$ rpki-client -vvf rpki-repo.registro.br/repo/9agnSTwt74qCS5prJFwwKVkU4oDpbHGgawnjXpYpoXGG/0/CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.mft File: CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.mft (raw, json) Hash identifier: MQxn9pDdeQfHgZNfn0rpBLg1o8qPoWfvls9Cm4pih/s= Subject key identifier: 2C:BA:35:82:42:C1:B7:4E:E4:54:C7:BB:D8:71:41:39:AB:95:AF:7A Authority key identifier: CA:20:EF:C0:B9:9A:8A:86:B4:B4:CF:A1:07:B0:01:D5:08:B7:29:0D Certificate issuer: /CN=CA20EFC0B99A8A86B4B4CFA107B001D508B7290D Certificate serial: 666EBFD0C51D14087422F334F52AF717E25D5536 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.cer Subject info access: rsync://rpki-repo.registro.br/repo/9agnSTwt74qCS5prJFwwKVkU4oDpbHGgawnjXpYpoXGG/0/CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.mft Manifest number: 041F Signing time: Sat 27 Jun 2026 07:10:41 +0000 Manifest this update: Sat 27 Jun 2026 07:05:41 +0000 Manifest next update: Sun 28 Jun 2026 07:20:41 +0000 Files and hashes: 1: 3137392e39372e31362e302f32312d3234203d3e203238313831.roa (hash: HhuJluM4nYK24Tc4tYGLjGkrvHzMKI7PN1TuD9//pC4=) 2: 323830343a6461633a3a2f33322d3438203d3e203238313831.roa (hash: n1WfTF/69k+pEm38xUTBsvz2MS47ihd3zEekd1/O7ZY=) 3: CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.crl (hash: +FsrPEiCV/0y8Vuxmt0bYywstlwcBMoVmqKfu+gTxEs=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9agnSTwt74qCS5prJFwwKVkU4oDpbHGgawnjXpYpoXGG/0/CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.crl rsync://rpki-repo.registro.br/repo/9agnSTwt74qCS5prJFwwKVkU4oDpbHGgawnjXpYpoXGG/0/CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 28 Jun 2026 07:20:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:6e:bf:d0:c5:1d:14:08:74:22:f3:34:f5:2a:f7:17:e2:5d:55:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA20EFC0B99A8A86B4B4CFA107B001D508B7290D Validity Not Before: Jun 27 07:05:41 2026 GMT Not After : Jun 28 07:20:41 2026 GMT Subject: CN=2CBA358242C1B74EE454C7BBD8714139AB95AF7A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:5f:ef:8b:24:1b:9f:15:7d:2c:e8:0d:47:0b: 08:48:3c:60:39:d5:06:a0:e8:41:5a:94:04:1c:19: e4:e2:7a:26:bf:21:5b:a9:bb:6d:26:33:5c:16:c2: da:ad:d5:d9:a9:13:4d:cf:08:21:6f:a3:32:22:0c: 42:cb:26:22:f2:d1:d7:ba:8d:6d:e4:ca:03:23:8d: e1:dd:df:7e:ff:dd:36:d4:fc:0f:5b:b9:38:08:34: 9e:4f:c7:e1:c0:07:c6:de:f7:4f:ef:43:c4:a9:92: 5e:b5:28:9a:2e:71:50:eb:bd:c8:b7:e2:f1:d3:23: 37:1b:df:fb:66:85:dd:50:0e:52:78:4f:4a:db:a6: ad:86:ed:17:a9:06:e8:3a:4f:05:a7:5b:47:b4:8f: 11:b4:dd:b0:2f:8b:5a:74:80:8a:d3:2a:34:40:c2: 96:4b:9c:2c:aa:87:cc:9f:50:26:82:de:ee:e0:b2: 7b:56:49:d7:21:2c:e3:fd:b8:e7:35:fd:5a:2d:a3: 6f:a6:7d:9d:f6:96:e2:53:ab:24:b6:65:9f:33:77: b3:48:43:e4:0e:f6:7f:5a:6e:f4:da:97:9b:80:d8: e5:f9:10:2d:bc:b8:1b:bf:13:c8:e2:68:87:56:b7: de:79:fe:2f:06:ac:45:36:b1:b4:6c:47:6b:ee:02: bb:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:BA:35:82:42:C1:B7:4E:E4:54:C7:BB:D8:71:41:39:AB:95:AF:7A