$ rpki-client -vvf rpki-repo.registro.br/repo/H5DnLH6DsGFxeaSGWVy5NZFPNCHayCf8s7JHikWfKuAp/0/9AFB03F5D68397694C28760FEF53EF9E19BFFB19.mft File: 9AFB03F5D68397694C28760FEF53EF9E19BFFB19.mft (raw, json) Hash identifier: QiaohxddFeOt1s59H7mhXFCzsm2Z4YoBH0zzSsWYgmA= Subject key identifier: B3:03:EF:6E:1A:CB:31:99:B4:84:2D:90:64:98:00:33:19:B6:7E:09 Authority key identifier: 9A:FB:03:F5:D6:83:97:69:4C:28:76:0F:EF:53:EF:9E:19:BF:FB:19 Certificate issuer: /CN=9AFB03F5D68397694C28760FEF53EF9E19BFFB19 Certificate serial: 29CF1B7436E0AE611DBB2FDC93BF4B727D26900E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9AFB03F5D68397694C28760FEF53EF9E19BFFB19.cer Subject info access: rsync://rpki-repo.registro.br/repo/H5DnLH6DsGFxeaSGWVy5NZFPNCHayCf8s7JHikWfKuAp/0/9AFB03F5D68397694C28760FEF53EF9E19BFFB19.mft Manifest number: 19 Signing time: Fri 24 Jul 2026 07:54:41 +0000 Manifest this update: Fri 24 Jul 2026 07:49:41 +0000 Manifest next update: Sat 25 Jul 2026 09:47:41 +0000 Files and hashes: 1: 9AFB03F5D68397694C28760FEF53EF9E19BFFB19.crl (hash: MBK7y9mOTfiJs4MEkmkiraIKxJPMwixZADbc/4ieZww=) 2: 34352e372e3130302e302f32322d3332203d3e20323636353833.roa (hash: snatUesUJjdlYnArU41Sqs3lgAeYSCpP3csEXVbyj+k=) 3: 34352e3232382e31322e302f32322d3332203d3e20323636353833.roa (hash: CJVIg23bji+64oSAgc9NbCD7aMTQAUoz2vGVWg42Shw=) 4: 323830343a336534303a3a2f33322d313238203d3e20323636353833.roa (hash: NLvUboxUmBiqFWJSSa3vEnRYfCiBtZtlqzSDkn+D2tA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/H5DnLH6DsGFxeaSGWVy5NZFPNCHayCf8s7JHikWfKuAp/0/9AFB03F5D68397694C28760FEF53EF9E19BFFB19.crl rsync://rpki-repo.registro.br/repo/H5DnLH6DsGFxeaSGWVy5NZFPNCHayCf8s7JHikWfKuAp/0/9AFB03F5D68397694C28760FEF53EF9E19BFFB19.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9AFB03F5D68397694C28760FEF53EF9E19BFFB19.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 25 Jul 2026 09:47:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:cf:1b:74:36:e0:ae:61:1d:bb:2f:dc:93:bf:4b:72:7d:26:90:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9AFB03F5D68397694C28760FEF53EF9E19BFFB19 Validity Not Before: Jul 24 07:49:41 2026 GMT Not After : Jul 25 09:47:41 2026 GMT Subject: CN=B303EF6E1ACB3199B4842D906498003319B67E09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:39:16:27:9d:be:43:44:52:76:91:33:6d:cf: ce:f2:88:7c:b2:2e:d2:9c:72:8f:c4:75:97:d1:f0: 3a:cf:8e:d6:aa:86:05:01:22:81:8d:44:5f:cc:55: 1d:12:6a:3e:0c:a3:f3:72:73:b2:8f:7c:62:81:3f: 2a:8d:33:36:b4:9f:3a:50:76:c6:c2:3a:55:b3:0a: c1:f4:f9:22:3e:8e:9c:3a:ca:7d:d8:a9:07:6b:2c: 7f:c3:a0:13:6c:14:d5:6b:85:88:25:a6:fd:b3:40: 37:5c:89:c0:4e:0e:4f:bc:8d:e8:30:a1:cd:96:6d: bb:ad:1b:eb:0e:54:c0:36:f1:cf:b1:1f:1b:1d:a2: a0:98:a8:28:9b:46:06:5c:94:f1:28:17:e7:28:01: d2:47:a2:5a:8f:1f:4c:77:f5:cd:00:e6:6e:c8:e3: c7:e2:bf:ec:4c:fe:68:78:1c:76:84:c9:24:35:a4: b2:8a:ff:b2:0f:a3:2b:06:f5:bb:8c:5e:74:c6:b0: a3:6c:06:3c:ad:36:f3:98:16:c4:f5:a8:d9:8c:de: de:bb:60:43:0c:f0:3e:b1:f3:44:84:19:55:20:8e: 94:f7:2c:d8:c0:49:d0:81:97:c7:fc:1f:0b:46:21: bd:9f:38:ad:f5:75:f2:5e:1f:24:ab:a3:f5:26:c9: d1:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:03:EF:6E:1A:CB:31:99:B4:84:2D:90:64:98:00:33:19:B6:7E:09 X509v3 Authority Key Identifier: keyid:9A:FB:03:F5:D6:83:97:69:4C:28:76:0F:EF:53:EF:9E:19:BF:FB:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/H5DnLH6DsGFxeaSGWVy5NZFPNCHayCf8s7JHikWfKuAp/0/9AFB03F5D68397694C28760FEF53EF9E19BFFB19.