$ rpki-client -vvf rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.mft File: 8BAE9C90EBC5082F802055EFAA6360C661BF85CE.mft (raw, json) Hash identifier: zJT+irVz7ZSCXmFYrgVmHGjbRMMFTlSzGMiiL+7re+w= Subject key identifier: 54:EC:D7:70:17:55:1D:4D:C0:50:31:29:A6:64:3F:DE:62:02:FE:8A Authority key identifier: 8B:AE:9C:90:EB:C5:08:2F:80:20:55:EF:AA:63:60:C6:61:BF:85:CE Certificate issuer: /CN=8BAE9C90EBC5082F802055EFAA6360C661BF85CE Certificate serial: 057BFF3E0F734C9E19A38D834FF40AA475C5E296 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.cer Subject info access: rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.mft Manifest number: 0429 Signing time: Thu 23 Jul 2026 11:22:48 +0000 Manifest this update: Thu 23 Jul 2026 11:17:48 +0000 Manifest next update: Fri 24 Jul 2026 14:13:48 +0000 Files and hashes: 1: 8BAE9C90EBC5082F802055EFAA6360C661BF85CE.crl (hash: hBzjSs7vpw1qI/Wxrg2luhKM1jAXaiy7wb6PEk4wcas=) 2: 3133382e3138352e3233362e302f32322d3234203d3e20323633393139.roa (hash: KYkcxrUCG5d2OgDxXVUc4Ip1FNkjOzjKHcyZw6KqQbM=) 3: 323830343a323762633a3a2f33322d3438203d3e20323633393139.roa (hash: w/YO1KIf4eo5zvFM926/mpG6uypq9a8w/nPaoqyoSig=) 4: 3137302e302e3230382e302f32322d3234203d3e20323633393139.roa (hash: e4E3vMJmvzuFUBj3Gl3MPDMXsuyK/NWYw9KKWpE7NIU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.crl rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 24 Jul 2026 14:13:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:7b:ff:3e:0f:73:4c:9e:19:a3:8d:83:4f:f4:0a:a4:75:c5:e2:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BAE9C90EBC5082F802055EFAA6360C661BF85CE Validity Not Before: Jul 23 11:17:48 2026 GMT Not After : Jul 24 14:13:48 2026 GMT Subject: CN=54ECD77017551D4DC0503129A6643FDE6202FE8A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:38:21:f5:bf:c0:c7:11:12:38:e7:28:fd:f4: ff:b1:4d:68:cc:3f:98:b6:ea:1e:63:70:21:cf:47: 39:4c:bd:31:7a:dc:92:fd:27:18:7a:f6:3c:86:87: 2f:d9:59:4d:33:d4:ec:ab:66:48:28:67:2e:4a:30: 39:4a:b0:fe:12:1d:07:b9:9a:45:d1:c5:fc:ff:d2: 4c:bf:ba:9b:af:73:6f:61:4a:71:83:9e:22:75:93: a0:ac:72:1f:2c:52:71:b8:da:72:1d:4d:dc:b7:78: 7f:fd:9d:e8:03:42:fa:3d:3e:2d:51:7d:31:bd:07: 16:e9:4d:c2:25:c9:f8:36:5b:ab:e1:d3:38:81:87: b4:f1:f3:01:11:ea:e5:61:b3:65:bf:bc:69:a4:78: f5:3b:75:3d:2d:fc:70:24:e4:e5:e6:76:89:4d:f6: 60:d0:4a:70:35:75:d1:58:7f:77:13:eb:56:f6:e1: d9:7f:7e:9f:aa:c0:d2:f7:5f:eb:c6:dc:6a:5e:60: 64:bd:d1:0b:3b:fa:ca:73:ec:b0:55:19:41:ae:0c: 15:b2:a9:6a:c4:99:31:b1:67:bc:15:a7:32:58:75: 0e:27:f7:8b:f9:8f:4c:47:14:99:ce:fe:a7:b4:91: ac:57:55:c5:e0:d4:bb:f6:26:e5:ae:e9:a9:8e:49: b8:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:EC:D7:70:17:55:1D:4D:C0:50:31:29:A6:64:3F:DE:62:02:FE:8A