$ rpki-client -vvvf rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.mft File: D2991FF0EF094685597EA5146C4730F0270A9201.mft (raw, json) Hash identifier: 1EMRqre3tTyngipE0jSxn3Md9H6olJhgorPkMO0u0rw= Subject key identifier: 62:CE:CD:6B:05:2F:70:54:79:47:6A:9B:3A:C7:B4:74:F8:C6:2F:1A Authority key identifier: D2:99:1F:F0:EF:09:46:85:59:7E:A5:14:6C:47:30:F0:27:0A:92:01 Certificate issuer: /CN=D2991FF0EF094685597EA5146C4730F0270A9201 Certificate serial: 03821770BDE8B8CF964882B46F871F2A19D15975 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2991FF0EF094685597EA5146C4730F0270A9201.cer Subject info access: rsync://rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.mft Manifest number: 0362 Signing time: Sun 23 Aug 2026 22:07:03 +0000 Manifest this update: Sun 23 Aug 2026 22:02:03 +0000 Manifest next update: Mon 24 Aug 2026 23:37:03 +0000 Files and hashes: 1: 3137372e38342e32342e302f32322d3332203d3e20323632353737.roa (hash: C0u1aT3LDMhL5SLNpfi4dKOK4v/xmo0BwWf2GUw/OvQ=) 2: D2991FF0EF094685597EA5146C4730F0270A9201.crl (hash: cPYbLD7odEZyggQDoRCJfgi9NwT8kScIMGNsLqkT1Gk=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.crl rsync://rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2991FF0EF094685597EA5146C4730F0270A9201.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 24 Aug 2026 23:37:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:82:17:70:bd:e8:b8:cf:96:48:82:b4:6f:87:1f:2a:19:d1:59:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2991FF0EF094685597EA5146C4730F0270A9201 Validity Not Before: Aug 23 22:02:03 2026 GMT Not After : Aug 24 23:37:03 2026 GMT Subject: CN=62CECD6B052F705479476A9B3AC7B474F8C62F1A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:b0:90:22:3c:85:b7:ad:ad:33:7c:7f:f7:50: 7c:8c:fe:e9:9e:61:e5:01:12:34:10:ad:12:de:61: 69:7a:12:42:77:27:dc:66:9b:bb:ac:34:24:ba:02: da:28:fa:db:95:16:2a:be:a0:d7:e3:f7:ad:54:42: f8:ed:62:c7:b2:27:f4:9a:c1:17:9e:e2:c5:f3:9e: 21:3f:3a:bf:92:a3:1b:76:04:23:92:ea:be:9a:8b: 4f:88:a6:eb:f7:2c:01:e2:6a:0f:4b:61:de:5d:57: e9:76:08:8f:1d:69:51:76:92:b6:55:a6:31:5f:3f: f1:62:19:8c:91:d7:70:f4:60:a9:0d:6e:de:2c:e2: fd:94:0b:ba:36:f8:9e:59:dd:27:59:13:b3:69:c6: f7:aa:db:49:a8:d1:51:9b:06:5c:eb:f5:9b:d0:f9: fe:c3:b4:7e:a9:b9:fe:ba:6a:04:74:1e:98:8b:b5: 1e:93:3d:af:de:86:03:81:f5:bc:1d:3e:08:1d:37: fc:45:2a:ec:a4:cc:02:90:9c:39:57:58:23:4b:6b: 92:f1:be:ae:3a:19:73:5f:6c:88:6f:f8:9b:fd:cd: 48:71:0e:8c:ed:c3:74:23:18:a9:e0:2f:07:68:60: e6:ba:38:12:9b:73:25:18:73:b0:fe:a0:7a:2a:a5: b3:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:CE:CD:6B:05:2F:70:54:79:47:6A:9B:3A:C7:B4:74:F8:C6:2F:1A X509v3 Authority Key Identifier: keyid:D2:99:1F:F0:EF:09:46:85:59:7E:A5:14:6C:47:30:F0:27:0A:92:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2991FF0EF094685597EA5146C4730F0270A9201.