$ rpki-client -vvvf rpki-repo.registro.br/repo/33RsBNscK5Vj6EG2inx4jLivkQGp87eQh3K9tHegzVne/1/CBFE93769DDBFCA704F8360407F55B0D8FA86CC7.mft File: CBFE93769DDBFCA704F8360407F55B0D8FA86CC7.mft (raw, json) Hash identifier: RRZ1FIpP/gfQmueeIpoRuxQNF06+6045XEaUwJSquOc= Subject key identifier: 34:C0:FC:9D:7A:1E:56:29:BD:EE:1C:3A:59:76:B3:A1:1C:2B:44:37 Authority key identifier: CB:FE:93:76:9D:DB:FC:A7:04:F8:36:04:07:F5:5B:0D:8F:A8:6C:C7 Certificate issuer: /CN=CBFE93769DDBFCA704F8360407F55B0D8FA86CC7 Certificate serial: 5DC4832C8A26C5372A9A6E2F69B97F8714BDF6FC Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBFE93769DDBFCA704F8360407F55B0D8FA86CC7.cer Subject info access: rsync://rpki-repo.registro.br/repo/33RsBNscK5Vj6EG2inx4jLivkQGp87eQh3K9tHegzVne/1/CBFE93769DDBFCA704F8360407F55B0D8FA86CC7.mft Manifest number: 0487 Signing time: Mon 24 Aug 2026 02:23:12 +0000 Manifest this update: Mon 24 Aug 2026 02:18:12 +0000 Manifest next update: Tue 25 Aug 2026 05:48:12 +0000 Files and hashes: 1: 323830343a333736383a3a2f33322d313238203d3e20323636343130.roa (hash: cTqm/rvgz4qO/kqtsCcG4TxcjbMjdPsB9mUm0EvydEA=) 2: 3137302e38302e38302e302f32322d3332203d3e20323636343130.roa (hash: 2u21MGTV0ZKz5Jp6CdwaoFcBc2mvcxSeibhtvBbE01I=) 3: CBFE93769DDBFCA704F8360407F55B0D8FA86CC7.crl (hash: owNxhlKLHCSOq9MfT5cC44lU8TgsNZJw2k4ON5fWVlY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/33RsBNscK5Vj6EG2inx4jLivkQGp87eQh3K9tHegzVne/1/CBFE93769DDBFCA704F8360407F55B0D8FA86CC7.crl rsync://rpki-repo.registro.br/repo/33RsBNscK5Vj6EG2inx4jLivkQGp87eQh3K9tHegzVne/1/CBFE93769DDBFCA704F8360407F55B0D8FA86CC7.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBFE93769DDBFCA704F8360407F55B0D8FA86CC7.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 25 Aug 2026 05:48:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:c4:83:2c:8a:26:c5:37:2a:9a:6e:2f:69:b9:7f:87:14:bd:f6:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CBFE93769DDBFCA704F8360407F55B0D8FA86CC7 Validity Not Before: Aug 24 02:18:12 2026 GMT Not After : Aug 25 05:48:12 2026 GMT Subject: CN=34C0FC9D7A1E5629BDEE1C3A5976B3A11C2B4437 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f8:0d:a9:27:6a:1d:6a:cf:81:97:65:62:59: e9:08:e5:5f:e5:25:33:e6:1f:1d:12:2b:83:29:a6: df:15:a9:4d:fe:3d:0c:a6:5e:7e:df:22:e9:c9:f5: af:be:6e:51:1c:27:ad:0c:c2:63:f3:cd:ee:bb:f0: d2:47:8a:53:74:92:17:63:86:ce:b1:eb:7a:45:87: 79:f3:05:01:5e:c9:27:18:83:13:d2:0e:1a:41:0c: 49:82:ac:a3:92:cf:18:2f:fa:31:8f:73:05:1d:d9: b5:27:26:e2:cc:25:4a:e8:c5:ce:55:a4:98:14:95: 76:f6:31:f9:25:35:6b:84:75:19:5c:ed:34:2e:83: fc:3a:1d:ca:1a:14:2d:c1:b3:40:29:ed:b3:8a:22: 74:1e:f8:2c:1a:d4:7b:be:4f:5b:e7:ce:78:3d:5e: 51:21:92:95:e4:71:74:17:67:76:df:4a:6c:2c:8b: 4b:b9:da:1c:b3:63:5a:47:01:d1:7f:d6:ab:bb:5e: f4:5e:b5:2f:d5:71:7a:58:bf:60:28:66:d7:94:77: ee:a8:06:68:e1:3f:85:86:df:90:7f:4e:66:f8:14: 52:76:e2:39:27:62:22:09:77:64:1a:56:c0:8f:80: 0f:71:9d:ba:a5:d1:a6:38:8c:d5:fc:d9:5e:2b:c4: 16:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:C0:FC:9D:7A:1E:56:29:BD:EE:1C:3A:59:76:B3:A1:1C:2B:44:37 X509v3 Authority Key Identifier: keyid:CB:FE:93:76:9D:DB:FC:A7:04:F8:36:04:07:F5:5B:0D:8F:A8:6C:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/33RsBNscK5Vj6EG2inx4jLivkQGp87eQh3K9tHegzVne/1/CBFE93769DDBFCA704F8360407F55B0D8FA86CC7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBFE93769DDBFCA704F8360407F55B0D8FA86CC7.