$ rpki-client -vvvf rpki-repo.registro.br/repo/HKu16qqsQ6qXNXr7pKfnsjVhAPLzmHuHeBTQonNX6t1J/0/DBE1CEEFD3F3F2C6EFED441B9E6C10E43F9DB86E.mft File: DBE1CEEFD3F3F2C6EFED441B9E6C10E43F9DB86E.mft (raw, json) Hash identifier: DHeQwDFatkwKUSQIvZi7C7O29LjEFyczTh1r9yPLkWo= Subject key identifier: 0D:9D:81:57:69:77:64:61:9F:F4:8B:C9:FF:F7:EF:11:A1:5D:C6:E4 Authority key identifier: DB:E1:CE:EF:D3:F3:F2:C6:EF:ED:44:1B:9E:6C:10:E4:3F:9D:B8:6E Certificate issuer: /CN=DBE1CEEFD3F3F2C6EFED441B9E6C10E43F9DB86E Certificate serial: 1B215DBACF130A9B83122BB82F49BA4411435A10 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBE1CEEFD3F3F2C6EFED441B9E6C10E43F9DB86E.cer Subject info access: rsync://rpki-repo.registro.br/repo/HKu16qqsQ6qXNXr7pKfnsjVhAPLzmHuHeBTQonNX6t1J/0/DBE1CEEFD3F3F2C6EFED441B9E6C10E43F9DB86E.mft Manifest number: 0463 Signing time: Sat 22 Aug 2026 14:46:05 +0000 Manifest this update: Sat 22 Aug 2026 14:41:05 +0000 Manifest next update: Sun 23 Aug 2026 18:44:05 +0000 Files and hashes: 1: DBE1CEEFD3F3F2C6EFED441B9E6C10E43F9DB86E.crl (hash: Nml/JZF+YoJ+Y/psIk73IgQL212Ey4mzv3/Gepvk110=) 2: 34352e3138382e38322e302f32332d3233203d3e20323639353837.roa (hash: R6RssLpKWot0a49hOgE0hMKMGpNaG8/pMf4C2QMLYlU=) 3: 34352e3138382e38332e302f32342d3234203d3e20323639353837.roa (hash: Q3dMZW4m0i8ZEtk/e/iL3FIayWVGHMUwvvB2YivyJDc=) 4: 34352e3138382e38322e302f32342d3234203d3e20323639353837.roa (hash: r5YW7FnYvvc1jpDgXF0uoaCEs5pkSIJLqsD5iBPxR9E=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HKu16qqsQ6qXNXr7pKfnsjVhAPLzmHuHeBTQonNX6t1J/0/DBE1CEEFD3F3F2C6EFED441B9E6C10E43F9DB86E.crl rsync://rpki-repo.registro.br/repo/HKu16qqsQ6qXNXr7pKfnsjVhAPLzmHuHeBTQonNX6t1J/0/DBE1CEEFD3F3F2C6EFED441B9E6C10E43F9DB86E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBE1CEEFD3F3F2C6EFED441B9E6C10E43F9DB86E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 23 Aug 2026 18:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:21:5d:ba:cf:13:0a:9b:83:12:2b:b8:2f:49:ba:44:11:43:5a:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DBE1CEEFD3F3F2C6EFED441B9E6C10E43F9DB86E Validity Not Before: Aug 22 14:41:05 2026 GMT Not After : Aug 23 18:44:05 2026 GMT Subject: CN=0D9D8157697764619FF48BC9FFF7EF11A15DC6E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:59:97:61:ec:74:89:2b:bb:4c:e3:38:bb:76: f8:53:6f:71:15:46:f0:16:50:4a:2d:c1:01:a4:0b: 2d:d6:31:82:33:d3:2a:49:0a:01:3a:31:28:a1:8d: 6c:67:41:d6:6c:33:b8:5e:39:41:71:ec:ac:28:a7: 07:34:63:00:b8:c8:de:bd:0c:12:db:29:46:56:41: cf:a8:37:b0:95:f0:e2:c1:86:0b:fa:2f:0e:fd:be: d1:97:0b:99:44:73:f2:a8:3e:c5:7b:02:f7:be:9d: df:37:7b:61:57:c6:f9:bd:ce:20:5e:46:c8:cc:48: 94:bb:43:b1:1d:58:1e:df:08:62:9d:d6:5b:ad:6f: 65:27:67:4a:9d:da:a4:29:5d:53:04:ea:1f:cf:8e: 81:a3:8b:9d:b3:b5:4c:5a:89:b0:1e:f1:e6:7f:e1: 49:13:22:c4:73:6f:40:ce:77:dc:15:79:59:bb:bd: 20:83:06:89:88:69:84:19:4f:3d:d3:53:00:7a:14: da:fe:d0:d2:ae:03:64:96:36:8a:cb:ab:85:9e:57: c9:b1:5a:bf:bf:5a:b6:72:dd:4b:d9:90:f4:60:10: 3c:ba:95:b8:23:34:66:e2:d9:88:77:d2:95:7a:7b: be:dd:36:1a:54:fc:8c:0d:04:e9:50:2e:bc:37:4b: 9b:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:9D:81:57:69:77:64:61:9F:F4:8B:C9:FF:F7:EF:11:A1:5D:C6:E4 