$ rpki-client -vvf rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.mft File: 8BAE9C90EBC5082F802055EFAA6360C661BF85CE.mft (raw, json) Hash identifier: 7FCXCBZ6YQvxle6/LLUy76XshC22uMObr4I+HDNgYgk= Subject key identifier: 8C:29:B5:FA:A2:85:B5:E5:F0:48:3F:9D:04:92:DF:05:7F:D6:A8:B7 Authority key identifier: 8B:AE:9C:90:EB:C5:08:2F:80:20:55:EF:AA:63:60:C6:61:BF:85:CE Certificate issuer: /CN=8BAE9C90EBC5082F802055EFAA6360C661BF85CE Certificate serial: 677F6D6BE2C10CB22A023D5A08DA4A2ACB18AC37 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.cer Subject info access: rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.mft Manifest number: 03CB Signing time: Wed 13 May 2026 06:36:50 +0000 Manifest this update: Wed 13 May 2026 06:31:50 +0000 Manifest next update: Thu 14 May 2026 09:30:50 +0000 Files and hashes: 1: 3133382e3138352e3233362e302f32322d3234203d3e20323633393139.roa (hash: KYkcxrUCG5d2OgDxXVUc4Ip1FNkjOzjKHcyZw6KqQbM=) 2: 3137302e302e3230382e302f32322d3234203d3e20323633393139.roa (hash: e4E3vMJmvzuFUBj3Gl3MPDMXsuyK/NWYw9KKWpE7NIU=) 3: 8BAE9C90EBC5082F802055EFAA6360C661BF85CE.crl (hash: Xp3/uq1F3EcXCRpzGLgouBW0XqZuEqjsc399AHo+6iw=) 4: 323830343a323762633a3a2f33322d3438203d3e20323633393139.roa (hash: w/YO1KIf4eo5zvFM926/mpG6uypq9a8w/nPaoqyoSig=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.crl rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 14 May 2026 09:30:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:7f:6d:6b:e2:c1:0c:b2:2a:02:3d:5a:08:da:4a:2a:cb:18:ac:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BAE9C90EBC5082F802055EFAA6360C661BF85CE Validity Not Before: May 13 06:31:50 2026 GMT Not After : May 14 09:30:50 2026 GMT Subject: CN=8C29B5FAA285B5E5F0483F9D0492DF057FD6A8B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:aa:11:9f:f9:9a:7d:17:47:af:ce:d9:66:e4: 3c:ff:a7:b8:e6:98:d6:2d:9b:bd:7a:ba:97:74:03: da:be:74:39:ba:fc:2e:59:88:75:91:6d:9a:e5:14: 51:7a:cf:0e:a4:ed:f0:e1:56:0c:b3:fc:b1:5a:6c: 91:72:be:fd:36:9c:b5:53:72:ed:03:36:4d:26:94: 0d:61:e6:7b:7d:dd:d3:f5:1a:a1:50:4f:33:18:0d: 61:3f:6c:61:cc:72:fa:3a:b7:06:ed:3e:8a:3b:05: 7d:21:62:c1:3d:4d:18:5d:ab:0e:07:ff:41:0d:5b: 78:a3:5c:1d:61:6e:b7:bd:84:38:f3:00:24:d9:60: 74:06:2a:19:97:27:aa:55:d3:15:d6:fa:70:45:c2: f4:08:da:98:bb:97:d2:4c:7e:b4:11:8d:04:97:a4: 1a:2e:6f:aa:d6:da:f1:2c:93:bc:44:0b:9d:69:8a: ef:c9:b0:dc:62:b1:0a:79:81:3b:a0:d5:de:62:ce: 1f:c7:96:d8:18:3b:e8:78:d6:a6:9d:da:00:3f:1f: 1e:1d:f2:e4:95:23:08:7e:cb:25:6c:77:21:7f:24: 54:79:5f:f8:d6:5e:47:47:f5:79:3b:35:ac:56:27: 1f:13:dc:bc:bb:89:e1:8b:d3:cc:7d:ea:70:5d:09: ef:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:29:B5:FA:A2:85:B5:E5:F0:48:3F:9D:04:92:DF:05:7F:D6:A8:B7 