$ rpki-client -vvf rpki-repo.registro.br/repo/8ZaUJAgMXjYtZ8peoK2yBcHdxjJSAY2b9SzXs4763K1J/0/425E728AE1FAE85A5D6D17CC53D68CDE21FA639D.mft File: 425E728AE1FAE85A5D6D17CC53D68CDE21FA639D.mft (raw, json) Hash identifier: VrhWz+GJa/qdTtgivXPfsE5LzQHLilr3Aquwdj1bhIg= Subject key identifier: C8:6A:40:11:79:6A:E4:E9:C6:C5:9B:44:35:1A:B2:74:07:71:98:27 Authority key identifier: 42:5E:72:8A:E1:FA:E8:5A:5D:6D:17:CC:53:D6:8C:DE:21:FA:63:9D Certificate issuer: /CN=425E728AE1FAE85A5D6D17CC53D68CDE21FA639D Certificate serial: 124707721DB57A70BAF5143F06FEF1E7BAFC7339 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/425E728AE1FAE85A5D6D17CC53D68CDE21FA639D.cer Subject info access: rsync://rpki-repo.registro.br/repo/8ZaUJAgMXjYtZ8peoK2yBcHdxjJSAY2b9SzXs4763K1J/0/425E728AE1FAE85A5D6D17CC53D68CDE21FA639D.mft Manifest number: F3 Signing time: Wed 08 Jul 2026 09:56:17 +0000 Manifest this update: Wed 08 Jul 2026 09:51:17 +0000 Manifest next update: Thu 09 Jul 2026 13:51:17 +0000 Files and hashes: 1: 323830343a343763633a3a2f33322d313238203d3e20323637303737.roa (hash: Zb565rDHy7WtypXGVJ40AUrNMbJgCT2lb99PVr98XvA=) 2: AS267077.asa (hash: iIKJNdlKgT2Ijci7gMiJk/XJdetXV8uwuYtrTudDdeM=) 3: 425E728AE1FAE85A5D6D17CC53D68CDE21FA639D.crl (hash: X4e9JkqOILDeTci/29RGIGVk80GPQnT/Ra0eecDtb3o=) 4: 34352e3232382e3130342e302f32322d3332203d3e20323637303737.roa (hash: EXEgFqBvttmF5ktT401dLdibdAL47+eANSkTz2upTnU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8ZaUJAgMXjYtZ8peoK2yBcHdxjJSAY2b9SzXs4763K1J/0/425E728AE1FAE85A5D6D17CC53D68CDE21FA639D.crl rsync://rpki-repo.registro.br/repo/8ZaUJAgMXjYtZ8peoK2yBcHdxjJSAY2b9SzXs4763K1J/0/425E728AE1FAE85A5D6D17CC53D68CDE21FA639D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/425E728AE1FAE85A5D6D17CC53D68CDE21FA639D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 09 Jul 2026 13:51:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:47:07:72:1d:b5:7a:70:ba:f5:14:3f:06:fe:f1:e7:ba:fc:73:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=425E728AE1FAE85A5D6D17CC53D68CDE21FA639D Validity Not Before: Jul 8 09:51:17 2026 GMT Not After : Jul 9 13:51:17 2026 GMT Subject: CN=C86A4011796AE4E9C6C59B44351AB27407719827 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:cc:dd:e2:df:fe:7c:b0:a6:36:94:a8:d8:6d: d8:7b:db:28:fd:3c:c1:c7:82:cc:0d:0c:73:51:91: ee:5c:1a:03:c2:ed:9f:53:57:42:02:b4:20:5a:89: 7a:91:54:bb:6d:67:fa:6b:22:10:6d:48:40:98:7b: d3:30:80:66:7d:d3:8a:86:22:58:95:9b:3f:8d:09: 1f:16:7f:52:d2:8a:b3:f8:19:12:23:fc:ed:03:23: 85:c4:51:84:81:81:42:e2:c7:18:ad:f8:8a:50:2d: 43:7b:6f:75:b1:22:a0:e8:c2:ca:b8:70:f1:84:5f: 67:6d:5c:07:2d:e2:dd:3a:ec:d8:a5:4d:34:2a:05: e7:5d:1a:a4:44:77:68:00:d2:58:12:95:96:19:14: 79:44:82:77:bc:7c:75:4b:0e:6b:ea:e6:e0:7a:93: 74:1f:ae:47:ad:7f:fd:16:15:72:69:f7:96:71:7a: da:0f:6d:ee:62:99:65:ec:49:73:e3:c2:72:83:a1: 19:bc:dc:05:2a:23:16:a7:0f:5e:ba:ca:b8:b5:ae: cb:5f:4d:2c:75:16:4d:5a:fe:2c:9e:9e:fc:ae:3c: 84:3b:e3:0a:6e:79:dd:b3:65:cd:ed:f8:18:82:95: 70:04:4c:4f:1b:c6:db:7b:53:12:13:a7:74:e5:a7: f2:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:6A:40:11:79:6A:E4:E9:C6:C5:9B:44:35:1A:B2:74:07:71:98:27 