$ rpki-client -vvf rpki-repo.registro.br/repo/D22S2fFD3vBiGgDajdav7YNXyxUqjZgW3xexjkVpu2Nm/0/B53BC7F8E9156B14E11D55FD8D358D0A91FCE8E2.mft File: B53BC7F8E9156B14E11D55FD8D358D0A91FCE8E2.mft (raw, json) Hash identifier: 4PtVHVhzdqQoflNIshkhylzJcUndrCGqO1n4OndeGAQ= Subject key identifier: AD:C6:8F:7C:13:B4:02:E1:39:8B:6D:AA:AA:0A:8A:CE:41:94:7E:48 Authority key identifier: B5:3B:C7:F8:E9:15:6B:14:E1:1D:55:FD:8D:35:8D:0A:91:FC:E8:E2 Certificate issuer: /CN=B53BC7F8E9156B14E11D55FD8D358D0A91FCE8E2 Certificate serial: 07D8CB1DF64B88CF1408C511E165E1AD7A01C189 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B53BC7F8E9156B14E11D55FD8D358D0A91FCE8E2.cer Subject info access: rsync://rpki-repo.registro.br/repo/D22S2fFD3vBiGgDajdav7YNXyxUqjZgW3xexjkVpu2Nm/0/B53BC7F8E9156B14E11D55FD8D358D0A91FCE8E2.mft Manifest number: 0343 Signing time: Fri 24 Jul 2026 18:40:03 +0000 Manifest this update: Fri 24 Jul 2026 18:35:03 +0000 Manifest next update: Sat 25 Jul 2026 19:32:03 +0000 Files and hashes: 1: 323830343a366665383a3a2f33322d3438203d3e20323730363932.roa (hash: ctYl9J9TTj+GlVTx/djEI8ydQ4q/0hlaqEto9cd0hFQ=) 2: 3137372e3132382e35322e302f32322d3234203d3e20323730363932.roa (hash: VT2dIpvor0j1YnG2BQMLIN5CUYFFKwD7FsBUY9oYGtM=) 3: 3133312e37322e33362e302f32322d3234203d3e20323730363932.roa (hash: A068GDKE7NVod9t4EYmwsBt9cHKNtqvvzMBnwWxyBC8=) 4: B53BC7F8E9156B14E11D55FD8D358D0A91FCE8E2.crl (hash: 2jjvVu5U2HGuuoBweuSxbCypPkF122QkM22tkEMP+FQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/D22S2fFD3vBiGgDajdav7YNXyxUqjZgW3xexjkVpu2Nm/0/B53BC7F8E9156B14E11D55FD8D358D0A91FCE8E2.crl rsync://rpki-repo.registro.br/repo/D22S2fFD3vBiGgDajdav7YNXyxUqjZgW3xexjkVpu2Nm/0/B53BC7F8E9156B14E11D55FD8D358D0A91FCE8E2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B53BC7F8E9156B14E11D55FD8D358D0A91FCE8E2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 25 Jul 2026 19:32:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:d8:cb:1d:f6:4b:88:cf:14:08:c5:11:e1:65:e1:ad:7a:01:c1:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B53BC7F8E9156B14E11D55FD8D358D0A91FCE8E2 Validity Not Before: Jul 24 18:35:03 2026 GMT Not After : Jul 25 19:32:03 2026 GMT Subject: CN=ADC68F7C13B402E1398B6DAAAA0A8ACE41947E48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:55:34:21:3a:78:2c:ce:36:f9:e0:3e:31:0b: 70:46:e0:d7:90:3d:fc:4e:84:83:56:b0:c7:1d:b8: 61:b4:f2:a3:42:83:e3:12:22:5e:e5:64:6c:2c:67: d6:09:0b:8c:3a:ef:90:8e:30:f5:c3:64:84:11:23: e1:b0:7a:40:89:8e:4a:9c:51:fe:cf:72:b0:fe:16: 2f:b3:99:c2:54:30:a5:3d:22:ad:63:d3:c6:96:48: 56:c7:fe:ee:59:13:91:33:a4:c9:d1:d9:57:11:be: 5c:a1:a3:56:e5:99:01:0f:c4:fa:96:ec:cd:d2:c8: 52:48:25:68:ac:78:bf:48:15:36:3d:6b:4e:bb:cf: ed:2c:58:88:b8:67:96:8c:10:13:25:38:8e:ba:54: f3:18:07:b7:3c:9a:c5:03:2d:eb:c8:67:4c:42:5f: 1f:02:e2:9c:f8:18:53:f0:34:ba:36:8e:cb:45:9b: 19:b0:9c:e0:f0:76:da:6d:2a:48:63:7f:d5:3d:6f: 28:52:9d:d3:7a:2b:3d:c9:9a:4a:65:9b:0e:bf:25: c7:ee:3c:da:91:d9:d4:cd:28:c7:d9:59:62:b1:a0: c9:2d:f5:a0:7a:d7:40:42:db:2c:bc:cf:bf:9c:83: 08:47:6a:d3:b3:d4:c7:4c:7b:f7:d8:97:4d:30:bd: 13:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:C6:8F:7C:13:B4:02:E1:39:8B:6D:AA:AA:0A:8A:CE:41:94:7E:48 