQ8G2sUIZIPHYd/Ig0HATqW8xn6l3Xvtw6sUCo1fh8Ks3 TRSRneFKReZkvjmcbB9frcPkDK+XY1SDfEG2MPAVGrngTY2A01HhjdA0GnsJ3347 lpbbUZV3U7DFZIl8vpQepmQh5IRK2C5Y/QTgfx9UX8d+tL5XL0U+RdCoD5EZjs0O iBv7ecdYwIEJ5xSq4rHutABP1w== -----END CERTIFICATE-----Generated at Sun May 24 14:11:59 2026 by rpki-client