$ rpki-client -vvvf rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.mft File: CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.mft (raw, json) Hash identifier: B1JakcQftcrsnCLWYYQIEROeMaxYU0WnZKF8ygNR/lQ= Subject key identifier: 3A:C6:92:7C:58:F5:15:27:58:92:B1:7C:0B:CE:B2:31:81:E6:D3:AB Authority key identifier: CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E Certificate issuer: /CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E Certificate serial: 1104F2B097BB923D6BB07A177BE45A5CC0E72D4F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer Subject info access: rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.mft Manifest number: 04A6 Signing time: Tue 25 Aug 2026 15:45:02 +0000 Manifest this update: Tue 25 Aug 2026 15:40:02 +0000 Manifest next update: Wed 26 Aug 2026 17:59:02 +0000 Files and hashes: 1: AS262663.roa (hash: 2Caa3rbPJnrkLf4QCaOXUYIaWy6bzjPrGMPvZ739xOg=) 2: CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl (hash: 0/cxKDFn4hYaI6H6iHKWzQ0+vhiZKq2rhOpQTgRaP4A=) 3: AS52903.roa (hash: qrdArtV80HzymrbTbF11pSFZWhXgIROL/7g76QvSk1Y=) 4: AS53107.roa (hash: YNueEm6sCbS0buvgPH15MFmPpvwrbDjMTWPwFzwpDjg=) 5: AS274611.roa (hash: Yh/wgxJOPUs70756krDUncge782fakh6viBhdbwWBw0=) 6: AS272541.roa (hash: EODXdc5YmMquKEAEhSKdpsKCfJ9cDzIlVmWJFwjQPMM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 26 Aug 2026 17:59:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:04:f2:b0:97:bb:92:3d:6b:b0:7a:17:7b:e4:5a:5c:c0:e7:2d:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E Validity Not Before: Aug 25 15:40:02 2026 GMT Not After : Aug 26 17:59:02 2026 GMT Subject: CN=3AC6927C58F515275892B17C0BCEB23181E6D3AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:f7:a5:73:18:eb:53:3c:5c:bd:d9:11:73:93: 73:ac:1f:f6:2c:92:48:84:28:86:7b:5b:ab:84:3f: 45:42:d0:65:9b:00:0b:20:c1:33:c1:92:f0:72:b5: 0c:68:5b:c0:90:e1:d6:ad:d6:7d:76:dc:e3:3e:e6: cf:4a:87:70:49:88:4c:44:1b:77:f2:ed:79:db:8c: 36:50:21:09:11:ca:50:7d:57:f4:2a:01:99:41:ce: 07:94:ca:8a:01:65:c7:70:9e:05:03:be:34:7b:22: 96:97:37:75:a7:3b:cc:38:e8:b0:0f:61:64:e0:ea: fe:a0:54:09:bc:8d:0a:af:0c:66:f3:94:10:89:7e: f2:2c:9b:0c:cf:f1:fc:5f:ee:5a:cb:63:6d:08:35: 39:6b:d0:88:1f:52:0d:0f:5d:ad:e8:be:8f:9a:97: 35:e9:8a:d1:73:6d:05:45:75:20:42:98:15:cc:01: c9:3e:f9:27:58:73:ce:4f:d9:73:7f:4a:88:94:66: 14:07:38:01:c4:2e:73:28:7d:92:b7:43:9c:81:2d: 16:7f:d3:e5:c9:d1:cd:bc:94:e5:b9:ab:58:a0:13: 11:b0:c0:65:30:36:00:a1:23:54:33:b7:46:2e:3a: 5f:58:12:03:c7:d4:bf:3e:e9:f2:45:d0:8d:7d:1e: ab:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:C6:92:7C:58:F5:15:27:58:92:B1:7C:0B:CE:B2:31:81:E6:D3:AB X509v3 