$ rpki-client -vvvf rpki-repo.registro.br/repo/2HQRm5ercFqsKsgrKbBhCYpRxGXfXyXHYoHuPVo8Jv1f/0/AAB909DC5AFC914A27617F95EB12119D1CC6D5BF.mft File: AAB909DC5AFC914A27617F95EB12119D1CC6D5BF.mft (raw, json) Hash identifier: uhGCXCz2JgPJFMNfkoBM7SU5hYouTH5YKfOcv/bwDiQ= Subject key identifier: 3D:CD:2F:78:E1:A8:F5:19:8B:03:1F:DA:D1:42:80:E6:28:9A:04:FA Authority key identifier: AA:B9:09:DC:5A:FC:91:4A:27:61:7F:95:EB:12:11:9D:1C:C6:D5:BF Certificate issuer: /CN=AAB909DC5AFC914A27617F95EB12119D1CC6D5BF Certificate serial: 60F4A66DF442BC23D9FE75A2E1648BBB25BF950A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AAB909DC5AFC914A27617F95EB12119D1CC6D5BF.cer Subject info access: rsync://rpki-repo.registro.br/repo/2HQRm5ercFqsKsgrKbBhCYpRxGXfXyXHYoHuPVo8Jv1f/0/AAB909DC5AFC914A27617F95EB12119D1CC6D5BF.mft Manifest number: 65 Signing time: Tue 25 Aug 2026 04:19:30 +0000 Manifest this update: Tue 25 Aug 2026 04:14:30 +0000 Manifest next update: Wed 26 Aug 2026 04:22:30 +0000 Files and hashes: 1: 34352e3136372e3232372e302f32342d3234203d3e20323638313034.roa (hash: K9vg7LdI+cnwc7vLCOCmRsGtS1tvBvZvCi2AYVNI8ow=) 2: 34352e3136372e3232342e302f32322d3232203d3e20323638313034.roa (hash: D9ISSWk4Wx43R1RRQi13la0mHAnxhb2oKukIZpUfYAA=) 3: 34352e3136372e3232362e302f32342d3234203d3e20323638313034.roa (hash: G/QxWUWyKrHaWCk/OHQX6eh7UtkLx75trTLv4Mon0mE=) 4: 34352e3136372e3232352e302f32342d3234203d3e20323638313034.roa (hash: HsXwhWylk55JwVr6R3yX81LxKgiKcfK8eftxnRjxC5M=) 5: 34352e3136372e3232342e302f32342d3234203d3e20323638313034.roa (hash: vdiHjaus3HNlUflj5YLdHmMORq3aOAVwrig94EoEf1U=) 6: AAB909DC5AFC914A27617F95EB12119D1CC6D5BF.crl (hash: lWgS4ggvpmW4s69hJRRK+NSHhRBr5fW+jmqpHFyVpN0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2HQRm5ercFqsKsgrKbBhCYpRxGXfXyXHYoHuPVo8Jv1f/0/AAB909DC5AFC914A27617F95EB12119D1CC6D5BF.crl rsync://rpki-repo.registro.br/repo/2HQRm5ercFqsKsgrKbBhCYpRxGXfXyXHYoHuPVo8Jv1f/0/AAB909DC5AFC914A27617F95EB12119D1CC6D5BF.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AAB909DC5AFC914A27617F95EB12119D1CC6D5BF.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 26 Aug 2026 04:22:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:f4:a6:6d:f4:42:bc:23:d9:fe:75:a2:e1:64:8b:bb:25:bf:95:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AAB909DC5AFC914A27617F95EB12119D1CC6D5BF Validity Not Before: Aug 25 04:14:30 2026 GMT Not After : Aug 26 04:22:30 2026 GMT Subject: CN=3DCD2F78E1A8F5198B031FDAD14280E6289A04FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f2:ef:b4:b8:86:82:46:cf:1f:51:b1:ba:16: 00:98:53:6a:d7:5c:56:de:64:07:50:02:9d:c1:69: 94:be:62:17:88:b3:c3:3c:be:e8:1c:34:20:f5:26: 25:45:c4:df:0b:57:0c:83:89:68:ca:08:c7:68:c0: f2:e5:94:54:04:52:51:02:28:06:1e:79:e4:19:48: b4:9f:26:a6:4f:70:ba:d6:cd:99:b1:7e:c9:0a:9d: 97:cb:b9:c5:6d:2e:49:67:8b:1a:9c:99:60:4c:7e: 72:81:9b:df:e5:6b:a5:65:31:49:06:98:3e:2f:59: d6:f7:19:b5:4a:1a:74:cb:68:54:00:7b:4b:46:cd: 78:fe:2f:43:36:0e:1b:1a:4f:b3:ef:a6:62:43:9f: b5:63:1b:31:c4:d3:42:22:f1:d7:5e:12:0e:c8:b9: 3c:fa:76:9f:c8:45:cc:fb:eb:55:e6:2a:91:dc:31: b5:72:bc:06:1f:45:a2:da:46:d2:6e:a3:4b:1a:15: d7:3e:7c:73:0e:68:fe:70:28:33:54:1c:b8:75:3f: 1f:70:91:74:41:21:4e:02:f9:c6:9d:bb:93:2d:5b: 77:78:c8:42:01:f9:ef:4c:78:3f:1d:d1:16:75:7a: a5:53:57:af:22:51:45:0c:b1:2f:12:12:70:e9:07: 9b:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:CD:2F:78:E1:A8:F5:19:8B:03:1F:DA:D1:42:80:E6:28:9A:04:FA X509v3 Authority Key Identifier: keyid:AA:B9:09:DC:5A:FC:91:4A:27:61:7F:95:EB:12:11:9D:1C:C6:D5:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2HQRm5ercFqsKsgrKbBhCYpRxGXfXyXHYoHuPVo8Jv1f/0/AAB909DC5AFC914A27617F95EB12119D1CC6D5BF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AAB909DC5AFC914A27617F95EB12119D1CC6D5BF.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2HQRm5ercFqsKsgrKbBhCYpRxGXfXyXHYoHuPVo8Jv1f/0/AAB909DC5AFC914A27617F95EB12119D1CC6D5BF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:30:e8:cd:ae:35:bf:c4:70:99:15:0b:c9:03:8a:ea:18:90: 01:0b:75:15:f5:2e:47:6d:02:9e:55:68:cf:25:c0:4e:77:c3: 34:85:3d:60:c9:e8:03:dc:17:fc:3d:64:9e:b8:e1:6a:fc:d1: 93:42:79:37:ee:94:af:b2:a0:98:8b:21:70:c8:d0:4f:96:61: af:be:f4:b4:61:fb:84:3c:bd:a6:a6:33:78:81:6d:20:4f:00: 33:92:bd:03:90:41:18:74:e1:13:2c:07:56:d7:65:aa:bb:1e: f3:49:62:2a:b2:28:6b:15:43:fa:8c:0f:dd:54:56:fe:05:70: a8:8a:bc:45:b9:f6:cd:07:5d:00:10:3a:57:27:bb:87:b3:14: 25:70:c4:1d:da:e4:37:47:8d:5d:26:7a:75:91:30:7c:39:f9: b5:bc:f4:a0:18:4c:32:7d:de:3c:35:d5:32:36:ee:c8:98:ee: cf:85:fe:68:d8:58:dd:f5:8b:6f:29:9d:94:6d:cc:80:d6:65: 7b:fe:4b:d6:2f:b3:ce:9d:0f:9f:5e:92:46:f3:d3:48:e3:bb: 5c:d6:58:c9:ff:0d:ce:93:39:98:e7:77:51:c9:89:bf:a4:b5: d9:cf:87:f1:0a:bb:8b:91:51:44:b8:c1:c6:17:a2:ff:05:8a: c7:85:bf:e7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUYPSmbfRCvCPZ/nWi4WSLuyW/lQowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUFCOTA5REM1QUZDOTE0QTI3NjE3Rjk1RUIxMjExOUQx Q0M2RDVCRjAeFw0yNjA4MjUwNDE0MzBaFw0yNjA4MjYwNDIyMzBaMDMxMTAvBgNV BAMTKDNEQ0QyRjc4RTFBOEY1MTk4QjAzMUZEQUQxNDI4MEU2Mjg5QTA0RkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/8u+0uIaCRs8fUbG6FgCYU2rX XFbeZAdQAp3BaZS+YheIs8M8vugcNCD1JiVFxN8LVwyDiWjKCMdowPLllFQEUlEC KAYeeeQZSLSfJqZPcLrWzZmxfskKnZfLucVtLklnixqcmWBMfnKBm9/la6VlMUkG mD4vWdb3GbVKGnTLaFQAe0tGzXj+L0M2DhsaT7PvpmJDn7VjGzHE00Ii8ddeEg7I uTz6dp/IRcz761XmKpHcMbVyvAYfRaLaRtJuo0saFdc+fHMOaP5wKDNUHLh1Px9w kXRBIU4C+cadu5MtW3d4yEIB+e9MeD8d0RZ1eqVTV68iUUUMsS8SEnDpB5tRAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUPc0veOGo9RmLAx/a0UKA5iiaBPowHwYDVR0j BBgwFoAUqrkJ3Fr8kUonYX+V6xIRnRzG1b8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMkhRUm01ZXJjRnFzS3NncktiQmhDWXBSeEdYZlh5WEhZb0h1UFZvOEp2 MWYvMC9BQUI5MDlEQzVBRkM5MTRBMjc2MTdGOTVFQjEyMTE5RDFDQzZENUJGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FBQjkwOURDNUFGQzkxNEEy NzYxN0Y5NUVCMTIxMTlEMUNDNkQ1QkYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MkhRUm01ZXJjRnFzS3NncktiQmhDWXBSeEdYZlh5WEhZb0h1UFZvOEp2MWYvMC9B QUI5MDlEQzVBRkM5MTRBMjc2MTdGOTVFQjEyMTE5RDFDQzZENUJGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEADjDoza41v8RwmRULyQOK6hiQAQt1FfUuR20CnlVozyXATnfDNIU9YMnoA9wX /D1knrjhavzRk0J5N+6Ur7KgmIshcMjQT5Zhr770tGH7hDy9pqYzeIFtIE8AM5K9 A5BBGHThEywHVtdlqrse80liKrIoaxVD+owP3VRW/gVwqIq8Rbn2zQddABA6Vye7 h7MUJXDEHdrkN0eNXSZ6dZEwfDn5tbz0oBhMMn3ePDXVMjbuyJjuz4X+aNhY3fWL bymdlG3MgNZle/5L1i+zzp0Pn16SRvPTSOO7XNZYyf8NzpM5mOd3UcmJv6S12c+H 8Qq7i5FRRLjBxhei/wWKx4W/5w== -----END CERTIFICATE-----Generated at Tue Aug 25 17:17:30 2026 by rpki-client