$ rpki-client -vvf rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/0/A2A41D637E871BA0DCD8B3DB98BD91BCAB7CE398.mft File: A2A41D637E871BA0DCD8B3DB98BD91BCAB7CE398.mft (raw, json) Hash identifier: 5hf9dufAsBR28I8sXSF9+EOEhDItMif1LH1IVslBTGc= Subject key identifier: 0B:4D:A7:6D:EA:15:46:86:13:8B:4D:D2:3B:42:1A:5B:5B:B6:A4:1E Authority key identifier: A2:A4:1D:63:7E:87:1B:A0:DC:D8:B3:DB:98:BD:91:BC:AB:7C:E3:98 Certificate issuer: /CN=A2A41D637E871BA0DCD8B3DB98BD91BCAB7CE398 Certificate serial: 115DB2F93A477A3079C697EDF8ACC2554F1BE7BA Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2A41D637E871BA0DCD8B3DB98BD91BCAB7CE398.cer Subject info access: rsync://rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/0/A2A41D637E871BA0DCD8B3DB98BD91BCAB7CE398.mft Manifest number: 0106 Signing time: Tue 12 May 2026 20:02:12 +0000 Manifest this update: Tue 12 May 2026 19:57:12 +0000 Manifest next update: Wed 13 May 2026 23:32:12 +0000 Files and hashes: 1: 323830343a343764343a3a2f33322d313238203d3e20323637303739.roa (hash: wfbIrO8fUPQmPXhjdkIW/u7BhFUAMK+Xv16j8Z/YqI4=) 2: 34352e3232372e34372e302f32342d3234203d3e20323637303739.roa (hash: EZGoypxpjDgCbdCIfTyYn8n8vL6+KKKTHVUoAKgA9aQ=) 3: 34352e3232372e34342e302f32332d3233203d3e20323637303739.roa (hash: knyavOJEwPrqGNMFx4F+80Df1Oxiv5FxxHQ/Zz30luk=) 4: A2A41D637E871BA0DCD8B3DB98BD91BCAB7CE398.crl (hash: TTKUUqYbhtTucFarnHpIF8Ay78ANZkmLCQUkcLIO/r8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/0/A2A41D637E871BA0DCD8B3DB98BD91BCAB7CE398.crl rsync://rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/0/A2A41D637E871BA0DCD8B3DB98BD91BCAB7CE398.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2A41D637E871BA0DCD8B3DB98BD91BCAB7CE398.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 13 May 2026 23:32:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:5d:b2:f9:3a:47:7a:30:79:c6:97:ed:f8:ac:c2:55:4f:1b:e7:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A2A41D637E871BA0DCD8B3DB98BD91BCAB7CE398 Validity Not Before: May 12 19:57:12 2026 GMT Not After : May 13 23:32:12 2026 GMT Subject: CN=0B4DA76DEA154686138B4DD23B421A5B5BB6A41E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:f5:d8:23:03:32:08:36:7f:27:1f:7b:82:38: 10:f6:86:88:09:ae:ec:6f:2e:60:68:29:be:3c:65: d7:c6:8d:0d:b3:e7:2e:09:ea:7d:af:ab:22:c5:f1: 75:71:9b:1a:0a:ce:6d:37:f8:d1:53:3d:16:af:26: 04:03:62:5d:fc:c1:fe:91:b0:df:a7:85:36:17:c0: f2:45:50:6f:31:2b:ac:74:49:01:e7:81:5c:e9:1f: 58:9a:38:27:5c:cb:b7:34:d3:0b:b3:c9:ab:10:29: 71:74:44:98:b9:0d:af:8e:b6:af:51:ac:50:dc:34: f7:1e:ec:74:73:af:9b:c9:fc:8e:6a:8f:ea:5c:f4: ec:77:93:2c:f0:ea:c5:db:22:08:01:f5:9b:c2:40: 90:eb:28:53:e3:90:1e:4b:f9:52:6d:24:f7:bd:ae: 1d:8e:c8:8f:c5:d6:db:85:3c:85:a9:bb:f6:8d:fc: 72:30:ab:a1:8f:bb:8c:21:1a:ed:01:51:a3:68:ad: 3a:92:65:c3:30:91:1d:59:8d:93:e0:77:85:96:a3: 4e:1c:28:84:d5:7b:d8:91:b7:7f:82:bb:29:f7:56: 9b:df:6e:99:cb:a3:09:5b:73:a5:24:b9:71:63:7b: 43:34:03:9c:68:00:cc:62:c8:3d:4c:7c:dd:a7:ad: f9:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:4D:A7:6D:EA:15:46:86:13:8B:4D:D2:3B:42:1A:5B:5B:B6:A4:1E X509v3 Authority Key Identifier: keyid:A2:A4:1D:63:7E:87:1B:A0:DC:D8:B3:DB:98:BD:91:BC:AB:7C:E3:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/0/A2A41D637E871BA0DCD8B3DB98BD91BCAB7CE398.