$ rpki-client -vvf rpki-repo.registro.br/repo/2CMzwVakW37om5XPSrEQcuPGZ1CQFNzw6yvtmoRSGoLw/0/470AE1EB9714E43320F9D361336505142D7D836B.mft File: 470AE1EB9714E43320F9D361336505142D7D836B.mft (raw, json) Hash identifier: U411+Qepzyoq2ptYXNyvJXoHp/e90uNfHzCB8GvijNU= Subject key identifier: 17:6A:D1:47:58:91:85:3A:F8:13:95:C7:3A:B9:15:81:3D:2A:FD:03 Authority key identifier: 47:0A:E1:EB:97:14:E4:33:20:F9:D3:61:33:65:05:14:2D:7D:83:6B Certificate issuer: /CN=470AE1EB9714E43320F9D361336505142D7D836B Certificate serial: 42408AAFA239281B9FABF168BDE3689D0C13F55F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/470AE1EB9714E43320F9D361336505142D7D836B.cer Subject info access: rsync://rpki-repo.registro.br/repo/2CMzwVakW37om5XPSrEQcuPGZ1CQFNzw6yvtmoRSGoLw/0/470AE1EB9714E43320F9D361336505142D7D836B.mft Manifest number: 01FF Signing time: Wed 08 Jul 2026 04:38:50 +0000 Manifest this update: Wed 08 Jul 2026 04:33:50 +0000 Manifest next update: Thu 09 Jul 2026 08:35:50 +0000 Files and hashes: 1: 323830343a376534633a3a2f33322d313238203d3e20323731363135.roa (hash: v6I2JVSkA1+oIyqatxF5hcj3J7peIHiciCJ7bVOpJyM=) 2: 3137372e33392e39382e302f32332d3332203d3e20323731363135.roa (hash: 7WeZG9VV3Zq8kk0kt7nRU3+1yMhrtMJRHUv0F/hY+Zg=) 3: 3137372e33392e39362e302f32342d3332203d3e20323731363135.roa (hash: Gza3hQzfaff9XDeJTTzK24+u3mgvFLQMjyHuVGvUZQ4=) 4: 470AE1EB9714E43320F9D361336505142D7D836B.crl (hash: JQlmlyMZlkW8OAIpgK5ugXU89+t9N26laI+vsQKMo5M=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2CMzwVakW37om5XPSrEQcuPGZ1CQFNzw6yvtmoRSGoLw/0/470AE1EB9714E43320F9D361336505142D7D836B.crl rsync://rpki-repo.registro.br/repo/2CMzwVakW37om5XPSrEQcuPGZ1CQFNzw6yvtmoRSGoLw/0/470AE1EB9714E43320F9D361336505142D7D836B.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/470AE1EB9714E43320F9D361336505142D7D836B.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 09 Jul 2026 08:35:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:40:8a:af:a2:39:28:1b:9f:ab:f1:68:bd:e3:68:9d:0c:13:f5:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=470AE1EB9714E43320F9D361336505142D7D836B Validity Not Before: Jul 8 04:33:50 2026 GMT Not After : Jul 9 08:35:50 2026 GMT Subject: CN=176AD1475891853AF81395C73AB915813D2AFD03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:bc:60:62:f3:a8:c9:c3:30:d1:47:27:b0:39: cf:b5:59:f0:77:ff:01:17:a3:78:d0:2d:a6:c7:0e: 6c:28:31:b9:08:f3:7e:a0:82:04:22:e5:b7:98:90: 84:37:44:2c:3d:fb:76:2c:5d:7c:cd:0b:55:de:c4: c1:15:0a:18:0f:7f:33:66:f9:ec:99:e2:8e:1e:f2: fa:af:ad:c8:3e:f4:2b:a2:c0:c6:cb:4b:ae:76:e9: 28:83:d1:d7:85:8a:5e:c9:67:18:1d:4d:0d:c1:e3: 20:9f:42:92:5d:72:6b:7a:5a:eb:d1:4d:aa:83:5f: 1e:47:6d:f9:06:7c:ba:a9:fd:5f:78:1f:cb:68:ef: 56:1d:60:d7:93:78:79:d6:d2:bb:20:fa:ad:b1:e3: cb:95:ff:86:99:fb:d2:f1:f4:e2:33:73:b2:d8:a5: fd:4c:a9:0e:2d:2f:8f:4b:c5:71:08:dc:82:a2:ba: 15:c5:1d:eb:7e:10:7d:b3:a7:e1:1c:db:a5:f5:37: 83:14:d1:e1:81:92:40:c0:e8:ad:eb:e8:d8:1d:24: 19:0e:b4:b5:ec:a6:6d:b0:56:9f:d5:7a:65:0b:68: 2f:49:58:8e:85:54:f1:24:51:c4:24:16:c8:27:95: 0a:ed:0e:0b:0b:fc:aa:8c:77:ca:92:6c:1b:25:c0: e7:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:6A:D1:47:58:91:85:3A:F8:13:95:C7:3A:B9:15:81:3D:2A:FD:03 X509v3 Authority Key Identifier: keyid:47:0A:E1:EB:97:14:E4:33:20:F9:D3:61:33:65:05:14:2D:7D:83:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2CMzwVakW37om5XPSrEQcuPGZ1CQFNzw6yvtmoRSGoLw/0/470AE1EB9714E43320F9D361336505142D7D836B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/470AE1EB9714E43320F9D361336505142D7D836B.