$ rpki-client -vvf rpki-repo.registro.br/repo/H37amJwHJ34LYLrgXe4EHLPrvJi4VQck5SnRXntV3Lh/0/B4EF21A72F48760DE13763E987C39973E33F9FD5.mft File: B4EF21A72F48760DE13763E987C39973E33F9FD5.mft (raw, json) Hash identifier: E7NdULRm7g24TdJu10ApVlDZdW4xGY0tbenmhA/MXhk= Subject key identifier: 09:1E:04:3F:94:E0:90:BE:BF:6B:A8:4B:00:DD:D3:56:67:B8:EC:1E Authority key identifier: B4:EF:21:A7:2F:48:76:0D:E1:37:63:E9:87:C3:99:73:E3:3F:9F:D5 Certificate issuer: /CN=B4EF21A72F48760DE13763E987C39973E33F9FD5 Certificate serial: 4C749614A2C475E4208F3F627EDCB25EFA2F98CA Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4EF21A72F48760DE13763E987C39973E33F9FD5.cer Subject info access: rsync://rpki-repo.registro.br/repo/H37amJwHJ34LYLrgXe4EHLPrvJi4VQck5SnRXntV3Lh/0/B4EF21A72F48760DE13763E987C39973E33F9FD5.mft Manifest number: 4A Signing time: Wed 13 May 2026 13:04:29 +0000 Manifest this update: Wed 13 May 2026 12:59:29 +0000 Manifest next update: Thu 14 May 2026 16:27:29 +0000 Files and hashes: 1: B4EF21A72F48760DE13763E987C39973E33F9FD5.crl (hash: nbpXnrYwuzuB10kzWnIs2QO9sozNS483LXn7y4paJj0=) 2: 323830343a383231633a3a2f33322d3438203d3e20323732343939.roa (hash: +kHabQZOvFU/JDwfE1vMQqpLNnFf9Liaj3xxBgpIejw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/H37amJwHJ34LYLrgXe4EHLPrvJi4VQck5SnRXntV3Lh/0/B4EF21A72F48760DE13763E987C39973E33F9FD5.crl rsync://rpki-repo.registro.br/repo/H37amJwHJ34LYLrgXe4EHLPrvJi4VQck5SnRXntV3Lh/0/B4EF21A72F48760DE13763E987C39973E33F9FD5.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4EF21A72F48760DE13763E987C39973E33F9FD5.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 14 May 2026 16:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:74:96:14:a2:c4:75:e4:20:8f:3f:62:7e:dc:b2:5e:fa:2f:98:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B4EF21A72F48760DE13763E987C39973E33F9FD5 Validity Not Before: May 13 12:59:29 2026 GMT Not After : May 14 16:27:29 2026 GMT Subject: CN=091E043F94E090BEBF6BA84B00DDD35667B8EC1E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:2c:55:00:4f:74:3e:a0:77:4f:e2:5f:09:dd: 2b:ca:3d:ac:a5:b0:d6:50:96:80:4a:d4:18:25:8c: 08:61:c9:a9:c2:9c:8d:5d:cf:75:c1:7a:dd:52:79: 60:47:fc:49:7f:92:82:1f:2f:64:e8:70:c6:55:51: c4:27:f1:5e:b4:fd:a1:44:1c:91:c2:a6:e0:e6:26: 96:b0:27:a6:55:eb:09:72:bf:b8:92:7c:8e:76:41: 41:5d:49:da:0a:1c:36:80:25:cf:4f:fd:4a:8a:5f: 33:e4:70:e9:6f:d0:be:96:8a:03:53:f7:6f:5d:45: e3:f7:ac:0b:ba:39:f8:60:36:f5:64:1a:a4:0a:ce: d8:e5:b4:48:c4:9d:87:c2:8d:33:12:34:09:f9:bf: 7b:2b:31:53:9f:ec:05:d9:80:ab:e5:9b:df:2f:e8: 5a:10:86:5e:19:96:6c:70:bc:61:e3:3a:88:4b:a9: 18:f7:b6:ee:d9:d1:1e:65:07:18:9f:ca:4a:2d:8e: 6a:7a:28:2d:14:6b:c2:bf:78:33:fc:de:8f:59:ce: 0d:2e:90:9a:94:0b:e1:f6:59:7c:f0:c6:a6:86:68: ef:23:dd:86:c8:4c:b1:6c:f7:f9:c7:75:cc:81:67: 3c:f2:6e:e2:ba:94:1d:ee:db:01:b4:25:27:7b:91: 51:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:1E:04:3F:94:E0:90:BE:BF:6B:A8:4B:00:DD:D3:56:67:B8:EC:1E X509v3 Authority Key Identifier: keyid:B4:EF:21:A7:2F:48:76:0D:E1:37:63:E9:87:C3:99:73:E3:3F:9F:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/H37amJwHJ34LYLrgXe4EHLPrvJi4VQck5SnRXntV3Lh/0/B4EF21A72F48760DE13763E987C39973E33F9FD5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4EF21A72F48760DE13763E987C39973E33F9FD5.