$ rpki-client -vvf rpki-repo.registro.br/repo/7Bj3FQeD77x63oJLzKiiwvoCSXvQ5djEKoZLZqTgbio1/0/CF45AE858DB4DCC0CFE0AFCB5C476C6FE5E23FD5.mft File: CF45AE858DB4DCC0CFE0AFCB5C476C6FE5E23FD5.mft (raw, json) Hash identifier: hPbpBEXfPv7Rn8htqa6M5tDEgPVSk294i3f4z/Y8RrM= Subject key identifier: 90:C4:E4:4D:BA:82:0D:AB:B3:4D:16:8A:69:62:99:80:84:DE:DE:02 Authority key identifier: CF:45:AE:85:8D:B4:DC:C0:CF:E0:AF:CB:5C:47:6C:6F:E5:E2:3F:D5 Certificate issuer: /CN=CF45AE858DB4DCC0CFE0AFCB5C476C6FE5E23FD5 Certificate serial: 256DD597CB4C0B628C1862E2B09C911DD73A571F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF45AE858DB4DCC0CFE0AFCB5C476C6FE5E23FD5.cer Subject info access: rsync://rpki-repo.registro.br/repo/7Bj3FQeD77x63oJLzKiiwvoCSXvQ5djEKoZLZqTgbio1/0/CF45AE858DB4DCC0CFE0AFCB5C476C6FE5E23FD5.mft Manifest number: 0A Signing time: Thu 23 Jul 2026 18:27:25 +0000 Manifest this update: Thu 23 Jul 2026 18:22:25 +0000 Manifest next update: Fri 24 Jul 2026 21:39:25 +0000 Files and hashes: 1: 323830343a343861383a3a2f33322d3332203d3e20323637313336.roa (hash: VWSC5bd1nCvra00Wym+tOKEflcMJrhuJngSYVBQnDSQ=) 2: AS267136.asa (hash: BFm5KnQ2Z8/j/j2a6KcDh9TeNr0yGum0lo1iJ3Wuwos=) 3: 34352e3232392e3233342e302f32332d3233203d3e20323637313336.roa (hash: bwhBCvY8Pbj4lq1BX9rGK/GoVjejw7TgCJadUOfqo5g=) 4: CF45AE858DB4DCC0CFE0AFCB5C476C6FE5E23FD5.crl (hash: l6onb2vVwhcL9mci+06RhZbOBEzVv0DhE/8P5lyI6aQ=) 5: 34352e3232392e3233322e302f32332d3233203d3e20323637313336.roa (hash: poqzEW2si2dhmm54bIWqjKZeQDH5/el4esIZ5gRqCW0=) 6: 34352e3232392e3233322e302f32322d3232203d3e20323637313336.roa (hash: w84iyjJcLJ1FhrZBoowvVZ3T3CXOj1Hm6QelDnwy3GE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7Bj3FQeD77x63oJLzKiiwvoCSXvQ5djEKoZLZqTgbio1/0/CF45AE858DB4DCC0CFE0AFCB5C476C6FE5E23FD5.crl rsync://rpki-repo.registro.br/repo/7Bj3FQeD77x63oJLzKiiwvoCSXvQ5djEKoZLZqTgbio1/0/CF45AE858DB4DCC0CFE0AFCB5C476C6FE5E23FD5.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF45AE858DB4DCC0CFE0AFCB5C476C6FE5E23FD5.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 24 Jul 2026 19:14:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:6d:d5:97:cb:4c:0b:62:8c:18:62:e2:b0:9c:91:1d:d7:3a:57:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CF45AE858DB4DCC0CFE0AFCB5C476C6FE5E23FD5 Validity Not Before: Jul 23 18:22:25 2026 GMT Not After : Jul 24 21:39:25 2026 GMT Subject: CN=90C4E44DBA820DABB34D168A6962998084DEDE02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:67:b6:54:6f:d6:ce:82:27:85:4b:8f:a3:56: a4:04:1f:83:50:07:39:ef:e9:ca:3a:22:02:84:77: d0:9f:92:93:40:6b:b4:d7:f0:34:57:10:58:98:cc: 2a:56:e3:97:64:fb:a4:14:24:85:03:40:bc:02:e2: 3b:e9:fc:e9:97:7f:ff:0d:ff:6f:66:c2:37:32:56: 1d:2d:a4:1a:bf:d3:22:24:93:a1:0c:0c:3a:09:26: bd:06:ab:ad:c1:50:e5:a7:75:03:ef:d7:0b:d3:cd: 32:22:99:e5:f6:6e:92:b5:bc:3a:4f:bf:0c:c9:24: d3:ac:57:8d:d2:58:c0:95:0b:24:52:d1:b2:3e:05: 25:24:44:7b:67:00:b0:bc:17:f2:51:af:00:3b:fa: 08:d9:26:c9:82:d9:0d:0e:bc:01:66:14:94:b7:44: 55:9d:60:ac:63:14:6e:fd:88:53:5c:9e:29:eb:dd: ec:50:e9:03:81:0e:74:f6:2e:ce:81:c0:10:8f:f3: d7:4d:fa:e0:f9:8e:db:79:4e:39:44:4a:94:c4:9a: 85:8e:54:cb:80:db:de:dd:cc:6e:06:ef:2e:4b:e5: df:a2:19:fd:bd:87:31:3f:cf:89:24:74:f7:c0:0a: 5d:f1:23:f6:7a:bc:14:0f:86:12:b4:d0:1b:5d:fc: 43:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:C4:E4:4D:BA:82:0D:AB:B3:4D:16:8A:69:62:99:80:84:DE:DE:02 X509v3 Authority Key Identifier: keyid:CF:45:AE:85:8D:B4:DC:C0:CF:E0:AF:CB:5C:47:6C:6F:E5:E2:3F:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7Bj3FQeD77x63oJLzKiiwvoCSXvQ5djEKoZLZqTgbio1/0/CF45AE858DB4DCC0CFE0AFCB5C476C6FE5E23FD5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF45AE858DB4DCC0CFE0AFCB5C476C6FE5E23FD5.