$ rpki-client -vvf rpki-repo.registro.br/repo/HzRcUvzrB2bd19geTuVf7P8gHgUV3BzbdtHT3UHsS1qj/0/B70D34D8F1E41A31229367E0B91B23AEF8E5063C.mft File: B70D34D8F1E41A31229367E0B91B23AEF8E5063C.mft (raw, json) Hash identifier: Axz5Y04GI+2LyXfOWonL25HaBSFzXwvTzYr0srabYCA= Subject key identifier: 7C:02:D7:8E:A3:E5:4D:3F:15:10:E1:B3:56:E1:FF:42:26:24:09:C4 Authority key identifier: B7:0D:34:D8:F1:E4:1A:31:22:93:67:E0:B9:1B:23:AE:F8:E5:06:3C Certificate issuer: /CN=B70D34D8F1E41A31229367E0B91B23AEF8E5063C Certificate serial: 75F87A627C6FD448E3D78CA7EE2FEE56150A86D0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B70D34D8F1E41A31229367E0B91B23AEF8E5063C.cer Subject info access: rsync://rpki-repo.registro.br/repo/HzRcUvzrB2bd19geTuVf7P8gHgUV3BzbdtHT3UHsS1qj/0/B70D34D8F1E41A31229367E0B91B23AEF8E5063C.mft Manifest number: C3 Signing time: Fri 24 Jul 2026 14:06:45 +0000 Manifest this update: Fri 24 Jul 2026 14:01:45 +0000 Manifest next update: Sat 25 Jul 2026 18:04:45 +0000 Files and hashes: 1: 3137392e3130392e382e302f32312d3332203d3e20323633313136.roa (hash: WL+UlzcI514Yz0Ir9XAaGH3VcZtH+N4BWEzytaiBO8Q=) 2: B70D34D8F1E41A31229367E0B91B23AEF8E5063C.crl (hash: VZVwWPXG1TkstXaIndAw+UiwMQURjnIRcVlaaTlGCQs=) 3: 323830343a313730343a3a2f33322d313238203d3e20323633313136.roa (hash: yQifKgwLmgHLoVMmW2pFehkn6Gn7QJQjanrRHs0jZKM=) 4: 3137372e3138342e3232302e302f32322d3332203d3e20323633313136.roa (hash: BXbqVPMTgztMyTh2wlrBrPwexbSnf8UnBFNLA7VJNpY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HzRcUvzrB2bd19geTuVf7P8gHgUV3BzbdtHT3UHsS1qj/0/B70D34D8F1E41A31229367E0B91B23AEF8E5063C.crl rsync://rpki-repo.registro.br/repo/HzRcUvzrB2bd19geTuVf7P8gHgUV3BzbdtHT3UHsS1qj/0/B70D34D8F1E41A31229367E0B91B23AEF8E5063C.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B70D34D8F1E41A31229367E0B91B23AEF8E5063C.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 25 Jul 2026 18:04:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:f8:7a:62:7c:6f:d4:48:e3:d7:8c:a7:ee:2f:ee:56:15:0a:86:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B70D34D8F1E41A31229367E0B91B23AEF8E5063C Validity Not Before: Jul 24 14:01:45 2026 GMT Not After : Jul 25 18:04:45 2026 GMT Subject: CN=7C02D78EA3E54D3F1510E1B356E1FF42262409C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:b8:6b:5d:20:35:87:32:3f:0e:6e:6a:62:af: d6:44:c9:07:73:0a:24:d8:39:56:55:fc:0c:2a:b5: db:0c:da:a6:b1:e6:8e:7a:fa:bd:d4:c4:3d:6f:f3: ca:49:ce:fb:cc:a5:75:29:a4:3e:da:3a:c7:03:4c: 3c:c8:b4:c7:17:59:59:7e:11:b9:c5:04:b4:4a:86: 76:72:fa:1e:17:10:c2:81:7b:f3:45:b7:36:51:48: cb:8e:49:de:dc:a3:55:9d:a7:43:91:dc:0a:2e:a9: eb:fa:82:1c:76:8c:8a:75:c8:5c:f4:0c:20:18:fe: f5:99:4e:cb:af:58:97:98:e0:6f:66:7d:4e:60:c7: 73:23:f5:c5:04:22:bc:43:8c:08:5f:3b:f1:52:e3: 25:f6:cd:59:65:47:05:1a:05:57:23:a1:7c:8f:61: 24:2e:3b:2e:6c:29:92:82:3f:e0:13:cb:8d:fe:d9: d6:fc:a0:63:95:56:22:cd:15:cd:71:e8:7f:99:07: 7e:0b:fe:ca:f0:8f:65:08:96:11:2f:a5:69:8a:cd: e4:ff:03:f3:46:13:29:c9:83:67:05:c2:85:c4:5f: 7b:62:3c:57:b9:f2:c2:8e:b8:8e:ad:23:cb:ef:c7: c1:5d:37:06:1d:69:8e:ba:cc:29:93:5b:54:12:58: 3e:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:02:D7:8E:A3:E5:4D:3F:15:10:E1:B3:56:E1:FF:42:26:24:09:C4 X509v3 Authority Key Identifier: keyid:B7:0D:34:D8:F1:E4:1A:31:22:93:67:E0:B9:1B:23:AE:F8:E5:06:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HzRcUvzrB2bd19geTuVf7P8gHgUV3BzbdtHT3UHsS1qj/0/B70D34D8F1E41A31229367E0B91B23AEF8E5063C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B70D34D8F1E41A31229367E0B91B23AEF8E5063C.