$ rpki-client -vvf rpki-repo.registro.br/repo/8uDet3fkaPhb1F5tGf188urY9BDNkxoDiJDgU8BA1rc9/1/849A24446B9E3C80503AA50B35CDFE864B50F299.mft File: 849A24446B9E3C80503AA50B35CDFE864B50F299.mft (raw, json) Hash identifier: R7h+4NrMQivgB93jU+CysDGsv9seWXrD98zoa7pFbz0= Subject key identifier: 03:96:5C:B5:4B:98:94:F9:CE:93:7E:7F:05:07:34:FF:FF:DF:A7:FB Authority key identifier: 84:9A:24:44:6B:9E:3C:80:50:3A:A5:0B:35:CD:FE:86:4B:50:F2:99 Certificate issuer: /CN=849A24446B9E3C80503AA50B35CDFE864B50F299 Certificate serial: 1A090CE9CB695C9D085DCF0EAC2A30AFC345E745 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/849A24446B9E3C80503AA50B35CDFE864B50F299.cer Subject info access: rsync://rpki-repo.registro.br/repo/8uDet3fkaPhb1F5tGf188urY9BDNkxoDiJDgU8BA1rc9/1/849A24446B9E3C80503AA50B35CDFE864B50F299.mft Manifest number: 044E Signing time: Wed 08 Jul 2026 09:03:51 +0000 Manifest this update: Wed 08 Jul 2026 08:58:51 +0000 Manifest next update: Thu 09 Jul 2026 11:21:51 +0000 Files and hashes: 1: 849A24446B9E3C80503AA50B35CDFE864B50F299.crl (hash: oEQ7HsutY3LxbWGON1ySoACWdcAQxD8t1+WrDJxAr7Q=) 2: 3133382e3138362e3137322e302f32322d3332203d3e20323633383737.roa (hash: DwIT/oWsb5A+NZbd8E9xwGN8upMg4I8VAL0gz3ICWe8=) 3: 323830343a323731633a3a2f33322d313238203d3e20323633383737.roa (hash: ZcXSvFzjcKdlhbF/D0LSaAI/xEyYHSj7XWyEf2G+oig=) 4: 3137302e3234362e3231322e302f32322d3332203d3e20323633383737.roa (hash: Y3NDMjIUF9HCqpgQ02qbX63g2kp3bwxWFFvyNGmlnns=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8uDet3fkaPhb1F5tGf188urY9BDNkxoDiJDgU8BA1rc9/1/849A24446B9E3C80503AA50B35CDFE864B50F299.crl rsync://rpki-repo.registro.br/repo/8uDet3fkaPhb1F5tGf188urY9BDNkxoDiJDgU8BA1rc9/1/849A24446B9E3C80503AA50B35CDFE864B50F299.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/849A24446B9E3C80503AA50B35CDFE864B50F299.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 09 Jul 2026 11:21:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:09:0c:e9:cb:69:5c:9d:08:5d:cf:0e:ac:2a:30:af:c3:45:e7:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=849A24446B9E3C80503AA50B35CDFE864B50F299 Validity Not Before: Jul 8 08:58:51 2026 GMT Not After : Jul 9 11:21:51 2026 GMT Subject: CN=03965CB54B9894F9CE937E7F050734FFFFDFA7FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:8c:dc:1a:4a:66:f7:f1:69:5f:1c:ec:ac:dc: f7:10:ea:93:27:03:cb:11:4a:20:1e:92:6a:2d:a7: 2f:25:c9:e8:44:ec:19:9b:f9:9e:0a:2e:71:c3:3c: ec:09:6c:fd:cc:74:dd:f5:0c:e6:27:26:f2:cf:60: c4:80:68:ca:06:e6:6a:00:ec:8d:64:20:ff:f1:2c: c2:06:41:5d:20:b5:37:6c:84:0e:f2:42:b5:2f:77: 39:aa:c9:39:6d:45:f1:ff:88:c7:7e:f5:4d:64:33: 09:50:eb:17:03:e1:7f:53:cb:09:b3:1c:2e:69:92: 3f:c2:97:0d:07:ba:13:cf:26:f6:f6:ff:a0:83:aa: 84:e1:9f:5c:17:c5:4c:87:49:9e:74:ab:28:39:13: 68:37:7e:70:30:8b:8e:92:74:7e:5b:78:ff:4e:b7: 2a:f6:32:3d:f8:05:96:0b:06:0c:de:e5:7d:a1:d4: dc:0c:af:2d:c1:d9:98:09:9d:33:9b:f5:7b:ae:a5: a9:7c:e8:b6:a0:52:da:2b:f1:f4:58:75:1a:73:2f: 0c:28:e7:e7:af:d7:79:fd:f0:e2:f7:bb:b8:a7:d7: 80:c6:43:7b:c5:40:28:b9:af:8a:fa:a4:50:51:4a: 2b:fc:08:c9:7d:e0:7b:34:4c:57:51:7c:fa:eb:47: 10:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:96:5C:B5:4B:98:94:F9:CE:93:7E:7F:05:07:34:FF:FF:DF:A7:FB X509v3 Authority Key Identifier: keyid:84:9A:24:44:6B:9E:3C:80:50:3A:A5:0B:35:CD:FE:86:4B:50:F2:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8uDet3fkaPhb1F5tGf188urY9BDNkxoDiJDgU8BA1rc9/1/849A24446B9E3C80503AA50B35CDFE864B50F299.