$ rpki-client -vvf rpki-repo.registro.br/repo/HhYM5j7Y8X7XaoQ6sPmrLtFSTZYiZEpPdsz9Ezfca2Mr/0/5AF73D5CBD5ECD54E5B4947430DAF355DBA5C431.mft File: 5AF73D5CBD5ECD54E5B4947430DAF355DBA5C431.mft (raw, json) Hash identifier: GpSamEpyT4+I6j3UATgzL1idk39VdM/CthuWNzv9UUs= Subject key identifier: F6:BB:4F:CA:E6:06:14:1A:DD:45:55:81:B7:44:21:3B:BA:C1:D8:41 Authority key identifier: 5A:F7:3D:5C:BD:5E:CD:54:E5:B4:94:74:30:DA:F3:55:DB:A5:C4:31 Certificate issuer: /CN=5AF73D5CBD5ECD54E5B4947430DAF355DBA5C431 Certificate serial: 35A8D2865F1C5A8F32DCB064CB25974C2E907752 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AF73D5CBD5ECD54E5B4947430DAF355DBA5C431.cer Subject info access: rsync://rpki-repo.registro.br/repo/HhYM5j7Y8X7XaoQ6sPmrLtFSTZYiZEpPdsz9Ezfca2Mr/0/5AF73D5CBD5ECD54E5B4947430DAF355DBA5C431.mft Manifest number: 1C Signing time: Fri 17 Apr 2026 15:33:02 +0000 Manifest this update: Fri 17 Apr 2026 15:28:02 +0000 Manifest next update: Sat 18 Apr 2026 16:13:02 +0000 Files and hashes: 1: 3139312e3234302e3139362e302f32322d3332203d3e203532383138.roa (hash: Nx2E96pmc8QSIz8g09X0wid0h7hOK9ofcsFpVIIgKwY=) 2: 5AF73D5CBD5ECD54E5B4947430DAF355DBA5C431.crl (hash: qkEbTC0VZnjV8eiBbzAqekpIVSsDdWuYvZLM6BF9zMY=) 3: 323830343a313131633a3a2f33322d313238203d3e203532383138.roa (hash: nL61kmKIt9PdkOrZ3FtsNlPzBXFWEqzyJIqRB8ZmA70=) 4: 3137372e37322e3134382e302f32322d3332203d3e203532383138.roa (hash: mhzpFKcpuzmJ2tEX89PN8O2JOEll7ivqNJiWR/BJufw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HhYM5j7Y8X7XaoQ6sPmrLtFSTZYiZEpPdsz9Ezfca2Mr/0/5AF73D5CBD5ECD54E5B4947430DAF355DBA5C431.crl rsync://rpki-repo.registro.br/repo/HhYM5j7Y8X7XaoQ6sPmrLtFSTZYiZEpPdsz9Ezfca2Mr/0/5AF73D5CBD5ECD54E5B4947430DAF355DBA5C431.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AF73D5CBD5ECD54E5B4947430DAF355DBA5C431.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 18 Apr 2026 16:13:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:a8:d2:86:5f:1c:5a:8f:32:dc:b0:64:cb:25:97:4c:2e:90:77:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5AF73D5CBD5ECD54E5B4947430DAF355DBA5C431 Validity Not Before: Apr 17 15:28:02 2026 GMT Not After : Apr 18 16:13:02 2026 GMT Subject: CN=F6BB4FCAE606141ADD455581B744213BBAC1D841 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:96:93:a3:ff:e6:f2:3f:34:dc:5f:07:ed:ed: a8:e6:31:9a:30:7f:55:e2:39:52:6e:e8:00:45:e8: 08:8e:03:48:ac:94:e1:46:d4:b3:08:c6:59:e8:de: 10:50:e3:da:89:12:60:b0:a9:7f:3d:ae:32:90:16: f8:1f:0c:7a:8f:e8:f5:c1:b4:15:2f:2e:c9:08:b8: 57:df:15:e8:aa:ea:f0:bf:f0:3f:5e:9a:1a:58:72: 75:78:91:f3:16:23:86:4f:84:a8:f5:48:c7:4e:1c: 51:f5:f7:0f:18:68:7c:5a:02:85:ee:b6:84:5e:99: 12:30:53:7b:b7:8a:41:4b:a5:fb:31:e1:bd:28:d0: d7:87:8f:87:d2:0b:10:5a:f2:7a:83:1d:45:75:8c: 14:e4:7d:92:2e:37:f7:b5:d2:6d:10:bf:e8:78:ab: 78:61:55:1d:b3:6c:a9:86:63:f5:c7:96:8c:dd:20: 4c:87:09:14:1d:40:31:ba:fd:30:3f:c0:45:6b:de: 4c:06:92:09:8e:8f:1a:18:fe:d2:11:65:57:f4:92: 8c:38:51:6c:f8:a8:2d:b2:c7:df:64:7b:ec:4c:38: d2:12:dc:0e:b3:6b:d5:db:c7:da:a3:3b:04:f6:e8: 71:de:dc:bb:8e:a5:50:b0:94:35:e9:63:cd:de:e8: bc:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:BB:4F:CA:E6:06:14:1A:DD:45:55:81:B7:44:21:3B:BA:C1:D8:41 X509v3 Authority Key Identifier: keyid:5A:F7:3D:5C:BD:5E:CD:54:E5:B4:94:74:30:DA:F3:55:DB:A5:C4:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HhYM5j7Y8X7XaoQ6sPmrLtFSTZYiZEpPdsz9Ezfca2Mr/0/5AF73D5CBD5ECD54E5B4947430DAF355DBA5C431.