$ rpki-client -vvvf rpki-repo.registro.br/repo/Hnn3ReVmrZArAcBs9miuXMwZTic9hRAnF1tgnNNjRJcx/0/60BE9B4CF63549FDFB946E908A43D3654E71A3A7.mft File: 60BE9B4CF63549FDFB946E908A43D3654E71A3A7.mft (raw, json) Hash identifier: C0VCJ1/wBsBknwZqmSvsI6MTew/ZpXHYVdiBQyIMO7E= Subject key identifier: 85:E8:6B:80:B4:94:DA:34:BB:06:99:0A:58:AF:9B:9E:7E:A8:BB:4B Authority key identifier: 60:BE:9B:4C:F6:35:49:FD:FB:94:6E:90:8A:43:D3:65:4E:71:A3:A7 Certificate issuer: /CN=60BE9B4CF63549FDFB946E908A43D3654E71A3A7 Certificate serial: 7F2046208123008718115A869F9A6F7B88EA47BB Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60BE9B4CF63549FDFB946E908A43D3654E71A3A7.cer Subject info access: rsync://rpki-repo.registro.br/repo/Hnn3ReVmrZArAcBs9miuXMwZTic9hRAnF1tgnNNjRJcx/0/60BE9B4CF63549FDFB946E908A43D3654E71A3A7.mft Manifest number: 2B Signing time: Sat 22 Aug 2026 18:32:26 +0000 Manifest this update: Sat 22 Aug 2026 18:27:26 +0000 Manifest next update: Sun 23 Aug 2026 22:20:26 +0000 Files and hashes: 1: 3138392e32382e33322e302f31392d3332203d3e203238323933.roa (hash: xh/YJmP54qZabl+hVBD+rt1clwugQxIZxjgjOoAwjnw=) 2: 323830343a366563303a3a2f33322d313238203d3e203238323933.roa (hash: ypCvHRwhy2+XhrM/CQox2hW7M5y77uorMxWKZzUg4DM=) 3: 3138392e32382e35362e302f32342d3332203d3e20323734333730.roa (hash: 1oPQO6JDgX2d+KaoG9MIm/Lx3JosJgz9GFMc9YQPZWM=) 4: 60BE9B4CF63549FDFB946E908A43D3654E71A3A7.crl (hash: Rcp2tymMKixLFGe7zduGKbPNkIQZDDrrrPtbCYsgFmQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Hnn3ReVmrZArAcBs9miuXMwZTic9hRAnF1tgnNNjRJcx/0/60BE9B4CF63549FDFB946E908A43D3654E71A3A7.crl rsync://rpki-repo.registro.br/repo/Hnn3ReVmrZArAcBs9miuXMwZTic9hRAnF1tgnNNjRJcx/0/60BE9B4CF63549FDFB946E908A43D3654E71A3A7.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60BE9B4CF63549FDFB946E908A43D3654E71A3A7.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 23 Aug 2026 22:20:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:20:46:20:81:23:00:87:18:11:5a:86:9f:9a:6f:7b:88:ea:47:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60BE9B4CF63549FDFB946E908A43D3654E71A3A7 Validity Not Before: Aug 22 18:27:26 2026 GMT Not After : Aug 23 22:20:26 2026 GMT Subject: CN=85E86B80B494DA34BB06990A58AF9B9E7EA8BB4B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:1a:14:b4:c4:27:cf:55:5e:0e:af:a8:6c:b5: ac:2e:4d:ce:33:8d:df:5f:80:e0:d4:b2:5f:6a:a8: fe:20:6d:80:15:2b:5e:8f:68:54:59:4f:28:09:17: 57:55:3e:8c:13:a6:6a:81:d2:2a:be:28:cb:ca:25: b3:9e:0f:83:32:40:19:2c:82:f1:c7:b5:ed:05:5a: e3:92:80:6f:29:ac:84:c6:35:15:e1:cf:12:84:19: 53:68:6e:ef:2f:ce:78:4b:0f:ff:60:44:79:af:eb: 86:e9:6c:0f:cf:2c:e8:0f:7f:15:0d:c7:c0:f3:bc: d4:70:0d:10:48:59:c8:5b:a2:c1:b2:5d:5b:ce:9a: bb:c4:72:4d:d0:db:5a:64:cc:03:f9:43:69:03:19: 6b:23:b1:68:e9:a4:9c:d5:d5:5d:a5:33:55:14:11: dc:d9:5a:83:64:e8:13:53:06:9e:1b:06:39:25:2e: 13:3e:5e:1e:4a:36:c0:9c:5c:3e:8f:fb:72:6a:be: 42:79:58:f8:0a:e8:1f:d5:2f:47:81:01:c8:ed:3b: 8f:80:34:a0:86:4b:97:32:37:72:04:4c:96:cf:23: 00:94:97:b1:04:76:23:5c:66:6f:09:02:07:fb:a2: 8d:93:5c:4f:1b:b9:e8:6f:36:f2:b3:7a:4e:8c:58: 6a:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:E8:6B:80:B4:94:DA:34:BB:06:99:0A:58:AF:9B:9E:7E:A8:BB:4B X509v3 Authority Key Identifier: keyid:60:BE:9B:4C:F6:35:49:FD:FB:94:6E:90:8A:43:D3:65:4E:71:A3:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Hnn3ReVmrZArAcBs9miuXMwZTic9hRAnF1tgnNNjRJcx/0/60BE9B4CF63549FDFB946E908A43D3654E71A3A7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60BE9B4CF63549FDFB946E908A43D3654E71A3A7.