$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/62b3479e-d188-4fbf-a2b8-0558d7e495cd/nA747Uq1S7sGJBCcsAHC4_YV5QM.mft File: nA747Uq1S7sGJBCcsAHC4_YV5QM.mft (raw, json) Hash identifier: Lnbr3FtOBNMpaMhWXxV1n89bqtZcAN0qdrBWVD9RJRQ= Subject key identifier: 7C:C4:5E:F5:0A:0F:04:94:0C:70:C1:74:5B:D6:02:01:E4:2C:C3:06 Authority key identifier: 58:4B:FB:8A:D2:60:37:15:03:B6:CD:8B:0E:F5:AE:A7:9C:9C:BB:15 Certificate issuer: /CN=584BFB8AD260371503B6CD8B0EF5AEA79C9CBB15 Certificate serial: 6B769816B67D825083C1C3B830C45FEC4FD6CEDC Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/584BFB8AD260371503B6CD8B0EF5AEA79C9CBB15.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/62b3479e-d188-4fbf-a2b8-0558d7e495cd/nA747Uq1S7sGJBCcsAHC4_YV5QM.mft Manifest number: 07 Signing time: Tue 06 Oct 2026 18:31:22 +0000 Manifest this update: Tue 06 Oct 2026 18:31:22 +0000 Manifest next update: Sat 10 Oct 2026 18:31:22 +0000 Files and hashes: 1: b2b5c9d7-3953-4321-b384-57adf5534c6f.roa (hash: 3RVvcsuwaTnZ89zYH8W/OpNIfaLKYrWMbkS6qE9+g1Q=) 2: f5ae5cb2-5c9a-4f86-87ed-8e26b9978ab5.roa (hash: imMIXnv7iUJyEXYmebcBSMI5HpMhZXaSQX93MqdAaZs=) 3: nA747Uq1S7sGJBCcsAHC4_YV5QM.crl (hash: OIxyq9SuytAi2ssMS87GV89sWg56ZuEx0592EWGTlEI=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/62b3479e-d188-4fbf-a2b8-0558d7e495cd/nA747Uq1S7sGJBCcsAHC4_YV5QM.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/62b3479e-d188-4fbf-a2b8-0558d7e495cd/nA747Uq1S7sGJBCcsAHC4_YV5QM.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/584BFB8AD260371503B6CD8B0EF5AEA79C9CBB15.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 08 Oct 2026 04:36:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:76:98:16:b6:7d:82:50:83:c1:c3:b8:30:c4:5f:ec:4f:d6:ce:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=584BFB8AD260371503B6CD8B0EF5AEA79C9CBB15 Validity Not Before: Oct 6 18:31:22 2026 GMT Not After : Oct 10 18:31:22 2026 GMT Subject: serialNumber=84a90978b68c023a0d05e06239ff4733976ee082737b69c2f4ca8040b1c0a562, CN=cdb9583c-a9d1-49af-98d4-96e3eb7e1cc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:cf:3c:bd:06:97:01:b3:f3:ba:1b:97:74:d8: 1e:47:94:72:bf:6f:56:09:e1:a2:06:a1:08:4a:a8: 33:1f:f6:bb:3e:4b:ec:16:5b:b7:f3:54:e2:db:1b: 58:13:23:e8:57:e1:9e:02:2c:fa:2d:8c:a1:53:a1: 96:83:bb:25:f5:b2:f2:fa:7b:9a:81:61:22:54:22: 8a:be:e9:44:2b:7c:f5:2b:52:9b:19:c7:69:22:89: 81:3b:36:af:18:9b:2d:c5:f4:99:de:1e:df:6f:72: bd:09:e1:66:0c:de:fd:96:0c:af:69:5f:4d:ca:ef: 13:2d:f3:8c:1c:e1:7d:67:da:6c:75:68:65:d7:e7: c8:a4:90:fe:82:f5:c4:a3:e0:74:54:02:7f:75:3d: 07:2f:27:a8:be:b6:2f:fa:87:0b:2a:99:6b:d4:63: c7:e8:e3:02:df:f9:13:51:8b:71:46:9f:20:40:d9: 23:1c:1b:02:63:ff:be:09:2f:aa:a0:a5:41:e9:38: a2:b1:83:52:44:8a:1e:d3:09:0c:a0:67:59:ea:21: ca:5a:19:2f:36:26:4a:3d:37:b9:2c:0b:8a:0a:bf: 6d:e9:46:24:4a:83:92:12:0f:8e:9d:e8:b9:0c:60: c3:9e:17:a3:93:16:1f:84:34:d6:51:f3:15:60:9a: 09:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:C4:5E:F5:0A:0F:04:94:0C:70:C1:74:5B:D6:02:01:E4:2C:C3:06 X509v3 Authority Key Identifier: keyid:58:4B:FB:8A:D2:60:37:15:03:B6:CD:8B:0E:F5:AE:A7:9C:9C:BB:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/584BFB8AD260371503B6CD8B0EF5AEA79C9CBB15.