$ rpki-client -vvf rpki-repo.registro.br/repo/ksKbkauXqNfNhcB3M4i9sotSXXKFEDgkXkRLMg2XvNR/1/2A0183D32B891D785CDF1CC86CFD0AE9460250B1.mft File: 2A0183D32B891D785CDF1CC86CFD0AE9460250B1.mft (raw, json) Hash identifier: HMn13dqxMOqvRhtHvScXQ6eJVrHce02Sn+TLrSpKcyE= Subject key identifier: 75:80:B3:E0:DB:E4:CA:0B:57:BA:30:75:17:A9:2B:06:40:93:28:3D Authority key identifier: 2A:01:83:D3:2B:89:1D:78:5C:DF:1C:C8:6C:FD:0A:E9:46:02:50:B1 Certificate issuer: /CN=2A0183D32B891D785CDF1CC86CFD0AE9460250B1 Certificate serial: 2D5252C162E8F74FB8CD6353DB7D8242C4B3EF5C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A0183D32B891D785CDF1CC86CFD0AE9460250B1.cer Subject info access: rsync://rpki-repo.registro.br/repo/ksKbkauXqNfNhcB3M4i9sotSXXKFEDgkXkRLMg2XvNR/1/2A0183D32B891D785CDF1CC86CFD0AE9460250B1.mft Manifest number: 040D Signing time: Sun 24 May 2026 06:07:31 +0000 Manifest this update: Sun 24 May 2026 06:02:31 +0000 Manifest next update: Mon 25 May 2026 07:44:31 +0000 Files and hashes: 1: 323830343a373439383a3a2f33322d3434203d3e20323730393931.roa (hash: 5P8NDUEhIYpBNEBBBb91cedxwOLwfvGOhc1dm8i4mKM=) 2: 3138372e3130332e31362e302f32322d3234203d3e20323730393931.roa (hash: lEugCPIUy2Nj0zGiAm4Kgsk3MVYLaTFNqjQjvnkQppc=) 3: 2A0183D32B891D785CDF1CC86CFD0AE9460250B1.crl (hash: KwLiFGy5yvW/3x0B0sW5xBb2rZQOCg+BqkDfre1cvsM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/ksKbkauXqNfNhcB3M4i9sotSXXKFEDgkXkRLMg2XvNR/1/2A0183D32B891D785CDF1CC86CFD0AE9460250B1.crl rsync://rpki-repo.registro.br/repo/ksKbkauXqNfNhcB3M4i9sotSXXKFEDgkXkRLMg2XvNR/1/2A0183D32B891D785CDF1CC86CFD0AE9460250B1.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A0183D32B891D785CDF1CC86CFD0AE9460250B1.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 25 May 2026 07:44:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:52:52:c1:62:e8:f7:4f:b8:cd:63:53:db:7d:82:42:c4:b3:ef:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A0183D32B891D785CDF1CC86CFD0AE9460250B1 Validity Not Before: May 24 06:02:31 2026 GMT Not After : May 25 07:44:31 2026 GMT Subject: CN=7580B3E0DBE4CA0B57BA307517A92B064093283D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:63:b3:70:75:d8:35:e6:10:12:99:64:a4:f4: 77:cf:96:49:26:63:c0:67:9c:56:df:a9:cf:dc:ed: 10:54:54:fe:a6:7c:b0:7f:6b:2e:7c:63:38:c7:e3: 4e:93:8c:e7:21:02:ea:d2:1d:30:d1:76:f5:d4:d6: b0:4f:a0:86:d4:a8:ba:bf:8c:ce:99:06:40:d6:ee: 7d:dc:16:f7:2a:90:64:36:f5:43:02:61:e4:37:86: 0f:12:98:b4:b5:b8:83:aa:34:cb:0b:3a:29:3d:96: 7d:a1:c7:57:9c:95:a9:30:3f:fb:60:a1:74:df:be: 14:f6:dd:e3:29:48:29:a3:cf:38:d4:77:f3:0f:fb: a5:97:c9:3e:1b:67:d1:4c:ad:2c:e3:b4:a7:aa:4d: dc:07:46:4a:03:e0:3a:a0:f1:3b:e4:7a:38:d3:e9: 6f:85:8d:03:52:10:f7:00:cf:ac:d6:90:11:7b:7a: c3:c6:ca:93:c6:7b:39:7c:5a:01:97:6e:de:3d:5c: 37:d9:38:cb:79:79:e0:09:18:65:85:53:50:88:17: 70:d1:08:89:6f:cf:9a:33:a2:f7:a7:5d:ca:a0:6e: 87:14:07:9b:79:45:4b:6c:5e:bd:46:cb:2c:86:3c: f1:f0:2b:78:17:94:16:3e:1d:aa:d5:8c:b6:db:19: a2:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:80:B3:E0:DB:E4:CA:0B:57:BA:30:75:17:A9:2B:06:40:93:28:3D X509v3 Authority Key Identifier: keyid:2A:01:83:D3:2B:89:1D:78:5C:DF:1C:C8:6C:FD:0A:E9:46:02:50:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/ksKbkauXqNfNhcB3M4i9sotSXXKFEDgkXkRLMg2XvNR/1/2A0183D32B891D785CDF1CC86CFD0AE9460250B1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A0183D32B891D785CDF1CC86CFD0AE9460250B1.