$ rpki-client -vvvf rpki-repo.registro.br/repo/5MJgBMHAoUcto2NckmVMXXSAKwykSzLS1u56vXVG2U2x/0/00689E8D2212FB497B226E0F3C68387FFD2D22B3.mft File: 00689E8D2212FB497B226E0F3C68387FFD2D22B3.mft (raw, json) Hash identifier: vSqqcBziVKOYiIlwU+inxc7VGyt9dyPiYTBsTftaeFM= Subject key identifier: 61:52:56:FE:59:9C:11:C9:75:A0:5F:9E:F9:C0:C9:2A:3F:DC:C2:E2 Authority key identifier: 00:68:9E:8D:22:12:FB:49:7B:22:6E:0F:3C:68:38:7F:FD:2D:22:B3 Certificate issuer: /CN=00689E8D2212FB497B226E0F3C68387FFD2D22B3 Certificate serial: 01C50C5880557C07AEDDC638EFE3A41FD52F15A1 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00689E8D2212FB497B226E0F3C68387FFD2D22B3.cer Subject info access: rsync://rpki-repo.registro.br/repo/5MJgBMHAoUcto2NckmVMXXSAKwykSzLS1u56vXVG2U2x/0/00689E8D2212FB497B226E0F3C68387FFD2D22B3.mft Manifest number: 42 Signing time: Sun 23 Aug 2026 08:00:10 +0000 Manifest this update: Sun 23 Aug 2026 07:55:10 +0000 Manifest next update: Mon 24 Aug 2026 10:55:10 +0000 Files and hashes: 1: 00689E8D2212FB497B226E0F3C68387FFD2D22B3.crl (hash: ZqguE4YmTmppdP0mPxaOOcbYwHiFd0RkCbMN+dyYyIw=) 2: AS274772.asa (hash: Vz0yCIZXZKR3pbtze2/PxGeEly1CvDKKj9hcVNPGBOo=) 3: 323830343a393335633a3a2f33322d3634203d3e20323734373732.roa (hash: vn9ehD7ygHLp3tOVBLANknU7UWzgQHwSYTyA795bhUs=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5MJgBMHAoUcto2NckmVMXXSAKwykSzLS1u56vXVG2U2x/0/00689E8D2212FB497B226E0F3C68387FFD2D22B3.crl rsync://rpki-repo.registro.br/repo/5MJgBMHAoUcto2NckmVMXXSAKwykSzLS1u56vXVG2U2x/0/00689E8D2212FB497B226E0F3C68387FFD2D22B3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00689E8D2212FB497B226E0F3C68387FFD2D22B3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 24 Aug 2026 10:55:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:c5:0c:58:80:55:7c:07:ae:dd:c6:38:ef:e3:a4:1f:d5:2f:15:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00689E8D2212FB497B226E0F3C68387FFD2D22B3 Validity Not Before: Aug 23 07:55:10 2026 GMT Not After : Aug 24 10:55:10 2026 GMT Subject: CN=615256FE599C11C975A05F9EF9C0C92A3FDCC2E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:72:e4:03:c0:95:5c:8a:36:8e:36:11:17:6c: ea:22:31:38:38:ce:99:62:b1:48:6c:22:fa:a4:25: 8e:8f:fe:21:49:01:e9:51:4d:c4:98:0b:43:1a:98: ee:07:59:f7:53:25:39:a7:4f:cd:21:55:97:fb:37: e4:eb:43:f6:da:82:7d:33:bb:55:f3:86:c6:8c:af: 16:04:7f:e9:c6:e0:c2:20:27:e8:d9:ac:2d:46:93: 1f:4b:42:40:99:c0:5e:30:b8:6f:ee:1d:f8:31:34: a4:d6:dd:db:d2:4f:b7:27:39:e9:73:9d:d3:75:5b: d4:77:4c:f9:c8:14:2a:12:51:9e:19:90:3f:ca:10: 19:aa:90:ea:62:04:7c:58:95:9f:7f:a6:2a:35:d6: 49:09:05:dc:ae:ef:1a:48:92:61:93:42:62:91:90: 89:8a:06:c2:ae:09:67:0a:54:08:e9:6f:fd:d0:4e: 33:30:89:4a:55:6f:c4:89:1b:a4:32:d1:6f:2c:8e: 5c:93:9c:89:8e:e6:4b:8c:49:4b:61:0c:5a:90:7a: 71:24:51:d7:66:0d:9a:d3:1c:45:5a:6d:98:60:af: ae:cc:1b:17:59:6e:05:35:0c:ed:b4:5c:2c:5a:b9: f4:de:69:9a:36:63:78:ec:6b:5c:2d:8c:d8:54:19: 36:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:52:56:FE:59:9C:11:C9:75:A0:5F:9E:F9:C0:C9:2A:3F:DC:C2:E2 X509v3 Authority Key Identifier: