$ rpki-client -vvf rpki-repo.registro.br/repo/zqkoh4kfNuLDrLzy7VW4R1yD7YhBoxc4ohnvfpBU7r8/0/2124AB708BBF6388EC80D06C3B8FB1FF02426295.mft File: 2124AB708BBF6388EC80D06C3B8FB1FF02426295.mft (raw, json) Hash identifier: JLhntvAWz52os7x7JZirnuAIkvtS0Iv8DnZJ8YwfHsU= Subject key identifier: 41:AF:9D:0B:3D:DF:07:4A:41:22:9A:22:E0:DD:95:C2:F8:17:FF:BF Authority key identifier: 21:24:AB:70:8B:BF:63:88:EC:80:D0:6C:3B:8F:B1:FF:02:42:62:95 Certificate issuer: /CN=2124AB708BBF6388EC80D06C3B8FB1FF02426295 Certificate serial: 360DDF79333855F2CD4EF545D3CBEB99B1D5EB54 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2124AB708BBF6388EC80D06C3B8FB1FF02426295.cer Subject info access: rsync://rpki-repo.registro.br/repo/zqkoh4kfNuLDrLzy7VW4R1yD7YhBoxc4ohnvfpBU7r8/0/2124AB708BBF6388EC80D06C3B8FB1FF02426295.mft Manifest number: 5A Signing time: Fri 24 Jul 2026 12:17:51 +0000 Manifest this update: Fri 24 Jul 2026 12:12:51 +0000 Manifest next update: Sat 25 Jul 2026 13:50:51 +0000 Files and hashes: 1: 323830343a366238343a3a2f33322d313238203d3e20323730343035.roa (hash: 2ozPd5FcOpRP8Pf6OP7xrYk6TvnS6a/F3RrN6QnExKo=) 2: 2124AB708BBF6388EC80D06C3B8FB1FF02426295.crl (hash: RgV7m8yi5KXSIdP2NcjTfryLHjXLyG7u2MlEtVzckg4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/zqkoh4kfNuLDrLzy7VW4R1yD7YhBoxc4ohnvfpBU7r8/0/2124AB708BBF6388EC80D06C3B8FB1FF02426295.crl rsync://rpki-repo.registro.br/repo/zqkoh4kfNuLDrLzy7VW4R1yD7YhBoxc4ohnvfpBU7r8/0/2124AB708BBF6388EC80D06C3B8FB1FF02426295.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2124AB708BBF6388EC80D06C3B8FB1FF02426295.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 25 Jul 2026 13:50:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:0d:df:79:33:38:55:f2:cd:4e:f5:45:d3:cb:eb:99:b1:d5:eb:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2124AB708BBF6388EC80D06C3B8FB1FF02426295 Validity Not Before: Jul 24 12:12:51 2026 GMT Not After : Jul 25 13:50:51 2026 GMT Subject: CN=41AF9D0B3DDF074A41229A22E0DD95C2F817FFBF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ee:f3:f7:e4:32:97:66:b0:7e:65:34:09:58: 40:40:08:43:52:0a:3a:c3:1e:6b:90:2d:69:4c:ff: 74:dd:f8:55:16:c1:06:69:27:45:89:6a:14:79:e2: 53:e4:c6:7c:2d:51:5b:9c:6a:be:cd:67:52:bb:09: 2d:72:1d:01:b5:7a:e6:2d:93:2f:97:06:ab:dc:4c: 45:12:3d:74:a8:d7:5b:61:88:9c:09:93:0c:c6:cd: 98:49:2e:2d:ae:a8:97:4b:22:69:4c:85:5b:c1:97: a4:ef:d7:fb:c4:81:bf:be:e0:4f:3e:dd:23:ef:a7: da:7f:73:b8:21:be:43:2f:94:9e:48:30:5b:65:65: a2:5a:bc:e8:0c:9b:b7:3a:6d:8d:0b:24:4f:ab:a6: fc:89:90:2e:dc:10:14:8d:b0:ac:ba:fa:f1:64:ea: 03:9a:44:99:a4:fd:f7:b0:4e:6c:e8:49:b6:d0:e0: 3e:c6:86:27:b5:7b:88:84:9d:f6:91:0f:9a:05:cf: 9a:a2:f8:af:b6:af:75:40:2c:34:e8:1b:da:15:22: d3:0f:01:77:06:3e:58:13:c3:c7:c3:38:fd:4a:aa: 50:3d:2c:c1:e0:ef:a6:79:fb:c1:fc:66:7b:d4:ee: a0:cf:da:4b:29:1a:50:3e:7c:e1:47:b6:08:91:e7: 64:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:AF:9D:0B:3D:DF:07:4A:41:22:9A:22:E0:DD:95:C2:F8:17:FF:BF X509v3 Authority Key Identifier: keyid:21:24:AB:70:8B:BF:63:88:EC:80:D0:6C:3B:8F:B1:FF:02:42:62:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/zqkoh4kfNuLDrLzy7VW4R1yD7YhBoxc4ohnvfpBU7r8/0/2124AB708BBF6388EC80D06C3B8FB1FF02426295.