$ rpki-client -vvvf rpki-repo.registro.br/repo/3As3Bd5oosFtNhQtDtxTwXztkwPAhcE1Jfq9rSB7buCh/0/9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.mft File: 9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.mft (raw, json) Hash identifier: dCOtUFq2Kv+b1P/EYw2MfVKd/b1mg7kXFiz9CkUB8Lo= Subject key identifier: 40:F6:8E:6B:F9:25:20:A6:89:39:93:54:06:5C:BC:BC:65:75:D3:5B Authority key identifier: 9A:32:CD:91:FC:E9:CA:DB:F2:8B:ED:F4:C7:20:E6:7B:79:AF:B9:CC Certificate issuer: /CN=9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC Certificate serial: 1ECAA3C7F6BBE0928F973604A83DC8FF731A44E5 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.cer Subject info access: rsync://rpki-repo.registro.br/repo/3As3Bd5oosFtNhQtDtxTwXztkwPAhcE1Jfq9rSB7buCh/0/9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.mft Manifest number: 02F8 Signing time: Sun 23 Aug 2026 09:35:41 +0000 Manifest this update: Sun 23 Aug 2026 09:30:41 +0000 Manifest next update: Mon 24 Aug 2026 13:20:41 +0000 Files and hashes: 1: 3137302e3234362e3138342e302f32322d3234203d3e20323634383830.roa (hash: gA1Dil90AWhkBLUHBysYx0lSKlmDUCTEh/TrezFm39o=) 2: 3136382e3232372e35362e302f32322d3234203d3e20323634383830.roa (hash: 0m9ZlSbxJEGi/PdZZ6Ae2AeboQX1XOl8Wv8MqMH6T54=) 3: 9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.crl (hash: frOiF3joqUHK3/ojx4vW3waGMW5ylefIAltw0ui8Fg4=) 4: 323830343a326634303a3a2f33322d3438203d3e20323634383830.roa (hash: ORyxhMiPsLuMYUTUTFf1a5ZPgbN+I86oYsBHv0CQLjI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3As3Bd5oosFtNhQtDtxTwXztkwPAhcE1Jfq9rSB7buCh/0/9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.crl rsync://rpki-repo.registro.br/repo/3As3Bd5oosFtNhQtDtxTwXztkwPAhcE1Jfq9rSB7buCh/0/9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 24 Aug 2026 13:20:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:ca:a3:c7:f6:bb:e0:92:8f:97:36:04:a8:3d:c8:ff:73:1a:44:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC Validity Not Before: Aug 23 09:30:41 2026 GMT Not After : Aug 24 13:20:41 2026 GMT Subject: CN=40F68E6BF92520A689399354065CBCBC6575D35B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:db:50:c3:ff:45:76:d6:d4:23:dd:05:09:62: 4c:b4:d8:bb:93:a1:f5:6e:f4:a4:48:47:49:b1:5a: a1:51:99:44:3d:4a:f6:c1:e1:1c:98:16:36:24:ca: 9f:94:a0:e4:52:c6:5c:26:a9:c5:6e:c2:a2:37:41: 46:30:ca:2d:e1:ae:b8:a6:db:b6:2f:0c:66:4c:91: f4:c3:3e:e6:f2:88:63:3d:7a:16:55:56:63:d0:db: 66:fe:f9:37:4b:9b:0b:ef:12:10:f4:ca:49:12:19: 61:82:e8:2d:8e:21:f4:bd:2e:9d:d3:a0:3b:9e:64: 64:bf:56:8d:54:98:51:f6:d3:79:2e:5b:2a:0c:7b: 15:c1:8a:3c:04:69:0c:11:27:39:18:95:2a:c8:6d: 74:ac:06:fc:10:08:b0:96:0b:b5:f3:dd:c6:cf:98: 5d:3b:49:f0:7c:f7:b3:d7:e8:08:8a:44:88:cb:23: ab:0b:30:b2:fb:7f:de:24:04:82:23:16:c0:db:a3: 27:f6:d7:bc:aa:7e:21:5c:7c:f9:77:3a:d2:47:81: 95:ef:96:2e:d7:4d:9c:6c:20:49:09:84:dd:3a:bf: 57:a6:80:66:55:b2:8d:78:2a:6d:da:ed:16:49:60: b7:90:9e:bf:bd:06:fe:e8:2e:b4:9f:68:52:e3:81: 