$ rpki-client -vvvf rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/4D6CE36DB2E2A67225BE6062A896CD4FFFE3DCDB.mft File: 4D6CE36DB2E2A67225BE6062A896CD4FFFE3DCDB.mft (raw, json) Hash identifier: NC0aISqsSXrGY/Hp7PD+dGSsFRUpifIrK/N80bTb4D8= Subject key identifier: DE:89:96:95:13:DB:94:13:7B:A7:FA:18:53:3B:C9:B7:CD:1A:FB:C7 Authority key identifier: 4D:6C:E3:6D:B2:E2:A6:72:25:BE:60:62:A8:96:CD:4F:FF:E3:DC:DB Certificate issuer: /CN=4D6CE36DB2E2A67225BE6062A896CD4FFFE3DCDB Certificate serial: 6512060B73C5C66AC8594C13550D85CABFFAC7B2 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D6CE36DB2E2A67225BE6062A896CD4FFFE3DCDB.cer Subject info access: rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/4D6CE36DB2E2A67225BE6062A896CD4FFFE3DCDB.mft Manifest number: 89 Signing time: Sun 23 Aug 2026 06:59:00 +0000 Manifest this update: Sun 23 Aug 2026 06:54:00 +0000 Manifest next update: Mon 24 Aug 2026 07:30:00 +0000 Files and hashes: 1: 4D6CE36DB2E2A67225BE6062A896CD4FFFE3DCDB.crl (hash: nlHLE/Y3aIbFp0SabWGrlSm8Lcs6FGh5k00nH8q/dZI=) 2: 323830343a323865303a3a2f33322d3334203d3e20323632353530.roa (hash: bsgPivGBDj6Gysu0ek5/fWY0EwZg+KO1GOb8CQiu2aM=) 3: 3134332e302e34302e302f32322d3234203d3e20323632353530.roa (hash: DLHFVXZxbG/FoonZGXu9PUK0PIf8uygSe3N5xDMhF8k=) 4: 3137372e37322e3136382e302f32322d3234203d3e20323632353530.roa (hash: jIXloGZnI3qCNkbmxgig41rXYS+Mo8kTvOmuVSf3E+U=) 5: 3137372e37322e3137322e302f32322d3234203d3e20323632353530.roa (hash: PbCf+dakYOZRmv/tVaY8TLiYM/uIemW8DwxfhYqLEBU=) 6: 3136382e3139372e342e302f32322d3234203d3e20323632353530.roa (hash: tL23P7eEmv2E9NQQeXIvDDdb3/yFy1PXTvNj/dfd/s4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/4D6CE36DB2E2A67225BE6062A896CD4FFFE3DCDB.crl rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/4D6CE36DB2E2A67225BE6062A896CD4FFFE3DCDB.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D6CE36DB2E2A67225BE6062A896CD4FFFE3DCDB.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 24 Aug 2026 07:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:12:06:0b:73:c5:c6:6a:c8:59:4c:13:55:0d:85:ca:bf:fa:c7:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4D6CE36DB2E2A67225BE6062A896CD4FFFE3DCDB Validity Not Before: Aug 23 06:54:00 2026 GMT Not After : Aug 24 07:30:00 2026 GMT Subject: CN=DE89969513DB94137BA7FA18533BC9B7CD1AFBC7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:62:1d:60:e6:27:cd:4e:96:7e:4a:82:3d:d2: ba:bc:6f:96:ab:43:ea:c2:7b:48:35:fb:25:24:fa: f9:f9:54:0c:74:33:e8:d9:e6:d4:e6:d8:20:89:56: 3e:ad:b9:d4:ed:4f:49:01:7f:66:15:cd:9b:b2:87: 1c:60:dd:da:f6:be:56:e8:c9:b6:13:8f:f3:b4:49: fc:72:85:a9:c1:2b:c0:bd:1f:60:a6:c9:8d:ca:59: 96:43:10:31:f0:d0:90:63:7a:77:e9:ec:50:20:44: bd:55:b7:25:39:7e:16:aa:9e:68:09:1c:a6:df:ae: 02:85:7a:db:86:75:df:30:56:0f:3d:15:34:12:88: 90:8d:76:9c:63:5f:5d:b6:c3:9a:87:8f:4b:9c:0c: ed:0a:96:c7:aa:c3:90:08:21:75:a6:ed:1d:23:89: 60:44:65:17:9c:ce:1f:f4:e9:c8:90:6c:4d:f9:32: f1:c0:05:51:58:3f:02:30:da:1f:cd:ce:56:92:84: 23:8b:fb:f3:08:eb:23:5d:c0:e0:9d:e9:b9:86:3c: 39:76:fd:08:33:41:bd:28:8a:ae:29:e3:ff:bb:e4: a8:d5:4b:52:3e:37:ce:42:30:c9:66:5a:15:88:2b: 16:3a:39:6e:a5:fa:11:6e:c8:5d:ef:7b:c0:8b:53: c0:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:89:96:95:13:DB:94:13:7B:A7:FA:18:53:3B:C9:B7:CD:1A:FB:C7 X509v3 Authority Key Identifier: keyid:4D:6C:E3:6D:B2:E2:A6:72:25:BE:60:62:A8:96:CD:4F:FF:E3:DC:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/4D6CE36DB2E2A67225BE6062A896CD4FFFE3DCDB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D6CE36DB2E2A67225BE6062A896CD4FFFE3DCDB.