$ rpki-client -vvf rpki-repo.registro.br/repo/J9tZwypyEDvEyXJkGWxbTNUHrvbgi3hGpCLqqpTH6rey/0/909B7902EFDB474E879A547BABF2F4F66286C655.mft File: 909B7902EFDB474E879A547BABF2F4F66286C655.mft (raw, json) Hash identifier: HTQom7eZHbD6cAH321+qIm/QWe6EWdtIE1pSdevT654= Subject key identifier: 85:EF:9D:69:6B:A5:D0:21:C4:AD:28:14:78:BB:C3:1C:95:F1:BF:3D Authority key identifier: 90:9B:79:02:EF:DB:47:4E:87:9A:54:7B:AB:F2:F4:F6:62:86:C6:55 Certificate issuer: /CN=909B7902EFDB474E879A547BABF2F4F66286C655 Certificate serial: 1060C0F00BFCE2BD18D208DE15A91918A0D88DB0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/909B7902EFDB474E879A547BABF2F4F66286C655.cer Subject info access: rsync://rpki-repo.registro.br/repo/J9tZwypyEDvEyXJkGWxbTNUHrvbgi3hGpCLqqpTH6rey/0/909B7902EFDB474E879A547BABF2F4F66286C655.mft Manifest number: 0B Signing time: Wed 08 Jul 2026 01:25:01 +0000 Manifest this update: Wed 08 Jul 2026 01:20:01 +0000 Manifest next update: Thu 09 Jul 2026 04:33:01 +0000 Files and hashes: 1: 909B7902EFDB474E879A547BABF2F4F66286C655.crl (hash: u+/31a7p8AKi4ortzbbcA8ui2nWdsWRMXXYQ/LFrDmY=) 2: 3138312e3139322e38302e302f32302d3234203d3e20323633353230.roa (hash: wvRd/oWtSeLtnZ57v1Z388N2kjT0UGkVXOa15lv15KY=) 3: 323830343a313333303a3a2f33322d3334203d3e20323633353230.roa (hash: nd0ysS4E14Cw1gBy/hVmUSTiigVuVEmhdz3iVsIH64E=) 4: 3137372e3132362e3135322e302f32312d3234203d3e20323633353230.roa (hash: 9WF9WksOETuzjWaGONBAIu7ZLPIO6eL/RV7mF9Kjt8A=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/J9tZwypyEDvEyXJkGWxbTNUHrvbgi3hGpCLqqpTH6rey/0/909B7902EFDB474E879A547BABF2F4F66286C655.crl rsync://rpki-repo.registro.br/repo/J9tZwypyEDvEyXJkGWxbTNUHrvbgi3hGpCLqqpTH6rey/0/909B7902EFDB474E879A547BABF2F4F66286C655.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/909B7902EFDB474E879A547BABF2F4F66286C655.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 09 Jul 2026 04:33:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:60:c0:f0:0b:fc:e2:bd:18:d2:08:de:15:a9:19:18:a0:d8:8d:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=909B7902EFDB474E879A547BABF2F4F66286C655 Validity Not Before: Jul 8 01:20:01 2026 GMT Not After : Jul 9 04:33:01 2026 GMT Subject: CN=85EF9D696BA5D021C4AD281478BBC31C95F1BF3D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:04:df:b7:4d:fd:02:74:dc:e3:1a:07:58:1a: a8:40:af:03:72:37:77:79:bd:6c:5a:b8:e6:69:d9: 76:c1:0a:8b:aa:ed:cf:34:78:1e:8f:24:88:8e:b3: 3f:2f:a7:71:63:8d:1f:b5:a0:f7:03:31:76:cf:96: c5:5c:ba:40:05:2f:78:d4:2e:d1:77:85:f7:4d:b9: bd:17:e2:9e:42:46:ba:59:0c:3f:29:e7:fa:0c:b2: 9d:16:6d:3e:44:16:3f:5d:2c:d5:e4:75:18:b3:2c: ca:0f:ea:40:ea:bf:35:f8:47:b9:a1:34:2b:25:21: 25:f6:bb:8d:b8:50:2b:62:ca:e2:b4:4a:61:79:fe: 91:6f:68:23:14:a6:e5:c7:85:3d:4f:5b:ea:35:8c: 4e:7d:09:60:86:59:28:d8:2b:10:37:ed:3c:34:d5: 2a:25:f7:fb:81:e7:b9:4e:ff:18:56:1d:f5:d1:57: ec:52:6a:b9:1b:ac:7a:6d:33:de:92:dc:2e:65:96: df:8f:90:03:1f:5e:ce:c1:9b:13:8b:3b:20:5e:6f: 02:0a:95:ef:6a:cc:d2:ce:0f:17:4d:1b:79:64:88: dc:3f:9f:5d:b7:5b:4f:dc:85:e1:69:2e:7e:fc:c2: 64:de:36:62:45:4d:0f:4f:a7:37:24:c9:20:d4:60: d0:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:EF:9D:69:6B:A5:D0:21:C4:AD:28:14:78:BB:C3:1C:95:F1:BF:3D X509v3 Authority Key Identifier: keyid:90:9B:79:02:EF:DB:47:4E:87:9A:54:7B:AB:F2:F4:F6:62:86:C6:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/J9tZwypyEDvEyXJkGWxbTNUHrvbgi3hGpCLqqpTH6rey/0/909B7902EFDB474E879A547BABF2F4F66286C655.