$ rpki-client -vvf rpki-repo.registro.br/repo/BihkiDR1zFdi55xn12kGyYSNuswzMgVcyxSQz9ifFfzj/0/CA9298E26EC7D83F990DD29EFD395097A928590F.mft File: CA9298E26EC7D83F990DD29EFD395097A928590F.mft (raw, json) Hash identifier: L9KyMFe3HhPmNnhlV2dF5FFqxJRKbe2lRiR59LA7f9k= Subject key identifier: 5F:EC:A6:DC:07:2E:C5:FD:E0:A5:23:AB:40:A9:6D:1A:B8:C5:EE:BF Authority key identifier: CA:92:98:E2:6E:C7:D8:3F:99:0D:D2:9E:FD:39:50:97:A9:28:59:0F Certificate issuer: /CN=CA9298E26EC7D83F990DD29EFD395097A928590F Certificate serial: 7A3F2E151E7E13B5D75A416F864C7F162D496E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA9298E26EC7D83F990DD29EFD395097A928590F.cer Subject info access: rsync://rpki-repo.registro.br/repo/BihkiDR1zFdi55xn12kGyYSNuswzMgVcyxSQz9ifFfzj/0/CA9298E26EC7D83F990DD29EFD395097A928590F.mft Manifest number: 0328 Signing time: Tue 12 May 2026 23:44:31 +0000 Manifest this update: Tue 12 May 2026 23:39:31 +0000 Manifest next update: Wed 13 May 2026 23:45:31 +0000 Files and hashes: 1: 323830343a316165633a3a2f33322d3438203d3e203631363938.roa (hash: IFrUYpuj0d1bgr14YmgI4By335jGYf5cwE1I2H0w90A=) 2: CA9298E26EC7D83F990DD29EFD395097A928590F.crl (hash: y7zSu4pBRVtgDcr16JN62rDZCOlLFi9lJPdivoSksaI=) 3: 3133312e302e3136342e302f32322d3234203d3e203631363938.roa (hash: wtyTmXZbRgRsfoJNHLj8NWX0CbM90+xKZ4dA+uKkbSs=) 4: 3136382e3232372e38302e302f32322d3234203d3e203631363938.roa (hash: S1X3FDjegEq67IqZtyansbQSwefFYc5W5CadNAvGNo4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BihkiDR1zFdi55xn12kGyYSNuswzMgVcyxSQz9ifFfzj/0/CA9298E26EC7D83F990DD29EFD395097A928590F.crl rsync://rpki-repo.registro.br/repo/BihkiDR1zFdi55xn12kGyYSNuswzMgVcyxSQz9ifFfzj/0/CA9298E26EC7D83F990DD29EFD395097A928590F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA9298E26EC7D83F990DD29EFD395097A928590F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 13 May 2026 23:45:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:3f:2e:15:1e:7e:13:b5:d7:5a:41:6f:86:4c:7f:16:2d:49:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA9298E26EC7D83F990DD29EFD395097A928590F Validity Not Before: May 12 23:39:31 2026 GMT Not After : May 13 23:45:31 2026 GMT Subject: CN=5FECA6DC072EC5FDE0A523AB40A96D1AB8C5EEBF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:07:43:93:2d:64:58:81:4d:63:fa:0e:70:ea: b1:ff:e6:23:73:21:ec:55:1f:57:b4:e4:0d:73:1a: cc:b6:83:9e:cf:25:3f:5d:c8:00:64:26:e7:34:4e: ec:a1:6f:05:50:57:d3:ee:63:7c:2c:8f:f6:59:bd: b5:3c:8f:70:90:04:0b:34:72:dc:72:f2:f8:37:1a: af:bd:ae:c5:74:5e:58:05:cf:57:eb:3b:2f:1d:bd: b9:0b:5a:57:68:43:82:60:ab:85:55:9d:72:aa:a4: 93:c3:a8:aa:e5:e1:ee:ba:3b:c4:d8:16:aa:da:e4: 72:f0:0e:30:96:b7:f2:3c:8e:32:a0:ad:85:57:c9: 81:e1:50:c7:10:5e:49:c9:95:4a:fe:45:85:fd:01: c2:54:0f:10:dd:a1:63:a2:6e:2c:7e:53:59:02:7e: b7:e1:b8:16:ed:a5:8d:42:28:19:52:39:27:2f:5d: df:02:1b:61:cb:f7:7e:04:92:33:62:80:16:31:bf: 17:bc:dc:00:d5:a6:32:af:b4:bc:3f:c6:22:b9:80: d9:f0:dc:29:c7:22:11:74:9f:95:da:03:19:a2:cd: 07:60:c5:62:3a:7b:b4:8f:1c:f6:7b:5c:89:c8:4f: 66:97:83:42:81:f5:a0:e2:8f:77:9a:70:25:d3:f3: 10:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:EC:A6:DC:07:2E:C5:FD:E0:A5:23:AB:40:A9:6D:1A:B8:C5:EE:BF X509v3 Authority Key Identifier: keyid:CA:92:98:E2:6E:C7:D8:3F:99:0D:D2:9E:FD:39:50:97:A9:28:59:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BihkiDR1zFdi55xn12kGyYSNuswzMgVcyxSQz9ifFfzj/0/CA9298E26EC7D83F990DD29EFD395097A928590F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA9298E26EC7D83F990DD29EFD395097A928590F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BihkiDR1zFdi55xn12kGyYSNuswzMgVcyxSQz9ifFfzj/0/CA9298E26EC7D83F990DD29EFD395097A928590F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:8a:b8:2d:4d:61:2d:d5:f2:61:3f:1c:74:76:66:65:11:be: a8:8b:85:b3:ee:85:1a:0a:5b:0c:1b:19:43:aa:b9:01:b6:56: 17:f1:71:1f:00:0b:b6:ac:c8:4c:c9:9f:ed:65:2c:7f:3d:bb: 81:73:a8:2e:bc:6c:42:21:3e:07:10:4f:fb:b7:b1:fc:e1:e9: 5c:21:90:bd:4c:78:6a:33:ce:2d:9b:05:bb:58:3e:10:89:bd: 91:f8:21:a9:32:4b:8d:22:1a:dd:0d:14:df:c3:c5:12:d7:a2: 09:18:16:58:48:fe:8c:f2:b8:68:e2:04:74:4f:fe:d9:cf:45: ea:5c:84:27:aa:2b:a5:62:c2:7c:ab:70:8a:36:57:2e:d4:59: 80:86:9d:50:fa:c0:64:e7:6a:0f:9b:5c:07:b1:a3:89:48:cd: 33:9e:ed:f0:03:0a:76:8e:8a:c8:4b:ca:1f:cf:29:9f:49:18: fa:aa:1c:3d:26:20:58:7c:ef:60:e2:dc:d8:e6:5b:19:a6:0e: 1d:15:71:7e:1f:e5:ee:82:4f:d1:f5:f5:94:f9:87:b9:93:c6: 0d:b0:a5:04:6e:d3:4e:0f:4e:f0:f8:52:f0:e5:91:37:09:39: a6:b8:cb:d1:8e:78:83:52:23:5f:0a:de:bb:53:64:c7:30:9b: 3f:6e:37:a4 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgITej8uFR5+E7XXWkFvhkx/Fi1JbjANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyhDQTkyOThFMjZFQzdEODNGOTkwREQyOUVGRDM5NTA5N0E5 Mjg1OTBGMB4XDTI2MDUxMjIzMzkzMVoXDTI2MDUxMzIzNDUzMVowMzExMC8GA1UE AxMoNUZFQ0E2REMwNzJFQzVGREUwQTUyM0FCNDBBOTZEMUFCOEM1RUVCRjCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOkHQ5MtZFiBTWP6DnDqsf/mI3Mh 7FUfV7TkDXMazLaDns8lP13IAGQm5zRO7KFvBVBX0+5jfCyP9lm9tTyPcJAECzRy 3HLy+Dcar72uxXReWAXPV+s7Lx29uQtaV2hDgmCrhVWdcqqkk8OoquXh7ro7xNgW qtrkcvAOMJa38jyOMqCthVfJgeFQxxBeScmVSv5Fhf0BwlQPEN2hY6JuLH5TWQJ+ t+G4Fu2ljUIoGVI5Jy9d3wIbYcv3fgSSM2KAFjG/F7zcANWmMq+0vD/GIrmA2fDc KcciEXSfldoDGaLNB2DFYjp7tI8c9ntcichPZpeDQoH1oOKPd5pwJdPzEKECAwEA AaOCAlkwggJVMB0GA1UdDgQWBBRf7KbcBy7F/eClI6tAqW0auMXuvzAfBgNVHSME GDAWgBTKkpjibsfYP5kN0p79OVCXqShZDzAOBgNVHQ8BAf8EBAMCB4AwgZQGA1Ud HwSBjDCBiTCBhqCBg6CBgIZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9CaWhraURSMXpGZGk1NXhuMTJrR3lZU051c3d6TWdWY3l4U1F6OWlmRmZ6 ai8wL0NBOTI5OEUyNkVDN0Q4M0Y5OTBERDI5RUZEMzk1MDk3QTkyODU5MEYuY3Js MHgGCCsGAQUFBwEBBGwwajBoBggrBgEFBQcwAoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvQ0E5Mjk4RTI2RUM3RDgzRjk5 MEREMjlFRkQzOTUwOTdBOTI4NTkwRi5jZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGK BggrBgEFBQcwC4Z+cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9C aWhraURSMXpGZGk1NXhuMTJrR3lZU051c3d6TWdWY3l4U1F6OWlmRmZ6ai8wL0NB OTI5OEUyNkVDN0Q4M0Y5OTBERDI5RUZEMzk1MDk3QTkyODU5MEYubWZ0MBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAw BgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA/irgtTWEt1fJhPxx0dmZlEb6oi4Wz7oUaClsMGxlDqrkBtlYX8XEfAAu2rMhM yZ/tZSx/PbuBc6guvGxCIT4HEE/7t7H84elcIZC9THhqM84tmwW7WD4Qib2R+CGp MkuNIhrdDRTfw8US16IJGBZYSP6M8rho4gR0T/7Zz0XqXIQnqiulYsJ8q3CKNlcu 1FmAhp1Q+sBk52oPm1wHsaOJSM0znu3wAwp2jorIS8ofzymfSRj6qhw9JiBYfO9g 4tzY5lsZpg4dFXF+H+Xugk/R9fWU+Ye5k8YNsKUEbtNOD07w+FLw5ZE3CTmmuMvR jniDUiNfCt67U2THMJs/bjek -----END CERTIFICATE-----Generated at Wed May 13 17:09:13 2026 by rpki-client