$ rpki-client -vvf rpki-repo.registro.br/repo/SohvjFHKXppkNQk7QbqyejN5fPkZ2cGrP49r6uAQvcs/0/4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355.mft File: 4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355.mft (raw, json) Hash identifier: zfsw86RwDy4OP1D9rJlK/jUDVueD601pKKoyWoaSN2w= Subject key identifier: 3B:69:6A:74:73:B8:1A:40:88:F6:1B:CE:23:A3:A4:1B:68:6E:04:A2 Authority key identifier: 4B:80:B2:0B:D7:40:DF:8A:FC:F0:F8:C5:A6:FE:B8:B9:E5:30:63:55 Certificate issuer: /CN=4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355 Certificate serial: 562C061C1BA42F489486D50DFDBEA2D533C94BE0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355.cer Subject info access: rsync://rpki-repo.registro.br/repo/SohvjFHKXppkNQk7QbqyejN5fPkZ2cGrP49r6uAQvcs/0/4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355.mft Manifest number: 0290 Signing time: Sat 23 May 2026 21:07:22 +0000 Manifest this update: Sat 23 May 2026 21:02:22 +0000 Manifest next update: Mon 25 May 2026 00:44:22 +0000 Files and hashes: 1: 3230312e3135302e3132302e302f32322d3234203d3e203631383632.roa (hash: qiIda+t4xOiFoeZalH1Neo+rgjYTYSXkUJWodvETyrw=) 2: 323830343a316137633a3a2f33322d3334203d3e203631383632.roa (hash: aGhB8GwGGOw4fjLbwd2dHG8lWAcKkK2gTduDVziPQPU=) 3: 3133382e3138352e3137322e302f32322d3234203d3e203631383632.roa (hash: cKvg8yrZZKi+ggPtkL5V5SGtMmkJkC8tKoYg3IexQrg=) 4: 4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355.crl (hash: HXVix0ESMQt2eiOJOBd4hpJJHtczSA9XALjUSoEBK10=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/SohvjFHKXppkNQk7QbqyejN5fPkZ2cGrP49r6uAQvcs/0/4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355.crl rsync://rpki-repo.registro.br/repo/SohvjFHKXppkNQk7QbqyejN5fPkZ2cGrP49r6uAQvcs/0/4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 25 May 2026 00:44:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:2c:06:1c:1b:a4:2f:48:94:86:d5:0d:fd:be:a2:d5:33:c9:4b:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355 Validity Not Before: May 23 21:02:22 2026 GMT Not After : May 25 00:44:22 2026 GMT Subject: CN=3B696A7473B81A4088F61BCE23A3A41B686E04A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:8a:28:de:7a:18:d0:ee:b7:bd:a0:24:11:4d: 7e:98:f2:25:e5:bc:ea:0e:49:56:28:86:a9:27:e3: 6b:0a:b1:5b:94:5b:08:0d:24:66:d4:68:a9:5b:46: 21:bc:fe:5d:b7:5e:8f:cd:f7:63:53:35:19:5a:15: 0e:d8:2e:ba:87:a6:02:53:ef:ea:f5:1f:42:ab:01: ca:e7:ef:f0:33:eb:fb:2f:b3:99:4b:ce:92:6c:09: fc:30:0f:1c:94:9d:e0:d6:e6:e5:2d:30:99:19:14: 0d:95:85:77:d0:b5:2f:cf:07:bb:3c:4b:49:8f:8b: 41:db:b1:98:9e:91:ec:7f:e9:eb:ed:a4:d5:f3:00: 35:7e:fb:e4:1c:e9:02:32:d3:4d:83:ad:8e:f7:34: 04:a4:74:c9:aa:4d:56:c1:89:52:43:c0:6e:ff:6d: 8a:57:97:1a:36:48:80:21:4e:92:fe:8a:03:7e:11: 92:56:f2:10:30:9a:bd:9d:d9:6b:fd:9d:18:d1:e3: cd:fb:be:65:48:23:14:1c:12:5f:9b:de:97:a2:a7: 7b:25:d2:6f:ed:b8:df:e4:d5:75:ba:19:4a:e0:74: c2:e8:d0:99:27:08:c0:42:89:31:ae:8a:58:e3:31: d8:ca:be:1f:7e:c6:c4:44:17:1a:8c:99:60:24:a2: bb:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:69:6A:74:73:B8:1A:40:88:F6:1B:CE:23:A3:A4:1B:68:6E:04:A2 X509v3 Authority Key Identifier: keyid:4B:80:B2:0B:D7:40:DF:8A:FC:F0:F8:C5:A6:FE:B8:B9:E5:30:63:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/SohvjFHKXppkNQk7QbqyejN5fPkZ2cGrP49r6uAQvcs/0/4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/SohvjFHKXppkNQk7QbqyejN5fPkZ2cGrP49r6uAQvcs/0/4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:57:51:d9:61:04:1f:7c:e8:ae:33:fc:43:db:3e:1c:fd:7c: 9e:53:9a:d4:f9:82:b9:c8:77:d3:8e:c2:f8:17:7c:0f:e8:4c: 2f:84:c3:32:e9:5a:0f:ec:b9:04:dd:06:70:80:df:36:2a:13: c1:a7:9b:70:51:b2:9c:85:71:d0:87:ec:58:89:ea:ba:d9:3a: 5c:28:65:44:23:d4:93:20:95:eb:ce:1f:e5:a5:18:44:ba:87: e9:b3:e9:ba:d0:27:1b:18:f3:54:9c:4f:e2:a9:a0:da:42:44: 0b:3d:f2:69:08:3f:62:4e:81:9c:4b:82:69:06:d5:83:c1:10: 3b:89:db:99:8c:ae:3c:30:af:17:4b:8a:39:c4:e8:fa:29:1b: 12:6e:f4:26:0f:d5:eb:00:b1:ba:5d:c2:64:df:0a:4e:f2:ac: 8e:75:2c:29:99:9d:59:b0:32:2a:7a:b4:eb:a1:34:f9:d9:71: 71:12:aa:8e:22:9f:b8:4b:28:ab:36:40:92:9f:18:55:9c:ec: 0c:69:9f:92:ba:a8:2d:14:67:64:60:a7:78:2c:85:6e:e1:b3: 5b:cf:e6:72:7d:b0:95:47:c0:0d:4e:90:c9:a5:e3:ce:2e:4c: 4e:68:b7:c4:f2:f9:17:51:a8:97:e3:6d:81:f6:b0:2f:40:d8: d3:e4:37:4a -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUViwGHBukL0iUhtUN/b6i1TPJS+AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEI4MEIyMEJENzQwREY4QUZDRjBGOEM1QTZGRUI4QjlF NTMwNjM1NTAeFw0yNjA1MjMyMTAyMjJaFw0yNjA1MjUwMDQ0MjJaMDMxMTAvBgNV BAMTKDNCNjk2QTc0NzNCODFBNDA4OEY2MUJDRTIzQTNBNDFCNjg2RTA0QTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4iijeehjQ7re9oCQRTX6Y8iXl vOoOSVYohqkn42sKsVuUWwgNJGbUaKlbRiG8/l23Xo/N92NTNRlaFQ7YLrqHpgJT 7+r1H0KrAcrn7/Az6/svs5lLzpJsCfwwDxyUneDW5uUtMJkZFA2VhXfQtS/PB7s8 S0mPi0HbsZiekex/6evtpNXzADV+++Qc6QIy002DrY73NASkdMmqTVbBiVJDwG7/ bYpXlxo2SIAhTpL+igN+EZJW8hAwmr2d2Wv9nRjR4837vmVIIxQcEl+b3peip3sl 0m/tuN/k1XW6GUrgdMLo0JknCMBCiTGuiljjMdjKvh9+xsREFxqMmWAkorsVAgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUO2lqdHO4GkCI9hvOI6OkG2huBKIwHwYDVR0j BBgwFoAUS4CyC9dA34r88PjFpv64ueUwY1UwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9Tb2h2akZIS1hwcGtOUWs3UWJxeWVqTjVmUGtaMmNHclA0OXI2dUFRdmNz LzAvNEI4MEIyMEJENzQwREY4QUZDRjBGOEM1QTZGRUI4QjlFNTMwNjM1NS5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS80QjgwQjIwQkQ3NDBERjhBRkNG MEY4QzVBNkZFQjhCOUU1MzA2MzU1LmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL1Nv aHZqRkhLWHBwa05RazdRYnF5ZWpONWZQa1oyY0dyUDQ5cjZ1QVF2Y3MvMC80Qjgw QjIwQkQ3NDBERjhBRkNGMEY4QzVBNkZFQjhCOUU1MzA2MzU1Lm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA R1dR2WEEH3zorjP8Q9s+HP18nlOa1PmCuch3047C+Bd8D+hML4TDMulaD+y5BN0G cIDfNioTwaebcFGynIVx0IfsWInqutk6XChlRCPUkyCV684f5aUYRLqH6bPputAn GxjzVJxP4qmg2kJECz3yaQg/Yk6BnEuCaQbVg8EQO4nbmYyuPDCvF0uKOcTo+ikb Em70Jg/V6wCxul3CZN8KTvKsjnUsKZmdWbAyKnq066E0+dlxcRKqjiKfuEsoqzZA kp8YVZzsDGmfkrqoLRRnZGCneCyFbuGzW8/mcn2wlUfADU6QyaXjzi5MTmi3xPL5 F1Gol+NtgfawL0DY0+Q3Sg== -----END CERTIFICATE-----Generated at Sun May 24 14:53:18 2026 by rpki-client