$ rpki-client -vvvf rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/1/2AADFACED9C75E320914697A02E254A3D463839A.mft File: 2AADFACED9C75E320914697A02E254A3D463839A.mft (raw, json) Hash identifier: nb41l83aPPiq4E/oY8jsN8utgU9kJsnC/vp1z2ogt2k= Subject key identifier: 46:06:52:54:0D:84:20:24:47:08:91:5A:4E:0F:65:E4:39:6F:02:57 Authority key identifier: 2A:AD:FA:CE:D9:C7:5E:32:09:14:69:7A:02:E2:54:A3:D4:63:83:9A Certificate issuer: /CN=2AADFACED9C75E320914697A02E254A3D463839A Certificate serial: 0DC2803B3160052533B22A62218A9A2E41AA873E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AADFACED9C75E320914697A02E254A3D463839A.cer Subject info access: rsync://rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/1/2AADFACED9C75E320914697A02E254A3D463839A.mft Manifest number: 0486 Signing time: Sun 23 Aug 2026 03:17:14 +0000 Manifest this update: Sun 23 Aug 2026 03:12:14 +0000 Manifest next update: Mon 24 Aug 2026 03:28:14 +0000 Files and hashes: 1: 3134312e3139332e3135312e302f32342d3234203d3e203533313230.roa (hash: yzKUpRe3y8LUWcm83z69Jaw9iWkJf+qC/m+2IVHZxlc=) 2: 3138372e3131312e31362e302f32302d3234203d3e203533313230.roa (hash: Wl3NM8LcidtB9ABien1wpKt4MxmMwZ7mN01Y9qxRLP8=) 3: 2AADFACED9C75E320914697A02E254A3D463839A.crl (hash: iBA5u29lbGfFG+2vlaNWBTfkljjRmKHTjW7fRXa6aLs=) 4: 323830343a316465383a3a2f33322d3434203d3e203533313230.roa (hash: Nr+GaVgOM2KaxkMsqzw8YASCuxHUI3aExeAauUF/zmg=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/1/2AADFACED9C75E320914697A02E254A3D463839A.crl rsync://rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/1/2AADFACED9C75E320914697A02E254A3D463839A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AADFACED9C75E320914697A02E254A3D463839A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 24 Aug 2026 03:28:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:c2:80:3b:31:60:05:25:33:b2:2a:62:21:8a:9a:2e:41:aa:87:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2AADFACED9C75E320914697A02E254A3D463839A Validity Not Before: Aug 23 03:12:14 2026 GMT Not After : Aug 24 03:28:14 2026 GMT Subject: CN=460652540D8420244708915A4E0F65E4396F0257 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f1:2e:15:66:20:c7:71:7f:02:37:06:0d:8d: 97:ec:9f:9d:e6:83:bb:41:f6:2d:79:62:a0:03:2a: 19:d7:13:a3:47:0a:14:7a:f6:e6:cd:96:9f:d5:eb: 98:27:e2:57:b4:c3:ce:44:0a:f1:50:d9:14:12:7b: c0:b6:ec:d0:42:7d:e3:48:84:7f:20:b6:c0:6d:1b: 1d:3b:da:47:cb:67:d0:e2:d1:5a:02:16:19:43:3d: 35:97:60:2b:51:67:77:8f:3f:51:3d:1f:db:ee:90: 87:c4:76:cd:e2:d9:4b:0a:65:ab:c5:ab:d9:ab:9e: bb:6f:79:4a:60:2a:ca:0b:3c:cc:d2:4b:e1:89:55: cc:e3:0d:8c:34:f4:aa:92:a0:68:d4:93:4f:66:2c: f2:3b:42:e6:0e:f3:25:eb:33:69:9d:86:92:b1:c0: eb:b4:64:fe:d0:8a:54:05:9d:c6:1f:fd:97:27:39: 5a:b7:a8:c9:99:37:dc:d4:d7:a9:de:1f:1e:a9:67: 49:f7:63:ee:8c:3a:21:70:71:6e:6b:7f:f8:04:cc: 8a:3e:77:7a:01:e9:4d:a0:24:71:25:7d:65:51:83: 6f:0b:f7:4e:03:2b:ba:e2:b4:f9:c0:05:2e:34:14: b0:88:64:69:ba:c8:1f:7d:bb:ab:b5:01:b0:d4:7b: 1a:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:06:52:54:0D:84:20:24:47:08:91:5A:4E:0F:65:E4:39:6F:02:57 