$ rpki-client -vvf rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/CA2ED340034D0368230850867C30E245990118A2.mft File: CA2ED340034D0368230850867C30E245990118A2.mft (raw, json) Hash identifier: U2+JwcAveZG4JbC2zvU4TzIvb/IUJPz+enr7PzbYGbU= Subject key identifier: 8B:52:E2:7C:23:E5:BB:CB:85:B2:D6:2F:0E:27:23:C9:A2:35:B9:F3 Authority key identifier: CA:2E:D3:40:03:4D:03:68:23:08:50:86:7C:30:E2:45:99:01:18:A2 Certificate issuer: /CN=CA2ED340034D0368230850867C30E245990118A2 Certificate serial: 653450A1BDA5FE5CE9A535EFD383BBC71BDB2B46 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA2ED340034D0368230850867C30E245990118A2.cer Subject info access: rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/CA2ED340034D0368230850867C30E245990118A2.mft Manifest number: 04F9 Signing time: Thu 23 Jul 2026 07:40:00 +0000 Manifest this update: Thu 23 Jul 2026 07:35:00 +0000 Manifest next update: Fri 24 Jul 2026 07:40:00 +0000 Files and hashes: 1: 323830343a336438303a3a2f33332d3333203d3e20323636353335.roa (hash: z9igj7MGsmtf/1Sy9zcE0T7tcBaO8/e+SL2nDBel2m8=) 2: 3136302e3233382e3136322e302f32342d3234203d3e20323636353335.roa (hash: Mpe5/idJmRp1cNXJYCyARrtABVfhbdPKne04ORvkzmY=) 3: 323830343a336438303a3a2f33342d3334203d3e20323636353335.roa (hash: Ya6TTh4UGpO9OA9I2t2ljb687rAyfDeWzm8gruldMvY=) 4: 3136302e3233382e3136302e302f32332d3233203d3e20323636353335.roa (hash: mnXKGK0Sb3JfSD9qwtiqL+zB6Uxf7pRYFU72tIF3RgE=) 5: 323830343a336438303a3a2f33322d3332203d3e20323636353335.roa (hash: qACtYGAGjQIYzRF9TbvLGtYIE8yVLT/zZZ6QQjlw7Tc=) 6: 3136302e3233382e3136302e302f32322d3232203d3e20323636353335.roa (hash: wHbI+HZw0d0+VVKI2O6UiIL7xxlmxDe0dzs6WnffOtM=) 7: CA2ED340034D0368230850867C30E245990118A2.crl (hash: 877+rtUcNYa8VKynzYZEDZsPh4pCJokwOt1StJyRwYA=) 8: 3136302e3233382e3136312e302f32342d3234203d3e20323636353335.roa (hash: bECPbuRuBrIOnjdoBKScCAXjGsCP8o1jcCme3zamF0s=) 9: 3136302e3233382e3136302e302f32342d3234203d3e20323636353335.roa (hash: TxlG0812plpjPhvcX/d0Olltq3zIPufdkiSuAoXprqk=) 10: 3136302e3233382e3136322e302f32332d3233203d3e20323636353335.roa (hash: ZciEocyNThB8Dt9USSnp55XhUpsQwG4rnTD6Z4ERIeo=) 11: 323830343a336438303a383030303a3a2f33332d3333203d3e20323636353335.roa (hash: h97iUgEEBkr3O+lUMEj/QD+0mK6bNS7G42zz0AhsaHM=) 12: 3136302e3233382e3136332e302f32342d3234203d3e20323636353335.roa (hash: DqP5mf5U6YxJGBly2hzV6Uavn9AYJNW8SE/1OzFbx28=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/CA2ED340034D0368230850867C30E245990118A2.crl rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/CA2ED340034D0368230850867C30E245990118A2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA2ED340034D0368230850867C30E245990118A2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 