$ rpki-client -vvvf rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/0/D66BB8CE65AD4BF384941D4C6B525858D1272FE2.mft File: D66BB8CE65AD4BF384941D4C6B525858D1272FE2.mft (raw, json) Hash identifier: 9kyBgRaagT8bWIDOOuzqeDPyl9Dwo/udB19I9DN2NmM= Subject key identifier: 41:D3:42:82:38:D2:69:7D:72:50:C2:26:C4:C9:A0:A9:BB:05:6A:A6 Authority key identifier: D6:6B:B8:CE:65:AD:4B:F3:84:94:1D:4C:6B:52:58:58:D1:27:2F:E2 Certificate issuer: /CN=D66BB8CE65AD4BF384941D4C6B525858D1272FE2 Certificate serial: 2544FE0B1DD4A628616E36AC875C2009C259D7E9 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D66BB8CE65AD4BF384941D4C6B525858D1272FE2.cer Subject info access: rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/0/D66BB8CE65AD4BF384941D4C6B525858D1272FE2.mft Manifest number: 25 Signing time: Sun 23 Aug 2026 14:45:30 +0000 Manifest this update: Sun 23 Aug 2026 14:40:30 +0000 Manifest next update: Mon 24 Aug 2026 16:22:30 +0000 Files and hashes: 1: 34352e3233322e3231322e302f32322d3234203d3e203631363134.roa (hash: ceMoQRZPDcXDPodBBze2MMW8XyE0sAOnFLURfQk3+So=) 2: 3136382e3232372e3230382e302f32322d3234203d3e203631363134.roa (hash: y2YnGIAHhKYB4H1A2rpS7hGYzgKTdoPCtYTXg81+ImI=) 3: 323830343a346166633a3a2f33322d3438203d3e203631363134.roa (hash: Wr33nJVtlp/bOx5kpyjwz1oYBTkcrmJhGJBHcpNj/BI=) 4: D66BB8CE65AD4BF384941D4C6B525858D1272FE2.crl (hash: gzu7ztC74CgZdgH4OzOlgqjUuBCKj6sU72BemGFkNuM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/0/D66BB8CE65AD4BF384941D4C6B525858D1272FE2.crl rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/0/D66BB8CE65AD4BF384941D4C6B525858D1272FE2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D66BB8CE65AD4BF384941D4C6B525858D1272FE2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 24 Aug 2026 16:22:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:44:fe:0b:1d:d4:a6:28:61:6e:36:ac:87:5c:20:09:c2:59:d7:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D66BB8CE65AD4BF384941D4C6B525858D1272FE2 Validity Not Before: Aug 23 14:40:30 2026 GMT Not After : Aug 24 16:22:30 2026 GMT Subject: CN=41D3428238D2697D7250C226C4C9A0A9BB056AA6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:3e:c8:cd:48:a3:37:c0:9f:89:c0:b9:0f:d7: c0:44:a6:d9:0a:80:b6:77:0e:88:be:0d:45:86:96: f7:58:68:58:b2:0b:5a:8c:ab:e4:10:83:97:3f:3c: 1e:04:01:ab:84:d8:01:bf:3c:a2:32:c7:ec:35:ba: 30:4a:cc:95:c8:36:4d:27:30:39:91:55:83:b5:e7: 2e:9a:74:ba:14:8b:a9:d5:ff:a5:64:89:8a:1f:3e: f8:5f:b7:71:4d:8a:1a:59:5f:00:ff:91:ac:67:5a: d6:ec:d7:51:e0:98:7f:b4:f1:35:eb:61:bb:45:1c: ac:3c:d9:50:2d:60:e6:c3:f5:65:e0:2f:b6:e1:46: 69:5f:63:9c:83:e3:3c:87:a1:3e:f4:33:28:27:85: 6d:55:3d:84:67:19:59:f2:47:3e:21:62:90:d1:13: 35:33:c6:71:59:96:87:89:e3:86:10:e8:22:5b:c6: 65:bc:5a:f3:b1:a6:d9:82:5b:f7:40:7f:49:bd:f2: bc:df:7b:f3:70:ff:17:b2:2f:cb:6e:94:21:f9:05: fe:f0:da:24:2e:19:2d:b3:4d:ad:4e:ed:3e:a9:fb: 5e:d6:28:df:49:1a:d5:ae:3d:37:c7:90:3d:3d:3c: e9:14:23:fe:2e:84:10:b3:53:46:c7:81:05:c9:ae: 21:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:D3:42:82:38:D2:69:7D:72:50:C2:26:C4:C9:A0:A9:BB:05:6A:A6 