$ rpki-client -vvf rpki-repo.registro.br/repo/5vfhd2kEoxEivgSho5UnJiYBtXAWBx7ebFY1meZDM1gt/0/CFDE24864395D54B821566D55DFAD56DC2717A4F.mft File: CFDE24864395D54B821566D55DFAD56DC2717A4F.mft (raw, json) Hash identifier: o/5roDHcyIR8wqB8lcysq2W/ykvnV9K8Y47OzBIEpIk= Subject key identifier: B7:7F:17:B7:17:B1:6D:FE:6F:DB:3C:4D:22:5A:21:96:12:F1:7F:B5 Authority key identifier: CF:DE:24:86:43:95:D5:4B:82:15:66:D5:5D:FA:D5:6D:C2:71:7A:4F Certificate issuer: /CN=CFDE24864395D54B821566D55DFAD56DC2717A4F Certificate serial: 3ECBBDD5792FE680840AF3A6AE61D59F7ECD71E5 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFDE24864395D54B821566D55DFAD56DC2717A4F.cer Subject info access: rsync://rpki-repo.registro.br/repo/5vfhd2kEoxEivgSho5UnJiYBtXAWBx7ebFY1meZDM1gt/0/CFDE24864395D54B821566D55DFAD56DC2717A4F.mft Manifest number: 010E Signing time: Wed 08 Jul 2026 08:07:50 +0000 Manifest this update: Wed 08 Jul 2026 08:02:50 +0000 Manifest next update: Thu 09 Jul 2026 11:22:50 +0000 Files and hashes: 1: 323830343a383961633a383030303a3a2f33342d3334203d3e20323733363139.roa (hash: sCs5I/xxKnSn71/ptroWwjucZGA918ogCEIyQMRWm40=) 2: CFDE24864395D54B821566D55DFAD56DC2717A4F.crl (hash: 0EqlFtfdwAB6nMDn/WRsK2eRAkhv5xFw4pnA2opOgrE=) 3: 323830343a383961633a3a2f33322d3332203d3e20323733363139.roa (hash: 6YR6ZiSGc7CxTkzhcIGVaCU+A/kiB1EQ85pD9gUP53k=) 4: 323830343a383961633a3a2f33332d3333203d3e20323733363139.roa (hash: eySNpXWtJeR5WEHH6D9gUUrO/py+gmj0uFyjGnCwR4k=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5vfhd2kEoxEivgSho5UnJiYBtXAWBx7ebFY1meZDM1gt/0/CFDE24864395D54B821566D55DFAD56DC2717A4F.crl rsync://rpki-repo.registro.br/repo/5vfhd2kEoxEivgSho5UnJiYBtXAWBx7ebFY1meZDM1gt/0/CFDE24864395D54B821566D55DFAD56DC2717A4F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFDE24864395D54B821566D55DFAD56DC2717A4F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 09 Jul 2026 11:22:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:cb:bd:d5:79:2f:e6:80:84:0a:f3:a6:ae:61:d5:9f:7e:cd:71:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFDE24864395D54B821566D55DFAD56DC2717A4F Validity Not Before: Jul 8 08:02:50 2026 GMT Not After : Jul 9 11:22:50 2026 GMT Subject: CN=B77F17B717B16DFE6FDB3C4D225A219612F17FB5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:8b:57:89:b2:e4:21:e9:9e:9c:fc:d7:a7:9e: af:7c:cb:ff:e4:40:8d:7f:8e:32:a0:c0:0c:6e:cb: ac:d5:ef:32:fc:b7:0e:4a:5c:94:00:09:ec:f5:58: 5a:ef:f6:6e:6b:ee:77:7c:5c:02:96:41:b7:f9:63: 59:5d:74:80:aa:d5:0e:2e:41:62:20:13:f8:9a:4a: f2:19:23:e8:52:2d:1e:00:60:08:7c:50:ca:06:d9: b1:5d:2a:cd:7c:21:e5:98:88:c2:cf:47:de:e1:7f: e6:1e:24:71:f7:ba:59:01:6a:1f:e8:97:ac:e4:ca: ee:9f:e8:f0:12:00:3b:99:25:d7:b0:ec:10:6d:14: 3a:90:61:8d:b9:68:0e:5a:12:31:d3:96:af:0a:fa: 4b:0e:78:42:33:33:4a:3e:6a:c9:13:86:66:90:14: 2f:81:68:c9:20:63:14:ff:5a:4f:91:be:b9:41:79: c8:4d:17:8e:48:3b:f3:7d:2e:c4:e1:6e:bb:7b:36: d4:42:b4:20:4a:22:02:09:2b:c7:a4:e5:f3:2a:86: 89:c7:64:63:40:26:e2:45:b3:e1:ed:ad:3c:55:28: 1a:27:bd:74:1e:c6:ec:7b:8a:e0:ae:47:2f:58:06: 6b:be:a2:3f:3d:1a:83:c1:55:9a:0a:a5:fc:b4:48: a6:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:7F:17:B7:17:B1:6D:FE:6F:DB:3C:4D:22:5A:21:96:12:F1:7F:B5 