X509v3 Authority Key Identifier: keyid:8B:AE:9C:90:EB:C5:08:2F:80:20:55:EF:AA:63:60:C6:61:BF:85:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:34:83:39:31:4f:7a:94:26:92:dd:7b:fa:eb:d3:28:90:21: 32:18:0d:47:a1:43:04:fb:4c:e2:87:fd:53:6c:3c:ee:cb:45: ea:d0:9c:88:4c:25:78:1c:a8:0b:ea:cc:ef:b3:97:e7:61:d2: 3c:b4:3d:6a:70:c8:53:3b:53:80:c1:81:47:5a:52:81:49:7f: d4:fc:00:9e:e9:40:8a:89:d0:da:82:d4:b4:fe:5f:14:ee:60: 8f:0e:a3:8b:3b:c3:b3:ef:19:ce:22:14:94:32:bd:01:3b:c0: 20:09:9e:39:14:85:84:28:52:35:66:29:bc:94:cd:26:34:c5: ab:78:3c:f3:31:ee:5d:96:54:18:85:d0:36:fe:e8:fb:99:33: 4b:df:1d:9f:9d:dd:3c:ed:da:18:ae:b1:c9:81:fa:4d:d5:70: 51:8c:c1:ba:d2:16:90:d0:2c:e6:49:3e:cc:79:e6:86:80:6a: 81:f4:10:36:a2:17:86:bf:12:72:75:d5:35:8b:7f:ed:a6:e8: 51:64:e3:d6:da:d8:75:e8:17:f4:ca:f4:5c:b1:1c:fa:bc:9f: 08:c8:6b:a9:0c:ee:c2:9a:f3:b8:24:d8:6a:84:04:54:a9:c9: 4c:15:4c:f4:05:e9:41:74:84:d5:40:7c:1c:e1:64:b9:29:c6: 97:85:23:74 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUBXv/Pg9zTJ4Zo42DT/QKpHXF4pYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJBRTlDOTBFQkM1MDgyRjgwMjA1NUVGQUE2MzYwQzY2 MUJGODVDRTAeFw0yNjA3MjMxMTE3NDhaFw0yNjA3MjQxNDEzNDhaMDMxMTAvBgNV BAMTKDU0RUNENzcwMTc1NTFENERDMDUwMzEyOUE2NjQzRkRFNjIwMkZFOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCIOCH1v8DHERI45yj99P+xTWjM P5i26h5jcCHPRzlMvTF63JL9Jxh69jyGhy/ZWU0z1OyrZkgoZy5KMDlKsP4SHQe5 mkXRxfz/0ky/upuvc29hSnGDniJ1k6Csch8sUnG42nIdTdy3eH/9negDQvo9Pi1R fTG9BxbpTcIlyfg2W6vh0ziBh7Tx8wER6uVhs2W/vGmkePU7dT0t/HAk5OXmdolN 9mDQSnA1ddFYf3cT61b24dl/fp+qwNL3X+vG3GpeYGS90Qs7+spz7LBVGUGuDBWy qWrEmTGxZ7wVpzJYdQ4n94v5j0xHFJnO/qe0kaxXVcXg1Lv2JuWu6amOSbhXAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUVOzXcBdVHU3AUDEppmQ/3mIC/oowHwYDVR0j BBgwFoAUi66ckOvFCC+AIFXvqmNgxmG/hc4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNGNHMm9iRVVZZk1LaFdBWDQ1N25GZ3pvVFhZU3RpTEs0RGFFMzRWRFNL ODUvMS84QkFFOUM5MEVCQzUwODJGODAyMDU1RUZBQTYzNjBDNjYxQkY4NUNFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhCQUU5QzkwRUJDNTA4MkY4 MDIwNTVFRkFBNjM2MEM2NjFCRjg1Q0UuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NGNHMm9iRVVZZk1LaFdBWDQ1N25GZ3pvVFhZU3RpTEs0RGFFMzRWRFNLODUvMS84 QkFFOUM5MEVCQzUwODJGODAyMDU1RUZBQTYzNjBDNjYxQkY4NUNFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGzSDOTFPepQmkt17+uvTKJAhMhgNR6FDBPtM4of9U2w87stF6tCciEwleByo C+rM77OX52HSPLQ9anDIUztTgMGBR1pSgUl/1PwAnulAionQ2oLUtP5fFO5gjw6j izvDs+8ZziIUlDK9ATvAIAmeORSFhChSNWYpvJTNJjTFq3g88zHuXZZUGIXQNv7o +5kzS98dn53dPO3aGK6xyYH6TdVwUYzButIWkNAs5kk+zHnmhoBqgfQQNqIXhr8S cnXVNYt/7aboUWTj1trYdegX9Mr0XLEc+ryfCMhrqQzuwprzuCTYaoQEVKnJTBVM 9AXpQXSE1UB8HOFkuSnGl4UjdA== -----END CERTIFICATE-----Generated at Thu Jul 23 23:37:05 2026 by rpki-client