$ rpki-client -vvf rpki-repo.registro.br/repo/D63PA1hfJWr4RTdQnMTHXwmNSSs1ECUhUvPjxPNDXTwT/0/CE3C207E6CECB94C8BBCB66C2C5B31B29FA220B7.mft File: CE3C207E6CECB94C8BBCB66C2C5B31B29FA220B7.mft (raw, json) Hash identifier: e1C0wFLYi0cD5Fh6RoJizg6+lQMCD+dILajy0PBVrhY= Subject key identifier: CF:63:C1:0F:DE:31:63:7C:C3:4B:6F:8A:57:48:72:7E:71:1A:3F:78 Authority key identifier: CE:3C:20:7E:6C:EC:B9:4C:8B:BC:B6:6C:2C:5B:31:B2:9F:A2:20:B7 Certificate issuer: /CN=CE3C207E6CECB94C8BBCB66C2C5B31B29FA220B7 Certificate serial: 7465A8C090F8FE0D708284B2536E8720F26080AF Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE3C207E6CECB94C8BBCB66C2C5B31B29FA220B7.cer Subject info access: rsync://rpki-repo.registro.br/repo/D63PA1hfJWr4RTdQnMTHXwmNSSs1ECUhUvPjxPNDXTwT/0/CE3C207E6CECB94C8BBCB66C2C5B31B29FA220B7.mft Manifest number: C9 Signing time: Wed 08 Jul 2026 04:13:57 +0000 Manifest this update: Wed 08 Jul 2026 04:08:57 +0000 Manifest next update: Thu 09 Jul 2026 05:09:57 +0000 Files and hashes: 1: 323830343a353936343a3a2f33322d3336203d3e203631363133.roa (hash: sHP2ygrqTYTY15dtbi0gTVuddZSIHRSH0IyS1EMxOo4=) 2: 3230302e3139322e3135322e302f32322d3234203d3e203631363133.roa (hash: u/gXstXvaoXswmUY2weSiF3XDVA5+Rjw0+u0Ea1eciY=) 3: CE3C207E6CECB94C8BBCB66C2C5B31B29FA220B7.crl (hash: TeyOsfTkmFTEfYcsEP1eUlCQxtIvf2oxKZJWlfXXzhc=) 4: 34352e3137312e36302e302f32322d3234203d3e203631363133.roa (hash: rqFpRbi2nHQnPx4E/BliB9kjTJF3Fdr2CbPUaChmPDo=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/D63PA1hfJWr4RTdQnMTHXwmNSSs1ECUhUvPjxPNDXTwT/0/CE3C207E6CECB94C8BBCB66C2C5B31B29FA220B7.crl rsync://rpki-repo.registro.br/repo/D63PA1hfJWr4RTdQnMTHXwmNSSs1ECUhUvPjxPNDXTwT/0/CE3C207E6CECB94C8BBCB66C2C5B31B29FA220B7.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE3C207E6CECB94C8BBCB66C2C5B31B29FA220B7.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 09 Jul 2026 05:09:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:65:a8:c0:90:f8:fe:0d:70:82:84:b2:53:6e:87:20:f2:60:80:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE3C207E6CECB94C8BBCB66C2C5B31B29FA220B7 Validity Not Before: Jul 8 04:08:57 2026 GMT Not After : Jul 9 05:09:57 2026 GMT Subject: CN=CF63C10FDE31637CC34B6F8A5748727E711A3F78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:df:2f:0c:76:10:4d:12:5e:ca:5a:52:ba:e0: 9c:33:1d:d5:08:f5:09:ca:8d:1c:64:6a:9a:68:c4: 58:27:d8:2b:88:5d:04:6d:07:7a:f0:b0:f4:6f:b8: c4:9e:89:53:22:76:81:35:61:2d:0e:a3:72:da:0c: 39:3a:81:bc:27:f2:f0:e1:36:88:be:19:47:cc:d6: 25:56:5b:47:ea:33:6e:b5:aa:50:ca:48:70:94:bc: 41:d1:d2:31:be:40:54:9f:e6:34:a9:7c:3a:a0:61: 9c:c7:82:88:45:c6:04:bb:70:94:67:7e:8b:d2:fc: 8d:29:ad:8c:ed:d3:cf:18:1a:70:e4:3b:85:bd:84: 7d:1b:c4:ce:58:22:d3:0e:9e:c1:ce:3b:b9:15:a9: 2a:70:8e:27:b5:2e:cc:46:d7:96:4a:50:44:7f:69: af:3a:b8:36:32:20:d1:4a:3c:4f:a6:ba:eb:e6:33: 01:35:49:24:60:9e:cb:78:89:39:ca:56:f7:1b:86: 4b:29:85:aa:95:5a:69:a3:a8:be:b1:ba:8e:7b:b6: 3a:ca:c7:c0:29:7b:ef:07:06:85:5b:10:59:11:c4: 84:94:7a:6e:37:69:36:32:a6:7e:72:78:12:9b:2c: 1e:04:c3:c0:01:63:38:3a:59:2b:93:1e:72:fb:77: 77:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:63:C1:0F:DE:31:63:7C:C3:4B:6F:8A:57:48:72:7E:71:1A:3F:78 X509v3 Authority Key Identifier: keyid:CE:3C:20:7E:6C:EC:B9:4C:8B:BC:B6:6C:2C:5B:31:B2:9F:A2:20:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/D63PA1hfJWr4RTdQnMTHXwmNSSs1ECUhUvPjxPNDXTwT/0/CE3C207E6CECB94C8BBCB66C2C5B31B29FA220B7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE3C207E6CECB94C8BBCB66C2C5B31B29FA220B7.