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9AFB03F5D68397694C28760FEF53EF9E19BFFB19.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5DnLH6DsGFxeaSGWVy5NZFPNCHayCf8s7JHikWfKuAp/0/9AFB03F5D68397694C28760FEF53EF9E19BFFB19.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:fa:b0:61:20:e3:f0:25:21:65:69:c1:12:43:7d:b4:f6:57: 75:b6:e7:02:e8:06:0b:df:a4:93:ec:86:38:af:7f:16:6a:b1: fd:01:b5:e6:f2:2c:4a:a0:ae:cf:e1:56:45:cd:41:e5:2a:2c: 0d:a7:e0:8c:72:96:74:8a:e3:b4:2d:59:c8:49:aa:5f:f2:82: a6:c4:09:9e:eb:71:86:ef:5a:b9:4e:f8:af:e1:91:5c:f7:0f: c5:4e:60:f4:48:be:53:8e:bd:b8:a5:5a:e8:71:9a:1f:bd:7e: d9:23:99:24:4d:20:eb:4d:f1:e9:bf:62:ba:d4:da:58:6a:5d: 5c:87:3b:de:f0:c5:ab:62:7a:94:7c:f3:38:a8:9e:4e:30:bc: 89:0f:86:02:25:84:52:c6:3c:49:fc:c0:9d:e8:9e:b5:e5:6e: f8:66:93:ee:a2:73:ce:b7:88:b7:c3:bf:ee:60:bc:12:1e:b2: 70:aa:b5:df:ce:fe:92:b5:b0:3d:3a:04:e4:c7:1a:33:e4:2c: 9f:72:9a:0e:a3:ee:3b:85:a5:eb:05:f3:45:4f:7f:57:8f:d5: fb:69:78:37:e0:bf:50:79:59:eb:7f:0f:71:05:17:24:92:a3: 4f:04:6c:1e:17:9a:40:0a:f6:ff:d2:4b:6d:22:57:d2:b8:10: 1c:22:a6:98 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUKc8bdDbgrmEduy/ck79Lcn0mkA4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUFGQjAzRjVENjgzOTc2OTRDMjg3NjBGRUY1M0VGOUUx OUJGRkIxOTAeFw0yNjA3MjQwNzQ5NDFaFw0yNjA3MjUwOTQ3NDFaMDMxMTAvBgNV BAMTKEIzMDNFRjZFMUFDQjMxOTlCNDg0MkQ5MDY0OTgwMDMzMTlCNjdFMDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/ORYnnb5DRFJ2kTNtz87yiHyy LtKcco/EdZfR8DrPjtaqhgUBIoGNRF/MVR0Saj4Mo/Nyc7KPfGKBPyqNMza0nzpQ dsbCOlWzCsH0+SI+jpw6yn3YqQdrLH/DoBNsFNVrhYglpv2zQDdcicBODk+8jegw oc2WbbutG+sOVMA28c+xHxsdoqCYqCibRgZclPEoF+coAdJHolqPH0x39c0A5m7I 48fiv+xM/mh4HHaEySQ1pLKK/7IPoysG9buMXnTGsKNsBjytNvOYFsT1qNmM3t67 YEMM8D6x80SEGVUgjpT3LNjASdCBl8f8HwtGIb2fOK31dfJeHySro/UmydENAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUswPvbhrLMZm0hC2QZJgAMxm2fgkwHwYDVR0j BBgwFoAUmvsD9daDl2lMKHYP71Pvnhm/+xkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSDVEbkxINkRzR0Z4ZWFTR1dWeTVOWkZQTkNIYXlDZjhzN0pIaWtXZkt1 QXAvMC85QUZCMDNGNUQ2ODM5NzY5NEMyODc2MEZFRjUzRUY5RTE5QkZGQjE5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlBRkIwM0Y1RDY4Mzk3Njk0 QzI4NzYwRkVGNTNFRjlFMTlCRkZCMTkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SDVEbkxINkRzR0Z4ZWFTR1dWeTVOWkZQTkNIYXlDZjhzN0pIaWtXZkt1QXAvMC85 QUZCMDNGNUQ2ODM5NzY5NEMyODc2MEZFRjUzRUY5RTE5QkZGQjE5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMvqwYSDj8CUhZWnBEkN9tPZXdbbnAugGC9+kk+yGOK9/Fmqx/QG15vIsSqCu z+FWRc1B5SosDafgjHKWdIrjtC1ZyEmqX/KCpsQJnutxhu9auU74r+GRXPcPxU5g 9Ei+U469uKVa6HGaH71+2SOZJE0g603x6b9iutTaWGpdXIc73vDFq2J6lHzzOKie TjC8iQ+GAiWEUsY8SfzAneieteVu+GaT7qJzzreIt8O/7mC8Eh6ycKq1387+krWw PToE5McaM+Qsn3KaDqPuO4Wl6wXzRU9/V4/V+2l4N+C/UHlZ638PcQUXJJKjTwRs HheaQAr2/9JLbSJX0rgQHCKmmA== -----END CERTIFICATE-----Generated at Fri Jul 24 22:10:18 2026 by rpki-client