$ rpki-client -vvf rpki-repo.registro.br/repo/A89bSVDwNxiePN6M8BSJDHMVH3UpgYjFxRnSFZiE4kBX/0/436AE81939B23C1281E48CA5B5E8E041EAD34FDF.mft File: 436AE81939B23C1281E48CA5B5E8E041EAD34FDF.mft (raw, json) Hash identifier: E87jZcLRrQw9Typ9WRle/sFP8+6ZZsaqI4JvokNbxOk= Subject key identifier: 04:74:CD:20:CF:BF:D8:3B:FD:7A:D5:B0:C5:3B:D0:74:AD:52:9D:90 Authority key identifier: 43:6A:E8:19:39:B2:3C:12:81:E4:8C:A5:B5:E8:E0:41:EA:D3:4F:DF Certificate issuer: /CN=436AE81939B23C1281E48CA5B5E8E041EAD34FDF Certificate serial: 29AE08789C4EA719E7C29698FF332E75518FFCB7 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/436AE81939B23C1281E48CA5B5E8E041EAD34FDF.cer Subject info access: rsync://rpki-repo.registro.br/repo/A89bSVDwNxiePN6M8BSJDHMVH3UpgYjFxRnSFZiE4kBX/0/436AE81939B23C1281E48CA5B5E8E041EAD34FDF.mft Manifest number: 14 Signing time: Tue 28 Jul 2026 12:49:43 +0000 Manifest this update: Tue 28 Jul 2026 12:44:43 +0000 Manifest next update: Wed 29 Jul 2026 13:47:43 +0000 Files and hashes: 1: 323830343a386664633a3a2f33322d3335203d3e20323733353137.roa (hash: Ihg7pkHkq4wRJxaCLlclcPVa+ekiq7W7eTaWiLRiM+0=) 2: 3136382e302e3139322e302f32322d3234203d3e20323733353137.roa (hash: Mho2+k2MDZvS4oT2qvXN4rJqRyEJh5QJ3BoFjPzErtQ=) 3: 436AE81939B23C1281E48CA5B5E8E041EAD34FDF.crl (hash: DfSrT8uPX1RhhE0IiHI2AzZ7DK6NFOedziIWgY9CHVQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/A89bSVDwNxiePN6M8BSJDHMVH3UpgYjFxRnSFZiE4kBX/0/436AE81939B23C1281E48CA5B5E8E041EAD34FDF.crl rsync://rpki-repo.registro.br/repo/A89bSVDwNxiePN6M8BSJDHMVH3UpgYjFxRnSFZiE4kBX/0/436AE81939B23C1281E48CA5B5E8E041EAD34FDF.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/436AE81939B23C1281E48CA5B5E8E041EAD34FDF.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 29 Jul 2026 13:47:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:ae:08:78:9c:4e:a7:19:e7:c2:96:98:ff:33:2e:75:51:8f:fc:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=436AE81939B23C1281E48CA5B5E8E041EAD34FDF Validity Not Before: Jul 28 12:44:43 2026 GMT Not After : Jul 29 13:47:43 2026 GMT Subject: CN=0474CD20CFBFD83BFD7AD5B0C53BD074AD529D90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:26:1b:f9:fd:50:69:ce:2d:a7:6d:b4:74:90: 23:cc:31:c8:0c:26:9e:ad:8f:0d:45:d5:96:a9:37: d0:6f:e0:3d:09:e7:c4:36:6a:84:bf:2a:85:5a:55: 22:fe:7d:11:7b:f8:f0:de:bc:20:bf:95:ca:81:f8: b9:5a:4c:0b:d7:ad:d9:a2:89:4f:62:75:3b:fd:df: 03:2b:28:b7:2c:58:24:c9:ee:92:c8:20:f7:28:84: 2d:a7:c5:02:7f:c0:4c:91:38:0b:ae:df:82:c9:2f: 1e:18:cc:80:34:c2:10:5b:ed:35:ff:18:39:2f:8e: 4d:17:ff:1a:31:24:33:95:0f:75:ec:5c:e6:e3:fb: 29:3a:f3:1c:0e:26:d4:20:20:c8:10:35:a9:ba:dc: b2:9d:5e:e3:19:a0:10:f8:4c:3b:72:92:19:f3:11: 00:9b:44:6f:f5:00:f0:08:97:11:2a:cb:8c:c7:2c: 35:44:4d:58:c1:b3:70:4e:b7:5d:9f:8c:21:6a:03: 41:13:4b:a4:4b:17:05:00:65:3b:9e:cb:3a:fa:36: db:ba:54:18:27:af:79:f4:22:52:51:e5:7b:a4:d3: fa:1d:67:4e:4d:2a:6d:5f:d6:7d:e7:45:df:60:fb: 8f:d5:50:77:1e:14:02:08:c6:a9:54:b8:4a:a6:23: 25:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:74:CD:20:CF:BF:D8:3B:FD:7A:D5:B0:C5:3B:D0:74:AD:52:9D:90 X509v3 Authority Key Identifier: keyid:43:6A:E8:19:39:B2:3C:12:81:E4:8C:A5:B5:E8:E0:41:EA:D3:4F:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/A89bSVDwNxiePN6M8BSJDHMVH3UpgYjFxRnSFZiE4kBX/0/436AE81939B23C1281E48CA5B5E8E041EAD34FDF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/436AE81939B23C1281E48CA5B5E8E041EAD34FDF.