X509v3 Authority Key Identifier: keyid:B5:3B:C7:F8:E9:15:6B:14:E1:1D:55:FD:8D:35:8D:0A:91:FC:E8:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/D22S2fFD3vBiGgDajdav7YNXyxUqjZgW3xexjkVpu2Nm/0/B53BC7F8E9156B14E11D55FD8D358D0A91FCE8E2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B53BC7F8E9156B14E11D55FD8D358D0A91FCE8E2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/D22S2fFD3vBiGgDajdav7YNXyxUqjZgW3xexjkVpu2Nm/0/B53BC7F8E9156B14E11D55FD8D358D0A91FCE8E2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:ab:e2:9b:3a:c1:f9:d4:3d:2c:c9:ea:04:1b:ff:3e:6b:44: 1c:c6:cf:58:1e:dc:d7:0d:05:14:68:6b:c3:c7:bf:1b:89:a1: 5f:fd:cc:10:81:7c:98:90:a5:f5:02:ba:db:47:a1:95:48:cc: b9:7f:58:56:84:a1:60:bd:12:61:1d:58:a8:a2:f3:d3:cc:3e: b1:22:f9:4a:0e:92:8f:b9:c2:6d:ff:e0:0a:3d:b5:2c:e6:db: 04:a2:e4:2a:81:ec:a8:12:c8:5e:1c:dc:b2:54:7f:3c:27:62: ad:dd:84:82:28:dd:16:c9:c4:08:6b:c7:f9:e4:69:f3:ac:23: e8:38:1f:9c:5e:96:39:3a:71:9a:91:93:a3:00:d9:0e:92:b4: 64:50:44:21:4d:76:89:24:ce:5d:f2:b0:38:89:2b:fa:f8:e8: aa:20:15:06:58:5f:7c:30:95:61:9a:b0:c2:a4:90:c0:de:4c: 91:51:c9:76:9e:d9:c9:54:d2:da:48:21:8b:87:35:89:b8:48: 0d:4a:81:60:c7:6e:07:99:e9:05:e7:52:7a:4b:79:93:ce:f9: a0:85:cf:da:71:91:ac:97:a9:47:3b:5c:2a:6c:0b:94:1f:0d: 76:5b:41:f2:ee:4a:1c:54:16:fe:ad:db:1b:cf:45:6d:bb:e7: 28:2b:c4:ac -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUB9jLHfZLiM8UCMUR4WXhrXoBwYkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjUzQkM3RjhFOTE1NkIxNEUxMUQ1NUZEOEQzNThEMEE5 MUZDRThFMjAeFw0yNjA3MjQxODM1MDNaFw0yNjA3MjUxOTMyMDNaMDMxMTAvBgNV BAMTKEFEQzY4RjdDMTNCNDAyRTEzOThCNkRBQUFBMEE4QUNFNDE5NDdFNDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5VTQhOngszjb54D4xC3BG4NeQ PfxOhINWsMcduGG08qNCg+MSIl7lZGwsZ9YJC4w675COMPXDZIQRI+GwekCJjkqc Uf7PcrD+Fi+zmcJUMKU9Iq1j08aWSFbH/u5ZE5EzpMnR2VcRvlyho1blmQEPxPqW 7M3SyFJIJWiseL9IFTY9a067z+0sWIi4Z5aMEBMlOI66VPMYB7c8msUDLevIZ0xC Xx8C4pz4GFPwNLo2jstFmxmwnODwdtptKkhjf9U9byhSndN6Kz3Jmkplmw6/Jcfu PNqR2dTNKMfZWWKxoMkt9aB610BC2yy8z7+cgwhHatOz1MdMe/fYl00wvRPLAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUrcaPfBO0AuE5i22qqgqKzkGUfkgwHwYDVR0j BBgwFoAUtTvH+OkVaxThHVX9jTWNCpH86OIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRDIyUzJmRkQzdkJpR2dEYWpkYXY3WU5YeXhVcWpaZ1czeGV4amtWcHUy Tm0vMC9CNTNCQzdGOEU5MTU2QjE0RTExRDU1RkQ4RDM1OEQwQTkxRkNFOEUyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I1M0JDN0Y4RTkxNTZCMTRF MTFENTVGRDhEMzU4RDBBOTFGQ0U4RTIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RDIyUzJmRkQzdkJpR2dEYWpkYXY3WU5YeXhVcWpaZ1czeGV4amtWcHUyTm0vMC9C NTNCQzdGOEU5MTU2QjE0RTExRDU1RkQ4RDM1OEQwQTkxRkNFOEUyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEALKvimzrB+dQ9LMnqBBv/PmtEHMbPWB7c1w0FFGhrw8e/G4mhX/3MEIF8mJCl 9QK620ehlUjMuX9YVoShYL0SYR1YqKLz08w+sSL5Sg6Sj7nCbf/gCj21LObbBKLk KoHsqBLIXhzcslR/PCdird2EgijdFsnECGvH+eRp86wj6DgfnF6WOTpxmpGTowDZ DpK0ZFBEIU12iSTOXfKwOIkr+vjoqiAVBlhffDCVYZqwwqSQwN5MkVHJdp7ZyVTS 2kghi4c1ibhIDUqBYMduB5npBedSekt5k875oIXP2nGRrJepRztcKmwLlB8NdltB 8u5KHFQW/q3bG89FbbvnKCvErA== -----END CERTIFICATE-----Generated at Fri Jul 24 22:28:43 2026 by rpki-client