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/4D6CE36DB2E2A67225BE6062A896CD4FFFE3DCDB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:55:be:04:1d:ac:f8:f5:99:2c:da:c5:68:69:00:e8:3a:82: 4b:96:9d:03:82:28:72:ab:1c:8a:c2:09:79:a8:3f:39:a9:f7: bc:b0:b8:f7:fb:2e:e7:10:df:b7:92:97:46:9d:d9:f6:1f:cf: d7:2b:d7:8c:27:46:29:f4:e9:88:3a:c3:ea:19:2b:ba:17:3c: 8f:7d:41:d0:96:65:63:78:d0:2b:5a:b2:cc:fd:f4:7f:8a:d4: cf:c4:f9:0e:56:ec:df:2e:be:d8:da:76:c1:22:e6:43:27:39: b5:41:bc:05:26:1f:b1:0a:a5:53:20:13:80:5e:b1:a4:9b:f5: 16:1b:21:50:ff:b4:30:ac:97:72:1d:21:45:af:e0:1b:94:ba: 61:53:31:e6:90:5a:9b:ec:9a:49:48:94:99:2a:24:4a:5e:45: d8:14:5a:97:e0:15:78:09:ed:6b:1a:32:94:fc:59:22:4d:72: 74:1f:a3:78:56:e9:1d:22:70:51:a9:98:2d:0a:10:0a:fd:94: 5f:9e:8e:67:6e:77:fa:71:81:44:20:bc:27:66:f5:31:2a:92: 67:f4:15:16:0d:ca:dd:9b:11:e2:3c:03:51:dd:c4:40:22:ab: 92:8d:b4:2f:e5:b7:81:16:d2:6c:c4:1e:e8:29:b9:6f:ee:c0: 55:70:9b:9e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUZRIGC3PFxmrIWUwTVQ2Fyr/6x7IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEQ2Q0UzNkRCMkUyQTY3MjI1QkU2MDYyQTg5NkNENEZG RkUzRENEQjAeFw0yNjA4MjMwNjU0MDBaFw0yNjA4MjQwNzMwMDBaMDMxMTAvBgNV BAMTKERFODk5Njk1MTNEQjk0MTM3QkE3RkExODUzM0JDOUI3Q0QxQUZCQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1Yh1g5ifNTpZ+SoI90rq8b5ar Q+rCe0g1+yUk+vn5VAx0M+jZ5tTm2CCJVj6tudTtT0kBf2YVzZuyhxxg3dr2vlbo ybYTj/O0SfxyhanBK8C9H2CmyY3KWZZDEDHw0JBjenfp7FAgRL1VtyU5fhaqnmgJ HKbfrgKFetuGdd8wVg89FTQSiJCNdpxjX122w5qHj0ucDO0Klseqw5AIIXWm7R0j iWBEZReczh/06ciQbE35MvHABVFYPwIw2h/NzlaShCOL+/MI6yNdwOCd6bmGPDl2 /QgzQb0oiq4p4/+75KjVS1I+N85CMMlmWhWIKxY6OW6l+hFuyF3ve8CLU8CvAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU3omWlRPblBN7p/oYUzvJt80a+8cwHwYDVR0j BBgwFoAUTWzjbbLipnIlvmBiqJbNT//j3NswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNUVTcGZqUUZvbUpROGVGaFJRbXJBaFUxQ1M3UGVKc1hNV2tIUlRic1Vv emQvMC80RDZDRTM2REIyRTJBNjcyMjVCRTYwNjJBODk2Q0Q0RkZGRTNEQ0RCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRENkNFMzZEQjJFMkE2NzIy NUJFNjA2MkE4OTZDRDRGRkZFM0RDREIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NUVTcGZqUUZvbUpROGVGaFJRbXJBaFUxQ1M3UGVKc1hNV2tIUlRic1VvemQvMC80 RDZDRTM2REIyRTJBNjcyMjVCRTYwNjJBODk2Q0Q0RkZGRTNEQ0RCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEADFW+BB2s+PWZLNrFaGkA6DqCS5adA4IocqscisIJeag/Oan3vLC49/su5xDf t5KXRp3Z9h/P1yvXjCdGKfTpiDrD6hkruhc8j31B0JZlY3jQK1qyzP30f4rUz8T5 Dlbs3y6+2Np2wSLmQyc5tUG8BSYfsQqlUyATgF6xpJv1FhshUP+0MKyXch0hRa/g G5S6YVMx5pBam+yaSUiUmSokSl5F2BRal+AVeAntaxoylPxZIk1ydB+jeFbpHSJw UamYLQoQCv2UX56OZ253+nGBRCC8J2b1MSqSZ/QVFg3K3ZsR4jwDUd3EQCKrko20 L+W3gRbSbMQe6Cm5b+7AVXCbng== -----END CERTIFICATE-----Generated at Sun Aug 23 12:46:32 2026 by rpki-client