$ rpki-client -vvvf rpki-repo.registro.br/repo/BVKkTZfKiLForUMhYRJyGbnYpExF4kD5AQZhi8u7SZuD/1/DF52CC90FCD2C3832840643A9E557DE85B0F59D3.mft File: DF52CC90FCD2C3832840643A9E557DE85B0F59D3.mft (raw, json) Hash identifier: afKUFSf1DI19nBWKPAZ2mnZbT6b4iM8U2hdaxNq4HdU= Subject key identifier: B5:65:8E:6A:31:E6:BD:DF:3D:CE:39:41:C7:D5:08:18:CD:72:00:31 Authority key identifier: DF:52:CC:90:FC:D2:C3:83:28:40:64:3A:9E:55:7D:E8:5B:0F:59:D3 Certificate issuer: /CN=DF52CC90FCD2C3832840643A9E557DE85B0F59D3 Certificate serial: 3B83711CB81BA3472974962E6ED3ABF82373D1A9 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF52CC90FCD2C3832840643A9E557DE85B0F59D3.cer Subject info access: rsync://rpki-repo.registro.br/repo/BVKkTZfKiLForUMhYRJyGbnYpExF4kD5AQZhi8u7SZuD/1/DF52CC90FCD2C3832840643A9E557DE85B0F59D3.mft Manifest number: 0489 Signing time: Mon 24 Aug 2026 12:13:20 +0000 Manifest this update: Mon 24 Aug 2026 12:08:20 +0000 Manifest next update: Tue 25 Aug 2026 14:05:20 +0000 Files and hashes: 1: 323830343a363065303a3a2f33322d3336203d3e20323639313937.roa (hash: c7GGQKi6ec2DB29yrMDCE13X+Wm8vYKolg76A+4gtHA=) 2: DF52CC90FCD2C3832840643A9E557DE85B0F59D3.crl (hash: QSu2SRYCXM1n1MTdZOd4R57N7OEhQIe0l5/zuc645V8=) 3: 34352e3138312e3139362e302f32322d3234203d3e20323639313937.roa (hash: PYfMglksFxC5v+xgeAyjBUbMpusTFmLcGTEjqubwJ10=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BVKkTZfKiLForUMhYRJyGbnYpExF4kD5AQZhi8u7SZuD/1/DF52CC90FCD2C3832840643A9E557DE85B0F59D3.crl rsync://rpki-repo.registro.br/repo/BVKkTZfKiLForUMhYRJyGbnYpExF4kD5AQZhi8u7SZuD/1/DF52CC90FCD2C3832840643A9E557DE85B0F59D3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF52CC90FCD2C3832840643A9E557DE85B0F59D3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 25 Aug 2026 14:05:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:83:71:1c:b8:1b:a3:47:29:74:96:2e:6e:d3:ab:f8:23:73:d1:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF52CC90FCD2C3832840643A9E557DE85B0F59D3 Validity Not Before: Aug 24 12:08:20 2026 GMT Not After : Aug 25 14:05:20 2026 GMT Subject: CN=B5658E6A31E6BDDF3DCE3941C7D50818CD720031 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:55:52:73:98:f2:4e:d8:41:17:03:af:7c:c8: 47:7c:ce:24:0b:21:4f:d4:72:11:ab:ef:32:d4:24: 74:95:a9:16:06:fc:75:64:67:d0:a1:20:04:28:ad: e6:1d:79:7d:cd:10:8b:4c:89:e3:bb:6b:d8:f1:d0: 36:02:18:3e:87:f8:ce:9c:fa:ce:e0:37:05:54:fa: bd:58:7e:e8:9a:e1:09:7f:9d:8d:1a:c7:7c:c0:34: 23:98:d4:c9:8b:95:6a:9d:d5:e4:38:2e:fc:19:29: 51:6f:ba:e0:d3:bb:0d:84:ec:ca:b8:7e:f3:e3:56: 56:84:b8:bf:3c:9c:e3:15:0f:12:12:26:99:84:3a: 6d:f1:73:5a:a8:a8:46:77:bc:0b:a8:57:6b:99:42: bc:03:0d:2b:1e:20:e4:c4:98:dd:89:06:8d:b7:ad: 81:22:9b:b9:d0:4c:8d:ee:89:a1:83:79:f0:b4:32: 40:23:5d:c1:f1:a2:2a:08:62:96:b7:e1:19:85:01: 98:60:20:d9:66:5f:10:a6:68:cc:6a:e4:42:6a:c0: 14:0b:ae:75:26:a3:48:76:42:40:dc:83:be:e0:ff: 98:25:5d:45:b9:17:50:44:b2:8d:53:b5:76:e1:f9: 08:d4:dd:20:7b:42:48:ac:84:1f:44:8f:fd:a6:76: a7:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:65:8E:6A:31:E6:BD:DF:3D:CE:39:41:C7:D5:08:18:CD:72:00:31 X509v3 