$ rpki-client -vvvf rpki-repo.registro.br/repo/HyyjtrCkQaPmypFyjdxHAwCBs1ZFUM97YeNCc5pe54Un/0/9525905700962482C0F4F6E9E0D71074880AC7C5.mft File: 9525905700962482C0F4F6E9E0D71074880AC7C5.mft (raw, json) Hash identifier: hucvekTZ6LxyVeNk+vA29o4annZxsbRlh3WCBsJcPIA= Subject key identifier: 23:B0:A7:8E:20:4A:D2:48:7C:15:0D:6C:B8:84:BA:3A:17:EF:5C:FB Authority key identifier: 95:25:90:57:00:96:24:82:C0:F4:F6:E9:E0:D7:10:74:88:0A:C7:C5 Certificate issuer: /CN=9525905700962482C0F4F6E9E0D71074880AC7C5 Certificate serial: 66734D79C0A935B8786A670BD677DFFA8B3E56FF Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9525905700962482C0F4F6E9E0D71074880AC7C5.cer Subject info access: rsync://rpki-repo.registro.br/repo/HyyjtrCkQaPmypFyjdxHAwCBs1ZFUM97YeNCc5pe54Un/0/9525905700962482C0F4F6E9E0D71074880AC7C5.mft Manifest number: 02D6 Signing time: Tue 25 Aug 2026 16:07:11 +0000 Manifest this update: Tue 25 Aug 2026 16:02:11 +0000 Manifest next update: Wed 26 Aug 2026 17:09:11 +0000 Files and hashes: 1: 9525905700962482C0F4F6E9E0D71074880AC7C5.crl (hash: JG0j7wTUjDhJqv1pVp8Yeio7t4GtWv2GmlmfUjh/K0A=) 2: 3137372e38352e3130382e302f32322d3332203d3e203532373431.roa (hash: bxQl2ly1JTFFxB+P8jYqxaR3MemoAG/oIilaoMHramg=) 3: 323830343a6632303a3a2f33322d313238203d3e203532373431.roa (hash: uZiw41VAW65FJ1fua/YF9+1ZNAotRJGhYuebiuz5orY=) 4: 3134332e3235352e3230382e302f32322d3332203d3e203532373431.roa (hash: Z3O+IhoYf0/7X3TAoDH+VCaaPZiiacWzZ6se4QMLlsg=) 5: 3137372e38352e3130342e302f32322d3332203d3e203532373431.roa (hash: bqml+OgJWT18iZvCCqVbE8qT+0tdGxWhqqUuj0kCQvQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HyyjtrCkQaPmypFyjdxHAwCBs1ZFUM97YeNCc5pe54Un/0/9525905700962482C0F4F6E9E0D71074880AC7C5.crl rsync://rpki-repo.registro.br/repo/HyyjtrCkQaPmypFyjdxHAwCBs1ZFUM97YeNCc5pe54Un/0/9525905700962482C0F4F6E9E0D71074880AC7C5.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9525905700962482C0F4F6E9E0D71074880AC7C5.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 26 Aug 2026 17:09:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:73:4d:79:c0:a9:35:b8:78:6a:67:0b:d6:77:df:fa:8b:3e:56:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9525905700962482C0F4F6E9E0D71074880AC7C5 Validity Not Before: Aug 25 16:02:11 2026 GMT Not After : Aug 26 17:09:11 2026 GMT Subject: CN=23B0A78E204AD2487C150D6CB884BA3A17EF5CFB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:5d:1a:e5:7f:6e:d8:d3:c0:5e:40:f2:48:54: a9:ff:19:22:ce:ff:74:06:07:b2:5f:12:68:9a:20: 6c:97:ae:b3:27:c9:30:4c:f5:bc:f9:c9:d8:14:3d: bf:bc:33:47:d3:8b:51:f2:c5:6d:53:0c:f8:f9:4b: 76:bd:6b:c9:14:23:27:25:1f:d8:54:6f:9c:2a:fc: 1a:25:92:81:9c:a6:2a:14:6a:6a:25:65:bf:94:f8: 67:50:e1:dc:d8:7f:95:ee:90:1a:88:57:49:b4:1d: 55:4d:e3:d3:69:66:da:50:09:b8:06:f0:dc:78:d3: 8c:f8:7d:53:d2:91:43:2e:22:52:03:38:75:c5:98: ac:6e:87:2c:ef:ad:d2:a9:cd:0f:30:25:52:d5:fd: 36:fb:58:7e:c7:c2:96:d5:15:7b:7a:74:f8:1e:dd: 73:b6:2b:8f:5c:18:cd:c2:24:6a:1d:27:ae:06:4b: b6:ff:3e:02:2b:ff:56:ca:e7:4c:5f:dd:f4:d8:58: 06:35:9a:eb:20:a1:c5:ab:76:23:68:e0:98:3a:f3: f2:c4:4f:7e:e3:e9:9d:95:c5:ad:63:e5:b8:18:7b: bf:89:b4:a2:5c:9c:6e:45:04:1b:d5:9c:ab:84:ca: 51:f5:65:42:fd:58:2c:76:d7:b2:1d:e9:60:aa:94: 9b:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:B0:A7:8E:20:4A:D2:48:7C:15:0D:6C:B8:84:BA:3A:17:EF:5C:FB X509v3 Authority Key Identifier: keyid:95:25:90:57:00:96:24:82:C0:F4:F6:E9:E0:D7:10:74:88:0A:C7:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HyyjtrCkQaPmypFyjdxHAwCBs1ZFUM97YeNCc5pe54Un/0/9525905700962482C0F4F6E9E0D71074880AC7C5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9525905700962482C0F4F6E9E0D71074880AC7C5.