$ rpki-client -vvvf rpki-repo.registro.br/repo/HLAfbLhAenLQ9t3AP35NCibj3HYeqFL8Kz3on3WpoYSE/0/FAF093F291860536EFFC93934E77DC96693302DB.mft File: FAF093F291860536EFFC93934E77DC96693302DB.mft (raw, json) Hash identifier: 8NWrYdAXNlOttW6LaEMzMsQdykd/KcJnM8YH8G59+dg= Subject key identifier: 18:71:4A:21:88:F6:D7:7F:2A:C5:FE:7E:B5:89:48:74:DB:DF:9D:C9 Authority key identifier: FA:F0:93:F2:91:86:05:36:EF:FC:93:93:4E:77:DC:96:69:33:02:DB Certificate issuer: /CN=FAF093F291860536EFFC93934E77DC96693302DB Certificate serial: 69FA88911928454ECA7B903F1B9C0EA3C3967DCD Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAF093F291860536EFFC93934E77DC96693302DB.cer Subject info access: rsync://rpki-repo.registro.br/repo/HLAfbLhAenLQ9t3AP35NCibj3HYeqFL8Kz3on3WpoYSE/0/FAF093F291860536EFFC93934E77DC96693302DB.mft Manifest number: 033B Signing time: Sun 23 Aug 2026 02:08:59 +0000 Manifest this update: Sun 23 Aug 2026 02:03:59 +0000 Manifest next update: Mon 24 Aug 2026 04:38:59 +0000 Files and hashes: 1: 323830343a323833343a3a2f33322d3334203d3e20323633393437.roa (hash: kfg2dpneGGmCrUHXsBibXZqTKYQRGTWgwu5Dg9g6PyU=) 2: 3133382e3235352e31352e302f32342d3234203d3e20323633393437.roa (hash: uQ2hTKKN6Qzw9x/PKbUfxmURwLfodfxJcvZkF9+RONE=) 3: FAF093F291860536EFFC93934E77DC96693302DB.crl (hash: IFOqAcYeU5KNMyVkV4GInm2vNM7j2PfMhtprVbpu0io=) 4: 3133382e3235352e31322e302f32332d3234203d3e20323633393437.roa (hash: dbJPXyrTCsLpCzcijXf9A1x/KHQUtPR++8OB+EdCqkQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HLAfbLhAenLQ9t3AP35NCibj3HYeqFL8Kz3on3WpoYSE/0/FAF093F291860536EFFC93934E77DC96693302DB.crl rsync://rpki-repo.registro.br/repo/HLAfbLhAenLQ9t3AP35NCibj3HYeqFL8Kz3on3WpoYSE/0/FAF093F291860536EFFC93934E77DC96693302DB.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAF093F291860536EFFC93934E77DC96693302DB.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 24 Aug 2026 04:38:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:fa:88:91:19:28:45:4e:ca:7b:90:3f:1b:9c:0e:a3:c3:96:7d:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FAF093F291860536EFFC93934E77DC96693302DB Validity Not Before: Aug 23 02:03:59 2026 GMT Not After : Aug 24 04:38:59 2026 GMT Subject: CN=18714A2188F6D77F2AC5FE7EB5894874DBDF9DC9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:eb:fd:04:5f:f6:3c:c1:b0:3c:9e:67:fb:66: 6d:13:d9:43:0d:d5:db:5b:d3:18:d1:d3:3d:7e:51: fb:31:2f:9b:ba:21:a1:5a:db:2d:dd:92:9d:d5:9d: 6c:74:7a:33:11:37:e8:c5:45:3d:a2:5a:ba:a4:80: 4d:6f:b5:fd:e1:80:7c:81:8d:a5:c1:3f:3d:36:7e: 7a:13:d8:ea:2a:5e:75:6c:34:50:6b:4c:b6:d5:ea: 37:07:8c:85:fe:b8:43:ae:54:ea:17:36:87:af:2e: 6c:8e:3e:58:59:46:34:ab:b0:ce:50:7b:31:e8:57: 45:2c:1d:46:3d:35:73:78:65:a8:29:69:ee:5d:0b: ee:b1:42:27:7b:e7:89:bf:51:9d:c9:44:7a:8b:8b: e1:42:62:0f:82:a9:03:7c:f8:ac:e6:b0:32:28:34: 3b:ce:c5:6d:f3:15:6e:e6:e3:38:d7:25:06:d8:82: 1d:c5:db:ab:75:e5:84:36:9b:35:54:48:93:50:45: d2:6d:35:62:cc:05:09:0f:83:52:88:8e:8e:2e:af: 02:ca:11:b2:1d:29:41:6e:3a:c6:9b:b1:76:84:50: 23:d7:7f:0a:11:36:ae:60:6f:7d:9f:74:8d:c6:36: fe:1b:da:7f:4f:6f:6f:28:8e:18:72:a1:4f:74:1f: 9d:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:71:4A:21:88:F6:D7:7F:2A:C5:FE:7E:B5:89:48:74:DB:DF:9D:C9 X509v3 Authority Key Identifier: keyid:FA:F0:93:F2:91:86:05:36:EF:FC:93:93:4E:77:DC:96:69:33:02:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HLAfbLhAenLQ9t3AP35NCibj3HYeqFL8Kz3on3WpoYSE/0/FAF093F291860536EFFC93934E77DC96693302DB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAF093F291860536EFFC93934E77DC96693302DB.