$ rpki-client -vvf rpki-repo.registro.br/repo/65KNGrKHwK7d712EP4UZ8oP5osGZd227bmg4G8RW5FHS/1/0685BB6377E43823F6EAF7CD0EE04B7B508BB43A.mft File: 0685BB6377E43823F6EAF7CD0EE04B7B508BB43A.mft (raw, json) Hash identifier: dT6KgRDfXLfclthzw7BflTSpOHyU7nLYU5N5xu68aco= Subject key identifier: FD:4C:E8:97:AA:7C:20:D7:61:9A:C5:EB:12:5A:A0:98:A5:8B:A5:8F Authority key identifier: 06:85:BB:63:77:E4:38:23:F6:EA:F7:CD:0E:E0:4B:7B:50:8B:B4:3A Certificate issuer: /CN=0685BB6377E43823F6EAF7CD0EE04B7B508BB43A Certificate serial: 2D9C30D895AE9A8148D6A6C1A74C0FC6DD6D1CF2 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0685BB6377E43823F6EAF7CD0EE04B7B508BB43A.cer Subject info access: rsync://rpki-repo.registro.br/repo/65KNGrKHwK7d712EP4UZ8oP5osGZd227bmg4G8RW5FHS/1/0685BB6377E43823F6EAF7CD0EE04B7B508BB43A.mft Manifest number: 040A Signing time: Wed 13 May 2026 17:53:18 +0000 Manifest this update: Wed 13 May 2026 17:48:18 +0000 Manifest next update: Thu 14 May 2026 21:47:18 +0000 Files and hashes: 1: 34352e3138312e3139322e302f32322d3234203d3e20323639323033.roa (hash: BXBMdFx7otSxHTwUNboayShinyzfM90Ba7+cGRAazlA=) 2: 0685BB6377E43823F6EAF7CD0EE04B7B508BB43A.crl (hash: AQL8ZJciddSU+Wi6iBoibpw2AW3dZKXStPXaHB46PlI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/65KNGrKHwK7d712EP4UZ8oP5osGZd227bmg4G8RW5FHS/1/0685BB6377E43823F6EAF7CD0EE04B7B508BB43A.crl rsync://rpki-repo.registro.br/repo/65KNGrKHwK7d712EP4UZ8oP5osGZd227bmg4G8RW5FHS/1/0685BB6377E43823F6EAF7CD0EE04B7B508BB43A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0685BB6377E43823F6EAF7CD0EE04B7B508BB43A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 14 May 2026 19:37:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:9c:30:d8:95:ae:9a:81:48:d6:a6:c1:a7:4c:0f:c6:dd:6d:1c:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0685BB6377E43823F6EAF7CD0EE04B7B508BB43A Validity Not Before: May 13 17:48:18 2026 GMT Not After : May 14 21:47:18 2026 GMT Subject: CN=FD4CE897AA7C20D7619AC5EB125AA098A58BA58F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:0b:6a:28:a5:22:b0:0d:b9:64:b6:ec:1d:b6: 1d:e4:fa:1c:48:e3:81:9f:8e:8f:59:d3:51:ef:08: f5:74:8a:45:35:96:fe:b6:15:25:16:fc:d5:c9:51: 8a:e1:76:2a:eb:ae:92:ab:ee:69:1a:ea:f2:2f:45: 95:b5:cd:cb:08:c4:84:03:4f:b5:24:a3:f3:fe:e4: 38:59:32:45:1d:18:24:a0:d6:28:d4:75:bf:97:a2: 68:a7:16:3f:f8:a0:ac:53:68:c4:75:c6:44:a4:98: 8e:31:30:a1:f2:3e:2d:f0:b1:cc:7d:4d:e3:7c:b3: a4:03:88:1f:74:50:d0:1f:78:9c:e7:0c:2a:c7:3c: 08:be:bf:54:2f:7b:08:77:d8:2c:2d:d8:63:16:c7: 90:ce:0e:23:51:2f:b1:80:61:38:eb:76:6b:9c:8e: db:a8:66:fe:b6:88:1f:a1:4b:b8:8a:a8:71:bb:b3: 6f:00:c0:d0:18:05:98:f7:88:f3:26:88:b3:3c:e0: bc:b9:a7:da:80:3d:dc:a5:28:a5:07:81:94:c1:f9: f8:4f:d2:ac:34:c6:c9:18:51:2c:b9:ba:f8:f3:db: b0:83:23:7d:84:ae:90:a4:2c:8b:ab:80:d9:ca:b9: 87:7c:03:67:9a:da:4f:cf:cc:a5:0a:5c:5a:8c:0e: 61:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:4C:E8:97:AA:7C:20:D7:61:9A:C5:EB:12:5A:A0:98:A5:8B:A5:8F X509v3 Authority Key Identifier: