$ rpki-client -vvvf rpki-repo.registro.br/repo/5vfhd2kEoxEivgSho5UnJiYBtXAWBx7ebFY1meZDM1gt/0/CFDE24864395D54B821566D55DFAD56DC2717A4F.mft File: CFDE24864395D54B821566D55DFAD56DC2717A4F.mft (raw, json) Hash identifier: kj9B2HFKSIN502a1Ku8DyzfCfWX5ccE8fWmdguqjr7M= Subject key identifier: E0:01:BE:89:D8:5C:EC:5A:5D:20:25:2F:1D:B9:9C:8A:01:8C:38:4F Authority key identifier: CF:DE:24:86:43:95:D5:4B:82:15:66:D5:5D:FA:D5:6D:C2:71:7A:4F Certificate issuer: /CN=CFDE24864395D54B821566D55DFAD56DC2717A4F Certificate serial: 6953BD148A072BD43A87EF83EB3055CBF98CAD6F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFDE24864395D54B821566D55DFAD56DC2717A4F.cer Subject info access: rsync://rpki-repo.registro.br/repo/5vfhd2kEoxEivgSho5UnJiYBtXAWBx7ebFY1meZDM1gt/0/CFDE24864395D54B821566D55DFAD56DC2717A4F.mft Manifest number: 014D Signing time: Tue 25 Aug 2026 02:05:32 +0000 Manifest this update: Tue 25 Aug 2026 02:00:32 +0000 Manifest next update: Wed 26 Aug 2026 02:49:32 +0000 Files and hashes: 1: CFDE24864395D54B821566D55DFAD56DC2717A4F.crl (hash: CTGVYmOKlNNmH8ImIajySh7G9RCq9S78+CtIXwUXiFs=) 2: 323830343a383961633a3a2f33332d3333203d3e20323733363139.roa (hash: eySNpXWtJeR5WEHH6D9gUUrO/py+gmj0uFyjGnCwR4k=) 3: 323830343a383961633a383030303a3a2f33342d3334203d3e20323733363139.roa (hash: sCs5I/xxKnSn71/ptroWwjucZGA918ogCEIyQMRWm40=) 4: 323830343a383961633a3a2f33322d3332203d3e20323733363139.roa (hash: 6YR6ZiSGc7CxTkzhcIGVaCU+A/kiB1EQ85pD9gUP53k=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5vfhd2kEoxEivgSho5UnJiYBtXAWBx7ebFY1meZDM1gt/0/CFDE24864395D54B821566D55DFAD56DC2717A4F.crl rsync://rpki-repo.registro.br/repo/5vfhd2kEoxEivgSho5UnJiYBtXAWBx7ebFY1meZDM1gt/0/CFDE24864395D54B821566D55DFAD56DC2717A4F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFDE24864395D54B821566D55DFAD56DC2717A4F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 26 Aug 2026 02:49:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:53:bd:14:8a:07:2b:d4:3a:87:ef:83:eb:30:55:cb:f9:8c:ad:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFDE24864395D54B821566D55DFAD56DC2717A4F Validity Not Before: Aug 25 02:00:32 2026 GMT Not After : Aug 26 02:49:32 2026 GMT Subject: CN=E001BE89D85CEC5A5D20252F1DB99C8A018C384F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:b9:88:f4:da:d4:31:fe:b2:90:27:84:d4:48: ef:9e:93:5d:81:82:fe:70:3a:e7:80:ca:20:a4:2b: ac:b2:00:40:39:6a:a8:34:f7:bf:4a:84:9b:cf:6a: bc:c3:53:fe:cc:c0:6a:0a:56:6f:3c:df:c5:e2:08: 70:66:1a:e4:51:f7:25:58:aa:0f:95:ac:f0:4d:e9: 15:99:c7:19:9e:14:01:2e:76:0f:d8:cc:12:2e:30: 46:9f:43:7f:a4:a2:5a:b0:fe:8f:53:13:d5:bc:05: 04:cc:9d:48:82:8b:52:ba:90:ce:2c:68:5e:a6:4a: 79:73:12:d4:57:eb:5c:76:5c:76:17:ce:42:2d:b9: 6b:53:49:ed:2a:06:11:61:11:a7:56:5f:7f:83:04: 2d:13:dd:8a:f1:f4:91:50:91:a7:90:92:9d:d7:9c: 68:48:cd:95:51:ea:34:e5:fc:44:fe:4f:b0:93:b6: df:93:7c:8b:39:6d:36:74:2d:f8:00:9a:91:7e:4b: a3:e4:d0:66:a0:c0:95:90:49:fd:f8:5c:86:26:8b: d7:71:13:a6:85:18:cc:7d:64:0c:88:ab:cd:7d:73: b8:92:0e:f9:e7:55:3d:66:67:d2:2e:83:41:b0:b7: 38:38:7e:b8:d2:6a:5a:e4:45:9b:f5:84:d8:fc:5f: c2:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:01:BE:89:D8:5C:EC:5A:5D:20:25:2F:1D:B9:9C:8A:01:8C:38:4F