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/H37amJwHJ34LYLrgXe4EHLPrvJi4VQck5SnRXntV3Lh/0/B4EF21A72F48760DE13763E987C39973E33F9FD5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:ed:3d:58:18:96:b0:2b:da:5c:f1:c3:fc:77:11:db:b6:1b: c2:a8:e8:ab:5b:6c:84:2c:51:a8:81:9c:a5:82:a6:6c:fe:2c: c0:da:77:79:0d:a5:e9:31:8a:bd:6d:97:c2:67:22:01:fe:74: 31:5c:cd:4a:21:4a:59:39:a2:20:99:14:55:08:67:78:9c:3e: ab:67:e2:38:81:f2:f3:eb:1e:ac:54:4c:83:a9:5f:e0:36:bb: 86:37:27:2c:18:a5:83:a2:01:4f:08:e7:4b:0c:d4:06:49:ce: ee:ae:30:cf:a1:42:1c:a1:0a:9f:bf:f1:2f:f8:19:cf:1f:34: 88:c2:b9:cd:aa:a0:9c:69:4b:ca:b9:f0:06:57:b3:7b:c3:e5: b1:59:91:a3:2a:8c:9b:0e:6a:20:40:8f:a1:46:bc:d1:fd:1d: 78:c8:10:3f:46:fd:c3:7c:14:b4:99:8b:a5:7b:d0:94:5c:6e: 07:c9:a8:87:22:69:a6:84:bb:12:18:3b:5f:90:a3:9b:72:98: 53:52:35:59:8a:1f:45:e5:69:b4:63:83:83:a3:6a:07:64:84: de:7f:6b:7b:a4:0d:14:54:77:b2:8e:1e:d4:41:be:c2:4b:7f: 25:43:b3:6b:c1:2e:bd:5f:ed:e2:21:38:f0:05:74:31:7b:2f: 4f:26:63:80 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUTHSWFKLEdeQgjz9iftyyXvovmMowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjRFRjIxQTcyRjQ4NzYwREUxMzc2M0U5ODdDMzk5NzNF MzNGOUZENTAeFw0yNjA1MTMxMjU5MjlaFw0yNjA1MTQxNjI3MjlaMDMxMTAvBgNV BAMTKDA5MUUwNDNGOTRFMDkwQkVCRjZCQTg0QjAwREREMzU2NjdCOEVDMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDULFUAT3Q+oHdP4l8J3SvKPayl sNZQloBK1BgljAhhyanCnI1dz3XBet1SeWBH/El/koIfL2TocMZVUcQn8V60/aFE HJHCpuDmJpawJ6ZV6wlyv7iSfI52QUFdSdoKHDaAJc9P/UqKXzPkcOlv0L6WigNT 929dReP3rAu6OfhgNvVkGqQKztjltEjEnYfCjTMSNAn5v3srMVOf7AXZgKvlm98v 6FoQhl4ZlmxwvGHjOohLqRj3tu7Z0R5lBxifykotjmp6KC0Ua8K/eDP83o9Zzg0u kJqUC+H2WXzwxqaGaO8j3YbITLFs9/nHdcyBZzzybuK6lB3u2wG0JSd7kVGvAgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUCR4EP5TgkL6/a6hLAN3TVme47B4wHwYDVR0j BBgwFoAUtO8hpy9Idg3hN2Pph8OZc+M/n9UwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9IMzdhbUp3SEozNExZTHJnWGU0RUhMUHJ2Smk0VlFjazVTblJYbnRWM0xo LzAvQjRFRjIxQTcyRjQ4NzYwREUxMzc2M0U5ODdDMzk5NzNFMzNGOUZENS5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9CNEVGMjFBNzJGNDg3NjBERTEz NzYzRTk4N0MzOTk3M0UzM0Y5RkQ1LmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0gz N2FtSndISjM0TFlMcmdYZTRFSExQcnZKaTRWUWNrNVNuUlhudFYzTGgvMC9CNEVG MjFBNzJGNDg3NjBERTEzNzYzRTk4N0MzOTk3M0UzM0Y5RkQ1Lm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA iu09WBiWsCvaXPHD/HcR27Ybwqjoq1tshCxRqIGcpYKmbP4swNp3eQ2l6TGKvW2X wmciAf50MVzNSiFKWTmiIJkUVQhneJw+q2fiOIHy8+serFRMg6lf4Da7hjcnLBil g6IBTwjnSwzUBknO7q4wz6FCHKEKn7/xL/gZzx80iMK5zaqgnGlLyrnwBleze8Pl sVmRoyqMmw5qIECPoUa80f0deMgQP0b9w3wUtJmLpXvQlFxuB8mohyJppoS7Ehg7 X5Cjm3KYU1I1WYofReVptGODg6NqB2SE3n9re6QNFFR3so4e1EG+wkt/JUOza8Eu vV/t4iE48AV0MXsvTyZjgA== -----END CERTIFICATE-----Generated at Wed May 13 19:45:02 2026 by rpki-client