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2CMzwVakW37om5XPSrEQcuPGZ1CQFNzw6yvtmoRSGoLw/0/470AE1EB9714E43320F9D361336505142D7D836B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:79:d3:28:a1:d3:78:1f:51:cb:b4:3e:76:30:ca:1b:bd:25: df:af:86:45:ad:ba:77:bb:82:71:0d:44:b9:15:4b:1e:6f:3c: 8d:24:4f:ab:72:10:39:86:9a:50:fc:86:16:5c:92:2c:49:ff: 6b:10:5f:f5:92:e0:9d:1f:2a:48:de:04:05:ba:26:4d:12:79: d8:c3:ce:60:13:49:20:0e:7f:c4:77:d7:46:d9:81:97:0b:5d: 18:57:ce:94:16:73:03:3c:d7:da:94:c5:aa:df:dd:ab:12:d3: 36:46:99:b5:dc:d8:de:4c:c2:fb:72:1b:1f:2d:89:a4:a7:75: 06:02:f2:22:7c:e0:e8:dc:c8:1e:fc:47:1d:34:13:a0:a2:51: 82:2a:98:5b:b5:c3:15:bf:bf:15:f1:e6:0f:2c:70:8d:e4:10: f2:75:f6:89:60:9b:bc:2e:23:ca:83:42:4e:9f:10:aa:53:ac: 7b:51:b2:b1:1f:7a:de:4c:b7:87:22:14:48:28:ed:a4:ad:98: 4c:34:9b:1c:38:fe:94:73:94:b9:f5:f0:ce:a4:69:0e:5a:9d: 92:ea:e5:c6:4b:b8:5b:a5:22:be:cb:c0:c2:ae:1f:e8:a0:bd: f7:58:1f:d9:44:e2:85:41:24:26:13:f0:7f:6a:d2:7d:0f:47: f0:23:8c:cd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUQkCKr6I5KBufq/FoveNonQwT9V8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDcwQUUxRUI5NzE0RTQzMzIwRjlEMzYxMzM2NTA1MTQy RDdEODM2QjAeFw0yNjA3MDgwNDMzNTBaFw0yNjA3MDkwODM1NTBaMDMxMTAvBgNV BAMTKDE3NkFEMTQ3NTg5MTg1M0FGODEzOTVDNzNBQjkxNTgxM0QyQUZEMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEvGBi86jJwzDRRyewOc+1WfB3 /wEXo3jQLabHDmwoMbkI836gggQi5beYkIQ3RCw9+3YsXXzNC1XexMEVChgPfzNm +eyZ4o4e8vqvrcg+9CuiwMbLS6526SiD0deFil7JZxgdTQ3B4yCfQpJdcmt6WuvR TaqDXx5HbfkGfLqp/V94H8to71YdYNeTeHnW0rsg+q2x48uV/4aZ+9Lx9OIzc7LY pf1MqQ4tL49LxXEI3IKiuhXFHet+EH2zp+Ec26X1N4MU0eGBkkDA6K3r6NgdJBkO tLXspm2wVp/VemULaC9JWI6FVPEkUcQkFsgnlQrtDgsL/KqMd8qSbBslwOd5AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUF2rRR1iRhTr4E5XHOrkVgT0q/QMwHwYDVR0j BBgwFoAURwrh65cU5DMg+dNhM2UFFC19g2swDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMkNNendWYWtXMzdvbTVYUFNyRVFjdVBHWjFDUUZOenc2eXZ0bW9SU0dv THcvMC80NzBBRTFFQjk3MTRFNDMzMjBGOUQzNjEzMzY1MDUxNDJEN0Q4MzZCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ3MEFFMUVCOTcxNEU0MzMy MEY5RDM2MTMzNjUwNTE0MkQ3RDgzNkIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MkNNendWYWtXMzdvbTVYUFNyRVFjdVBHWjFDUUZOenc2eXZ0bW9SU0dvTHcvMC80 NzBBRTFFQjk3MTRFNDMzMjBGOUQzNjEzMzY1MDUxNDJEN0Q4MzZCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtXnTKKHTeB9Ry7Q+djDKG70l36+GRa26d7uCcQ1EuRVLHm88jSRPq3IQOYaa UPyGFlySLEn/axBf9ZLgnR8qSN4EBbomTRJ52MPOYBNJIA5/xHfXRtmBlwtdGFfO lBZzAzzX2pTFqt/dqxLTNkaZtdzY3kzC+3IbHy2JpKd1BgLyInzg6NzIHvxHHTQT oKJRgiqYW7XDFb+/FfHmDyxwjeQQ8nX2iWCbvC4jyoNCTp8QqlOse1GysR963ky3 hyIUSCjtpK2YTDSbHDj+lHOUufXwzqRpDlqdkurlxku4W6UivsvAwq4f6KC991gf 2UTihUEkJhPwf2rSfQ9H8COMzQ== -----END CERTIFICATE-----Generated at Wed Jul 8 15:23:26 2026 by rpki-client