$ rpki-client -vvf rpki-repo.registro.br/repo/BCneDvRBFSAzp7iw6SH6NKUw9oFjgcLDiHALZ3YEUrT7/1/CFB7582F28699F351069C8C76CC97167BF7BB2EE.mft File: CFB7582F28699F351069C8C76CC97167BF7BB2EE.mft (raw, json) Hash identifier: +wmOA11YXtcA7xbfxrNJtAMPXohDhYCUv3EMlNioAwQ= Subject key identifier: 24:4E:A8:B5:73:91:FF:9A:72:E2:A3:B9:E7:21:3C:3E:0A:98:13:0A Authority key identifier: CF:B7:58:2F:28:69:9F:35:10:69:C8:C7:6C:C9:71:67:BF:7B:B2:EE Certificate issuer: /CN=CFB7582F28699F351069C8C76CC97167BF7BB2EE Certificate serial: 29543D31C3004FBB284746AEDF438D465BD46529 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFB7582F28699F351069C8C76CC97167BF7BB2EE.cer Subject info access: rsync://rpki-repo.registro.br/repo/BCneDvRBFSAzp7iw6SH6NKUw9oFjgcLDiHALZ3YEUrT7/1/CFB7582F28699F351069C8C76CC97167BF7BB2EE.mft Manifest number: 0405 Signing time: Tue 12 May 2026 21:34:59 +0000 Manifest this update: Tue 12 May 2026 21:29:59 +0000 Manifest next update: Wed 13 May 2026 23:28:59 +0000 Files and hashes: 1: CFB7582F28699F351069C8C76CC97167BF7BB2EE.crl (hash: k/RS7sVQ4c7x6amht+YoX/TBE1pqHM0ZCGzaXB8z5iA=) 2: 323830343a6362303a3a2f33322d3438203d3e203532373432.roa (hash: OhngJLTjITTfBnt+qyHLrtVqgrZC2VpFlDFytpAhzhI=) 3: 3133382e3131382e3235322e302f32322d3234203d3e203532373432.roa (hash: 0+L4aZDGVE+xOx58Nqs5OwAMrEmJylvDxU3iV/y2d0A=) 4: 3137372e3133302e31362e302f32302d3234203d3e203532373432.roa (hash: rJari9HForGWIAVn++KHhqqJxayzpXRfuI70oICH5Ek=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BCneDvRBFSAzp7iw6SH6NKUw9oFjgcLDiHALZ3YEUrT7/1/CFB7582F28699F351069C8C76CC97167BF7BB2EE.crl rsync://rpki-repo.registro.br/repo/BCneDvRBFSAzp7iw6SH6NKUw9oFjgcLDiHALZ3YEUrT7/1/CFB7582F28699F351069C8C76CC97167BF7BB2EE.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFB7582F28699F351069C8C76CC97167BF7BB2EE.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 13 May 2026 23:28:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:54:3d:31:c3:00:4f:bb:28:47:46:ae:df:43:8d:46:5b:d4:65:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFB7582F28699F351069C8C76CC97167BF7BB2EE Validity Not Before: May 12 21:29:59 2026 GMT Not After : May 13 23:28:59 2026 GMT Subject: CN=244EA8B57391FF9A72E2A3B9E7213C3E0A98130A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:b2:35:0d:e1:3f:2a:8c:00:d4:fb:8f:3a:28: 44:5a:4a:2b:78:76:d6:35:39:8c:07:55:8f:a0:48: a8:8e:b5:83:73:6f:89:85:e0:f0:a9:7e:10:5f:df: 37:5d:13:13:58:ba:6b:8c:4b:3a:cc:df:4b:d8:27: e1:30:17:75:86:dd:a6:d6:66:ab:05:78:b7:c4:9e: 7b:c1:fb:ee:8f:43:b0:08:9e:f8:87:40:53:db:f9: 35:9c:8b:a4:06:77:38:a1:6a:29:46:08:2f:a1:33: 3c:d9:52:e3:98:05:af:59:a2:e0:84:80:c9:2a:c6: d9:37:f3:30:3a:0e:ea:2c:37:8a:ec:74:fb:f8:84: ee:a1:ae:d3:1a:b6:8d:cd:5a:86:9e:65:18:0e:50: 97:e8:08:91:ea:0f:a0:c3:a4:0b:04:bc:41:30:74: d6:4e:c0:6b:c5:4b:bc:c8:c1:84:0d:8b:17:8f:f3: d9:ff:90:b7:d9:28:9c:46:88:b2:a2:c0:a0:b4:bc: b8:68:cf:21:78:3b:a7:fc:1f:fb:76:60:87:48:7a: 7d:ca:c7:5f:85:5b:c0:5d:d1:d0:ae:9d:9f:24:04: f4:f6:f3:5f:3a:96:cc:3f:b1:d5:23:d1:ea:5e:79: 5a:03:34:71:50:18:5c:c3:1e:73:a4:af:73:de:57: 93:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:4E:A8:B5:73:91:FF:9A:72:E2:A3:B9:E7:21:3C:3E:0A:98:13:0A X509v3 Authority Key Identifier: keyid:CF:B7:58:2F:28:69:9F:35:10:69:C8:C7:6C:C9:71:67:BF:7B:B2:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BCneDvRBFSAzp7iw6SH6NKUw9oFjgcLDiHALZ3YEUrT7/1/CFB7582F28699F351069C8C76CC97167BF7BB2EE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFB7582F28699F351069C8C76CC97167BF7BB2EE.