$ rpki-client -vvf rpki-repo.registro.br/repo/8ZaUJAgMXjYtZ8peoK2yBcHdxjJSAY2b9SzXs4763K1J/0/425E728AE1FAE85A5D6D17CC53D68CDE21FA639D.mft File: 425E728AE1FAE85A5D6D17CC53D68CDE21FA639D.mft (raw, json) Hash identifier: SS7ko5qHblcFforC01ad4BYp8UzzEQ0t/BkYFl9Uy4U= Subject key identifier: 61:4F:A9:64:3B:31:6B:0D:C4:1E:51:E0:E3:8C:C1:B0:41:47:CB:C0 Authority key identifier: 42:5E:72:8A:E1:FA:E8:5A:5D:6D:17:CC:53:D6:8C:DE:21:FA:63:9D Certificate issuer: /CN=425E728AE1FAE85A5D6D17CC53D68CDE21FA639D Certificate serial: 6EACBE5258BA6ABCF9D14960FB175B0DC7334D65 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/425E728AE1FAE85A5D6D17CC53D68CDE21FA639D.cer Subject info access: rsync://rpki-repo.registro.br/repo/8ZaUJAgMXjYtZ8peoK2yBcHdxjJSAY2b9SzXs4763K1J/0/425E728AE1FAE85A5D6D17CC53D68CDE21FA639D.mft Manifest number: A9 Signing time: Wed 13 May 2026 12:25:50 +0000 Manifest this update: Wed 13 May 2026 12:20:50 +0000 Manifest next update: Thu 14 May 2026 16:05:50 +0000 Files and hashes: 1: 323830343a343763633a3a2f33322d313238203d3e20323637303737.roa (hash: Zb565rDHy7WtypXGVJ40AUrNMbJgCT2lb99PVr98XvA=) 2: 34352e3232382e3130342e302f32322d3332203d3e20323637303737.roa (hash: EXEgFqBvttmF5ktT401dLdibdAL47+eANSkTz2upTnU=) 3: AS267077.asa (hash: iIKJNdlKgT2Ijci7gMiJk/XJdetXV8uwuYtrTudDdeM=) 4: 425E728AE1FAE85A5D6D17CC53D68CDE21FA639D.crl (hash: FDVxAwXHi07HRl8Kxnnepg/h7WEc9OyTO8wNUZ5lncg=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8ZaUJAgMXjYtZ8peoK2yBcHdxjJSAY2b9SzXs4763K1J/0/425E728AE1FAE85A5D6D17CC53D68CDE21FA639D.crl rsync://rpki-repo.registro.br/repo/8ZaUJAgMXjYtZ8peoK2yBcHdxjJSAY2b9SzXs4763K1J/0/425E728AE1FAE85A5D6D17CC53D68CDE21FA639D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/425E728AE1FAE85A5D6D17CC53D68CDE21FA639D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 14 May 2026 16:05:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:ac:be:52:58:ba:6a:bc:f9:d1:49:60:fb:17:5b:0d:c7:33:4d:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=425E728AE1FAE85A5D6D17CC53D68CDE21FA639D Validity Not Before: May 13 12:20:50 2026 GMT Not After : May 14 16:05:50 2026 GMT Subject: CN=614FA9643B316B0DC41E51E0E38CC1B04147CBC0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:dc:db:08:4a:02:61:3c:5c:8b:b1:19:d9:cc: 0c:8b:70:e0:95:41:9d:10:57:a8:a0:6f:7e:10:69: 05:74:35:65:7e:6a:3c:a0:95:98:58:e9:a5:d9:fe: af:b2:e9:b7:0b:61:1d:6a:c1:04:a6:86:fb:f4:42: 6e:b5:c9:ba:fb:48:20:a2:8a:58:01:38:f8:25:2a: 7b:9c:fa:e9:11:35:75:ef:e9:cc:c2:55:8e:6f:c3: 7f:97:d2:a3:56:0a:55:f8:b4:d8:eb:87:d7:db:ea: af:a8:4c:4a:c5:54:85:eb:25:9b:93:fc:be:8e:40: 5e:6b:18:bc:ea:06:f2:c7:af:48:10:6f:17:7c:c9: 2c:e5:91:7f:4a:60:b1:79:5b:32:8f:f1:12:69:46: 21:58:dd:6d:e1:36:af:09:39:46:f7:d7:e0:8e:a9: 5f:6b:f9:ca:2e:26:5c:5e:cb:6c:9d:11:a2:e9:e9: 78:9f:65:bc:c9:6c:11:0c:8b:68:3c:fe:f2:15:fe: aa:99:99:13:22:dd:da:41:62:46:2e:5d:8b:1e:cb: b6:ae:26:7e:ea:f3:3a:a5:77:01:d4:d1:52:11:2a: 67:c9:13:db:ed:8c:b4:ee:27:c2:19:f8:6a:a6:fc: b8:22:16:cd:b1:1b:a7:92:79:72:5d:ef:84:31:18: dd:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:4F:A9:64:3B:31:6B:0D:C4:1E:51:E0:E3:8C:C1:B0:41:47:CB:C0 