$ rpki-client -vvf rpki-repo.registro.br/repo/BDRcUWNayGQ9t7MnRBTVAYTRk3c4VmdLSa4H7KgXahPr/0/D51A8889DA4DB7C213105D9FA5D4DE23BA6B4B44.mft File: D51A8889DA4DB7C213105D9FA5D4DE23BA6B4B44.mft (raw, json) Hash identifier: /KwPuezWzCx+pwV7CvNcphtQlp+0hsjhUVtu9ek2dxw= Subject key identifier: 0D:28:87:00:68:06:83:2B:F0:4A:23:20:9E:E3:C7:76:EB:7F:68:92 Authority key identifier: D5:1A:88:89:DA:4D:B7:C2:13:10:5D:9F:A5:D4:DE:23:BA:6B:4B:44 Certificate issuer: /CN=D51A8889DA4DB7C213105D9FA5D4DE23BA6B4B44 Certificate serial: 28E0FC00EA08D5A0FE8639CA6071145C579ACB00 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D51A8889DA4DB7C213105D9FA5D4DE23BA6B4B44.cer Subject info access: rsync://rpki-repo.registro.br/repo/BDRcUWNayGQ9t7MnRBTVAYTRk3c4VmdLSa4H7KgXahPr/0/D51A8889DA4DB7C213105D9FA5D4DE23BA6B4B44.mft Manifest number: 20 Signing time: Tue 28 Jul 2026 02:30:56 +0000 Manifest this update: Tue 28 Jul 2026 02:25:56 +0000 Manifest next update: Wed 29 Jul 2026 06:19:56 +0000 Files and hashes: 1: 3138372e36332e3230382e302f32302d3233203d3e203533303937.roa (hash: Nk/mtBlgsTJJLVVZKCEHx2VV9DRMhbQskRsP1Np+0Kc=) 2: D51A8889DA4DB7C213105D9FA5D4DE23BA6B4B44.crl (hash: g/FG7gtuvOr0mfpAARQmDpaz8gbo0RUZw3DHRMC4gDQ=) 3: 323830343a333139303a3a2f33322d3438203d3e203533303937.roa (hash: 2MuQT95no5/L/h8j9YeE2AGiVk1P5w5Z3P/WguqQtdI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BDRcUWNayGQ9t7MnRBTVAYTRk3c4VmdLSa4H7KgXahPr/0/D51A8889DA4DB7C213105D9FA5D4DE23BA6B4B44.crl rsync://rpki-repo.registro.br/repo/BDRcUWNayGQ9t7MnRBTVAYTRk3c4VmdLSa4H7KgXahPr/0/D51A8889DA4DB7C213105D9FA5D4DE23BA6B4B44.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D51A8889DA4DB7C213105D9FA5D4DE23BA6B4B44.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 29 Jul 2026 06:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:e0:fc:00:ea:08:d5:a0:fe:86:39:ca:60:71:14:5c:57:9a:cb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D51A8889DA4DB7C213105D9FA5D4DE23BA6B4B44 Validity Not Before: Jul 28 02:25:56 2026 GMT Not After : Jul 29 06:19:56 2026 GMT Subject: CN=0D2887006806832BF04A23209EE3C776EB7F6892 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:f3:1a:fc:82:b5:4c:fd:f4:e1:f4:1b:f2:52: 8d:dc:91:23:47:5d:e8:5f:a9:be:8f:64:29:ea:6c: 32:23:c2:d2:4f:9a:dc:91:eb:b0:85:b3:10:1d:6c: 09:45:5b:7a:c6:e3:a8:37:9a:db:b4:7a:83:83:82: 02:36:42:06:cf:f4:eb:97:85:39:be:16:b1:5b:ee: d7:d2:b6:ba:1d:2e:72:d9:ec:8b:ed:8c:af:44:14: a9:ee:3f:cf:50:5b:ad:d6:11:c1:f7:0b:77:ec:28: 50:04:e7:b2:08:a4:c7:a0:9b:1d:02:d0:29:0b:32: b3:9e:25:7f:ad:3d:a1:83:ce:2c:6c:bf:0f:d1:9f: 2c:da:76:32:e2:f4:e7:f5:10:02:67:bc:e3:02:a6: ee:d1:ff:6c:af:c1:6b:92:12:fb:f9:53:8f:97:7d: d0:0b:7a:ff:75:83:34:a9:b9:0f:ad:6a:a3:df:87: 4c:ea:1b:85:41:67:6e:9a:f0:e4:1d:9c:09:23:ee: 9d:aa:39:5e:c4:ef:64:be:1a:90:b0:4c:41:dd:ef: 6b:3f:6c:8d:c3:df:cd:00:87:e7:1e:6f:f3:b9:6d: 94:3d:c3:f2:58:6b:e1:a9:fc:07:18:2d:5d:a8:eb: e5:fc:73:e8:8a:b4:46:e3:10:71:b3:a1:18:7a:88: fa:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:28:87:00:68:06:83:2B:F0:4A:23:20:9E:E3:C7:76:EB:7F:68:92 X509v3 Authority Key Identifier: keyid:D5:1A:88:89:DA:4D:B7:C2:13:10:5D:9F:A5:D4:DE:23:BA:6B:4B:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BDRcUWNayGQ9t7MnRBTVAYTRk3c4VmdLSa4H7KgXahPr/0/D51A8889DA4DB7C213105D9FA5D4DE23BA6B4B44.