$ rpki-client -vvf rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/2A568038CCEEBFB8EF04CB47D39831AC6B1F4E42.mft File: 2A568038CCEEBFB8EF04CB47D39831AC6B1F4E42.mft (raw, json) Hash identifier: K7cLGAFpjZoNtFh5+S1fWecEGPkujgILcs3vr51J78I= Subject key identifier: 19:D9:77:69:CB:D1:1E:A2:34:84:B4:6A:29:C3:79:0C:A9:AA:41:ED Authority key identifier: 2A:56:80:38:CC:EE:BF:B8:EF:04:CB:47:D3:98:31:AC:6B:1F:4E:42 Certificate issuer: /CN=2A568038CCEEBFB8EF04CB47D39831AC6B1F4E42 Certificate serial: 41833631307920C02972E360019C49AF3042DC46 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A568038CCEEBFB8EF04CB47D39831AC6B1F4E42.cer Subject info access: rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/2A568038CCEEBFB8EF04CB47D39831AC6B1F4E42.mft Manifest number: 1B Signing time: Fri 24 Jul 2026 11:54:47 +0000 Manifest this update: Fri 24 Jul 2026 11:49:47 +0000 Manifest next update: Sat 25 Jul 2026 11:58:47 +0000 Files and hashes: 1: 3139382e35382e382e302f32322d3332203d3e20323633323536.roa (hash: Y+3P8jo7egaHVnKU29tF7GC8akuSWW7XZR7KEvUsIFY=) 2: 2A568038CCEEBFB8EF04CB47D39831AC6B1F4E42.crl (hash: wp45wG8UcD3DKdXdN2VypNATPBtIBu3xyiLb+0ymSfo=) 3: 3137302e3234372e3230302e302f32322d3332203d3e20323633323536.roa (hash: aJmS2FoAD0YPSengMGVV6F7EHffuke/LZY7SEZA4IQk=) 4: 323830343a313765303a3a2f33322d313238203d3e20323633323536.roa (hash: t6zlJEATl+Y2/fnLl+LEKqzDjf/F9RfynAU/632sQOc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/2A568038CCEEBFB8EF04CB47D39831AC6B1F4E42.crl rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/2A568038CCEEBFB8EF04CB47D39831AC6B1F4E42.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A568038CCEEBFB8EF04CB47D39831AC6B1F4E42.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 25 Jul 2026 11:58:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:83:36:31:30:79:20:c0:29:72:e3:60:01:9c:49:af:30:42:dc:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A568038CCEEBFB8EF04CB47D39831AC6B1F4E42 Validity Not Before: Jul 24 11:49:47 2026 GMT Not After : Jul 25 11:58:47 2026 GMT Subject: CN=19D97769CBD11EA23484B46A29C3790CA9AA41ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:89:f5:2b:02:fb:f8:99:8b:2e:61:94:dc:b2: 4c:5b:62:16:db:ec:de:97:98:24:47:b6:ba:c2:6f: 64:8a:b1:54:6e:1d:b8:8b:e0:87:6f:da:c5:d1:77: ba:a8:d6:7a:c1:c1:52:86:df:5c:3c:cf:90:30:39: 27:ee:5d:5c:30:6c:c6:f3:7b:50:8e:5d:13:e2:bd: 9c:58:76:47:db:d8:53:ea:54:8e:c5:20:b3:e1:3f: ce:1a:6a:0e:51:5b:e3:b3:37:b0:5f:8e:79:6e:70: 57:6c:44:c2:ac:06:0c:74:82:90:0a:9e:ff:c9:04: 8b:ca:28:ae:57:da:fd:c5:01:7c:4e:52:31:6a:3a: 83:58:28:9b:fe:40:c0:50:d4:81:17:92:1b:b7:3a: 27:a6:dd:81:88:17:9f:bd:93:f9:68:69:f4:fc:e2: 78:dc:6f:07:f6:ce:30:bd:59:44:f4:62:00:5c:c3: 98:4c:c3:21:9f:c9:b5:fb:ff:d8:00:37:36:ac:94: aa:f2:a8:35:98:d1:ba:d9:0b:0e:77:e3:8e:49:46: 8c:1e:e6:e2:27:75:00:b0:a8:33:00:a7:8a:64:1b: e3:86:69:f7:ae:d6:70:ce:61:98:d2:97:fc:ac:b8: 07:c1:7b:26:52:95:8f:30:1a:40:09:aa:42:a9:ee: fc:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:D9:77:69:CB:D1:1E:A2:34:84:B4:6A:29:C3:79:0C:A9:AA:41:ED X509v3 Authority Key Identifier: keyid:2A:56:80:38:CC:EE:BF:B8:EF:04:CB:47:D3:98:31:AC:6B:1F:4E:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/2A568038CCEEBFB8EF04CB47D39831AC6B1F4E42.