$ rpki-client -vvvf rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/03D8B16C2417C68C7325B3DF2EAD45A1208FA243.mft File: 03D8B16C2417C68C7325B3DF2EAD45A1208FA243.mft (raw, json) Hash identifier: l52IFYvV1ko2GGeDOYv9KPPEbEmFYDexhiYrBkpm7lU= Subject key identifier: CD:5A:BA:C7:E1:61:96:A8:BF:77:20:98:FE:06:6B:81:BC:4A:3F:F3 Authority key identifier: 03:D8:B1:6C:24:17:C6:8C:73:25:B3:DF:2E:AD:45:A1:20:8F:A2:43 Certificate issuer: /CN=03D8B16C2417C68C7325B3DF2EAD45A1208FA243 Certificate serial: 5CAFADD854826FC15F279FD7C845D2415EF288F8 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03D8B16C2417C68C7325B3DF2EAD45A1208FA243.cer Subject info access: rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/03D8B16C2417C68C7325B3DF2EAD45A1208FA243.mft Manifest number: D4 Signing time: Sun 23 Aug 2026 17:53:19 +0000 Manifest this update: Sun 23 Aug 2026 17:48:19 +0000 Manifest next update: Mon 24 Aug 2026 21:45:19 +0000 Files and hashes: 1: 3137372e3133372e3230382e302f32302d3332203d3e20323633303837.roa (hash: T0Uz/Sk34aQgcSOQm+RkjvRwBySKQ/8Q27JSs8zyBXQ=) 2: 323830343a3937383a3a2f33322d313238203d3e20323633303837.roa (hash: DAOPSVl3VjIiB/gugA2mB5ffypy61TmAdTW/kGDMNKg=) 3: 3137392e3130392e3136302e302f32302d3332203d3e20323633303837.roa (hash: 9009pfqHHSDfQmA16n3BSiSnUou3SNM0grpR12t1Qj4=) 4: 03D8B16C2417C68C7325B3DF2EAD45A1208FA243.crl (hash: 6KazQEVY0XyFBflngVfqASj11i3orJTiiDt7bNmwuVw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/03D8B16C2417C68C7325B3DF2EAD45A1208FA243.crl rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/03D8B16C2417C68C7325B3DF2EAD45A1208FA243.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03D8B16C2417C68C7325B3DF2EAD45A1208FA243.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 24 Aug 2026 21:45:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:af:ad:d8:54:82:6f:c1:5f:27:9f:d7:c8:45:d2:41:5e:f2:88:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03D8B16C2417C68C7325B3DF2EAD45A1208FA243 Validity Not Before: Aug 23 17:48:19 2026 GMT Not After : Aug 24 21:45:19 2026 GMT Subject: CN=CD5ABAC7E16196A8BF772098FE066B81BC4A3FF3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:b5:20:8d:7d:b2:19:34:09:71:1b:bc:be:c8: ba:e1:04:8e:15:66:99:8c:e2:85:49:87:0f:5a:8c: 37:9d:d3:eb:46:c2:77:c4:0c:74:4c:29:bf:ca:cb: 3c:1c:e5:6d:26:5f:8f:26:ed:59:26:8e:2d:07:b7: 59:44:4a:27:9f:b5:65:d6:90:2e:7a:92:ca:b1:27: 22:94:11:92:b9:82:3e:20:fe:c7:f2:72:13:0b:83: 1d:21:5c:af:5a:67:f5:2a:53:1c:be:a7:80:f8:ab: e6:d4:10:6f:13:dd:d4:52:96:b0:8f:e4:38:52:02: 4e:10:60:d8:e7:7f:7a:18:dc:81:ed:0e:02:1c:5d: b7:bd:64:22:d8:57:ed:df:1b:d9:b6:57:1f:4d:ff: 2f:ac:46:7b:5e:b8:78:cd:72:3c:01:59:cf:0b:57: f1:c9:c6:c3:3c:0b:81:0b:de:4b:67:9e:91:45:d9: d5:10:05:af:98:fe:8e:c7:64:2f:dd:c1:6b:b4:74: 24:f5:4b:ec:4a:7e:e6:8c:e5:e9:0b:37:1b:77:fc: bf:f5:cc:bc:e2:25:be:d0:b7:da:87:6b:cf:0a:c1: 09:62:07:4c:c7:de:6c:00:75:a6:ee:46:1f:3a:8c: aa:e7:bb:10:20:dc:07:d4:3f:c3:c0:3e:48:6a:d0: 14:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:5A:BA:C7:E1:61:96:A8:BF:77:20:98:FE:06:6B:81:BC:4A:3F:F3 X509v3 Authority Key Identifier: keyid:03:D8:B1:6C:24:17:C6:8C:73:25:B3:DF:2E:AD:45:A1:20:8F:A2:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/03D8B16C2417C68C7325B3DF2EAD45A1208FA243.