X509v3 Authority Key Identifier: keyid:42:5E:72:8A:E1:FA:E8:5A:5D:6D:17:CC:53:D6:8C:DE:21:FA:63:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8ZaUJAgMXjYtZ8peoK2yBcHdxjJSAY2b9SzXs4763K1J/0/425E728AE1FAE85A5D6D17CC53D68CDE21FA639D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/425E728AE1FAE85A5D6D17CC53D68CDE21FA639D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ZaUJAgMXjYtZ8peoK2yBcHdxjJSAY2b9SzXs4763K1J/0/425E728AE1FAE85A5D6D17CC53D68CDE21FA639D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:05:e5:f0:35:d8:d6:f8:7a:5b:f4:2e:c0:a1:24:43:28:fe: 98:e7:43:93:f5:6e:01:f7:c7:10:1a:9e:32:6d:35:1e:68:71: 63:46:69:cc:f0:d1:99:fa:97:9f:29:0d:02:9a:b6:72:90:c3: f9:03:b7:b1:33:d7:74:d8:87:75:fc:1b:50:da:56:bf:2e:d3: 73:62:e0:6e:fa:92:c6:05:f8:b1:73:54:a1:d4:6e:06:ee:82: 67:c3:35:8c:e8:0e:bf:97:37:2a:27:4b:e7:92:00:7c:20:4c: 26:4b:33:f5:08:08:8f:a1:dd:70:20:07:3d:e5:da:af:00:88: db:43:e1:48:a4:26:75:ba:e7:b0:21:d4:a5:92:b1:8b:59:df: 21:49:14:08:05:89:e3:d7:68:fa:b6:a4:b0:1e:12:15:bd:63: 28:d5:72:ed:47:16:14:48:15:4d:37:c8:99:a3:3f:68:bd:cc: da:6d:f0:44:2f:3f:45:9f:16:79:a6:68:90:99:86:6f:42:d1: 7e:64:4c:9d:6b:24:1b:e8:8c:fd:b6:f0:c7:23:af:60:04:f4: 75:d7:26:15:c6:60:d2:7e:01:6b:5d:c7:3b:99:31:a7:b2:84: d7:8e:41:23:25:27:03:a1:92:dd:f0:7d:ed:7e:0d:16:21:97: 41:ad:89:83 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUEkcHch21enC69RQ/Bv7x57r8czkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDI1RTcyOEFFMUZBRTg1QTVENkQxN0NDNTNENjhDREUy MUZBNjM5RDAeFw0yNjA3MDgwOTUxMTdaFw0yNjA3MDkxMzUxMTdaMDMxMTAvBgNV BAMTKEM4NkE0MDExNzk2QUU0RTlDNkM1OUI0NDM1MUFCMjc0MDc3MTk4MjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGzN3i3/58sKY2lKjYbdh72yj9 PMHHgswNDHNRke5cGgPC7Z9TV0ICtCBaiXqRVLttZ/prIhBtSECYe9MwgGZ904qG IliVmz+NCR8Wf1LSirP4GRIj/O0DI4XEUYSBgULixxit+IpQLUN7b3WxIqDowsq4 cPGEX2dtXAct4t067NilTTQqBeddGqREd2gA0lgSlZYZFHlEgne8fHVLDmvq5uB6 k3Qfrketf/0WFXJp95ZxetoPbe5imWXsSXPjwnKDoRm83AUqIxanD166yri1rstf TSx1Fk1a/iyenvyuPIQ74wpued2zZc3t+BiClXAETE8bxtt7UxITp3Tlp/IxAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUyGpAEXlq5OnGxZtENRqydAdxmCcwHwYDVR0j BBgwFoAUQl5yiuH66FpdbRfMU9aM3iH6Y50wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOFphVUpBZ01Yall0WjhwZW9LMnlCY0hkeGpKU0FZMmI5U3pYczQ3NjNL MUovMC80MjVFNzI4QUUxRkFFODVBNUQ2RDE3Q0M1M0Q2OENERTIxRkE2MzlELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQyNUU3MjhBRTFGQUU4NUE1 RDZEMTdDQzUzRDY4Q0RFMjFGQTYzOUQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OFphVUpBZ01Yall0WjhwZW9LMnlCY0hkeGpKU0FZMmI5U3pYczQ3NjNLMUovMC80 MjVFNzI4QUUxRkFFODVBNUQ2RDE3Q0M1M0Q2OENERTIxRkE2MzlELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAngXl8DXY1vh6W/QuwKEkQyj+mOdDk/VuAffHEBqeMm01HmhxY0ZpzPDRmfqX nykNApq2cpDD+QO3sTPXdNiHdfwbUNpWvy7Tc2LgbvqSxgX4sXNUodRuBu6CZ8M1 jOgOv5c3KidL55IAfCBMJksz9QgIj6HdcCAHPeXarwCI20PhSKQmdbrnsCHUpZKx i1nfIUkUCAWJ49do+raksB4SFb1jKNVy7UcWFEgVTTfImaM/aL3M2m3wRC8/RZ8W eaZokJmGb0LRfmRMnWskG+iM/bbwxyOvYAT0ddcmFcZg0n4Ba13HO5kxp7KE145B IyUnA6GS3fB97X4NFiGXQa2Jgw== -----END CERTIFICATE-----Generated at Wed Jul 8 16:13:50 2026 by rpki-client