24 Jul 2026 07:40:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:34:50:a1:bd:a5:fe:5c:e9:a5:35:ef:d3:83:bb:c7:1b:db:2b:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA2ED340034D0368230850867C30E245990118A2 Validity Not Before: Jul 23 07:35:00 2026 GMT Not After : Jul 24 07:40:00 2026 GMT Subject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ubject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:fd:42:38:6b:50:e5:e5:53:70:28:a4:93:30: 24:6c:8b:e8:1b:4e:61:9d:6d:2d:c7:a6:c9:27:3f: 9d:f0:6b:3d:ec:03:1c:dc:18:10:d6:e4:87:97:a9: 54:46:55:87:64:e6:bd:53:3c:ae:c1:91:26:18:53: 8f:25:73:95:5a:1e:ea:e3:59:2c:47:f4:e0:47:08: 6d:4a:97:2a:3b:5f:c1:27:4e:8c:6c:ae:da:24:40: ad:23:04:88:f2:6b:ba:72:72:d3:89:88:b8:66:3b: 81:9e:1b:ee:be:97:e2:d0:e2:0c:cf:d3:35:67:13: 73:fa:94:91:43:db:d7:74:c8:42:67:09:9d:f5:5a: 76:f7:e8:0f:df:23:56:10:fe:02:e0:b5:c3:65:f5: 0a:2d:ac:e4:a0:94:cf:6a:03:17:98:0d:14:a2:48: ec:53:c3:f2:36:78:8d:50:27:99:9e:d3:d9:7b:0e: db:db:02:b5:1f:07:5c:73:82:26:f8:58:e3:78:73: 02:25:b5:28:22:94:38:75:ac:56:27:86:da:fa:92: 6d:45:d0:5c:91:25:5b:e1:e7:78:55:e2:d7:f4:41: 15:8b:82:67:fb:cd:1c:a9:5e:90:46:37:ec:e1:9f: 63:b1:50:f1:92:18:08:80:25:b6:2b:ff:0b:84:3d: d3:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:52:E2:7C:23:E5:BB:CB:85:B2:D6:2F:0E:27:23:C9:A2:35:B9:F3 X509v3 Authority Key Identifier: keyid:CA:2E:D3:40:03:4D:03:68:23:08:50:86:7C:30:E2:45:99:01:18:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/CA2ED340034D0368230850867C30E245990118A2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA2ED340034D0368230850867C30E245990118A2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/CA2ED340034D0368230850867C30E245990118A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:2b:97:14:cc:ab:b2:58:73:14:d8:fe:df:d7:66:da:59:5b: 40:9a:ee:63:d8:d1:19:dc:b3:4f:42:ae:58:fd:b4:be:4f:03: 5a:44:05:04:19:54:4a:5c:11:de:9c:81:14:27:88:68:9f:02: 76:77:2e:2f:ce:1a:68:c7:1f:79:8a:32:eb:9f:69:1e:22:e4: de:cd:bf:52:f3:bd:c2:3f:0b:c5:e1:34:97:d2:8c:5e:11:90: ca:a2:f3:6b:9f:55:41:b5:09:ad:5e:63:1a:5b:2d:7e:16:95: 3f:aa:25:cc:55:ae:67:ba:2c:65:42:91:14:26:fa:b1:8c:da: 65:19:9d:ae:5a:2d:77:f9:e2:7a:21:f0:35:a2:a0:e9:fb:cc: d1:67:14:34:94:dc:8c:cd:f3:19:7a:08:3c:61:f2:5b:c3:f4: 71:8a:ba:bb:1e:1b:02:29:fb:85:39:5a:29:1f:49:d5:05:8c: 4f:ae:90:fa:4d:c4:2f:b6:af:b2:4f:f4:15:ee:96:85:39:77: b8:92:d2:62:2e:f1:30:29:ca:02:d5:fe:b1:92:58:66:f2:47: b8:3a:ed:e4:36:de:bf:7a:32:8c:6f:e7:17:17:62:a9:65:85: 