$ rpki-client -vvvf rpki-repo.registro.br/repo/8CdNyVQQ6YVbknmENwsDusXZPQcRApdnYKiRh3uCnGCy/0/67B2A333362525C9ECD5AE47B1BD12E1E2FCBC53.mft File: 67B2A333362525C9ECD5AE47B1BD12E1E2FCBC53.mft (raw, json) Hash identifier: hhZvFnMESMv1n+zWAbKJfG338vYDhLUTjgBUKolr7XA= Subject key identifier: AF:AF:AD:61:17:9A:A7:A8:A6:13:82:15:F0:05:E6:90:1A:F5:74:CB Authority key identifier: 67:B2:A3:33:36:25:25:C9:EC:D5:AE:47:B1:BD:12:E1:E2:FC:BC:53 Certificate issuer: /CN=67B2A333362525C9ECD5AE47B1BD12E1E2FCBC53 Certificate serial: 0339FB42079A6B69FE4F7EE12370F988390EBA35 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67B2A333362525C9ECD5AE47B1BD12E1E2FCBC53.cer Subject info access: rsync://rpki-repo.registro.br/repo/8CdNyVQQ6YVbknmENwsDusXZPQcRApdnYKiRh3uCnGCy/0/67B2A333362525C9ECD5AE47B1BD12E1E2FCBC53.mft Manifest number: DA Signing time: Sun 23 Aug 2026 08:27:44 +0000 Manifest this update: Sun 23 Aug 2026 08:22:44 +0000 Manifest next update: Mon 24 Aug 2026 08:28:44 +0000 Files and hashes: 1: 34352e3137302e3133382e302f32342d3234203d3e20323734343631.roa (hash: Wdxg47LRUm5TFstfbBqAIVXUclGkCk8iroEbPkc1O7o=) 2: 3138362e3139352e3136362e302f32342d3234203d3e20323734343631.roa (hash: Wa+N5p7/ULdaL4+vJp/NlgU54S4iO+oXBgpbIBsOzog=) 3: 3138362e3139352e3136382e302f32342d3234203d3e20323734343631.roa (hash: SdKlz71qzpilBMJIaDLd5njnId4GFJ08myark8Vtet8=) 4: 67B2A333362525C9ECD5AE47B1BD12E1E2FCBC53.crl (hash: qjliEG6jWd08GvZ7jEJV3ulX06HoXCZUCwYc42zuRiM=) 5: 323830343a393437633a313030303a3a2f34302d3430203d3e20323734343631.roa (hash: RjVQmAXS1Jvi0ifDxtizKk45kZS/G85DZHRMfune5R0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8CdNyVQQ6YVbknmENwsDusXZPQcRApdnYKiRh3uCnGCy/0/67B2A333362525C9ECD5AE47B1BD12E1E2FCBC53.crl rsync://rpki-repo.registro.br/repo/8CdNyVQQ6YVbknmENwsDusXZPQcRApdnYKiRh3uCnGCy/0/67B2A333362525C9ECD5AE47B1BD12E1E2FCBC53.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67B2A333362525C9ECD5AE47B1BD12E1E2FCBC53.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 24 Aug 2026 08:28:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:39:fb:42:07:9a:6b:69:fe:4f:7e:e1:23:70:f9:88:39:0e:ba:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67B2A333362525C9ECD5AE47B1BD12E1E2FCBC53 Validity Not Before: Aug 23 08:22:44 2026 GMT Not After : Aug 24 08:28:44 2026 GMT Subject: CN=AFAFAD61179AA7A8A6138215F005E6901AF574CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:36:03:e1:9e:0e:9b:4e:48:35:96:10:8f:93: ef:53:18:f4:5b:c4:4c:9b:69:eb:b2:21:1a:1e:bd: 11:c0:b3:0c:b7:77:1e:0b:fa:d1:1c:66:91:a4:5f: 6c:43:fd:46:44:30:fc:1d:c5:33:c9:d7:80:8b:f4: 15:02:96:3b:8d:32:58:10:51:2e:b4:18:75:f1:6a: 25:fa:1e:f5:95:0f:9b:09:b4:c7:13:bb:86:7a:82: f1:fa:ad:c7:7a:7b:ed:2a:50:67:fd:f0:5c:79:5c: db:a4:e4:c0:2e:dc:1f:85:a5:ca:be:93:f2:8d:72: 63:36:7b:70:10:7c:31:15:a7:98:c5:48:61:6a:ef: 47:33:cb:18:4d:5b:10:d8:23:b6:71:a1:64:24:dd: 1d:c2:84:80:54:3e:a5:f6:14:5f:18:16:a2:e0:63: 2e:cb:44:9f:6e:02:69:2b:b1:f5:00:d7:97:31:8a: e8:cc:98:74:96:76:b7:34:e2:c9:97:6c:93:4d:66: 68:60:39:fe:6b:1a:b4:d3:5a:93:c6:c1:36:2c:ac: cc:87:2a:72:5e:4d:b1:a6:5c:97:27:aa:73:85:4d: 7d:2e:64:f0:2c:14:89:de:48:ba:a4:21:a9:ad:c0: 16:99:e9:a9:56:ed:04:39:f8:92:5a:0a:4d:a7:6b: da:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:AF:AD:61:17:9A:A7:A8:A6:13:82:15:F0:05:E6:90:1A:F5:74:CB X509v3 Authority Key Identifier: keyid:67:B2:A3:33:36:25:25:C9:EC:D5:AE:47:B1:BD:12:E1:E2:FC:BC:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8CdNyVQQ6YVbknmENwsDusXZPQcRApdnYKiRh3uCnGCy/0/67B2A333362525C9ECD5AE47B1BD12E1E2FCBC53.