$ rpki-client -vvf rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/0/D0CF5320BD24F77F01CED59BA43B352C1FA19294.mft File: D0CF5320BD24F77F01CED59BA43B352C1FA19294.mft (raw, json) Hash identifier: 2iN2F4c2qEkRRQeIJzj8cvy+P694EnDDbx0qNLHoYLo= Subject key identifier: 03:7D:36:3E:DC:4B:F6:86:15:42:3F:5D:EE:36:23:18:E6:60:06:EB Authority key identifier: D0:CF:53:20:BD:24:F7:7F:01:CE:D5:9B:A4:3B:35:2C:1F:A1:92:94 Certificate issuer: /CN=D0CF5320BD24F77F01CED59BA43B352C1FA19294 Certificate serial: 3A116A7EB611B7E929E5BF5FC5294C44F9A1DF8F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0CF5320BD24F77F01CED59BA43B352C1FA19294.cer Subject info access: rsync://rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/0/D0CF5320BD24F77F01CED59BA43B352C1FA19294.mft Manifest number: 2E Signing time: Wed 13 May 2026 09:02:13 +0000 Manifest this update: Wed 13 May 2026 08:57:13 +0000 Manifest next update: Thu 14 May 2026 11:28:13 +0000 Files and hashes: 1: 3137302e3233392e342e302f32322d3332203d3e20323636333433.roa (hash: Ew+XSXX5kjV3yvQliJbXhg9r/kN5uUZU+7rqkq7LYtw=) 2: D0CF5320BD24F77F01CED59BA43B352C1FA19294.crl (hash: t26DqfKCTgekl5wnTlj61inlQV3Nus5YoAw09dKoTh8=) 3: 323830343a333635633a3a2f33322d313238203d3e20323636333433.roa (hash: CTc/I4oATaUgTnMimYPthSK6cv6XoInRJAu88IlIznw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/0/D0CF5320BD24F77F01CED59BA43B352C1FA19294.crl rsync://rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/0/D0CF5320BD24F77F01CED59BA43B352C1FA19294.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0CF5320BD24F77F01CED59BA43B352C1FA19294.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 14 May 2026 11:28:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:11:6a:7e:b6:11:b7:e9:29:e5:bf:5f:c5:29:4c:44:f9:a1:df:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0CF5320BD24F77F01CED59BA43B352C1FA19294 Validity Not Before: May 13 08:57:13 2026 GMT Not After : May 14 11:28:13 2026 GMT Subject: CN=037D363EDC4BF68615423F5DEE362318E66006EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:de:19:43:70:b5:73:7d:4b:2b:2f:6d:2d:77: 34:70:8f:68:6b:c1:8e:34:e2:3e:81:39:c4:3d:a9: e1:1a:d1:ca:b9:4e:0d:52:6b:21:94:77:36:fc:8e: 2a:11:df:9e:e1:49:53:07:a5:da:ef:66:1e:9d:23: dc:06:60:0d:9c:2c:30:9b:63:d0:80:a5:4d:14:9a: 2c:28:bd:5c:a4:1a:ad:9a:c4:ec:f1:78:c1:44:ac: 89:d4:fc:be:e3:41:27:60:28:b9:14:e1:d0:cf:09: 0d:7b:6b:51:cd:db:61:41:09:56:4a:dd:04:58:d6: 7c:04:1e:04:75:21:76:ca:b2:d8:c3:61:41:78:b9: c9:c0:67:7e:6b:ab:07:f7:9b:d1:ca:7c:b2:21:e4: 51:d2:d1:e1:14:23:29:05:4e:8d:2e:7f:dd:78:d6: c8:b1:a6:4c:ad:26:c1:97:72:0a:1c:97:75:5f:5d: 70:71:78:f0:fb:ea:16:d9:00:62:72:89:56:a4:c8: 22:c8:ec:63:8a:b7:6f:ee:0c:c3:7e:0a:cd:cc:b1: ba:21:e9:27:53:e7:b0:81:58:91:84:e5:97:ec:10: 1e:cf:e2:41:7f:f1:87:f7:f4:4f:f4:3a:69:c1:53: d2:8c:90:d3:61:61:54:f8:be:ab:0b:d1:af:25:82: 86:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:7D:36:3E:DC:4B:F6:86:15:42:3F:5D:EE:36:23:18:E6:60:06:EB X509v3 Authority Key Identifier: keyid:D0:CF:53:20:BD:24:F7:7F:01:CE:D5:9B:A4:3B:35:2C:1F:A1:92:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/0/D0CF5320BD24F77F01CED59BA43B352C1FA19294.