X509v3 Authority Key Identifier: keyid:DB:E1:CE:EF:D3:F3:F2:C6:EF:ED:44:1B:9E:6C:10:E4:3F:9D:B8:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HKu16qqsQ6qXNXr7pKfnsjVhAPLzmHuHeBTQonNX6t1J/0/DBE1CEEFD3F3F2C6EFED441B9E6C10E43F9DB86E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBE1CEEFD3F3F2C6EFED441B9E6C10E43F9DB86E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HKu16qqsQ6qXNXr7pKfnsjVhAPLzmHuHeBTQonNX6t1J/0/DBE1CEEFD3F3F2C6EFED441B9E6C10E43F9DB86E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:5a:e9:91:31:1a:fd:86:de:9b:4c:3c:7d:64:d8:d4:bf:50: 08:a0:5f:9d:3c:6d:37:18:f9:88:f3:92:7f:a2:82:88:4d:f3: 65:25:47:a6:62:18:9f:85:39:3d:ec:84:3f:b5:5c:ca:39:7c: ad:94:63:84:c3:7f:11:97:e3:74:8c:28:91:47:1d:c6:06:7a: f5:c2:9a:62:09:f9:5e:4d:98:e2:0a:2c:e5:3e:45:51:a9:85: 26:54:e2:a5:65:e6:3e:aa:21:25:57:fc:b3:35:cc:8f:53:88: 11:db:ca:c9:aa:c6:08:91:dd:6c:3d:e5:9a:2c:d8:14:3f:bf: 53:ec:67:8e:f3:0c:72:4c:51:ee:b7:d8:29:f2:97:64:a9:a6: d8:4c:93:ff:27:48:fe:89:f9:0b:2e:87:26:24:10:4b:0a:e9: ca:20:06:7b:80:52:62:79:17:d8:b4:c5:fe:81:4a:f3:4c:31: 02:bd:4d:aa:8b:df:4d:12:f1:3e:a6:9d:94:54:53:b1:5d:c7: 11:45:fe:c1:16:d1:c9:85:46:8b:28:3a:cd:74:5f:3a:30:fd: 5b:d8:d8:eb:b9:3c:c8:53:a2:37:e5:e8:45:83:66:cb:d2:dc: e1:ef:97:26:7f:3f:9d:7d:60:af:97:3f:c6:38:35:a7:9e:1b: 73:a4:40:b4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUGyFdus8TCpuDEiu4L0m6RBFDWhAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREJFMUNFRUZEM0YzRjJDNkVGRUQ0NDFCOUU2QzEwRTQz RjlEQjg2RTAeFw0yNjA4MjIxNDQxMDVaFw0yNjA4MjMxODQ0MDVaMDMxMTAvBgNV BAMTKDBEOUQ4MTU3Njk3NzY0NjE5RkY0OEJDOUZGRjdFRjExQTE1REM2RTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6WZdh7HSJK7tM4zi7dvhTb3EV RvAWUEotwQGkCy3WMYIz0ypJCgE6MSihjWxnQdZsM7heOUFx7Kwopwc0YwC4yN69 DBLbKUZWQc+oN7CV8OLBhgv6Lw79vtGXC5lEc/KoPsV7Ave+nd83e2FXxvm9ziBe RsjMSJS7Q7EdWB7fCGKd1lutb2UnZ0qd2qQpXVME6h/PjoGji52ztUxaibAe8eZ/ 4UkTIsRzb0DOd9wVeVm7vSCDBomIaYQZTz3TUwB6FNr+0NKuA2SWNorLq4WeV8mx Wr+/WrZy3UvZkPRgEDy6lbgjNGbi2Yh30pV6e77dNhpU/IwNBOlQLrw3S5uJAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUDZ2BV2l3ZGGf9IvJ//fvEaFdxuQwHwYDVR0j BBgwFoAU2+HO79Pz8sbv7UQbnmwQ5D+duG4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSEt1MTZxcXNRNnFYTlhyN3BLZm5zalZoQVBMem1IdUhlQlRRb25OWDZ0 MUovMC9EQkUxQ0VFRkQzRjNGMkM2RUZFRDQ0MUI5RTZDMTBFNDNGOURCODZFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RCRTFDRUVGRDNGM0YyQzZF RkVENDQxQjlFNkMxMEU0M0Y5REI4NkUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SEt1MTZxcXNRNnFYTlhyN3BLZm5zalZoQVBMem1IdUhlQlRRb25OWDZ0MUovMC9E QkUxQ0VFRkQzRjNGMkM2RUZFRDQ0MUI5RTZDMTBFNDNGOURCODZFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkFrpkTEa/Ybem0w8fWTY1L9QCKBfnTxtNxj5iPOSf6KCiE3zZSVHpmIYn4U5 PeyEP7Vcyjl8rZRjhMN/EZfjdIwokUcdxgZ69cKaYgn5Xk2Y4gos5T5FUamFJlTi pWXmPqohJVf8szXMj1OIEdvKyarGCJHdbD3lmizYFD+/U+xnjvMMckxR7rfYKfKX ZKmm2EyT/ydI/on5Cy6HJiQQSwrpyiAGe4BSYnkX2LTF/oFK80wxAr1NqovfTRLx PqadlFRTsV3HEUX+wRbRyYVGiyg6zXRfOjD9W9jY67k8yFOiN+XoRYNmy9Lc4e+X Jn8/nX1gr5c/xjg1p54bc6RAtA== -----END CERTIFICATE-----Generated at Sun Aug 23 04:55:58 2026 by rpki-client