$ rpki-client -vvf rpki-repo.registro.br/repo/D657bXPCT1rs5scmeJ57CSV712Bf6Lgm7BY3FrvytfbG/0/7F951CE7133E8C196A0DDFD05F2BE3E700CCA518.mft File: 7F951CE7133E8C196A0DDFD05F2BE3E700CCA518.mft (raw, json) Hash identifier: R3CKz+eYBsDd2EaF3HZT6fSvmrkhLayXNVWYV78UV6w= Subject key identifier: 18:9B:9B:71:2F:41:A6:35:6A:D3:7D:29:1E:27:F7:72:22:60:2F:98 Authority key identifier: 7F:95:1C:E7:13:3E:8C:19:6A:0D:DF:D0:5F:2B:E3:E7:00:CC:A5:18 Certificate issuer: /CN=7F951CE7133E8C196A0DDFD05F2BE3E700CCA518 Certificate serial: 203111EE3728C4ED0EA3B7E0CD0645C29C9B8058 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F951CE7133E8C196A0DDFD05F2BE3E700CCA518.cer Subject info access: rsync://rpki-repo.registro.br/repo/D657bXPCT1rs5scmeJ57CSV712Bf6Lgm7BY3FrvytfbG/0/7F951CE7133E8C196A0DDFD05F2BE3E700CCA518.mft Manifest number: 96 Signing time: Tue 12 May 2026 21:41:03 +0000 Manifest this update: Tue 12 May 2026 21:36:03 +0000 Manifest next update: Wed 13 May 2026 23:48:03 +0000 Files and hashes: 1: 3230302e3233382e302e302f32322d3234203d3e203130383735.roa (hash: soPSN9b4ekMx1mktEjHi84itiWb8STvEVbrrV7wWePw=) 2: 3230302e3233382e302e302f31382d3138203d3e2032373136.roa (hash: Xq9u/lwwLBvakUomY86C1wmvZ3Kd6a4tfG8w9WoXfXM=) 3: 3230302e3233362e33322e302f31392d3139203d3e2032373136.roa (hash: cmNrqCAEYpWyAcLaCuFS8zyle/Ea5a2ns1erFCxxh2c=) 4: 7F951CE7133E8C196A0DDFD05F2BE3E700CCA518.crl (hash: eFQMzTr2ZTaGvOreZ86b0M3ixIXRejjEDgUe0G7Ayxo=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/D657bXPCT1rs5scmeJ57CSV712Bf6Lgm7BY3FrvytfbG/0/7F951CE7133E8C196A0DDFD05F2BE3E700CCA518.crl rsync://rpki-repo.registro.br/repo/D657bXPCT1rs5scmeJ57CSV712Bf6Lgm7BY3FrvytfbG/0/7F951CE7133E8C196A0DDFD05F2BE3E700CCA518.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F951CE7133E8C196A0DDFD05F2BE3E700CCA518.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 13 May 2026 23:48:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:31:11:ee:37:28:c4:ed:0e:a3:b7:e0:cd:06:45:c2:9c:9b:80:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7F951CE7133E8C196A0DDFD05F2BE3E700CCA518 Validity Not Before: May 12 21:36:03 2026 GMT Not After : May 13 23:48:03 2026 GMT Subject: CN=189B9B712F41A6356AD37D291E27F77222602F98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:88:25:ec:13:63:bb:fc:b9:8a:a0:c0:c1:1b: 2f:28:dc:e3:e7:0a:2f:9b:5b:f6:45:96:39:07:9c: 0e:43:f0:3b:b6:7c:e0:79:2b:49:04:8c:74:06:4e: f8:04:64:96:65:8f:8c:7a:77:70:2d:dc:ed:49:34: bc:92:45:c8:b8:52:ce:55:ff:58:65:09:7b:1a:62: 18:23:ae:ea:4e:a4:ae:9b:49:4f:fe:70:1f:70:80: df:e4:00:71:3a:33:73:4a:7f:f1:44:ff:fe:52:86: ed:27:82:47:ba:8f:16:96:66:e3:a2:e2:7e:f7:86: ca:f0:11:b2:bd:c3:e5:28:46:0a:ff:d6:a0:40:1a: 33:79:5a:29:03:4b:e2:49:eb:93:a7:00:34:cf:9b: ec:51:f3:e8:30:3e:62:17:91:47:f0:0c:6a:15:7c: 3f:34:8d:65:16:58:b2:8e:ef:de:54:16:dc:3f:3f: 7d:f9:3d:a0:e4:5e:50:0a:cc:4b:e0:fb:f2:a5:71: a0:6b:52:07:a0:13:9d:26:37:24:77:b7:df:ae:7e: d5:1b:21:cc:9b:5c:7e:9a:72:f7:04:ec:1b:9b:d6: 70:09:0c:6f:32:63:55:bb:3c:d3:c7:5f:e7:d4:c7: 11:0b:cb:f6:9e:29:b5:d1:05:cd:3a:04:55:48:60: 8a:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:9B:9B:71:2F:41:A6:35:6A:D3:7D:29:1E:27:F7:72:22:60:2F:98 X509v3 Authority Key Identifier: keyid:7F:95:1C:E7:13:3E:8C:19:6A:0D:DF:D0:5F:2B:E3:E7:00:CC:A5:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/D657bXPCT1rs5scmeJ57CSV712Bf6Lgm7BY3FrvytfbG/0/7F951CE7133E8C196A0DDFD05F2BE3E700CCA518.