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2A41D637E871BA0DCD8B3DB98BD91BCAB7CE398.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/0/A2A41D637E871BA0DCD8B3DB98BD91BCAB7CE398.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:c0:8b:98:c9:8c:57:a1:b6:14:19:4f:20:fa:1e:4e:31:c7: 47:98:7f:6f:31:80:fe:60:59:54:b8:c4:72:77:90:05:fc:29: 3a:33:db:1a:4a:ea:e4:7d:cd:ca:03:f7:a9:d4:a7:87:09:55: 88:76:94:10:19:03:7c:70:28:a2:60:3c:db:c1:7e:81:91:2a: 7f:b8:ce:e1:3e:44:2e:1b:57:a6:4c:e8:52:86:db:f4:18:c3: e0:d0:13:f1:40:b4:89:91:74:17:42:b6:a5:57:da:b1:3e:5e: 72:b0:01:3b:8c:0c:9e:e9:43:c8:af:93:8e:d1:ba:98:ca:aa: e0:d9:87:92:3f:cf:21:63:d8:5a:e0:af:39:19:97:e9:d7:36: 76:88:80:fe:d6:b7:43:d8:39:12:a9:b9:54:b7:2d:8f:d1:5d: 97:4c:ca:fe:cb:fb:94:d5:da:89:41:a4:8f:1c:54:f9:c2:80: 8a:37:77:cf:b8:32:75:1a:b7:78:09:be:a0:60:61:3a:aa:83: 51:49:26:c3:9f:b4:2c:62:24:62:38:27:e9:ac:0d:af:ac:97: 90:a5:a3:a6:30:8a:80:ad:05:6d:ec:1a:04:c1:4c:4b:7f:a8: c4:ad:c9:49:47:97:73:37:bf:1b:3f:3c:06:09:a9:7b:c3:5d: ef:a0:00:56 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUEV2y+TpHejB5xpft+KzCVU8b57owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTJBNDFENjM3RTg3MUJBMERDRDhCM0RCOThCRDkxQkNB QjdDRTM5ODAeFw0yNjA1MTIxOTU3MTJaFw0yNjA1MTMyMzMyMTJaMDMxMTAvBgNV BAMTKDBCNERBNzZERUExNTQ2ODYxMzhCNEREMjNCNDIxQTVCNUJCNkE0MUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDc9dgjAzIINn8nH3uCOBD2hogJ ruxvLmBoKb48ZdfGjQ2z5y4J6n2vqyLF8XVxmxoKzm03+NFTPRavJgQDYl38wf6R sN+nhTYXwPJFUG8xK6x0SQHngVzpH1iaOCdcy7c00wuzyasQKXF0RJi5Da+Otq9R rFDcNPce7HRzr5vJ/I5qj+pc9Ox3kyzw6sXbIggB9ZvCQJDrKFPjkB5L+VJtJPe9 rh2OyI/F1tuFPIWpu/aN/HIwq6GPu4whGu0BUaNorTqSZcMwkR1ZjZPgd4WWo04c KITVe9iRt3+Cuyn3VpvfbpnLowlbc6UkuXFje0M0A5xoAMxiyD1MfN2nrfmNAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUC02nbeoVRoYTi03SO0IaW1u2pB4wHwYDVR0j BBgwFoAUoqQdY36HG6Dc2LPbmL2RvKt845gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNndjVVo2eWNHTVo0WENvOWYzUXlkdEppVUdGanBzcm94Y2l1ZldaZmRy QXUvMC9BMkE0MUQ2MzdFODcxQkEwRENEOEIzREI5OEJEOTFCQ0FCN0NFMzk4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0EyQTQxRDYzN0U4NzFCQTBE Q0Q4QjNEQjk4QkQ5MUJDQUI3Q0UzOTguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NndjVVo2eWNHTVo0WENvOWYzUXlkdEppVUdGanBzcm94Y2l1ZldaZmRyQXUvMC9B MkE0MUQ2MzdFODcxQkEwRENEOEIzREI5OEJEOTFCQ0FCN0NFMzk4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEARMCLmMmMV6G2FBlPIPoeTjHHR5h/bzGA/mBZVLjEcneQBfwpOjPbGkrq5H3N ygP3qdSnhwlViHaUEBkDfHAoomA828F+gZEqf7jO4T5ELhtXpkzoUobb9BjD4NAT 8UC0iZF0F0K2pVfasT5ecrABO4wMnulDyK+TjtG6mMqq4NmHkj/PIWPYWuCvORmX 6dc2doiA/ta3Q9g5Eqm5VLctj9Fdl0zK/sv7lNXaiUGkjxxU+cKAijd3z7gydRq3 eAm+oGBhOqqDUUkmw5+0LGIkYjgn6awNr6yXkKWjpjCKgK0FbewaBMFMS3+oxK3J SUeXcze/Gz88Bgmpe8Nd76AAVg== -----END CERTIFICATE-----Generated at Wed May 13 16:33:53 2026 by rpki-client