$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/62b3479e-d188-4fbf-a2b8-0558d7e495cd/nA747Uq1S7sGJBCcsAHC4_YV5QM.mft File: nA747Uq1S7sGJBCcsAHC4_YV5QM.mft (raw, json) Hash identifier: n/BCX2rxsHXhvDt24kgP/XFASH+QCpyebMwkC5dy+Sk= Subject key identifier: AD:D3:6A:58:DF:D1:0B:4D:76:5C:8D:4D:17:8B:5B:BD:C5:EC:23:66 Authority key identifier: 58:4B:FB:8A:D2:60:37:15:03:B6:CD:8B:0E:F5:AE:A7:9C:9C:BB:15 Certificate issuer: /CN=584BFB8AD260371503B6CD8B0EF5AEA79C9CBB15 Certificate serial: 416510B9B2862FA48782358E1F33618EDBCD593D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/584BFB8AD260371503B6CD8B0EF5AEA79C9CBB15.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/62b3479e-d188-4fbf-a2b8-0558d7e495cd/nA747Uq1S7sGJBCcsAHC4_YV5QM.mft Manifest number: 0C Signing time: Sun 11 Oct 2026 18:32:12 +0000 Manifest this update: Sun 11 Oct 2026 18:32:12 +0000 Manifest next update: Thu 15 Oct 2026 18:32:12 +0000 Files and hashes: 1: b2b5c9d7-3953-4321-b384-57adf5534c6f.roa (hash: 3RVvcsuwaTnZ89zYH8W/OpNIfaLKYrWMbkS6qE9+g1Q=) 2: f5ae5cb2-5c9a-4f86-87ed-8e26b9978ab5.roa (hash: imMIXnv7iUJyEXYmebcBSMI5HpMhZXaSQX93MqdAaZs=) 3: nA747Uq1S7sGJBCcsAHC4_YV5QM.crl (hash: 8K5/v8H83+UF9maL3k3frkybkVr2OQEATYU3YP3dRBg=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/62b3479e-d188-4fbf-a2b8-0558d7e495cd/nA747Uq1S7sGJBCcsAHC4_YV5QM.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/62b3479e-d188-4fbf-a2b8-0558d7e495cd/nA747Uq1S7sGJBCcsAHC4_YV5QM.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/584BFB8AD260371503B6CD8B0EF5AEA79C9CBB15.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 13 Oct 2026 11:43:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:65:10:b9:b2:86:2f:a4:87:82:35:8e:1f:33:61:8e:db:cd:59:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=584BFB8AD260371503B6CD8B0EF5AEA79C9CBB15 Validity Not Before: Oct 11 18:32:12 2026 GMT Not After : Oct 15 18:32:12 2026 GMT Subject: serialNumber=e79c2b2773a9f15a583d348a747fa7c23ad35ca875606a512bc949556cbe9640, CN=cdb9583c-a9d1-49af-98d4-96e3eb7e1cc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:1d:67:da:8d:aa:12:65:7d:36:61:f8:0b:af: 9d:65:30:ec:a4:b6:95:16:3f:bc:34:71:9e:76:48: b0:4b:23:ba:bb:05:6e:c7:c4:06:a6:6e:26:63:f8: e6:9c:d6:81:07:ee:c8:f0:e8:39:33:13:6b:46:d2: 9d:c8:fd:cf:92:90:5e:4f:59:e3:bb:09:62:9f:c3: 47:b8:86:0d:95:7a:a0:72:0e:29:ee:8b:b1:61:f5: 62:da:63:d8:3d:1c:5b:e5:7e:9c:23:7e:68:b7:8c: 81:e2:e0:0f:5b:1e:79:50:28:87:22:40:e7:aa:d6: eb:0b:b3:0f:a6:8c:46:f6:85:09:e7:ff:ee:06:07: 3e:88:4c:03:1f:7d:ce:4c:09:70:1a:53:5b:66:e1: 2b:bd:15:e9:a9:a3:fa:c9:85:25:f2:53:6b:60:bb: db:a0:a0:c6:fe:1c:79:ac:1d:ac:9b:74:40:69:d9: fe:28:fa:14:b3:9d:64:1d:1d:e3:01:35:94:b4:f6: ab:b1:aa:78:f2:9a:8e:f5:d5:3d:60:aa:b1:8b:20: fe:ae:1a:24:1d:43:2f:84:f9:d5:c0:4a:c4:f0:f1: c3:f8:78:15:7e:07:4a:8a:3d:56:d7:2a:fc:19:2b: ae:8d:49:ba:5a:50:96:4b:a0:a6:fd:d9:df:a3:56: 2d:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:D3:6A:58:DF:D1:0B:4D:76:5C:8D:4D:17:8B:5B:BD:C5:EC:23:66 X509v3 Authority Key Identifier: keyid:58:4B:FB:8A:D2:60:37:15:03:B6:CD:8B:0E:F5:AE:A7:9C:9C:BB:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/584BFB8AD260371503B6CD8B0EF5AEA79C9CBB15.