$ rpki-client -vvf rpki-repo.registro.br/repo/6MD1Rx1bdVgYkFeVLYcupPpz2LdUqtfYA1yd1beiFkx2/0/5CB6F0FBBAF94DBD11BE24EE6942953CD6C92E31.mft File: 5CB6F0FBBAF94DBD11BE24EE6942953CD6C92E31.mft (raw, json) Hash identifier: 8GPoW3jag0MNZLzoZt3lqF4sgTwsocs13ML0R//aEfU= Subject key identifier: 02:2B:1D:ED:FA:3E:BE:2E:42:E9:D0:25:FD:18:E3:9E:73:7E:41:A0 Authority key identifier: 5C:B6:F0:FB:BA:F9:4D:BD:11:BE:24:EE:69:42:95:3C:D6:C9:2E:31 Certificate issuer: /CN=5CB6F0FBBAF94DBD11BE24EE6942953CD6C92E31 Certificate serial: 4A69504A4F25D2BC6A5CECB9F3E23E35FF48C6F7 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5CB6F0FBBAF94DBD11BE24EE6942953CD6C92E31.cer Subject info access: rsync://rpki-repo.registro.br/repo/6MD1Rx1bdVgYkFeVLYcupPpz2LdUqtfYA1yd1beiFkx2/0/5CB6F0FBBAF94DBD11BE24EE6942953CD6C92E31.mft Manifest number: 85 Signing time: Thu 23 Jul 2026 10:44:38 +0000 Manifest this update: Thu 23 Jul 2026 10:39:38 +0000 Manifest next update: Fri 24 Jul 2026 14:02:38 +0000 Files and hashes: 1: 323830343a323662633a3a2f33322d313238203d3e20323633383533.roa (hash: MHz48cZguYukBEhBpsDJFvqLcaG9k66iEN9yy5Xrh+g=) 2: 5CB6F0FBBAF94DBD11BE24EE6942953CD6C92E31.crl (hash: tfP4wAPEjeVoqKP1iHzSHJdRM1TNjTUXfPYCdH/0mUQ=) 3: 3137302e3235342e33362e302f32322d3332203d3e20323633383533.roa (hash: kcTTCDknSfactk6HWz29z0XXFf8mtJ3w49YYB3cxSus=) 4: 3133382e3138362e37322e302f32322d3332203d3e20323633383533.roa (hash: +LDjwbrhCYXLAk8tRDblE91nbB2hF6cu3Tr7Wxg1a+M=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/6MD1Rx1bdVgYkFeVLYcupPpz2LdUqtfYA1yd1beiFkx2/0/5CB6F0FBBAF94DBD11BE24EE6942953CD6C92E31.crl rsync://rpki-repo.registro.br/repo/6MD1Rx1bdVgYkFeVLYcupPpz2LdUqtfYA1yd1beiFkx2/0/5CB6F0FBBAF94DBD11BE24EE6942953CD6C92E31.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5CB6F0FBBAF94DBD11BE24EE6942953CD6C92E31.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 24 Jul 2026 14:02:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:69:50:4a:4f:25:d2:bc:6a:5c:ec:b9:f3:e2:3e:35:ff:48:c6:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5CB6F0FBBAF94DBD11BE24EE6942953CD6C92E31 Validity Not Before: Jul 23 10:39:38 2026 GMT Not After : Jul 24 14:02:38 2026 GMT Subject: CN=022B1DEDFA3EBE2E42E9D025FD18E39E737E41A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:04:c9:ea:17:93:de:64:e3:50:53:c4:2c:c3: 55:45:5b:ac:30:bb:20:d0:a8:db:09:8a:be:4d:59: 57:84:7b:97:5f:16:b6:7e:cd:84:4f:f8:e5:d0:ce: 18:f3:d3:a4:af:86:76:e2:29:d0:29:16:6a:05:6a: 4a:38:dd:59:4f:5e:38:ef:46:11:d3:79:56:4d:57: 1f:cb:3a:a2:f5:a2:eb:71:b6:40:f2:bc:d1:6f:42: 9e:49:d3:2e:87:b6:af:80:4e:2b:b2:9a:a2:db:5b: 7c:cb:da:d7:73:4d:16:7e:c0:7b:01:15:57:7a:c1: 25:57:ad:3f:af:22:a7:b8:32:7d:b8:4e:0b:09:a7: 7e:d4:3d:fc:cf:2c:ff:6d:db:04:e8:bd:81:f9:3d: 52:04:37:d6:72:60:83:a5:6f:38:8a:0f:d5:98:c5: a1:3b:5b:7f:46:08:f6:45:ef:a4:a4:32:68:8e:53: 4e:26:95:01:e8:63:8f:a9:20:00:d8:86:32:17:60: 54:c9:47:8c:83:89:bc:34:dc:6a:a0:dd:fb:fd:00: 92:0e:af:8a:6f:c6:34:7b:76:f1:d0:b5:e8:28:1e: 22:4c:5c:d0:f6:72:b3:43:d7:f1:25:cf:8a:22:0b: a1:fe:de:60:16:39:8b:d0:e9:6f:b5:2c:2f:fa:a5: 9d:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:2B:1D:ED:FA:3E:BE:2E:42:E9:D0:25:FD:18:E3:9E:73:7E:41:A0 X509v3 Authority Key Identifier: keyid:5C:B6:F0:FB:BA:F9:4D:BD:11:BE:24:EE:69:42:95:3C:D6:C9:2E:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/6MD1Rx1bdVgYkFeVLYcupPpz2LdUqtfYA1yd1beiFkx2/0/5CB6F0FBBAF94DBD11BE24EE6942953CD6C92E31.