$ rpki-client -vvf rpki-repo.registro.br/repo/CjWZeS5rmkGr7mumCmrkWL6ABEYat5sP5N8sKEDWCCqF/0/0DD11D4FF8DAD9A5649C8F1353D414BBEFB7BC15.mft File: 0DD11D4FF8DAD9A5649C8F1353D414BBEFB7BC15.mft (raw, json) Hash identifier: J/MMHmyAalTHetav0pOD+QmJ1t7LQVl+3HbUAFvy12M= Subject key identifier: 70:74:AF:9E:B3:D0:1B:AA:75:75:B8:BC:6F:FA:91:BD:6A:F5:3E:A0 Authority key identifier: 0D:D1:1D:4F:F8:DA:D9:A5:64:9C:8F:13:53:D4:14:BB:EF:B7:BC:15 Certificate issuer: /CN=0DD11D4FF8DAD9A5649C8F1353D414BBEFB7BC15 Certificate serial: 05477682234C5091CFADA0E5B57AC75F3B5117F7 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DD11D4FF8DAD9A5649C8F1353D414BBEFB7BC15.cer Subject info access: rsync://rpki-repo.registro.br/repo/CjWZeS5rmkGr7mumCmrkWL6ABEYat5sP5N8sKEDWCCqF/0/0DD11D4FF8DAD9A5649C8F1353D414BBEFB7BC15.mft Manifest number: 025D Signing time: Tue 12 May 2026 20:45:55 +0000 Manifest this update: Tue 12 May 2026 20:40:55 +0000 Manifest next update: Wed 13 May 2026 23:54:55 +0000 Files and hashes: 1: 3137372e32322e3230382e302f32302d3234203d3e203631383732.roa (hash: 9qdBO6zx55Z0LqirSKIrbpE5X4gh2LGWlaofZe7Vu3g=) 2: 0DD11D4FF8DAD9A5649C8F1353D414BBEFB7BC15.crl (hash: hwpULXV/X+nKc25MimFNQU00O+/HG6qb657CWMaaw2Q=) 3: 323830343a316161303a3a2f33322d3438203d3e203631383732.roa (hash: E+DY2gLkA4xKMl8SJ1JUf/WWEsVYq6iSGF59by3JAqM=) 4: 3137302e38312e34342e302f32322d3234203d3e203631383732.roa (hash: 60h6j9Lf73YfOOoe3tF+EFkY0lpWYAbHzLTkuqv5ENE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CjWZeS5rmkGr7mumCmrkWL6ABEYat5sP5N8sKEDWCCqF/0/0DD11D4FF8DAD9A5649C8F1353D414BBEFB7BC15.crl rsync://rpki-repo.registro.br/repo/CjWZeS5rmkGr7mumCmrkWL6ABEYat5sP5N8sKEDWCCqF/0/0DD11D4FF8DAD9A5649C8F1353D414BBEFB7BC15.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DD11D4FF8DAD9A5649C8F1353D414BBEFB7BC15.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 13 May 2026 23:54:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:47:76:82:23:4c:50:91:cf:ad:a0:e5:b5:7a:c7:5f:3b:51:17:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0DD11D4FF8DAD9A5649C8F1353D414BBEFB7BC15 Validity Not Before: May 12 20:40:55 2026 GMT Not After : May 13 23:54:55 2026 GMT Subject: CN=7074AF9EB3D01BAA7575B8BC6FFA91BD6AF53EA0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ae:7d:61:2a:94:ac:02:bf:e4:d5:b7:d1:78: c1:a3:d2:a6:b0:b6:eb:fc:17:47:22:e3:5e:a7:53: c1:cb:49:46:fb:16:f7:04:4a:3f:6c:27:db:06:ca: 03:c8:2e:a0:4b:2c:13:04:b6:4a:8a:e0:83:64:c3: 52:6b:1c:f0:ed:36:d2:a5:8c:99:9f:7d:55:95:75: 29:02:e7:6a:2f:8e:62:2e:a9:93:7f:c2:b7:70:61: 4e:fd:c8:ce:8c:8e:51:9d:b1:de:44:1c:cb:c9:0b: 46:e4:2d:fa:f2:6e:2c:97:6b:26:21:fe:c5:3d:52: 99:e9:1c:21:28:09:3c:61:23:2d:74:44:fb:c8:f5: 6f:54:c2:47:a2:5f:02:9d:83:99:57:63:5a:6c:9f: b5:be:2e:73:4d:99:5c:7c:d5:5c:27:ac:91:66:83: 25:80:e1:0d:d8:85:ac:6e:ed:23:72:68:87:d9:20: 24:9d:1c:90:20:5f:85:77:c8:d6:0f:86:30:dc:be: 95:8e:15:22:d6:c7:92:7b:58:62:e5:20:12:c3:77: 01:4b:db:e1:5d:60:31:b2:ad:d7:1f:8d:9f:a5:54: a1:d3:98:b2:55:b5:4c:26:73:04:0e:e7:ac:c0:af: c1:6c:62:79:5a:02:fd:81:85:1a:2b:86:16:40:8a: e7:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:74:AF:9E:B3:D0:1B:AA:75:75:B8:BC:6F:FA:91:BD:6A:F5:3E:A0 X509v3 Authority Key Identifier: keyid:0D:D1:1D:4F:F8:DA:D9:A5:64:9C:8F:13:53:D4:14:BB:EF:B7:BC:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CjWZeS5rmkGr7mumCmrkWL6ABEYat5sP5N8sKEDWCCqF/0/0DD11D4FF8DAD9A5649C8F1353D414BBEFB7BC15.