X509v3 Authority Key Identifier: keyid:CF:DE:24:86:43:95:D5:4B:82:15:66:D5:5D:FA:D5:6D:C2:71:7A:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5vfhd2kEoxEivgSho5UnJiYBtXAWBx7ebFY1meZDM1gt/0/CFDE24864395D54B821566D55DFAD56DC2717A4F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFDE24864395D54B821566D55DFAD56DC2717A4F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5vfhd2kEoxEivgSho5UnJiYBtXAWBx7ebFY1meZDM1gt/0/CFDE24864395D54B821566D55DFAD56DC2717A4F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:b4:b6:91:44:a5:e5:c7:2e:6e:25:76:f0:08:01:e2:80:df: 33:1b:e8:6b:4b:41:cf:94:e0:8a:eb:88:41:e1:5a:b7:a9:dc: 64:0d:54:4a:56:b4:b8:38:33:4b:82:5b:6d:4b:87:09:a2:9d: bb:9f:85:f4:99:11:44:3f:e6:cc:46:94:c2:b4:b3:a7:c6:be: d2:d9:d5:16:b9:89:b2:8c:c7:98:31:a5:14:50:cf:47:9b:71: e7:50:91:b4:7b:31:f3:4d:ae:40:48:e1:01:5d:39:65:d0:24: bb:51:dc:9e:3c:04:79:4e:ab:ae:e7:dc:53:72:a9:f0:4b:ed: 83:68:44:c7:aa:b6:29:b7:46:e6:5c:ce:65:57:b9:59:32:36: 9d:11:ce:a9:52:f9:7a:8c:3f:29:48:32:38:71:2e:cd:fa:8f: 04:de:fe:25:71:6e:db:a1:81:18:93:2f:57:57:ee:c6:1f:47: 54:be:87:2f:bd:9b:f9:55:f9:2f:7c:b5:07:83:68:23:da:a2: f4:5f:ff:40:5a:f7:cf:79:03:fd:84:39:62:4a:0b:d5:e1:a9: c4:04:07:e7:f4:98:e8:c3:00:64:ef:34:4e:75:19:42:b2:cf: 5c:25:52:30:23:ce:5d:7b:f7:86:c4:4d:41:a8:b8:bd:90:84: 8e:f6:2d:34 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUPsu91Xkv5oCECvOmrmHVn37NceUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZERTI0ODY0Mzk1RDU0QjgyMTU2NkQ1NURGQUQ1NkRD MjcxN0E0RjAeFw0yNjA3MDgwODAyNTBaFw0yNjA3MDkxMTIyNTBaMDMxMTAvBgNV BAMTKEI3N0YxN0I3MTdCMTZERkU2RkRCM0M0RDIyNUEyMTk2MTJGMTdGQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgi1eJsuQh6Z6c/Nennq98y//k QI1/jjKgwAxuy6zV7zL8tw5KXJQACez1WFrv9m5r7nd8XAKWQbf5Y1lddICq1Q4u QWIgE/iaSvIZI+hSLR4AYAh8UMoG2bFdKs18IeWYiMLPR97hf+YeJHH3ulkBah/o l6zkyu6f6PASADuZJdew7BBtFDqQYY25aA5aEjHTlq8K+ksOeEIzM0o+askThmaQ FC+BaMkgYxT/Wk+RvrlBechNF45IO/N9LsThbrt7NtRCtCBKIgIJK8ek5fMqhonH ZGNAJuJFs+HtrTxVKBonvXQexux7iuCuRy9YBmu+oj89GoPBVZoKpfy0SKZ1AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUt38Xtxexbf5v2zxNIlohlhLxf7UwHwYDVR0j BBgwFoAUz94khkOV1UuCFWbVXfrVbcJxek8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNXZmaGQya0VveEVpdmdTaG81VW5KaVlCdFhBV0J4N2ViRlkxbWVaRE0x Z3QvMC9DRkRFMjQ4NjQzOTVENTRCODIxNTY2RDU1REZBRDU2REMyNzE3QTRGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NGREUyNDg2NDM5NUQ1NEI4 MjE1NjZENTVERkFENTZEQzI3MTdBNEYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NXZmaGQya0VveEVpdmdTaG81VW5KaVlCdFhBV0J4N2ViRlkxbWVaRE0xZ3QvMC9D RkRFMjQ4NjQzOTVENTRCODIxNTY2RDU1REZBRDU2REMyNzE3QTRGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfrS2kUSl5ccubiV28AgB4oDfMxvoa0tBz5TgiuuIQeFat6ncZA1USla0uDgz S4JbbUuHCaKdu5+F9JkRRD/mzEaUwrSzp8a+0tnVFrmJsozHmDGlFFDPR5tx51CR tHsx802uQEjhAV05ZdAku1HcnjwEeU6rrufcU3Kp8Evtg2hEx6q2KbdG5lzOZVe5 WTI2nRHOqVL5eow/KUgyOHEuzfqPBN7+JXFu26GBGJMvV1fuxh9HVL6HL72b+VX5 L3y1B4NoI9qi9F//QFr3z3kD/YQ5YkoL1eGpxAQH5/SY6MMAZO80TnUZQrLPXCVS MCPOXXv3hsRNQai4vZCEjvYtNA== -----END CERTIFICATE-----Generated at Wed Jul 8 15:23:43 2026 by rpki-client