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/ksKbkauXqNfNhcB3M4i9sotSXXKFEDgkXkRLMg2XvNR/1/2A0183D32B891D785CDF1CC86CFD0AE9460250B1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:47:d4:10:c4:28:fc:14:a6:5a:9a:a2:8c:37:e1:79:98:47: 89:3c:23:24:0c:21:a7:bc:ff:a2:4b:df:2e:0f:b1:9d:d0:a2: a6:8e:6b:5d:46:e4:bf:40:1b:48:4a:1b:35:62:0d:65:14:11: c5:da:dc:ef:6d:00:36:e6:9d:74:b3:4b:b3:9d:ca:1d:2a:cd: 41:05:8a:ec:17:d1:55:c3:55:49:fa:2a:5a:67:ad:71:ca:75: 91:25:e7:f3:25:59:27:d9:cd:66:b6:1a:fc:82:b8:71:96:e3: f5:2e:f9:20:76:97:79:61:3f:00:d8:d0:4b:4b:e8:0c:6f:2b: 9c:06:95:3b:b6:7b:a5:ef:62:81:3a:78:81:f6:15:44:6c:e3: 74:64:00:a4:10:5d:15:75:a3:d6:30:7f:64:97:41:0f:5d:44: f5:89:52:e5:ff:aa:e8:a8:ef:23:fa:bf:8b:5f:0b:86:f7:ee: 7a:d9:a4:43:64:64:34:a0:e1:3e:1b:d5:fa:91:2c:8a:83:77: 1c:7b:f2:df:2c:e3:b4:d0:3e:5e:3b:8a:a3:f7:2f:42:a9:d4: 51:fa:6e:c3:ea:a5:32:98:ea:f7:cb:ce:81:d7:07:92:06:1b: a6:1d:23:7b:19:80:71:4f:6f:e9:3f:36:72:ea:76:a8:f2:b0: a6:1e:96:c1 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIULVJSwWLo90+4zWNT232CQsSz71wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEwMTgzRDMyQjg5MUQ3ODVDREYxQ0M4NkNGRDBBRTk0 NjAyNTBCMTAeFw0yNjA1MjQwNjAyMzFaFw0yNjA1MjUwNzQ0MzFaMDMxMTAvBgNV BAMTKDc1ODBCM0UwREJFNENBMEI1N0JBMzA3NTE3QTkyQjA2NDA5MzI4M0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkY7Nwddg15hASmWSk9HfPlkkm Y8BnnFbfqc/c7RBUVP6mfLB/ay58YzjH406TjOchAurSHTDRdvXU1rBPoIbUqLq/ jM6ZBkDW7n3cFvcqkGQ29UMCYeQ3hg8SmLS1uIOqNMsLOik9ln2hx1eclakwP/tg oXTfvhT23eMpSCmjzzjUd/MP+6WXyT4bZ9FMrSzjtKeqTdwHRkoD4Dqg8TvkejjT 6W+FjQNSEPcAz6zWkBF7esPGypPGezl8WgGXbt49XDfZOMt5eeAJGGWFU1CIF3DR CIlvz5ozovenXcqgbocUB5t5RUtsXr1GyyyGPPHwK3gXlBY+HarVjLbbGaIdAgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUdYCz4NvkygtXujB1F6krBkCTKD0wHwYDVR0j BBgwFoAUKgGD0yuJHXhc3xzIbP0K6UYCULEwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9rc0tia2F1WHFOZk5oY0IzTTRpOXNvdFNYWEtGRURna1hrUkxNZzJYdk5S LzEvMkEwMTgzRDMyQjg5MUQ3ODVDREYxQ0M4NkNGRDBBRTk0NjAyNTBCMS5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8yQTAxODNEMzJCODkxRDc4NUNE RjFDQzg2Q0ZEMEFFOTQ2MDI1MEIxLmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL2tz S2JrYXVYcU5mTmhjQjNNNGk5c290U1hYS0ZFRGdrWGtSTE1nMlh2TlIvMS8yQTAx ODNEMzJCODkxRDc4NUNERjFDQzg2Q0ZEMEFFOTQ2MDI1MEIxLm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA VUfUEMQo/BSmWpqijDfheZhHiTwjJAwhp7z/okvfLg+xndCipo5rXUbkv0AbSEob NWINZRQRxdrc720ANuaddLNLs53KHSrNQQWK7BfRVcNVSfoqWmetccp1kSXn8yVZ J9nNZrYa/IK4cZbj9S75IHaXeWE/ANjQS0voDG8rnAaVO7Z7pe9igTp4gfYVRGzj dGQApBBdFXWj1jB/ZJdBD11E9YlS5f+q6KjvI/q/i18LhvfuetmkQ2RkNKDhPhvV +pEsioN3HHvy3yzjtNA+XjuKo/cvQqnUUfpuw+qlMpjq98vOgdcHkgYbph0jexmA cU9v6T82cup2qPKwph6WwQ== -----END CERTIFICATE-----Generated at Sun May 24 12:51:23 2026 by rpki-client