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/62b3479e-d188-4fbf-a2b8-0558d7e495cd/nA747Uq1S7sGJBCcsAHC4_YV5QM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/62b3479e-d188-4fbf-a2b8-0558d7e495cd/nA747Uq1S7sGJBCcsAHC4_YV5QM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:61:9e:e7:49:43:9d:1e:54:97:65:7b:ac:73:27:61:a5:38: 48:df:65:1f:79:09:32:fa:c6:de:65:8d:49:1d:f0:68:7c:0b: d4:e0:fe:10:17:aa:55:c1:4d:96:e3:82:ee:3a:c1:75:51:0b: 61:33:77:35:f5:15:df:38:10:9d:84:d4:d3:ec:b1:2a:28:d6: 57:71:71:fc:bf:79:da:14:c9:0f:9f:8d:8b:b1:fe:fd:67:cd: ed:04:5e:1f:41:9d:a7:7d:34:52:7f:6a:ab:99:01:84:cd:1b: 48:49:00:e7:8a:f0:d1:40:f2:68:85:bd:54:ce:f9:e2:e0:97: 85:94:c5:8a:59:36:3c:9c:61:0f:ce:58:d9:0f:ed:51:b0:49: f1:79:be:3e:cc:c2:f4:95:96:b7:5e:55:87:e5:67:c6:57:3a: 49:8b:82:72:7b:9b:d1:70:60:9d:3c:df:e0:e5:62:05:a4:e7: 3a:f9:3f:c2:75:a6:56:62:66:25:a2:8a:27:58:38:51:93:18: 97:57:b3:a9:a5:ab:8b:a2:d5:60:ac:e2:48:1f:37:33:d6:09: f5:00:4b:bb:53:c2:c0:45:98:c7:82:85:f8:1f:34:80:d4:91: f1:82:20:b2:cf:15:f5:cb:24:b4:b6:08:72:12:1e:5f:24:72: 0f:4d:3f:25 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgIUa3aYFrZ9glCDwcO4MMRf7E/WztwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTg0QkZCOEFEMjYwMzcxNTAzQjZDRDhCMEVGNUFFQTc5 QzlDQkIxNTAeFw0yNjEwMDYxODMxMjJaFw0yNjEwMTAxODMxMjJaMHoxSTBHBgNV BAUTQDg0YTkwOTc4YjY4YzAyM2EwZDA1ZTA2MjM5ZmY0NzMzOTc2ZWUwODI3Mzdi NjljMmY0Y2E4MDQwYjFjMGE1NjIxLTArBgNVBAMTJGNkYjk1ODNjLWE5ZDEtNDlh Zi05OGQ0LTk2ZTNlYjdlMWNjMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAODPPL0GlwGz87obl3TYHkeUcr9vVgnhogahCEqoMx/2uz5L7BZbt/NU4tsb WBMj6FfhngIs+i2MoVOhloO7JfWy8vp7moFhIlQiir7pRCt89StSmxnHaSKJgTs2 rxibLcX0md4e329yvQnhZgze/ZYMr2lfTcrvEy3zjBzhfWfabHVoZdfnyKSQ/oL1 xKPgdFQCf3U9By8nqL62L/qHCyqZa9Rjx+jjAt/5E1GLcUafIEDZIxwbAmP/vgkv qqClQek4orGDUkSKHtMJDKBnWeohyloZLzYmSj03uSwLigq/belGJEqDkhIPjp3o uQxgw54Xo5MWH4Q01lHzFWCaCVkCAwEAAaOCAkUwggJBMB0GA1UdDgQWBBR8xF71 Cg8ElAxwwXRb1gIB5CzDBjAfBgNVHSMEGDAWgBRYS/uK0mA3FQO2zYsO9a6nnJy7 FTAOBgNVHQ8BAf8EBAMCB4AweAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxy c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS81 ODRCRkI4QUQyNjAzNzE1MDNCNkNEOEIwRUY1QUVBNzlDOUNCQjE1LmNlcjCBlQYI KwYBBQUHAQsEgYgwgYUwgYIGCCsGAQUFBzALhnZyc3luYzovL3Jwa2ktcnN5bmMu dXMtZWFzdC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzYyYjM0NzllLWQxODgtNGZi Zi1hMmI4LTA1NThkN2U0OTVjZC9uQTc0N1VxMVM3c0dKQkNjc0FIQzRfWVY1UU0u bWZ0MIGIBgNVHR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVh c3QtMi5hbWF6b25hd3MuY29tL3ZvbHVtZS82MmIzNDc5ZS1kMTg4LTRmYmYtYTJi OC0wNTU4ZDdlNDk1Y2QvbkE3NDdVcTFTN3NHSkJDY3NBSEM0X1lWNVFNLmNybDAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIA AQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsF AAOCAQEASGGe50lDnR5Ul2V7rHMnYaU4SN9lH3kJMvrG3mWNSR3waHwL1OD+EBeq VcFNluOC7jrBdVELYTN3NfUV3zgQnYTU0+yxKijWV3Fx/L952hTJD5+Ni7H+/WfN 7QReH0Gdp300Un9qq5kBhM0bSEkA54rw0UDyaIW9VM754uCXhZTFilk2PJxhD85Y 2Q/tUbBJ8Xm+PszC9JWWt15Vh+Vnxlc6SYuCcnub0XBgnTzf4OViBaTnOvk/wnWm VmJmJaKKJ1g4UZMYl1ezqaWri6LVYKziSB83M9YJ9QBLu1PCwEWYx4KF+B80gNSR 8YIgss8V9csktLYIchIeXyRyD00/JQ== -----END CERTIFICATE-----Generated at Wed Oct 7 03:22:37 2026 by rpki-client