$ rpki-client -vvf rpki-repo.registro.br/repo/7ekoAqQeXzNKEAXqGMdwqZf9Tg7NdJQrbSaehx1dKgmg/1/244388DDFE9A99D71CEB27CDB6C76637D22CAB8F.mft File: 244388DDFE9A99D71CEB27CDB6C76637D22CAB8F.mft (raw, json) Hash identifier: NDmdAVelqPV1QaCAFVl9e8nqnrqVT+05+TpurtKO3wE= Subject key identifier: B7:A0:43:8A:33:9D:34:1D:21:E6:F7:7A:0E:F6:4F:ED:CD:A4:22:3D Authority key identifier: 24:43:88:DD:FE:9A:99:D7:1C:EB:27:CD:B6:C7:66:37:D2:2C:AB:8F Certificate issuer: /CN=244388DDFE9A99D71CEB27CDB6C76637D22CAB8F Certificate serial: 7DD9FEF545AFF34AE5B7AE16FA33D50976103841 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/244388DDFE9A99D71CEB27CDB6C76637D22CAB8F.cer Subject info access: rsync://rpki-repo.registro.br/repo/7ekoAqQeXzNKEAXqGMdwqZf9Tg7NdJQrbSaehx1dKgmg/1/244388DDFE9A99D71CEB27CDB6C76637D22CAB8F.mft Manifest number: 0400 Signing time: Wed 13 May 2026 12:24:43 +0000 Manifest this update: Wed 13 May 2026 12:19:43 +0000 Manifest next update: Thu 14 May 2026 12:26:43 +0000 Files and hashes: 1: 3134332e3230382e3230342e302f32322d3234203d3e20323632343232.roa (hash: wzzf83YvvGyHhNowkR95CcSy1/GE0b35UOVhYlEgqe8=) 2: 323830343a3433633a3a2f33322d3430203d3e20323632343232.roa (hash: 3FoLqlqYpxS/JqKsSghKf2ICxhEnf/apjoaAR93CCd0=) 3: 244388DDFE9A99D71CEB27CDB6C76637D22CAB8F.crl (hash: 80oms5OYrz6pdBSq01igmXyQny0QKkq0LaKwMxEHwqo=) 4: 3137372e33392e38302e302f32312d3234203d3e20323632343232.roa (hash: F0dViSeJu8Lvo3taAyZjA5d0EHv8wKUTirJsN339u/M=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7ekoAqQeXzNKEAXqGMdwqZf9Tg7NdJQrbSaehx1dKgmg/1/244388DDFE9A99D71CEB27CDB6C76637D22CAB8F.crl rsync://rpki-repo.registro.br/repo/7ekoAqQeXzNKEAXqGMdwqZf9Tg7NdJQrbSaehx1dKgmg/1/244388DDFE9A99D71CEB27CDB6C76637D22CAB8F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/244388DDFE9A99D71CEB27CDB6C76637D22CAB8F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 14 May 2026 12:26:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:d9:fe:f5:45:af:f3:4a:e5:b7:ae:16:fa:33:d5:09:76:10:38:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=244388DDFE9A99D71CEB27CDB6C76637D22CAB8F Validity Not Before: May 13 12:19:43 2026 GMT Not After : May 14 12:26:43 2026 GMT Subject: CN=B7A0438A339D341D21E6F77A0EF64FEDCDA4223D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:09:87:62:e5:1a:ad:bd:e4:90:93:8a:a4:85: c4:80:f9:db:1e:1f:98:bb:c0:15:25:89:60:7c:80: e6:93:6c:4f:73:4a:54:aa:f1:49:91:d9:86:3d:15: 0d:8b:56:58:39:9b:e1:9c:1f:df:61:ca:75:13:cb: c9:4a:60:db:bb:d9:b3:3e:59:e9:9d:b2:2b:2e:11: 95:30:36:f4:8d:c5:c9:27:42:94:ee:74:9c:1b:d5: 14:6e:28:76:e8:53:4b:c6:86:5f:9e:bf:96:cc:fd: e8:8c:2b:20:10:18:ff:44:c7:8c:52:29:a4:82:d3: 0e:64:f7:17:73:6c:34:a6:45:12:b5:08:bb:c4:30: 1a:a8:c5:4b:dd:87:60:e0:93:e1:df:77:11:e2:d8: 7c:e7:68:5f:0d:2b:28:0a:1e:34:35:3c:9f:27:cf: eb:96:40:7b:c8:90:a1:91:50:dd:ea:94:74:12:c6: 59:eb:2d:ae:d1:74:f1:c2:44:12:9b:9d:bd:e5:ab: 8d:17:ec:03:b7:e8:f4:d2:ec:49:6a:4c:3e:6f:18: d8:9e:32:04:c1:96:f6:14:38:cf:2a:34:8b:66:5b: a5:91:ad:ec:3e:6d:0c:16:d9:c6:77:6e:2f:be:bb: 47:c3:01:15:c8:ef:3f:4f:95:67:73:98:47:0a:a2: 3f:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:A0:43:8A:33:9D:34:1D:21:E6:F7:7A:0E:F6:4F:ED:CD:A4:22:3D