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/A89bSVDwNxiePN6M8BSJDHMVH3UpgYjFxRnSFZiE4kBX/0/436AE81939B23C1281E48CA5B5E8E041EAD34FDF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:d7:40:5b:23:a8:1b:d8:38:7a:18:03:5d:42:2c:c9:84:c9: 41:1d:2f:2c:83:b8:51:97:36:81:b3:2b:7d:38:ca:96:1d:60: 19:4c:76:cd:2d:56:e2:3d:5f:8f:40:11:cc:9e:09:02:b2:3b: a7:0b:92:21:c0:1b:ba:ea:64:df:36:25:1a:37:c3:cc:c0:53: 16:b6:9c:87:a7:c8:e0:55:1c:ac:64:8f:ea:e8:4f:25:6f:64: 63:bd:77:d9:3e:77:da:b9:e0:bc:0d:9f:c4:48:4d:f7:43:c8: 86:17:a6:94:34:20:36:64:06:12:98:68:47:21:9c:b5:6d:61: 66:6a:07:d2:0a:2c:1d:79:e8:43:02:67:b0:a6:c8:55:59:52: f9:0d:40:3c:69:cf:f1:c8:1e:e9:29:1b:16:57:86:a8:e1:b0: 22:79:7b:56:74:fe:45:81:1e:71:40:f8:30:81:7a:0c:0f:b5: 27:dc:11:09:ec:89:ba:8e:7e:1d:8a:44:6f:c7:19:26:fb:7f: 5a:13:e2:83:5f:c6:9e:04:d5:57:07:81:c7:31:60:36:69:e1: 15:41:6c:36:ca:43:cd:9a:2a:d2:76:fc:db:c9:b3:d5:3c:b3: f3:50:90:60:f2:b2:98:5f:ae:83:3f:17:6e:8e:93:2d:53:ec: 3e:07:ec:44 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUKa4IeJxOpxnnwpaY/zMudVGP/LcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDM2QUU4MTkzOUIyM0MxMjgxRTQ4Q0E1QjVFOEUwNDFF QUQzNEZERjAeFw0yNjA3MjgxMjQ0NDNaFw0yNjA3MjkxMzQ3NDNaMDMxMTAvBgNV BAMTKDA0NzRDRDIwQ0ZCRkQ4M0JGRDdBRDVCMEM1M0JEMDc0QUQ1MjlEOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKJhv5/VBpzi2nbbR0kCPMMcgM Jp6tjw1F1ZapN9Bv4D0J58Q2aoS/KoVaVSL+fRF7+PDevCC/lcqB+LlaTAvXrdmi iU9idTv93wMrKLcsWCTJ7pLIIPcohC2nxQJ/wEyROAuu34LJLx4YzIA0whBb7TX/ GDkvjk0X/xoxJDOVD3XsXObj+yk68xwOJtQgIMgQNam63LKdXuMZoBD4TDtykhnz EQCbRG/1APAIlxEqy4zHLDVETVjBs3BOt12fjCFqA0ETS6RLFwUAZTueyzr6Ntu6 VBgnr3n0IlJR5Xuk0/odZ05NKm1f1n3nRd9g+4/VUHceFAIIxqlUuEqmIyXZAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUBHTNIM+/2Dv9etWwxTvQdK1SnZAwHwYDVR0j BBgwFoAUQ2roGTmyPBKB5IyltejgQerTT98wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQTg5YlNWRHdOeGllUE42TThCU0pESE1WSDNVcGdZakZ4Um5TRlppRTRr QlgvMC80MzZBRTgxOTM5QjIzQzEyODFFNDhDQTVCNUU4RTA0MUVBRDM0RkRGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQzNkFFODE5MzlCMjNDMTI4 MUU0OENBNUI1RThFMDQxRUFEMzRGREYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QTg5YlNWRHdOeGllUE42TThCU0pESE1WSDNVcGdZakZ4Um5TRlppRTRrQlgvMC80 MzZBRTgxOTM5QjIzQzEyODFFNDhDQTVCNUU4RTA0MUVBRDM0RkRGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAX9dAWyOoG9g4ehgDXUIsyYTJQR0vLIO4UZc2gbMrfTjKlh1gGUx2zS1W4j1f j0ARzJ4JArI7pwuSIcAbuupk3zYlGjfDzMBTFrach6fI4FUcrGSP6uhPJW9kY713 2T532rngvA2fxEhN90PIhhemlDQgNmQGEphoRyGctW1hZmoH0gosHXnoQwJnsKbI VVlS+Q1APGnP8cge6SkbFleGqOGwInl7VnT+RYEecUD4MIF6DA+1J9wRCeyJuo5+ HYpEb8cZJvt/WhPig1/GngTVVweBxzFgNmnhFUFsNspDzZoq0nb828mz1Tyz81CQ YPKymF+ugz8Xbo6TLVPsPgfsRA== -----END CERTIFICATE-----Generated at Tue Jul 28 19:43:35 2026 by rpki-client