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5CB6F0FBBAF94DBD11BE24EE6942953CD6C92E31.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/6MD1Rx1bdVgYkFeVLYcupPpz2LdUqtfYA1yd1beiFkx2/0/5CB6F0FBBAF94DBD11BE24EE6942953CD6C92E31.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:f8:03:8d:75:b5:f7:0e:5f:98:d6:81:cf:0e:d8:07:bb:34: 35:e2:17:13:f4:f8:fd:66:70:dd:36:47:a7:76:2e:29:e7:10: 46:a6:88:9b:a2:6b:7a:f5:b5:6c:a9:48:ee:74:53:0c:91:74: e1:b2:4a:1c:1c:b8:61:4f:94:71:e6:ff:7d:6d:84:fa:5f:f5: 01:17:e7:6b:ae:26:8e:1a:e4:89:2d:f8:5c:2b:6e:5c:34:03: ea:b6:9d:15:5a:79:05:9f:5c:49:58:09:9b:71:1b:59:0d:ef: f7:05:bf:fb:ab:03:d4:bc:5e:bc:7e:31:aa:b8:3c:53:84:e7: c9:4f:99:b9:6b:dc:29:fa:80:2c:bd:70:dc:2c:a8:8d:69:10: cb:95:27:1a:59:7f:d0:be:e3:03:4b:9b:da:bf:f5:63:5e:3f: 3a:04:8b:4c:1b:23:5c:17:bf:36:4f:61:a0:90:1a:94:81:e7: be:13:d7:f7:9d:ef:9f:78:08:b0:4c:e4:40:84:df:31:19:25: f1:1f:a5:6b:36:fb:dd:fe:4c:74:ee:0c:f0:2f:04:dc:46:9b: 64:45:19:53:2e:6d:8f:e2:34:cd:10:90:ed:29:e1:bf:d5:fb: c8:b4:4d:2b:0f:63:b3:57:3a:95:83:d3:f5:2d:49:d8:a6:75: 10:40:0a:79 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUSmlQSk8l0rxqXOy58+I+Nf9IxvcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUNCNkYwRkJCQUY5NERCRDExQkUyNEVFNjk0Mjk1M0NE NkM5MkUzMTAeFw0yNjA3MjMxMDM5MzhaFw0yNjA3MjQxNDAyMzhaMDMxMTAvBgNV BAMTKDAyMkIxREVERkEzRUJFMkU0MkU5RDAyNUZEMThFMzlFNzM3RTQxQTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkBMnqF5PeZONQU8Qsw1VFW6ww uyDQqNsJir5NWVeEe5dfFrZ+zYRP+OXQzhjz06SvhnbiKdApFmoFako43VlPXjjv RhHTeVZNVx/LOqL1outxtkDyvNFvQp5J0y6Htq+ATiuymqLbW3zL2tdzTRZ+wHsB FVd6wSVXrT+vIqe4Mn24TgsJp37UPfzPLP9t2wTovYH5PVIEN9ZyYIOlbziKD9WY xaE7W39GCPZF76SkMmiOU04mlQHoY4+pIADYhjIXYFTJR4yDibw03Gqg3fv9AJIO r4pvxjR7dvHQtegoHiJMXND2crND1/Elz4oiC6H+3mAWOYvQ6W+1LC/6pZ3tAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUAisd7fo+vi5C6dAl/RjjnnN+QaAwHwYDVR0j BBgwFoAUXLbw+7r5Tb0RviTuaUKVPNbJLjEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNk1EMVJ4MWJkVmdZa0ZlVkxZY3VwUHB6MkxkVXF0ZllBMXlkMWJlaUZr eDIvMC81Q0I2RjBGQkJBRjk0REJEMTFCRTI0RUU2OTQyOTUzQ0Q2QzkyRTMxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVDQjZGMEZCQkFGOTREQkQx MUJFMjRFRTY5NDI5NTNDRDZDOTJFMzEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Nk1EMVJ4MWJkVmdZa0ZlVkxZY3VwUHB6MkxkVXF0ZllBMXlkMWJlaUZreDIvMC81 Q0I2RjBGQkJBRjk0REJEMTFCRTI0RUU2OTQyOTUzQ0Q2QzkyRTMxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEApPgDjXW19w5fmNaBzw7YB7s0NeIXE/T4/WZw3TZHp3YuKecQRqaIm6JrevW1 bKlI7nRTDJF04bJKHBy4YU+Uceb/fW2E+l/1ARfna64mjhrkiS34XCtuXDQD6rad FVp5BZ9cSVgJm3EbWQ3v9wW/+6sD1LxevH4xqrg8U4TnyU+ZuWvcKfqALL1w3Cyo jWkQy5UnGll/0L7jA0ub2r/1Y14/OgSLTBsjXBe/Nk9hoJAalIHnvhPX953vn3gI sEzkQITfMRkl8R+lazb73f5MdO4M8C8E3EabZEUZUy5tj+I0zRCQ7Snhv9X7yLRN Kw9js1c6lYPT9S1J2KZ1EEAKeQ== -----END CERTIFICATE-----Generated at Thu Jul 23 22:05:22 2026 by rpki-client