$ rpki-client -vvf rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.mft File: D2991FF0EF094685597EA5146C4730F0270A9201.mft (raw, json) Hash identifier: 4FTQfc7zHn16LrW7iA1CTLFVhes8nYbU+BswnTL6aSU= Subject key identifier: 1A:B1:1F:A9:9A:19:13:09:BE:9B:4B:3C:04:9A:56:AC:2C:CB:C7:D0 Authority key identifier: D2:99:1F:F0:EF:09:46:85:59:7E:A5:14:6C:47:30:F0:27:0A:92:01 Certificate issuer: /CN=D2991FF0EF094685597EA5146C4730F0270A9201 Certificate serial: 6975B6BE2DF047E98FA90745379D4315F2D740F3 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2991FF0EF094685597EA5146C4730F0270A9201.cer Subject info access: rsync://rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.mft Manifest number: 0339 Signing time: Fri 24 Jul 2026 07:09:11 +0000 Manifest this update: Fri 24 Jul 2026 07:04:11 +0000 Manifest next update: Sat 25 Jul 2026 08:10:11 +0000 Files and hashes: 1: D2991FF0EF094685597EA5146C4730F0270A9201.crl (hash: HGQipSmeVFIxxnhsT5rokAD2vI7thiujo9Z0w9gZpfM=) 2: 3137372e38342e32342e302f32322d3332203d3e20323632353737.roa (hash: C0u1aT3LDMhL5SLNpfi4dKOK4v/xmo0BwWf2GUw/OvQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.crl rsync://rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2991FF0EF094685597EA5146C4730F0270A9201.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 25 Jul 2026 08:10:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:75:b6:be:2d:f0:47:e9:8f:a9:07:45:37:9d:43:15:f2:d7:40:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2991FF0EF094685597EA5146C4730F0270A9201 Validity Not Before: Jul 24 07:04:11 2026 GMT Not After : Jul 25 08:10:11 2026 GMT Subject: CN=1AB11FA99A191309BE9B4B3C049A56AC2CCBC7D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:5b:7b:6a:84:0c:31:48:7d:20:e1:57:02:0c: 20:f5:12:cc:fd:51:59:9e:c5:72:7c:ab:62:72:92: 93:c4:fd:31:c8:0e:8d:c7:73:56:d9:81:a3:b7:97: de:89:1e:92:3f:a6:36:37:06:16:60:75:18:e0:f5: 23:9b:e0:b1:03:17:69:c6:1f:47:7e:e1:1d:42:cb: d8:ad:88:bd:58:c1:95:23:1b:c7:fb:31:19:15:d2: 7d:b1:20:74:83:d0:76:00:4c:df:fd:76:cb:98:e9: a4:29:08:9c:59:07:7c:bd:d1:53:0a:d6:53:3c:b8: 9c:79:3f:f7:b4:4e:64:a4:35:a1:1a:ad:68:c1:40: 0c:9d:c9:c1:6d:d8:6f:07:85:6b:65:19:d8:c5:1d: 7d:5c:a0:52:5f:1b:3b:26:9b:b4:16:ed:fb:ad:45: 21:e0:dc:37:5f:12:82:f4:20:9b:1f:22:59:14:fa: bd:96:5e:b8:fa:90:64:e9:a2:20:45:47:76:bc:0c: fe:c7:37:da:68:73:98:f8:c2:6f:ba:ed:65:79:4f: f8:60:c2:bf:f6:30:a3:67:aa:b2:ca:04:cf:6e:31: a2:5e:4b:18:f9:a0:af:c8:23:c6:09:55:bd:aa:cf: 54:9d:b0:ff:ed:25:a7:e4:cb:74:09:e7:19:cc:5b: 1f:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:B1:1F:A9:9A:19:13:09:BE:9B:4B:3C:04:9A:56:AC:2C:CB:C7:D0 X509v3 Authority Key Identifier: keyid:D2:99:1F:F0:EF:09:46:85:59:7E:A5:14:6C:47:30:F0:27:0A:92:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2991FF0EF094685597EA5146C4730F0270A9201.