$ rpki-client -vvf rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/3252E783D98B854BCC439007DE017EB6E4E2FF51.mft File: 3252E783D98B854BCC439007DE017EB6E4E2FF51.mft (raw, json) Hash identifier: BD6TVt/x9MM5b5a+s6AiEgpGSB9Ax27L1mMBR5eGCaI= Subject key identifier: 93:FA:3F:37:6E:C9:57:1A:E1:CD:D2:A8:C0:3E:AE:17:4E:45:0C:40 Authority key identifier: 32:52:E7:83:D9:8B:85:4B:CC:43:90:07:DE:01:7E:B6:E4:E2:FF:51 Certificate issuer: /CN=3252E783D98B854BCC439007DE017EB6E4E2FF51 Certificate serial: 049E6183A31C384E55204982EB197EEE7ACFF5A9 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3252E783D98B854BCC439007DE017EB6E4E2FF51.cer Subject info access: rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/3252E783D98B854BCC439007DE017EB6E4E2FF51.mft Manifest number: D5 Signing time: Wed 13 May 2026 09:39:07 +0000 Manifest this update: Wed 13 May 2026 09:34:07 +0000 Manifest next update: Thu 14 May 2026 12:54:07 +0000 Files and hashes: 1: 3133382e3138362e3138342e302f32322d3332203d3e203631373834.roa (hash: Gp1PMxDQ40LAoeo7u3FrJiFb2mSa2LoBqbgag3h7iyw=) 2: 3230312e35352e3230302e302f32322d3332203d3e203631373834.roa (hash: evcJoe8kl899b+xGomFq0rjQEr0vjGkY2XfjdeQy63c=) 3: 3252E783D98B854BCC439007DE017EB6E4E2FF51.crl (hash: mBENqz2ps2K/1MB93g/cqQEMKXEqbIm4lXPRJ2ljfeI=) 4: 323830343a313934383a3a2f33322d313238203d3e203631373834.roa (hash: TGqKcq5hhQvs292+DCyMD6YCLTrai4dDENZfetKhjsc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/3252E783D98B854BCC439007DE017EB6E4E2FF51.crl rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/3252E783D98B854BCC439007DE017EB6E4E2FF51.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3252E783D98B854BCC439007DE017EB6E4E2FF51.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 14 May 2026 12:54:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:9e:61:83:a3:1c:38:4e:55:20:49:82:eb:19:7e:ee:7a:cf:f5:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3252E783D98B854BCC439007DE017EB6E4E2FF51 Validity Not Before: May 13 09:34:07 2026 GMT Not After : May 14 12:54:07 2026 GMT Subject: CN=93FA3F376EC9571AE1CDD2A8C03EAE174E450C40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:11:73:97:02:ad:80:6c:0e:c8:be:12:6a:10: 63:67:c7:67:96:5a:56:a4:33:e6:9f:2e:d1:2d:44: ba:de:b1:e9:58:d0:73:dd:24:70:6a:86:0b:c1:b6: 12:ca:c4:fc:46:91:08:dc:79:a3:94:db:58:41:a7: ed:79:39:6e:41:64:cf:20:6e:70:72:45:b6:3d:1a: cd:c9:1c:c9:90:40:6e:2c:f9:e3:3e:d7:90:31:ad: 82:f3:b1:08:71:89:73:07:6e:7c:98:aa:dc:9d:58: ab:41:d1:0d:d1:b7:01:24:0a:89:03:94:29:4d:5a: 85:d9:9c:c0:a5:d3:aa:01:8a:02:d2:75:3f:8c:1e: 5e:4d:90:c3:54:9c:4c:80:0f:f2:75:54:72:5d:44: 02:b5:a5:6a:20:e3:c3:3a:44:dd:98:03:da:db:f7: c9:03:6e:57:eb:4a:a1:1b:81:1e:07:b8:29:5c:a5: 52:74:74:ae:b3:c2:7e:91:7c:f4:1c:d5:b5:53:ea: 02:92:45:ac:a0:d9:a8:81:a4:83:2f:7b:b4:d2:46: 3a:05:54:97:70:f5:a2:52:8b:fd:f4:d9:1c:f5:c6: ab:4e:bb:81:1b:9e:a3:05:0b:f1:0d:1d:a3:0a:2d: a9:d6:3e:79:a9:f3:b8:68:e6:31:07:1c:2a:4b:bf: 17:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:FA:3F:37:6E:C9:57:1A:E1:CD:D2:A8:C0:3E:AE:17:4E:45:0C:40 X509v3 Authority Key Identifier: keyid:32:52:E7:83:D9:8B:85:4B:CC:43:90:07:DE:01:7E:B6:E4:E2:FF:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/3252E783D98B854BCC439007DE017EB6E4E2FF51.