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/909B7902EFDB474E879A547BABF2F4F66286C655.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/J9tZwypyEDvEyXJkGWxbTNUHrvbgi3hGpCLqqpTH6rey/0/909B7902EFDB474E879A547BABF2F4F66286C655.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d3:18:c7:e9:9b:fe:1e:d6:c3:e6:5a:7a:15:1d:c0:a9:8d:ec: 53:3d:3d:6b:bb:a3:f2:8f:a9:2e:49:e7:6f:9d:3d:6c:6f:38: 3e:9b:88:2d:4b:3a:13:4a:24:bf:26:ff:56:67:ab:25:11:cd: 57:03:3a:c3:1f:39:c8:90:8e:3b:65:80:24:63:1d:6c:99:84: fe:f9:5f:3a:76:bd:b5:9a:82:0e:b9:40:ce:ad:78:db:b5:79: d0:4e:ad:c4:77:ec:7e:f1:91:6c:ec:59:de:85:cf:c3:18:e5: c4:63:67:1b:a4:df:43:f1:4a:55:f7:67:4e:10:24:a2:b1:01: fe:b5:30:5c:0b:84:6c:fa:f0:e6:17:3b:33:21:9a:c6:b6:e1: 38:39:e9:e2:e1:f0:d4:0e:c2:69:59:81:26:45:8a:93:96:16: 47:9b:07:4c:5f:8e:6a:bd:22:a2:90:6b:f6:01:fd:95:13:44: ce:91:74:82:6d:44:37:17:c1:84:83:3c:45:81:02:6f:06:3d: 23:60:9b:28:24:8d:f0:f4:11:8b:88:bc:da:60:37:2c:06:b2: a9:fa:e4:d7:6e:90:eb:b7:11:1c:0f:37:d9:c4:eb:39:fd:c3: 8f:d2:3d:70:d3:8e:15:2f:35:2b:1b:76:8f:86:41:64:df:68: 65:a8:cf:d8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUEGDA8Av84r0Y0gjeFakZGKDYjbAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTA5Qjc5MDJFRkRCNDc0RTg3OUE1NDdCQUJGMkY0RjY2 Mjg2QzY1NTAeFw0yNjA3MDgwMTIwMDFaFw0yNjA3MDkwNDMzMDFaMDMxMTAvBgNV BAMTKDg1RUY5RDY5NkJBNUQwMjFDNEFEMjgxNDc4QkJDMzFDOTVGMUJGM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3BN+3Tf0CdNzjGgdYGqhArwNy N3d5vWxauOZp2XbBCouq7c80eB6PJIiOsz8vp3FjjR+1oPcDMXbPlsVcukAFL3jU LtF3hfdNub0X4p5CRrpZDD8p5/oMsp0WbT5EFj9dLNXkdRizLMoP6kDqvzX4R7mh NCslISX2u424UCtiyuK0SmF5/pFvaCMUpuXHhT1PW+o1jE59CWCGWSjYKxA37Tw0 1Sol9/uB57lO/xhWHfXRV+xSarkbrHptM96S3C5llt+PkAMfXs7BmxOLOyBebwIK le9qzNLODxdNG3lkiNw/n123W0/cheFpLn78wmTeNmJFTQ9PpzckySDUYNB/AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUhe+daWul0CHErSgUeLvDHJXxvz0wHwYDVR0j BBgwFoAUkJt5Au/bR06HmlR7q/L09mKGxlUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSjl0Wnd5cHlFRHZFeVhKa0dXeGJUTlVIcnZiZ2kzaEdwQ0xxcXBUSDZy ZXkvMC85MDlCNzkwMkVGREI0NzRFODc5QTU0N0JBQkYyRjRGNjYyODZDNjU1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkwOUI3OTAyRUZEQjQ3NEU4 NzlBNTQ3QkFCRjJGNEY2NjI4NkM2NTUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Sjl0Wnd5cHlFRHZFeVhKa0dXeGJUTlVIcnZiZ2kzaEdwQ0xxcXBUSDZyZXkvMC85 MDlCNzkwMkVGREI0NzRFODc5QTU0N0JBQkYyRjRGNjYyODZDNjU1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEA0xjH6Zv+HtbD5lp6FR3AqY3sUz09a7uj8o+pLknnb509bG84PpuILUs6E0ok vyb/VmerJRHNVwM6wx85yJCOO2WAJGMdbJmE/vlfOna9tZqCDrlAzq1427V50E6t xHfsfvGRbOxZ3oXPwxjlxGNnG6TfQ/FKVfdnThAkorEB/rUwXAuEbPrw5hc7MyGa xrbhODnp4uHw1A7CaVmBJkWKk5YWR5sHTF+Oar0iopBr9gH9lRNEzpF0gm1ENxfB hIM8RYECbwY9I2CbKCSN8PQRi4i82mA3LAayqfrk126Q67cRHA832cTrOf3Dj9I9 cNOOFS81Kxt2j4ZBZN9oZajP2A== -----END CERTIFICATE-----Generated at Wed Jul 8 15:19:02 2026 by rpki-client