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2124AB708BBF6388EC80D06C3B8FB1FF02426295.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/zqkoh4kfNuLDrLzy7VW4R1yD7YhBoxc4ohnvfpBU7r8/0/2124AB708BBF6388EC80D06C3B8FB1FF02426295.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:92:90:62:a2:30:d6:7e:32:3c:88:11:5d:29:c7:17:7f:0e: 46:f0:88:4a:7a:d4:39:3c:4a:c7:7d:a8:ad:41:8c:5a:70:cf: 25:56:14:fa:26:29:5e:f5:71:e7:ea:19:8d:d3:9a:5f:e8:a8: b1:c6:95:38:c4:6a:0b:99:a5:43:07:56:c2:0c:38:c9:cd:27: c0:bc:7d:47:03:96:d5:c1:b8:55:c1:6c:03:45:85:a5:79:30: 23:0f:5c:34:a3:ff:cd:e8:84:5f:75:53:18:cf:81:12:5a:9d: 64:71:8f:89:cd:21:21:a9:5f:37:65:f4:86:35:44:3f:2f:4e: 09:6c:b6:ec:3a:ba:8e:03:02:3b:67:de:ce:6f:4d:65:79:28: b3:3c:79:ab:f0:8a:e8:bf:c5:aa:56:3d:5f:0c:a0:6f:ec:65: 66:40:28:cc:5a:13:d8:ca:1d:05:63:82:7c:2b:46:db:60:9b: 82:e8:3d:15:de:1e:56:4a:f4:69:ee:d8:ed:3b:e0:3d:c8:3e: 65:89:ee:f6:ff:1a:c2:ab:62:89:af:60:8f:b5:74:5f:7d:0b: 4b:c9:a3:6b:21:aa:60:f8:5e:07:0f:db:61:36:21:e1:d6:5d: 5c:3a:6b:9a:3c:24:ce:8f:b0:7e:f7:87:b3:0b:87:3c:d4:6f: a2:56:24:ce -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUNg3feTM4VfLNTvVF08vrmbHV61QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjEyNEFCNzA4QkJGNjM4OEVDODBEMDZDM0I4RkIxRkYw MjQyNjI5NTAeFw0yNjA3MjQxMjEyNTFaFw0yNjA3MjUxMzUwNTFaMDMxMTAvBgNV BAMTKDQxQUY5RDBCM0RERjA3NEE0MTIyOUEyMkUwREQ5NUMyRjgxN0ZGQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC67vP35DKXZrB+ZTQJWEBACENS CjrDHmuQLWlM/3Td+FUWwQZpJ0WJahR54lPkxnwtUVucar7NZ1K7CS1yHQG1euYt ky+XBqvcTEUSPXSo11thiJwJkwzGzZhJLi2uqJdLImlMhVvBl6Tv1/vEgb++4E8+ 3SPvp9p/c7ghvkMvlJ5IMFtlZaJavOgMm7c6bY0LJE+rpvyJkC7cEBSNsKy6+vFk 6gOaRJmk/fewTmzoSbbQ4D7Ghie1e4iEnfaRD5oFz5qi+K+2r3VALDToG9oVItMP AXcGPlgTw8fDOP1KqlA9LMHg76Z5+8H8ZnvU7qDP2kspGlA+fOFHtgiR52TRAgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUQa+dCz3fB0pBIpoi4N2VwvgX/78wHwYDVR0j BBgwFoAUISSrcIu/Y4jsgNBsO4+x/wJCYpUwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby96cWtvaDRrZk51TERyTHp5N1ZXNFIxeUQ3WWhCb3hjNG9obnZmcEJVN3I4 LzAvMjEyNEFCNzA4QkJGNjM4OEVDODBEMDZDM0I4RkIxRkYwMjQyNjI5NS5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8yMTI0QUI3MDhCQkY2Mzg4RUM4 MEQwNkMzQjhGQjFGRjAyNDI2Mjk1LmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL3px a29oNGtmTnVMRHJMenk3Vlc0UjF5RDdZaEJveGM0b2hudmZwQlU3cjgvMC8yMTI0 QUI3MDhCQkY2Mzg4RUM4MEQwNkMzQjhGQjFGRjAyNDI2Mjk1Lm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA sZKQYqIw1n4yPIgRXSnHF38ORvCISnrUOTxKx32orUGMWnDPJVYU+iYpXvVx5+oZ jdOaX+ioscaVOMRqC5mlQwdWwgw4yc0nwLx9RwOW1cG4VcFsA0WFpXkwIw9cNKP/ zeiEX3VTGM+BElqdZHGPic0hIalfN2X0hjVEPy9OCWy27Dq6jgMCO2fezm9NZXko szx5q/CK6L/FqlY9Xwygb+xlZkAozFoT2ModBWOCfCtG22Cbgug9Fd4eVkr0ae7Y 7TvgPcg+ZYnu9v8awqtiia9gj7V0X30LS8mjayGqYPheBw/bYTYh4dZdXDprmjwk zo+wfveHswuHPNRvolYkzg== -----END CERTIFICATE-----Generated at Fri Jul 24 17:32:52 2026 by rpki-client