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3252E783D98B854BCC439007DE017EB6E4E2FF51.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/3252E783D98B854BCC439007DE017EB6E4E2FF51.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:60:a1:bc:b2:fc:90:85:29:06:e3:e1:35:fc:e2:10:f7:5d: 22:12:be:01:e8:00:3c:1a:02:05:24:df:63:11:a5:9d:11:c9: ae:f7:b7:c6:76:b7:f5:be:c2:36:9f:7c:d2:e5:eb:b1:f5:bf: b8:55:a2:05:b8:92:a4:55:ac:2f:f8:1b:d0:0b:6d:33:46:a1: 07:40:ec:7a:35:48:01:8d:b3:c4:b5:78:b3:68:44:f3:11:cd: 6f:64:53:89:52:a7:72:95:b0:28:bc:64:29:49:44:72:d7:19: 1c:08:8e:dc:c7:a5:c3:45:52:4e:e7:08:f1:62:bd:f1:ba:6b: c6:ea:f6:b8:b6:7d:1f:7e:81:d1:76:d0:da:07:48:6e:4d:37: a8:29:dd:a8:7b:b2:33:09:f9:e6:8d:0f:b7:3a:05:9c:fb:26: 88:db:74:b3:b9:59:d3:69:99:07:32:74:f5:8e:8a:a5:8b:bd: 58:8f:08:56:26:42:cb:4d:9b:b5:64:5a:93:22:fb:5e:ee:ef: d5:77:07:c5:a2:d3:e8:8f:a9:04:34:f8:cd:fd:a0:0f:9c:ab: 19:05:56:72:aa:48:ca:b2:bb:b6:08:14:4c:fd:f7:55:58:b6: 08:07:8b:11:fd:39:b2:69:a0:5d:10:24:7d:ff:09:b6:3c:78: 86:dc:56:91 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUBJ5hg6McOE5VIEmC6xl+7nrP9akwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzI1MkU3ODNEOThCODU0QkNDNDM5MDA3REUwMTdFQjZF NEUyRkY1MTAeFw0yNjA1MTMwOTM0MDdaFw0yNjA1MTQxMjU0MDdaMDMxMTAvBgNV BAMTKDkzRkEzRjM3NkVDOTU3MUFFMUNERDJBOEMwM0VBRTE3NEU0NTBDNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0EXOXAq2AbA7IvhJqEGNnx2eW WlakM+afLtEtRLreselY0HPdJHBqhgvBthLKxPxGkQjceaOU21hBp+15OW5BZM8g bnByRbY9Gs3JHMmQQG4s+eM+15AxrYLzsQhxiXMHbnyYqtydWKtB0Q3RtwEkCokD lClNWoXZnMCl06oBigLSdT+MHl5NkMNUnEyAD/J1VHJdRAK1pWog48M6RN2YA9rb 98kDblfrSqEbgR4HuClcpVJ0dK6zwn6RfPQc1bVT6gKSRayg2aiBpIMve7TSRjoF VJdw9aJSi/302Rz1xqtOu4EbnqMFC/ENHaMKLanWPnmp87ho5jEHHCpLvxdfAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUk/o/N27JVxrhzdKowD6uF05FDEAwHwYDVR0j BBgwFoAUMlLng9mLhUvMQ5AH3gF+tuTi/1EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRDRFV1RYWEdVaW9CcGFTMzhiV1VHUDMxdzFwR2hFVkxxRGRSYlViWjJU VVIvMC8zMjUyRTc4M0Q5OEI4NTRCQ0M0MzkwMDdERTAxN0VCNkU0RTJGRjUxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMyNTJFNzgzRDk4Qjg1NEJD QzQzOTAwN0RFMDE3RUI2RTRFMkZGNTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RDRFV1RYWEdVaW9CcGFTMzhiV1VHUDMxdzFwR2hFVkxxRGRSYlViWjJUVVIvMC8z MjUyRTc4M0Q5OEI4NTRCQ0M0MzkwMDdERTAxN0VCNkU0RTJGRjUxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAamChvLL8kIUpBuPhNfziEPddIhK+AegAPBoCBSTfYxGlnRHJrve3xna39b7C Np980uXrsfW/uFWiBbiSpFWsL/gb0AttM0ahB0DsejVIAY2zxLV4s2hE8xHNb2RT iVKncpWwKLxkKUlEctcZHAiO3Melw0VSTucI8WK98bprxur2uLZ9H36B0XbQ2gdI bk03qCndqHuyMwn55o0PtzoFnPsmiNt0s7lZ02mZBzJ09Y6KpYu9WI8IViZCy02b tWRakyL7Xu7v1XcHxaLT6I+pBDT4zf2gD5yrGQVWcqpIyrK7tggUTP33VVi2CAeL Ef05smmgXRAkff8Jtjx4htxWkQ== -----END CERTIFICATE-----Generated at Wed May 13 18:36:02 2026 by rpki-client