$ rpki-client -vvvf rpki-repo.registro.br/repo/5njX5ZywSUYtRVTQyrkAPaCGkjkxTAa7jjPKQbU5GbfP/0/BC456BECD132A9F60B830E34664A12C5374676E9.mft File: BC456BECD132A9F60B830E34664A12C5374676E9.mft (raw, json) Hash identifier: hoIfDp124zRBzWOoBanCeps9kfefhZQ1nNR5KwmGJeQ= Subject key identifier: 3A:21:53:CE:59:50:53:55:91:12:71:C3:7D:1E:11:F5:C3:40:18:66 Authority key identifier: BC:45:6B:EC:D1:32:A9:F6:0B:83:0E:34:66:4A:12:C5:37:46:76:E9 Certificate issuer: /CN=BC456BECD132A9F60B830E34664A12C5374676E9 Certificate serial: 5AB70AAF642F0607CD85AE00E7AEBBDA9C39ED5D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC456BECD132A9F60B830E34664A12C5374676E9.cer Subject info access: rsync://rpki-repo.registro.br/repo/5njX5ZywSUYtRVTQyrkAPaCGkjkxTAa7jjPKQbU5GbfP/0/BC456BECD132A9F60B830E34664A12C5374676E9.mft Manifest number: D1 Signing time: Sat 22 Aug 2026 09:03:18 +0000 Manifest this update: Sat 22 Aug 2026 08:58:18 +0000 Manifest next update: Sun 23 Aug 2026 09:08:18 +0000 Files and hashes: 1: 3138362e3139342e342e302f32322d3332203d3e20323730383832.roa (hash: 5X/HGZaJntduB0rloOs2ZkTeac8x0CijUvlHCGu/6ZE=) 2: 323830343a373265343a3a2f33322d313238203d3e20323730383832.roa (hash: YK8XuFhaC4FK6UM/+bgIEo+Qb13aFkBUwzZvAKJHvwE=) 3: BC456BECD132A9F60B830E34664A12C5374676E9.crl (hash: 3C8w1C1VfuYjFWIs9kVxvUxxfBEgHICTrnPKqimuMAw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5njX5ZywSUYtRVTQyrkAPaCGkjkxTAa7jjPKQbU5GbfP/0/BC456BECD132A9F60B830E34664A12C5374676E9.crl rsync://rpki-repo.registro.br/repo/5njX5ZywSUYtRVTQyrkAPaCGkjkxTAa7jjPKQbU5GbfP/0/BC456BECD132A9F60B830E34664A12C5374676E9.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC456BECD132A9F60B830E34664A12C5374676E9.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 23 Aug 2026 09:08:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:b7:0a:af:64:2f:06:07:cd:85:ae:00:e7:ae:bb:da:9c:39:ed:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BC456BECD132A9F60B830E34664A12C5374676E9 Validity Not Before: Aug 22 08:58:18 2026 GMT Not After : Aug 23 09:08:18 2026 GMT Subject: CN=3A2153CE59505355911271C37D1E11F5C3401866 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:9a:c7:db:1c:7c:85:fe:37:71:5f:b6:ba:85: a0:72:e6:80:7e:a8:17:1a:6f:15:0b:5e:0c:a7:41: 26:ad:ab:dc:d9:dc:82:44:22:a0:cd:79:2f:9b:fe: 36:fb:46:dd:04:79:45:f9:74:94:c8:23:e0:8c:04: c4:f9:9b:7c:37:51:ac:45:ab:de:4e:37:08:55:4d: 2e:6c:52:18:52:9e:c9:d2:5d:ff:1d:89:fa:4e:5c: a8:35:51:1d:f0:5d:ef:dd:e2:d0:9e:f9:c9:c2:b4: c0:92:66:6b:dd:f4:d3:d9:95:e9:20:7c:8c:48:8d: a9:6b:ac:c9:ba:9d:0e:98:6a:d0:49:25:c3:85:b4: eb:63:40:64:78:9c:0d:ed:b3:96:4e:f0:2a:bb:57: ca:5e:84:da:ec:f7:a6:55:d0:fc:cc:b6:e3:7b:0f: 9c:44:54:ff:4b:ae:79:6a:15:22:64:e8:04:be:b8: 4e:64:d7:c1:d9:f6:7b:c3:96:01:a8:da:fc:10:ad: ce:6c:88:41:c6:8a:ea:2f:cf:bd:74:2d:d1:55:05: 76:e6:c1:02:6a:2f:8e:fc:5c:0d:b0:cf:70:5f:cc: ec:d5:e6:b1:4d:13:bc:e4:96:1b:c5:23:71:c1:cb: 5d:dc:bd:88:17:70:58:8e:f9:aa:42:53:e7:f2:95: 8a:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:21:53:CE:59:50:53:55:91:12:71:C3:7D:1E:11:F5:C3:40:18:66 X509v3 Authority Key Identifier: keyid:BC:45:6B:EC:D1:32:A9:F6:0B:83:0E:34:66:4A:12:C5:37:46:76:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5njX5ZywSUYtRVTQyrkAPaCGkjkxTAa7jjPKQbU5GbfP/0/BC456BECD132A9F60B830E34664A12C5374676E9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC456BECD132A9F60B830E34664A12C5374676E9.