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A568038CCEEBFB8EF04CB47D39831AC6B1F4E42.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/2A568038CCEEBFB8EF04CB47D39831AC6B1F4E42.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:88:ea:0c:46:a6:64:35:1f:7c:9b:ea:77:cd:38:eb:ce:e7: 6a:20:fc:97:34:ae:22:87:9a:23:45:09:5f:31:8f:b2:6a:c8: e0:37:6c:1e:75:07:8f:66:20:b5:b3:8f:f9:b4:39:f9:5d:05: 27:21:d6:ce:c3:20:99:0f:27:db:32:7b:a3:bc:3f:59:c0:94: 36:54:89:a4:35:07:35:68:46:a1:67:2b:4c:52:d1:d6:01:e0: c3:d1:e2:9d:9e:0d:1d:d6:06:f8:b2:f0:ad:2c:9c:b5:e3:71: e0:d0:79:13:7c:9e:52:4e:94:93:91:fb:eb:13:22:4e:76:99: a3:f1:9b:94:d7:76:b5:2c:ec:f0:25:6e:e0:7a:a1:4d:8a:d9: 48:5f:5f:87:a2:aa:f2:fe:38:7a:8c:d2:46:8b:f6:3c:fe:22: f4:23:40:59:7a:cd:23:f1:f7:9f:08:0f:8e:47:42:71:70:d0: b5:59:17:c4:dd:a6:0d:c7:00:00:4d:5b:79:71:23:3c:39:4b: 60:fa:10:18:d8:ce:d6:64:b2:c0:58:4a:99:5b:93:b1:6d:0e: b3:86:d8:3c:b8:cb:56:6a:7b:9b:ee:70:1b:7e:b4:c8:84:f5: f2:06:1a:87:46:f0:fc:73:db:77:7c:05:e1:1c:7b:64:68:60: 17:03:b3:b6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUQYM2MTB5IMApcuNgAZxJrzBC3EYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkE1NjgwMzhDQ0VFQkZCOEVGMDRDQjQ3RDM5ODMxQUM2 QjFGNEU0MjAeFw0yNjA3MjQxMTQ5NDdaFw0yNjA3MjUxMTU4NDdaMDMxMTAvBgNV BAMTKDE5RDk3NzY5Q0JEMTFFQTIzNDg0QjQ2QTI5QzM3OTBDQTlBQTQxRUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtifUrAvv4mYsuYZTcskxbYhbb 7N6XmCRHtrrCb2SKsVRuHbiL4Idv2sXRd7qo1nrBwVKG31w8z5AwOSfuXVwwbMbz e1COXRPivZxYdkfb2FPqVI7FILPhP84aag5RW+OzN7BfjnlucFdsRMKsBgx0gpAK nv/JBIvKKK5X2v3FAXxOUjFqOoNYKJv+QMBQ1IEXkhu3Oiem3YGIF5+9k/loafT8 4njcbwf2zjC9WUT0YgBcw5hMwyGfybX7/9gANzaslKryqDWY0brZCw53445JRowe 5uIndQCwqDMAp4pkG+OGafeu1nDOYZjSl/ysuAfBeyZSlY8wGkAJqkKp7vwbAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUGdl3acvRHqI0hLRqKcN5DKmqQe0wHwYDVR0j BBgwFoAUKlaAOMzuv7jvBMtH05gxrGsfTkIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRXB3UGZzd1c5TmdMZVZKdXFHQ2RZTlRLRWluMXpWQlQ2b0d6ZXM5YXJk U2QvMC8yQTU2ODAzOENDRUVCRkI4RUYwNENCNDdEMzk4MzFBQzZCMUY0RTQyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJBNTY4MDM4Q0NFRUJGQjhF RjA0Q0I0N0QzOTgzMUFDNkIxRjRFNDIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RXB3UGZzd1c5TmdMZVZKdXFHQ2RZTlRLRWluMXpWQlQ2b0d6ZXM5YXJkU2QvMC8y QTU2ODAzOENDRUVCRkI4RUYwNENCNDdEMzk4MzFBQzZCMUY0RTQyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGIjqDEamZDUffJvqd804687naiD8lzSuIoeaI0UJXzGPsmrI4DdsHnUHj2Yg tbOP+bQ5+V0FJyHWzsMgmQ8n2zJ7o7w/WcCUNlSJpDUHNWhGoWcrTFLR1gHgw9Hi nZ4NHdYG+LLwrSycteNx4NB5E3yeUk6Uk5H76xMiTnaZo/GblNd2tSzs8CVu4Hqh TYrZSF9fh6Kq8v44eozSRov2PP4i9CNAWXrNI/H3nwgPjkdCcXDQtVkXxN2mDccA AE1beXEjPDlLYPoQGNjO1mSywFhKmVuTsW0Os4bYPLjLVmp7m+5wG360yIT18gYa h0bw/HPbd3wF4Rx7ZGhgFwOztg== -----END CERTIFICATE-----Generated at Fri Jul 24 17:34:15 2026 by rpki-client