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HyyjtrCkQaPmypFyjdxHAwCBs1ZFUM97YeNCc5pe54Un/0/9525905700962482C0F4F6E9E0D71074880AC7C5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:53:c4:ce:10:5c:4f:54:34:59:80:dc:61:0b:74:18:94:3f: d4:b2:ac:e3:3b:ec:4e:04:ae:26:8e:0c:74:64:c1:8a:75:39: 5e:02:b8:55:f2:aa:b5:92:a8:0a:78:fa:c0:94:c0:7a:5c:6e: 39:c3:d2:c2:b2:93:a0:a0:af:82:7e:b6:a6:e2:24:13:a4:af: 13:94:8c:ff:dc:45:63:10:b9:5c:71:d1:4c:b0:e9:90:0b:0d: 4d:24:3d:95:26:7b:88:1a:1c:7b:f2:86:25:2a:47:ce:b7:49: 94:c7:35:cb:bb:b4:95:76:f7:b1:95:1a:86:fc:91:21:b3:57: 91:6e:c2:91:24:67:83:78:b5:fb:aa:10:9c:08:45:9d:a0:59: 72:ed:0f:c8:31:ee:da:ab:bf:73:c1:0a:e0:06:76:fe:d3:f4: 89:f1:62:81:ab:a3:e8:18:6c:be:08:c6:e0:b6:b6:45:f9:97: eb:3e:09:5c:fd:06:88:c3:51:8d:67:89:ba:c2:cf:d6:27:9c: 4f:7b:b4:bb:b8:02:34:65:4e:30:85:b5:96:cc:4b:2b:20:a6: 73:b7:43:42:57:ce:57:55:89:86:16:ad:79:11:2f:0c:22:d2: 7b:79:ac:88:fb:c2:bd:f7:e3:56:6f:ad:a4:de:e0:81:35:5f: c1:e5:25:e5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUZnNNecCpNbh4amcL1nff+os+Vv8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTUyNTkwNTcwMDk2MjQ4MkMwRjRGNkU5RTBENzEwNzQ4 ODBBQzdDNTAeFw0yNjA4MjUxNjAyMTFaFw0yNjA4MjYxNzA5MTFaMDMxMTAvBgNV BAMTKDIzQjBBNzhFMjA0QUQyNDg3QzE1MEQ2Q0I4ODRCQTNBMTdFRjVDRkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTXRrlf27Y08BeQPJIVKn/GSLO /3QGB7JfEmiaIGyXrrMnyTBM9bz5ydgUPb+8M0fTi1HyxW1TDPj5S3a9a8kUIycl H9hUb5wq/BolkoGcpioUamolZb+U+GdQ4dzYf5XukBqIV0m0HVVN49NpZtpQCbgG 8Nx404z4fVPSkUMuIlIDOHXFmKxuhyzvrdKpzQ8wJVLV/Tb7WH7HwpbVFXt6dPge 3XO2K49cGM3CJGodJ64GS7b/PgIr/1bK50xf3fTYWAY1musgocWrdiNo4Jg68/LE T37j6Z2Vxa1j5bgYe7+JtKJcnG5FBBvVnKuEylH1ZUL9WCx217Id6WCqlJv5AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUI7CnjiBK0kh8FQ1suIS6OhfvXPswHwYDVR0j BBgwFoAUlSWQVwCWJILA9Pbp4NcQdIgKx8UwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSHl5anRyQ2tRYVBteXBGeWpkeEhBd0NCczFaRlVNOTdZZU5DYzVwZTU0 VW4vMC85NTI1OTA1NzAwOTYyNDgyQzBGNEY2RTlFMEQ3MTA3NDg4MEFDN0M1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk1MjU5MDU3MDA5NjI0ODJD MEY0RjZFOUUwRDcxMDc0ODgwQUM3QzUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SHl5anRyQ2tRYVBteXBGeWpkeEhBd0NCczFaRlVNOTdZZU5DYzVwZTU0VW4vMC85 NTI1OTA1NzAwOTYyNDgyQzBGNEY2RTlFMEQ3MTA3NDg4MEFDN0M1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGFPEzhBcT1Q0WYDcYQt0GJQ/1LKs4zvsTgSuJo4MdGTBinU5XgK4VfKqtZKo Cnj6wJTAelxuOcPSwrKToKCvgn62puIkE6SvE5SM/9xFYxC5XHHRTLDpkAsNTSQ9 lSZ7iBoce/KGJSpHzrdJlMc1y7u0lXb3sZUahvyRIbNXkW7CkSRng3i1+6oQnAhF naBZcu0PyDHu2qu/c8EK4AZ2/tP0ifFigauj6BhsvgjG4La2RfmX6z4JXP0GiMNR jWeJusLP1iecT3u0u7gCNGVOMIW1lsxLKyCmc7dDQlfOV1WJhhateREvDCLSe3ms iPvCvffjVm+tpN7ggTVfweUl5Q== -----END CERTIFICATE-----Generated at Tue Aug 25 23:47:08 2026 by rpki-client