$ rpki-client -vvf rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.mft File: D2991FF0EF094685597EA5146C4730F0270A9201.mft (raw, json) Hash identifier: OQ4/CRtxUvKB0GDvBowtjgPFe4cDB1lKlIN+A8KQIqs= Subject key identifier: 68:1A:93:CD:94:3F:4F:39:36:04:E8:6A:9C:BC:C1:95:0D:5F:B4:C7 Authority key identifier: D2:99:1F:F0:EF:09:46:85:59:7E:A5:14:6C:47:30:F0:27:0A:92:01 Certificate issuer: /CN=D2991FF0EF094685597EA5146C4730F0270A9201 Certificate serial: 31154F8194BAEDDCA4668978F4302CE404BBAA4A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2991FF0EF094685597EA5146C4730F0270A9201.cer Subject info access: rsync://rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.mft Manifest number: 0314 Signing time: Fri 26 Jun 2026 15:32:03 +0000 Manifest this update: Fri 26 Jun 2026 15:27:03 +0000 Manifest next update: Sat 27 Jun 2026 19:10:03 +0000 Files and hashes: 1: D2991FF0EF094685597EA5146C4730F0270A9201.crl (hash: 3WNtNvg1842Uex7OLSDee5U5MFyl3BHvnTzRW1y0MfU=) 2: 3137372e38342e32342e302f32322d3332203d3e20323632353737.roa (hash: C0u1aT3LDMhL5SLNpfi4dKOK4v/xmo0BwWf2GUw/OvQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.crl rsync://rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2991FF0EF094685597EA5146C4730F0270A9201.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 27 Jun 2026 19:10:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:15:4f:81:94:ba:ed:dc:a4:66:89:78:f4:30:2c:e4:04:bb:aa:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2991FF0EF094685597EA5146C4730F0270A9201 Validity Not Before: Jun 26 15:27:03 2026 GMT Not After : Jun 27 19:10:03 2026 GMT Subject: CN=681A93CD943F4F393604E86A9CBCC1950D5FB4C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:42:d3:dc:27:ee:3a:bd:cb:9d:dc:5f:90:8e: cc:d4:a9:6a:a8:b6:2d:7f:d9:0f:fb:1d:42:56:57: 03:0e:c3:b7:fb:52:18:82:dd:ca:9b:78:d4:23:d7: a0:64:6b:e8:07:c4:eb:48:ff:8f:23:86:e6:4e:62: 3a:e3:12:1f:f4:f0:51:98:cd:c4:79:3f:e6:d6:ed: 1b:5c:da:55:73:d8:6d:5a:c8:9e:a0:3a:4f:ae:25: 80:46:b8:eb:e9:17:01:a0:29:05:80:a2:6a:e7:16: a4:4b:87:f1:aa:8a:b4:37:f7:63:14:2d:da:d1:38: 5a:1d:d3:fc:c6:54:03:6c:98:6b:63:0b:2b:ea:8d: 3b:22:98:e5:c2:75:14:e9:75:8f:f2:b4:1e:50:fa: 3d:ad:f8:ee:d7:b6:30:7c:8b:ed:31:24:57:f1:97: e5:0f:08:04:b7:a3:2f:6f:a7:22:bd:da:17:c1:3d: b2:d7:c7:96:08:90:96:9b:a5:7d:ab:77:90:04:62: 88:06:29:73:76:bb:45:e0:9c:4a:17:af:00:4f:e4: 53:3f:d3:94:31:ea:e2:f3:68:54:e2:50:aa:67:97: f5:0d:5f:af:49:7a:14:76:4d:2b:c3:fa:08:b3:13: 05:2c:99:ad:a8:82:3b:55:f6:1e:0d:cf:e3:b6:6b: 05:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:1A:93:CD:94:3F:4F:39:36:04:E8:6A:9C:BC:C1:95:0D:5F:B4:C7 X509v3 Authority Key Identifier: keyid:D2:99:1F:F0:EF:09:46:85:59:7E:A5:14:6C:47:30:F0:27:0A:92:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2991FF0EF094685597EA5146C4730F0270A9201.