$ rpki-client -vvvf rpki-repo.registro.br/repo/9q6uG3aWfABntKbo8v5pRrAtfoiNWygwjeLmnEPvXUgM/0/DA0301A990242DD7C44B8AECC975443CE24B0791.mft File: DA0301A990242DD7C44B8AECC975443CE24B0791.mft (raw, json) Hash identifier: sOOJhT0d8jdIIXDcmrPoaHYOKyzZTDkI4ymbmaMCiMY= Subject key identifier: B8:81:42:AC:03:2E:2E:C0:1F:05:86:3C:90:23:89:27:97:A0:EB:CD Authority key identifier: DA:03:01:A9:90:24:2D:D7:C4:4B:8A:EC:C9:75:44:3C:E2:4B:07:91 Certificate issuer: /CN=DA0301A990242DD7C44B8AECC975443CE24B0791 Certificate serial: 48CC8F850B330DA482549ABDC4DAB420875A5A41 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA0301A990242DD7C44B8AECC975443CE24B0791.cer Subject info access: rsync://rpki-repo.registro.br/repo/9q6uG3aWfABntKbo8v5pRrAtfoiNWygwjeLmnEPvXUgM/0/DA0301A990242DD7C44B8AECC975443CE24B0791.mft Manifest number: 11 Signing time: Sat 22 Aug 2026 13:19:26 +0000 Manifest this update: Sat 22 Aug 2026 13:14:26 +0000 Manifest next update: Sun 23 Aug 2026 15:29:26 +0000 Files and hashes: 1: DA0301A990242DD7C44B8AECC975443CE24B0791.crl (hash: 4qahzL7lpQCJiBAnbluUpQ5R+77jvfziA+jfKeqVwGw=) 2: 3137372e38342e34302e302f32322d3232203d3e203532373038.roa (hash: N0KmnEeLYkLQAiuePiCRpKbwHjquAcHqSGlCXzLIBU0=) 3: 323830343a323530343a3a2f33322d3332203d3e203532373038.roa (hash: /7r4Xbk0HvrYSE5bOoY8AqahpY2ZFIvFOxJOzbae574=) 4: 3133382e3131382e3130302e302f32322d3232203d3e203532373038.roa (hash: OOldVWejhnXl6q1ciS9e3F9h5PsnyFGAVVuqgE1i8LA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9q6uG3aWfABntKbo8v5pRrAtfoiNWygwjeLmnEPvXUgM/0/DA0301A990242DD7C44B8AECC975443CE24B0791.crl rsync://rpki-repo.registro.br/repo/9q6uG3aWfABntKbo8v5pRrAtfoiNWygwjeLmnEPvXUgM/0/DA0301A990242DD7C44B8AECC975443CE24B0791.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA0301A990242DD7C44B8AECC975443CE24B0791.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 23 Aug 2026 15:29:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:cc:8f:85:0b:33:0d:a4:82:54:9a:bd:c4:da:b4:20:87:5a:5a:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA0301A990242DD7C44B8AECC975443CE24B0791 Validity Not Before: Aug 22 13:14:26 2026 GMT Not After : Aug 23 15:29:26 2026 GMT Subject: CN=B88142AC032E2EC01F05863C9023892797A0EBCD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:74:fd:48:23:9a:88:15:38:a4:ca:79:e6:bc: c6:39:37:9a:d8:01:73:fb:07:07:49:cc:25:50:ec: 62:c3:65:a1:97:0d:dd:7d:db:21:7f:9d:b3:c1:8c: bd:e5:98:f1:e3:b0:ec:8a:73:93:b4:26:ac:09:f8: 2e:79:7d:52:13:09:62:bf:ff:91:90:a1:53:7e:b1: ab:88:f8:50:5f:3f:e8:fa:4b:3c:37:25:1f:8d:59: 9b:5c:07:6a:69:d3:e5:6f:ef:db:17:d9:05:41:28: 01:4a:86:9c:f2:62:0d:61:12:c7:44:ff:4a:57:57: c9:b2:7e:48:93:d6:8d:b1:9a:d1:c3:8a:f1:99:8c: 2a:79:e1:fa:c6:66:0a:06:d6:b2:bc:67:f3:b3:f4: 63:0d:87:1f:f6:aa:ea:82:16:2b:e5:8f:a5:ab:15: aa:b9:b3:84:02:65:f1:75:d7:14:d8:1e:30:d9:8a: 04:ea:39:cf:10:75:fe:11:d6:31:4e:6d:c4:2b:9f: d0:33:20:9f:d0:84:ab:62:fb:92:02:fc:72:92:48: b9:db:c4:36:0b:d3:b3:77:49:b7:79:c5:c9:10:5a: 76:b7:b8:d4:37:02:6b:ef:a3:b1:48:8d:f7:14:90: 10:ec:ea:8e:7d:e7:d1:c5:d1:4e:27:ce:fa:f2:4e: c4:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:81:42:AC:03:2E:2E:C0:1F:05:86:3C:90:23:89:27:97:A0:EB:CD X509v3 Authority Key Identifier: keyid:DA:03:01:A9:90:24:2D:D7:C4:4B:8A:EC:C9:75:44:3C:E2:4B:07:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9q6uG3aWfABntKbo8v5pRrAtfoiNWygwjeLmnEPvXUgM/0/DA0301A990242DD7C44B8AECC975443CE24B0791.