$ rpki-client -vvf rpki-repo.registro.br/repo/3db7SahZtRVC8PuMcgyzbAmeUfVwyRcsxWmHCGFvpcyF/0/2987D670913962CF69181F73C94FE8C279E038DA.mft File: 2987D670913962CF69181F73C94FE8C279E038DA.mft (raw, json) Hash identifier: KpVDgR/zq63CVXodLbnTfTq/V8dvUxys+mPxYOkpM8c= Subject key identifier: 14:60:5B:7C:FF:F4:48:C2:32:77:13:AE:3C:F8:7B:68:90:B7:3C:A1 Authority key identifier: 29:87:D6:70:91:39:62:CF:69:18:1F:73:C9:4F:E8:C2:79:E0:38:DA Certificate issuer: /CN=2987D670913962CF69181F73C94FE8C279E038DA Certificate serial: 51123F9BE53E76379BD35B66F13611C915153931 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2987D670913962CF69181F73C94FE8C279E038DA.cer Subject info access: rsync://rpki-repo.registro.br/repo/3db7SahZtRVC8PuMcgyzbAmeUfVwyRcsxWmHCGFvpcyF/0/2987D670913962CF69181F73C94FE8C279E038DA.mft Manifest number: 0166 Signing time: Tue 07 Jul 2026 18:15:17 +0000 Manifest this update: Tue 07 Jul 2026 18:10:17 +0000 Manifest next update: Wed 08 Jul 2026 21:59:17 +0000 Files and hashes: 1: 323830343a323738303a3a2f33322d3334203d3e20323633393035.roa (hash: 56hiDQJz7DPztx5lZlqeTXai+RNb2R69Hh8Nu7xk9pI=) 2: 2987D670913962CF69181F73C94FE8C279E038DA.crl (hash: PJ0JCM0s5riBWjn/j1Urjv+NG/Ek7vjfnK90jfdsZ4g=) 3: 3133382e3230342e3230302e302f32322d3234203d3e20323633393035.roa (hash: bQcV36xReQ/IDV5gVRSjwtVDmMEnos4N2zSYcbzUSh8=) 4: 3137302e38302e36382e302f32322d3234203d3e20323633393035.roa (hash: 7NSu1PMWeoZCELaEl8OW9YbMtDkl2sNpkyCrwdD6WJA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3db7SahZtRVC8PuMcgyzbAmeUfVwyRcsxWmHCGFvpcyF/0/2987D670913962CF69181F73C94FE8C279E038DA.crl rsync://rpki-repo.registro.br/repo/3db7SahZtRVC8PuMcgyzbAmeUfVwyRcsxWmHCGFvpcyF/0/2987D670913962CF69181F73C94FE8C279E038DA.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2987D670913962CF69181F73C94FE8C279E038DA.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 08 Jul 2026 21:59:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:12:3f:9b:e5:3e:76:37:9b:d3:5b:66:f1:36:11:c9:15:15:39:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2987D670913962CF69181F73C94FE8C279E038DA Validity Not Before: Jul 7 18:10:17 2026 GMT Not After : Jul 8 21:59:17 2026 GMT Subject: CN=14605B7CFFF448C2327713AE3CF87B6890B73CA1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:33:ee:19:06:f2:d2:3c:05:c8:04:b4:78:60: 14:de:ed:ef:39:91:43:68:a1:17:0a:ec:56:ea:15: f9:7e:c1:b9:48:4b:7d:5d:9d:fd:bf:76:1f:8d:21: 06:83:a5:1f:bc:0d:6b:58:ce:63:60:ed:77:89:bb: 88:37:45:17:d3:66:d2:c4:29:9e:5d:a7:e0:63:49: 3a:06:d2:08:22:42:17:e1:66:ed:58:ac:80:c7:4c: 5a:77:71:56:d8:de:00:69:7b:14:81:ee:60:02:12: e7:2a:26:48:2b:2a:2b:46:8d:36:40:4e:c1:68:f5: 55:74:e6:b8:82:5f:7f:a5:52:92:9a:60:1e:44:8c: a9:dc:dd:e5:59:b0:1e:f6:52:29:80:81:dd:10:ac: c6:bf:ac:63:8a:66:b8:37:2e:6a:ae:9e:f1:54:34: c0:b7:94:94:0c:1a:db:7d:a5:db:2a:b7:ca:73:27: 9c:c3:c6:fc:3d:8f:84:6b:da:76:2a:ac:f8:9a:60: 82:43:60:dd:1d:b3:62:70:e0:f5:f0:c0:dc:f1:5f: 6d:a1:f7:a3:01:05:b9:2e:3d:3f:a5:ea:91:5d:39: df:8b:d9:f1:9b:8d:d1:30:d4:a4:c9:ca:6b:de:19: 70:64:9a:2b:8f:3d:0a:8b:22:ac:5e:51:19:05:19: 97:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:60:5B:7C:FF:F4:48:C2:32:77:13:AE:3C:F8:7B:68:90:B7:3C:A1 X509v3 Authority Key Identifier: keyid:29:87:D6:70:91:39:62:CF:69:18:1F:73:C9:4F:E8:C2:79:E0:38:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3db7SahZtRVC8PuMcgyzbAmeUfVwyRcsxWmHCGFvpcyF/0/2987D670913962CF69181F73C94FE8C279E038DA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2987D670913962CF69181F73C94FE8C279E038DA.