$ rpki-client -vvf rpki-repo.registro.br/repo/H4ypLUwe2kvnmjgXYnNZDyD2S3Jc6QsygoTaA8MRL9in/1/CD681825A75F3DF3B033D3544F8826488F3FA8A4.mft File: CD681825A75F3DF3B033D3544F8826488F3FA8A4.mft (raw, json) Hash identifier: qNWVc12s0tb0fTfQ8h10dLk0WNYBfG0rvoof3kLLH9Q= Subject key identifier: 13:4E:DD:E3:40:9E:79:3A:B9:FF:DB:43:03:D8:E0:B9:62:57:E9:10 Authority key identifier: CD:68:18:25:A7:5F:3D:F3:B0:33:D3:54:4F:88:26:48:8F:3F:A8:A4 Certificate issuer: /CN=CD681825A75F3DF3B033D3544F8826488F3FA8A4 Certificate serial: 732C938A64029B26DAE714AB5DF5FA9DF9705FD9 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD681825A75F3DF3B033D3544F8826488F3FA8A4.cer Subject info access: rsync://rpki-repo.registro.br/repo/H4ypLUwe2kvnmjgXYnNZDyD2S3Jc6QsygoTaA8MRL9in/1/CD681825A75F3DF3B033D3544F8826488F3FA8A4.mft Manifest number: 045C Signing time: Fri 24 Jul 2026 10:40:21 +0000 Manifest this update: Fri 24 Jul 2026 10:35:21 +0000 Manifest next update: Sat 25 Jul 2026 11:06:21 +0000 Files and hashes: 1: 34352e3233332e3133322e302f32322d3234203d3e20323637333234.roa (hash: 3n2Tk0TLHKbeyvSR9gueX0c6nwA0R++H9heS7l364Ks=) 2: 323830343a346262303a3a2f33322d3438203d3e20323637333234.roa (hash: lP2dF6eLkAR5W4EKDMYSPnrha/aIhYWGq5RKYXV3V3w=) 3: CD681825A75F3DF3B033D3544F8826488F3FA8A4.crl (hash: qzhNQ1W5Vz9QjRoi0CIPWHAbW1fVDv65ROAfdjGnXKg=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/H4ypLUwe2kvnmjgXYnNZDyD2S3Jc6QsygoTaA8MRL9in/1/CD681825A75F3DF3B033D3544F8826488F3FA8A4.crl rsync://rpki-repo.registro.br/repo/H4ypLUwe2kvnmjgXYnNZDyD2S3Jc6QsygoTaA8MRL9in/1/CD681825A75F3DF3B033D3544F8826488F3FA8A4.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD681825A75F3DF3B033D3544F8826488F3FA8A4.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 25 Jul 2026 11:06:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:2c:93:8a:64:02:9b:26:da:e7:14:ab:5d:f5:fa:9d:f9:70:5f:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD681825A75F3DF3B033D3544F8826488F3FA8A4 Validity Not Before: Jul 24 10:35:21 2026 GMT Not After : Jul 25 11:06:21 2026 GMT Subject: CN=134EDDE3409E793AB9FFDB4303D8E0B96257E910 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:1f:17:25:aa:e3:c4:61:90:e4:ca:ad:84:29: d3:7b:38:31:3a:23:9e:ca:d7:6c:63:ce:1c:a6:c5: cc:c2:82:66:04:bc:44:f8:9f:8f:08:52:4e:34:12: ad:7d:02:a4:5b:81:0a:8b:7e:09:65:5a:42:7c:d1: 23:1a:c5:7d:73:44:b5:b1:bc:36:9c:2a:e6:dc:26: 41:a1:dc:9d:f7:24:02:b2:a4:fd:ed:92:9f:3c:04: 41:32:21:91:ec:5c:7f:b6:26:47:0c:26:f4:2c:af: ed:a5:81:0d:21:75:07:70:ad:4b:4b:7e:c3:7c:1a: bf:be:7e:95:2f:72:eb:9b:8f:1e:ca:48:55:a2:81: e8:b9:a9:cd:7e:d7:c8:c3:54:df:26:71:31:1e:24: b0:8b:b6:09:72:2d:21:c6:9f:67:b0:45:5a:c1:d2: ac:92:4d:fa:d4:c5:cd:9b:c5:6b:5a:5e:58:7a:0d: 66:26:6d:2d:02:44:a0:2b:7b:af:cb:b0:8c:49:65: 87:c9:58:bb:c4:6e:08:f0:68:9c:2e:00:1b:ae:bc: 8a:ba:42:96:54:f8:b2:5f:81:5f:9a:d3:22:81:14: 28:5a:b8:d0:8e:03:5f:d2:2f:2c:f3:c3:13:c6:aa: ab:a4:cd:e2:c3:93:ab:f9:5c:12:0e:4f:01:59:81: 7f:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:4E:DD:E3:40:9E:79:3A:B9:FF:DB:43:03:D8:E0:B9:62:57:E9:10 X509v3 Authority Key Identifier: keyid:CD:68:18:25:A7:5F:3D:F3:B0:33:D3:54:4F:88:26:48:8F:3F:A8:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/H4ypLUwe2kvnmjgXYnNZDyD2S3Jc6QsygoTaA8MRL9in/1/CD681825A75F3DF3B033D3544F8826488F3FA8A4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD681825A75F3DF3B033D3544F8826488F3FA8A4.