3b:47:83:63:29:8b:13:ac:c2:b1:fe:45:d3:6f:28:23:ad:e4: 5f:6f:bf:8b -----BEGIN CERTIFICATE----- MIIHSzCCBjOgAwIBAgIUZTRQob2l/lzppTXv04O7xxvbK0YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0EyRUQzNDAwMzREMDM2ODIzMDg1MDg2N0MzMEUyNDU5 OTAxMThBMjAeFw0yNjA3MjMwNzM1MDBaFw0yNjA3MjQwNzQwMDBaMIICLTGCAikw ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQ0VGRDQyMzg2QjUwRTVFNTUz NzAyOEE0OTMzMDI0NkM4QkU4MUI0RTYxOUQ2RDJEQzdBNkM5MjczRjlERjA2QjNE RUMwMzFDREMxODEwRDZFNDg3OTdBOTU0NDY1NTg3NjRFNkJENTMzQ0FFQzE5MTI2 MTg1MzhGMjU3Mzk1NUExRUVBRTM1OTJDNDdGNEUwNDcwODZENEE5NzJBM0I1RkMx Mjc0RThDNkNBRURBMjQ0MEFEMjMwNDg4RjI2QkJBNzI3MkQzODk4OEI4NjYzQjgx OUUxQkVFQkU5N0UyRDBFMjBDQ0ZEMzM1NjcxMzczRkE5NDkxNDNEQkQ3NzRDODQy NjcwOTlERjU1QTc2RjdFODBGREYyMzU2MTBGRTAyRTBCNUMzNjVGNTBBMkRBQ0U0 QTA5NENGNkEwMzE3OTgwRDE0QTI0OEVDNTNDM0YyMzY3ODhENTAyNzk5OUVEM0Q5 N0IwRURCREIwMkI1MUYwNzVDNzM4MjI2Rjg1OEUzNzg3MzAyMjVCNTI4MjI5NDM4 NzVBQzU2Mjc4NkRBRkE5MjZENDVEMDVDOTEyNTVCRTFFNzc4NTVFMkQ3RjQ0MTE1 OEI4MjY3RkJDRDFDQTk1RTkwNDYzN0VDRTE5RjYzQjE1MEYxOTIxODA4ODAyNUI2 MkJGRjBCODQzREQzMEIwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A MIIBCgKCAQEAzv1COGtQ5eVTcCikkzAkbIvoG05hnW0tx6bJJz+d8Gs97AMc3BgQ 1uSHl6lURlWHZOa9UzyuwZEmGFOPJXOVWh7q41ksR/TgRwhtSpcqO1/BJ06MbK7a JECtIwSI8mu6cnLTiYi4ZjuBnhvuvpfi0OIMz9M1ZxNz+pSRQ9vXdMhCZwmd9Vp2 9+gP3yNWEP4C4LXDZfUKLazkoJTPagMXmA0UokjsU8PyNniNUCeZntPZew7b2wK1 Hwdcc4Im+FjjeHMCJbUoIpQ4daxWJ4ba+pJtRdBckSVb4ed4VeLX9EEVi4Jn+80c qV6QRjfs4Z9jsVDxkhgIgCW2K/8LhD3TCwIDAQABo4ICWTCCAlUwHQYDVR0OBBYE FItS4nwj5bvLhbLWLw4nI8miNbnzMB8GA1UdIwQYMBaAFMou00ADTQNoIwhQhnww 4kWZARiiMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0VSbXpFdnpidTFlTWk4 RXZIVEhXaWtrQXhQQVQ4SlpBamNvY2MyZExqUkx5LzEvQ0EyRUQzNDAwMzREMDM2 ODIzMDg1MDg2N0MzMEUyNDU5OTAxMThBMi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p Y2JyX3JlcG8vMS9DQTJFRDM0MDAzNEQwMzY4MjMwODUwODY3QzMwRTI0NTk5MDEx OEEyLmNlcjCBnQYIKwYBBQUHAQsEgZAwgY0wgYoGCCsGAQUFBzALhn5yc3luYzov L3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0VSbXpFdnpidTFlTWk4RXZIVEhX aWtrQXhQQVQ4SlpBamNvY2MyZExqUkx5LzEvQ0EyRUQzNDAwMzREMDM2ODIzMDg1 MDg2N0MzMEUyNDU5OTAxMThBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAIIrlxTMq7JYcxTY/t/XZtpZ W0Ca7mPY0Rncs09Crlj9tL5PA1pEBQQZVEpcEd6cgRQniGifAnZ3Li/OGmjHH3mK MuufaR4i5N7Nv1LzvcI/C8XhNJfSjF4RkMqi82ufVUG1Ca1eYxpbLX4WlT+qJcxV rme6LGVCkRQm+rGM2mUZna5aLXf54noh8DWioOn7zNFnFDSU3IzN8xl6CDxh8lvD 9HGKurseGwIp+4U5WikfSdUFjE+ukPpNxC+2r7JP9BXuloU5d7iS0mIu8TApygLV /rGSWGbyR7g67eQ23r96Moxv5xcXYqllhTtHg2MpixOswrH+RdNvKCOt5F9vv4s= -----END CERTIFICATE-----Generated at Thu Jul 23 23:35:56 2026 by rpki-client