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3db7SahZtRVC8PuMcgyzbAmeUfVwyRcsxWmHCGFvpcyF/0/2987D670913962CF69181F73C94FE8C279E038DA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:7e:bc:0e:49:df:e2:89:30:2f:34:ef:9f:ff:11:e9:06:70: af:be:61:fb:40:3d:dc:b5:02:90:1f:25:8f:7b:96:9a:72:fb: e1:db:16:1b:d3:21:7d:01:26:9a:97:3c:08:86:99:bd:0b:52: ce:f8:ac:d2:ee:9a:d9:99:c2:6c:87:74:6b:ef:ee:3e:9f:70: 4b:8f:b1:ef:3c:9f:50:f6:84:3a:c2:8b:6a:17:a6:6a:3c:82: 2c:ec:01:d2:c2:38:9b:1b:a2:32:71:de:74:de:4c:b1:a3:3b: f9:72:2c:e5:0c:1d:d4:4a:d7:0d:9e:4e:1a:60:17:91:be:fb: 0e:d2:6a:70:6a:68:a1:46:ad:96:b9:98:3b:3c:3b:3f:59:a7: f3:d3:47:f5:fd:47:c9:5a:1b:86:81:63:c7:07:d6:e5:5d:47: 09:44:04:f1:c4:91:a4:34:63:70:9d:e5:62:78:e7:ff:a9:f2: 99:c8:c7:c7:a3:a5:85:8b:b9:d5:35:34:2c:bf:57:3d:90:02: 6a:c0:1d:98:42:69:c3:0e:d9:fd:74:05:c8:60:af:ae:08:5e: 2b:be:b0:eb:b8:53:8c:24:1f:33:48:db:74:e6:1e:36:74:88: 1d:a6:af:85:46:67:7d:68:da:28:ae:fc:7c:42:95:c7:5e:02: 55:cd:7f:a7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUURI/m+U+djeb01tm8TYRyRUVOTEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk4N0Q2NzA5MTM5NjJDRjY5MTgxRjczQzk0RkU4QzI3 OUUwMzhEQTAeFw0yNjA3MDcxODEwMTdaFw0yNjA3MDgyMTU5MTdaMDMxMTAvBgNV BAMTKDE0NjA1QjdDRkZGNDQ4QzIzMjc3MTNBRTNDRjg3QjY4OTBCNzNDQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLM+4ZBvLSPAXIBLR4YBTe7e85 kUNooRcK7FbqFfl+wblIS31dnf2/dh+NIQaDpR+8DWtYzmNg7XeJu4g3RRfTZtLE KZ5dp+BjSToG0ggiQhfhZu1YrIDHTFp3cVbY3gBpexSB7mACEucqJkgrKitGjTZA TsFo9VV05riCX3+lUpKaYB5EjKnc3eVZsB72UimAgd0QrMa/rGOKZrg3LmqunvFU NMC3lJQMGtt9pdsqt8pzJ5zDxvw9j4Rr2nYqrPiaYIJDYN0ds2Jw4PXwwNzxX22h 96MBBbkuPT+l6pFdOd+L2fGbjdEw1KTJymveGXBkmiuPPQqLIqxeURkFGZehAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUFGBbfP/0SMIydxOuPPh7aJC3PKEwHwYDVR0j BBgwFoAUKYfWcJE5Ys9pGB9zyU/ownngONowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM2RiN1NhaFp0UlZDOFB1TWNneXpiQW1lVWZWd3lSY3N4V21IQ0dGdnBj eUYvMC8yOTg3RDY3MDkxMzk2MkNGNjkxODFGNzNDOTRGRThDMjc5RTAzOERBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI5ODdENjcwOTEzOTYyQ0Y2 OTE4MUY3M0M5NEZFOEMyNzlFMDM4REEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M2RiN1NhaFp0UlZDOFB1TWNneXpiQW1lVWZWd3lSY3N4V21IQ0dGdnBjeUYvMC8y OTg3RDY3MDkxMzk2MkNGNjkxODFGNzNDOTRGRThDMjc5RTAzOERBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfn68Dknf4okwLzTvn/8R6QZwr75h+0A93LUCkB8lj3uWmnL74dsWG9MhfQEm mpc8CIaZvQtSzvis0u6a2ZnCbId0a+/uPp9wS4+x7zyfUPaEOsKLahemajyCLOwB 0sI4mxuiMnHedN5MsaM7+XIs5Qwd1ErXDZ5OGmAXkb77DtJqcGpooUatlrmYOzw7 P1mn89NH9f1HyVobhoFjxwfW5V1HCUQE8cSRpDRjcJ3lYnjn/6nymcjHx6OlhYu5 1TU0LL9XPZACasAdmEJpww7Z/XQFyGCvrgheK76w67hTjCQfM0jbdOYeNnSIHaav hUZnfWjaKK78fEKVx14CVc1/pw== -----END CERTIFICATE-----Generated at Wed Jul 8 15:24:30 2026 by rpki-client