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Bj3FQeD77x63oJLzKiiwvoCSXvQ5djEKoZLZqTgbio1/0/CF45AE858DB4DCC0CFE0AFCB5C476C6FE5E23FD5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:5a:1f:42:20:2b:e6:1f:41:92:6e:08:2a:17:86:31:af:32: 6e:eb:3e:ee:2f:4e:da:68:66:15:6f:fd:73:72:ba:8e:a9:94: 22:96:9f:0b:70:1d:0d:08:6e:5f:a9:1d:0e:94:ba:57:d6:3d: 02:51:23:c6:1d:b9:f6:93:3d:82:f7:d5:f6:c8:c0:04:2f:5a: 8c:14:69:86:5c:78:9d:ae:76:f1:76:ca:53:c2:37:0e:33:2d: 2b:1e:9b:bd:e5:e2:9b:ba:26:70:48:f6:46:a9:a1:03:d3:05: 8b:39:65:cc:e0:b8:0c:0b:49:80:1e:48:a5:9d:14:79:98:4f: d7:18:b8:6a:8d:52:e9:d2:a3:de:4f:4f:a0:c7:98:6c:cd:8a: 70:23:30:1c:c4:21:4d:d4:89:3a:b0:36:6a:5f:44:73:0f:02: 51:0d:fd:73:b0:5b:eb:45:87:a0:fb:ab:ba:bf:c6:24:cc:3c: ea:fa:57:a3:b9:c4:ed:e1:c6:c7:2f:6e:1b:23:4f:5d:8c:a1: 83:20:81:48:19:12:94:e7:bb:d5:83:5a:cb:8e:ad:ee:f9:8b: c0:f6:d6:36:58:65:4c:63:1e:72:44:77:21:79:dc:9f:fc:c4: 14:a1:ec:18:81:ca:a1:0a:18:42:52:ee:48:28:8d:0b:5b:50: f1:1b:1d:a1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUJW3Vl8tMC2KMGGLisJyRHdc6Vx8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Y0NUFFODU4REI0RENDMENGRTBBRkNCNUM0NzZDNkZF NUUyM0ZENTAeFw0yNjA3MjMxODIyMjVaFw0yNjA3MjQyMTM5MjVaMDMxMTAvBgNV BAMTKDkwQzRFNDREQkE4MjBEQUJCMzREMTY4QTY5NjI5OTgwODRERURFMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEZ7ZUb9bOgieFS4+jVqQEH4NQ Bznv6co6IgKEd9CfkpNAa7TX8DRXEFiYzCpW45dk+6QUJIUDQLwC4jvp/OmXf/8N /29mwjcyVh0tpBq/0yIkk6EMDDoJJr0Gq63BUOWndQPv1wvTzTIimeX2bpK1vDpP vwzJJNOsV43SWMCVCyRS0bI+BSUkRHtnALC8F/JRrwA7+gjZJsmC2Q0OvAFmFJS3 RFWdYKxjFG79iFNcninr3exQ6QOBDnT2Ls6BwBCP89dN+uD5jtt5TjlESpTEmoWO VMuA297dzG4G7y5L5d+iGf29hzE/z4kkdPfACl3xI/Z6vBQPhhK00Btd/ENdAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUkMTkTbqCDauzTRaKaWKZgITe3gIwHwYDVR0j BBgwFoAUz0WuhY203MDP4K/LXEdsb+XiP9UwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN0JqM0ZRZUQ3N3g2M29KTHpLaWl3dm9DU1h2UTVkakVLb1pMWnFUZ2Jp bzEvMC9DRjQ1QUU4NThEQjREQ0MwQ0ZFMEFGQ0I1QzQ3NkM2RkU1RTIzRkQ1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NGNDVBRTg1OERCNERDQzBD RkUwQUZDQjVDNDc2QzZGRTVFMjNGRDUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v N0JqM0ZRZUQ3N3g2M29KTHpLaWl3dm9DU1h2UTVkakVLb1pMWnFUZ2JpbzEvMC9D RjQ1QUU4NThEQjREQ0MwQ0ZFMEFGQ0I1QzQ3NkM2RkU1RTIzRkQ1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEASFofQiAr5h9Bkm4IKheGMa8ybus+7i9O2mhmFW/9c3K6jqmUIpafC3AdDQhu X6kdDpS6V9Y9AlEjxh259pM9gvfV9sjABC9ajBRphlx4na528XbKU8I3DjMtKx6b veXim7omcEj2RqmhA9MFizllzOC4DAtJgB5IpZ0UeZhP1xi4ao1S6dKj3k9PoMeY bM2KcCMwHMQhTdSJOrA2al9Ecw8CUQ39c7Bb60WHoPurur/GJMw86vpXo7nE7eHG xy9uGyNPXYyhgyCBSBkSlOe71YNay46t7vmLwPbWNlhlTGMeckR3IXncn/zEFKHs GIHKoQoYQlLuSCiNC1tQ8RsdoQ== -----END CERTIFICATE-----Generated at Thu Jul 23 20:07:32 2026 by rpki-client