$ rpki-client -vvvf rpki-repo.registro.br/repo/HJindbE6S8b1HgmWqWqK93r1Twc6U8GbwPQSXykxdPSP/0/CA336EA2A2165CECAC40EB5F29E14BF0A1DDF0B9.mft File: CA336EA2A2165CECAC40EB5F29E14BF0A1DDF0B9.mft (raw, json) Hash identifier: zlyfVRKTFeoORQs4RjRUA7hXp1VVQr0BWD/5Dm7WYyk= Subject key identifier: 0A:98:6D:A4:CD:51:AB:F8:6A:FF:38:EC:6B:31:07:A2:DB:D9:5E:F0 Authority key identifier: CA:33:6E:A2:A2:16:5C:EC:AC:40:EB:5F:29:E1:4B:F0:A1:DD:F0:B9 Certificate issuer: /CN=CA336EA2A2165CECAC40EB5F29E14BF0A1DDF0B9 Certificate serial: 3405E02212CB08608EF7FD6971BEF1046055C088 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA336EA2A2165CECAC40EB5F29E14BF0A1DDF0B9.cer Subject info access: rsync://rpki-repo.registro.br/repo/HJindbE6S8b1HgmWqWqK93r1Twc6U8GbwPQSXykxdPSP/0/CA336EA2A2165CECAC40EB5F29E14BF0A1DDF0B9.mft Manifest number: 01A1 Signing time: Sat 22 Aug 2026 13:24:06 +0000 Manifest this update: Sat 22 Aug 2026 13:19:06 +0000 Manifest next update: Sun 23 Aug 2026 13:41:06 +0000 Files and hashes: 1: 3136382e302e33362e302f32322d3234203d3e20323635323434.roa (hash: oIH6yi7sSGDk1vAzgCfYR2J0+DP7VwZ9p5vQHsh0Q60=) 2: CA336EA2A2165CECAC40EB5F29E14BF0A1DDF0B9.crl (hash: nPvfoGWyLZdymzBvPostvQC4OJeZLe7Uh9T/zlngORQ=) 3: 323830343a326363633a3a2f33322d3336203d3e20323635323434.roa (hash: wIDnu+J18o0K4dHTA/4p4Ei5Q4YGV98gF8GQiDmQd4E=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HJindbE6S8b1HgmWqWqK93r1Twc6U8GbwPQSXykxdPSP/0/CA336EA2A2165CECAC40EB5F29E14BF0A1DDF0B9.crl rsync://rpki-repo.registro.br/repo/HJindbE6S8b1HgmWqWqK93r1Twc6U8GbwPQSXykxdPSP/0/CA336EA2A2165CECAC40EB5F29E14BF0A1DDF0B9.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA336EA2A2165CECAC40EB5F29E14BF0A1DDF0B9.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 23 Aug 2026 13:41:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:05:e0:22:12:cb:08:60:8e:f7:fd:69:71:be:f1:04:60:55:c0:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA336EA2A2165CECAC40EB5F29E14BF0A1DDF0B9 Validity Not Before: Aug 22 13:19:06 2026 GMT Not After : Aug 23 13:41:06 2026 GMT Subject: CN=0A986DA4CD51ABF86AFF38EC6B3107A2DBD95EF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:82:78:40:bb:8b:7a:cf:79:24:d8:34:c6:4e: 10:85:75:9b:ec:10:a0:7f:8b:46:9e:c1:e8:be:9c: 7a:f7:4c:8b:72:55:75:41:6b:fb:41:99:ba:03:36: d0:0c:de:17:53:0f:a4:56:c5:a0:a2:16:10:c1:80: 52:85:b7:dd:34:cb:68:0a:54:ac:09:e4:f3:fa:70: ec:62:02:76:98:d1:ff:ff:81:28:1f:e3:80:d5:12: 08:a8:80:e7:f3:e1:42:50:38:9e:56:56:1a:71:45: 4c:53:9b:d3:08:64:49:ad:37:03:b3:ba:96:3f:97: 06:29:b8:78:06:29:34:4c:bf:75:2f:cb:0f:f4:c3: ae:4b:79:f8:ac:58:ed:52:21:98:72:b7:3f:c1:28: 65:31:51:cd:a0:b4:4e:fa:d7:6a:8a:e5:2e:23:a7: f2:b2:97:2b:23:fd:bc:56:d7:de:15:3c:15:ec:cc: 77:47:39:05:de:ed:6b:03:83:5a:eb:6d:e3:9f:18: b3:51:5f:a4:c3:17:27:85:c7:74:ab:65:42:01:2a: 8a:50:21:9f:7b:60:ab:62:bd:6a:52:01:14:98:1e: d9:54:42:8f:ff:09:32:2e:2a:46:64:14:e1:02:29: 71:65:de:ca:54:d6:db:62:c1:8f:17:ee:1a:22:71: d4:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:98:6D:A4:CD:51:AB:F8:6A:FF:38:EC:6B:31:07:A2:DB:D9:5E:F0 X509v3 Authority Key Identifier: keyid:CA:33:6E:A2:A2:16:5C:EC:AC:40:EB:5F:29:E1:4B:F0:A1:DD:F0:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HJindbE6S8b1HgmWqWqK93r1Twc6U8GbwPQSXykxdPSP/0/CA336EA2A2165CECAC40EB5F29E14BF0A1DDF0B9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA336EA2A2165CECAC40EB5F29E14BF0A1DDF0B9.