$ rpki-client -vvvf rpki-repo.registro.br/repo/2Xp5ewiDbCnFd3xnC2V5ppmVakuYUYxDwdvfYDmwgd3S/0/FE287030880D0123AC89374793BF7EEEFC18D5AE.mft File: FE287030880D0123AC89374793BF7EEEFC18D5AE.mft (raw, json) Hash identifier: SU0lfWlsipj2ch44uwx/xna6bofxg4ZvhAhcrsRm7Ac= Subject key identifier: 07:DB:BD:CA:8F:DD:E9:A4:3A:33:AB:D7:4E:58:3F:80:70:A2:A4:08 Authority key identifier: FE:28:70:30:88:0D:01:23:AC:89:37:47:93:BF:7E:EE:FC:18:D5:AE Certificate issuer: /CN=FE287030880D0123AC89374793BF7EEEFC18D5AE Certificate serial: 34B1E17346B42423BF9848BFB1E7CD6EF2D661E5 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE287030880D0123AC89374793BF7EEEFC18D5AE.cer Subject info access: rsync://rpki-repo.registro.br/repo/2Xp5ewiDbCnFd3xnC2V5ppmVakuYUYxDwdvfYDmwgd3S/0/FE287030880D0123AC89374793BF7EEEFC18D5AE.mft Manifest number: 029E Signing time: Sat 22 Aug 2026 20:39:58 +0000 Manifest this update: Sat 22 Aug 2026 20:34:58 +0000 Manifest next update: Mon 24 Aug 2026 00:01:58 +0000 Files and hashes: 1: 3137302e38332e302e302f32322d3234203d3e20323636343534.roa (hash: VY9LG8qNoQVvocjM28PdqbNowgqymCJAN8aRr2OMGsk=) 2: FE287030880D0123AC89374793BF7EEEFC18D5AE.crl (hash: /SqzLa9DFnAkilWLMQ3NFjnWBJx45jMLGKrIVx2N8tg=) 3: 3137392e302e3132342e302f32322d3234203d3e20323636343534.roa (hash: oIjIBsMDlCdzVrNK8RQ32GVr3QlO9p6Ay7IAC2kjZm8=) 4: 323830343a333831343a3a2f33322d3438203d3e20323636343534.roa (hash: D5J1HFJsrxrH69rEn6ps23EZ8dZaQlr9Ev+gtiv+PBc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2Xp5ewiDbCnFd3xnC2V5ppmVakuYUYxDwdvfYDmwgd3S/0/FE287030880D0123AC89374793BF7EEEFC18D5AE.crl rsync://rpki-repo.registro.br/repo/2Xp5ewiDbCnFd3xnC2V5ppmVakuYUYxDwdvfYDmwgd3S/0/FE287030880D0123AC89374793BF7EEEFC18D5AE.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE287030880D0123AC89374793BF7EEEFC18D5AE.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 24 Aug 2026 00:01:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:b1:e1:73:46:b4:24:23:bf:98:48:bf:b1:e7:cd:6e:f2:d6:61:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FE287030880D0123AC89374793BF7EEEFC18D5AE Validity Not Before: Aug 22 20:34:58 2026 GMT Not After : Aug 24 00:01:58 2026 GMT Subject: CN=07DBBDCA8FDDE9A43A33ABD74E583F8070A2A408 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:c2:21:e9:01:77:4b:09:dd:d4:68:95:64:79: 3c:07:51:be:d5:39:77:8a:ec:c3:04:e3:d0:e2:f7: b1:eb:43:93:f2:9e:ac:85:d2:27:0c:f4:0a:6b:ee: 9b:10:4a:71:83:09:f4:4f:97:c1:30:5b:93:7c:b7: 61:60:13:ed:e9:d3:dc:1c:9e:48:04:87:fa:31:85: 72:eb:f6:ca:40:d5:09:2d:22:ad:13:ae:f6:5f:f8: 1b:d1:99:91:69:fd:8f:4b:c2:a4:14:d4:8d:e9:c2: 4e:1d:14:4c:7d:5b:07:fd:52:39:d6:e1:46:44:9b: cf:30:7a:b9:19:6d:62:5e:22:45:5b:56:50:45:76: 58:58:34:6d:d3:65:e7:79:ad:00:48:a7:8a:ed:25: 5d:09:00:46:0e:38:8e:66:f2:8e:e1:1e:40:b5:89: b1:d7:70:00:12:17:e8:33:b4:cd:e5:a2:24:17:85: db:42:b7:1a:91:a0:3a:9f:54:a5:57:d0:3b:6d:0c: 9a:99:03:53:38:f6:8e:09:22:04:75:41:5a:4e:76: 16:ea:f6:d7:21:85:26:53:f8:d1:2a:e4:7a:e6:d2: f0:98:c7:7d:29:20:96:c7:e2:4e:89:41:d1:e3:dc: aa:86:c9:c2:1f:11:0a:f8:2a:ce:0c:47:be:d3:39: e7:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:DB:BD:CA:8F:DD:E9:A4:3A:33:AB:D7:4E:58:3F:80:70:A2:A4:08 X509v3 Authority Key Identifier: keyid:FE:28:70:30:88:0D:01:23:AC:89:37:47:93:BF:7E:EE:FC:18:D5:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2Xp5ewiDbCnFd3xnC2V5ppmVakuYUYxDwdvfYDmwgd3S/0/FE287030880D0123AC89374793BF7EEEFC18D5AE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE287030880D0123AC89374793BF7EEEFC18D5AE.