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/H4ypLUwe2kvnmjgXYnNZDyD2S3Jc6QsygoTaA8MRL9in/1/CD681825A75F3DF3B033D3544F8826488F3FA8A4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:24:ed:ba:72:86:c2:76:a3:c5:3f:36:10:7e:0f:1d:77:f7: fe:c1:ca:3f:c1:d1:54:3a:af:2b:b5:42:71:b4:ee:20:fd:4a: 64:8d:df:01:14:d8:8b:8f:81:98:4f:00:03:c8:2f:02:9a:10: b1:67:2f:33:9c:85:bd:79:90:09:ad:93:b1:b9:02:a1:58:cd: d9:c1:62:e1:f9:ec:2c:fe:4a:07:ac:db:a9:b6:af:26:f5:20: 14:ba:49:25:a7:d5:3a:53:5d:56:44:61:8b:30:ef:2f:b4:c0: 2d:6a:4c:b1:fc:09:49:c1:c2:cc:e5:db:5f:0a:66:aa:a9:fd: 85:65:04:47:3b:6a:a0:9a:6c:1f:a2:34:48:b7:36:03:ae:cf: 13:24:a5:c3:76:34:29:3e:2f:32:18:f5:a3:b2:01:a4:7b:b7: 0c:61:65:24:89:91:9d:ba:93:17:65:2f:ba:0b:08:48:95:a4: 6e:6c:c8:97:e9:27:30:3b:4a:1e:2e:09:21:25:c4:40:12:fc: 38:e1:c5:51:0f:2f:d8:90:8d:e4:25:7d:48:43:7a:f7:a4:bc: a0:e0:85:67:d0:c5:c5:c5:bf:53:52:67:3d:84:11:b0:47:f2: 4b:77:db:f4:3b:25:f4:62:fd:7c:65:9e:a2:eb:43:bf:aa:cb: 1b:f0:5f:53 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUcyyTimQCmyba5xSrXfX6nflwX9kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Q2ODE4MjVBNzVGM0RGM0IwMzNEMzU0NEY4ODI2NDg4 RjNGQThBNDAeFw0yNjA3MjQxMDM1MjFaFw0yNjA3MjUxMTA2MjFaMDMxMTAvBgNV BAMTKDEzNEVEREUzNDA5RTc5M0FCOUZGREI0MzAzRDhFMEI5NjI1N0U5MTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbHxclquPEYZDkyq2EKdN7ODE6 I57K12xjzhymxczCgmYEvET4n48IUk40Eq19AqRbgQqLfgllWkJ80SMaxX1zRLWx vDacKubcJkGh3J33JAKypP3tkp88BEEyIZHsXH+2JkcMJvQsr+2lgQ0hdQdwrUtL fsN8Gr++fpUvcuubjx7KSFWigei5qc1+18jDVN8mcTEeJLCLtglyLSHGn2ewRVrB 0qySTfrUxc2bxWtaXlh6DWYmbS0CRKAre6/LsIxJZYfJWLvEbgjwaJwuABuuvIq6 QpZU+LJfgV+a0yKBFChauNCOA1/SLyzzwxPGqqukzeLDk6v5XBIOTwFZgX9tAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUE07d40CeeTq5/9tDA9jguWJX6RAwHwYDVR0j BBgwFoAUzWgYJadfPfOwM9NUT4gmSI8/qKQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSDR5cExVd2Uya3ZubWpnWFluTlpEeUQyUzNKYzZRc3lnb1RhQThNUkw5 aW4vMS9DRDY4MTgyNUE3NUYzREYzQjAzM0QzNTQ0Rjg4MjY0ODhGM0ZBOEE0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NENjgxODI1QTc1RjNERjNC MDMzRDM1NDRGODgyNjQ4OEYzRkE4QTQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SDR5cExVd2Uya3ZubWpnWFluTlpEeUQyUzNKYzZRc3lnb1RhQThNUkw5aW4vMS9D RDY4MTgyNUE3NUYzREYzQjAzM0QzNTQ0Rjg4MjY0ODhGM0ZBOEE0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjCTtunKGwnajxT82EH4PHXf3/sHKP8HRVDqvK7VCcbTuIP1KZI3fARTYi4+B mE8AA8gvApoQsWcvM5yFvXmQCa2TsbkCoVjN2cFi4fnsLP5KB6zbqbavJvUgFLpJ JafVOlNdVkRhizDvL7TALWpMsfwJScHCzOXbXwpmqqn9hWUERztqoJpsH6I0SLc2 A67PEySlw3Y0KT4vMhj1o7IBpHu3DGFlJImRnbqTF2UvugsISJWkbmzIl+knMDtK Hi4JISXEQBL8OOHFUQ8v2JCN5CV9SEN696S8oOCFZ9DFxcW/U1JnPYQRsEfyS3fb 9Dsl9GL9fGWeoutDv6rLG/BfUw== -----END CERTIFICATE-----Generated at Fri Jul 24 20:29:17 2026 by rpki-client