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/849A24446B9E3C80503AA50B35CDFE864B50F299.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8uDet3fkaPhb1F5tGf188urY9BDNkxoDiJDgU8BA1rc9/1/849A24446B9E3C80503AA50B35CDFE864B50F299.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:91:b8:96:e0:fa:22:1d:4f:38:2d:54:60:e2:cb:0e:bf:77: 86:e8:cc:5e:2e:e0:5a:94:a6:cc:51:9b:18:e7:4c:cd:23:26: 19:ea:da:f8:5b:5f:83:c4:51:86:26:c4:ff:92:a0:89:cf:50: e7:1e:db:f4:9f:17:ab:04:76:f3:9a:05:32:87:93:27:04:5c: 4e:8c:a7:5e:57:56:74:a1:1a:ba:92:f3:78:b4:17:18:c8:01: bf:96:84:ab:a4:39:37:a5:a4:40:96:30:00:48:fa:13:46:20: bd:5b:96:89:5c:d5:67:9e:ac:ea:ac:57:6a:23:d8:7a:40:a7: 75:7b:63:ba:c8:fd:4c:dd:a9:f2:6f:2b:75:37:85:23:cf:e2: 53:f6:21:3a:77:73:a8:0e:b6:3e:e5:6c:a3:e5:a2:a2:6d:e5: eb:31:7c:78:ce:93:0d:07:64:18:89:64:4c:c9:0a:ce:bf:83: 55:fc:ee:d8:d8:d6:03:cc:23:ec:12:e2:2f:69:a1:08:cc:03: a8:d0:06:24:ef:78:55:cd:ac:1e:ba:3a:16:23:42:2c:30:e5: 75:3f:83:71:60:8c:17:48:fa:f0:b4:d4:2a:3f:21:3a:da:dd: 3d:34:91:16:d5:e8:d7:4a:25:1b:26:df:08:ab:a5:fc:98:70: 7e:83:0a:ec -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUGgkM6ctpXJ0IXc8OrCowr8NF50UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ5QTI0NDQ2QjlFM0M4MDUwM0FBNTBCMzVDREZFODY0 QjUwRjI5OTAeFw0yNjA3MDgwODU4NTFaFw0yNjA3MDkxMTIxNTFaMDMxMTAvBgNV BAMTKDAzOTY1Q0I1NEI5ODk0RjlDRTkzN0U3RjA1MDczNEZGRkZERkE3RkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLjNwaSmb38WlfHOys3PcQ6pMn A8sRSiAekmotpy8lyehE7Bmb+Z4KLnHDPOwJbP3MdN31DOYnJvLPYMSAaMoG5moA 7I1kIP/xLMIGQV0gtTdshA7yQrUvdzmqyTltRfH/iMd+9U1kMwlQ6xcD4X9Tywmz HC5pkj/Clw0HuhPPJvb2/6CDqoThn1wXxUyHSZ50qyg5E2g3fnAwi46SdH5beP9O tyr2Mj34BZYLBgze5X2h1NwMry3B2ZgJnTOb9Xuupal86LagUtor8fRYdRpzLwwo 5+ev13n98OL3u7in14DGQ3vFQCi5r4r6pFBRSiv8CMl94Hs0TFdRfPrrRxD9AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUA5ZctUuYlPnOk35/BQc0///fp/swHwYDVR0j BBgwFoAUhJokRGuePIBQOqULNc3+hktQ8pkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOHVEZXQzZmthUGhiMUY1dEdmMTg4dXJZOUJETmt4b0RpSkRnVThCQTFy YzkvMS84NDlBMjQ0NDZCOUUzQzgwNTAzQUE1MEIzNUNERkU4NjRCNTBGMjk5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg0OUEyNDQ0NkI5RTNDODA1 MDNBQTUwQjM1Q0RGRTg2NEI1MEYyOTkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OHVEZXQzZmthUGhiMUY1dEdmMTg4dXJZOUJETmt4b0RpSkRnVThCQTFyYzkvMS84 NDlBMjQ0NDZCOUUzQzgwNTAzQUE1MEIzNUNERkU4NjRCNTBGMjk5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJJG4luD6Ih1POC1UYOLLDr93hujMXi7gWpSmzFGbGOdMzSMmGera+Ftfg8RR hibE/5Kgic9Q5x7b9J8XqwR285oFMoeTJwRcToynXldWdKEaupLzeLQXGMgBv5aE q6Q5N6WkQJYwAEj6E0YgvVuWiVzVZ56s6qxXaiPYekCndXtjusj9TN2p8m8rdTeF I8/iU/YhOndzqA62PuVso+Wiom3l6zF8eM6TDQdkGIlkTMkKzr+DVfzu2NjWA8wj 7BLiL2mhCMwDqNAGJO94Vc2sHro6FiNCLDDldT+DcWCMF0j68LTUKj8hOtrdPTSR FtXo10olGybfCKul/JhwfoMK7A== -----END CERTIFICATE-----Generated at Wed Jul 8 15:24:16 2026 by rpki-client