$ rpki-client -vvf rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/58AE3F8D1A78163FE870BE464FD4BE2314C1AB3E.mft File: 58AE3F8D1A78163FE870BE464FD4BE2314C1AB3E.mft (raw, json) Hash identifier: m+PW+/qbqJKErUAxIX3psgt6b6UD6qskkr/YG/C18b4= Subject key identifier: 4E:75:8A:1A:47:F6:3F:A3:7C:EB:AF:EC:B9:27:A7:C5:24:66:B3:BB Authority key identifier: 58:AE:3F:8D:1A:78:16:3F:E8:70:BE:46:4F:D4:BE:23:14:C1:AB:3E Certificate issuer: /CN=58AE3F8D1A78163FE870BE464FD4BE2314C1AB3E Certificate serial: 2D523D8527C0153476F5BAF5E9826B7840AD2FCF Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/58AE3F8D1A78163FE870BE464FD4BE2314C1AB3E.cer Subject info access: rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/58AE3F8D1A78163FE870BE464FD4BE2314C1AB3E.mft Manifest number: 38 Signing time: Tue 12 May 2026 13:00:36 +0000 Manifest this update: Tue 12 May 2026 12:55:36 +0000 Manifest next update: Wed 13 May 2026 16:14:36 +0000 Files and hashes: 1: 3137372e3130352e3231352e302f32342d3234203d3e20323632363533.roa (hash: xJ71XltPyQI4U/5lyj/tsURrHqj3iWTCBwmf6a88H/E=) 2: 3137372e3130352e3230382e302f32302d3230203d3e20323632363533.roa (hash: XhUB8GdA9AtXPTZwihpVdf5L5V54MDC7hQx7z8D/ntc=) 3: 3137372e3130352e3231322e302f32322d3232203d3e20323632363533.roa (hash: W0mzbp8UFTs4DVdsSZ6aoIo5fqgnlcSdNAib9hr88kQ=) 4: 3137372e3130352e3230392e302f32342d3234203d3e20323632363533.roa (hash: LndIKm5RIMGpFnBwaC/ErQGUIctcb609HWB83pSZR34=) 5: 3137372e3130352e3231392e302f32342d3234203d3e20323632363533.roa (hash: hJWcfhLgY2A/YY7zz4T/QT6/9aLI8k5hpXM3nlS60Xo=) 6: 3137372e3130352e3231332e302f32342d3234203d3e20323632363533.roa (hash: RkF/0IqCbKkJ1NwJUJkmlEgC9+iSIfowc73SRH2EldQ=) 7: 3137372e3130352e3231342e302f32342d3234203d3e20323632363533.roa (hash: fk4T38pyCQg0tpV63X1FU59PONV2BgzJ2zMwSbGcC7s=) 8: 3137372e3130352e3231322e302f32342d3234203d3e20323632363533.roa (hash: g86/dcmakPsw/PFXxS27Nu7HSTRNiVHZCIGdEP3EJxA=) 9: 3137372e3130352e3232312e302f32342d3234203d3e20323632363533.roa (hash: fMtF2Pp04Vov7VhHMJ6U4STH/ghtbcPkqyaX+EaUm5o=) 10: 58AE3F8D1A78163FE870BE464FD4BE2314C1AB3E.crl (hash: hdKIvFsY3rf3smxFGfoR6oKkZdKJJcnCPkoGPNOp01U=) 11: 3137372e3130352e3231372e302f32342d3234203d3e20323632363533.roa (hash: o4XEt58DC7fOwThywaaoW+zr7I5sT59iyuPKQYRkLrM=) 12: 3137372e3130352e3232322e302f32342d3234203d3e20323632363533.roa (hash: jFz5LhNIh800HezkWpb+TUVHxhOw3XVdGOjc8iyNgV4=) 13: 3137372e3130352e3231362e302f32342d3234203d3e20323632363533.roa (hash: Xc8XDPsE3ANnOBdtNH8NTxTailnbwmhKtAT476kRF3o=) 14: 3137372e3130352e3231302e302f32342d3234203d3e20323632363533.roa (hash: jIpl17bwScTehf9kKelLPsnIgtsouYojZ8oST0Nqb+I=) 15: 