$ rpki-client -vvvf rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/0/40D5C3F55AE08CF30E4668447D1C5168A90E7C72.mft File: 40D5C3F55AE08CF30E4668447D1C5168A90E7C72.mft (raw, json) Hash identifier: 1WuojPncbkIicLE/3tmv96ZKB57jSdiKW7rYpDhsL1g= Subject key identifier: 8C:06:A8:A0:98:71:70:AC:75:0C:E6:36:3B:3B:5D:E9:93:CD:AB:1F Authority key identifier: 40:D5:C3:F5:5A:E0:8C:F3:0E:46:68:44:7D:1C:51:68:A9:0E:7C:72 Certificate issuer: /CN=40D5C3F55AE08CF30E4668447D1C5168A90E7C72 Certificate serial: 1871BC84042D50C0DE59E07FCE5FB6FA05D465DA Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40D5C3F55AE08CF30E4668447D1C5168A90E7C72.cer Subject info access: rsync://rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/0/40D5C3F55AE08CF30E4668447D1C5168A90E7C72.mft Manifest number: 0134 Signing time: Sat 22 Aug 2026 20:01:50 +0000 Manifest this update: Sat 22 Aug 2026 19:56:50 +0000 Manifest next update: Sun 23 Aug 2026 23:28:50 +0000 Files and hashes: 1: 3133382e39392e34302e302f32322d3234203d3e20323633303836.roa (hash: r0tBAK+QejG6d300vU+MXMRiqOlNZOHdDWhzPvqgs+o=) 2: 3138362e3230382e3234382e302f32322d3234203d3e20323633303836.roa (hash: ov7bnN4VFfOv78RIcV1bbIDDw8bG2eYE2dWkYTEJyqw=) 3: 40D5C3F55AE08CF30E4668447D1C5168A90E7C72.crl (hash: t55hVm97vtw6ktUfKjqKP5AppqtYbcBsYifd5T3pUxM=) 4: 323830343a3937303a3a2f33322d3438203d3e20323633303836.roa (hash: Kx05sHTE+LNnP6XO1B5s2Cs3g5EvPwxkW08IslxDSFA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/0/40D5C3F55AE08CF30E4668447D1C5168A90E7C72.crl rsync://rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/0/40D5C3F55AE08CF30E4668447D1C5168A90E7C72.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40D5C3F55AE08CF30E4668447D1C5168A90E7C72.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 23 Aug 2026 23:28:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:71:bc:84:04:2d:50:c0:de:59:e0:7f:ce:5f:b6:fa:05:d4:65:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40D5C3F55AE08CF30E4668447D1C5168A90E7C72 Validity Not Before: Aug 22 19:56:50 2026 GMT Not After : Aug 23 23:28:50 2026 GMT Subject: CN=8C06A8A0987170AC750CE6363B3B5DE993CDAB1F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c3:48:fa:25:fa:ad:3e:8d:45:80:33:d9:de: 6b:ef:37:f3:78:5f:7b:06:d4:2b:9f:ea:e5:08:d5: 0f:2b:87:8e:4f:e2:86:e6:30:70:15:b2:9d:49:02: b1:67:44:16:1b:69:72:85:28:8b:e3:f2:bb:a6:05: e5:b7:90:78:50:cd:6a:0e:0e:92:0f:d7:c7:cf:98: d6:2a:86:e8:9a:d1:c8:f3:1f:c7:e7:ba:7c:f3:68: a3:b9:f9:c0:d9:16:34:82:fc:5b:55:e0:f8:47:dc: d7:17:8b:ff:18:59:fb:1c:d2:58:34:dd:c8:db:f8: a9:94:f4:c2:6c:67:4c:f3:39:51:21:7a:fe:b8:31: c0:e7:ef:66:8c:26:7b:65:a2:b1:bd:d8:a0:09:63: bc:3a:dd:07:a7:08:e8:29:70:5b:94:75:4c:21:c1: df:a8:a5:93:f7:9f:bf:94:d3:38:12:f2:15:dc:2e: a0:67:3b:28:a3:55:ae:29:70:d5:69:c8:fb:a3:b5: 49:0e:6c:c4:8c:ad:56:a7:30:c1:d5:06:a5:12:94: d5:20:c4:9b:97:e3:3b:f0:cd:1b:f0:ff:da:5b:7b: ba:2b:c1:e6:c9:51:c5:ef:48:95:e9:a0:71:7d:01: 43:d5:a4:d8:28:9a:c3:e1:55:87:c6:d9:77:a3:93: 04:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:06:A8:A0:98:71:70:AC:75:0C:E6:36:3B:3B:5D:E9:93:CD:AB:1F X509v3 Authority Key Identifier: keyid:40:D5:C3:F5:5A:E0:8C:F3:0E:46:68:44:7D:1C:51:68:A9:0E:7C:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/0/40D5C3F55AE08CF30E4668447D1C5168A90E7C72.