Authority Key Identifier: keyid:CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:41:d3:16:dc:96:4b:3d:6c:b1:a6:62:f7:ad:01:ce:e3:9f: 2e:03:75:78:fa:f8:5c:62:97:7a:11:20:38:22:a2:02:56:f7: af:d2:d7:ea:42:57:8f:b9:5e:2b:6c:98:58:9b:b9:78:0b:12: 9a:cb:42:b2:0e:42:e3:43:6d:4c:bd:8f:c1:09:24:53:a1:00: 59:ca:c8:23:71:99:0f:81:49:ee:eb:2c:70:a8:45:fe:8d:25: 3e:af:25:1a:47:f5:1e:1c:e4:a6:e4:48:13:e9:81:38:75:a5: d7:a6:cc:71:31:53:96:88:4c:e9:8b:de:dc:d0:71:c2:96:78: 4c:27:e5:cd:86:84:92:2a:64:7f:de:41:e3:20:d2:72:11:c1: da:44:69:31:33:98:e7:fe:fd:c8:ac:53:d1:ac:cb:28:be:bf: b2:2d:ed:30:f6:ee:9f:f4:92:00:0a:9a:64:07:77:4e:82:e2: 5f:52:80:ac:ea:b6:98:d2:47:e5:24:f5:6d:8a:c3:22:24:a3: 8c:a0:b0:30:8a:26:a8:46:ed:a8:4b:49:92:2b:ac:ea:ed:c8: 9c:46:e3:dd:19:6d:6b:3f:bd:ed:6d:49:80:8c:44:ae:b5:2f: 15:30:af:98:4d:33:46:e5:b7:dc:da:ee:2b:b4:97:f2:c6:30: 00:60:34:3c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUEQTysJe7kj1rsHoXe+RaXMDnLU8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0YxNTJGMzM4RDFEODhFQzBDRDcxODU1MzlCRTNEODVF M0E2M0U5RTAeFw0yNjA4MjUxNTQwMDJaFw0yNjA4MjYxNzU5MDJaMDMxMTAvBgNV BAMTKDNBQzY5MjdDNThGNTE1Mjc1ODkyQjE3QzBCQ0VCMjMxODFFNkQzQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDn96VzGOtTPFy92RFzk3OsH/Ys kkiEKIZ7W6uEP0VC0GWbAAsgwTPBkvBytQxoW8CQ4dat1n123OM+5s9Kh3BJiExE G3fy7XnbjDZQIQkRylB9V/QqAZlBzgeUyooBZcdwngUDvjR7IpaXN3WnO8w46LAP YWTg6v6gVAm8jQqvDGbzlBCJfvIsmwzP8fxf7lrLY20INTlr0IgfUg0PXa3ovo+a lzXpitFzbQVFdSBCmBXMAck++SdYc85P2XN/SoiUZhQHOAHELnMofZK3Q5yBLRZ/ 0+XJ0c28lOW5q1igExGwwGUwNgChI1Qzt0YuOl9YEgPH1L8+6fJF0I19HquvAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUOsaSfFj1FSdYkrF8C86yMYHm06swHwYDVR0j BBgwFoAUzxUvM40diOwM1xhVOb49heOmPp4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ290SjNSY21mNFA4N1R2MzlKOEJ5dE41UEFtWE5VSDVNcDc0SlViYWox NlUvMS9DRjE1MkYzMzhEMUQ4OEVDMENENzE4NTUzOUJFM0Q4NUUzQTYzRTlFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NGMTUyRjMzOEQxRDg4RUMw Q0Q3MTg1NTM5QkUzRDg1RTNBNjNFOUUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q290SjNSY21mNFA4N1R2MzlKOEJ5dE41UEFtWE5VSDVNcDc0SlViYWoxNlUvMS9D RjE1MkYzMzhEMUQ4OEVDMENENzE4NTUzOUJFM0Q4NUUzQTYzRTlFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfkHTFtyWSz1ssaZi960BzuOfLgN1ePr4XGKXehEgOCKiAlb3r9LX6kJXj7le K2yYWJu5eAsSmstCsg5C40NtTL2PwQkkU6EAWcrII3GZD4FJ7usscKhF/o0lPq8l Gkf1HhzkpuRIE+mBOHWl16bMcTFTlohM6Yve3NBxwpZ4TCflzYaEkipkf95B4yDS chHB2kRpMTOY5/79yKxT0azLKL6/si3tMPbun/SSAAqaZAd3ToLiX1KArOq2mNJH 5ST1bYrDIiSjjKCwMIomqEbtqEtJkius6u3InEbj3Rltaz+97W1JgIxErrUvFTCv mE0zRuW33NruK7SX8sYwAGA0PA== -----END CERTIFICATE-----Generated at Wed Aug 26 11:40:49 2026 by rpki-client