$ rpki-client -vvvf rpki-repo.registro.br/repo/DYy4aJMPvzackkLHg4k9oHHHZ7gjnErkQPJUasvp6anN/1/8AD497903AB3566443C9C794694A61EFE427FA7A.mft File: 8AD497903AB3566443C9C794694A61EFE427FA7A.mft (raw, json) Hash identifier: 4T3ZWKCFDl6P8hT1087uUmUx2Z4UnLPeoE0lgPr5hzg= Subject key identifier: 81:28:D5:20:D6:CE:7B:77:68:6A:55:D5:A8:71:C8:28:C9:31:AF:97 Authority key identifier: 8A:D4:97:90:3A:B3:56:64:43:C9:C7:94:69:4A:61:EF:E4:27:FA:7A Certificate issuer: /CN=8AD497903AB3566443C9C794694A61EFE427FA7A Certificate serial: 6A8FFAA7F6FFD1C396ECBD46377F83E19A69249D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AD497903AB3566443C9C794694A61EFE427FA7A.cer Subject info access: rsync://rpki-repo.registro.br/repo/DYy4aJMPvzackkLHg4k9oHHHZ7gjnErkQPJUasvp6anN/1/8AD497903AB3566443C9C794694A61EFE427FA7A.mft Manifest number: 0491 Signing time: Tue 25 Aug 2026 00:03:15 +0000 Manifest this update: Mon 24 Aug 2026 23:58:15 +0000 Manifest next update: Wed 26 Aug 2026 02:37:15 +0000 Files and hashes: 1: 323830343a383630343a383030303a3a2f33332d3333203d3e20323732363134.roa (hash: udfpslgXWllHlVhUhwYULsf1Bac3lsTLTBZvpUx96iA=) 2: 8AD497903AB3566443C9C794694A61EFE427FA7A.crl (hash: 57OGJ4obealSiZxtKjN1Qio4pARukjmlGCsXt5w47S0=) 3: 323830343a383630343a3a2f33322d3332203d3e20323732363134.roa (hash: vZGx2lypgvST/TN3BIHEMwmdhDBKDrZm/OU2px4pQ/U=) 4: 323830343a383630343a3a2f33332d3333203d3e20323732363134.roa (hash: xAJr0E9r4TKMxFOmg5cmoGsA01fiIOH+qeMsQLuKev4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DYy4aJMPvzackkLHg4k9oHHHZ7gjnErkQPJUasvp6anN/1/8AD497903AB3566443C9C794694A61EFE427FA7A.crl rsync://rpki-repo.registro.br/repo/DYy4aJMPvzackkLHg4k9oHHHZ7gjnErkQPJUasvp6anN/1/8AD497903AB3566443C9C794694A61EFE427FA7A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AD497903AB3566443C9C794694A61EFE427FA7A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 26 Aug 2026 02:37:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:8f:fa:a7:f6:ff:d1:c3:96:ec:bd:46:37:7f:83:e1:9a:69:24:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AD497903AB3566443C9C794694A61EFE427FA7A Validity Not Before: Aug 24 23:58:15 2026 GMT Not After : Aug 26 02:37:15 2026 GMT Subject: CN=8128D520D6CE7B77686A55D5A871C828C931AF97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:e6:45:ea:e8:04:14:58:46:a9:88:d2:74:d4: 00:c8:29:c2:85:d8:c9:7d:03:94:d1:b1:dd:a7:e7: 03:49:49:51:b9:c8:d8:95:21:a9:b0:13:c8:b0:9a: b7:08:6c:a1:90:4a:e3:fb:3b:0e:1b:d7:ee:40:a4: 88:d5:3b:33:76:2f:66:9d:d3:9e:29:09:05:69:bc: 7a:45:29:35:90:23:67:93:31:98:1e:3c:09:4f:fe: e8:69:2b:73:9f:9a:ee:d2:f6:5b:37:12:68:71:98: 16:57:96:c4:20:d3:9f:77:84:21:e5:75:28:3e:3c: 29:03:74:d0:e7:ea:73:01:a6:ae:5b:4a:4c:4e:e8: cd:4c:3b:13:76:f3:45:e6:66:1f:8a:6d:7a:eb:da: bb:89:4a:b7:91:d2:50:3f:52:5d:62:35:62:d3:d3: 7c:5f:0c:e9:ac:68:bc:28:0e:29:6f:1a:eb:4a:ce: 1e:87:c4:96:87:65:6e:ad:db:da:81:3b:db:1d:2b: 67:69:05:24:39:14:24:cb:3e:d2:91:22:e2:b4:5d: 79:9f:19:f7:12:95:0f:bb:8b:fa:2b:65:44:50:69: 3c:9c:61:58:d8:40:af:30:b5:28:70:46:d6:3c:f6: 1c:b6:36:63:72:1f:25:95:3a:32:99:31:bb:b7:1b: ac:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:28:D5:20:D6:CE:7B:77:68:6A:55:D5:A8:71:C8:28:C9:31:AF:97 