$ rpki-client -vvf rpki-repo.registro.br/repo/kyWpGA2vP9UEDYfVNXwDktBCNDgsTRrJkxzQ5Bjm237/2/67A81E20D9B7972AADDB1C394778320F56BE023B.mft File: 67A81E20D9B7972AADDB1C394778320F56BE023B.mft (raw, json) Hash identifier: nPOAhvC35rStUJysBifpbI/tv2u9GDdZbHK1v3iT9g0= Subject key identifier: B0:E6:A2:B9:82:CA:50:F8:03:7A:AB:44:F1:D5:5D:AE:BF:19:42:7D Authority key identifier: 67:A8:1E:20:D9:B7:97:2A:AD:DB:1C:39:47:78:32:0F:56:BE:02:3B Certificate issuer: /CN=67A81E20D9B7972AADDB1C394778320F56BE023B Certificate serial: 54FF4653B6F3780557ADEDA0607987E4CEEA8361 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67A81E20D9B7972AADDB1C394778320F56BE023B.cer Subject info access: rsync://rpki-repo.registro.br/repo/kyWpGA2vP9UEDYfVNXwDktBCNDgsTRrJkxzQ5Bjm237/2/67A81E20D9B7972AADDB1C394778320F56BE023B.mft Manifest number: 01D5 Signing time: Wed 13 May 2026 07:40:03 +0000 Manifest this update: Wed 13 May 2026 07:35:03 +0000 Manifest next update: Thu 14 May 2026 08:20:03 +0000 Files and hashes: 1: 34352e3137312e3138392e302f32342d3234203d3e203533313037.roa (hash: DFkUwhOSIMQ/dBa4I4qXzOduK5GF6P7MYEFt1w7QSGI=) 2: 67A81E20D9B7972AADDB1C394778320F56BE023B.crl (hash: NkpBmDo+3S0Hwpp0wIy46wbnCukYwpm6uE/dCSiMXXg=) 3: 34352e3137312e3138382e302f32342d3234203d3e20323638373237.roa (hash: 18cV8uw6iFpqj/xJD3F/sT7fr0dWzZXbwFyWUy3o7js=) 4: 34352e3137312e3138392e302f32342d3234203d3e20323638373237.roa (hash: T6wsuwZ+lUQuqqcEuO6IQpPZdcR1G2jC180tA8caS9Q=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/kyWpGA2vP9UEDYfVNXwDktBCNDgsTRrJkxzQ5Bjm237/2/67A81E20D9B7972AADDB1C394778320F56BE023B.crl rsync://rpki-repo.registro.br/repo/kyWpGA2vP9UEDYfVNXwDktBCNDgsTRrJkxzQ5Bjm237/2/67A81E20D9B7972AADDB1C394778320F56BE023B.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67A81E20D9B7972AADDB1C394778320F56BE023B.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 14 May 2026 08:20:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:ff:46:53:b6:f3:78:05:57:ad:ed:a0:60:79:87:e4:ce:ea:83:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67A81E20D9B7972AADDB1C394778320F56BE023B Validity Not Before: May 13 07:35:03 2026 GMT Not After : May 14 08:20:03 2026 GMT Subject: CN=B0E6A2B982CA50F8037AAB44F1D55DAEBF19427D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:27:e8:49:f2:95:c2:88:d5:03:f8:a4:8b:e5: 79:a7:eb:15:c2:1b:3b:58:89:8d:98:0b:a7:3b:40: f8:a3:f1:ea:00:b6:8d:19:1d:68:b7:84:6b:bc:28: 3a:dd:c9:43:46:5e:3b:0c:5d:0c:e3:f5:30:17:08: 07:2e:b1:88:6a:2e:ee:46:bf:93:f5:e2:33:13:fa: ee:64:ee:9f:89:10:6a:da:6c:8f:12:12:b4:2c:83: 20:67:35:8e:0d:83:29:37:c0:6a:3c:b9:e1:11:37: d9:d2:e5:e8:d9:a3:7a:9d:ef:8c:d3:4b:f6:73:dc: a5:4b:76:9e:88:d1:61:85:3e:54:58:29:23:20:4a: 24:45:21:4d:9e:fc:de:04:31:65:d7:80:32:7e:f3: d1:81:c0:38:eb:df:94:d9:b5:97:8f:d8:5f:bb:4c: 04:12:0e:75:fa:4f:38:d4:de:d3:7c:18:07:6e:b6: 78:48:e5:fb:a3:60:c4:e4:93:9b:3b:9d:d7:bc:e5: 5d:60:40:3c:6d:be:34:a9:bb:25:9d:bb:57:e2:46: d5:ed:ef:c5:40:9f:c0:60:e2:eb:e0:88:31:5e:80: a7:e0:ec:09:da:3b:c6:07:35:23:36:9a:97:c9:fd: 76:9d:c9:80:b2:cc:75:42:9f:b0:f8:96:6c:da:ac: 05:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:E6:A2:B9:82:CA:50:F8:03:7A:AB:44:F1:D5:5D:AE:BF:19:42:7D X509v3 Authority Key Identifier: keyid:67:A8:1E:20:D9:B7:97:2A:AD:DB:1C:39:47:78:32:0F:56:BE:02:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/kyWpGA2vP9UEDYfVNXwDktBCNDgsTRrJkxzQ5Bjm237/2/67A81E20D9B7972AADDB1C394778320F56BE023B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67A81E20D9B7972AADDB1C394778320F56BE023B.