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/33RsBNscK5Vj6EG2inx4jLivkQGp87eQh3K9tHegzVne/1/CBFE93769DDBFCA704F8360407F55B0D8FA86CC7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:c8:f5:c3:45:fa:32:78:8d:a9:f0:62:04:e4:18:e0:61:32: 55:48:04:16:45:18:87:04:51:c8:a2:19:4a:13:b7:fb:57:f7: 27:62:e9:db:d1:4b:d4:d5:f5:a1:c7:d3:65:7c:06:f9:76:d0: b0:74:0c:85:75:9e:2e:87:8b:5a:31:9f:f2:6c:b3:f9:27:40: 6d:08:e2:e1:6b:98:56:2b:56:00:fd:8c:5d:64:fc:0f:e0:4f: 02:e5:d0:a9:b2:33:44:24:54:f9:a7:c6:f2:5f:2a:b2:1f:b2: 58:0f:3a:f3:85:2d:b9:14:e7:49:e7:a0:d4:7a:d1:6b:ba:3f: 9c:00:b9:03:8e:bc:e4:27:d6:38:ad:58:45:1a:33:e2:73:e8: e9:2b:48:4a:d6:06:74:df:f4:35:61:31:ae:61:ec:57:23:e8: b8:92:65:02:28:9c:4c:c8:85:64:23:92:ce:cd:04:a1:13:06: 9d:d4:8b:e7:6e:36:d1:08:f6:8c:18:c5:72:dc:96:b6:84:1a: 76:4a:ac:e3:4c:92:41:f3:19:1a:24:79:c2:ed:3e:ab:e1:dc: b4:1f:cc:6b:f2:dd:d5:7a:14:2e:86:4e:c7:03:e4:4a:46:f1: 32:8f:0f:30:fe:8c:9c:b9:33:5a:7c:c4:0b:0c:69:38:6d:69: 8e:5d:25:71 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUXcSDLIomxTcqmm4vabl/hxS99vwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0JGRTkzNzY5RERCRkNBNzA0RjgzNjA0MDdGNTVCMEQ4 RkE4NkNDNzAeFw0yNjA4MjQwMjE4MTJaFw0yNjA4MjUwNTQ4MTJaMDMxMTAvBgNV BAMTKDM0QzBGQzlEN0ExRTU2MjlCREVFMUMzQTU5NzZCM0ExMUMyQjQ0MzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq+A2pJ2odas+Bl2ViWekI5V/l JTPmHx0SK4Mppt8VqU3+PQymXn7fIunJ9a++blEcJ60MwmPzze678NJHilN0khdj hs6x63pFh3nzBQFeyScYgxPSDhpBDEmCrKOSzxgv+jGPcwUd2bUnJuLMJUroxc5V pJgUlXb2MfklNWuEdRlc7TQug/w6HcoaFC3Bs0Ap7bOKInQe+Cwa1Hu+T1vnzng9 XlEhkpXkcXQXZ3bfSmwsi0u52hyzY1pHAdF/1qu7XvRetS/VcXpYv2AoZteUd+6o BmjhP4WG35B/Tmb4FFJ24jknYiIJd2QaVsCPgA9xnbql0aY4jNX82V4rxBYdAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUNMD8nXoeVim97hw6WXazoRwrRDcwHwYDVR0j BBgwFoAUy/6Tdp3b/KcE+DYEB/VbDY+obMcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMzNSc0JOc2NLNVZqNkVHMmlueDRqTGl2a1FHcDg3ZVFoM0s5dEhlZ3pW bmUvMS9DQkZFOTM3NjlEREJGQ0E3MDRGODM2MDQwN0Y1NUIwRDhGQTg2Q0M3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NCRkU5Mzc2OUREQkZDQTcw NEY4MzYwNDA3RjU1QjBEOEZBODZDQzcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MzNSc0JOc2NLNVZqNkVHMmlueDRqTGl2a1FHcDg3ZVFoM0s5dEhlZ3pWbmUvMS9D QkZFOTM3NjlEREJGQ0E3MDRGODM2MDQwN0Y1NUIwRDhGQTg2Q0M3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAI8j1w0X6MniNqfBiBOQY4GEyVUgEFkUYhwRRyKIZShO3+1f3J2Lp29FL1NX1 ocfTZXwG+XbQsHQMhXWeLoeLWjGf8myz+SdAbQji4WuYVitWAP2MXWT8D+BPAuXQ qbIzRCRU+afG8l8qsh+yWA8684UtuRTnSeeg1HrRa7o/nAC5A4685CfWOK1YRRoz 4nPo6StIStYGdN/0NWExrmHsVyPouJJlAiicTMiFZCOSzs0EoRMGndSL52420Qj2 jBjFctyWtoQadkqs40ySQfMZGiR5wu0+q+HctB/Ma/Ld1XoULoZOxwPkSkbxMo8P MP6MnLkzWnzECwxpOG1pjl0lcQ== -----END CERTIFICATE-----Generated at Mon Aug 24 07:00:30 2026 by rpki-client