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D51A8889DA4DB7C213105D9FA5D4DE23BA6B4B44.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BDRcUWNayGQ9t7MnRBTVAYTRk3c4VmdLSa4H7KgXahPr/0/D51A8889DA4DB7C213105D9FA5D4DE23BA6B4B44.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:3c:79:cc:36:69:36:b4:d3:3e:7d:6d:32:69:c9:cb:79:e7: 2f:51:fa:17:93:36:37:3c:d6:2e:c2:3b:37:06:31:b3:e5:13: 65:b8:cd:3e:a3:95:34:42:40:79:5e:f3:c2:45:b9:00:d3:22: fc:48:e8:f6:e5:bc:cd:8a:32:fd:b8:e4:59:25:bd:1e:55:3e: 26:6a:94:df:8e:ad:3a:35:23:de:99:d8:20:ca:b2:2e:dd:9a: f5:f0:e2:44:8f:99:c0:b2:7e:9c:9d:17:c7:35:8d:8c:d1:2b: 6c:84:cf:31:95:fb:2e:44:66:39:23:3e:3d:27:50:d2:0a:19: 8f:56:03:be:32:4f:d3:e2:5b:f4:fa:1c:c0:32:a1:df:0d:8e: 3c:9b:ea:ca:5e:a1:2f:e4:a0:a6:1b:fe:0f:48:28:4c:bf:ac: 29:a1:38:e8:ea:f3:b3:8e:90:56:1f:68:2a:cf:e2:34:b3:5f: 1a:8f:93:57:65:45:de:14:b9:83:bd:22:f6:ca:90:59:e9:03: 0b:f1:99:5f:d5:0b:94:a5:cf:c0:92:5f:e7:8c:f7:ce:16:35: 29:e2:28:29:b5:84:1d:bd:0a:76:82:de:0d:a9:c5:af:8b:59: 04:f0:85:c8:71:42:6a:1b:bd:e6:14:4f:63:70:0d:b3:f4:35: d4:2a:56:77 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUKOD8AOoI1aD+hjnKYHEUXFeaywAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDUxQTg4ODlEQTREQjdDMjEzMTA1RDlGQTVENERFMjNC QTZCNEI0NDAeFw0yNjA3MjgwMjI1NTZaFw0yNjA3MjkwNjE5NTZaMDMxMTAvBgNV BAMTKDBEMjg4NzAwNjgwNjgzMkJGMDRBMjMyMDlFRTNDNzc2RUI3RjY4OTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCK8xr8grVM/fTh9BvyUo3ckSNH Xehfqb6PZCnqbDIjwtJPmtyR67CFsxAdbAlFW3rG46g3mtu0eoODggI2QgbP9OuX hTm+FrFb7tfStrodLnLZ7IvtjK9EFKnuP89QW63WEcH3C3fsKFAE57IIpMegmx0C 0CkLMrOeJX+tPaGDzixsvw/RnyzadjLi9Of1EAJnvOMCpu7R/2yvwWuSEvv5U4+X fdALev91gzSpuQ+taqPfh0zqG4VBZ26a8OQdnAkj7p2qOV7E72S+GpCwTEHd72s/ bI3D380Ah+ceb/O5bZQ9w/JYa+Gp/AcYLV2o6+X8c+iKtEbjEHGzoRh6iPohAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUDSiHAGgGgyvwSiMgnuPHdut/aJIwHwYDVR0j BBgwFoAU1RqIidpNt8ITEF2fpdTeI7prS0QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQkRSY1VXTmF5R1E5dDdNblJCVFZBWVRSazNjNFZtZExTYTRIN0tnWGFo UHIvMC9ENTFBODg4OURBNERCN0MyMTMxMDVEOUZBNUQ0REUyM0JBNkI0QjQ0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q1MUE4ODg5REE0REI3QzIx MzEwNUQ5RkE1RDRERTIzQkE2QjRCNDQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QkRSY1VXTmF5R1E5dDdNblJCVFZBWVRSazNjNFZtZExTYTRIN0tnWGFoUHIvMC9E NTFBODg4OURBNERCN0MyMTMxMDVEOUZBNUQ0REUyM0JBNkI0QjQ0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEArzx5zDZpNrTTPn1tMmnJy3nnL1H6F5M2NzzWLsI7NwYxs+UTZbjNPqOVNEJA eV7zwkW5ANMi/Ejo9uW8zYoy/bjkWSW9HlU+JmqU346tOjUj3pnYIMqyLt2a9fDi RI+ZwLJ+nJ0XxzWNjNErbITPMZX7LkRmOSM+PSdQ0goZj1YDvjJP0+Jb9PocwDKh 3w2OPJvqyl6hL+Sgphv+D0goTL+sKaE46Orzs46QVh9oKs/iNLNfGo+TV2VF3hS5 g70i9sqQWekDC/GZX9ULlKXPwJJf54z3zhY1KeIoKbWEHb0KdoLeDanFr4tZBPCF yHFCahu95hRPY3ANs/Q11CpWdw== -----END CERTIFICATE-----Generated at Tue Jul 28 18:34:33 2026 by rpki-client