$ rpki-client -vvf rpki-repo.registro.br/repo/ZRi9J7cJMUBmsyBsaBLaRtRRSgFPZQ4fDwkkGekxqUC/0/7958C661EB8D493DABCAD14C921B052049BB4E87.mft File: 7958C661EB8D493DABCAD14C921B052049BB4E87.mft (raw, json) Hash identifier: W2kXvpSINMT39lseed57wRnwQZ+ZH7X2t9bvNWqj2CE= Subject key identifier: 2A:52:27:BB:F7:51:31:E9:91:B0:BA:2A:2A:92:BE:7A:8F:EB:A0:88 Authority key identifier: 79:58:C6:61:EB:8D:49:3D:AB:CA:D1:4C:92:1B:05:20:49:BB:4E:87 Certificate issuer: /CN=7958C661EB8D493DABCAD14C921B052049BB4E87 Certificate serial: 29233BB9F316CA866467176DB8D1496DD0347204 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7958C661EB8D493DABCAD14C921B052049BB4E87.cer Subject info access: rsync://rpki-repo.registro.br/repo/ZRi9J7cJMUBmsyBsaBLaRtRRSgFPZQ4fDwkkGekxqUC/0/7958C661EB8D493DABCAD14C921B052049BB4E87.mft Manifest number: 4C Signing time: Wed 13 May 2026 10:09:46 +0000 Manifest this update: Wed 13 May 2026 10:04:46 +0000 Manifest next update: Thu 14 May 2026 13:50:46 +0000 Files and hashes: 1: 323830343a313230303a3a2f33322d313238203d3e20323633343530.roa (hash: 5liD75jr140pbUO+1Mv7V8ehHnjltZBcNMhknf2Zru8=) 2: 3136382e3233322e3135362e302f32322d3332203d3e20323633343530.roa (hash: 5fwxo/xLeZgxGg/to0pXx+X1QYz2KKyEzx6SM8UbjD0=) 3: 3137372e39312e3233322e302f32322d3332203d3e20323633343530.roa (hash: FDWZsrswWJMiRi/BlnaWSwQH1z378Oxjb/Q+RbLjMYM=) 4: 7958C661EB8D493DABCAD14C921B052049BB4E87.crl (hash: GMXu9zQDt+tIcpzopAGYNLV9LPGm82Hz4oWJuFquvHk=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/ZRi9J7cJMUBmsyBsaBLaRtRRSgFPZQ4fDwkkGekxqUC/0/7958C661EB8D493DABCAD14C921B052049BB4E87.crl rsync://rpki-repo.registro.br/repo/ZRi9J7cJMUBmsyBsaBLaRtRRSgFPZQ4fDwkkGekxqUC/0/7958C661EB8D493DABCAD14C921B052049BB4E87.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7958C661EB8D493DABCAD14C921B052049BB4E87.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 14 May 2026 13:50:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:23:3b:b9:f3:16:ca:86:64:67:17:6d:b8:d1:49:6d:d0:34:72:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7958C661EB8D493DABCAD14C921B052049BB4E87 Validity Not Before: May 13 10:04:46 2026 GMT Not After : May 14 13:50:46 2026 GMT Subject: CN=2A5227BBF75131E991B0BA2A2A92BE7A8FEBA088 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c5:b5:a2:b2:9a:ec:f5:57:3d:88:b8:a5:d2: 0a:09:01:f9:aa:d4:5b:28:04:53:16:61:87:87:f6: 1c:92:11:17:97:10:cf:81:16:ab:62:dc:78:df:da: 36:70:92:f2:62:28:3a:6f:62:23:5f:b2:ab:62:19: e4:15:02:d3:96:0a:d8:ab:52:22:03:04:c0:72:5a: ee:14:21:45:cc:8f:fd:c1:09:29:50:77:64:c1:fe: f2:71:b0:7a:0c:40:38:50:37:33:ff:ad:dc:cd:ab: ea:94:6a:4a:cf:65:b0:f4:8d:0f:ca:98:2d:dd:2b: 6f:3c:01:2f:1f:09:66:33:18:b9:f1:21:00:55:3d: 45:a9:b3:0f:98:04:5d:e3:1c:6b:f1:59:68:39:2c: 49:96:bb:c7:80:67:ed:d1:67:e3:2a:6c:68:fc:2c: 5c:aa:c1:fd:86:a2:84:95:a9:1c:1c:71:dd:8b:d7: 09:2f:95:ca:d5:30:f6:7c:68:3d:f8:f3:fe:74:99: ad:7a:0d:7d:d1:12:2c:d2:48:d8:90:e8:1b:21:93: c7:0b:e0:a6:75:43:3e:3b:0c:84:02:be:ca:23:02: 88:68:1c:f5:31:e9:dc:d8:4f:ed:39:dc:ca:d1:fc: fd:d8:bb:07:ba:95:55:0d:32:4f:9a:72:c3:a8:cc: b7:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:52:27:BB:F7:51:31:E9:91:B0:BA:2A:2A:92:BE:7A:8F:EB:A0:88 X509v3 Authority Key Identifier: keyid:79:58:C6:61:EB:8D:49:3D:AB:CA:D1:4C:92:1B:05:20:49:BB:4E:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/ZRi9J7cJMUBmsyBsaBLaRtRRSgFPZQ4fDwkkGekxqUC/0/7958C661EB8D493DABCAD14C921B052049BB4E87.