$ rpki-client -vvvf rpki-repo.registro.br/repo/q9g6AQUVeUdhYJQDTf81qcSeJjnCMKofX141GRDEmo1/0/864BCB111FFBF71A179480C7DD77FCC664D8AB59.mft File: 864BCB111FFBF71A179480C7DD77FCC664D8AB59.mft (raw, json) Hash identifier: L7I+ioFVtO0FJYgIoq1mStqQIfM7t0Qnms3l0KVF7/U= Subject key identifier: 02:24:55:B8:21:0C:98:2D:AA:02:69:99:CB:F0:48:A3:13:3B:06:1A Authority key identifier: 86:4B:CB:11:1F:FB:F7:1A:17:94:80:C7:DD:77:FC:C6:64:D8:AB:59 Certificate issuer: /CN=864BCB111FFBF71A179480C7DD77FCC664D8AB59 Certificate serial: 69748331DFB4F4DD01F5041EA3F42CB8CE0D44C0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/864BCB111FFBF71A179480C7DD77FCC664D8AB59.cer Subject info access: rsync://rpki-repo.registro.br/repo/q9g6AQUVeUdhYJQDTf81qcSeJjnCMKofX141GRDEmo1/0/864BCB111FFBF71A179480C7DD77FCC664D8AB59.mft Manifest number: 02EE Signing time: Mon 24 Aug 2026 20:17:14 +0000 Manifest this update: Mon 24 Aug 2026 20:12:14 +0000 Manifest next update: Tue 25 Aug 2026 21:13:14 +0000 Files and hashes: 1: 323830343a313164343a3a2f33322d3336203d3e20323633343432.roa (hash: SqaG1ByEtLKbKBLHPMaGERDNDokiA6oFQqtdLll8Mpw=) 2: 3137372e31302e39322e302f32322d3234203d3e20323633343432.roa (hash: FwQDPxYOC1q1NdrZoFlCaJffZN0J9Gi6//21Wj8SrVI=) 3: 864BCB111FFBF71A179480C7DD77FCC664D8AB59.crl (hash: seF0alhc1m3UHdrAbvB1JhsXzlIJdHP2ovXzjiDKBcQ=) 4: 3137372e39312e3134342e302f32302d3234203d3e20323633343432.roa (hash: Q6zl+tlCTJgEQn2fqucoZGDiBQNHFf+bKRXCbAS1Nb0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/q9g6AQUVeUdhYJQDTf81qcSeJjnCMKofX141GRDEmo1/0/864BCB111FFBF71A179480C7DD77FCC664D8AB59.crl rsync://rpki-repo.registro.br/repo/q9g6AQUVeUdhYJQDTf81qcSeJjnCMKofX141GRDEmo1/0/864BCB111FFBF71A179480C7DD77FCC664D8AB59.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/864BCB111FFBF71A179480C7DD77FCC664D8AB59.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 25 Aug 2026 21:13:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:74:83:31:df:b4:f4:dd:01:f5:04:1e:a3:f4:2c:b8:ce:0d:44:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=864BCB111FFBF71A179480C7DD77FCC664D8AB59 Validity Not Before: Aug 24 20:12:14 2026 GMT Not After : Aug 25 21:13:14 2026 GMT Subject: CN=022455B8210C982DAA026999CBF048A3133B061A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:41:52:1f:5c:d8:00:cb:37:86:80:e8:9c:b9: 65:e8:b0:2d:30:2b:14:e1:00:61:7e:48:4e:b2:8e: 0c:00:18:b5:57:65:27:54:69:8f:ce:55:93:8d:39: 4b:c5:2c:b8:6f:7b:86:36:ac:40:45:86:4e:37:91: f1:ac:72:e1:1f:38:8d:c2:b4:90:c8:b8:bb:2c:8e: 23:9d:ea:64:f2:40:ea:99:82:6c:71:9a:a2:af:44: b4:fb:cc:77:3c:c4:7f:36:85:8d:72:1e:12:42:3d: 13:06:a6:e9:8c:2c:38:00:09:35:a6:ce:12:d7:51: 32:b1:f0:db:fb:9c:e4:dd:89:f7:4c:5c:16:7b:05: 6f:df:fb:bf:ff:b7:44:03:64:9d:a7:5c:bc:14:e5: 24:96:2a:6c:52:d8:44:8f:29:b7:3a:e2:f4:e2:31: 83:91:c2:03:f6:b2:33:88:9c:da:93:ad:d5:f2:7d: 5f:97:40:57:a9:f2:5a:6a:a1:37:31:42:8f:5d:13: 0c:65:76:3d:61:e3:98:3c:15:7d:40:df:75:d8:55: 20:8c:54:93:4f:34:bc:f9:ec:d6:94:5f:92:9b:2d: 39:95:cb:8f:22:a9:b2:8f:0f:1d:b4:d0:e3:d2:a8: 7a:eb:18:e8:07:c0:25:89:13:1d:dc:3e:0b:c9:be: 17:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:24:55:B8:21:0C:98:2D:AA:02:69:99:CB:F0:48:A3:13:3B:06:1A X509v3 Authority Key Identifier: keyid:86:4B:CB:11:1F:FB:F7:1A:17:94:80:C7:DD:77:FC:C6:64:D8:AB:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/q9g6AQUVeUdhYJQDTf81qcSeJjnCMKofX141GRDEmo1/0/864BCB111FFBF71A179480C7DD77FCC664D8AB59.