X509v3 Authority Key Identifier: keyid:8A:D4:97:90:3A:B3:56:64:43:C9:C7:94:69:4A:61:EF:E4:27:FA:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DYy4aJMPvzackkLHg4k9oHHHZ7gjnErkQPJUasvp6anN/1/8AD497903AB3566443C9C794694A61EFE427FA7A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AD497903AB3566443C9C794694A61EFE427FA7A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DYy4aJMPvzackkLHg4k9oHHHZ7gjnErkQPJUasvp6anN/1/8AD497903AB3566443C9C794694A61EFE427FA7A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:4b:b5:f5:99:80:83:bb:9c:af:e6:a3:8b:86:c3:5b:64:ad: 3f:9c:af:95:a8:b8:89:0b:ff:a5:22:58:5d:c6:a4:4b:21:4e: 00:22:3e:e6:d9:0a:e4:40:f0:95:6d:93:54:08:90:ff:4e:64: 30:da:ee:95:be:37:53:92:35:23:54:f9:cc:b2:42:b9:63:b1: fb:76:7c:fd:e4:68:61:61:8d:bf:e3:de:d9:b2:a9:f2:6b:cf: 88:78:53:5f:a3:6b:6b:f8:45:7b:62:ee:72:25:bf:ff:12:d5: c1:9d:f3:00:3e:fc:69:6d:1e:01:02:fa:32:37:21:c4:0b:d3: 30:7c:cc:5f:2c:45:38:ab:f9:14:60:33:2c:e3:b8:3a:c5:d0: af:0b:18:67:d9:42:62:44:fe:f7:58:95:7c:69:4e:fb:39:80: 5d:55:d1:5d:b3:02:83:d5:18:13:28:e9:2e:5a:55:3b:53:6e: 3b:01:e9:90:5c:c6:f0:f0:ff:41:97:84:db:92:13:f1:74:3a: b2:ee:2b:8f:ac:48:31:34:5f:10:b2:86:5a:13:a6:98:5a:24: da:47:74:87:d9:10:b5:d5:08:23:a0:d1:f0:f8:1d:aa:ef:8d: df:d1:f2:48:49:e0:19:e4:f5:66:c4:7a:a5:00:05:85:e6:8b: a1:dd:c1:4e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUao/6p/b/0cOW7L1GN3+D4ZppJJ0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEFENDk3OTAzQUIzNTY2NDQzQzlDNzk0Njk0QTYxRUZF NDI3RkE3QTAeFw0yNjA4MjQyMzU4MTVaFw0yNjA4MjYwMjM3MTVaMDMxMTAvBgNV BAMTKDgxMjhENTIwRDZDRTdCNzc2ODZBNTVENUE4NzFDODI4QzkzMUFGOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDi5kXq6AQUWEapiNJ01ADIKcKF 2Ml9A5TRsd2n5wNJSVG5yNiVIamwE8iwmrcIbKGQSuP7Ow4b1+5ApIjVOzN2L2ad 054pCQVpvHpFKTWQI2eTMZgePAlP/uhpK3Ofmu7S9ls3EmhxmBZXlsQg0593hCHl dSg+PCkDdNDn6nMBpq5bSkxO6M1MOxN280XmZh+KbXrr2ruJSreR0lA/Ul1iNWLT 03xfDOmsaLwoDilvGutKzh6HxJaHZW6t29qBO9sdK2dpBSQ5FCTLPtKRIuK0XXmf GfcSlQ+7i/orZURQaTycYVjYQK8wtShwRtY89hy2NmNyHyWVOjKZMbu3G6xtAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUgSjVINbOe3doalXVqHHIKMkxr5cwHwYDVR0j BBgwFoAUitSXkDqzVmRDyceUaUph7+Qn+nowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRFl5NGFKTVB2emFja2tMSGc0azlvSEhIWjdnam5FcmtRUEpVYXN2cDZh bk4vMS84QUQ0OTc5MDNBQjM1NjY0NDNDOUM3OTQ2OTRBNjFFRkU0MjdGQTdBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhBRDQ5NzkwM0FCMzU2NjQ0 M0M5Qzc5NDY5NEE2MUVGRTQyN0ZBN0EuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RFl5NGFKTVB2emFja2tMSGc0azlvSEhIWjdnam5FcmtRUEpVYXN2cDZhbk4vMS84 QUQ0OTc5MDNBQjM1NjY0NDNDOUM3OTQ2OTRBNjFFRkU0MjdGQTdBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjEu19ZmAg7ucr+aji4bDW2StP5yvlai4iQv/pSJYXcakSyFOACI+5tkK5EDw lW2TVAiQ/05kMNrulb43U5I1I1T5zLJCuWOx+3Z8/eRoYWGNv+Pe2bKp8mvPiHhT X6Nra/hFe2LuciW//xLVwZ3zAD78aW0eAQL6MjchxAvTMHzMXyxFOKv5FGAzLOO4 OsXQrwsYZ9lCYkT+91iVfGlO+zmAXVXRXbMCg9UYEyjpLlpVO1NuOwHpkFzG8PD/ QZeE25IT8XQ6su4rj6xIMTRfELKGWhOmmFok2kd0h9kQtdUII6DR8Pgdqu+N39Hy SEngGeT1ZsR6pQAFheaLod3BTg== -----END CERTIFICATE-----Generated at Tue Aug 25 09:49:09 2026 by rpki-client