$ rpki-client -vvf rpki-repo.registro.br/repo/2dSoa12UGnYxP6vT935eLg8MtFxneihFC63zdZB2kg4q/0/4295C42DF9ABE644065D731C7A08680CD3ECBE88.mft File: 4295C42DF9ABE644065D731C7A08680CD3ECBE88.mft (raw, json) Hash identifier: CGZHp7az7IbVVPWIX5o+F4IEk0jMocfknnLQUI791KU= Subject key identifier: 28:B3:FA:E9:BB:B1:A7:92:20:CE:8A:E0:58:50:74:D9:86:71:48:EE Authority key identifier: 42:95:C4:2D:F9:AB:E6:44:06:5D:73:1C:7A:08:68:0C:D3:EC:BE:88 Certificate issuer: /CN=4295C42DF9ABE644065D731C7A08680CD3ECBE88 Certificate serial: 470878F8C078FCF4D8E4B1794ECEC9CAE114FF70 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4295C42DF9ABE644065D731C7A08680CD3ECBE88.cer Subject info access: rsync://rpki-repo.registro.br/repo/2dSoa12UGnYxP6vT935eLg8MtFxneihFC63zdZB2kg4q/0/4295C42DF9ABE644065D731C7A08680CD3ECBE88.mft Manifest number: 30 Signing time: Fri 24 Jul 2026 09:24:29 +0000 Manifest this update: Fri 24 Jul 2026 09:19:29 +0000 Manifest next update: Sat 25 Jul 2026 13:20:29 +0000 Files and hashes: 1: 323830343a333964343a3a2f33322d313238203d3e20323636303533.roa (hash: S+1YM580MYl2/Ez26cZdvbOuNQSh+xfPKBssmmPx6uY=) 2: 34352e342e31362e302f32322d3332203d3e20323636303533.roa (hash: 8bTI6STV9myie2O7jjWabFesGEs4DvpRnx5NUft7YyM=) 3: 4295C42DF9ABE644065D731C7A08680CD3ECBE88.crl (hash: PWTOoEwFqQEwCtFF0KwjZJDYV0wHl6uww0CTL0JrTQk=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2dSoa12UGnYxP6vT935eLg8MtFxneihFC63zdZB2kg4q/0/4295C42DF9ABE644065D731C7A08680CD3ECBE88.crl rsync://rpki-repo.registro.br/repo/2dSoa12UGnYxP6vT935eLg8MtFxneihFC63zdZB2kg4q/0/4295C42DF9ABE644065D731C7A08680CD3ECBE88.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4295C42DF9ABE644065D731C7A08680CD3ECBE88.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 25 Jul 2026 13:20:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:08:78:f8:c0:78:fc:f4:d8:e4:b1:79:4e:ce:c9:ca:e1:14:ff:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4295C42DF9ABE644065D731C7A08680CD3ECBE88 Validity Not Before: Jul 24 09:19:29 2026 GMT Not After : Jul 25 13:20:29 2026 GMT Subject: CN=28B3FAE9BBB1A79220CE8AE0585074D9867148EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:37:11:3a:a2:d1:52:95:b0:7e:08:90:26:7d: d4:6d:99:4c:40:5b:b4:96:78:75:86:b4:f2:56:50: 7c:8d:55:8a:f2:07:0b:ff:c1:4c:c8:4e:b0:1c:19: 80:8e:77:f7:12:1d:3d:a6:ce:e4:75:a5:34:bd:bf: 07:e9:00:f7:1b:a0:b8:2a:3e:ed:13:3c:bb:17:da: 14:51:18:01:80:ec:e3:9d:39:04:6b:6a:6c:e8:f1: 38:1f:c9:f5:36:89:6b:95:ca:f8:a1:20:a6:2e:bc: 9e:75:2d:b3:74:58:59:eb:e4:48:6e:46:2e:6d:ec: db:75:28:2f:75:45:92:62:89:7a:5a:55:b3:10:3a: 82:65:61:12:67:64:aa:d3:16:d2:56:52:b9:57:e5: 7a:e8:de:54:19:0f:df:43:10:dd:a8:ef:b4:e4:ad: 9f:22:be:f7:65:e2:7f:e0:6f:da:29:00:3a:90:42: 4e:42:9b:ef:d2:07:5a:74:e5:53:ef:39:e7:d5:93: fe:8a:40:b9:b8:aa:16:7e:d5:65:e2:35:fc:7a:b3: fa:2a:e0:88:47:de:77:91:12:fd:20:f7:61:f6:b8: 47:99:8d:72:49:d8:2a:47:89:d6:e6:c5:11:20:4d: 79:9a:eb:2b:6f:c7:1d:33:c6:81:70:e1:31:48:f1: ca:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:B3:FA:E9:BB:B1:A7:92:20:CE:8A:E0:58:50:74:D9:86:71:48:EE X509v3 Authority Key Identifier: keyid:42:95:C4:2D:F9:AB:E6:44:06:5D:73:1C:7A:08:68:0C:D3:EC:BE:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2dSoa12UGnYxP6vT935eLg8MtFxneihFC63zdZB2kg4q/0/4295C42DF9ABE644065D731C7A08680CD3ECBE88.