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/62b3479e-d188-4fbf-a2b8-0558d7e495cd/nA747Uq1S7sGJBCcsAHC4_YV5QM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/62b3479e-d188-4fbf-a2b8-0558d7e495cd/nA747Uq1S7sGJBCcsAHC4_YV5QM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:17:e4:8b:70:2e:0c:63:d2:a7:ff:84:69:13:a9:37:fd:f5: 4e:13:83:11:2e:5e:df:bd:d2:65:63:12:12:c4:fd:19:57:34: a4:73:09:8d:ab:74:63:d8:41:dd:2e:fa:3a:80:48:ab:12:31: 49:dc:44:7a:0d:4c:97:7a:ca:02:11:57:a6:64:55:1a:17:4b: 5e:b7:a1:f1:42:d3:4a:6a:4a:18:21:2f:7d:6d:db:83:f4:aa: c6:89:bf:17:ee:c3:a7:dd:0f:b4:d4:a6:85:ee:22:67:39:94: 12:cd:d0:49:05:d0:df:51:90:4f:da:ad:83:ff:5d:35:e4:ac: d9:df:df:5d:9c:cd:bc:ef:85:84:ea:1a:60:5d:3a:24:47:d8: 96:2e:ff:36:29:ef:91:dd:6a:ef:7b:7f:8a:55:98:f2:a1:2e: de:b0:d1:a1:55:8c:a5:cb:53:fc:96:d0:c0:02:74:93:f0:d3: db:f5:0c:7e:9b:7c:2b:33:a8:cb:fa:cf:fe:cb:2a:40:52:87: 66:5d:41:5a:8b:74:e4:7b:88:cf:c8:99:1b:f6:22:ac:5b:49: ee:34:cc:e5:23:a7:cf:63:ff:d9:ea:ec:dc:f4:42:e5:b9:c0: 91:0b:3f:52:51:b5:6f:00:2b:7e:9f:fc:bd:d8:31:42:f1:32: 5c:76:9c:cc -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgIUQWUQubKGL6SHgjWOHzNhjtvNWT0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTg0QkZCOEFEMjYwMzcxNTAzQjZDRDhCMEVGNUFFQTc5 QzlDQkIxNTAeFw0yNjEwMTExODMyMTJaFw0yNjEwMTUxODMyMTJaMHoxSTBHBgNV BAUTQGU3OWMyYjI3NzNhOWYxNWE1ODNkMzQ4YTc0N2ZhN2MyM2FkMzVjYTg3NTYw NmE1MTJiYzk0OTU1NmNiZTk2NDAxLTArBgNVBAMTJGNkYjk1ODNjLWE5ZDEtNDlh Zi05OGQ0LTk2ZTNlYjdlMWNjMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMUdZ9qNqhJlfTZh+AuvnWUw7KS2lRY/vDRxnnZIsEsjursFbsfEBqZuJmP4 5pzWgQfuyPDoOTMTa0bSncj9z5KQXk9Z47sJYp/DR7iGDZV6oHIOKe6LsWH1Ytpj 2D0cW+V+nCN+aLeMgeLgD1seeVAohyJA56rW6wuzD6aMRvaFCef/7gYHPohMAx99 zkwJcBpTW2bhK70V6amj+smFJfJTa2C726Cgxv4ceawdrJt0QGnZ/ij6FLOdZB0d 4wE1lLT2q7GqePKajvXVPWCqsYsg/q4aJB1DL4T51cBKxPDxw/h4FX4HSoo9Vtcq /Bkrro1JulpQlkugpv3Z36NWLaUCAwEAAaOCAkUwggJBMB0GA1UdDgQWBBSt02pY 39ELTXZcjU0Xi1u9xewjZjAfBgNVHSMEGDAWgBRYS/uK0mA3FQO2zYsO9a6nnJy7 FTAOBgNVHQ8BAf8EBAMCB4AweAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxy c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS81 ODRCRkI4QUQyNjAzNzE1MDNCNkNEOEIwRUY1QUVBNzlDOUNCQjE1LmNlcjCBlQYI KwYBBQUHAQsEgYgwgYUwgYIGCCsGAQUFBzALhnZyc3luYzovL3Jwa2ktcnN5bmMu dXMtZWFzdC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzYyYjM0NzllLWQxODgtNGZi Zi1hMmI4LTA1NThkN2U0OTVjZC9uQTc0N1VxMVM3c0dKQkNjc0FIQzRfWVY1UU0u bWZ0MIGIBgNVHR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVh c3QtMi5hbWF6b25hd3MuY29tL3ZvbHVtZS82MmIzNDc5ZS1kMTg4LTRmYmYtYTJi OC0wNTU4ZDdlNDk1Y2QvbkE3NDdVcTFTN3NHSkJDY3NBSEM0X1lWNVFNLmNybDAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIA AQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsF AAOCAQEABhfki3AuDGPSp/+EaROpN/31ThODES5e373SZWMSEsT9GVc0pHMJjat0 Y9hB3S76OoBIqxIxSdxEeg1Ml3rKAhFXpmRVGhdLXreh8ULTSmpKGCEvfW3bg/Sq xom/F+7Dp90PtNSmhe4iZzmUEs3QSQXQ31GQT9qtg/9dNeSs2d/fXZzNvO+FhOoa YF06JEfYli7/Ninvkd1q73t/ilWY8qEu3rDRoVWMpctT/JbQwAJ0k/DT2/UMfpt8 KzOoy/rP/ssqQFKHZl1BWot05HuIz8iZG/YirFtJ7jTM5SOnz2P/2ers3PRC5bnA kQs/UlG1bwArfp/8vdgxQvEyXHaczA== -----END CERTIFICATE-----Generated at Mon Oct 12 13:07:58 2026 by rpki-client