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/kyWpGA2vP9UEDYfVNXwDktBCNDgsTRrJkxzQ5Bjm237/2/67A81E20D9B7972AADDB1C394778320F56BE023B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:ef:65:e4:65:26:d8:92:76:32:5f:a7:21:90:8c:0e:30:d0: 49:0d:b8:b4:ab:5b:48:db:0b:c2:79:9d:c8:f6:05:dc:8e:da: e4:a4:45:1a:c1:af:cc:51:75:28:8a:88:67:42:7a:2d:8b:e8: 38:18:4f:75:98:14:8a:fe:8d:ca:db:77:55:01:fb:15:bf:70: f9:98:65:32:ae:ec:d9:a1:10:b5:bb:cd:49:68:e1:1c:b8:d8: 5c:f1:2a:25:b0:2c:06:39:35:a7:42:38:e3:44:90:c9:1e:ba: b3:42:65:41:9f:e5:48:8c:a3:5f:e7:c5:1b:30:b3:53:6d:37: 47:cb:be:c0:8a:a5:b9:22:96:8e:86:c1:03:6d:63:15:2f:78: 64:61:4f:dc:89:06:83:49:f9:23:5b:50:bb:1f:0b:f6:68:89: 77:00:13:08:c2:11:f5:ff:be:21:31:bf:00:3e:1e:ad:95:db: 6d:c6:47:3f:ef:68:fd:74:3a:32:97:54:7b:f0:ca:f5:54:9e: b6:3b:16:31:c9:6b:d1:be:b0:99:fc:3c:38:da:2d:88:1e:98: 3f:d3:06:3f:d5:26:90:93:14:2e:93:5e:c2:f2:b5:e8:5c:b6: 58:a7:0e:87:07:5e:3c:13:1d:c4:db:b9:79:3c:ea:76:40:4f: bb:bd:d0:93 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUVP9GU7bzeAVXre2gYHmH5M7qg2EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjdBODFFMjBEOUI3OTcyQUFEREIxQzM5NDc3ODMyMEY1 NkJFMDIzQjAeFw0yNjA1MTMwNzM1MDNaFw0yNjA1MTQwODIwMDNaMDMxMTAvBgNV BAMTKEIwRTZBMkI5ODJDQTUwRjgwMzdBQUI0NEYxRDU1REFFQkYxOTQyN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9J+hJ8pXCiNUD+KSL5Xmn6xXC GztYiY2YC6c7QPij8eoAto0ZHWi3hGu8KDrdyUNGXjsMXQzj9TAXCAcusYhqLu5G v5P14jMT+u5k7p+JEGrabI8SErQsgyBnNY4Ngyk3wGo8ueERN9nS5ejZo3qd74zT S/Zz3KVLdp6I0WGFPlRYKSMgSiRFIU2e/N4EMWXXgDJ+89GBwDjr35TZtZeP2F+7 TAQSDnX6TzjU3tN8GAdutnhI5fujYMTkk5s7nde85V1gQDxtvjSpuyWdu1fiRtXt 78VAn8Bg4uvgiDFegKfg7AnaO8YHNSM2mpfJ/XadyYCyzHVCn7D4lmzarAWVAgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUsOaiuYLKUPgDeqtE8dVdrr8ZQn0wHwYDVR0j BBgwFoAUZ6geINm3lyqt2xw5R3gyD1a+AjswDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9reVdwR0EydlA5VUVEWWZWTlh3RGt0QkNORGdzVFJySmt4elE1QmptMjM3 LzIvNjdBODFFMjBEOUI3OTcyQUFEREIxQzM5NDc3ODMyMEY1NkJFMDIzQi5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS82N0E4MUUyMEQ5Qjc5NzJBQURE QjFDMzk0Nzc4MzIwRjU2QkUwMjNCLmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL2t5 V3BHQTJ2UDlVRURZZlZOWHdEa3RCQ05EZ3NUUnJKa3h6UTVCam0yMzcvMi82N0E4 MUUyMEQ5Qjc5NzJBQUREQjFDMzk0Nzc4MzIwRjU2QkUwMjNCLm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA Su9l5GUm2JJ2Ml+nIZCMDjDQSQ24tKtbSNsLwnmdyPYF3I7a5KRFGsGvzFF1KIqI Z0J6LYvoOBhPdZgUiv6Nytt3VQH7Fb9w+ZhlMq7s2aEQtbvNSWjhHLjYXPEqJbAs Bjk1p0I440SQyR66s0JlQZ/lSIyjX+fFGzCzU203R8u+wIqluSKWjobBA21jFS94 ZGFP3IkGg0n5I1tQux8L9miJdwATCMIR9f++ITG/AD4erZXbbcZHP+9o/XQ6MpdU e/DK9VSetjsWMclr0b6wmfw8ONotiB6YP9MGP9UmkJMULpNewvK16Fy2WKcOhwde PBMdxNu5eTzqdkBPu73Qkw== -----END CERTIFICATE-----Generated at Wed May 13 17:31:39 2026 by rpki-client