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4295C42DF9ABE644065D731C7A08680CD3ECBE88.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dSoa12UGnYxP6vT935eLg8MtFxneihFC63zdZB2kg4q/0/4295C42DF9ABE644065D731C7A08680CD3ECBE88.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:74:a7:ca:5a:f9:f6:ec:38:a7:c8:67:71:24:b5:a7:15:19: 7c:88:fe:69:d0:c7:1b:41:2c:c7:9f:42:60:60:19:c7:fb:46: 2c:5c:5a:87:5b:8e:04:f3:1a:9d:7e:7a:8a:11:b6:5a:4e:c8: c5:85:25:80:5b:4b:81:93:2f:a1:64:d1:2c:c6:97:a2:3b:2b: 46:84:19:7e:9f:8d:83:59:d7:fd:70:2f:16:93:45:46:8d:07: c4:3f:82:e7:33:be:b5:15:27:7f:eb:58:67:6d:3c:e0:e6:00: fb:fd:98:9b:13:7b:3c:98:b3:92:73:26:95:5f:97:af:16:5a: 2b:7f:b8:2b:2d:ee:23:03:ad:d3:0c:19:ed:a7:85:ed:b8:9a: be:22:f5:99:d0:75:34:9a:eb:f0:ef:b6:71:4d:0c:6b:72:4e: e6:b2:86:e3:c7:eb:0e:88:ad:fc:ef:25:24:9c:a9:8e:13:84: bc:ea:32:cb:63:49:79:81:80:5b:a6:ed:d0:c2:48:d1:00:69: 22:b6:0c:de:1f:a8:d3:77:54:fe:80:7a:cd:a2:25:be:16:05: 75:13:02:a0:e8:59:66:ee:e9:e9:65:96:e6:3d:68:4d:99:8e: 33:63:71:77:4e:97:10:eb:c6:ef:2a:58:88:00:e9:54:84:f4: dc:34:37:f9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIURwh4+MB4/PTY5LF5Ts7JyuEU/3AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDI5NUM0MkRGOUFCRTY0NDA2NUQ3MzFDN0EwODY4MENE M0VDQkU4ODAeFw0yNjA3MjQwOTE5MjlaFw0yNjA3MjUxMzIwMjlaMDMxMTAvBgNV BAMTKDI4QjNGQUU5QkJCMUE3OTIyMENFOEFFMDU4NTA3NEQ5ODY3MTQ4RUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoNxE6otFSlbB+CJAmfdRtmUxA W7SWeHWGtPJWUHyNVYryBwv/wUzITrAcGYCOd/cSHT2mzuR1pTS9vwfpAPcboLgq Pu0TPLsX2hRRGAGA7OOdOQRramzo8TgfyfU2iWuVyvihIKYuvJ51LbN0WFnr5Ehu Ri5t7Nt1KC91RZJiiXpaVbMQOoJlYRJnZKrTFtJWUrlX5Xro3lQZD99DEN2o77Tk rZ8ivvdl4n/gb9opADqQQk5Cm+/SB1p05VPvOefVk/6KQLm4qhZ+1WXiNfx6s/oq 4IhH3neREv0g92H2uEeZjXJJ2CpHidbmxREgTXma6ytvxx0zxoFw4TFI8crbAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUKLP66buxp5IgzorgWFB02YZxSO4wHwYDVR0j BBgwFoAUQpXELfmr5kQGXXMceghoDNPsvogwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMmRTb2ExMlVHbll4UDZ2VDkzNWVMZzhNdEZ4bmVpaEZDNjN6ZFpCMmtn NHEvMC80Mjk1QzQyREY5QUJFNjQ0MDY1RDczMUM3QTA4NjgwQ0QzRUNCRTg4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQyOTVDNDJERjlBQkU2NDQw NjVENzMxQzdBMDg2ODBDRDNFQ0JFODguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MmRTb2ExMlVHbll4UDZ2VDkzNWVMZzhNdEZ4bmVpaEZDNjN6ZFpCMmtnNHEvMC80 Mjk1QzQyREY5QUJFNjQ0MDY1RDczMUM3QTA4NjgwQ0QzRUNCRTg4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYnSnylr59uw4p8hncSS1pxUZfIj+adDHG0Esx59CYGAZx/tGLFxah1uOBPMa nX56ihG2Wk7IxYUlgFtLgZMvoWTRLMaXojsrRoQZfp+Ng1nX/XAvFpNFRo0HxD+C 5zO+tRUnf+tYZ2084OYA+/2YmxN7PJizknMmlV+XrxZaK3+4Ky3uIwOt0wwZ7aeF 7biaviL1mdB1NJrr8O+2cU0Ma3JO5rKG48frDoit/O8lJJypjhOEvOoyy2NJeYGA W6bt0MJI0QBpIrYM3h+o03dU/oB6zaIlvhYFdRMCoOhZZu7p6WWW5j1oTZmOM2Nx d06XEOvG7ypYiADpVIT03DQ3+Q== -----END CERTIFICATE-----Generated at Fri Jul 24 15:45:51 2026 by rpki-client