$ rpki-client -vvf rpki-repo.registro.br/repo/3As3Bd5oosFtNhQtDtxTwXztkwPAhcE1Jfq9rSB7buCh/0/9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.mft File: 9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.mft (raw, json) Hash identifier: 4YZoVkq+99iFyaSYEtrI2EP9BZ79wWeCOyHL+tqougA= Subject key identifier: 43:FF:E0:10:BC:38:C4:D4:B4:A2:D9:B5:95:F1:65:C1:1C:82:7B:9D Authority key identifier: 9A:32:CD:91:FC:E9:CA:DB:F2:8B:ED:F4:C7:20:E6:7B:79:AF:B9:CC Certificate issuer: /CN=9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC Certificate serial: 0A21F2DFAEC9A3A2F7F8E7A638B6BD21699B60D5 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.cer Subject info access: rsync://rpki-repo.registro.br/repo/3As3Bd5oosFtNhQtDtxTwXztkwPAhcE1Jfq9rSB7buCh/0/9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.mft Manifest number: 02D0 Signing time: Fri 24 Jul 2026 15:25:23 +0000 Manifest this update: Fri 24 Jul 2026 15:20:23 +0000 Manifest next update: Sat 25 Jul 2026 16:25:23 +0000 Files and hashes: 1: 9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.crl (hash: AVkfFwlrmS28xjbBfRAs1/54lqxgX8rHxPdmNa/ZWZ4=) 2: 323830343a326634303a3a2f33322d3438203d3e20323634383830.roa (hash: ORyxhMiPsLuMYUTUTFf1a5ZPgbN+I86oYsBHv0CQLjI=) 3: 3136382e3232372e35362e302f32322d3234203d3e20323634383830.roa (hash: cbbKnj2SOZFOPSYnm7IW0oAfYkFG8ZiF0WmU5IaJh4A=) 4: 3137302e3234362e3138342e302f32322d3234203d3e20323634383830.roa (hash: K2cK3NZIFljKeOpvvpHj0lLcmC4oQ0tB2wi3PEj4Arg=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3As3Bd5oosFtNhQtDtxTwXztkwPAhcE1Jfq9rSB7buCh/0/9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.crl rsync://rpki-repo.registro.br/repo/3As3Bd5oosFtNhQtDtxTwXztkwPAhcE1Jfq9rSB7buCh/0/9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 25 Jul 2026 16:25:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:21:f2:df:ae:c9:a3:a2:f7:f8:e7:a6:38:b6:bd:21:69:9b:60:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC Validity Not Before: Jul 24 15:20:23 2026 GMT Not After : Jul 25 16:25:23 2026 GMT Subject: CN=43FFE010BC38C4D4B4A2D9B595F165C11C827B9D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:6b:ea:4c:44:29:d0:3c:e2:56:d2:c5:9a:65: 34:b8:65:30:55:2c:a3:06:d9:8b:78:c7:7d:ba:4b: 9a:94:10:59:db:49:28:43:57:fe:b9:d8:42:95:99: 3a:ae:63:66:0f:f6:d3:d9:0b:44:d4:ac:9a:67:91: 92:a3:8e:d9:80:fe:34:77:61:b0:20:34:2c:26:64: 25:79:e1:1e:ed:bf:84:82:b4:ce:03:75:38:53:39: 42:75:a8:39:93:e9:6d:18:95:fa:11:6c:17:03:dc: f8:b6:49:6a:46:8b:51:94:ca:ad:12:38:b2:f1:07: ea:7e:f0:b3:89:15:5e:70:cf:03:b1:f4:df:cd:89: e6:28:f4:30:d0:b4:11:12:0b:7d:63:1e:5a:1c:c0: 3b:76:de:c6:4d:93:73:e3:78:b6:44:14:45:47:ca: ac:d2:c8:ec:8a:a1:b9:94:d9:75:13:34:d3:0d:e8: 17:45:d2:ea:da:60:2a:3e:82:3a:04:ff:5e:6d:c7: f3:e2:7c:c5:44:f3:79:ef:3a:2c:a8:eb:93:2d:aa: c3:5e:2b:71:87:db:89:cf:f6:d0:7d:ab:fc:c1:96: f3:c1:33:2a:02:a0:58:27:ad:c2:c2:ce:0f:7b:6d: bf:11:87:78:b6:d1:05:b5:52:c4:cf:dc:c3:91:57: 07:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:FF:E0:10:BC:38:C4:D4:B4:A2:D9:B5:95:F1:65:C1:1C:82:7B:9D X509v3 Authority Key Identifier: keyid:9A:32:CD:91:FC:E9:CA:DB:F2:8B:ED:F4:C7:20:E6:7B:79:AF:B9:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3As3Bd5oosFtNhQtDtxTwXztkwPAhcE1Jfq9rSB7buCh/0/9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3As3Bd5oosFtNhQtDtxTwXztkwPAhcE1Jfq9rSB7buCh/0/9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:27:f3:e4:42:6a:3b:56:12:dc:9d:68:b7:25:c3:ed:9a:30: 9f:dc:a7:10:cb:d8:86:05:df:73:8e:26:05:bc:16:0a:3c:ff: d7:8f:c7:36:00:52:99:3b:be:cf:f8:aa:fb:19:34:55:f4:d2: d3:d0:ad:85:5c:64:a5:20:93:a9:f9:7a:1c:a5:f5:5e:de:89: ba:55:1e:99:0c:38:1f:b9:a3:2b:7a:4a:37:29:9e:18:6d:b5: da:9e:68:4a:65:97:01:38:96:d9:51:c9:f6:19:f7:49:0b:31: 9c:54:11:ee:b0:41:26:f4:31:63:7d:58:19:bd:2b:da:f3:2c: d9:14:57:49:3a:c6:56:d6:37:84:d9:15:d9:84:ed:06:97:cd: 40:5b:1e:7d:75:77:0f:3c:86:2f:d0:56:e6:0e:da:cf:c2:72: 90:a0:f0:eb:1b:18:54:2a:3f:f3:0f:9c:86:13:dc:17:c8:0f: 73:54:3b:d6:ad:f5:1c:d1:48:56:b7:53:7c:8c:a3:29:b9:76: 2a:3d:f3:dd:7a:ff:3c:f8:b3:75:ea:23:e6:19:71:83:49:58: ab:70:c5:d9:52:d5:ed:f9:6f:d3:c3:24:60:66:64:68:0c:37: 8e:fb:1d:3b:79:40:fc:02:18:10:8f:44:95:17:8d:ff:e4:a4: 0a:ff:29:94 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUCiHy367Jo6L3+OemOLa9IWmbYNUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUEzMkNEOTFGQ0U5Q0FEQkYyOEJFREY0QzcyMEU2N0I3 OUFGQjlDQzAeFw0yNjA3MjQxNTIwMjNaFw0yNjA3MjUxNjI1MjNaMDMxMTAvBgNV BAMTKDQzRkZFMDEwQkMzOEM0RDRCNEEyRDlCNTk1RjE2NUMxMUM4MjdCOUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0a+pMRCnQPOJW0sWaZTS4ZTBV LKMG2Yt4x326S5qUEFnbSShDV/652EKVmTquY2YP9tPZC0TUrJpnkZKjjtmA/jR3 YbAgNCwmZCV54R7tv4SCtM4DdThTOUJ1qDmT6W0YlfoRbBcD3Pi2SWpGi1GUyq0S OLLxB+p+8LOJFV5wzwOx9N/NieYo9DDQtBESC31jHlocwDt23sZNk3PjeLZEFEVH yqzSyOyKobmU2XUTNNMN6BdF0uraYCo+gjoE/15tx/PifMVE83nvOiyo65MtqsNe K3GH24nP9tB9q/zBlvPBMyoCoFgnrcLCzg97bb8Rh3i20QW1UsTP3MORVwdbAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUQ//gELw4xNS0otm1lfFlwRyCe50wHwYDVR0j BBgwFoAUmjLNkfzpytvyi+30xyDme3mvucwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM0FzM0JkNW9vc0Z0TmhRdER0eFR3WHp0a3dQQWhjRTFKZnE5clNCN2J1 Q2gvMC85QTMyQ0Q5MUZDRTlDQURCRjI4QkVERjRDNzIwRTY3Qjc5QUZCOUNDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlBMzJDRDkxRkNFOUNBREJG MjhCRURGNEM3MjBFNjdCNzlBRkI5Q0MuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M0FzM0JkNW9vc0Z0TmhRdER0eFR3WHp0a3dQQWhjRTFKZnE5clNCN2J1Q2gvMC85 QTMyQ0Q5MUZDRTlDQURCRjI4QkVERjRDNzIwRTY3Qjc5QUZCOUNDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgCfz5EJqO1YS3J1otyXD7Zown9ynEMvYhgXfc44mBbwWCjz/14/HNgBSmTu+ z/iq+xk0VfTS09CthVxkpSCTqfl6HKX1Xt6JulUemQw4H7mjK3pKNymeGG212p5o SmWXATiW2VHJ9hn3SQsxnFQR7rBBJvQxY31YGb0r2vMs2RRXSTrGVtY3hNkV2YTt BpfNQFsefXV3DzyGL9BW5g7az8JykKDw6xsYVCo/8w+chhPcF8gPc1Q71q31HNFI VrdTfIyjKbl2Kj3z3Xr/PPizdeoj5hlxg0lYq3DF2VLV7flv08MkYGZkaAw3jvsd O3lA/AIYEI9ElReN/+SkCv8plA== -----END CERTIFICATE-----Generated at Fri Jul 24 17:46:17 2026 by rpki-client