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HzRcUvzrB2bd19geTuVf7P8gHgUV3BzbdtHT3UHsS1qj/0/B70D34D8F1E41A31229367E0B91B23AEF8E5063C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:69:8a:74:e3:81:e4:bc:1e:f9:63:12:73:3d:a1:28:67:fc: 67:99:24:0c:e8:be:63:95:52:7d:39:05:e1:5e:bd:86:76:b4: 0c:9e:7c:26:71:e1:7a:5f:43:84:ff:2b:87:21:24:44:3d:df: 11:63:42:c2:04:f6:5e:17:a1:b6:a3:19:49:0f:3d:c3:e6:e6: 5c:d2:b4:10:58:db:4e:c1:2d:50:38:ef:15:af:3d:c0:92:e5: 12:d0:18:18:3b:6f:50:24:60:18:09:3d:22:63:07:98:74:8a: 92:f7:d5:c9:d1:47:43:2d:c8:d4:82:04:22:88:b8:01:4a:a1: e4:f8:8d:1c:d2:30:30:ed:cb:26:a7:6b:60:18:ea:f5:c6:0e: dd:ee:eb:1c:d0:fe:06:fb:fd:b5:bc:f4:13:6a:48:09:ad:9d: de:27:3a:19:e7:f5:af:af:63:17:24:9a:1d:6c:05:51:d4:ac: 39:30:2c:9a:81:d4:ba:d0:8b:98:6c:47:7c:57:ee:ff:ac:be: 29:82:c1:97:b6:c5:a8:c1:4a:f2:32:fa:cf:26:2f:01:d9:82: 13:92:d5:af:00:61:d3:f5:3d:61:db:a1:9a:c6:8d:87:ae:63: 31:76:5b:47:5c:e5:0d:ed:4e:35:e7:70:3b:c5:3b:00:bb:af: 62:85:07:da -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUdfh6Ynxv1Ejj14yn7i/uVhUKhtAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjcwRDM0RDhGMUU0MUEzMTIyOTM2N0UwQjkxQjIzQUVG OEU1MDYzQzAeFw0yNjA3MjQxNDAxNDVaFw0yNjA3MjUxODA0NDVaMDMxMTAvBgNV BAMTKDdDMDJENzhFQTNFNTREM0YxNTEwRTFCMzU2RTFGRjQyMjYyNDA5QzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfuGtdIDWHMj8Obmpir9ZEyQdz CiTYOVZV/AwqtdsM2qax5o56+r3UxD1v88pJzvvMpXUppD7aOscDTDzItMcXWVl+ EbnFBLRKhnZy+h4XEMKBe/NFtzZRSMuOSd7co1Wdp0OR3Aouqev6ghx2jIp1yFz0 DCAY/vWZTsuvWJeY4G9mfU5gx3Mj9cUEIrxDjAhfO/FS4yX2zVllRwUaBVcjoXyP YSQuOy5sKZKCP+ATy43+2db8oGOVViLNFc1x6H+ZB34L/srwj2UIlhEvpWmKzeT/ A/NGEynJg2cFwoXEX3tiPFe58sKOuI6tI8vvx8FdNwYdaY66zCmTW1QSWD5TAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUfALXjqPlTT8VEOGzVuH/QiYkCcQwHwYDVR0j BBgwFoAUtw002PHkGjEik2fguRsjrvjlBjwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSHpSY1V2enJCMmJkMTlnZVR1VmY3UDhnSGdVVjNCemJkdEhUM1VIc1Mx cWovMC9CNzBEMzREOEYxRTQxQTMxMjI5MzY3RTBCOTFCMjNBRUY4RTUwNjNDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I3MEQzNEQ4RjFFNDFBMzEy MjkzNjdFMEI5MUIyM0FFRjhFNTA2M0MuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SHpSY1V2enJCMmJkMTlnZVR1VmY3UDhnSGdVVjNCemJkdEhUM1VIc1MxcWovMC9C NzBEMzREOEYxRTQxQTMxMjI5MzY3RTBCOTFCMjNBRUY4RTUwNjNDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVWmKdOOB5Lwe+WMScz2hKGf8Z5kkDOi+Y5VSfTkF4V69hna0DJ58JnHhel9D hP8rhyEkRD3fEWNCwgT2XhehtqMZSQ89w+bmXNK0EFjbTsEtUDjvFa89wJLlEtAY GDtvUCRgGAk9ImMHmHSKkvfVydFHQy3I1IIEIoi4AUqh5PiNHNIwMO3LJqdrYBjq 9cYO3e7rHND+Bvv9tbz0E2pICa2d3ic6Gef1r69jFySaHWwFUdSsOTAsmoHUutCL mGxHfFfu/6y+KYLBl7bFqMFK8jL6zyYvAdmCE5LVrwBh0/U9YduhmsaNh65jMXZb R1zlDe1ONedwO8U7ALuvYoUH2g== -----END CERTIFICATE-----Generated at Fri Jul 24 19:27:06 2026 by rpki-client