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HLAfbLhAenLQ9t3AP35NCibj3HYeqFL8Kz3on3WpoYSE/0/FAF093F291860536EFFC93934E77DC96693302DB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:2b:d2:ca:e9:f3:6c:e6:62:07:a1:56:28:f6:24:3a:87:84: 10:99:12:cf:ce:2a:76:cc:f3:de:66:50:d9:0f:47:a5:df:10: 6b:13:f3:df:0f:86:61:89:57:99:9b:84:5c:92:0a:d8:8c:a6: 01:94:ec:de:d4:bd:1a:bb:87:62:ce:4e:b7:ed:e0:f9:3a:4b: 2b:2f:43:8f:76:46:4f:30:3d:7b:1d:db:7c:63:9d:ea:c6:e8: 89:8b:f0:73:fc:ac:2c:b9:41:a3:86:37:7d:cd:a8:f3:56:97: 79:4b:8e:1f:66:38:b2:cf:37:80:07:d2:28:48:69:1c:41:20: 25:09:b6:4f:45:3c:7c:2a:39:53:05:d6:60:74:8d:f3:b5:cf: b4:13:cd:b0:b3:51:d4:02:83:ea:4f:3e:d1:e9:14:0b:ca:9e: 92:be:41:61:c7:f6:d4:48:8a:a4:1a:ca:49:ba:3e:f6:d9:22: ec:db:ae:02:37:9d:6f:5f:68:8c:ba:0d:b7:6a:9f:ef:b5:71: 00:dd:9d:37:ac:76:02:8d:d1:de:a4:ed:13:ce:3e:a7:d0:a3: f9:cd:b0:2f:f9:d2:40:a6:23:53:d3:06:82:27:dc:7f:4a:20: 46:ac:e5:a8:fc:51:00:dd:41:83:33:39:80:20:fd:d8:ff:9b: 46:c5:a0:db -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUafqIkRkoRU7Ke5A/G5wOo8OWfc0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkFGMDkzRjI5MTg2MDUzNkVGRkM5MzkzNEU3N0RDOTY2 OTMzMDJEQjAeFw0yNjA4MjMwMjAzNTlaFw0yNjA4MjQwNDM4NTlaMDMxMTAvBgNV BAMTKDE4NzE0QTIxODhGNkQ3N0YyQUM1RkU3RUI1ODk0ODc0REJERjlEQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDs6/0EX/Y8wbA8nmf7Zm0T2UMN 1dtb0xjR0z1+UfsxL5u6IaFa2y3dkp3VnWx0ejMRN+jFRT2iWrqkgE1vtf3hgHyB jaXBPz02fnoT2OoqXnVsNFBrTLbV6jcHjIX+uEOuVOoXNoevLmyOPlhZRjSrsM5Q ezHoV0UsHUY9NXN4Zagpae5dC+6xQid754m/UZ3JRHqLi+FCYg+CqQN8+KzmsDIo NDvOxW3zFW7m4zjXJQbYgh3F26t15YQ2mzVUSJNQRdJtNWLMBQkPg1KIjo4urwLK EbIdKUFuOsabsXaEUCPXfwoRNq5gb32fdI3GNv4b2n9Pb28ojhhyoU90H53nAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUGHFKIYj2138qxf5+tYlIdNvfnckwHwYDVR0j BBgwFoAU+vCT8pGGBTbv/JOTTnfclmkzAtswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSExBZmJMaEFlbkxROXQzQVAzNU5DaWJqM0hZZXFGTDhLejNvbjNXcG9Z U0UvMC9GQUYwOTNGMjkxODYwNTM2RUZGQzkzOTM0RTc3REM5NjY5MzMwMkRCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZBRjA5M0YyOTE4NjA1MzZF RkZDOTM5MzRFNzdEQzk2NjkzMzAyREIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SExBZmJMaEFlbkxROXQzQVAzNU5DaWJqM0hZZXFGTDhLejNvbjNXcG9ZU0UvMC9G QUYwOTNGMjkxODYwNTM2RUZGQzkzOTM0RTc3REM5NjY5MzMwMkRCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFyvSyunzbOZiB6FWKPYkOoeEEJkSz84qdszz3mZQ2Q9Hpd8QaxPz3w+GYYlX mZuEXJIK2IymAZTs3tS9GruHYs5Ot+3g+TpLKy9Dj3ZGTzA9ex3bfGOd6sboiYvw c/ysLLlBo4Y3fc2o81aXeUuOH2Y4ss83gAfSKEhpHEEgJQm2T0U8fCo5UwXWYHSN 87XPtBPNsLNR1AKD6k8+0ekUC8qekr5BYcf21EiKpBrKSbo+9tki7NuuAjedb19o jLoNt2qf77VxAN2dN6x2Ao3R3qTtE84+p9Cj+c2wL/nSQKYjU9MGgifcf0ogRqzl qPxRAN1BgzM5gCD92P+bRsWg2w== -----END CERTIFICATE-----Generated at Sun Aug 23 12:05:18 2026 by rpki-client