$ rpki-client -vvf rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/1/2AADFACED9C75E320914697A02E254A3D463839A.mft File: 2AADFACED9C75E320914697A02E254A3D463839A.mft (raw, json) Hash identifier: xqr8mlHbUaM5FtUsZFb6VK5RUqWj7QUmTXXoNf8GoXw= Subject key identifier: 43:D7:5C:5E:CC:08:6A:9F:E6:0F:30:D5:D0:97:35:76:5C:FD:A7:7F Authority key identifier: 2A:AD:FA:CE:D9:C7:5E:32:09:14:69:7A:02:E2:54:A3:D4:63:83:9A Certificate issuer: /CN=2AADFACED9C75E320914697A02E254A3D463839A Certificate serial: 60FC06390B0F421E99D5E883803F9D5FFFA2AAFD Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AADFACED9C75E320914697A02E254A3D463839A.cer Subject info access: rsync://rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/1/2AADFACED9C75E320914697A02E254A3D463839A.mft Manifest number: 03FD Signing time: Wed 13 May 2026 01:35:47 +0000 Manifest this update: Wed 13 May 2026 01:30:47 +0000 Manifest next update: Thu 14 May 2026 04:00:47 +0000 Files and hashes: 1: 323830343a316465383a3a2f33322d3434203d3e203533313230.roa (hash: Nr+GaVgOM2KaxkMsqzw8YASCuxHUI3aExeAauUF/zmg=) 2: 3134312e3139332e3135312e302f32342d3234203d3e203533313230.roa (hash: yzKUpRe3y8LUWcm83z69Jaw9iWkJf+qC/m+2IVHZxlc=) 3: 3138372e3131312e31362e302f32302d3234203d3e203533313230.roa (hash: Wl3NM8LcidtB9ABien1wpKt4MxmMwZ7mN01Y9qxRLP8=) 4: 2AADFACED9C75E320914697A02E254A3D463839A.crl (hash: BS8HzNGKe+aG6drq/kzfLBuo9rqQct2wemhxtGL5tmw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/1/2AADFACED9C75E320914697A02E254A3D463839A.crl rsync://rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/1/2AADFACED9C75E320914697A02E254A3D463839A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AADFACED9C75E320914697A02E254A3D463839A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 14 May 2026 04:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:fc:06:39:0b:0f:42:1e:99:d5:e8:83:80:3f:9d:5f:ff:a2:aa:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2AADFACED9C75E320914697A02E254A3D463839A Validity Not Before: May 13 01:30:47 2026 GMT Not After : May 14 04:00:47 2026 GMT Subject: CN=43D75C5ECC086A9FE60F30D5D09735765CFDA77F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:0d:8b:f8:71:b4:77:1e:31:3e:87:b2:65:32: 6a:d8:d2:5a:5c:84:da:bc:33:bd:92:83:cf:de:5f: bd:39:4b:00:6c:e1:7f:a7:c6:69:60:87:a7:46:9c: 30:b3:88:27:57:e6:8a:47:23:1c:1d:6d:0a:5a:d4: 36:ad:23:f8:3c:c8:6d:1f:d2:3a:83:19:91:1c:24: 42:36:d0:be:8e:a0:a9:8e:b4:f8:57:7d:8c:d6:58: 4e:ee:c3:b7:99:e5:ce:ba:c0:77:13:36:14:82:aa: 9a:5c:e9:a7:fb:65:09:1a:48:10:15:14:90:c2:9b: c9:9c:9a:7a:3f:98:9f:7c:1a:4b:8d:4f:0b:94:eb: 76:ef:99:b1:54:02:15:bc:f1:33:18:9e:95:5f:35: 99:05:e5:f2:22:bd:59:c4:27:e5:07:8e:c7:76:58: 16:1d:4e:fb:eb:ec:80:49:12:94:66:72:74:0d:f1: a9:21:0b:82:b1:6e:b7:01:c2:61:37:ae:17:bc:0b: 91:2c:d1:92:74:d3:1e:cc:1c:fd:36:23:0f:57:bf: d9:7b:09:d3:76:cc:92:b5:12:0b:2c:e5:0c:1b:7b: cb:d3:be:c8:1a:4f:30:ba:f6:86:1d:a5:07:00:66: fc:83:44:57:a6:4b:18:eb:0b:ec:fd:8e:64:60:60: 56:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:D7:5C:5E:CC:08:6A:9F:E6:0F:30:D5:D0:97:35:76:5C:FD:A7:7F