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F951CE7133E8C196A0DDFD05F2BE3E700CCA518.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/D657bXPCT1rs5scmeJ57CSV712Bf6Lgm7BY3FrvytfbG/0/7F951CE7133E8C196A0DDFD05F2BE3E700CCA518.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:f7:03:b7:b6:f5:8d:55:42:13:0a:9d:ad:a1:a5:3f:33:50: 19:c1:77:0f:5b:af:89:a2:b9:b2:1a:37:9d:45:ff:bd:81:01: 18:86:17:06:55:d7:d9:dd:06:dd:08:90:d4:d0:b7:e9:12:bf: d8:81:f1:7f:28:f3:a3:19:60:d2:d7:c0:44:c9:d2:90:6f:ea: 48:d4:2c:35:39:cb:58:cd:d7:25:05:a6:39:b3:f8:b6:6a:00: 6a:df:11:97:f4:6c:96:dc:e0:06:46:fa:26:e7:33:ea:ac:3d: 19:d7:af:f4:a9:ec:67:30:b9:41:a9:5b:bf:b9:96:d0:88:dc: 96:cc:71:2f:98:ac:bf:ca:b8:16:bf:62:29:40:6f:2c:4b:f1: 5d:c2:f4:16:fa:74:36:7f:c2:05:a4:49:22:c0:b9:c1:82:ea: bb:36:61:d5:97:5c:21:ba:06:ac:45:60:04:56:4e:cd:47:64: 41:ba:96:10:d1:b0:2d:e3:9d:0a:ba:ca:1d:10:80:2a:d6:2a: a7:36:8b:f6:64:27:04:40:1a:9f:3a:19:fb:9a:79:39:47:a2: 22:26:17:14:97:ef:38:27:60:ad:6f:d2:78:0e:8a:8b:fa:dc: 20:47:77:1b:1c:44:83:11:a0:7e:25:c2:ef:57:2f:e6:eb:49: a5:27:32:dc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUIDER7jcoxO0Oo7fgzQZFwpybgFgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Y5NTFDRTcxMzNFOEMxOTZBMERERkQwNUYyQkUzRTcw MENDQTUxODAeFw0yNjA1MTIyMTM2MDNaFw0yNjA1MTMyMzQ4MDNaMDMxMTAvBgNV BAMTKDE4OUI5QjcxMkY0MUE2MzU2QUQzN0QyOTFFMjdGNzcyMjI2MDJGOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPiCXsE2O7/LmKoMDBGy8o3OPn Ci+bW/ZFljkHnA5D8Du2fOB5K0kEjHQGTvgEZJZlj4x6d3At3O1JNLySRci4Us5V /1hlCXsaYhgjrupOpK6bSU/+cB9wgN/kAHE6M3NKf/FE//5Shu0ngke6jxaWZuOi 4n73hsrwEbK9w+UoRgr/1qBAGjN5WikDS+JJ65OnADTPm+xR8+gwPmIXkUfwDGoV fD80jWUWWLKO795UFtw/P335PaDkXlAKzEvg+/KlcaBrUgegE50mNyR3t9+uftUb IcybXH6acvcE7Bub1nAJDG8yY1W7PNPHX+fUxxELy/aeKbXRBc06BFVIYIqtAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUGJubcS9BpjVq030pHif3ciJgL5gwHwYDVR0j BBgwFoAUf5Uc5xM+jBlqDd/QXyvj5wDMpRgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRDY1N2JYUENUMXJzNXNjbWVKNTdDU1Y3MTJCZjZMZ203QlkzRnJ2eXRm YkcvMC83Rjk1MUNFNzEzM0U4QzE5NkEwRERGRDA1RjJCRTNFNzAwQ0NBNTE4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdGOTUxQ0U3MTMzRThDMTk2 QTBEREZEMDVGMkJFM0U3MDBDQ0E1MTguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RDY1N2JYUENUMXJzNXNjbWVKNTdDU1Y3MTJCZjZMZ203QlkzRnJ2eXRmYkcvMC83 Rjk1MUNFNzEzM0U4QzE5NkEwRERGRDA1RjJCRTNFNzAwQ0NBNTE4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAB/cDt7b1jVVCEwqdraGlPzNQGcF3D1uviaK5sho3nUX/vYEBGIYXBlXX2d0G 3QiQ1NC36RK/2IHxfyjzoxlg0tfARMnSkG/qSNQsNTnLWM3XJQWmObP4tmoAat8R l/RsltzgBkb6Jucz6qw9Gdev9KnsZzC5Qalbv7mW0IjclsxxL5isv8q4Fr9iKUBv LEvxXcL0Fvp0Nn/CBaRJIsC5wYLquzZh1ZdcIboGrEVgBFZOzUdkQbqWENGwLeOd CrrKHRCAKtYqpzaL9mQnBEAanzoZ+5p5OUeiIiYXFJfvOCdgrW/SeA6Ki/rcIEd3 GxxEgxGgfiXC71cv5utJpScy3A== -----END CERTIFICATE-----Generated at Wed May 13 11:36:37 2026 by rpki-client