X509v3 Authority Key Identifier: keyid:CA:20:EF:C0:B9:9A:8A:86:B4:B4:CF:A1:07:B0:01:D5:08:B7:29:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9agnSTwt74qCS5prJFwwKVkU4oDpbHGgawnjXpYpoXGG/0/CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9agnSTwt74qCS5prJFwwKVkU4oDpbHGgawnjXpYpoXGG/0/CA20EFC0B99A8A86B4B4CFA107B001D508B7290D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:3d:f1:f5:73:43:aa:19:f3:76:83:41:47:c1:1a:a5:e0:42: aa:24:e8:a8:c3:94:72:52:3e:a6:c1:2a:cf:f5:b1:7e:f6:e8: a7:97:ff:cb:cc:cd:a7:c6:a5:42:49:8b:8f:ea:03:59:7a:1c: a9:04:50:46:4c:a9:12:a1:28:74:1f:e9:10:5a:84:f5:d4:29: 98:09:97:a5:71:f8:3d:c3:27:c4:3e:20:33:d8:3d:a3:e5:d3: 6a:42:df:a3:1b:d5:e6:fa:ee:32:81:f0:50:a1:c0:ab:64:02: bd:7e:c5:0a:cb:7b:4a:0c:db:e5:ff:01:f0:d4:d2:e3:4a:ae: ab:4e:31:ef:9f:56:4c:a7:e3:89:76:67:fc:53:0e:20:e9:b8: 28:68:ad:92:ce:3a:d9:08:30:23:c2:dd:76:49:7a:b0:cd:5d: d2:aa:19:87:55:3d:ed:53:f9:66:4e:4b:03:8a:dd:c5:c6:13: b3:7b:f3:d9:17:69:09:05:ab:5f:98:51:db:b9:8d:3c:72:79: ea:05:83:33:0a:28:6f:a6:22:c9:93:24:06:34:49:b0:48:69: 1c:74:60:fd:14:c0:9b:54:c9:6d:b8:51:e3:44:41:b1:04:0f: 14:03:fc:b2:c7:63:84:d5:b6:be:fa:ef:6b:e6:b0:b2:5c:4d: 8f:65:6c:c9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUZm6/0MUdFAh0IvM09Sr3F+JdVTYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0EyMEVGQzBCOTlBOEE4NkI0QjRDRkExMDdCMDAxRDUw OEI3MjkwRDAeFw0yNjA2MjcwNzA1NDFaFw0yNjA2MjgwNzIwNDFaMDMxMTAvBgNV BAMTKDJDQkEzNTgyNDJDMUI3NEVFNDU0QzdCQkQ4NzE0MTM5QUI5NUFGN0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtX++LJBufFX0s6A1HCwhIPGA5 1Qag6EFalAQcGeTieia/IVupu20mM1wWwtqt1dmpE03PCCFvozIiDELLJiLy0de6 jW3kygMjjeHd337/3TbU/A9buTgINJ5Px+HAB8be90/vQ8Spkl61KJoucVDrvci3 4vHTIzcb3/tmhd1QDlJ4T0rbpq2G7RepBug6TwWnW0e0jxG03bAvi1p0gIrTKjRA wpZLnCyqh8yfUCaC3u7gsntWSdchLOP9uOc1/Voto2+mfZ32luJTqyS2ZZ8zd7NI Q+QO9n9abvTal5uA2OX5EC28uBu/E8jiaIdWt955/i8GrEU2sbRsR2vuArt5AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQULLo1gkLBt07kVMe72HFBOauVr3owHwYDVR0j BBgwFoAUyiDvwLmaioa0tM+hB7AB1Qi3KQ0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOWFnblNUd3Q3NHFDUzVwckpGd3dLVmtVNG9EcGJIR2dhd25qWHBZcG9Y R0cvMC9DQTIwRUZDMEI5OUE4QTg2QjRCNENGQTEwN0IwMDFENTA4QjcyOTBELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NBMjBFRkMwQjk5QThBODZC NEI0Q0ZBMTA3QjAwMUQ1MDhCNzI5MEQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OWFnblNUd3Q3NHFDUzVwckpGd3dLVmtVNG9EcGJIR2dhd25qWHBZcG9YR0cvMC9D QTIwRUZDMEI5OUE4QTg2QjRCNENGQTEwN0IwMDFENTA4QjcyOTBELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAeT3x9XNDqhnzdoNBR8EapeBCqiToqMOUclI+psEqz/Wxfvbop5f/y8zNp8al QkmLj+oDWXocqQRQRkypEqEodB/pEFqE9dQpmAmXpXH4PcMnxD4gM9g9o+XTakLf oxvV5vruMoHwUKHAq2QCvX7FCst7Sgzb5f8B8NTS40quq04x759WTKfjiXZn/FMO IOm4KGitks462QgwI8Lddkl6sM1d0qoZh1U97VP5Zk5LA4rdxcYTs3vz2RdpCQWr X5hR27mNPHJ56gWDMwoob6YiyZMkBjRJsEhpHHRg/RTAm1TJbbhR40RBsQQPFAP8 ssdjhNW2vvrva+awslxNj2VsyQ== -----END CERTIFICATE-----Generated at Sat Jun 27 12:16:30 2026 by rpki-client