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA0301A990242DD7C44B8AECC975443CE24B0791.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9q6uG3aWfABntKbo8v5pRrAtfoiNWygwjeLmnEPvXUgM/0/DA0301A990242DD7C44B8AECC975443CE24B0791.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:14:a4:ad:40:16:aa:45:40:38:81:de:1e:b2:b0:7f:f9:d5: 4b:05:56:33:64:b6:10:a6:4d:9d:99:33:50:7d:65:39:c5:3a: 66:91:3f:46:01:f5:b4:63:75:12:5b:2e:0c:a1:d6:19:cb:c2: d7:48:39:b1:90:de:79:9d:66:eb:b6:0b:45:d5:15:13:b1:cc: 4f:25:6b:9f:5c:4a:4e:0c:ca:f3:69:eb:bd:92:05:53:e6:fc: 16:b4:d8:bb:bd:b7:f3:f9:61:bd:5d:aa:53:5a:b0:7a:65:e2: 1c:29:5c:ca:63:6e:e9:fb:4f:46:80:cb:69:28:73:44:e5:5e: 56:8a:65:72:dd:53:42:f6:90:a5:59:19:12:d7:92:ea:8b:75: a1:43:9d:66:9c:fc:aa:00:f4:ad:7d:30:17:d4:7b:04:b4:19: 76:10:d9:9c:b1:b9:a0:cf:a1:d4:49:2a:14:ff:b4:76:27:14: 1c:4a:5f:ea:07:78:d9:55:94:04:e4:d3:2e:5a:65:77:30:f3: b8:60:97:1d:e1:9c:55:4d:dd:bf:93:7d:c5:0e:0a:39:5d:78: 09:ee:9d:95:f7:9b:5e:3e:de:0a:db:30:83:12:32:19:3a:17: 8c:10:25:e5:89:c1:3f:2a:41:4c:9b:0f:fe:97:b3:94:35:2f: 19:e9:a4:c8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUSMyPhQszDaSCVJq9xNq0IIdaWkEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREEwMzAxQTk5MDI0MkREN0M0NEI4QUVDQzk3NTQ0M0NF MjRCMDc5MTAeFw0yNjA4MjIxMzE0MjZaFw0yNjA4MjMxNTI5MjZaMDMxMTAvBgNV BAMTKEI4ODE0MkFDMDMyRTJFQzAxRjA1ODYzQzkwMjM4OTI3OTdBMEVCQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOdP1II5qIFTikynnmvMY5N5rY AXP7BwdJzCVQ7GLDZaGXDd192yF/nbPBjL3lmPHjsOyKc5O0JqwJ+C55fVITCWK/ /5GQoVN+sauI+FBfP+j6Szw3JR+NWZtcB2pp0+Vv79sX2QVBKAFKhpzyYg1hEsdE /0pXV8myfkiT1o2xmtHDivGZjCp54frGZgoG1rK8Z/Oz9GMNhx/2quqCFivlj6Wr Faq5s4QCZfF11xTYHjDZigTqOc8Qdf4R1jFObcQrn9AzIJ/QhKti+5IC/HKSSLnb xDYL07N3Sbd5xckQWna3uNQ3Amvvo7FIjfcUkBDs6o5959HF0U4nzvryTsRHAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUuIFCrAMuLsAfBYY8kCOJJ5eg680wHwYDVR0j BBgwFoAU2gMBqZAkLdfES4rsyXVEPOJLB5EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOXE2dUczYVdmQUJudEtibzh2NXBSckF0Zm9pTld5Z3dqZUxtbkVQdlhV Z00vMC9EQTAzMDFBOTkwMjQyREQ3QzQ0QjhBRUNDOTc1NDQzQ0UyNEIwNzkxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RBMDMwMUE5OTAyNDJERDdD NDRCOEFFQ0M5NzU0NDNDRTI0QjA3OTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OXE2dUczYVdmQUJudEtibzh2NXBSckF0Zm9pTld5Z3dqZUxtbkVQdlhVZ00vMC9E QTAzMDFBOTkwMjQyREQ3QzQ0QjhBRUNDOTc1NDQzQ0UyNEIwNzkxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEADhSkrUAWqkVAOIHeHrKwf/nVSwVWM2S2EKZNnZkzUH1lOcU6ZpE/RgH1tGN1 ElsuDKHWGcvC10g5sZDeeZ1m67YLRdUVE7HMTyVrn1xKTgzK82nrvZIFU+b8FrTY u7238/lhvV2qU1qwemXiHClcymNu6ftPRoDLaShzROVeVoplct1TQvaQpVkZEteS 6ot1oUOdZpz8qgD0rX0wF9R7BLQZdhDZnLG5oM+h1EkqFP+0dicUHEpf6gd42VWU BOTTLlpldzDzuGCXHeGcVU3dv5N9xQ4KOV14Ce6dlfebXj7eCtswgxIyGToXjBAl 5YnBPypBTJsP/pezlDUvGemkyA== -----END CERTIFICATE-----Generated at Sun Aug 23 06:46:27 2026 by rpki-client