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DD11D4FF8DAD9A5649C8F1353D414BBEFB7BC15.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CjWZeS5rmkGr7mumCmrkWL6ABEYat5sP5N8sKEDWCCqF/0/0DD11D4FF8DAD9A5649C8F1353D414BBEFB7BC15.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:ba:08:a1:28:bc:60:3a:30:0a:45:1e:a6:f7:c3:ba:d7:00: b8:c1:05:b5:b5:1d:09:59:3d:d0:20:60:37:c8:3f:cd:dc:56: 3b:44:2e:47:b3:a9:df:e6:18:49:4a:d4:47:de:a7:f1:b6:9b: 65:e3:83:06:f5:82:51:b7:b2:a8:c0:69:38:ab:87:96:09:9a: 51:9e:91:8c:58:6b:d2:ee:8d:c8:42:6f:77:50:58:c0:a1:d5: 2e:da:18:57:99:6b:34:26:cf:50:09:be:ee:80:a8:97:40:2b: 42:eb:27:58:33:23:56:9b:29:0d:3b:f7:a2:36:8f:6c:ab:91: e2:3f:35:1c:3d:8f:e7:4a:72:d0:8a:4b:4a:41:a2:9e:fa:b3: 1e:88:3d:55:6a:82:79:a8:ac:bc:93:45:b0:3d:10:69:33:80: 67:47:6c:df:6b:b0:d5:e4:e4:c5:f8:b8:40:6e:37:6b:d1:e6: 79:17:f1:0b:48:c3:52:0e:34:d3:b7:af:51:a9:7e:d0:05:86: d2:63:4e:e6:34:f9:95:3f:1b:cc:fc:47:de:b0:77:11:a7:86: 66:c1:74:2f:2a:2a:fe:9b:84:1e:a1:8b:fd:b9:68:b6:2f:1b: f9:65:c7:94:30:c7:92:23:a7:bb:bd:7f:b8:81:1d:b1:bb:c2: 00:9e:7a:f6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUBUd2giNMUJHPraDltXrHXztRF/cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEREMTFENEZGOERBRDlBNTY0OUM4RjEzNTNENDE0QkJF RkI3QkMxNTAeFw0yNjA1MTIyMDQwNTVaFw0yNjA1MTMyMzU0NTVaMDMxMTAvBgNV BAMTKDcwNzRBRjlFQjNEMDFCQUE3NTc1QjhCQzZGRkE5MUJENkFGNTNFQTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3rn1hKpSsAr/k1bfReMGj0qaw tuv8F0ci416nU8HLSUb7FvcESj9sJ9sGygPILqBLLBMEtkqK4INkw1JrHPDtNtKl jJmffVWVdSkC52ovjmIuqZN/wrdwYU79yM6MjlGdsd5EHMvJC0bkLfrybiyXayYh /sU9UpnpHCEoCTxhIy10RPvI9W9UwkeiXwKdg5lXY1psn7W+LnNNmVx81VwnrJFm gyWA4Q3Yhaxu7SNyaIfZICSdHJAgX4V3yNYPhjDcvpWOFSLWx5J7WGLlIBLDdwFL 2+FdYDGyrdcfjZ+lVKHTmLJVtUwmcwQO56zAr8FsYnlaAv2BhRorhhZAiucXAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUcHSvnrPQG6p1dbi8b/qRvWr1PqAwHwYDVR0j BBgwFoAUDdEdT/ja2aVknI8TU9QUu++3vBUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ2pXWmVTNXJta0dyN211bUNtcmtXTDZBQkVZYXQ1c1A1TjhzS0VEV0ND cUYvMC8wREQxMUQ0RkY4REFEOUE1NjQ5QzhGMTM1M0Q0MTRCQkVGQjdCQzE1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBERDExRDRGRjhEQUQ5QTU2 NDlDOEYxMzUzRDQxNEJCRUZCN0JDMTUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q2pXWmVTNXJta0dyN211bUNtcmtXTDZBQkVZYXQ1c1A1TjhzS0VEV0NDcUYvMC8w REQxMUQ0RkY4REFEOUE1NjQ5QzhGMTM1M0Q0MTRCQkVGQjdCQzE1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOboIoSi8YDowCkUepvfDutcAuMEFtbUdCVk90CBgN8g/zdxWO0QuR7Op3+YY SUrUR96n8babZeODBvWCUbeyqMBpOKuHlgmaUZ6RjFhr0u6NyEJvd1BYwKHVLtoY V5lrNCbPUAm+7oCol0ArQusnWDMjVpspDTv3ojaPbKuR4j81HD2P50py0IpLSkGi nvqzHog9VWqCeaisvJNFsD0QaTOAZ0ds32uw1eTkxfi4QG43a9HmeRfxC0jDUg40 07evUal+0AWG0mNO5jT5lT8bzPxH3rB3EaeGZsF0Lyoq/puEHqGL/bloti8b+WXH lDDHkiOnu71/uIEdsbvCAJ569g== -----END CERTIFICATE-----Generated at Wed May 13 16:32:51 2026 by rpki-client