$ rpki-client -vvvf rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/0/2159A2A607956D399271CDC6A3AC1E80617FEEE1.mft File: 2159A2A607956D399271CDC6A3AC1E80617FEEE1.mft (raw, json) Hash identifier: OM23PHeyvJbm0LrNwYHsHXFo119KDwYKkRnvIgQHSho= Subject key identifier: 81:2D:D3:3C:C9:89:C7:65:FD:73:F4:00:70:ED:0E:CE:D5:58:CD:01 Authority key identifier: 21:59:A2:A6:07:95:6D:39:92:71:CD:C6:A3:AC:1E:80:61:7F:EE:E1 Certificate issuer: /CN=2159A2A607956D399271CDC6A3AC1E80617FEEE1 Certificate serial: 521CECF4798D2C7F7206052BB36C55B93DA81CF7 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2159A2A607956D399271CDC6A3AC1E80617FEEE1.cer Subject info access: rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/0/2159A2A607956D399271CDC6A3AC1E80617FEEE1.mft Manifest number: 8A Signing time: Mon 24 Aug 2026 12:49:30 +0000 Manifest this update: Mon 24 Aug 2026 12:44:30 +0000 Manifest next update: Tue 25 Aug 2026 16:09:30 +0000 Files and hashes: 1: 3137372e33382e3138342e302f32312d3234203d3e203532373538.roa (hash: 3GyCzw9okLmCV3Lo5NKPmIHHgFYBF0+I3/BzpS37XJo=) 2: 2159A2A607956D399271CDC6A3AC1E80617FEEE1.crl (hash: GljUoEQrls3BlSHlsBEElFY2y65uwsUiIqUiIHoNTho=) 3: 323830343a6233383a3a2f33322d3438203d3e203532373538.roa (hash: yFx3ehbs6kD1O83Pz1zQ+DNga8Y7rEsJ/HhUCporP4Y=) 4: 3230312e3133312e3234302e302f32312d3234203d3e203532373538.roa (hash: C3+R5TJjILqRWqKKZFKMcGNRlcVwLelyy+SPnF/wG10=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/0/2159A2A607956D399271CDC6A3AC1E80617FEEE1.crl rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/0/2159A2A607956D399271CDC6A3AC1E80617FEEE1.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2159A2A607956D399271CDC6A3AC1E80617FEEE1.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 25 Aug 2026 16:09:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:1c:ec:f4:79:8d:2c:7f:72:06:05:2b:b3:6c:55:b9:3d:a8:1c:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2159A2A607956D399271CDC6A3AC1E80617FEEE1 Validity Not Before: Aug 24 12:44:30 2026 GMT Not After : Aug 25 16:09:30 2026 GMT Subject: CN=812DD33CC989C765FD73F40070ED0ECED558CD01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c5:1d:55:f3:e7:1a:3c:84:16:96:8d:0f:79: 1c:34:c8:d8:1b:6a:6c:6a:39:6d:73:c0:be:56:1a: 28:30:56:b0:83:47:36:99:49:18:f7:1e:54:d2:d7: e7:62:f6:6a:af:dd:ac:89:f1:95:51:24:2d:5d:b5: bb:1c:05:52:74:6f:25:8a:e2:6b:30:2a:cc:4e:13: 31:57:03:5b:05:a1:e1:c5:43:b9:82:3f:69:50:f7: c4:33:3c:c1:59:59:6f:a3:d1:20:99:48:30:70:7d: 56:e6:d3:39:6c:20:a5:1e:23:b9:37:01:dd:86:f5: 2c:1d:80:5a:b7:5e:97:ad:31:a7:6e:dc:1b:3a:a1: ff:f3:63:60:1e:5b:2f:e6:64:fa:49:56:77:74:c9: 08:37:2e:a6:a0:38:26:51:43:be:f7:e2:9b:0a:65: fe:b3:61:ec:01:f3:56:1d:78:78:96:fa:82:7f:f5: 2e:e7:a8:8e:b6:34:95:cf:5f:f0:31:56:4c:cd:3e: e3:17:ff:d4:a0:e8:fb:e5:9f:5c:14:76:ca:f2:56: 53:b6:6b:a0:96:8e:a4:a4:9b:b3:b4:82:dc:65:8c: eb:ab:12:67:2d:e4:77:cc:53:7f:ed:be:c5:b4:f9: ca:6e:6e:8f:8f:3d:7b:7b:e9:16:66:66:34:53:d7: 36:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:2D:D3:3C:C9:89:C7:65:FD:73:F4:00:70:ED:0E:CE:D5:58:CD:01 X509v3 Authority Key Identifier: keyid:21:59:A2:A6:07:95:6D:39:92:71:CD:C6:A3:AC:1E:80:61:7F:EE:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/0/2159A2A607956D399271CDC6A3AC1E80617FEEE1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2159A2A607956D399271CDC6A3AC1E80617FEEE1.