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hnn3ReVmrZArAcBs9miuXMwZTic9hRAnF1tgnNNjRJcx/0/60BE9B4CF63549FDFB946E908A43D3654E71A3A7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:94:3b:0e:ea:e7:f9:a2:21:d9:76:8c:e7:ff:a9:b8:10:e3: 56:f8:ba:5f:7b:59:ca:f0:72:da:0e:6f:78:ea:a8:50:fb:e7: 33:22:93:f6:6c:54:c4:be:36:13:19:8b:35:a4:78:43:40:50: 5e:74:6b:e9:1c:dd:f7:4c:a5:c9:12:8f:24:b6:d9:e0:40:57: d6:cc:72:76:80:95:bb:af:7f:27:13:84:5e:07:3b:a4:42:0e: 21:28:ff:a4:a8:53:6c:0e:31:8c:02:e0:41:42:aa:a5:a1:38: 2a:63:47:d0:03:19:88:00:a9:9c:6a:db:78:1d:9b:9c:68:dd: 85:80:68:5d:ec:55:9a:81:a5:15:13:18:05:45:a2:d4:9c:ad: e2:3f:1e:35:20:a2:c7:57:bf:55:cf:56:81:1a:75:6e:15:73: 71:23:fa:8c:8d:40:70:15:93:25:f9:3d:eb:34:7e:38:84:bb: 4d:62:7d:69:ec:59:7d:31:89:76:36:03:71:47:4a:46:36:9c: 58:3b:03:c5:a7:4e:23:96:8f:c5:02:67:fd:c0:54:21:0f:09: 56:95:ae:3f:79:3b:cc:26:31:0a:c0:42:30:8c:60:34:c0:0d: 42:ad:8f:27:2a:a8:fe:dc:df:f8:72:f0:b8:23:92:7d:e3:7a: e5:63:8b:40 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUfyBGIIEjAIcYEVqGn5pve4jqR7swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBCRTlCNENGNjM1NDlGREZCOTQ2RTkwOEE0M0QzNjU0 RTcxQTNBNzAeFw0yNjA4MjIxODI3MjZaFw0yNjA4MjMyMjIwMjZaMDMxMTAvBgNV BAMTKDg1RTg2QjgwQjQ5NERBMzRCQjA2OTkwQTU4QUY5QjlFN0VBOEJCNEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWGhS0xCfPVV4Or6hstawuTc4z jd9fgODUsl9qqP4gbYAVK16PaFRZTygJF1dVPowTpmqB0iq+KMvKJbOeD4MyQBks gvHHte0FWuOSgG8prITGNRXhzxKEGVNobu8vznhLD/9gRHmv64bpbA/PLOgPfxUN x8DzvNRwDRBIWchbosGyXVvOmrvEck3Q21pkzAP5Q2kDGWsjsWjppJzV1V2lM1UU EdzZWoNk6BNTBp4bBjklLhM+Xh5KNsCcXD6P+3JqvkJ5WPgK6B/VL0eBAcjtO4+A NKCGS5cyN3IETJbPIwCUl7EEdiNcZm8JAgf7oo2TXE8buehvNvKzek6MWGqHAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUhehrgLSU2jS7BpkKWK+bnn6ou0swHwYDVR0j BBgwFoAUYL6bTPY1Sf37lG6QikPTZU5xo6cwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSG5uM1JlVm1yWkFyQWNCczltaXVYTXdaVGljOWhSQW5GMXRnbk5OalJK Y3gvMC82MEJFOUI0Q0Y2MzU0OUZERkI5NDZFOTA4QTQzRDM2NTRFNzFBM0E3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYwQkU5QjRDRjYzNTQ5RkRG Qjk0NkU5MDhBNDNEMzY1NEU3MUEzQTcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SG5uM1JlVm1yWkFyQWNCczltaXVYTXdaVGljOWhSQW5GMXRnbk5OalJKY3gvMC82 MEJFOUI0Q0Y2MzU0OUZERkI5NDZFOTA4QTQzRDM2NTRFNzFBM0E3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhZQ7Durn+aIh2XaM5/+puBDjVvi6X3tZyvBy2g5veOqoUPvnMyKT9mxUxL42 ExmLNaR4Q0BQXnRr6Rzd90ylyRKPJLbZ4EBX1sxydoCVu69/JxOEXgc7pEIOISj/ pKhTbA4xjALgQUKqpaE4KmNH0AMZiACpnGrbeB2bnGjdhYBoXexVmoGlFRMYBUWi 1Jyt4j8eNSCix1e/Vc9WgRp1bhVzcSP6jI1AcBWTJfk96zR+OIS7TWJ9aexZfTGJ djYDcUdKRjacWDsDxadOI5aPxQJn/cBUIQ8JVpWuP3k7zCYxCsBCMIxgNMANQq2P Jyqo/tzf+HLwuCOSfeN65WOLQA== -----END CERTIFICATE-----Generated at Sun Aug 23 02:46:00 2026 by rpki-client