X509v3 Authority Key Identifier: keyid:42:5E:72:8A:E1:FA:E8:5A:5D:6D:17:CC:53:D6:8C:DE:21:FA:63:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8ZaUJAgMXjYtZ8peoK2yBcHdxjJSAY2b9SzXs4763K1J/0/425E728AE1FAE85A5D6D17CC53D68CDE21FA639D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/425E728AE1FAE85A5D6D17CC53D68CDE21FA639D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ZaUJAgMXjYtZ8peoK2yBcHdxjJSAY2b9SzXs4763K1J/0/425E728AE1FAE85A5D6D17CC53D68CDE21FA639D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:57:1c:47:ec:b2:4c:88:d1:a1:54:5a:08:fc:90:47:fa:f0: 5b:fe:98:e5:c8:d7:43:b8:f5:3f:64:45:50:24:6f:00:e6:8c: 32:cf:50:35:cb:0e:c2:0e:18:83:08:33:af:78:c1:0b:6a:4c: a9:94:f5:1b:a2:b6:06:df:77:a6:14:f2:4f:78:70:e9:76:8d: ba:ce:c0:b1:1f:63:21:22:7d:d9:a3:8e:51:68:9c:50:85:83: c2:b6:d4:32:1e:12:f9:66:87:f0:22:94:c8:ed:78:76:97:8a: b2:1f:db:f5:34:aa:45:aa:bb:6e:f8:5b:d8:fd:22:ef:fa:94: f5:57:ab:90:d1:ad:1f:0e:17:34:f2:52:81:55:7a:d9:ee:a6: 57:59:76:c6:ea:df:a2:ab:68:94:dc:db:cb:13:02:63:29:13: 3d:4b:4d:cf:34:aa:ed:47:0e:8d:6e:37:3a:fe:06:fb:3d:5a: 5c:d7:9f:9b:ed:d5:a8:c9:67:95:06:43:91:34:86:61:a1:84: 5c:e0:3a:c7:3a:8b:9b:ac:8a:38:c2:72:45:bb:91:03:67:1a: e1:fd:f7:86:f2:69:1f:76:fe:bf:d5:21:f3:79:fc:9a:af:2d: 4b:0f:30:da:22:37:9f:06:ac:24:8e:51:ef:a8:1d:71:fd:47: 91:93:a6:76 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUbqy+Uli6arz50Ulg+xdbDcczTWUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDI1RTcyOEFFMUZBRTg1QTVENkQxN0NDNTNENjhDREUy MUZBNjM5RDAeFw0yNjA1MTMxMjIwNTBaFw0yNjA1MTQxNjA1NTBaMDMxMTAvBgNV BAMTKDYxNEZBOTY0M0IzMTZCMERDNDFFNTFFMEUzOENDMUIwNDE0N0NCQzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH3NsISgJhPFyLsRnZzAyLcOCV QZ0QV6igb34QaQV0NWV+ajyglZhY6aXZ/q+y6bcLYR1qwQSmhvv0Qm61ybr7SCCi ilgBOPglKnuc+ukRNXXv6czCVY5vw3+X0qNWClX4tNjrh9fb6q+oTErFVIXrJZuT /L6OQF5rGLzqBvLHr0gQbxd8ySzlkX9KYLF5WzKP8RJpRiFY3W3hNq8JOUb31+CO qV9r+couJlxey2ydEaLp6XifZbzJbBEMi2g8/vIV/qqZmRMi3dpBYkYuXYsey7au Jn7q8zqldwHU0VIRKmfJE9vtjLTuJ8IZ+Gqm/LgiFs2xG6eSeXJd74QxGN1FAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUYU+pZDsxaw3EHlHg44zBsEFHy8AwHwYDVR0j BBgwFoAUQl5yiuH66FpdbRfMU9aM3iH6Y50wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOFphVUpBZ01Yall0WjhwZW9LMnlCY0hkeGpKU0FZMmI5U3pYczQ3NjNL MUovMC80MjVFNzI4QUUxRkFFODVBNUQ2RDE3Q0M1M0Q2OENERTIxRkE2MzlELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQyNUU3MjhBRTFGQUU4NUE1 RDZEMTdDQzUzRDY4Q0RFMjFGQTYzOUQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OFphVUpBZ01Yall0WjhwZW9LMnlCY0hkeGpKU0FZMmI5U3pYczQ3NjNLMUovMC80 MjVFNzI4QUUxRkFFODVBNUQ2RDE3Q0M1M0Q2OENERTIxRkE2MzlELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhlccR+yyTIjRoVRaCPyQR/rwW/6Y5cjXQ7j1P2RFUCRvAOaMMs9QNcsOwg4Y gwgzr3jBC2pMqZT1G6K2Bt93phTyT3hw6XaNus7AsR9jISJ92aOOUWicUIWDwrbU Mh4S+WaH8CKUyO14dpeKsh/b9TSqRaq7bvhb2P0i7/qU9VerkNGtHw4XNPJSgVV6 2e6mV1l2xurfoqtolNzbyxMCYykTPUtNzzSq7UcOjW43Ov4G+z1aXNefm+3VqMln lQZDkTSGYaGEXOA6xzqLm6yKOMJyRbuRA2ca4f33hvJpH3b+v9Uh83n8mq8tSw8w 2iI3nwasJI5R76gdcf1HkZOmdg== -----END CERTIFICATE-----Generated at Wed May 13 17:40:45 2026 by rpki-client