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67B2A333362525C9ECD5AE47B1BD12E1E2FCBC53.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8CdNyVQQ6YVbknmENwsDusXZPQcRApdnYKiRh3uCnGCy/0/67B2A333362525C9ECD5AE47B1BD12E1E2FCBC53.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d1:ec:e6:68:65:01:03:da:ae:20:1e:f6:84:a6:66:26:b5:b8: 41:89:c3:97:9f:82:e7:c6:be:6a:17:c1:4e:1f:16:fb:66:d3: 61:f8:dd:e9:10:6c:09:51:08:bd:e6:b7:23:75:60:2f:bd:55: 84:46:b8:d0:92:e6:ed:0b:26:27:5c:1d:9f:83:0b:d9:39:a5: 67:96:ed:13:f0:33:c7:97:7c:c5:b5:8c:90:5d:64:10:ce:fb: 0b:5d:a1:5f:ee:c0:df:f4:84:d1:2b:37:73:5e:98:95:ae:ab: 89:ae:66:1a:33:a5:d8:bb:36:2c:20:b0:ae:7f:8c:fd:b8:ed: 81:32:1c:c6:af:1a:ff:94:4e:ae:c9:88:c2:20:f6:ab:3c:8a: c9:d5:72:94:8b:d9:04:6e:e9:b3:d4:13:15:54:2e:54:00:55: a2:91:9a:61:d3:42:9c:8f:1f:ca:8e:7c:a5:84:8c:a5:51:3a: c5:d2:17:84:ac:8a:a8:f5:61:04:d3:c1:9f:66:ec:be:78:43: bc:65:3d:97:04:2f:c3:ff:c5:16:2d:7e:7a:d8:f4:d0:dc:08: b9:0a:be:dc:d8:c6:e0:dd:64:aa:da:16:cc:61:43:e8:df:85: 3c:ba:50:dc:4a:77:b5:eb:39:f4:34:27:1b:7d:a3:1b:55:36: 85:1e:40:c4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUAzn7Qgeaa2n+T37hI3D5iDkOujUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjdCMkEzMzMzNjI1MjVDOUVDRDVBRTQ3QjFCRDEyRTFF MkZDQkM1MzAeFw0yNjA4MjMwODIyNDRaFw0yNjA4MjQwODI4NDRaMDMxMTAvBgNV BAMTKEFGQUZBRDYxMTc5QUE3QThBNjEzODIxNUYwMDVFNjkwMUFGNTc0Q0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcNgPhng6bTkg1lhCPk+9TGPRb xEybaeuyIRoevRHAswy3dx4L+tEcZpGkX2xD/UZEMPwdxTPJ14CL9BUCljuNMlgQ US60GHXxaiX6HvWVD5sJtMcTu4Z6gvH6rcd6e+0qUGf98Fx5XNuk5MAu3B+Fpcq+ k/KNcmM2e3AQfDEVp5jFSGFq70czyxhNWxDYI7ZxoWQk3R3ChIBUPqX2FF8YFqLg Yy7LRJ9uAmkrsfUA15cxiujMmHSWdrc04smXbJNNZmhgOf5rGrTTWpPGwTYsrMyH KnJeTbGmXJcnqnOFTX0uZPAsFIneSLqkIamtwBaZ6alW7QQ5+JJaCk2na9oNAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUr6+tYReap6imE4IV8AXmkBr1dMswHwYDVR0j BBgwFoAUZ7KjMzYlJcns1a5Hsb0S4eL8vFMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOENkTnlWUVE2WVZia25tRU53c0R1c1haUFFjUkFwZG5ZS2lSaDN1Q25H Q3kvMC82N0IyQTMzMzM2MjUyNUM5RUNENUFFNDdCMUJEMTJFMUUyRkNCQzUzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY3QjJBMzMzMzYyNTI1QzlF Q0Q1QUU0N0IxQkQxMkUxRTJGQ0JDNTMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OENkTnlWUVE2WVZia25tRU53c0R1c1haUFFjUkFwZG5ZS2lSaDN1Q25HQ3kvMC82 N0IyQTMzMzM2MjUyNUM5RUNENUFFNDdCMUJEMTJFMUUyRkNCQzUzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEA0ezmaGUBA9quIB72hKZmJrW4QYnDl5+C58a+ahfBTh8W+2bTYfjd6RBsCVEI vea3I3VgL71VhEa40JLm7QsmJ1wdn4ML2TmlZ5btE/Azx5d8xbWMkF1kEM77C12h X+7A3/SE0Ss3c16Yla6ria5mGjOl2Ls2LCCwrn+M/bjtgTIcxq8a/5ROrsmIwiD2 qzyKydVylIvZBG7ps9QTFVQuVABVopGaYdNCnI8fyo58pYSMpVE6xdIXhKyKqPVh BNPBn2bsvnhDvGU9lwQvw//FFi1+etj00NwIuQq+3NjG4N1kqtoWzGFD6N+FPLpQ 3Ep3tes59DQnG32jG1U2hR5AxA== -----END CERTIFICATE-----Generated at Sun Aug 23 11:38:11 2026 by rpki-client