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/0/2159A2A607956D399271CDC6A3AC1E80617FEEE1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:da:a3:33:c3:fb:3d:3e:85:f4:02:cf:f6:4b:dc:30:c7:fa: 6e:4e:a8:97:cd:73:a7:f9:d8:3f:c9:da:01:66:85:0a:df:2f: a8:24:6a:7d:f9:57:7e:01:09:50:c2:4c:02:68:11:19:0b:ad: 93:00:2b:53:ba:4e:02:d7:ed:92:ba:41:46:d3:2f:4b:10:b3: 8c:4f:92:59:e3:c2:12:3a:49:82:07:a9:f1:72:19:91:6e:69: 47:d2:44:29:ea:35:05:e0:f2:1a:2a:09:67:3c:3c:ec:97:eb: bc:9c:e9:78:0d:2a:49:96:18:d4:eb:45:09:9e:9f:56:79:0a: 7f:4b:dd:81:16:34:15:a4:8d:e0:59:5e:44:9e:17:6e:31:45: 5c:44:1e:81:ef:b5:23:cd:69:ca:f7:dd:52:f0:cb:cc:64:1b: c1:43:a0:89:60:d3:42:26:03:32:2a:d2:11:94:5b:f0:8a:d8: 3a:ab:b9:ea:45:f7:2e:54:fc:2f:b8:76:b5:f6:3c:89:b4:f3: 50:0d:c6:0e:8f:ae:12:61:85:73:19:4d:7a:f3:84:9d:d0:70: 9b:06:22:ef:42:6b:4e:02:1a:5d:7c:8f:db:81:2b:2a:2f:95: 55:55:e1:6d:53:d9:53:59:8a:12:da:9a:11:d9:94:61:c4:be: 05:db:f5:c0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUUhzs9HmNLH9yBgUrs2xVuT2oHPcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE1OUEyQTYwNzk1NkQzOTkyNzFDREM2QTNBQzFFODA2 MTdGRUVFMTAeFw0yNjA4MjQxMjQ0MzBaFw0yNjA4MjUxNjA5MzBaMDMxMTAvBgNV BAMTKDgxMkREMzNDQzk4OUM3NjVGRDczRjQwMDcwRUQwRUNFRDU1OENEMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3xR1V8+caPIQWlo0PeRw0yNgb amxqOW1zwL5WGigwVrCDRzaZSRj3HlTS1+di9mqv3ayJ8ZVRJC1dtbscBVJ0byWK 4mswKsxOEzFXA1sFoeHFQ7mCP2lQ98QzPMFZWW+j0SCZSDBwfVbm0zlsIKUeI7k3 Ad2G9SwdgFq3XpetMadu3Bs6of/zY2AeWy/mZPpJVnd0yQg3LqagOCZRQ7734psK Zf6zYewB81YdeHiW+oJ/9S7nqI62NJXPX/AxVkzNPuMX/9Sg6Pvln1wUdsryVlO2 a6CWjqSkm7O0gtxljOurEmct5HfMU3/tvsW0+cpubo+PPXt76RZmZjRT1zZJAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUgS3TPMmJx2X9c/QAcO0OztVYzQEwHwYDVR0j BBgwFoAUIVmipgeVbTmScc3Go6wegGF/7uEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR25yREU2MTdxa2ppN2o0ODVtdXR1OWRXNkFhd3BvVlN5UzNqYVR4YjR1 c2gvMC8yMTU5QTJBNjA3OTU2RDM5OTI3MUNEQzZBM0FDMUU4MDYxN0ZFRUUxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIxNTlBMkE2MDc5NTZEMzk5 MjcxQ0RDNkEzQUMxRTgwNjE3RkVFRTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R25yREU2MTdxa2ppN2o0ODVtdXR1OWRXNkFhd3BvVlN5UzNqYVR4YjR1c2gvMC8y MTU5QTJBNjA3OTU2RDM5OTI3MUNEQzZBM0FDMUU4MDYxN0ZFRUUxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAStqjM8P7PT6F9ALP9kvcMMf6bk6ol81zp/nYP8naAWaFCt8vqCRqfflXfgEJ UMJMAmgRGQutkwArU7pOAtftkrpBRtMvSxCzjE+SWePCEjpJggep8XIZkW5pR9JE Keo1BeDyGioJZzw87JfrvJzpeA0qSZYY1OtFCZ6fVnkKf0vdgRY0FaSN4FleRJ4X bjFFXEQege+1I81pyvfdUvDLzGQbwUOgiWDTQiYDMirSEZRb8IrYOqu56kX3LlT8 L7h2tfY8ibTzUA3GDo+uEmGFcxlNevOEndBwmwYi70JrTgIaXXyP24ErKi+VVVXh bVPZU1mKEtqaEdmUYcS+Bdv1wA== -----END CERTIFICATE-----Generated at Mon Aug 24 19:38:47 2026 by rpki-client