X509v3 Authority Key Identifier: keyid:8B:AE:9C:90:EB:C5:08:2F:80:20:55:EF:AA:63:60:C6:61:BF:85:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:aa:8c:61:8e:73:4d:45:09:d5:09:31:4c:b3:01:ee:47:b5: 69:bf:60:83:e9:85:d1:e0:54:13:df:4f:4c:ae:c6:bd:eb:31: 7b:56:ee:7a:af:df:4d:d4:aa:65:52:c2:79:58:ba:bf:7d:bb: d4:0b:98:64:64:30:9e:cc:5d:0d:e5:5f:24:e5:db:4b:2c:21: cb:9e:7e:f6:3a:4a:ab:99:7f:db:01:66:2b:78:3d:38:2d:0d: a0:33:b4:b7:29:24:6e:ef:9c:3c:da:3e:6f:4b:15:8f:e8:56: 88:80:da:cf:d8:38:ff:bc:d5:b6:b6:ac:93:7e:d1:6f:b4:15: d1:d0:e6:db:9e:5a:68:42:86:de:73:fa:c6:e5:fe:3c:10:80: 7e:a0:ad:50:84:f8:26:45:40:59:d8:30:01:1b:48:f4:f0:e7: fa:a2:92:e3:a3:ff:fb:f7:80:91:db:28:fc:18:16:48:ca:71: 22:56:82:01:67:48:7f:75:e9:9e:6a:2a:30:f8:75:ec:ad:37: b7:62:2d:8e:7c:ab:45:23:82:d7:95:9a:9c:c6:0a:4c:dc:90: 4b:0b:06:93:07:ff:58:54:8b:25:79:04:8a:57:e1:5a:ce:56: 04:05:0e:38:f2:f0:91:ff:b3:fa:ff:28:f3:06:79:61:e9:d3: 9b:3d:b9:d5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUZ39ta+LBDLIqAj1aCNpKKssYrDcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJBRTlDOTBFQkM1MDgyRjgwMjA1NUVGQUE2MzYwQzY2 MUJGODVDRTAeFw0yNjA1MTMwNjMxNTBaFw0yNjA1MTQwOTMwNTBaMDMxMTAvBgNV BAMTKDhDMjlCNUZBQTI4NUI1RTVGMDQ4M0Y5RDA0OTJERjA1N0ZENkE4QjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzqhGf+Zp9F0evztlm5Dz/p7jm mNYtm716upd0A9q+dDm6/C5ZiHWRbZrlFFF6zw6k7fDhVgyz/LFabJFyvv02nLVT cu0DNk0mlA1h5nt93dP1GqFQTzMYDWE/bGHMcvo6twbtPoo7BX0hYsE9TRhdqw4H /0ENW3ijXB1hbre9hDjzACTZYHQGKhmXJ6pV0xXW+nBFwvQI2pi7l9JMfrQRjQSX pBoub6rW2vEsk7xEC51piu/JsNxisQp5gTug1d5izh/HltgYO+h41qad2gA/Hx4d 8uSVIwh+yyVsdyF/JFR5X/jWXkdH9Xk7NaxWJx8T3Ly7ieGL08x96nBdCe8xAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUjCm1+qKFteXwSD+dBJLfBX/WqLcwHwYDVR0j BBgwFoAUi66ckOvFCC+AIFXvqmNgxmG/hc4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNGNHMm9iRVVZZk1LaFdBWDQ1N25GZ3pvVFhZU3RpTEs0RGFFMzRWRFNL ODUvMS84QkFFOUM5MEVCQzUwODJGODAyMDU1RUZBQTYzNjBDNjYxQkY4NUNFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhCQUU5QzkwRUJDNTA4MkY4 MDIwNTVFRkFBNjM2MEM2NjFCRjg1Q0UuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NGNHMm9iRVVZZk1LaFdBWDQ1N25GZ3pvVFhZU3RpTEs0RGFFMzRWRFNLODUvMS84 QkFFOUM5MEVCQzUwODJGODAyMDU1RUZBQTYzNjBDNjYxQkY4NUNFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJKqMYY5zTUUJ1QkxTLMB7ke1ab9gg+mF0eBUE99PTK7Gvesxe1bueq/fTdSq ZVLCeVi6v3271AuYZGQwnsxdDeVfJOXbSywhy55+9jpKq5l/2wFmK3g9OC0NoDO0 tykkbu+cPNo+b0sVj+hWiIDaz9g4/7zVtrask37Rb7QV0dDm255aaEKG3nP6xuX+ PBCAfqCtUIT4JkVAWdgwARtI9PDn+qKS46P/+/eAkdso/BgWSMpxIlaCAWdIf3Xp nmoqMPh17K03t2ItjnyrRSOC15WanMYKTNyQSwsGkwf/WFSLJXkEilfhWs5WBAUO OPLwkf+z+v8o8wZ5YenTmz251Q== -----END CERTIFICATE-----Generated at Wed May 13 17:27:37 2026 by rpki-client