X509v3 Authority Key Identifier: keyid:2A:AD:FA:CE:D9:C7:5E:32:09:14:69:7A:02:E2:54:A3:D4:63:83:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/1/2AADFACED9C75E320914697A02E254A3D463839A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AADFACED9C75E320914697A02E254A3D463839A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/1/2AADFACED9C75E320914697A02E254A3D463839A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:6c:7f:87:10:aa:05:3a:b5:81:bd:11:c3:4e:e2:00:50:3e: 40:0c:6e:c5:9b:01:8d:1f:f7:58:f6:92:d5:c5:29:f0:58:61: 0f:be:eb:68:03:65:61:9a:5e:86:86:16:b9:04:92:45:15:e0: 8b:a5:3a:18:78:7b:38:86:7f:56:5c:69:3a:ed:68:c0:a5:db: 8b:44:7d:b3:04:36:44:f9:51:99:1d:23:97:e1:cf:49:63:bb: 30:27:b3:4f:fc:40:21:69:1b:7c:8a:d3:a7:73:f9:96:1f:5d: b6:2a:b6:44:30:ba:60:ac:dc:e4:73:a6:71:5a:c2:21:52:3a: 2e:69:4e:47:5a:80:c7:06:0e:f7:e2:a4:09:52:c5:c8:a9:f2: ba:b1:3d:76:cf:47:d8:11:e2:b5:a7:14:0c:23:9c:10:9f:02: ae:a9:55:f6:a1:c2:df:da:ca:26:92:43:14:7e:76:7f:9c:8c: 46:0c:7b:c5:9f:29:96:02:8e:0e:1b:12:c2:5f:57:cb:7a:fe: 50:6d:c2:58:33:7e:c2:12:87:85:b0:e5:5e:54:ff:4f:a3:8d: b9:f3:f5:80:44:02:bd:51:30:6d:af:88:7c:7b:cc:bd:92:84: 3b:78:ce:94:29:f0:60:2c:96:e5:42:39:d0:a7:07:ba:05:a2: 6d:9c:e8:10 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUYPwGOQsPQh6Z1eiDgD+dX/+iqv0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFBREZBQ0VEOUM3NUUzMjA5MTQ2OTdBMDJFMjU0QTNE NDYzODM5QTAeFw0yNjA1MTMwMTMwNDdaFw0yNjA1MTQwNDAwNDdaMDMxMTAvBgNV BAMTKDQzRDc1QzVFQ0MwODZBOUZFNjBGMzBENUQwOTczNTc2NUNGREE3N0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7DYv4cbR3HjE+h7JlMmrY0lpc hNq8M72Sg8/eX705SwBs4X+nxmlgh6dGnDCziCdX5opHIxwdbQpa1DatI/g8yG0f 0jqDGZEcJEI20L6OoKmOtPhXfYzWWE7uw7eZ5c66wHcTNhSCqppc6af7ZQkaSBAV FJDCm8mcmno/mJ98GkuNTwuU63bvmbFUAhW88TMYnpVfNZkF5fIivVnEJ+UHjsd2 WBYdTvvr7IBJEpRmcnQN8akhC4KxbrcBwmE3rhe8C5Es0ZJ00x7MHP02Iw9Xv9l7 CdN2zJK1Egss5Qwbe8vTvsgaTzC69oYdpQcAZvyDRFemSxjrC+z9jmRgYFavAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUQ9dcXswIap/mDzDV0Jc1dlz9p38wHwYDVR0j BBgwFoAUKq36ztnHXjIJFGl6AuJUo9Rjg5owDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSHVyY0FKek1GTEY4ZTRncEg2SmVqUkRxM2p2UEpqYmttMW05bVJCU0Ru eW8vMS8yQUFERkFDRUQ5Qzc1RTMyMDkxNDY5N0EwMkUyNTRBM0Q0NjM4MzlBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJBQURGQUNFRDlDNzVFMzIw OTE0Njk3QTAyRTI1NEEzRDQ2MzgzOUEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SHVyY0FKek1GTEY4ZTRncEg2SmVqUkRxM2p2UEpqYmttMW05bVJCU0RueW8vMS8y QUFERkFDRUQ5Qzc1RTMyMDkxNDY5N0EwMkUyNTRBM0Q0NjM4MzlBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEARGx/hxCqBTq1gb0Rw07iAFA+QAxuxZsBjR/3WPaS1cUp8FhhD77raANlYZpe hoYWuQSSRRXgi6U6GHh7OIZ/VlxpOu1owKXbi0R9swQ2RPlRmR0jl+HPSWO7MCez T/xAIWkbfIrTp3P5lh9dtiq2RDC6YKzc5HOmcVrCIVI6LmlOR1qAxwYO9+KkCVLF yKnyurE9ds9H2BHitacUDCOcEJ8CrqlV9qHC39rKJpJDFH52f5yMRgx7xZ8plgKO DhsSwl9Xy3r+UG3CWDN+whKHhbDlXlT/T6ONufP1gEQCvVEwba+IfHvMvZKEO3jO lCnwYCyW5UI50KcHugWibZzoEA== -----END CERTIFICATE-----Generated at Wed May 13 16:57:12 2026 by rpki-client