X509v3 Authority Key Identifier: keyid:D6:6B:B8:CE:65:AD:4B:F3:84:94:1D:4C:6B:52:58:58:D1:27:2F:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/0/D66BB8CE65AD4BF384941D4C6B525858D1272FE2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D66BB8CE65AD4BF384941D4C6B525858D1272FE2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/0/D66BB8CE65AD4BF384941D4C6B525858D1272FE2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:48:6c:53:d6:db:29:9b:79:b7:31:21:ec:da:7a:47:41:aa: c7:de:69:2a:53:9a:b8:20:4f:8e:2a:54:78:f2:95:c8:e8:b3: 98:83:5f:de:fd:8a:d1:88:de:48:39:e6:62:54:ab:1f:cd:cb: 5d:38:01:6b:40:6b:d0:aa:48:a8:30:c4:8b:88:7b:5f:f2:cb: c1:20:f2:73:98:65:3a:1a:eb:2b:d5:a2:c8:a9:5f:f6:54:b3: 76:52:55:0d:ec:b3:81:58:3a:91:e7:5f:74:5d:49:7d:56:bd: de:62:1c:f1:56:54:12:28:97:a4:5e:ba:a7:4b:e7:67:ac:94: a7:b7:6d:8b:6d:ca:f7:82:59:4b:2d:be:33:bd:0e:65:a5:1a: f4:b9:4a:77:e8:a9:94:57:86:c7:f7:17:23:a9:f9:1e:b1:6f: 51:dd:ed:72:4e:11:ed:54:81:f9:62:1b:87:c4:e4:90:fc:2e: 46:42:9e:39:11:b5:79:f5:86:24:06:65:23:ab:71:b6:e1:03: d5:ce:ec:13:e1:3e:5d:2c:d9:f6:a6:24:83:54:e0:35:ef:f7: 47:e6:b8:1f:d0:a0:45:10:f8:74:0b:7b:d9:0a:a8:16:78:9e: b3:2d:0c:d1:c6:f1:6e:72:95:78:10:43:49:c5:7c:22:46:a3: 4d:07:c0:7d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUJUT+Cx3Upihhbjash1wgCcJZ1+kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDY2QkI4Q0U2NUFENEJGMzg0OTQxRDRDNkI1MjU4NThE MTI3MkZFMjAeFw0yNjA4MjMxNDQwMzBaFw0yNjA4MjQxNjIyMzBaMDMxMTAvBgNV BAMTKDQxRDM0MjgyMzhEMjY5N0Q3MjUwQzIyNkM0QzlBMEE5QkIwNTZBQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGPsjNSKM3wJ+JwLkP18BEptkK gLZ3Doi+DUWGlvdYaFiyC1qMq+QQg5c/PB4EAauE2AG/PKIyx+w1ujBKzJXINk0n MDmRVYO15y6adLoUi6nV/6VkiYofPvhft3FNihpZXwD/kaxnWtbs11HgmH+08TXr YbtFHKw82VAtYObD9WXgL7bhRmlfY5yD4zyHoT70MygnhW1VPYRnGVnyRz4hYpDR EzUzxnFZloeJ44YQ6CJbxmW8WvOxptmCW/dAf0m98rzfe/Nw/xeyL8tulCH5Bf7w 2iQuGS2zTa1O7T6p+17WKN9JGtWuPTfHkD09POkUI/4uhBCzU0bHgQXJriFtAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUQdNCgjjSaX1yUMImxMmgqbsFaqYwHwYDVR0j BBgwFoAU1mu4zmWtS/OElB1Ma1JYWNEnL+IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMm5oOWFkMmM2dlNqYVA1alR3VEhRekNFdkt2b1djeDFKejNpa0hTU2dh eUYvMC9ENjZCQjhDRTY1QUQ0QkYzODQ5NDFENEM2QjUyNTg1OEQxMjcyRkUyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q2NkJCOENFNjVBRDRCRjM4 NDk0MUQ0QzZCNTI1ODU4RDEyNzJGRTIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Mm5oOWFkMmM2dlNqYVA1alR3VEhRekNFdkt2b1djeDFKejNpa0hTU2dheUYvMC9E NjZCQjhDRTY1QUQ0QkYzODQ5NDFENEM2QjUyNTg1OEQxMjcyRkUyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXUhsU9bbKZt5tzEh7Np6R0Gqx95pKlOauCBPjipUePKVyOizmINf3v2K0Yje SDnmYlSrH83LXTgBa0Br0KpIqDDEi4h7X/LLwSDyc5hlOhrrK9WiyKlf9lSzdlJV DeyzgVg6kedfdF1JfVa93mIc8VZUEiiXpF66p0vnZ6yUp7dti23K94JZSy2+M70O ZaUa9LlKd+iplFeGx/cXI6n5HrFvUd3tck4R7VSB+WIbh8TkkPwuRkKeORG1efWG JAZlI6txtuED1c7sE+E+XSzZ9qYkg1TgNe/3R+a4H9CgRRD4dAt72QqoFniesy0M 0cbxbnKVeBBDScV8IkajTQfAfQ== -----END CERTIFICATE-----Generated at Sun Aug 23 18:11:30 2026 by rpki-client