Authority Key Identifier: keyid:DF:52:CC:90:FC:D2:C3:83:28:40:64:3A:9E:55:7D:E8:5B:0F:59:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BVKkTZfKiLForUMhYRJyGbnYpExF4kD5AQZhi8u7SZuD/1/DF52CC90FCD2C3832840643A9E557DE85B0F59D3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF52CC90FCD2C3832840643A9E557DE85B0F59D3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BVKkTZfKiLForUMhYRJyGbnYpExF4kD5AQZhi8u7SZuD/1/DF52CC90FCD2C3832840643A9E557DE85B0F59D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:be:e5:54:a4:d7:4d:64:37:3c:07:e7:c9:42:c8:57:a0:1c: 8e:ec:5e:67:1e:82:41:58:30:4f:25:09:6c:34:0f:2b:30:b0: d8:02:4a:3d:9c:5e:ca:1a:1b:cc:74:95:1c:79:0f:9b:07:ff: 79:c2:3e:f3:ae:46:f9:f3:72:b6:d1:15:cd:02:47:ff:88:7d: f8:c9:0c:18:37:cd:3d:46:1e:5f:51:08:88:d8:07:71:da:6f: b9:67:19:d6:1f:f5:82:34:c5:6b:bd:52:ab:28:e9:65:e0:59: 08:a5:f0:4e:3e:83:24:db:a1:47:db:24:ab:31:48:94:c3:da: 1c:3c:34:d2:21:2e:34:1c:9e:83:44:49:8f:a5:48:91:af:cc: 5e:cc:2b:d3:ee:e5:c1:bb:e9:ad:ab:b0:c9:63:9a:84:ff:ff: 57:ec:78:2b:59:03:b3:b8:76:0f:17:9a:2b:b5:c6:3e:a6:44: 5e:03:fa:62:66:d0:c5:99:d8:62:93:66:0b:42:cf:28:90:4d: 9f:55:0d:88:25:1e:0f:1d:f8:c8:04:ee:f5:a1:c2:3d:34:31: 8d:d9:af:3f:24:52:ad:8c:51:70:38:a0:f5:17:5b:3a:79:a7: 12:23:cb:9d:2f:ab:16:1b:67:21:6c:2a:2b:e7:e9:0b:7b:a1: 80:7a:c6:28 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUO4NxHLgbo0cpdJYubtOr+CNz0akwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREY1MkNDOTBGQ0QyQzM4MzI4NDA2NDNBOUU1NTdERTg1 QjBGNTlEMzAeFw0yNjA4MjQxMjA4MjBaFw0yNjA4MjUxNDA1MjBaMDMxMTAvBgNV BAMTKEI1NjU4RTZBMzFFNkJEREYzRENFMzk0MUM3RDUwODE4Q0Q3MjAwMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLVVJzmPJO2EEXA698yEd8ziQL IU/UchGr7zLUJHSVqRYG/HVkZ9ChIAQoreYdeX3NEItMieO7a9jx0DYCGD6H+M6c +s7gNwVU+r1Yfuia4Ql/nY0ax3zANCOY1MmLlWqd1eQ4LvwZKVFvuuDTuw2E7Mq4 fvPjVlaEuL88nOMVDxISJpmEOm3xc1qoqEZ3vAuoV2uZQrwDDSseIOTEmN2JBo23 rYEim7nQTI3uiaGDefC0MkAjXcHxoioIYpa34RmFAZhgINlmXxCmaMxq5EJqwBQL rnUmo0h2QkDcg77g/5glXUW5F1BEso1TtXbh+QjU3SB7QkishB9Ej/2mdqdbAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUtWWOajHmvd89zjlBx9UIGM1yADEwHwYDVR0j BBgwFoAU31LMkPzSw4MoQGQ6nlV96FsPWdMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQlZLa1RaZktpTEZvclVNaFlSSnlHYm5ZcEV4RjRrRDVBUVpoaTh1N1Na dUQvMS9ERjUyQ0M5MEZDRDJDMzgzMjg0MDY0M0E5RTU1N0RFODVCMEY1OUQzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RGNTJDQzkwRkNEMkMzODMy ODQwNjQzQTlFNTU3REU4NUIwRjU5RDMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QlZLa1RaZktpTEZvclVNaFlSSnlHYm5ZcEV4RjRrRDVBUVpoaTh1N1NadUQvMS9E RjUyQ0M5MEZDRDJDMzgzMjg0MDY0M0E5RTU1N0RFODVCMEY1OUQzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXL7lVKTXTWQ3PAfnyULIV6AcjuxeZx6CQVgwTyUJbDQPKzCw2AJKPZxeyhob zHSVHHkPmwf/ecI+865G+fNyttEVzQJH/4h9+MkMGDfNPUYeX1EIiNgHcdpvuWcZ 1h/1gjTFa71SqyjpZeBZCKXwTj6DJNuhR9skqzFIlMPaHDw00iEuNByeg0RJj6VI ka/MXswr0+7lwbvprauwyWOahP//V+x4K1kDs7h2DxeaK7XGPqZEXgP6YmbQxZnY YpNmC0LPKJBNn1UNiCUeDx34yATu9aHCPTQxjdmvPyRSrYxRcDig9RdbOnmnEiPL nS+rFhtnIWwqK+fpC3uhgHrGKA== -----END CERTIFICATE-----Generated at Mon Aug 24 15:58:45 2026 by rpki-client