keyid:06:85:BB:63:77:E4:38:23:F6:EA:F7:CD:0E:E0:4B:7B:50:8B:B4:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/65KNGrKHwK7d712EP4UZ8oP5osGZd227bmg4G8RW5FHS/1/0685BB6377E43823F6EAF7CD0EE04B7B508BB43A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0685BB6377E43823F6EAF7CD0EE04B7B508BB43A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/65KNGrKHwK7d712EP4UZ8oP5osGZd227bmg4G8RW5FHS/1/0685BB6377E43823F6EAF7CD0EE04B7B508BB43A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:f9:a5:8a:f1:f2:97:8d:ed:54:f5:ff:ef:3a:d1:4e:c4:b9: 15:55:8d:3b:16:8d:de:7f:47:d6:fa:00:7e:48:59:0c:d7:8f: c6:f7:9c:b8:3e:2d:e7:52:8c:05:b7:32:4b:b8:6f:11:bd:9c: 43:f9:6d:eb:54:15:22:91:8c:ba:2d:bb:23:07:8e:fe:3b:61: 03:95:de:56:34:0b:42:50:a8:9f:b8:4d:7d:fc:c1:20:47:27: 54:8e:b7:d6:a0:25:77:b9:33:02:80:38:12:a6:77:0c:0e:f2: 38:85:88:93:4c:63:04:9c:ed:e8:df:8a:cc:05:d4:a1:77:d5: 26:e8:86:a1:38:a9:a7:05:a1:c0:05:bf:ce:26:30:46:1d:de: a9:77:37:11:f3:65:75:61:8b:c7:67:fb:6e:ae:c3:74:14:84: 50:85:df:d6:06:b3:be:bf:e2:58:fc:1b:2d:ac:4f:58:b4:2f: 91:25:27:b1:10:92:bd:83:4d:a8:ee:6d:80:7e:3f:2a:05:18: 5b:2d:44:12:2a:57:43:9e:e1:e9:4e:e4:b2:7a:48:bc:de:78: 9c:e0:9a:3c:a7:db:55:b8:24:a7:40:72:26:61:5b:a7:b3:09: 42:df:b0:a8:59:8e:91:b8:76:98:09:93:1c:3a:b6:af:f1:b1: e9:7a:fa:e6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIULZww2JWumoFI1qbBp0wPxt1tHPIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDY4NUJCNjM3N0U0MzgyM0Y2RUFGN0NEMEVFMDRCN0I1 MDhCQjQzQTAeFw0yNjA1MTMxNzQ4MThaFw0yNjA1MTQyMTQ3MThaMDMxMTAvBgNV BAMTKEZENENFODk3QUE3QzIwRDc2MTlBQzVFQjEyNUFBMDk4QTU4QkE1OEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9C2oopSKwDblktuwdth3k+hxI 44Gfjo9Z01HvCPV0ikU1lv62FSUW/NXJUYrhdirrrpKr7mka6vIvRZW1zcsIxIQD T7Uko/P+5DhZMkUdGCSg1ijUdb+XominFj/4oKxTaMR1xkSkmI4xMKHyPi3wscx9 TeN8s6QDiB90UNAfeJznDCrHPAi+v1Qvewh32Cwt2GMWx5DODiNRL7GAYTjrdmuc jtuoZv62iB+hS7iKqHG7s28AwNAYBZj3iPMmiLM84Ly5p9qAPdylKKUHgZTB+fhP 0qw0xskYUSy5uvjz27CDI32ErpCkLIurgNnKuYd8A2ea2k/PzKUKXFqMDmF3AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU/Uzol6p8INdhmsXrElqgmKWLpY8wHwYDVR0j BBgwFoAUBoW7Y3fkOCP26vfNDuBLe1CLtDowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNjVLTkdyS0h3SzdkNzEyRVA0VVo4b1A1b3NHWmQyMjdibWc0RzhSVzVG SFMvMS8wNjg1QkI2Mzc3RTQzODIzRjZFQUY3Q0QwRUUwNEI3QjUwOEJCNDNBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA2ODVCQjYzNzdFNDM4MjNG NkVBRjdDRDBFRTA0QjdCNTA4QkI0M0EuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NjVLTkdyS0h3SzdkNzEyRVA0VVo4b1A1b3NHWmQyMjdibWc0RzhSVzVGSFMvMS8w Njg1QkI2Mzc3RTQzODIzRjZFQUY3Q0QwRUUwNEI3QjUwOEJCNDNBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKvmlivHyl43tVPX/7zrRTsS5FVWNOxaN3n9H1voAfkhZDNePxvecuD4t51KM BbcyS7hvEb2cQ/lt61QVIpGMui27IweO/jthA5XeVjQLQlCon7hNffzBIEcnVI63 1qAld7kzAoA4EqZ3DA7yOIWIk0xjBJzt6N+KzAXUoXfVJuiGoTippwWhwAW/ziYw Rh3eqXc3EfNldWGLx2f7bq7DdBSEUIXf1gazvr/iWPwbLaxPWLQvkSUnsRCSvYNN qO5tgH4/KgUYWy1EEipXQ57h6U7ksnpIvN54nOCaPKfbVbgkp0ByJmFbp7MJQt+w qFmOkbh2mAmTHDq2r/Gx6Xr65g== -----END CERTIFICATE-----Generated at Wed May 13 20:58:33 2026 by rpki-client