$ rpki-client -vvf rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/1/CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA.mft File: CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA.mft (raw, json) Hash identifier: YirkEcaW5BWbnpcCjXy5hRzoUlkDuBi5DaMF1ExahVk= Subject key identifier: A8:1B:86:16:A5:B6:E6:88:EC:E0:2B:40:99:90:8E:61:58:61:11:7D Authority key identifier: CA:1C:4B:54:62:22:EE:15:6A:0D:43:48:D2:AB:00:43:BD:AB:4B:EA Certificate issuer: /CN=CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA Certificate serial: 6A53CAE70BFCC0457F6A6295513F068137B0590C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA.cer Subject info access: rsync://rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/1/CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA.mft Manifest number: 0402 Signing time: Tue 12 May 2026 15:17:32 +0000 Manifest this update: Tue 12 May 2026 15:12:32 +0000 Manifest next update: Wed 13 May 2026 18:36:32 +0000 Files and hashes: 1: CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA.crl (hash: rRrgUiRVTGcKNGTE/Tm7zaV6/KxMj1CdHp3HS/T8Oe8=) 2: 323830343a333661303a3a2f33322d3335203d3e20323636333630.roa (hash: mmpHcgcmCJor4uSWfHygBL/vX0yx6PEzCq0/gH4b9lQ=) 3: 3137302e3233392e3235322e302f32322d3234203d3e20323636333630.roa (hash: 9nuoAcwYrMrsl4Vi37XNxZmM7i+vemHTj26u7KALJZU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/1/CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA.crl rsync://rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/1/CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 13 May 2026 18:36:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:53:ca:e7:0b:fc:c0:45:7f:6a:62:95:51:3f:06:81:37:b0:59:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA Validity Not Before: May 12 15:12:32 2026 GMT Not After : May 13 18:36:32 2026 GMT Subject: CN=A81B8616A5B6E688ECE02B4099908E615861117D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:db:fc:af:de:15:75:92:c5:51:b6:01:98:95: 40:f9:b0:16:1e:22:51:46:a3:6e:3a:c0:c8:2b:26: f3:45:d4:08:c9:d5:63:87:91:63:e1:cf:1f:67:63: cb:45:49:1e:53:84:6f:dc:63:2a:11:f8:ad:ee:27: 81:65:74:c1:3f:fe:5f:42:62:bc:bf:bd:c2:4d:e3: 75:2f:e3:b5:97:a1:fa:b7:4d:12:23:07:60:85:e1: 1b:94:24:b2:3f:30:ba:ed:a0:f3:20:25:bc:3e:3a: 50:0b:c4:dc:3e:b4:e2:3a:8d:52:ca:e3:90:25:10: c4:1c:db:9c:39:96:4b:c1:1e:37:a6:8d:3f:c3:47: 29:c2:32:96:5c:98:8f:aa:6f:57:d0:1a:ad:9d:2c: d7:97:b2:59:99:a2:ad:2b:99:e0:2d:ee:20:03:ab: 78:72:cc:12:ee:d5:46:aa:6d:a1:c5:af:92:a3:79: 63:2f:89:67:1a:07:2f:3f:14:ec:58:63:61:e9:7e: 9f:7c:df:f5:5f:44:3d:2e:66:07:ce:f6:85:a7:19: 98:03:6a:05:f2:cd:a0:ca:dd:65:36:e2:f6:66:70: 96:87:b9:48:2f:1a:4d:74:53:39:27:2a:3f:ed:bb: e3:7b:b7:cb:87:c6:b8:0d:37:8f:5b:a4:b4:2d:57: 55:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:1B:86:16:A5:B6:E6:88:EC:E0:2B:40:99:90:8E:61:58:61:11:7D