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:78:de:a3:6c:a3:0c:c1:f4:7c:0b:90:e8:d2:ad:85:72:4c: 45:cf:3a:8f:c3:81:db:fe:ed:fe:3e:92:91:66:48:af:00:6d: d1:15:ec:95:e3:35:ee:f2:9b:72:73:89:a2:2a:2b:b0:63:ca: 74:75:e2:fc:10:f7:ff:4f:43:c3:f5:d9:d0:7e:0c:e1:91:b8: 57:90:ad:54:9d:39:bd:c6:07:22:ad:ae:40:c9:48:4f:86:ce: 31:c6:00:8f:6a:13:1d:d9:c6:1b:27:d5:3b:39:86:63:dc:31: 8e:04:3a:0b:29:49:e9:9f:8e:a5:d4:0d:58:60:34:17:fd:58: ad:24:48:a2:b9:b9:4a:c2:0a:ed:d2:bc:6f:25:ae:ab:33:3f: 47:47:17:b4:09:f3:5d:97:8a:f3:3d:14:80:2c:98:ff:89:23: 87:1e:74:2c:d7:b2:a8:4c:e3:84:48:98:78:ef:00:1a:d9:3b: 09:ce:38:83:3b:dc:dd:eb:1d:3d:25:1d:c6:85:6a:b9:b5:eb: cd:6b:d1:70:cb:b0:84:30:26:05:33:67:03:95:86:5e:af:b0: 70:bc:08:32:4f:1b:08:b1:ce:0c:da:ff:5f:29:8d:44:92:13: 42:64:4e:4e:6b:e0:cc:ef:eb:ba:db:53:ae:7f:3c:63:ef:43: 73:6a:b4:c2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUA4IXcL3ouM+WSIK0b4cfKhnRWXUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDI5OTFGRjBFRjA5NDY4NTU5N0VBNTE0NkM0NzMwRjAy NzBBOTIwMTAeFw0yNjA4MjMyMjAyMDNaFw0yNjA4MjQyMzM3MDNaMDMxMTAvBgNV BAMTKDYyQ0VDRDZCMDUyRjcwNTQ3OTQ3NkE5QjNBQzdCNDc0RjhDNjJGMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgsJAiPIW3ra0zfH/3UHyM/ume YeUBEjQQrRLeYWl6EkJ3J9xmm7usNCS6Atoo+tuVFiq+oNfj961UQvjtYseyJ/Sa wRee4sXzniE/Or+Soxt2BCOS6r6ai0+Ipuv3LAHiag9LYd5dV+l2CI8daVF2krZV pjFfP/FiGYyR13D0YKkNbt4s4v2UC7o2+J5Z3SdZE7Npxveq20mo0VGbBlzr9ZvQ +f7DtH6puf66agR0HpiLtR6TPa/ehgOB9bwdPggdN/xFKuykzAKQnDlXWCNLa5Lx vq46GXNfbIhv+Jv9zUhxDoztw3QjGKngLwdoYOa6OBKbcyUYc7D+oHoqpbNvAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUYs7NawUvcFR5R2qbOse0dPjGLxowHwYDVR0j BBgwFoAU0pkf8O8JRoVZfqUUbEcw8CcKkgEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQkZRVWk1VlFaNDY3RlZvTWpIZU0ySktMU1JBQ0xIM1RraGVZOHhIUFRW RnovMC9EMjk5MUZGMEVGMDk0Njg1NTk3RUE1MTQ2QzQ3MzBGMDI3MEE5MjAxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QyOTkxRkYwRUYwOTQ2ODU1 OTdFQTUxNDZDNDczMEYwMjcwQTkyMDEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QkZRVWk1VlFaNDY3RlZvTWpIZU0ySktMU1JBQ0xIM1RraGVZOHhIUFRWRnovMC9E Mjk5MUZGMEVGMDk0Njg1NTk3RUE1MTQ2QzQ3MzBGMDI3MEE5MjAxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHXjeo2yjDMH0fAuQ6NKthXJMRc86j8OB2/7t/j6SkWZIrwBt0RXsleM17vKb cnOJoiorsGPKdHXi/BD3/09Dw/XZ0H4M4ZG4V5CtVJ05vcYHIq2uQMlIT4bOMcYA j2oTHdnGGyfVOzmGY9wxjgQ6CylJ6Z+OpdQNWGA0F/1YrSRIorm5SsIK7dK8byWu qzM/R0cXtAnzXZeK8z0UgCyY/4kjhx50LNeyqEzjhEiYeO8AGtk7Cc44gzvc3esd PSUdxoVqubXrzWvRcMuwhDAmBTNnA5WGXq+wcLwIMk8bCLHODNr/XymNRJITQmRO TmvgzO/ruttTrn88Y+9Dc2q0wg== -----END CERTIFICATE-----Generated at Mon Aug 24 15:22:24 2026 by rpki-client