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AF73D5CBD5ECD54E5B4947430DAF355DBA5C431.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HhYM5j7Y8X7XaoQ6sPmrLtFSTZYiZEpPdsz9Ezfca2Mr/0/5AF73D5CBD5ECD54E5B4947430DAF355DBA5C431.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:99:96:4e:0e:ae:cc:36:3c:3b:ab:ca:8f:42:08:6f:b7:c9: 92:ca:0c:73:cb:36:58:90:de:d5:6c:78:c6:66:10:3b:ef:86: 34:2f:d7:a0:75:4b:6f:41:4a:57:aa:88:0c:68:95:e1:4b:a3: 2e:70:2c:c5:5b:a5:7b:aa:db:20:e2:08:20:ae:1c:c8:99:3d: fd:e5:1c:07:02:6c:7b:c5:2b:dd:39:31:27:88:4a:b2:e1:ec: 98:bc:b0:46:df:bb:32:d4:39:15:b3:06:69:75:d5:f3:d1:1e: aa:fc:a6:5c:1e:b1:d0:21:8c:e2:e4:f1:34:20:38:e2:89:87: 67:24:b7:ae:3e:d8:16:56:9d:9c:ed:7b:60:f5:51:e4:c0:3a: 15:1e:80:06:75:bb:d2:cd:ef:8f:19:61:20:39:b0:af:07:ae: 56:d9:af:62:e2:02:29:c2:22:6d:05:2e:24:4a:84:ef:15:93: 25:cd:6e:56:55:a8:60:6a:ca:a0:78:0c:21:80:b8:18:4e:1d: cf:50:76:28:50:72:da:22:ee:2a:5c:23:5d:56:06:16:8d:c7: b0:a1:72:c8:b3:84:40:1c:b9:73:65:09:5d:f5:4a:37:2d:4c: dc:ce:87:47:45:12:f5:8e:b1:e8:65:22:04:54:75:34:ff:ed: d2:19:10:d0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUNajShl8cWo8y3LBkyyWXTC6Qd1IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUFGNzNENUNCRDVFQ0Q1NEU1QjQ5NDc0MzBEQUYzNTVE QkE1QzQzMTAeFw0yNjA0MTcxNTI4MDJaFw0yNjA0MTgxNjEzMDJaMDMxMTAvBgNV BAMTKEY2QkI0RkNBRTYwNjE0MUFERDQ1NTU4MUI3NDQyMTNCQkFDMUQ4NDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqlpOj/+byPzTcXwft7ajmMZow f1XiOVJu6ABF6AiOA0islOFG1LMIxlno3hBQ49qJEmCwqX89rjKQFvgfDHqP6PXB tBUvLskIuFffFeiq6vC/8D9emhpYcnV4kfMWI4ZPhKj1SMdOHFH19w8YaHxaAoXu toRemRIwU3u3ikFLpfsx4b0o0NeHj4fSCxBa8nqDHUV1jBTkfZIuN/e10m0Qv+h4 q3hhVR2zbKmGY/XHlozdIEyHCRQdQDG6/TA/wEVr3kwGkgmOjxoY/tIRZVf0kow4 UWz4qC2yx99ke+xMONIS3A6za9Xbx9qjOwT26HHe3LuOpVCwlDXpY83e6LwdAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU9rtPyuYGFBrdRVWBt0QhO7rB2EEwHwYDVR0j BBgwFoAUWvc9XL1ezVTltJR0MNrzVdulxDEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSGhZTTVqN1k4WDdYYW9RNnNQbXJMdEZTVFpZaVpFcFBkc3o5RXpmY2Ey TXIvMC81QUY3M0Q1Q0JENUVDRDU0RTVCNDk0NzQzMERBRjM1NURCQTVDNDMxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVBRjczRDVDQkQ1RUNENTRF NUI0OTQ3NDMwREFGMzU1REJBNUM0MzEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SGhZTTVqN1k4WDdYYW9RNnNQbXJMdEZTVFpZaVpFcFBkc3o5RXpmY2EyTXIvMC81 QUY3M0Q1Q0JENUVDRDU0RTVCNDk0NzQzMERBRjM1NURCQTVDNDMxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfJmWTg6uzDY8O6vKj0IIb7fJksoMc8s2WJDe1Wx4xmYQO++GNC/XoHVLb0FK V6qIDGiV4UujLnAsxVule6rbIOIIIK4cyJk9/eUcBwJse8Ur3TkxJ4hKsuHsmLyw Rt+7MtQ5FbMGaXXV89EeqvymXB6x0CGM4uTxNCA44omHZyS3rj7YFladnO17YPVR 5MA6FR6ABnW70s3vjxlhIDmwrweuVtmvYuICKcIibQUuJEqE7xWTJc1uVlWoYGrK oHgMIYC4GE4dz1B2KFBy2iLuKlwjXVYGFo3HsKFyyLOEQBy5c2UJXfVKNy1M3M6H R0US9Y6x6GUiBFR1NP/t0hkQ0A== -----END CERTIFICATE-----Generated at Fri Apr 17 19:54:49 2026 by rpki-client