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5njX5ZywSUYtRVTQyrkAPaCGkjkxTAa7jjPKQbU5GbfP/0/BC456BECD132A9F60B830E34664A12C5374676E9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:19:62:3c:92:9d:42:75:08:d4:c9:01:8c:d5:e2:84:a9:e1: 23:9f:69:a1:95:0f:b0:61:48:ba:d4:f7:75:fc:73:02:93:00: 8f:8b:fd:60:17:2e:3e:a4:d3:f2:4c:a5:04:32:e5:56:d3:32: 04:5a:79:50:f6:66:4c:89:c8:b8:9d:0b:41:26:73:1a:62:cf: ff:e5:7f:16:6d:fd:7e:ca:34:be:27:f1:26:ac:04:61:69:10: f3:b7:20:f1:14:1c:bd:92:48:de:b7:a4:94:25:d8:87:3a:77: f0:39:98:1e:c4:8d:6b:ff:e5:e2:74:6c:3e:47:03:58:37:51: 28:4a:f4:6d:a6:3f:44:3b:cd:f8:7a:fe:34:17:e2:7f:1f:de: f2:fb:1b:19:d6:3b:13:84:c4:44:5b:c3:5a:44:63:8d:7b:9b: 2b:8d:5e:bd:52:03:d8:f1:e1:f5:6c:6a:c4:95:1d:b1:53:44: 61:ff:a2:e9:6e:01:cb:29:27:a7:cb:bf:3d:d3:6e:78:8f:c2: 3c:0c:38:6f:49:22:8c:84:e3:87:62:1d:be:cd:8b:67:5d:db: 08:86:30:d8:73:4a:18:2f:e9:38:be:4c:89:93:95:44:73:f9: 4c:82:ad:60:c4:64:87:60:54:56:c9:71:3a:d4:34:11:1b:da: 8f:d1:6e:63 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUWrcKr2QvBgfNha4A56672pw57V0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkM0NTZCRUNEMTMyQTlGNjBCODMwRTM0NjY0QTEyQzUz NzQ2NzZFOTAeFw0yNjA4MjIwODU4MThaFw0yNjA4MjMwOTA4MThaMDMxMTAvBgNV BAMTKDNBMjE1M0NFNTk1MDUzNTU5MTEyNzFDMzdEMUUxMUY1QzM0MDE4NjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkmsfbHHyF/jdxX7a6haBy5oB+ qBcabxULXgynQSatq9zZ3IJEIqDNeS+b/jb7Rt0EeUX5dJTII+CMBMT5m3w3UaxF q95ONwhVTS5sUhhSnsnSXf8difpOXKg1UR3wXe/d4tCe+cnCtMCSZmvd9NPZlekg fIxIjalrrMm6nQ6YatBJJcOFtOtjQGR4nA3ts5ZO8Cq7V8pehNrs96ZV0PzMtuN7 D5xEVP9LrnlqFSJk6AS+uE5k18HZ9nvDlgGo2vwQrc5siEHGiuovz710LdFVBXbm wQJqL478XA2wz3BfzOzV5rFNE7zklhvFI3HBy13cvYgXcFiO+apCU+fylYozAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUOiFTzllQU1WREnHDfR4R9cNAGGYwHwYDVR0j BBgwFoAUvEVr7NEyqfYLgw40ZkoSxTdGdukwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNW5qWDVaeXdTVVl0UlZUUXlya0FQYUNHa2preFRBYTdqalBLUWJVNUdi ZlAvMC9CQzQ1NkJFQ0QxMzJBOUY2MEI4MzBFMzQ2NjRBMTJDNTM3NDY3NkU5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JDNDU2QkVDRDEzMkE5RjYw QjgzMEUzNDY2NEExMkM1Mzc0Njc2RTkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NW5qWDVaeXdTVVl0UlZUUXlya0FQYUNHa2preFRBYTdqalBLUWJVNUdiZlAvMC9C QzQ1NkJFQ0QxMzJBOUY2MEI4MzBFMzQ2NjRBMTJDNTM3NDY3NkU5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAoxliPJKdQnUI1MkBjNXihKnhI59poZUPsGFIutT3dfxzApMAj4v9YBcuPqTT 8kylBDLlVtMyBFp5UPZmTInIuJ0LQSZzGmLP/+V/Fm39fso0vifxJqwEYWkQ87cg 8RQcvZJI3reklCXYhzp38DmYHsSNa//l4nRsPkcDWDdRKEr0baY/RDvN+Hr+NBfi fx/e8vsbGdY7E4TERFvDWkRjjXubK41evVID2PHh9WxqxJUdsVNEYf+i6W4Byykn p8u/PdNueI/CPAw4b0kijITjh2Idvs2LZ13bCIYw2HNKGC/pOL5MiZOVRHP5TIKt YMRkh2BUVslxOtQ0ERvaj9FuYw== -----END CERTIFICATE-----Generated at Sat Aug 22 23:51:07 2026 by rpki-client