$ rpki-client -vvf rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/040A99E102503B9DD68DAF74A5564601C25CBFF1.mft File: 040A99E102503B9DD68DAF74A5564601C25CBFF1.mft (raw, json) Hash identifier: eVEHN7aGfl/bYUAGVb2aii8qIqVkLDakXgCgGj3Fh5U= Subject key identifier: D5:41:8C:75:B4:A4:FE:C0:F3:7B:A1:65:D2:F1:E5:02:BB:0A:2F:D6 Authority key identifier: 04:0A:99:E1:02:50:3B:9D:D6:8D:AF:74:A5:56:46:01:C2:5C:BF:F1 Certificate issuer: /CN=040A99E102503B9DD68DAF74A5564601C25CBFF1 Certificate serial: 3E34BA38055125D8AA4B1ACEE1FE6D7E3F0D67D1 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/040A99E102503B9DD68DAF74A5564601C25CBFF1.cer Subject info access: rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/040A99E102503B9DD68DAF74A5564601C25CBFF1.mft Manifest number: C7 Signing time: Fri 24 Jul 2026 05:13:18 +0000 Manifest this update: Fri 24 Jul 2026 05:08:18 +0000 Manifest next update: Sat 25 Jul 2026 11:07:18 +0000 Files and hashes: 1: 3139312e33362e3136302e302f32312d3234203d3e203238313235.roa (hash: VA8pzE5OVgeOHI4/E96ByKMfrJmZfBV0/FG8eshvKiU=) 2: 323830343a313438383a3a2f33322d3438203d3e203238313235.roa (hash: iheHSONNJOEjggcGLOV6jXrer/mL/4x7e0+XiFwoJmM=) 3: 3138372e31392e31362e302f32302d3234203d3e203238313235.roa (hash: /ot4KGpH/tqmwpJyx6ouOrTL20ouW0YqcaUdIRGnRl8=) 4: 040A99E102503B9DD68DAF74A5564601C25CBFF1.crl (hash: NWhXhv5U+G53dDHZOEDO6hY09JuTS0IxoIu+hIeYNAg=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/040A99E102503B9DD68DAF74A5564601C25CBFF1.crl rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/040A99E102503B9DD68DAF74A5564601C25CBFF1.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/040A99E102503B9DD68DAF74A5564601C25CBFF1.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 25 Jul 2026 11:07:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:34:ba:38:05:51:25:d8:aa:4b:1a:ce:e1:fe:6d:7e:3f:0d:67:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=040A99E102503B9DD68DAF74A5564601C25CBFF1 Validity Not Before: Jul 24 05:08:18 2026 GMT Not After : Jul 25 11:07:18 2026 GMT Subject: CN=D5418C75B4A4FEC0F37BA165D2F1E502BB0A2FD6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:3a:74:b2:6e:63:a7:86:0b:60:6a:2e:53:83: c6:a2:b6:c6:8c:f2:6a:c6:11:b5:63:12:6d:6b:9d: ec:bd:f9:ae:23:29:68:17:74:f7:a0:e2:63:8b:a8: b4:f6:f1:44:d2:f5:a5:3a:b0:93:00:03:79:8f:37: 8e:fb:7c:e2:24:dc:6b:2e:e4:47:bc:b9:b6:56:6c: 0b:cb:11:92:b3:6c:70:a9:78:51:3e:3f:76:cc:f6: 7b:28:1a:ce:70:85:ef:d4:d0:63:72:24:a4:22:1f: 5a:e7:5d:dc:d8:c5:c4:ea:86:32:e0:4b:41:bf:9a: 35:76:24:e4:84:58:4c:e7:9e:55:db:2b:0a:39:69: 16:ac:0e:69:1c:b9:67:ab:68:80:e4:db:47:0d:b3: f6:0f:d1:a1:c6:e7:94:e2:05:54:ab:86:50:03:ba: d7:c8:2e:63:89:c3:9a:c6:61:5c:52:97:dd:3b:25: f4:df:1d:3c:f8:30:8a:05:53:6e:89:e5:38:ed:02: 1b:71:67:e3:83:68:88:05:c9:e5:25:35:9f:69:b4: 76:74:5c:60:6b:c2:02:be:dd:07:ca:1b:cf:dc:94: c0:fa:a1:7e:3d:de:da:62:f1:55:db:81:6f:95:05: 7a:bd:ee:00:bd:1f:a3:06:d2:b9:52:ca:f9:7c:55: 0e:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:41:8C:75:B4:A4:FE:C0:F3:7B:A1:65:D2:F1:E5:02:BB:0A:2F:D6 X509v3 Authority Key Identifier: keyid:04:0A:99:E1:02:50:3B:9D:D6:8D:AF:74:A5:56:46:01:C2:5C:BF:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/040A99E102503B9DD68DAF74A5564601C25CBFF1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/040A99E102503B9DD68DAF74A5564601C25CBFF1.