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0CF5320BD24F77F01CED59BA43B352C1FA19294.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/0/D0CF5320BD24F77F01CED59BA43B352C1FA19294.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:f5:35:1b:d6:c4:3a:82:bc:9c:1e:fa:95:9e:6c:90:ca:79: ab:a2:6d:4b:55:92:9f:70:98:e7:d1:96:6a:0f:51:e7:79:a1: d5:7c:47:23:c7:34:6e:b5:12:02:dd:56:83:8b:f1:ae:9f:15: b2:aa:72:50:9a:61:74:fe:f7:35:3f:b1:d5:d7:62:b5:b3:e1: c6:36:4b:3b:17:8e:21:02:c7:c9:01:10:04:68:1d:e4:ec:78: 2e:8e:a3:54:2a:cc:be:1d:f7:bc:24:b5:2f:67:1d:e8:db:c2: c4:e2:16:a2:7f:a2:df:50:b5:98:0c:dc:28:b4:6b:f3:88:f5: e8:19:d5:8a:1d:c0:33:0a:3f:22:35:11:5e:0a:af:3d:d6:1a: a3:e9:2f:53:3a:e6:b4:a5:7b:41:29:f2:00:b4:dd:a5:42:68: 66:78:74:97:64:04:5b:98:21:e8:32:25:7a:4f:b4:9d:22:9f: d0:2a:fa:eb:37:5c:8f:97:fb:7d:e0:f0:ef:1a:f9:94:fd:9b: 87:46:47:c3:c7:19:cc:76:d0:73:cf:ac:5a:b2:dc:b7:76:37: 67:37:b5:b2:83:74:4d:66:fe:e5:55:0e:9a:d3:a3:e2:75:76: b3:4c:ff:0f:51:ed:cf:42:f6:06:2f:a1:17:df:8c:c2:84:76: 9e:99:6a:55 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUOhFqfrYRt+kp5b9fxSlMRPmh348wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDBDRjUzMjBCRDI0Rjc3RjAxQ0VENTlCQTQzQjM1MkMx RkExOTI5NDAeFw0yNjA1MTMwODU3MTNaFw0yNjA1MTQxMTI4MTNaMDMxMTAvBgNV BAMTKDAzN0QzNjNFREM0QkY2ODYxNTQyM0Y1REVFMzYyMzE4RTY2MDA2RUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN3hlDcLVzfUsrL20tdzRwj2hr wY404j6BOcQ9qeEa0cq5Tg1SayGUdzb8jioR357hSVMHpdrvZh6dI9wGYA2cLDCb Y9CApU0UmiwovVykGq2axOzxeMFErInU/L7jQSdgKLkU4dDPCQ17a1HN22FBCVZK 3QRY1nwEHgR1IXbKstjDYUF4ucnAZ35rqwf3m9HKfLIh5FHS0eEUIykFTo0uf914 1sixpkytJsGXcgocl3VfXXBxePD76hbZAGJyiVakyCLI7GOKt2/uDMN+Cs3Msboh 6SdT57CBWJGE5ZfsEB7P4kF/8Yf39E/0OmnBU9KMkNNhYVT4vqsL0a8lgoZ3AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUA302PtxL9oYVQj9d7jYjGOZgBuswHwYDVR0j BBgwFoAU0M9TIL0k938BztWbpDs1LB+hkpQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRUtNTjZWbUNuSjNhbWQ4cndSVzlmR1paZ0JLOWRCbXFiemRCd21tZ3Bl U2UvMC9EMENGNTMyMEJEMjRGNzdGMDFDRUQ1OUJBNDNCMzUyQzFGQTE5Mjk0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QwQ0Y1MzIwQkQyNEY3N0Yw MUNFRDU5QkE0M0IzNTJDMUZBMTkyOTQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RUtNTjZWbUNuSjNhbWQ4cndSVzlmR1paZ0JLOWRCbXFiemRCd21tZ3BlU2UvMC9E MENGNTMyMEJEMjRGNzdGMDFDRUQ1OUJBNDNCMzUyQzFGQTE5Mjk0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEABvU1G9bEOoK8nB76lZ5skMp5q6JtS1WSn3CY59GWag9R53mh1XxHI8c0brUS At1Wg4vxrp8VsqpyUJphdP73NT+x1dditbPhxjZLOxeOIQLHyQEQBGgd5Ox4Lo6j VCrMvh33vCS1L2cd6NvCxOIWon+i31C1mAzcKLRr84j16BnVih3AMwo/IjURXgqv PdYao+kvUzrmtKV7QSnyALTdpUJoZnh0l2QEW5gh6DIlek+0nSKf0Cr66zdcj5f7 feDw7xr5lP2bh0ZHw8cZzHbQc8+sWrLct3Y3Zze1soN0TWb+5VUOmtOj4nV2s0z/ D1Htz0L2Bi+hF9+MwoR2nplqVQ== -----END CERTIFICATE-----Generated at Wed May 13 17:42:26 2026 by rpki-client