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7958C661EB8D493DABCAD14C921B052049BB4E87.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/ZRi9J7cJMUBmsyBsaBLaRtRRSgFPZQ4fDwkkGekxqUC/0/7958C661EB8D493DABCAD14C921B052049BB4E87.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:ce:be:9b:76:db:8b:57:4b:74:e4:8c:59:f8:15:72:8e:e6: 4b:12:d9:f6:3f:bf:0f:52:08:62:46:2b:7c:a7:99:c9:bf:18: 1a:3c:58:53:f3:d1:cb:dd:86:eb:be:43:43:5a:43:c9:cf:8e: 89:fe:30:77:e3:58:44:57:d1:de:3a:b0:08:a2:19:d7:5b:58: 1b:b6:21:ad:3e:34:a7:83:1f:72:a3:55:b9:09:c4:34:fd:0a: da:6a:ea:0e:1c:fa:e3:43:bc:b1:23:f5:84:ff:38:84:52:c3: b5:a9:36:01:be:d5:3a:44:6d:ac:80:e1:8f:be:cf:4e:f8:57: 58:f9:ea:26:ae:67:1e:a3:2c:97:90:55:05:29:5a:94:71:73: 24:52:88:cd:e2:cf:16:b4:c4:39:8c:2b:2e:f8:15:a0:4f:f5: 2c:24:d7:e1:71:61:40:59:bc:16:ba:d1:4f:f9:a2:bc:4d:1f: 02:d7:55:03:82:28:e1:96:5a:5a:ec:0a:83:57:0d:21:03:ec: 10:c0:f6:02:03:39:da:71:a4:ca:3a:00:0f:6a:05:e8:64:b7: b3:8d:a1:f1:16:72:07:ac:36:c0:29:27:f2:f9:5c:21:11:dc: 01:a9:e0:b8:60:45:a8:bb:96:01:0f:f9:ac:a5:99:9c:69:d7: eb:cb:12:ba -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUKSM7ufMWyoZkZxdtuNFJbdA0cgQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzk1OEM2NjFFQjhENDkzREFCQ0FEMTRDOTIxQjA1MjA0 OUJCNEU4NzAeFw0yNjA1MTMxMDA0NDZaFw0yNjA1MTQxMzUwNDZaMDMxMTAvBgNV BAMTKDJBNTIyN0JCRjc1MTMxRTk5MUIwQkEyQTJBOTJCRTdBOEZFQkEwODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8xbWisprs9Vc9iLil0goJAfmq 1FsoBFMWYYeH9hySEReXEM+BFqti3Hjf2jZwkvJiKDpvYiNfsqtiGeQVAtOWCtir UiIDBMByWu4UIUXMj/3BCSlQd2TB/vJxsHoMQDhQNzP/rdzNq+qUakrPZbD0jQ/K mC3dK288AS8fCWYzGLnxIQBVPUWpsw+YBF3jHGvxWWg5LEmWu8eAZ+3RZ+MqbGj8 LFyqwf2GooSVqRwccd2L1wkvlcrVMPZ8aD348/50ma16DX3REizSSNiQ6Bshk8cL 4KZ1Qz47DIQCvsojAohoHPUx6dzYT+053MrR/P3Yuwe6lVUNMk+acsOozLcrAgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUKlInu/dRMemRsLoqKpK+eo/roIgwHwYDVR0j BBgwFoAUeVjGYeuNST2rytFMkhsFIEm7TocwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9aUmk5SjdjSk1VQm1zeUJzYUJMYVJ0UlJTZ0ZQWlE0ZkR3a2tHZWt4cVVD LzAvNzk1OEM2NjFFQjhENDkzREFCQ0FEMTRDOTIxQjA1MjA0OUJCNEU4Ny5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS83OTU4QzY2MUVCOEQ0OTNEQUJD QUQxNEM5MjFCMDUyMDQ5QkI0RTg3LmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL1pS aTlKN2NKTVVCbXN5QnNhQkxhUnRSUlNnRlBaUTRmRHdra0dla3hxVUMvMC83OTU4 QzY2MUVCOEQ0OTNEQUJDQUQxNEM5MjFCMDUyMDQ5QkI0RTg3Lm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA fs6+m3bbi1dLdOSMWfgVco7mSxLZ9j+/D1IIYkYrfKeZyb8YGjxYU/PRy92G675D Q1pDyc+Oif4wd+NYRFfR3jqwCKIZ11tYG7YhrT40p4MfcqNVuQnENP0K2mrqDhz6 40O8sSP1hP84hFLDtak2Ab7VOkRtrIDhj77PTvhXWPnqJq5nHqMsl5BVBSlalHFz JFKIzeLPFrTEOYwrLvgVoE/1LCTX4XFhQFm8FrrRT/mivE0fAtdVA4Io4ZZaWuwK g1cNIQPsEMD2AgM52nGkyjoAD2oF6GS3s42h8RZyB6w2wCkn8vlcIRHcAanguGBF qLuWAQ/5rKWZnGnX68sSug== -----END CERTIFICATE-----Generated at Wed May 13 17:31:37 2026 by rpki-client