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HJindbE6S8b1HgmWqWqK93r1Twc6U8GbwPQSXykxdPSP/0/CA336EA2A2165CECAC40EB5F29E14BF0A1DDF0B9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:53:ca:c9:2f:d1:ea:55:fb:ef:5e:e1:4d:6f:31:ce:db:fb: 58:94:f0:32:aa:6a:85:58:1d:9a:5d:64:a4:96:b5:eb:83:ed: 8d:6b:c9:15:b3:1e:57:29:bc:9c:b2:b9:bf:09:2e:a7:85:30: e1:f4:9f:18:d0:4d:19:fc:d7:52:82:42:7e:0d:be:20:54:75: ea:85:25:65:30:6e:1a:7f:1e:09:07:ee:9f:dc:e9:4f:46:03: fe:03:dd:ac:71:8d:d9:51:f2:43:97:45:f2:5d:b5:1a:c8:61: b9:53:bc:f1:86:e3:02:95:d3:0a:7a:1b:49:57:7b:7f:74:f8: d4:b7:09:6f:5d:bd:03:87:34:2e:22:36:0a:76:7b:63:39:c0: 7f:ff:0a:c9:0b:e5:58:30:e1:58:da:fc:43:ce:f6:a7:5c:36: 8b:94:a8:f9:7c:bd:53:13:92:91:ca:80:92:c8:19:09:2b:a4: b4:84:2d:7a:c2:37:07:6a:32:96:3e:4a:08:63:3c:03:16:2f: e1:4a:d5:58:cc:96:8e:09:15:60:a0:1c:8e:00:7b:c4:6f:7c: a9:33:c3:03:50:8d:dd:bd:8c:56:dc:e7:c7:d9:1a:97:80:43: 49:d3:af:79:fd:4f:cf:fc:35:8a:ea:20:76:61:4e:e6:86:55: e0:a9:91:d0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUNAXgIhLLCGCO9/1pcb7xBGBVwIgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0EzMzZFQTJBMjE2NUNFQ0FDNDBFQjVGMjlFMTRCRjBB MURERjBCOTAeFw0yNjA4MjIxMzE5MDZaFw0yNjA4MjMxMzQxMDZaMDMxMTAvBgNV BAMTKDBBOTg2REE0Q0Q1MUFCRjg2QUZGMzhFQzZCMzEwN0EyREJEOTVFRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/gnhAu4t6z3kk2DTGThCFdZvs EKB/i0aewei+nHr3TItyVXVBa/tBmboDNtAM3hdTD6RWxaCiFhDBgFKFt900y2gK VKwJ5PP6cOxiAnaY0f//gSgf44DVEgiogOfz4UJQOJ5WVhpxRUxTm9MIZEmtNwOz upY/lwYpuHgGKTRMv3Uvyw/0w65LefisWO1SIZhytz/BKGUxUc2gtE7612qK5S4j p/Kylysj/bxW194VPBXszHdHOQXe7WsDg1rrbeOfGLNRX6TDFyeFx3SrZUIBKopQ IZ97YKtivWpSARSYHtlUQo//CTIuKkZkFOECKXFl3spU1ttiwY8X7hoicdRRAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUCphtpM1Rq/hq/zjsazEHotvZXvAwHwYDVR0j BBgwFoAUyjNuoqIWXOysQOtfKeFL8KHd8LkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSEppbmRiRTZTOGIxSGdtV3FXcUs5M3IxVHdjNlU4R2J3UFFTWHlreGRQ U1AvMC9DQTMzNkVBMkEyMTY1Q0VDQUM0MEVCNUYyOUUxNEJGMEExRERGMEI5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NBMzM2RUEyQTIxNjVDRUNB QzQwRUI1RjI5RTE0QkYwQTFEREYwQjkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SEppbmRiRTZTOGIxSGdtV3FXcUs5M3IxVHdjNlU4R2J3UFFTWHlreGRQU1AvMC9D QTMzNkVBMkEyMTY1Q0VDQUM0MEVCNUYyOUUxNEJGMEExRERGMEI5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgVPKyS/R6lX7717hTW8xztv7WJTwMqpqhVgdml1kpJa164PtjWvJFbMeVym8 nLK5vwkup4Uw4fSfGNBNGfzXUoJCfg2+IFR16oUlZTBuGn8eCQfun9zpT0YD/gPd rHGN2VHyQ5dF8l21GshhuVO88YbjApXTCnobSVd7f3T41LcJb129A4c0LiI2CnZ7 YznAf/8KyQvlWDDhWNr8Q872p1w2i5So+Xy9UxOSkcqAksgZCSuktIQtesI3B2oy lj5KCGM8AxYv4UrVWMyWjgkVYKAcjgB7xG98qTPDA1CN3b2MVtznx9kal4BDSdOv ef1Pz/w1iuogdmFO5oZV4KmR0A== -----END CERTIFICATE-----Generated at Sat Aug 22 22:52:54 2026 by rpki-client