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/040A99E102503B9DD68DAF74A5564601C25CBFF1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:23:97:84:b9:a9:fd:f3:95:b6:64:eb:b7:77:3e:f5:c1:d8: cb:e1:d4:da:ef:9c:a0:c9:64:3f:7d:19:0e:12:76:3c:a6:c2: 68:30:51:ab:4b:50:11:82:18:6d:1d:f1:0a:b5:65:eb:51:65: b3:2a:f9:06:a9:7a:f2:14:45:ea:5a:60:08:48:0f:5c:c1:8e: 1f:74:f0:41:c5:72:89:1d:53:d6:9f:84:d4:29:05:8a:f0:53: 7c:93:0d:9c:e7:0b:80:8f:a6:92:84:12:40:2b:a6:a4:39:58: b2:19:79:6d:be:6b:00:7e:39:2a:ad:16:60:e7:b8:cc:a4:c9: 1b:28:ed:ce:a3:e8:0e:af:e6:5a:05:36:ef:8b:22:6f:9d:6e: 93:0a:2e:21:cd:95:db:9b:4a:cc:0e:f5:d0:3a:00:e4:98:b6: b5:bd:d7:b7:a9:7f:70:83:e6:f4:cc:73:d4:70:a1:f3:d8:26: c6:5a:9a:84:98:5e:dc:92:87:a4:b0:65:da:c9:b2:4e:ff:c5: 6f:5d:5f:10:10:98:17:49:d2:72:8c:bd:d3:2b:4f:2d:a7:73: 9d:c4:86:3c:da:34:83:0a:e7:32:44:c6:fb:c4:52:5d:aa:a8: 6d:26:4f:5e:34:55:d0:ba:a3:64:46:a6:51:cc:b8:08:a2:4f: c9:d8:8b:31 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUPjS6OAVRJdiqSxrO4f5tfj8NZ9EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQwQTk5RTEwMjUwM0I5REQ2OERBRjc0QTU1NjQ2MDFD MjVDQkZGMTAeFw0yNjA3MjQwNTA4MThaFw0yNjA3MjUxMTA3MThaMDMxMTAvBgNV BAMTKEQ1NDE4Qzc1QjRBNEZFQzBGMzdCQTE2NUQyRjFFNTAyQkIwQTJGRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPOnSybmOnhgtgai5Tg8aitsaM 8mrGEbVjEm1rney9+a4jKWgXdPeg4mOLqLT28UTS9aU6sJMAA3mPN477fOIk3Gsu 5Ee8ubZWbAvLEZKzbHCpeFE+P3bM9nsoGs5whe/U0GNyJKQiH1rnXdzYxcTqhjLg S0G/mjV2JOSEWEznnlXbKwo5aRasDmkcuWeraIDk20cNs/YP0aHG55TiBVSrhlAD utfILmOJw5rGYVxSl907JfTfHTz4MIoFU26J5TjtAhtxZ+ODaIgFyeUlNZ9ptHZ0 XGBrwgK+3QfKG8/clMD6oX493tpi8VXbgW+VBXq97gC9H6MG0rlSyvl8VQ7DAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU1UGMdbSk/sDze6Fl0vHlArsKL9YwHwYDVR0j BBgwFoAUBAqZ4QJQO53Wja90pVZGAcJcv/EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSkJYeDFtWmJSZ3dEcTF3Qjk5SkJjRmRzWVJZOGFKNmFMS1h4MldxNnRl aE4vMC8wNDBBOTlFMTAyNTAzQjlERDY4REFGNzRBNTU2NDYwMUMyNUNCRkYxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA0MEE5OUUxMDI1MDNCOURE NjhEQUY3NEE1NTY0NjAxQzI1Q0JGRjEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SkJYeDFtWmJSZ3dEcTF3Qjk5SkJjRmRzWVJZOGFKNmFMS1h4MldxNnRlaE4vMC8w NDBBOTlFMTAyNTAzQjlERDY4REFGNzRBNTU2NDYwMUMyNUNCRkYxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEARiOXhLmp/fOVtmTrt3c+9cHYy+HU2u+coMlkP30ZDhJ2PKbCaDBRq0tQEYIY bR3xCrVl61Flsyr5Bql68hRF6lpgCEgPXMGOH3TwQcVyiR1T1p+E1CkFivBTfJMN nOcLgI+mkoQSQCumpDlYshl5bb5rAH45Kq0WYOe4zKTJGyjtzqPoDq/mWgU274si b51ukwouIc2V25tKzA710DoA5Ji2tb3Xt6l/cIPm9Mxz1HCh89gmxlqahJhe3JKH pLBl2smyTv/Fb11fEBCYF0nScoy90ytPLadzncSGPNo0gwrnMkTG+8RSXaqobSZP XjRV0LqjZEamUcy4CKJPydiLMQ== -----END CERTIFICATE-----Generated at Fri Jul 24 20:24:19 2026 by rpki-client