3137372e3130352e3231382e302f32342d3234203d3e20323632363533.roa (hash: 73CEy9/8aTUXBl+LXPP/UNWsRl4SYWlNSwpdc9k8xpY=) 16: 3137372e3130352e3230382e302f32312d3231203d3e20323632363533.roa (hash: 8gXRZqVrq6eclZTTuSg5Ogr3PCn7F0dkzNxlKNPjGaQ=) 17: 3137372e3130352e3232302e302f32322d3232203d3e20323632363533.roa (hash: aQouQcK8pcsQoB8r0RRQZ5hH6ebzXMg/MbN0FqfJzmA=) 18: 3137372e3130352e3231362e302f32312d3231203d3e20323632363533.roa (hash: OYEu08kC/RgAOR6Mszz63nR5U6ZjN/q1ElSmXjHNhS8=) 19: 323830343a3738343a3a2f33322d3332203d3e20323632363533.roa (hash: KwLkVy8uHE/5CDiZS7fdxzZ2WkLAmFRnrnFjGS36/9Y=) 20: 3137372e3130352e3230382e302f32342d3234203d3e20323632363533.roa (hash: NSLTR4emTvW5iotzhg9MKgTV1Cw0pDghQxa/ktBGjzA=) 21: 3137372e3130352e3232332e302f32342d3234203d3e20323632363533.roa (hash: 1BNl6kYRWMkEBzsLk3xIiXdgZKA7xDbacwtj65qShT8=) 22: 3137372e3130352e3230382e302f32322d3232203d3e20323632363533.roa (hash: /bFQRonGFA2DJ7tDH60nVB+q8SuHsug7VMQCQ5H22Aw=) Validation: Failed, CRL has expired Certificate: Data: Version: 3 (0x2) Serial Number: 2d:52:3d:85:27:c0:15:34:76:f5:ba:f5:e9:82:6b:78:40:ad:2f:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58AE3F8D1A78163FE870BE464FD4BE2314C1AB3E Validity Not Before: May 12 12:55:36 2026 GMT Not After : May 13 16:14:36 2026 GMT Subject: CN=4E758A1A47F63FA37CEBAFECB927A7C52466B3BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:fc:80:2d:08:37:c6:5a:55:30:ab:da:54:b4: f8:2a:83:c2:cd:d5:73:75:46:e3:56:cc:ad:e9:41: 5e:51:aa:39:b8:58:60:1c:28:00:50:fa:cb:af:a4: 5f:4d:7c:26:24:39:6e:fe:7f:40:06:0c:96:a4:54: d2:b6:05:bc:1a:b9:96:68:6b:22:af:1b:df:65:53: 96:be:51:f2:a2:02:1b:51:de:c7:25:3c:ae:0d:17: 5b:27:d5:56:97:d5:29:5f:81:4e:23:99:57:d8:07: 45:a5:4c:05:c3:6e:75:d2:62:88:29:a4:3e:57:44: 74:06:9b:99:60:90:84:b8:f2:36:3d:31:e9:c5:e6: 75:4a:11:f3:c2:68:31:33:97:20:3a:ec:7e:a7:c7: 98:b0:14:02:26:ab:75:ae:fb:af:a5:e7:97:77:f0: 84:58:6d:7b:1e:f7:2a:4c:2f:76:42:8f:3d:8a:0c: 39:89:df:2f:5e:55:55:e0:e7:0d:02:a3:bb:f3:50: 32:30:2f:1a:c7:30:0a:83:9d:6b:3b:62:3a:72:9d: 7c:a1:79:1b:3c:bc:6b:7f:20:64:e4:65:85:79:ef: ce:c0:83:f3:ff:72:0c:41:65:36:84:ad:95:1f:8f: 3d:99:58:6c:ff:ee:82:b7:46:1b:0a:a9:e7:6d:75: 63:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:75:8A:1A:47:F6:3F:A3:7C:EB:AF:EC:B9:27:A7:C5:24:66:B3:BB X509v3 Authority Key Identifier: keyid:58:AE:3F:8D:1A:78:16:3F:E8:70:BE:46:4F:D4:BE:23:14:C1:AB:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/58AE3F8D1A78163FE870BE464FD4BE2314C1AB3E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/58AE3F8D1A78163FE870BE464FD4BE2314C1AB3E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/58AE3F8D1A78163FE870BE464FD4BE2314C1AB3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:cf:2d:c3:77:03:0c:b9:6c:f9:5d:e5:6d:a4:c2:da:9f:6f: ef:77:fd:eb:08:bc:ee:c6:d4:fe:c6:1d:39:5d:b3:eb:13:b8: bc:c9:76:39:08:22:ed:60:01:09:83:8a:17:6a:61:f7:e0:b3: f0:0b:9a:b7:01:94:7f:ea:16:55:dc:a2:8b:73:b7:a0:52:63: f2:66:a5:01:4e:5c:0a:4b:bd:a1:1a:71:b6:e0:5c:6b:da:47: 62:03:6c:9d:62:c1:8b:3b:d2:1b:4a:a0:17:2e:0e:e2:82:bd: 39:22:c5:d4:08:b9:a7:fd:8d:f2:33:51:10:4e:48:e6:1b:ac: 75:c2:03:da:f6:d1:c6:2a:79:a5:c5:95:42:51:cf:0a:59:2c: 0c:0d:cd:3c:77:72:b6:62:ee:98:df:5b:60:84:a9:64:14:1b: 99:5c:03:68:2f:da:f9:a8:a5:b2:8f:ab:76:a6:35:65:a4:d1: f8:a2:9f:e0:0b:49:29:25:82:75:7a:4a:4c:fc:0b:ac:8e:eb: 25:41:76:9c:93:cc:b7:8b:20:78:d9:a1:55:ac:af:94:99:cf: 9e:19:d3:b1:d7:3b:70:cb:d2:4c:cd:06:bc:c4:ee:bf:37:27: af:bb:30:23:a1:e4:25:9d:8b:84:fd:3c:76:4d:96:36:c9:cd: 2c:84:36:5d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIULVI9hSfAFTR29br16YJreECtL88wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNThBRTNGOEQxQTc4MTYzRkU4NzBCRTQ2NEZENEJFMjMx NEMxQUIzRTAeFw0yNjA1MTIxMjU1MzZaFw0yNjA1MTMxNjE0MzZaMDMxMTAvBgNV BAMTKDRFNzU4QTFBNDdGNjNGQTM3Q0VCQUZFQ0I5MjdBN0M1MjQ2NkIzQkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDo/IAtCDfGWlUwq9pUtPgqg8LN 1XN1RuNWzK3pQV5Rqjm4WGAcKABQ+suvpF9NfCYkOW7+f0AGDJakVNK2BbwauZZo ayKvG99lU5a+UfKiAhtR3sclPK4NF1sn1VaX1SlfgU4jmVfYB0WlTAXDbnXSYogp pD5XRHQGm5lgkIS48jY9MenF5nVKEfPCaDEzlyA67H6nx5iwFAImq3Wu+6+l55d3 8IRYbXse9ypML3ZCjz2KDDmJ3y9eVVXg5w0Co7vzUDIwLxrHMAqDnWs7YjpynXyh eRs8vGt/IGTkZYV5787Ag/P/cgxBZTaErZUfjz2ZWGz/7oK3RhsKqedtdWOVAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUTnWKGkf2P6N866/suSenxSRms7swHwYDVR0j BBgwFoAUWK4/jRp4Fj/ocL5GT9S+IxTBqz4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSkRHZVE2U1N0ZFRDeTlUc012Tjc5bWlRclRIQ1NSdlhnMnMya0x0RDgx ZnovMC81OEFFM0Y4RDFBNzgxNjNGRTg3MEJFNDY0RkQ0QkUyMzE0QzFBQjNFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU4QUUzRjhEMUE3ODE2M0ZF ODcwQkU0NjRGRDRCRTIzMTRDMUFCM0UuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SkRHZVE2U1N0ZFRDeTlUc012Tjc5bWlRclRIQ1NSdlhnMnMya0x0RDgxZnovMC81 OEFFM0Y4RDFBNzgxNjNGRTg3MEJFNDY0RkQ0QkUyMzE0QzFBQjNFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWM8tw3cDDLls+V3lbaTC2p9v73f96wi87sbU/sYdOV2z6xO4vMl2OQgi7WAB CYOKF2ph9+Cz8AuatwGUf+oWVdyii3O3oFJj8malAU5cCku9oRpxtuBca9pHYgNs nWLBizvSG0qgFy4O4oK9OSLF1Ai5p/2N8jNREE5I5husdcID2vbRxip5pcWVQlHP ClksDA3NPHdytmLumN9bYISpZBQbmVwDaC/a+ailso+rdqY1ZaTR+KKf4AtJKSWC dXpKTPwLrI7rJUF2nJPMt4sgeNmhVayvlJnPnhnTsdc7cMvSTM0GvMTuvzcnr7sw I6HkJZ2LhP08dk2WNsnNLIQ2XQ== -----END CERTIFICATE-----Generated at Wed May 13 16:15:16 2026 by rpki-client