7d:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:F6:8E:6B:F9:25:20:A6:89:39:93:54:06:5C:BC:BC:65:75:D3:5B X509v3 Authority Key Identifier: keyid:9A:32:CD:91:FC:E9:CA:DB:F2:8B:ED:F4:C7:20:E6:7B:79:AF:B9:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3As3Bd5oosFtNhQtDtxTwXztkwPAhcE1Jfq9rSB7buCh/0/9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3As3Bd5oosFtNhQtDtxTwXztkwPAhcE1Jfq9rSB7buCh/0/9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:d3:76:52:9a:d6:81:87:48:a7:1e:5c:dc:7b:14:17:a2:fa: fa:c2:63:2f:99:34:52:9e:4e:d5:bb:7f:cc:c7:0b:cb:84:08: 83:a6:9a:65:28:96:fb:26:69:f4:56:2d:a6:c5:48:16:a2:85: e9:3a:f8:32:5a:4f:2b:a7:73:30:43:3a:d9:cf:92:13:09:90: 3e:8c:8a:c4:69:b9:2a:1f:74:b3:9c:b6:0b:ff:87:d3:e2:6f: 10:00:6a:d5:14:91:68:4a:6b:8b:fb:7f:7c:33:57:52:19:a1: f0:58:2b:2e:a0:8d:c3:08:ab:de:e3:5e:c2:5f:69:ed:e6:9a: e6:b6:61:52:4e:6e:6f:c5:ee:7e:e8:62:94:92:bf:d5:e7:b6: 5b:ee:75:cc:9d:9a:2a:83:7c:33:eb:27:b3:33:3a:4b:fb:f6: 55:ad:ac:68:9a:a1:77:94:ee:d4:4d:96:ec:f8:e8:77:ac:fa: 41:40:da:e0:db:d1:c7:50:5b:bc:a9:6a:77:a2:68:9c:f5:a9: ea:63:96:f5:51:74:53:3e:dd:9d:94:ef:86:2a:c6:ac:d0:e3: cb:4c:51:38:3b:8b:35:0b:96:0c:09:63:45:81:68:2c:f5:09: 78:b3:12:dd:4e:3a:7c:29:fd:7e:60:e4:18:32:ce:f1:10:07: 78:8c:43:b4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUHsqjx/a74JKPlzYEqD3I/3MaROUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUEzMkNEOTFGQ0U5Q0FEQkYyOEJFREY0QzcyMEU2N0I3 OUFGQjlDQzAeFw0yNjA4MjMwOTMwNDFaFw0yNjA4MjQxMzIwNDFaMDMxMTAvBgNV BAMTKDQwRjY4RTZCRjkyNTIwQTY4OTM5OTM1NDA2NUNCQ0JDNjU3NUQzNUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC221DD/0V21tQj3QUJYky02LuT ofVu9KRIR0mxWqFRmUQ9SvbB4RyYFjYkyp+UoORSxlwmqcVuwqI3QUYwyi3hrrim 27YvDGZMkfTDPubyiGM9ehZVVmPQ22b++TdLmwvvEhD0ykkSGWGC6C2OIfS9Lp3T oDueZGS/Vo1UmFH203kuWyoMexXBijwEaQwRJzkYlSrIbXSsBvwQCLCWC7Xz3cbP mF07SfB897PX6AiKRIjLI6sLMLL7f94kBIIjFsDboyf217yqfiFcfPl3OtJHgZXv li7XTZxsIEkJhN06v1emgGZVso14Km3a7RZJYLeQnr+9Bv7oLrSfaFLjgX1XAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUQPaOa/klIKaJOZNUBly8vGV101swHwYDVR0j BBgwFoAUmjLNkfzpytvyi+30xyDme3mvucwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM0FzM0JkNW9vc0Z0TmhRdER0eFR3WHp0a3dQQWhjRTFKZnE5clNCN2J1 Q2gvMC85QTMyQ0Q5MUZDRTlDQURCRjI4QkVERjRDNzIwRTY3Qjc5QUZCOUNDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlBMzJDRDkxRkNFOUNBREJG MjhCRURGNEM3MjBFNjdCNzlBRkI5Q0MuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M0FzM0JkNW9vc0Z0TmhRdER0eFR3WHp0a3dQQWhjRTFKZnE5clNCN2J1Q2gvMC85 QTMyQ0Q5MUZDRTlDQURCRjI4QkVERjRDNzIwRTY3Qjc5QUZCOUNDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEALdN2UprWgYdIpx5c3HsUF6L6+sJjL5k0Up5O1bt/zMcLy4QIg6aaZSiW+yZp 9FYtpsVIFqKF6Tr4MlpPK6dzMEM62c+SEwmQPoyKxGm5Kh90s5y2C/+H0+JvEABq 1RSRaEpri/t/fDNXUhmh8FgrLqCNwwir3uNewl9p7eaa5rZhUk5ub8XufuhilJK/ 1ee2W+51zJ2aKoN8M+snszM6S/v2Va2saJqhd5Tu1E2W7Pjod6z6QUDa4NvRx1Bb vKlqd6JonPWp6mOW9VF0Uz7dnZTvhirGrNDjy0xRODuLNQuWDAljRYFoLPUJeLMS 3U46fCn9fmDkGDLO8RAHeIxDtA== -----END CERTIFICATE-----Generated at Mon Aug 24 04:31:45 2026 by rpki-client