X509v3 Authority Key Identifier: keyid:CF:DE:24:86:43:95:D5:4B:82:15:66:D5:5D:FA:D5:6D:C2:71:7A:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5vfhd2kEoxEivgSho5UnJiYBtXAWBx7ebFY1meZDM1gt/0/CFDE24864395D54B821566D55DFAD56DC2717A4F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFDE24864395D54B821566D55DFAD56DC2717A4F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5vfhd2kEoxEivgSho5UnJiYBtXAWBx7ebFY1meZDM1gt/0/CFDE24864395D54B821566D55DFAD56DC2717A4F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:3a:ba:60:bc:b6:8d:cf:ab:56:f1:d8:54:3c:29:68:04:98: fa:05:8a:05:16:cc:f7:9f:21:57:bd:54:1a:51:be:d7:a2:09: d8:ef:7c:fe:9f:48:64:e8:72:e4:e0:e2:b8:f2:ff:01:42:14: 0e:1c:b9:51:3c:45:c7:58:50:16:c0:9a:e1:a2:1c:36:3c:4d: c5:36:84:a0:cb:d7:8e:a6:f0:d3:3f:55:13:56:8f:d6:fb:1d: fe:8c:e8:14:f0:81:72:3d:e1:b1:bf:3c:75:34:8b:b4:a8:dd: c7:9e:7e:9e:d1:13:8a:20:72:60:08:b8:10:ff:55:b2:b2:d6: 7f:7b:f2:da:f0:d2:b0:98:28:4f:8d:62:00:6d:b4:85:bd:36: d5:14:10:ae:8d:19:fa:93:b6:94:a9:3d:88:91:66:fd:35:f5: 81:3f:c8:bf:e0:71:ce:b9:48:86:5f:95:90:b8:f8:2b:99:33: 11:2b:93:05:e3:b0:e4:b0:0d:52:9c:db:4e:db:69:83:93:87: 37:dc:95:56:1a:3f:25:c9:6d:64:71:86:ba:e1:ef:7b:11:24: f1:4f:a5:44:c2:cb:69:70:c4:29:fd:82:9c:25:51:b0:e2:55: 67:06:e5:a5:aa:85:9c:c3:83:34:bb:2d:ad:78:64:d9:48:00: fa:72:c1:49 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUaVO9FIoHK9Q6h++D6zBVy/mMrW8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZERTI0ODY0Mzk1RDU0QjgyMTU2NkQ1NURGQUQ1NkRD MjcxN0E0RjAeFw0yNjA4MjUwMjAwMzJaFw0yNjA4MjYwMjQ5MzJaMDMxMTAvBgNV BAMTKEUwMDFCRTg5RDg1Q0VDNUE1RDIwMjUyRjFEQjk5QzhBMDE4QzM4NEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCguYj02tQx/rKQJ4TUSO+ek12B gv5wOueAyiCkK6yyAEA5aqg0979KhJvParzDU/7MwGoKVm8838XiCHBmGuRR9yVY qg+VrPBN6RWZxxmeFAEudg/YzBIuMEafQ3+kolqw/o9TE9W8BQTMnUiCi1K6kM4s aF6mSnlzEtRX61x2XHYXzkItuWtTSe0qBhFhEadWX3+DBC0T3Yrx9JFQkaeQkp3X nGhIzZVR6jTl/ET+T7CTtt+TfIs5bTZ0LfgAmpF+S6Pk0GagwJWQSf34XIYmi9dx E6aFGMx9ZAyIq819c7iSDvnnVT1mZ9Iug0Gwtzg4frjSalrkRZv1hNj8X8JZAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU4AG+idhc7FpdICUvHbmcigGMOE8wHwYDVR0j BBgwFoAUz94khkOV1UuCFWbVXfrVbcJxek8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNXZmaGQya0VveEVpdmdTaG81VW5KaVlCdFhBV0J4N2ViRlkxbWVaRE0x Z3QvMC9DRkRFMjQ4NjQzOTVENTRCODIxNTY2RDU1REZBRDU2REMyNzE3QTRGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NGREUyNDg2NDM5NUQ1NEI4 MjE1NjZENTVERkFENTZEQzI3MTdBNEYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NXZmaGQya0VveEVpdmdTaG81VW5KaVlCdFhBV0J4N2ViRlkxbWVaRE0xZ3QvMC9D RkRFMjQ4NjQzOTVENTRCODIxNTY2RDU1REZBRDU2REMyNzE3QTRGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEALzq6YLy2jc+rVvHYVDwpaASY+gWKBRbM958hV71UGlG+16IJ2O98/p9IZOhy 5ODiuPL/AUIUDhy5UTxFx1hQFsCa4aIcNjxNxTaEoMvXjqbw0z9VE1aP1vsd/ozo FPCBcj3hsb88dTSLtKjdx55+ntETiiByYAi4EP9VsrLWf3vy2vDSsJgoT41iAG20 hb021RQQro0Z+pO2lKk9iJFm/TX1gT/Iv+BxzrlIhl+VkLj4K5kzESuTBeOw5LAN UpzbTttpg5OHN9yVVho/JcltZHGGuuHvexEk8U+lRMLLaXDEKf2CnCVRsOJVZwbl paqFnMODNLstrXhk2UgA+nLBSQ== -----END CERTIFICATE-----Generated at Tue Aug 25 13:06:08 2026 by rpki-client