keyid:00:68:9E:8D:22:12:FB:49:7B:22:6E:0F:3C:68:38:7F:FD:2D:22:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5MJgBMHAoUcto2NckmVMXXSAKwykSzLS1u56vXVG2U2x/0/00689E8D2212FB497B226E0F3C68387FFD2D22B3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00689E8D2212FB497B226E0F3C68387FFD2D22B3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5MJgBMHAoUcto2NckmVMXXSAKwykSzLS1u56vXVG2U2x/0/00689E8D2212FB497B226E0F3C68387FFD2D22B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:39:46:be:3d:b8:00:b1:c6:2c:d0:88:56:82:4b:52:b8:e0: 3a:dd:fb:01:07:b9:38:09:8e:03:84:b6:0a:da:aa:17:22:c7: 4a:35:20:c7:8a:a5:56:00:33:a3:2b:36:d3:af:e2:0b:b8:66: 58:9b:49:b1:e8:a8:53:26:58:c8:e4:9f:47:e3:07:bd:1f:b9: 0f:a0:a1:19:b9:0f:1d:61:4b:78:c0:b1:21:7e:d6:5c:90:9c: d2:51:24:04:f3:7b:88:77:fb:df:8f:22:e0:6e:5e:bb:07:3c: da:4c:af:8d:26:23:2c:dd:fc:fe:98:84:57:ba:82:86:3d:17: cd:45:7e:b6:e4:fb:83:f2:96:84:92:fb:f5:de:77:16:4a:61: 69:59:e5:1d:80:cf:d4:f4:3f:07:c6:1f:09:25:5a:fd:dc:83: 4c:22:b5:b4:d1:22:c3:6e:14:36:cb:9b:85:89:e6:e7:c2:6e: dd:c5:29:f4:83:f8:d6:ef:3e:b5:9a:17:21:2d:cd:c3:ae:5b: d7:44:ca:3b:5a:2b:71:fb:96:86:ef:54:b5:b6:20:f3:98:b2: 60:28:5b:02:0b:d3:3d:08:8e:c3:87:bc:fe:6e:b5:77:1e:e3: ef:45:28:17:aa:9b:9f:38:86:ca:6f:e9:d9:a5:2d:0f:2f:f3: f1:92:5a:e8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUAcUMWIBVfAeu3cY47+OkH9UvFaEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDA2ODlFOEQyMjEyRkI0OTdCMjI2RTBGM0M2ODM4N0ZG RDJEMjJCMzAeFw0yNjA4MjMwNzU1MTBaFw0yNjA4MjQxMDU1MTBaMDMxMTAvBgNV BAMTKDYxNTI1NkZFNTk5QzExQzk3NUEwNUY5RUY5QzBDOTJBM0ZEQ0MyRTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCscuQDwJVcijaONhEXbOoiMTg4 zplisUhsIvqkJY6P/iFJAelRTcSYC0MamO4HWfdTJTmnT80hVZf7N+TrQ/bagn0z u1XzhsaMrxYEf+nG4MIgJ+jZrC1Gkx9LQkCZwF4wuG/uHfgxNKTW3dvST7cnOelz ndN1W9R3TPnIFCoSUZ4ZkD/KEBmqkOpiBHxYlZ9/pio11kkJBdyu7xpIkmGTQmKR kImKBsKuCWcKVAjpb/3QTjMwiUpVb8SJG6Qy0W8sjlyTnImO5kuMSUthDFqQenEk UddmDZrTHEVabZhgr67MGxdZbgU1DO20XCxaufTeaZo2Y3jsa1wtjNhUGTZNAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUYVJW/lmcEcl1oF+e+cDJKj/cwuIwHwYDVR0j BBgwFoAUAGiejSIS+0l7Im4PPGg4f/0tIrMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNU1KZ0JNSEFvVWN0bzJOY2ttVk1YWFNBS3d5a1N6TFMxdTU2dlhWRzJV MngvMC8wMDY4OUU4RDIyMTJGQjQ5N0IyMjZFMEYzQzY4Mzg3RkZEMkQyMkIzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAwNjg5RThEMjIxMkZCNDk3 QjIyNkUwRjNDNjgzODdGRkQyRDIyQjMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NU1KZ0JNSEFvVWN0bzJOY2ttVk1YWFNBS3d5a1N6TFMxdTU2dlhWRzJVMngvMC8w MDY4OUU4RDIyMTJGQjQ5N0IyMjZFMEYzQzY4Mzg3RkZEMkQyMkIzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjTlGvj24ALHGLNCIVoJLUrjgOt37AQe5OAmOA4S2CtqqFyLHSjUgx4qlVgAz oys206/iC7hmWJtJseioUyZYyOSfR+MHvR+5D6ChGbkPHWFLeMCxIX7WXJCc0lEk BPN7iHf7348i4G5euwc82kyvjSYjLN38/piEV7qChj0XzUV+tuT7g/KWhJL79d53 FkphaVnlHYDP1PQ/B8YfCSVa/dyDTCK1tNEiw24UNsubhYnm58Ju3cUp9IP41u8+ tZoXIS3Nw65b10TKO1orcfuWhu9UtbYg85iyYChbAgvTPQiOw4e8/m61dx7j70Uo F6qbnziGym/p2aUtDy/z8ZJa6A== -----END CERTIFICATE-----Generated at Sun Aug 23 18:12:21 2026 by rpki-client