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2Xp5ewiDbCnFd3xnC2V5ppmVakuYUYxDwdvfYDmwgd3S/0/FE287030880D0123AC89374793BF7EEEFC18D5AE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:97:d6:03:d9:55:60:1c:ef:5c:8b:e5:38:79:7d:a1:85:6f: 3e:34:c9:c8:bc:5d:cf:b2:39:78:f1:2e:d5:26:c3:24:17:53: 6f:ae:05:7a:80:65:24:f2:0c:b1:7f:cc:bf:fe:76:5b:95:0b: 9f:21:b6:c2:7f:d1:a7:67:f4:0f:72:2e:f4:a8:13:6e:c9:2f: 99:80:26:61:b4:db:af:f1:0c:59:57:88:35:14:3f:29:7a:09: 66:dc:b7:c2:cb:e8:59:83:a9:1e:2b:c7:79:8d:9c:7c:44:4a: 7a:bd:f4:d4:be:8d:94:c8:13:f8:b7:3d:d7:a5:d9:db:17:8c: c7:6b:51:0a:77:2c:79:4e:81:e2:00:ed:81:47:8a:a9:a1:ee: 9d:74:f0:57:36:cb:9e:1b:2e:42:ea:f6:96:b6:38:56:4d:d6: c9:b2:ba:f8:11:d7:76:67:b8:7b:ff:41:d2:43:78:de:e1:b7: 32:8b:be:5e:27:6d:b2:5b:87:de:77:bb:86:dd:9a:3d:d5:63: 7c:dc:5b:f0:fa:bf:19:69:d0:45:45:68:87:5c:62:52:34:1b: 36:f8:81:45:e7:37:95:4a:b4:10:4a:97:49:8a:27:37:52:a3: ec:03:c6:88:b2:20:95:39:fd:a9:71:12:06:9d:d0:75:e4:de: 51:64:3f:16 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUNLHhc0a0JCO/mEi/sefNbvLWYeUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkUyODcwMzA4ODBEMDEyM0FDODkzNzQ3OTNCRjdFRUVG QzE4RDVBRTAeFw0yNjA4MjIyMDM0NThaFw0yNjA4MjQwMDAxNThaMDMxMTAvBgNV BAMTKDA3REJCRENBOEZEREU5QTQzQTMzQUJENzRFNTgzRjgwNzBBMkE0MDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWwiHpAXdLCd3UaJVkeTwHUb7V OXeK7MME49Di97HrQ5PynqyF0icM9Apr7psQSnGDCfRPl8EwW5N8t2FgE+3p09wc nkgEh/oxhXLr9spA1QktIq0TrvZf+BvRmZFp/Y9LwqQU1I3pwk4dFEx9Wwf9UjnW 4UZEm88werkZbWJeIkVbVlBFdlhYNG3TZed5rQBIp4rtJV0JAEYOOI5m8o7hHkC1 ibHXcAASF+gztM3loiQXhdtCtxqRoDqfVKVX0DttDJqZA1M49o4JIgR1QVpOdhbq 9tchhSZT+NEq5Hrm0vCYx30pIJbH4k6JQdHj3KqGycIfEQr4Ks4MR77TOedTAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUB9u9yo/d6aQ6M6vXTlg/gHCipAgwHwYDVR0j BBgwFoAU/ihwMIgNASOsiTdHk79+7vwY1a4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMlhwNWV3aURiQ25GZDN4bkMyVjVwcG1WYWt1WVVZeER3ZHZmWURtd2dk M1MvMC9GRTI4NzAzMDg4MEQwMTIzQUM4OTM3NDc5M0JGN0VFRUZDMThENUFFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZFMjg3MDMwODgwRDAxMjNB Qzg5Mzc0NzkzQkY3RUVFRkMxOEQ1QUUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MlhwNWV3aURiQ25GZDN4bkMyVjVwcG1WYWt1WVVZeER3ZHZmWURtd2dkM1MvMC9G RTI4NzAzMDg4MEQwMTIzQUM4OTM3NDc5M0JGN0VFRUZDMThENUFFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMpfWA9lVYBzvXIvlOHl9oYVvPjTJyLxdz7I5ePEu1SbDJBdTb64FeoBlJPIM sX/Mv/52W5ULnyG2wn/Rp2f0D3Iu9KgTbskvmYAmYbTbr/EMWVeINRQ/KXoJZty3 wsvoWYOpHivHeY2cfERKer301L6NlMgT+Lc916XZ2xeMx2tRCncseU6B4gDtgUeK qaHunXTwVzbLnhsuQur2lrY4Vk3WybK6+BHXdme4e/9B0kN43uG3Mou+XidtsluH 3ne7ht2aPdVjfNxb8Pq/GWnQRUVoh1xiUjQbNviBRec3lUq0EEqXSYonN1Kj7APG iLIglTn9qXESBp3QdeTeUWQ/Fg== -----END CERTIFICATE-----Generated at Sun Aug 23 12:09:45 2026 by rpki-client