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/864BCB111FFBF71A179480C7DD77FCC664D8AB59.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/q9g6AQUVeUdhYJQDTf81qcSeJjnCMKofX141GRDEmo1/0/864BCB111FFBF71A179480C7DD77FCC664D8AB59.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:89:ff:ce:d2:64:60:93:44:fc:75:a2:c5:27:ae:a8:6a:42: 4f:c5:df:35:15:8e:49:7f:2b:38:a6:34:16:be:d4:df:9b:a0: f9:02:03:5b:bf:8b:de:68:4a:fd:86:30:f6:99:78:1b:43:a3: 72:48:19:cf:e6:78:60:b8:6c:0b:8e:0c:5a:5d:9b:c0:b8:85: cd:99:28:e5:be:ec:4e:a0:f8:28:cc:15:0b:0f:7c:fb:9c:55: 64:47:15:6b:dc:b8:4b:25:41:2a:87:86:74:9e:63:2b:2e:53: b0:67:96:36:e9:eb:94:1f:83:c9:f3:12:2c:16:a1:94:c8:eb: 72:2b:cc:64:b2:8c:1c:3f:d8:54:a2:a5:e5:ed:49:a1:f5:26: 81:df:e1:5b:39:02:60:b0:7f:47:ff:1c:d8:4d:57:a9:e5:06: 41:38:44:22:42:a1:04:db:e4:aa:fa:6d:ed:11:2b:ef:49:01: 56:1e:9d:c1:ac:c5:22:22:42:9e:a1:ed:44:7b:99:7b:e4:e2: 48:ed:1b:86:98:fc:1c:da:fc:a9:60:a0:f9:dd:11:f1:26:91: 88:65:8a:a1:3a:cc:57:47:0a:81:ca:9c:76:9a:13:03:9c:99: d8:81:ee:24:3e:6e:ad:80:16:de:1e:12:11:86:87:e6:26:10: 68:0f:d9:d7 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUaXSDMd+09N0B9QQeo/QsuM4NRMAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODY0QkNCMTExRkZCRjcxQTE3OTQ4MEM3REQ3N0ZDQzY2 NEQ4QUI1OTAeFw0yNjA4MjQyMDEyMTRaFw0yNjA4MjUyMTEzMTRaMDMxMTAvBgNV BAMTKDAyMjQ1NUI4MjEwQzk4MkRBQTAyNjk5OUNCRjA0OEEzMTMzQjA2MUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyQVIfXNgAyzeGgOicuWXosC0w KxThAGF+SE6yjgwAGLVXZSdUaY/OVZONOUvFLLhve4Y2rEBFhk43kfGscuEfOI3C tJDIuLssjiOd6mTyQOqZgmxxmqKvRLT7zHc8xH82hY1yHhJCPRMGpumMLDgACTWm zhLXUTKx8Nv7nOTdifdMXBZ7BW/f+7//t0QDZJ2nXLwU5SSWKmxS2ESPKbc64vTi MYORwgP2sjOInNqTrdXyfV+XQFep8lpqoTcxQo9dEwxldj1h45g8FX1A33XYVSCM VJNPNLz57NaUX5KbLTmVy48iqbKPDx200OPSqHrrGOgHwCWJEx3cPgvJvhf/AgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUAiRVuCEMmC2qAmmZy/BIoxM7BhowHwYDVR0j BBgwFoAUhkvLER/79xoXlIDH3Xf8xmTYq1kwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9xOWc2QVFVVmVVZGhZSlFEVGY4MXFjU2VKam5DTUtvZlgxNDFHUkRFbW8x LzAvODY0QkNCMTExRkZCRjcxQTE3OTQ4MEM3REQ3N0ZDQzY2NEQ4QUI1OS5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS84NjRCQ0IxMTFGRkJGNzFBMTc5 NDgwQzdERDc3RkNDNjY0RDhBQjU5LmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL3E5 ZzZBUVVWZVVkaFlKUURUZjgxcWNTZUpqbkNNS29mWDE0MUdSREVtbzEvMC84NjRC Q0IxMTFGRkJGNzFBMTc5NDgwQzdERDc3RkNDNjY0RDhBQjU5Lm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA P4n/ztJkYJNE/HWixSeuqGpCT8XfNRWOSX8rOKY0Fr7U35ug+QIDW7+L3mhK/YYw 9pl4G0OjckgZz+Z4YLhsC44MWl2bwLiFzZko5b7sTqD4KMwVCw98+5xVZEcVa9y4 SyVBKoeGdJ5jKy5TsGeWNunrlB+DyfMSLBahlMjrcivMZLKMHD/YVKKl5e1JofUm gd/hWzkCYLB/R/8c2E1XqeUGQThEIkKhBNvkqvpt7REr70kBVh6dwazFIiJCnqHt RHuZe+TiSO0bhpj8HNr8qWCg+d0R8SaRiGWKoTrMV0cKgcqcdpoTA5yZ2IHuJD5u rYAW3h4SEYaH5iYQaA/Z1w== -----END CERTIFICATE-----Generated at Tue Aug 25 13:49:51 2026 by rpki-client