$ rpki-client -vvf rpki-repo.registro.br/repo/5axz5h3iCqtCsN2Eu8sjLGDKDwX9hRhQ2stM2MN2EuQA/0/BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4.mft File: BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4.mft (raw, json) Hash identifier: hJsH5k+vkMiYzqwdwvRx1B9bDJEngfzxxYaqZLeSzHs= Subject key identifier: 73:E4:26:36:D4:C0:9B:5B:01:48:2C:90:4B:2A:3A:D2:AB:9E:95:EB Authority key identifier: BD:EA:3E:14:C3:2F:29:AC:82:ED:A1:5B:2D:4E:D1:AD:25:04:FF:A4 Certificate issuer: /CN=BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4 Certificate serial: 0E738E43823B2A37D2E42E971108600798C022DF Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4.cer Subject info access: rsync://rpki-repo.registro.br/repo/5axz5h3iCqtCsN2Eu8sjLGDKDwX9hRhQ2stM2MN2EuQA/0/BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4.mft Manifest number: 03E5 Signing time: Tue 12 May 2026 22:24:06 +0000 Manifest this update: Tue 12 May 2026 22:19:06 +0000 Manifest next update: Thu 14 May 2026 00:51:06 +0000 Files and hashes: 1: 323830343a353738303a3a2f33322d3438203d3e20323632373334.roa (hash: yNFZBHyDGRYV2QlyPSN2OtoLmiWL4FZRPAEMsVOZrB0=) 2: 3138392e38342e3130362e302f32332d3234203d3e20323632373334.roa (hash: ayttGUuymegq6vSf98rBwELpDST1MxoqdryA36dSPQw=) 3: BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4.crl (hash: 6nJixNHpM2vzCXaem4zK3mEyhhP7PIO62SMUAZAuXkA=) 4: 3138362e3139352e302e302f32302d3234203d3e20323632373334.roa (hash: 25TH8Nx19yip9EasUzX983wihZlY2EEgXhGIBNzEfyQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5axz5h3iCqtCsN2Eu8sjLGDKDwX9hRhQ2stM2MN2EuQA/0/BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4.crl rsync://rpki-repo.registro.br/repo/5axz5h3iCqtCsN2Eu8sjLGDKDwX9hRhQ2stM2MN2EuQA/0/BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 14 May 2026 00:51:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:73:8e:43:82:3b:2a:37:d2:e4:2e:97:11:08:60:07:98:c0:22:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4 Validity Not Before: May 12 22:19:06 2026 GMT Not After : May 14 00:51:06 2026 GMT Subject: CN=73E42636D4C09B5B01482C904B2A3AD2AB9E95EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f3:c6:50:dd:3f:6b:fb:e5:e0:f9:d6:af:4f: 8b:f7:36:25:73:f9:bd:b0:dc:61:cc:9f:28:01:c9: 85:92:62:72:20:68:71:e8:59:13:e4:fa:8e:ab:b8: a0:5b:a1:0b:42:fd:0e:2c:05:5e:26:36:87:d6:22: 26:3d:d6:3e:6e:74:1a:03:e9:30:c1:3d:13:11:07: 5a:ca:3e:0f:92:fa:9c:2c:80:e7:8d:c4:9d:21:91: 5b:71:55:6f:b4:d7:22:d5:46:ea:c9:df:ac:2e:61: 57:ee:af:43:ac:e3:c7:95:8c:47:72:f0:c7:f0:ab: e5:80:cc:2d:d8:1a:7a:9f:b8:99:92:66:96:5b:2e: e3:f3:3e:aa:95:9a:37:75:36:2e:39:2f:91:2a:7f: ba:ed:7c:8f:16:db:af:f1:ab:52:17:11:a4:fa:90: 7f:c4:c5:ab:d1:26:05:e3:17:30:8d:2c:30:7e:b4: d3:96:cd:32:c6:f0:2c:87:1e:24:9c:74:a2:11:47: 60:3e:76:83:da:0f:fd:e7:5f:2c:11:b4:1d:61:a4: bd:03:76:e9:d3:e6:6c:f1:63:3e:72:30:c6:d0:31: d9:23:e1:c7:7c:6e:09:7f:3d:34:1a:4b:e2:9f:e5: e4:cc:f2:31:10:23:49:7c:cb:7b:64:02:99:45:d1: bb:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:E4:26:36:D4:C0:9B:5B:01:48:2C:90:4B:2A:3A:D2:AB:9E:95:EB X509v3 Authority Key Identifier: keyid:BD:EA:3E:14:C3:2F:29:AC:82:ED:A1:5B:2D:4E:D1:AD:25:04:FF:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5axz5h3iCqtCsN2Eu8sjLGDKDwX9hRhQ2stM2MN2EuQA/0/BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5axz5h3iCqtCsN2Eu8sjLGDKDwX9hRhQ2stM2MN2EuQA/0/BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:11:d8:c2:c0:38:5f:96:5c:cd:ac:a9:41:b8:bb:97:03:30: b3:5f:1a:bf:06:d9:22:98:2b:3c:72:e9:ed:49:36:02:dd:98: a0:fb:61:37:5f:d3:a9:9b:3c:87:7d:75:65:31:8e:63:69:eb: 00:3b:b4:8e:1d:67:79:1c:af:53:b4:10:1a:13:e7:0c:3a:e3: 5e:24:96:48:55:ba:1e:6d:c3:fa:10:9a:6a:b1:3b:f6:87:07: d8:77:a1:7b:ae:7a:30:2a:b9:b0:d0:a8:f1:bf:cb:fa:af:30: 93:59:1c:8d:9f:b8:d7:e6:8f:e0:04:7a:40:c5:08:38:95:d8: b1:39:dd:5b:0e:1f:0a:a8:db:24:06:9d:7b:f5:82:52:ea:54: 3f:13:6c:08:63:c1:93:b0:c3:1e:23:d9:b2:36:7d:d5:c0:27: 29:fb:ca:db:c0:df:f4:66:75:e3:43:b9:69:3e:e4:47:98:1b: ee:d4:0b:a9:1e:e1:98:e5:cf:0e:54:7c:fb:a3:1e:09:6e:93: 9b:d7:94:a9:46:ef:01:6b:69:f8:6b:ee:9f:e0:d5:9c:64:5f: f2:23:5b:4c:f8:b9:21:0c:a7:f8:96:da:82:70:84:b3:9e:74: 02:73:4c:18:b2:6d:67:46:4c:19:d2:ae:f6:0c:b9:41:1d:cb: aa:32:d2:60 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUDnOOQ4I7KjfS5C6XEQhgB5jAIt8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkRFQTNFMTRDMzJGMjlBQzgyRURBMTVCMkQ0RUQxQUQy NTA0RkZBNDAeFw0yNjA1MTIyMjE5MDZaFw0yNjA1MTQwMDUxMDZaMDMxMTAvBgNV BAMTKDczRTQyNjM2RDRDMDlCNUIwMTQ4MkM5MDRCMkEzQUQyQUI5RTk1RUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC288ZQ3T9r++Xg+davT4v3NiVz +b2w3GHMnygByYWSYnIgaHHoWRPk+o6ruKBboQtC/Q4sBV4mNofWIiY91j5udBoD 6TDBPRMRB1rKPg+S+pwsgOeNxJ0hkVtxVW+01yLVRurJ36wuYVfur0Os48eVjEdy 8Mfwq+WAzC3YGnqfuJmSZpZbLuPzPqqVmjd1Ni45L5Eqf7rtfI8W26/xq1IXEaT6 kH/ExavRJgXjFzCNLDB+tNOWzTLG8CyHHiScdKIRR2A+doPaD/3nXywRtB1hpL0D dunT5mzxYz5yMMbQMdkj4cd8bgl/PTQaS+Kf5eTM8jEQI0l8y3tkAplF0bt1AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUc+QmNtTAm1sBSCyQSyo60queleswHwYDVR0j BBgwFoAUveo+FMMvKayC7aFbLU7RrSUE/6QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNWF4ejVoM2lDcXRDc04yRXU4c2pMR0RLRHdYOWhSaFEyc3RNMk1OMkV1 UUEvMC9CREVBM0UxNEMzMkYyOUFDODJFREExNUIyRDRFRDFBRDI1MDRGRkE0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JERUEzRTE0QzMyRjI5QUM4 MkVEQTE1QjJENEVEMUFEMjUwNEZGQTQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NWF4ejVoM2lDcXRDc04yRXU4c2pMR0RLRHdYOWhSaFEyc3RNMk1OMkV1UUEvMC9C REVBM0UxNEMzMkYyOUFDODJFREExNUIyRDRFRDFBRDI1MDRGRkE0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPBHYwsA4X5ZczaypQbi7lwMws18avwbZIpgrPHLp7Uk2At2YoPthN1/TqZs8 h311ZTGOY2nrADu0jh1neRyvU7QQGhPnDDrjXiSWSFW6Hm3D+hCaarE79ocH2Heh e656MCq5sNCo8b/L+q8wk1kcjZ+41+aP4AR6QMUIOJXYsTndWw4fCqjbJAade/WC UupUPxNsCGPBk7DDHiPZsjZ91cAnKfvK28Df9GZ140O5aT7kR5gb7tQLqR7hmOXP DlR8+6MeCW6Tm9eUqUbvAWtp+Gvun+DVnGRf8iNbTPi5IQyn+JbagnCEs550AnNM GLJtZ0ZMGdKu9gy5QR3LqjLSYA== -----END CERTIFICATE-----Generated at Wed May 13 18:02:14 2026 by rpki-client