$ rpki-client -vvf rpki-repo.registro.br/repo/zqkoh4kfNuLDrLzy7VW4R1yD7YhBoxc4ohnvfpBU7r8/0/2124AB708BBF6388EC80D06C3B8FB1FF02426295.mft File: 2124AB708BBF6388EC80D06C3B8FB1FF02426295.mft (raw, json) Hash identifier: iqekNtvV+iQCou+uKf4ThkPMjutjazwiufSMtg6oIsY= Subject key identifier: B9:EF:50:74:52:8A:62:54:37:90:D6:99:FC:F4:0F:94:DA:E6:2C:28 Authority key identifier: 21:24:AB:70:8B:BF:63:88:EC:80:D0:6C:3B:8F:B1:FF:02:42:62:95 Certificate issuer: /CN=2124AB708BBF6388EC80D06C3B8FB1FF02426295 Certificate serial: 339565100C163D398493D1F6FA3CED7BA351D3AD Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2124AB708BBF6388EC80D06C3B8FB1FF02426295.cer Subject info access: rsync://rpki-repo.registro.br/repo/zqkoh4kfNuLDrLzy7VW4R1yD7YhBoxc4ohnvfpBU7r8/0/2124AB708BBF6388EC80D06C3B8FB1FF02426295.mft Manifest number: 09 Signing time: Sun 24 May 2026 00:06:37 +0000 Manifest this update: Sun 24 May 2026 00:01:37 +0000 Manifest next update: Mon 25 May 2026 03:23:37 +0000 Files and hashes: 1: 323830343a366238343a3a2f33322d313238203d3e20323730343035.roa (hash: 2ozPd5FcOpRP8Pf6OP7xrYk6TvnS6a/F3RrN6QnExKo=) 2: 2124AB708BBF6388EC80D06C3B8FB1FF02426295.crl (hash: apuyDzXUrePuBq4azMxfYR5NAmHMPWu2Pxk7di4w7ZU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/zqkoh4kfNuLDrLzy7VW4R1yD7YhBoxc4ohnvfpBU7r8/0/2124AB708BBF6388EC80D06C3B8FB1FF02426295.crl rsync://rpki-repo.registro.br/repo/zqkoh4kfNuLDrLzy7VW4R1yD7YhBoxc4ohnvfpBU7r8/0/2124AB708BBF6388EC80D06C3B8FB1FF02426295.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2124AB708BBF6388EC80D06C3B8FB1FF02426295.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 25 May 2026 03:23:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:95:65:10:0c:16:3d:39:84:93:d1:f6:fa:3c:ed:7b:a3:51:d3:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2124AB708BBF6388EC80D06C3B8FB1FF02426295 Validity Not Before: May 24 00:01:37 2026 GMT Not After : May 25 03:23:37 2026 GMT Subject: CN=B9EF5074528A62543790D699FCF40F94DAE62C28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:71:00:d5:56:b5:92:19:fc:a3:30:66:9f:78: 99:9c:0b:e5:c2:0b:99:6b:eb:2c:d6:84:99:dd:e6: bc:36:af:48:d0:dd:49:29:90:f2:b2:39:83:f7:92: 2e:ce:35:bc:ec:1e:48:3f:23:dd:7d:2e:be:06:18: 54:15:6c:ef:ad:80:5f:e4:03:33:a8:d9:35:59:b9: b6:fb:a0:4a:de:2a:a5:60:10:e2:ca:fc:20:e2:90: 59:79:8e:1c:31:10:a7:54:1d:15:86:d8:29:1c:59: 1d:1d:ab:f3:ef:0a:11:fd:42:ba:e2:e8:f3:07:27: 57:7e:2e:b3:a5:dc:80:bf:0a:41:e6:b1:b3:13:22: 88:79:e2:16:f7:dd:19:e0:b9:8d:48:bd:3f:e3:c9: b1:1f:d8:b3:bd:dd:3c:10:be:66:5d:25:5b:2f:bd: 62:06:64:53:cd:d3:7b:92:4f:17:bf:98:a3:a1:58: 8a:c9:57:71:17:b2:cc:74:7f:5a:a1:fe:6e:65:cb: 6d:30:fa:52:e3:25:a7:f4:6f:d0:66:4b:e8:a9:3c: dc:ce:94:e0:65:35:45:7e:73:26:bf:68:b7:0d:a4: e5:c6:0a:70:62:5d:a6:84:c8:c3:80:6f:82:bb:8f: 73:10:0c:31:38:22:ba:96:36:eb:13:10:77:33:40: e6:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:EF:50:74:52:8A:62:54:37:90:D6:99:FC:F4:0F:94:DA:E6:2C:28 X509v3 Authority Key Identifier: keyid:21:24:AB:70:8B:BF:63:88:EC:80:D0:6C:3B:8F:B1:FF:02:42:62:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/zqkoh4kfNuLDrLzy7VW4R1yD7YhBoxc4ohnvfpBU7r8/0/2124AB708BBF6388EC80D06C3B8FB1FF02426295.