$ rpki-client -vvf rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.mft File: CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.mft (raw, json) Hash identifier: kt2d1T8+TGbHOX2jl954yNbkQYcNoFmucEDR91bccmI= Subject key identifier: 38:B3:FD:25:DA:0F:6B:49:EA:8F:30:BF:81:EC:9F:46:31:8E:DE:DD Authority key identifier: CD:23:91:FA:7C:28:AE:0F:9C:8B:2B:99:E1:90:92:A3:48:7A:2E:C9 Certificate issuer: /CN=CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9 Certificate serial: 2831D6AE83FCEFA1D8A9DA50CBB3860E9284CD51 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.cer Subject info access: rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.mft Manifest number: 0462 Signing time: Fri 24 Jul 2026 08:39:35 +0000 Manifest this update: Fri 24 Jul 2026 08:34:35 +0000 Manifest next update: Sat 25 Jul 2026 10:46:35 +0000 Files and hashes: 1: 323830343a313561343a3a2f33322d3434203d3e20323633343030.roa (hash: SXY+DqRaOha9W6rUgVkvX8kWfmFQeH74nzcZCLBrSxg=) 2: CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.crl (hash: 5TKb6oHfQ70+NUYe9xkuLFyOrbv13BRonV9eIjHWfRY=) 3: 3137372e3232322e3233322e302f32312d3233203d3e20323633343030.roa (hash: ehWpQ9o/kZgF5vi/U36kHWAcVfSolQS4g+0M1A98RzA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.crl rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 25 Jul 2026 10:46:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:31:d6:ae:83:fc:ef:a1:d8:a9:da:50:cb:b3:86:0e:92:84:cd:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9 Validity Not Before: Jul 24 08:34:35 2026 GMT Not After : Jul 25 10:46:35 2026 GMT Subject: CN=38B3FD25DA0F6B49EA8F30BF81EC9F46318EDEDD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:30:d3:48:64:d9:8c:e4:09:f2:46:5b:97:69: 6c:ea:6b:8c:e7:39:a0:06:81:b4:23:91:52:58:51: ca:8b:14:c1:a5:49:5e:b5:3e:35:b5:9e:0d:48:65: e7:0a:5f:73:0f:88:89:c5:79:11:b0:4a:63:41:6f: 4c:10:f1:61:21:c8:f8:cc:f8:e0:fb:47:5c:e0:27: d8:77:37:39:c6:a2:82:e2:ee:2b:f0:e6:11:c7:4f: 0d:51:6a:90:62:f4:4b:35:75:18:81:90:9a:0e:a3: ec:ff:7a:31:36:10:cc:de:dd:9c:76:92:85:1d:b7: 86:bb:04:ee:1f:0b:76:c5:40:d6:3d:7c:c2:b0:0a: 2e:c6:aa:be:7f:40:39:9d:8e:0c:51:6e:86:61:e2: 91:09:5d:86:db:ea:a1:ad:2f:f7:6e:c3:05:10:bb: 89:21:23:fc:9b:23:8b:fe:b7:06:76:d3:25:33:d0: a6:d5:88:05:26:ed:bf:68:dd:68:be:7d:2d:d0:92: be:36:66:ee:fe:05:3f:1f:3d:5f:a7:b7:42:0c:2d: 79:71:b3:eb:1e:66:5e:33:75:77:63:2c:01:a8:cd: 44:15:2f:41:48:f2:1e:94:39:13:ca:a7:c6:af:93: 64:0f:5b:58:f6:96:59:ff:56:23:b8:d0:f3:a6:d6: 4a:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:B3:FD:25:DA:0F:6B:49:EA:8F:30:BF:81:EC:9F:46:31:8E:DE:DD X509v3 Authority Key Identifier: keyid:CD:23:91:FA:7C:28:AE:0F:9C:8B:2B:99:E1:90:92:A3:48:7A:2E:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:b1:88:f8:6d:4a:24:27:7d:32:b9:da:b8:2b:50:48:75:82: 71:52:f2:d1:e2:a8:16:52:c9:9f:c2:2b:a6:fe:d7:2d:0c:d5: 10:12:95:0e:e9:da:7c:e6:31:68:c1:02:81:e7:47:04:fb:1e: 8b:88:45:3c:27:23:34:c0:68:18:4c:a2:f0:4c:bc:13:66:74: c1:13:a6:08:c4:30:02:7c:63:3b:63:ca:40:96:a3:20:5e:4e: b4:be:8b:4f:d6:57:28:24:86:3e:5d:37:1e:2d:47:2f:41:66: fb:4f:e0:30:8e:56:65:26:d7:e5:74:d9:62:c0:1c:e3:5b:a7: 44:8d:a7:cf:c2:81:ab:4a:5c:00:d5:27:62:77:f1:de:1f:54: f7:23:27:f0:a1:4f:7f:4a:fb:bd:10:f3:aa:51:b8:4f:67:b1: d5:8b:e1:07:64:79:6a:dd:07:d2:2a:ba:32:af:11:90:f0:32: 51:55:1b:59:d2:bc:81:fe:7f:79:43:cd:bb:11:45:ae:50:9e: cd:5e:5d:a6:54:c5:03:da:95:9d:76:bc:4c:0d:d4:53:f5:34: 67:1f:4a:b4:27:77:dc:25:f9:b0:68:ed:7d:a7:52:0d:ff:25: e2:4d:77:41:04:6d:e6:86:00:e5:ff:0c:72:b6:6d:97:af:7f: 15:10:a5:0c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUKDHWroP876HYqdpQy7OGDpKEzVEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0QyMzkxRkE3QzI4QUUwRjlDOEIyQjk5RTE5MDkyQTM0 ODdBMkVDOTAeFw0yNjA3MjQwODM0MzVaFw0yNjA3MjUxMDQ2MzVaMDMxMTAvBgNV BAMTKDM4QjNGRDI1REEwRjZCNDlFQThGMzBCRjgxRUM5RjQ2MzE4RURFREQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6MNNIZNmM5AnyRluXaWzqa4zn OaAGgbQjkVJYUcqLFMGlSV61PjW1ng1IZecKX3MPiInFeRGwSmNBb0wQ8WEhyPjM +OD7R1zgJ9h3NznGooLi7ivw5hHHTw1RapBi9Es1dRiBkJoOo+z/ejE2EMze3Zx2 koUdt4a7BO4fC3bFQNY9fMKwCi7Gqr5/QDmdjgxRboZh4pEJXYbb6qGtL/duwwUQ u4khI/ybI4v+twZ20yUz0KbViAUm7b9o3Wi+fS3Qkr42Zu7+BT8fPV+nt0IMLXlx s+seZl4zdXdjLAGozUQVL0FI8h6UORPKp8avk2QPW1j2lln/ViO40POm1krNAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUOLP9JdoPa0nqjzC/geyfRjGO3t0wHwYDVR0j BBgwFoAUzSOR+nworg+ciyuZ4ZCSo0h6LskwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMkVobnZBd1FCeHlQYmtoVXBoTVFueEN1VEVEZ3Y3a1NCMWFURDQxOFRo U1gvMS9DRDIzOTFGQTdDMjhBRTBGOUM4QjJCOTlFMTkwOTJBMzQ4N0EyRUM5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NEMjM5MUZBN0MyOEFFMEY5 QzhCMkI5OUUxOTA5MkEzNDg3QTJFQzkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MkVobnZBd1FCeHlQYmtoVXBoTVFueEN1VEVEZ3Y3a1NCMWFURDQxOFRoU1gvMS9D RDIzOTFGQTdDMjhBRTBGOUM4QjJCOTlFMTkwOTJBMzQ4N0EyRUM5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPrGI+G1KJCd9MrnauCtQSHWCcVLy0eKoFlLJn8Irpv7XLQzVEBKVDunafOYx aMECgedHBPsei4hFPCcjNMBoGEyi8Ey8E2Z0wROmCMQwAnxjO2PKQJajIF5OtL6L T9ZXKCSGPl03Hi1HL0Fm+0/gMI5WZSbX5XTZYsAc41unRI2nz8KBq0pcANUnYnfx 3h9U9yMn8KFPf0r7vRDzqlG4T2ex1YvhB2R5at0H0iq6Mq8RkPAyUVUbWdK8gf5/ eUPNuxFFrlCezV5dplTFA9qVnXa8TA3UU/U0Zx9KtCd33CX5sGjtfadSDf8l4k13 QQRt5oYA5f8McrZtl69/FRClDA== -----END CERTIFICATE-----Generated at Fri Jul 24 18:55:00 2026 by rpki-client