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BCneDvRBFSAzp7iw6SH6NKUw9oFjgcLDiHALZ3YEUrT7/1/CFB7582F28699F351069C8C76CC97167BF7BB2EE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:ee:ee:1d:b6:a2:ed:5b:d1:6b:2f:0c:e9:45:1e:16:6a:02: 21:b2:40:3a:83:14:24:cb:0b:e7:fb:6f:b9:09:ff:a7:44:db: 31:56:26:cc:a8:9a:5d:f8:40:e4:57:d2:5d:bb:24:6f:27:93: 7c:4e:7d:ba:2a:e4:85:3c:c2:a6:49:5e:c9:74:fc:4d:58:f9: ab:22:53:b4:c6:4f:a4:b5:27:a1:dc:c8:27:0d:86:c1:c1:a1: 27:de:ff:da:01:df:b6:3d:bb:53:4b:c7:6c:0b:b3:80:42:64: 40:31:9e:cd:af:e5:dd:f4:19:4e:4d:ec:04:cd:09:cb:43:01: 35:6f:16:56:4a:27:f1:25:f7:bc:73:c5:ff:17:d8:51:cf:4e: 9c:d2:66:cf:51:b5:be:23:a4:f9:67:e1:2f:e4:d5:1f:3e:88: 46:84:66:0d:2d:70:26:eb:d9:3d:3b:f3:89:2b:52:48:87:cc: 96:f7:2a:2b:9f:40:4f:43:d0:49:93:34:b4:41:bf:53:53:c9: ed:26:2c:31:59:c2:bf:7f:ac:59:4f:e9:ad:9a:be:be:78:0c: 87:27:22:35:f6:ad:b2:1e:e4:6a:62:47:af:fc:1f:18:ad:dc: af:1b:5a:fd:a0:67:c3:11:6e:b8:ed:98:09:79:fb:b1:42:39: 23:06:99:4c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUKVQ9McMAT7soR0au30ONRlvUZSkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZCNzU4MkYyODY5OUYzNTEwNjlDOEM3NkNDOTcxNjdC RjdCQjJFRTAeFw0yNjA1MTIyMTI5NTlaFw0yNjA1MTMyMzI4NTlaMDMxMTAvBgNV BAMTKDI0NEVBOEI1NzM5MUZGOUE3MkUyQTNCOUU3MjEzQzNFMEE5ODEzMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNsjUN4T8qjADU+486KERaSit4 dtY1OYwHVY+gSKiOtYNzb4mF4PCpfhBf3zddExNYumuMSzrM30vYJ+EwF3WG3abW ZqsFeLfEnnvB++6PQ7AInviHQFPb+TWci6QGdzihailGCC+hMzzZUuOYBa9ZouCE gMkqxtk38zA6DuosN4rsdPv4hO6hrtMato3NWoaeZRgOUJfoCJHqD6DDpAsEvEEw dNZOwGvFS7zIwYQNixeP89n/kLfZKJxGiLKiwKC0vLhozyF4O6f8H/t2YIdIen3K x1+FW8Bd0dCunZ8kBPT28186lsw/sdUj0epeeVoDNHFQGFzDHnOkr3PeV5ONAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUJE6otXOR/5py4qO55yE8PgqYEwowHwYDVR0j BBgwFoAUz7dYLyhpnzUQacjHbMlxZ797su4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQkNuZUR2UkJGU0F6cDdpdzZTSDZOS1V3OW9GamdjTERpSEFMWjNZRVVy VDcvMS9DRkI3NTgyRjI4Njk5RjM1MTA2OUM4Qzc2Q0M5NzE2N0JGN0JCMkVFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NGQjc1ODJGMjg2OTlGMzUx MDY5QzhDNzZDQzk3MTY3QkY3QkIyRUUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QkNuZUR2UkJGU0F6cDdpdzZTSDZOS1V3OW9GamdjTERpSEFMWjNZRVVyVDcvMS9D RkI3NTgyRjI4Njk5RjM1MTA2OUM4Qzc2Q0M5NzE2N0JGN0JCMkVFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiO7uHbai7VvRay8M6UUeFmoCIbJAOoMUJMsL5/tvuQn/p0TbMVYmzKiaXfhA 5FfSXbskbyeTfE59uirkhTzCpkleyXT8TVj5qyJTtMZPpLUnodzIJw2GwcGhJ97/ 2gHftj27U0vHbAuzgEJkQDGeza/l3fQZTk3sBM0Jy0MBNW8WVkon8SX3vHPF/xfY Uc9OnNJmz1G1viOk+WfhL+TVHz6IRoRmDS1wJuvZPTvziStSSIfMlvcqK59AT0PQ SZM0tEG/U1PJ7SYsMVnCv3+sWU/prZq+vngMhyciNfatsh7kamJHr/wfGK3crxta /aBnwxFuuO2YCXn7sUI5IwaZTA== -----END CERTIFICATE-----Generated at Wed May 13 18:38:19 2026 by rpki-client