X509v3 Authority Key Identifier: keyid:24:43:88:DD:FE:9A:99:D7:1C:EB:27:CD:B6:C7:66:37:D2:2C:AB:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7ekoAqQeXzNKEAXqGMdwqZf9Tg7NdJQrbSaehx1dKgmg/1/244388DDFE9A99D71CEB27CDB6C76637D22CAB8F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/244388DDFE9A99D71CEB27CDB6C76637D22CAB8F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7ekoAqQeXzNKEAXqGMdwqZf9Tg7NdJQrbSaehx1dKgmg/1/244388DDFE9A99D71CEB27CDB6C76637D22CAB8F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:e2:ba:e6:04:01:4c:72:ed:4b:6f:af:91:d2:ae:e6:16:ee: 56:cd:97:cf:ae:e0:7b:b9:47:b3:dc:b4:cf:fe:af:5d:a6:71: 31:16:14:fd:79:61:dc:33:a4:e4:47:1a:ab:32:ab:c5:e6:e4: 85:a1:4b:61:fa:20:2b:fe:9d:ce:99:f2:53:4e:d4:8c:53:b7: 93:49:5c:3a:35:ac:9a:1a:b6:cd:58:76:3a:8a:1e:00:37:ac: b9:fe:f7:4d:f3:df:a5:95:d5:ad:b2:48:33:72:1c:ca:41:f9: 70:52:2c:e2:1b:cc:6f:e4:89:62:e4:21:8e:da:d6:4c:6a:44: cf:dd:57:d3:e9:1e:eb:12:8c:e4:8f:34:8e:70:01:87:43:aa: fd:08:33:42:c9:4d:2d:a8:8f:30:5d:bb:92:60:b5:22:5f:f0: 69:65:3e:a8:c8:83:24:20:f9:e3:1d:6c:0b:ad:3e:51:8e:7b: e0:8d:88:a3:58:54:0f:db:a0:b7:f7:4b:a3:6b:b3:cf:f0:51: ec:9f:f1:cc:a5:f4:19:c8:16:b0:d1:5d:e8:fe:79:ee:d9:36: 68:86:15:8f:c2:2d:5e:39:e3:56:f9:2c:95:37:66:d0:86:c2: 84:49:a5:da:43:ea:dc:42:6a:64:d0:23:98:9d:9e:f1:e0:d5: 73:90:31:41 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUfdn+9UWv80rlt64W+jPVCXYQOEEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjQ0Mzg4RERGRTlBOTlENzFDRUIyN0NEQjZDNzY2MzdE MjJDQUI4RjAeFw0yNjA1MTMxMjE5NDNaFw0yNjA1MTQxMjI2NDNaMDMxMTAvBgNV BAMTKEI3QTA0MzhBMzM5RDM0MUQyMUU2Rjc3QTBFRjY0RkVEQ0RBNDIyM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7CYdi5RqtveSQk4qkhcSA+dse H5i7wBUliWB8gOaTbE9zSlSq8UmR2YY9FQ2LVlg5m+GcH99hynUTy8lKYNu72bM+ WemdsisuEZUwNvSNxcknQpTudJwb1RRuKHboU0vGhl+ev5bM/eiMKyAQGP9Ex4xS KaSC0w5k9xdzbDSmRRK1CLvEMBqoxUvdh2Dgk+HfdxHi2HznaF8NKygKHjQ1PJ8n z+uWQHvIkKGRUN3qlHQSxlnrLa7RdPHCRBKbnb3lq40X7AO36PTS7ElqTD5vGNie MgTBlvYUOM8qNItmW6WRrew+bQwW2cZ3bi++u0fDARXI7z9PlWdzmEcKoj+xAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUt6BDijOdNB0h5vd6DvZP7c2kIj0wHwYDVR0j BBgwFoAUJEOI3f6amdcc6yfNtsdmN9Isq48wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN2Vrb0FxUWVYek5LRUFYcUdNZHdxWmY5VGc3TmRKUXJiU2FlaHgxZEtn bWcvMS8yNDQzODhEREZFOUE5OUQ3MUNFQjI3Q0RCNkM3NjYzN0QyMkNBQjhGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI0NDM4OERERkU5QTk5RDcx Q0VCMjdDREI2Qzc2NjM3RDIyQ0FCOEYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v N2Vrb0FxUWVYek5LRUFYcUdNZHdxWmY5VGc3TmRKUXJiU2FlaHgxZEtnbWcvMS8y NDQzODhEREZFOUE5OUQ3MUNFQjI3Q0RCNkM3NjYzN0QyMkNBQjhGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPeK65gQBTHLtS2+vkdKu5hbuVs2Xz67ge7lHs9y0z/6vXaZxMRYU/Xlh3DOk 5EcaqzKrxebkhaFLYfogK/6dzpnyU07UjFO3k0lcOjWsmhq2zVh2OooeADesuf73 TfPfpZXVrbJIM3IcykH5cFIs4hvMb+SJYuQhjtrWTGpEz91X0+ke6xKM5I80jnAB h0Oq/QgzQslNLaiPMF27kmC1Il/waWU+qMiDJCD54x1sC60+UY574I2Io1hUD9ug t/dLo2uzz/BR7J/xzKX0GcgWsNFd6P557tk2aIYVj8ItXjnjVvkslTdm0IbChEml 2kPq3EJqZNAjmJ2e8eDVc5AxQQ== -----END CERTIFICATE-----Generated at Wed May 13 19:49:45 2026 by rpki-client