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40D5C3F55AE08CF30E4668447D1C5168A90E7C72.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/0/40D5C3F55AE08CF30E4668447D1C5168A90E7C72.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:a3:c5:4d:69:fb:fe:fe:d8:e4:27:9c:f7:8d:d9:fb:ff:1d: 17:e3:1b:04:e2:b8:dc:a1:5d:a3:93:c7:57:5b:59:38:7a:25: 36:9a:dd:af:02:ee:41:0f:83:90:8c:c8:f6:65:63:a0:48:1f: 1b:b8:60:61:bd:70:f9:02:a7:d8:e1:bf:a2:ae:f2:d5:b0:1c: 9b:1f:ba:e6:15:d3:5d:c9:aa:7d:fd:fc:77:1f:e3:50:48:63: da:71:f1:2a:f9:a1:ea:64:4d:cc:cb:5c:52:98:10:29:af:ea: fa:6d:dd:b2:b4:0d:43:dd:ca:28:59:28:e0:17:05:11:f7:9b: ee:98:85:15:89:27:ef:af:90:06:d7:82:21:0a:86:ba:f7:bf: 66:b6:66:ad:54:96:f0:e2:c2:17:30:35:8d:13:c9:eb:7f:26: 44:9d:db:44:39:4f:02:ca:38:8a:de:b3:87:0c:b4:97:79:44: 22:18:0d:60:79:ce:e3:bd:72:5c:ad:ce:53:39:73:6f:fb:8d: 39:f8:19:83:c6:db:cd:89:e2:83:05:0f:e0:90:98:1a:a8:7a: 11:ae:7f:e2:60:93:8c:43:6c:5f:76:f6:53:d4:cc:d4:23:47: 66:ad:b8:d2:de:a6:bf:42:82:98:c0:75:d7:19:33:1a:0b:ff: c2:61:ce:f6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUGHG8hAQtUMDeWeB/zl+2+gXUZdowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDBENUMzRjU1QUUwOENGMzBFNDY2ODQ0N0QxQzUxNjhB OTBFN0M3MjAeFw0yNjA4MjIxOTU2NTBaFw0yNjA4MjMyMzI4NTBaMDMxMTAvBgNV BAMTKDhDMDZBOEEwOTg3MTcwQUM3NTBDRTYzNjNCM0I1REU5OTNDREFCMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3w0j6JfqtPo1FgDPZ3mvvN/N4 X3sG1Cuf6uUI1Q8rh45P4obmMHAVsp1JArFnRBYbaXKFKIvj8rumBeW3kHhQzWoO DpIP18fPmNYqhuia0cjzH8fnunzzaKO5+cDZFjSC/FtV4PhH3NcXi/8YWfsc0lg0 3cjb+KmU9MJsZ0zzOVEhev64McDn72aMJntlorG92KAJY7w63QenCOgpcFuUdUwh wd+opZP3n7+U0zgS8hXcLqBnOyijVa4pcNVpyPujtUkObMSMrVanMMHVBqUSlNUg xJuX4zvwzRvw/9pbe7orwebJUcXvSJXpoHF9AUPVpNgomsPhVYfG2XejkwQDAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUjAaooJhxcKx1DOY2Oztd6ZPNqx8wHwYDVR0j BBgwFoAUQNXD9VrgjPMORmhEfRxRaKkOfHIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRFU2SjQ3Q1FjZGJyckd3SjZYV00yRUdSY21TVTV0NTNCdjZFWEx5dGh5 bmQvMC80MEQ1QzNGNTVBRTA4Q0YzMEU0NjY4NDQ3RDFDNTE2OEE5MEU3QzcyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQwRDVDM0Y1NUFFMDhDRjMw RTQ2Njg0NDdEMUM1MTY4QTkwRTdDNzIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RFU2SjQ3Q1FjZGJyckd3SjZYV00yRUdSY21TVTV0NTNCdjZFWEx5dGh5bmQvMC80 MEQ1QzNGNTVBRTA4Q0YzMEU0NjY4NDQ3RDFDNTE2OEE5MEU3QzcyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEATqPFTWn7/v7Y5Cec943Z+/8dF+MbBOK43KFdo5PHV1tZOHolNprdrwLuQQ+D kIzI9mVjoEgfG7hgYb1w+QKn2OG/oq7y1bAcmx+65hXTXcmqff38dx/jUEhj2nHx Kvmh6mRNzMtcUpgQKa/q+m3dsrQNQ93KKFko4BcFEfeb7piFFYkn76+QBteCIQqG uve/ZrZmrVSW8OLCFzA1jRPJ638mRJ3bRDlPAso4it6zhwy0l3lEIhgNYHnO471y XK3OUzlzb/uNOfgZg8bbzYnigwUP4JCYGqh6Ea5/4mCTjENsX3b2U9TM1CNHZq24 0t6mv0KCmMB11xkzGgv/wmHO9g== -----END CERTIFICATE-----Generated at Sun Aug 23 07:21:21 2026 by rpki-client