$ rpki-client -vvf rpki-repo.registro.br/repo/99HyrensjeLRR6R38hLj5MQMs2KvYvNCWFXxi9VX5xmS/0/952E367CCE60CE462735A409663E7DE3B0470E97.mft File: 952E367CCE60CE462735A409663E7DE3B0470E97.mft (raw, json) Hash identifier: hfIdYgYErJm7qeMf4VE+1tgvsrh2sZ8BB73XPTDu81Q= Subject key identifier: 90:73:C4:C1:5D:E2:EE:B8:1F:C2:29:B7:06:84:E1:2D:D3:EC:1B:4F Authority key identifier: 95:2E:36:7C:CE:60:CE:46:27:35:A4:09:66:3E:7D:E3:B0:47:0E:97 Certificate issuer: /CN=952E367CCE60CE462735A409663E7DE3B0470E97 Certificate serial: 1A85E1589B043AECED7BF83186CBFF5DFCC63A2B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/952E367CCE60CE462735A409663E7DE3B0470E97.cer Subject info access: rsync://rpki-repo.registro.br/repo/99HyrensjeLRR6R38hLj5MQMs2KvYvNCWFXxi9VX5xmS/0/952E367CCE60CE462735A409663E7DE3B0470E97.mft Manifest number: 22 Signing time: Wed 13 May 2026 04:13:02 +0000 Manifest this update: Wed 13 May 2026 04:08:02 +0000 Manifest next update: Thu 14 May 2026 05:59:02 +0000 Files and hashes: 1: 34352e342e3133322e302f32322d3332203d3e20323636303632.roa (hash: xQA94nCA0Qi8N28ZaHpj6C3/5aZy8e1p2I3wfeGE+ic=) 2: 323830343a333966383a3a2f33322d313238203d3e20323636303632.roa (hash: takW0mXB06WO9vEwuFO68z+5UDiAGVideGG60HppjIA=) 3: 34352e362e3132382e302f32322d3332203d3e20323636303632.roa (hash: +QkLsURiy3BTvubhLZKKzhgordViFOx6F12ZuwuFJjg=) 4: 952E367CCE60CE462735A409663E7DE3B0470E97.crl (hash: lStyB68K/7pR5IEv7OmdSiiqn+PHmctfehWe4V6xH3U=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/99HyrensjeLRR6R38hLj5MQMs2KvYvNCWFXxi9VX5xmS/0/952E367CCE60CE462735A409663E7DE3B0470E97.crl rsync://rpki-repo.registro.br/repo/99HyrensjeLRR6R38hLj5MQMs2KvYvNCWFXxi9VX5xmS/0/952E367CCE60CE462735A409663E7DE3B0470E97.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/952E367CCE60CE462735A409663E7DE3B0470E97.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 14 May 2026 05:59:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:85:e1:58:9b:04:3a:ec:ed:7b:f8:31:86:cb:ff:5d:fc:c6:3a:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=952E367CCE60CE462735A409663E7DE3B0470E97 Validity Not Before: May 13 04:08:02 2026 GMT Not After : May 14 05:59:02 2026 GMT Subject: CN=9073C4C15DE2EEB81FC229B70684E12DD3EC1B4F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:3e:ab:47:fa:a6:13:33:25:fe:e6:83:10:70: 3e:6f:d8:7b:13:54:ff:34:84:cd:b1:aa:0c:c5:d1: b6:3f:fd:8a:9d:1b:df:90:95:90:b7:b1:40:b6:ec: 0d:4a:ff:5c:f6:ae:4a:c6:50:14:11:ed:cb:0f:f7: ab:66:04:06:82:71:b6:5b:02:9e:91:9d:1e:44:f5: 16:d4:12:00:92:f0:f4:71:12:2a:45:69:24:fa:ac: fe:ce:35:2a:0b:8f:a9:0b:13:27:9a:39:74:5f:9f: 2c:96:44:a2:89:48:18:02:13:99:4a:18:5b:ab:cc: 3a:dd:69:d4:44:05:35:7e:f9:3e:80:13:c6:24:fc: 75:49:be:5a:f9:a6:de:bd:56:05:4d:4e:1a:6a:f1: db:1d:15:b9:af:3b:1d:d7:3f:85:a7:fc:27:12:f2: fc:14:f5:43:51:1a:39:6c:80:17:5b:56:c6:49:c4: e0:8d:ed:54:ec:40:a5:4a:06:8e:de:3e:0f:f2:bf: 8f:05:93:e7:c5:46:48:1d:59:db:15:ef:0d:ce:16: d1:e3:7c:65:01:a8:62:fc:e5:dd:a2:23:ff:63:30: 26:4c:0b:e0:bb:a8:ee:a7:64:0c:46:96:9e:5b:39: 4e:97:fd:9d:ec:df:33:e8:f6:b7:a4:af:20:6a:ce: a8:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:73:C4:C1:5D:E2:EE:B8:1F:C2:29:B7:06:84:E1:2D:D3:EC:1B:4F X509v3 Authority Key Identifier: keyid:95:2E:36:7C:CE:60:CE:46:27:35:A4:09:66:3E:7D:E3:B0:47:0E:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/99HyrensjeLRR6R38hLj5MQMs2KvYvNCWFXxi9VX5xmS/0/952E367CCE60CE462735A409663E7DE3B0470E97.