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03D8B16C2417C68C7325B3DF2EAD45A1208FA243.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/03D8B16C2417C68C7325B3DF2EAD45A1208FA243.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:f2:ea:a4:e1:85:7d:4c:a9:9f:84:41:21:d8:a1:3c:4b:19: 8e:d9:9c:84:3f:c3:cf:95:db:b7:bb:af:e0:d6:d5:ad:8c:89: 36:03:fd:9a:03:a6:c6:b9:15:4a:2a:48:f6:6c:ea:f2:93:ad: 36:c8:a8:4b:80:94:98:b4:70:65:0b:bd:a5:d1:fc:7d:27:69: d1:3d:c4:57:81:af:e1:3e:32:c3:69:e2:59:bb:1d:b0:f4:f7: 5e:d0:d3:7f:7d:7f:b4:8a:8d:76:a8:e0:90:ef:04:44:07:24: 5b:8a:d2:14:18:5a:4c:e4:9a:9d:e4:31:e5:5d:68:76:ae:83: cc:66:1e:83:a7:d9:55:51:ab:2a:f7:e8:1b:f1:27:66:55:b3: 85:21:c2:ee:7c:3a:82:7d:ef:29:c1:be:51:b5:48:16:ed:5e: 0d:57:f6:2f:16:7c:18:9d:00:85:a4:92:c9:6b:aa:8c:8e:8c: 22:d3:3d:85:b6:90:03:0d:18:5f:7c:dd:ee:c8:3f:d9:b9:f4: b4:70:ad:f3:d5:5d:68:ab:83:88:61:d3:28:41:70:85:f6:6c: 2c:db:98:e7:1b:f9:59:67:7f:1f:d3:83:51:48:72:67:70:7f: aa:2a:47:1a:a6:ba:d2:7a:77:1c:3e:26:df:87:59:69:00:b2: a3:87:a4:4a -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUXK+t2FSCb8FfJ5/XyEXSQV7yiPgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDNEOEIxNkMyNDE3QzY4QzczMjVCM0RGMkVBRDQ1QTEy MDhGQTI0MzAeFw0yNjA4MjMxNzQ4MTlaFw0yNjA4MjQyMTQ1MTlaMDMxMTAvBgNV BAMTKENENUFCQUM3RTE2MTk2QThCRjc3MjA5OEZFMDY2QjgxQkM0QTNGRjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHtSCNfbIZNAlxG7y+yLrhBI4V ZpmM4oVJhw9ajDed0+tGwnfEDHRMKb/Kyzwc5W0mX48m7Vkmji0Ht1lESieftWXW kC56ksqxJyKUEZK5gj4g/sfychMLgx0hXK9aZ/UqUxy+p4D4q+bUEG8T3dRSlrCP 5DhSAk4QYNjnf3oY3IHtDgIcXbe9ZCLYV+3fG9m2Vx9N/y+sRnteuHjNcjwBWc8L V/HJxsM8C4EL3ktnnpFF2dUQBa+Y/o7HZC/dwWu0dCT1S+xKfuaM5ekLNxt3/L/1 zLziJb7Qt9qHa88KwQliB0zH3mwAdabuRh86jKrnuxAg3AfUP8PAPkhq0BRtAgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUzVq6x+Fhlqi/dyCY/gZrgbxKP/MwHwYDVR0j BBgwFoAUA9ixbCQXxoxzJbPfLq1FoSCPokMwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9LRmU5RkczYXhIWm81R2VIRjNmRkZibVdDMTU3dTVuY1RXZGM2WUFxVm1C LzAvMDNEOEIxNkMyNDE3QzY4QzczMjVCM0RGMkVBRDQ1QTEyMDhGQTI0My5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8wM0Q4QjE2QzI0MTdDNjhDNzMy NUIzREYyRUFENDVBMTIwOEZBMjQzLmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0tG ZTlGRzNheEhabzVHZUhGM2ZGRmJtV0MxNTd1NW5jVFdkYzZZQXFWbUIvMC8wM0Q4 QjE2QzI0MTdDNjhDNzMyNUIzREYyRUFENDVBMTIwOEZBMjQzLm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA uvLqpOGFfUypn4RBIdihPEsZjtmchD/Dz5Xbt7uv4NbVrYyJNgP9mgOmxrkVSipI 9mzq8pOtNsioS4CUmLRwZQu9pdH8fSdp0T3EV4Gv4T4yw2niWbsdsPT3XtDTf31/ tIqNdqjgkO8ERAckW4rSFBhaTOSaneQx5V1odq6DzGYeg6fZVVGrKvfoG/EnZlWz hSHC7nw6gn3vKcG+UbVIFu1eDVf2LxZ8GJ0AhaSSyWuqjI6MItM9hbaQAw0YX3zd 7sg/2bn0tHCt89VdaKuDiGHTKEFwhfZsLNuY5xv5WWd/H9ODUUhyZ3B/qipHGqa6 0np3HD4m34dZaQCyo4ekSg== -----END CERTIFICATE-----Generated at Mon Aug 24 06:43:05 2026 by rpki-client