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:da:c9:e3:c7:92:ce:bc:86:1f:21:ce:93:79:43:83:64:a2: 48:c0:48:45:fa:95:69:51:d1:45:6a:c5:26:79:36:7d:eb:7e: 60:0a:44:c7:5e:c3:13:00:29:4f:92:dd:27:ba:06:f8:53:60: e3:a4:bf:59:4e:82:8b:0d:c5:84:98:9b:7f:85:70:4c:df:8a: 95:0b:4d:73:de:2b:02:fc:32:bb:a9:ab:7b:06:00:b0:5b:78: e9:b1:b1:26:d5:6e:35:2a:73:f1:80:d8:20:75:1f:ee:11:b5: 31:6f:09:6e:1f:b7:83:99:13:c0:bb:bf:fd:70:5b:9a:fd:61: 6d:07:0a:9c:5c:e3:a8:64:cc:e3:ff:7c:e3:9c:17:d2:1a:70: e8:c7:eb:d7:ef:d1:a7:11:5d:3a:ae:fd:c2:13:53:38:f5:06: 3f:a0:d0:40:e6:c3:53:a2:de:f2:d0:6b:e5:70:b9:ac:6f:a1: e1:0a:87:a1:b5:8e:9b:a9:12:1b:97:30:58:02:98:9e:3d:c4: 85:67:a6:5e:6e:5b:05:30:d8:15:06:b4:3e:bc:1a:cf:6d:cb: 75:b0:47:e9:df:8a:eb:5e:1b:b8:8a:4f:ae:b3:73:ae:ec:97: af:89:74:13:85:de:f1:bb:b1:06:7a:d2:d8:05:6a:8f:48:f2: 41:b9:81:d4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUMRVPgZS67dykZol49DAs5AS7qkowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDI5OTFGRjBFRjA5NDY4NTU5N0VBNTE0NkM0NzMwRjAy NzBBOTIwMTAeFw0yNjA2MjYxNTI3MDNaFw0yNjA2MjcxOTEwMDNaMDMxMTAvBgNV BAMTKDY4MUE5M0NEOTQzRjRGMzkzNjA0RTg2QTlDQkNDMTk1MEQ1RkI0QzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYQtPcJ+46vcud3F+QjszUqWqo ti1/2Q/7HUJWVwMOw7f7UhiC3cqbeNQj16Bka+gHxOtI/48jhuZOYjrjEh/08FGY zcR5P+bW7Rtc2lVz2G1ayJ6gOk+uJYBGuOvpFwGgKQWAomrnFqRLh/GqirQ392MU LdrROFod0/zGVANsmGtjCyvqjTsimOXCdRTpdY/ytB5Q+j2t+O7XtjB8i+0xJFfx l+UPCAS3oy9vpyK92hfBPbLXx5YIkJabpX2rd5AEYogGKXN2u0XgnEoXrwBP5FM/ 05Qx6uLzaFTiUKpnl/UNX69JehR2TSvD+gizEwUsma2ogjtV9h4Nz+O2awV/AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUaBqTzZQ/Tzk2BOhqnLzBlQ1ftMcwHwYDVR0j BBgwFoAU0pkf8O8JRoVZfqUUbEcw8CcKkgEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQkZRVWk1VlFaNDY3RlZvTWpIZU0ySktMU1JBQ0xIM1RraGVZOHhIUFRW RnovMC9EMjk5MUZGMEVGMDk0Njg1NTk3RUE1MTQ2QzQ3MzBGMDI3MEE5MjAxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QyOTkxRkYwRUYwOTQ2ODU1 OTdFQTUxNDZDNDczMEYwMjcwQTkyMDEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QkZRVWk1VlFaNDY3RlZvTWpIZU0ySktMU1JBQ0xIM1RraGVZOHhIUFRWRnovMC9E Mjk5MUZGMEVGMDk0Njg1NTk3RUE1MTQ2QzQ3MzBGMDI3MEE5MjAxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqdrJ48eSzryGHyHOk3lDg2SiSMBIRfqVaVHRRWrFJnk2fet+YApEx17DEwAp T5LdJ7oG+FNg46S/WU6Ciw3FhJibf4VwTN+KlQtNc94rAvwyu6mrewYAsFt46bGx JtVuNSpz8YDYIHUf7hG1MW8Jbh+3g5kTwLu//XBbmv1hbQcKnFzjqGTM4/9845wX 0hpw6Mfr1+/RpxFdOq79whNTOPUGP6DQQObDU6Le8tBr5XC5rG+h4QqHobWOm6kS G5cwWAKYnj3EhWemXm5bBTDYFQa0Prwaz23LdbBH6d+K614buIpPrrNzruyXr4l0 E4Xe8buxBnrS2AVqj0jyQbmB1A== -----END CERTIFICATE-----Generated at Sat Jun 27 12:16:46 2026 by rpki-client