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/952E367CCE60CE462735A409663E7DE3B0470E97.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/99HyrensjeLRR6R38hLj5MQMs2KvYvNCWFXxi9VX5xmS/0/952E367CCE60CE462735A409663E7DE3B0470E97.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:79:06:c9:e5:68:9a:49:7b:a0:91:b3:05:5b:b2:7d:84:3c: 1d:d3:8c:12:89:6f:cf:58:58:9d:b9:4a:a4:c5:12:d5:63:57: 52:fd:16:2c:bf:16:8e:2e:27:b7:09:3e:94:1c:fa:0a:d3:f7: c1:25:85:9b:52:37:42:40:f1:ab:b1:24:f0:70:f4:6f:e7:71: c4:36:db:8a:0b:83:01:99:16:06:de:49:25:21:a7:16:aa:e6: 91:38:1d:21:2f:d9:a3:bb:82:84:a6:b7:39:6e:2b:41:50:40: 72:ee:b6:f1:76:63:be:81:50:20:78:3c:5b:9c:f2:c7:7c:9e: 4d:ac:57:05:62:d3:3d:b4:aa:9a:30:01:cd:fa:8b:ef:45:8e: 96:af:34:a8:21:3c:6e:df:53:0a:1e:08:a7:43:86:ea:61:ca: a0:ef:27:6b:d4:32:7d:94:4e:a6:fe:da:ed:3c:ee:cf:92:0f: af:17:93:d0:18:70:0f:77:db:8e:f6:5a:e2:87:49:68:37:7b: fb:2c:fc:6c:0c:ee:b0:0a:98:a8:dc:bf:05:44:0b:40:1d:07: 4b:97:e0:2d:9f:1b:d1:25:ba:df:82:d1:33:94:ee:68:04:38: 37:88:a0:aa:9a:82:40:a1:c2:f7:ff:bd:6e:10:3a:6b:29:54: bf:48:0f:0f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUGoXhWJsEOuzte/gxhsv/XfzGOiswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTUyRTM2N0NDRTYwQ0U0NjI3MzVBNDA5NjYzRTdERTNC MDQ3MEU5NzAeFw0yNjA1MTMwNDA4MDJaFw0yNjA1MTQwNTU5MDJaMDMxMTAvBgNV BAMTKDkwNzNDNEMxNURFMkVFQjgxRkMyMjlCNzA2ODRFMTJERDNFQzFCNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiPqtH+qYTMyX+5oMQcD5v2HsT VP80hM2xqgzF0bY//YqdG9+QlZC3sUC27A1K/1z2rkrGUBQR7csP96tmBAaCcbZb Ap6RnR5E9RbUEgCS8PRxEipFaST6rP7ONSoLj6kLEyeaOXRfnyyWRKKJSBgCE5lK GFurzDrdadREBTV++T6AE8Yk/HVJvlr5pt69VgVNThpq8dsdFbmvOx3XP4Wn/CcS 8vwU9UNRGjlsgBdbVsZJxOCN7VTsQKVKBo7ePg/yv48Fk+fFRkgdWdsV7w3OFtHj fGUBqGL85d2iI/9jMCZMC+C7qO6nZAxGlp5bOU6X/Z3s3zPo9rekryBqzqhDAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUkHPEwV3i7rgfwim3BoThLdPsG08wHwYDVR0j BBgwFoAUlS42fM5gzkYnNaQJZj5947BHDpcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOTlIeXJlbnNqZUxSUjZSMzhoTGo1TVFNczJLdll2TkNXRlh4aTlWWDV4 bVMvMC85NTJFMzY3Q0NFNjBDRTQ2MjczNUE0MDk2NjNFN0RFM0IwNDcwRTk3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk1MkUzNjdDQ0U2MENFNDYy NzM1QTQwOTY2M0U3REUzQjA0NzBFOTcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OTlIeXJlbnNqZUxSUjZSMzhoTGo1TVFNczJLdll2TkNXRlh4aTlWWDV4bVMvMC85 NTJFMzY3Q0NFNjBDRTQ2MjczNUE0MDk2NjNFN0RFM0IwNDcwRTk3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOHkGyeVomkl7oJGzBVuyfYQ8HdOMEolvz1hYnblKpMUS1WNXUv0WLL8Wji4n twk+lBz6CtP3wSWFm1I3QkDxq7Ek8HD0b+dxxDbbiguDAZkWBt5JJSGnFqrmkTgd IS/Zo7uChKa3OW4rQVBAcu628XZjvoFQIHg8W5zyx3yeTaxXBWLTPbSqmjABzfqL 70WOlq80qCE8bt9TCh4Ip0OG6mHKoO8na9QyfZROpv7a7Tzuz5IPrxeT0BhwD3fb jvZa4odJaDd7+yz8bAzusAqYqNy/BUQLQB0HS5fgLZ8b0SW634LRM5TuaAQ4N4ig qpqCQKHC9/+9bhA6aylUv0gPDw== -----END CERTIFICATE-----Generated at Wed May 13 21:00:19 2026 by rpki-client