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2124AB708BBF6388EC80D06C3B8FB1FF02426295.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/zqkoh4kfNuLDrLzy7VW4R1yD7YhBoxc4ohnvfpBU7r8/0/2124AB708BBF6388EC80D06C3B8FB1FF02426295.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:13:ae:32:6c:4c:c3:2f:e6:a8:51:6f:6d:bc:52:69:85:3b: 22:88:df:01:f1:6b:dd:2e:8c:e9:65:1d:4b:e7:21:dd:4d:d1: d0:98:39:7f:cd:ed:73:88:14:51:8a:1b:50:c9:66:d6:d1:34: 64:c0:14:af:fc:d1:59:e7:d6:5d:07:32:fb:ad:d7:a7:6b:04: c9:a4:94:7d:b4:de:0d:34:8b:ef:21:6f:6b:71:fd:96:de:5f: d0:6c:36:8d:d1:cc:69:bb:c7:b5:74:d6:a6:2c:28:24:c9:08: 22:c2:e9:c5:90:34:3d:3b:66:2e:bb:00:00:45:58:7a:3f:5b: 18:17:6b:8a:0e:4f:c3:d6:01:2e:f6:65:d8:bd:3d:e0:04:6f: 54:8a:79:6a:9c:58:37:a0:6d:8e:a4:ac:16:8b:1b:be:2d:7d: f8:32:90:79:cb:6d:a0:0e:2e:c3:ed:1d:5d:27:4b:9d:73:9d: 9f:8d:e8:29:62:5a:95:89:ca:c2:79:67:e8:a1:42:55:bd:2c: 90:b6:31:8b:0f:02:4a:fb:88:52:5e:60:4d:85:6f:b8:c0:4d: 4c:34:8b:6c:f1:df:08:1c:95:9f:05:c5:de:51:09:90:1f:82: af:eb:15:98:0f:c6:44:34:c9:86:1e:08:d2:07:e9:82:32:09: 68:a0:8a:ed -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUM5VlEAwWPTmEk9H2+jzte6NR060wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjEyNEFCNzA4QkJGNjM4OEVDODBEMDZDM0I4RkIxRkYw MjQyNjI5NTAeFw0yNjA1MjQwMDAxMzdaFw0yNjA1MjUwMzIzMzdaMDMxMTAvBgNV BAMTKEI5RUY1MDc0NTI4QTYyNTQzNzkwRDY5OUZDRjQwRjk0REFFNjJDMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/cQDVVrWSGfyjMGafeJmcC+XC C5lr6yzWhJnd5rw2r0jQ3UkpkPKyOYP3ki7ONbzsHkg/I919Lr4GGFQVbO+tgF/k AzOo2TVZubb7oEreKqVgEOLK/CDikFl5jhwxEKdUHRWG2CkcWR0dq/PvChH9Qrri 6PMHJ1d+LrOl3IC/CkHmsbMTIoh54hb33RnguY1IvT/jybEf2LO93TwQvmZdJVsv vWIGZFPN03uSTxe/mKOhWIrJV3EXssx0f1qh/m5ly20w+lLjJaf0b9BmS+ipPNzO lOBlNUV+cya/aLcNpOXGCnBiXaaEyMOAb4K7j3MQDDE4IrqWNusTEHczQOZBAgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUue9QdFKKYlQ3kNaZ/PQPlNrmLCgwHwYDVR0j BBgwFoAUISSrcIu/Y4jsgNBsO4+x/wJCYpUwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby96cWtvaDRrZk51TERyTHp5N1ZXNFIxeUQ3WWhCb3hjNG9obnZmcEJVN3I4 LzAvMjEyNEFCNzA4QkJGNjM4OEVDODBEMDZDM0I4RkIxRkYwMjQyNjI5NS5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8yMTI0QUI3MDhCQkY2Mzg4RUM4 MEQwNkMzQjhGQjFGRjAyNDI2Mjk1LmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL3px a29oNGtmTnVMRHJMenk3Vlc0UjF5RDdZaEJveGM0b2hudmZwQlU3cjgvMC8yMTI0 QUI3MDhCQkY2Mzg4RUM4MEQwNkMzQjhGQjFGRjAyNDI2Mjk1Lm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA RhOuMmxMwy/mqFFvbbxSaYU7IojfAfFr3S6M6WUdS+ch3U3R0Jg5f83tc4gUUYob UMlm1tE0ZMAUr/zRWefWXQcy+63Xp2sEyaSUfbTeDTSL7yFva3H9lt5f0Gw2jdHM abvHtXTWpiwoJMkIIsLpxZA0PTtmLrsAAEVYej9bGBdrig5Pw9YBLvZl2L094ARv VIp5apxYN6BtjqSsFosbvi19+DKQecttoA4uw+0dXSdLnXOdn43oKWJalYnKwnln 6KFCVb0skLYxiw8CSvuIUl5gTYVvuMBNTDSLbPHfCByVnwXF3lEJkB+Cr+sVmA/G RDTJhh4I0gfpgjIJaKCK7Q== -----END CERTIFICATE-----Generated at Sun May 24 12:48:13 2026 by rpki-client