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:36:f1:19:d6:ec:fd:25:bb:b4:8b:50:d1:03:92:1a:6d:93: a4:ab:5d:dd:1b:d4:e5:af:a8:4b:c1:80:29:65:2e:da:bd:6b: 5d:3f:fb:dc:dd:3c:56:a6:ce:b5:77:2f:25:f1:35:da:76:3e: 2c:0f:84:8a:7b:d2:7c:a5:89:f7:61:8c:36:c1:e0:67:41:a7: 08:ce:f3:c2:36:84:6d:68:11:a0:e4:16:f8:64:f3:28:ae:16: 26:01:82:d9:f9:49:d5:59:96:f8:92:c1:14:c2:ae:85:ed:73: 41:e3:8b:e6:cb:d9:9e:de:a3:80:74:27:f3:fc:b4:1f:b8:2b: 31:91:7c:22:23:46:6e:fb:e1:fe:5b:29:90:a2:f2:49:f3:41: b2:24:c7:44:75:d9:98:a1:09:b5:07:c9:f5:01:8c:a1:f5:e7: f2:c6:a3:d6:42:05:1c:b2:4a:3d:89:85:ab:cc:9c:a6:ad:8a: c9:c0:3b:70:60:b5:5a:dc:72:fe:ad:6b:1a:bf:30:39:4a:b7: 83:09:b1:a0:39:4e:32:28:71:a0:fa:d8:8b:7a:4c:75:c2:99: 22:72:6c:a5:34:60:6f:a7:a5:31:3c:85:e3:00:55:30:a9:d8: ba:49:9a:05:f0:30:42:55:66:9c:f9:ea:62:47:9f:af:50:5e: 5a:5b:45:b9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUaXW2vi3wR+mPqQdFN51DFfLXQPMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDI5OTFGRjBFRjA5NDY4NTU5N0VBNTE0NkM0NzMwRjAy NzBBOTIwMTAeFw0yNjA3MjQwNzA0MTFaFw0yNjA3MjUwODEwMTFaMDMxMTAvBgNV BAMTKDFBQjExRkE5OUExOTEzMDlCRTlCNEIzQzA0OUE1NkFDMkNDQkM3RDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuW3tqhAwxSH0g4VcCDCD1Esz9 UVmexXJ8q2JykpPE/THIDo3Hc1bZgaO3l96JHpI/pjY3BhZgdRjg9SOb4LEDF2nG H0d+4R1Cy9itiL1YwZUjG8f7MRkV0n2xIHSD0HYATN/9dsuY6aQpCJxZB3y90VMK 1lM8uJx5P/e0TmSkNaEarWjBQAydycFt2G8HhWtlGdjFHX1coFJfGzsmm7QW7fut RSHg3DdfEoL0IJsfIlkU+r2WXrj6kGTpoiBFR3a8DP7HN9poc5j4wm+67WV5T/hg wr/2MKNnqrLKBM9uMaJeSxj5oK/II8YJVb2qz1SdsP/tJafky3QJ5xnMWx89AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUGrEfqZoZEwm+m0s8BJpWrCzLx9AwHwYDVR0j BBgwFoAU0pkf8O8JRoVZfqUUbEcw8CcKkgEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQkZRVWk1VlFaNDY3RlZvTWpIZU0ySktMU1JBQ0xIM1RraGVZOHhIUFRW RnovMC9EMjk5MUZGMEVGMDk0Njg1NTk3RUE1MTQ2QzQ3MzBGMDI3MEE5MjAxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QyOTkxRkYwRUYwOTQ2ODU1 OTdFQTUxNDZDNDczMEYwMjcwQTkyMDEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QkZRVWk1VlFaNDY3RlZvTWpIZU0ySktMU1JBQ0xIM1RraGVZOHhIUFRWRnovMC9E Mjk5MUZGMEVGMDk0Njg1NTk3RUE1MTQ2QzQ3MzBGMDI3MEE5MjAxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZDbxGdbs/SW7tItQ0QOSGm2TpKtd3RvU5a+oS8GAKWUu2r1rXT/73N08VqbO tXcvJfE12nY+LA+EinvSfKWJ92GMNsHgZ0GnCM7zwjaEbWgRoOQW+GTzKK4WJgGC 2flJ1VmW+JLBFMKuhe1zQeOL5svZnt6jgHQn8/y0H7grMZF8IiNGbvvh/lspkKLy SfNBsiTHRHXZmKEJtQfJ9QGMofXn8saj1kIFHLJKPYmFq8ycpq2KycA7cGC1Wtxy /q1rGr8wOUq3gwmxoDlOMihxoPrYi3pMdcKZInJspTRgb6elMTyF4wBVMKnYukma BfAwQlVmnPnqYkefr1BeWltFuQ== -----END CERTIFICATE-----Generated at Fri Jul 24 18:57:04 2026 by rpki-client