X509v3 Authority Key Identifier: keyid:2A:AD:FA:CE:D9:C7:5E:32:09:14:69:7A:02:E2:54:A3:D4:63:83:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/1/2AADFACED9C75E320914697A02E254A3D463839A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AADFACED9C75E320914697A02E254A3D463839A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/1/2AADFACED9C75E320914697A02E254A3D463839A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:b6:7f:79:70:c3:b9:6d:17:b2:4c:ed:a9:de:60:c0:e7:5d: 0b:2a:b8:8b:61:69:15:c3:9b:7e:e5:16:ac:15:32:3b:42:44: 0a:6d:f3:22:8b:a8:7e:e7:e6:8a:02:8c:84:93:bb:88:c1:87: fd:1c:7b:fc:a0:f9:c6:27:be:11:8c:c6:5a:74:bb:f0:6d:e1: 62:a6:e3:e9:83:b3:b2:38:07:8e:5a:31:25:95:fc:24:fb:8d: 1f:8d:61:c9:42:c0:d2:00:5a:1e:c9:d1:bf:02:8d:ab:cf:8e: 34:c5:19:9b:b0:df:f7:66:25:63:9c:ec:ff:fd:47:67:50:8d: 5e:50:3b:c6:de:1d:50:4e:7c:71:4b:40:8f:52:34:e2:46:1c: 01:79:c9:ca:8d:16:4c:d2:a9:d1:11:f5:78:fa:29:ed:25:7d: b5:61:12:4c:30:b3:2b:2d:4c:65:0b:a5:bb:ed:08:24:6f:a8: 4c:37:cf:d4:6d:a0:4e:1e:b2:c8:e3:38:a0:fe:0a:01:13:3d: 64:14:48:39:09:9d:c4:d7:cb:6a:0f:9b:b2:bc:f8:fc:0f:62: f0:43:82:2c:f5:63:28:e0:c4:74:e2:bd:4f:c2:80:fb:8a:e3: 5d:6c:71:c0:f6:55:81:c3:9c:0a:78:08:84:7a:a1:30:12:a2: 7a:52:4d:26 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUDcKAOzFgBSUzsipiIYqaLkGqhz4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFBREZBQ0VEOUM3NUUzMjA5MTQ2OTdBMDJFMjU0QTNE NDYzODM5QTAeFw0yNjA4MjMwMzEyMTRaFw0yNjA4MjQwMzI4MTRaMDMxMTAvBgNV BAMTKDQ2MDY1MjU0MEQ4NDIwMjQ0NzA4OTE1QTRFMEY2NUU0Mzk2RjAyNTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC28S4VZiDHcX8CNwYNjZfsn53m g7tB9i15YqADKhnXE6NHChR69ubNlp/V65gn4le0w85ECvFQ2RQSe8C27NBCfeNI hH8gtsBtGx072kfLZ9Di0VoCFhlDPTWXYCtRZ3ePP1E9H9vukIfEds3i2UsKZavF q9mrnrtveUpgKsoLPMzSS+GJVczjDYw09KqSoGjUk09mLPI7QuYO8yXrM2mdhpKx wOu0ZP7QilQFncYf/ZcnOVq3qMmZN9zU16neHx6pZ0n3Y+6MOiFwcW5rf/gEzIo+ d3oB6U2gJHElfWVRg28L904DK7ritPnABS40FLCIZGm6yB99u6u1AbDUexrFAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQURgZSVA2EICRHCJFaTg9l5DlvAlcwHwYDVR0j BBgwFoAUKq36ztnHXjIJFGl6AuJUo9Rjg5owDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSHVyY0FKek1GTEY4ZTRncEg2SmVqUkRxM2p2UEpqYmttMW05bVJCU0Ru eW8vMS8yQUFERkFDRUQ5Qzc1RTMyMDkxNDY5N0EwMkUyNTRBM0Q0NjM4MzlBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJBQURGQUNFRDlDNzVFMzIw OTE0Njk3QTAyRTI1NEEzRDQ2MzgzOUEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SHVyY0FKek1GTEY4ZTRncEg2SmVqUkRxM2p2UEpqYmttMW05bVJCU0RueW8vMS8y QUFERkFDRUQ5Qzc1RTMyMDkxNDY5N0EwMkUyNTRBM0Q0NjM4MzlBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQ7Z/eXDDuW0Xskztqd5gwOddCyq4i2FpFcObfuUWrBUyO0JECm3zIouofufm igKMhJO7iMGH/Rx7/KD5xie+EYzGWnS78G3hYqbj6YOzsjgHjloxJZX8JPuNH41h yULA0gBaHsnRvwKNq8+ONMUZm7Df92YlY5zs//1HZ1CNXlA7xt4dUE58cUtAj1I0 4kYcAXnJyo0WTNKp0RH1ePop7SV9tWESTDCzKy1MZQulu+0IJG+oTDfP1G2gTh6y yOM4oP4KARM9ZBRIOQmdxNfLag+bsrz4/A9i8EOCLPVjKODEdOK9T8KA+4rjXWxx wPZVgcOcCngIhHqhMBKielJNJg== -----END CERTIFICATE-----Generated at Sun Aug 23 17:46:54 2026 by rpki-client