X509v3 Authority Key Identifier: keyid:CA:1C:4B:54:62:22:EE:15:6A:0D:43:48:D2:AB:00:43:BD:AB:4B:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/1/CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/1/CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:4a:63:11:71:21:f7:e9:c8:9d:3b:20:44:b6:fc:7a:1b:2b: 1b:82:a1:69:dc:7e:7b:28:c7:df:98:81:e1:64:df:74:71:51: 63:a1:07:97:e4:fe:fe:f6:9e:5f:aa:e9:ec:24:70:24:4f:f1: c8:11:24:90:3a:52:d9:b0:13:48:6b:ca:66:3d:9d:35:ea:0a: 48:b9:bc:87:8b:ef:4e:3a:95:25:aa:8c:0d:3a:18:68:2e:7f: 21:66:59:84:3d:fc:17:d6:a3:19:1a:48:01:33:5f:2b:92:82: 29:55:a9:26:2a:02:ff:2c:61:ff:44:5d:54:64:81:49:6d:85: f3:3f:85:27:9f:86:d4:41:e3:6f:a5:9c:2f:49:06:4f:ec:1f: 3b:5e:79:6d:6c:4c:b3:e4:3f:d5:e0:06:17:08:a7:04:b1:50: 3b:14:0c:5f:f7:43:0b:18:c1:b0:dd:2f:a2:63:42:fc:07:a5: 95:7e:e2:99:60:b5:3f:5c:ad:63:49:89:e2:87:da:e1:eb:9d: bc:aa:96:d7:46:c3:f5:17:1a:ea:ad:e9:20:2f:41:8a:8c:a1: a1:d4:e7:ac:0d:2a:f2:87:1f:2f:3a:b2:ff:16:9b:9f:4e:1a: e4:29:4d:72:4a:f8:cb:09:eb:62:92:f1:54:3b:09:df:b8:13: bc:c4:47:cb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUalPK5wv8wEV/amKVUT8GgTewWQwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ExQzRCNTQ2MjIyRUUxNTZBMEQ0MzQ4RDJBQjAwNDNC REFCNEJFQTAeFw0yNjA1MTIxNTEyMzJaFw0yNjA1MTMxODM2MzJaMDMxMTAvBgNV BAMTKEE4MUI4NjE2QTVCNkU2ODhFQ0UwMkI0MDk5OTA4RTYxNTg2MTExN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCX2/yv3hV1ksVRtgGYlUD5sBYe IlFGo246wMgrJvNF1AjJ1WOHkWPhzx9nY8tFSR5ThG/cYyoR+K3uJ4FldME//l9C Yry/vcJN43Uv47WXofq3TRIjB2CF4RuUJLI/MLrtoPMgJbw+OlALxNw+tOI6jVLK 45AlEMQc25w5lkvBHjemjT/DRynCMpZcmI+qb1fQGq2dLNeXslmZoq0rmeAt7iAD q3hyzBLu1UaqbaHFr5KjeWMviWcaBy8/FOxYY2Hpfp983/VfRD0uZgfO9oWnGZgD agXyzaDK3WU24vZmcJaHuUgvGk10UzknKj/tu+N7t8uHxrgNN49bpLQtV1UtAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUqBuGFqW25ojs4CtAmZCOYVhhEX0wHwYDVR0j BBgwFoAUyhxLVGIi7hVqDUNI0qsAQ72rS+owDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNEVOWXhVWEV4dVN5d0U4UmFWNmtEaXZKVVJWdzJKYXBNbkYxR1NaQXBK U1MvMS9DQTFDNEI1NDYyMjJFRTE1NkEwRDQzNDhEMkFCMDA0M0JEQUI0QkVBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NBMUM0QjU0NjIyMkVFMTU2 QTBENDM0OEQyQUIwMDQzQkRBQjRCRUEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NEVOWXhVWEV4dVN5d0U4UmFWNmtEaXZKVVJWdzJKYXBNbkYxR1NaQXBKU1MvMS9D QTFDNEI1NDYyMjJFRTE1NkEwRDQzNDhEMkFCMDA0M0JEQUI0QkVBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYkpjEXEh9+nInTsgRLb8ehsrG4Khadx+eyjH35iB4WTfdHFRY6EHl+T+/vae X6rp7CRwJE/xyBEkkDpS2bATSGvKZj2dNeoKSLm8h4vvTjqVJaqMDToYaC5/IWZZ hD38F9ajGRpIATNfK5KCKVWpJioC/yxh/0RdVGSBSW2F8z+FJ5+G1EHjb6WcL0kG T+wfO155bWxMs+Q/1eAGFwinBLFQOxQMX/dDCxjBsN0vomNC/AellX7imWC1P1yt Y0mJ4ofa4eudvKqW10bD9Rca6q3pIC9BioyhodTnrA0q8ocfLzqy/xabn04a5ClN ckr4ywnrYpLxVDsJ37gTvMRHyw== -----END CERTIFICATE-----Generated at Wed May 13 12:26:48 2026 by rpki-client