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/D63PA1hfJWr4RTdQnMTHXwmNSSs1ECUhUvPjxPNDXTwT/0/CE3C207E6CECB94C8BBCB66C2C5B31B29FA220B7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:a5:7c:f4:2c:fa:6f:68:bb:2c:c5:50:a8:8d:cf:fa:e1:65: d8:29:9a:a5:21:37:5e:2c:27:9a:b8:f6:52:7b:da:13:53:43: 33:c0:6f:17:6a:5e:2b:3c:35:06:b8:9b:5d:59:93:ad:d8:9d: f6:90:2b:10:49:e7:05:ef:09:f1:bb:5c:65:e7:fb:b8:74:63: 20:05:f0:e6:01:31:ff:30:7a:96:8d:f6:a5:f5:74:82:a9:49: 30:ab:b3:1b:0a:0c:8f:98:47:f1:79:ea:13:38:ee:27:64:22: 4f:ab:85:99:b7:90:8f:d6:0b:7a:ce:f0:6e:0a:c8:81:15:78: b7:83:9e:c1:d7:1c:7c:83:5e:52:d7:1c:f1:78:ae:81:3f:01: 0d:0e:53:64:da:32:05:73:ed:6f:e5:51:50:e7:3d:9e:42:e5: 85:7f:ce:b9:54:17:5f:1f:b8:19:52:e6:c5:27:95:0b:55:8a: 17:0f:bb:a8:d9:ac:ff:01:85:b3:b7:52:20:1b:6f:55:aa:18: 3c:e1:9b:1e:e9:5a:87:fb:b0:b4:61:57:70:cc:60:e2:b1:c8: f8:b2:19:85:62:95:22:a6:15:c2:d0:f3:4c:8a:2f:16:8c:60: 6e:06:4e:ab:9b:23:1c:ba:7a:49:f6:f4:d0:c0:0f:20:36:9e: fd:85:82:b9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUdGWowJD4/g1wgoSyU26HIPJggK8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0UzQzIwN0U2Q0VDQjk0QzhCQkNCNjZDMkM1QjMxQjI5 RkEyMjBCNzAeFw0yNjA3MDgwNDA4NTdaFw0yNjA3MDkwNTA5NTdaMDMxMTAvBgNV BAMTKENGNjNDMTBGREUzMTYzN0NDMzRCNkY4QTU3NDg3MjdFNzExQTNGNzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk3y8MdhBNEl7KWlK64JwzHdUI 9QnKjRxkappoxFgn2CuIXQRtB3rwsPRvuMSeiVMidoE1YS0Oo3LaDDk6gbwn8vDh Noi+GUfM1iVWW0fqM261qlDKSHCUvEHR0jG+QFSf5jSpfDqgYZzHgohFxgS7cJRn fovS/I0prYzt088YGnDkO4W9hH0bxM5YItMOnsHOO7kVqSpwjie1LsxG15ZKUER/ aa86uDYyINFKPE+muuvmMwE1SSRgnst4iTnKVvcbhksphaqVWmmjqL6xuo57tjrK x8Ape+8HBoVbEFkRxISUem43aTYypn5yeBKbLB4Ew8ABYzg6WSuTHnL7d3fDAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUz2PBD94xY3zDS2+KV0hyfnEaP3gwHwYDVR0j BBgwFoAUzjwgfmzsuUyLvLZsLFsxsp+iILcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRDYzUEExaGZKV3I0UlRkUW5NVEhYd21OU1NzMUVDVWhVdlBqeFBORFhU d1QvMC9DRTNDMjA3RTZDRUNCOTRDOEJCQ0I2NkMyQzVCMzFCMjlGQTIyMEI3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NFM0MyMDdFNkNFQ0I5NEM4 QkJDQjY2QzJDNUIzMUIyOUZBMjIwQjcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RDYzUEExaGZKV3I0UlRkUW5NVEhYd21OU1NzMUVDVWhVdlBqeFBORFhUd1QvMC9D RTNDMjA3RTZDRUNCOTRDOEJCQ0I2NkMyQzVCMzFCMjlGQTIyMEI3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEANqV89Cz6b2i7LMVQqI3P+uFl2CmapSE3Xiwnmrj2UnvaE1NDM8BvF2peKzw1 BribXVmTrdid9pArEEnnBe8J8btcZef7uHRjIAXw5gEx/zB6lo32pfV0gqlJMKuz GwoMj5hH8XnqEzjuJ2QiT6uFmbeQj9YLes7wbgrIgRV4t4OewdccfINeUtcc8Xiu gT8BDQ5TZNoyBXPtb+VRUOc9nkLlhX/OuVQXXx+4GVLmxSeVC1WKFw+7qNms/wGF s7dSIBtvVaoYPOGbHulah/uwtGFXcMxg4rHI+LIZhWKVIqYVwtDzTIovFoxgbgZO q5sjHLp6Sfb00MAPIDae/YWCuQ== -----END CERTIFICATE-----Generated at Wed Jul 8 15:22:06 2026 by rpki-client