$ rpki-client -vvvf rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.mft File: D2991FF0EF094685597EA5146C4730F0270A9201.mft (raw, json) Hash identifier: iexYgifrXyWPUZoN8Jad9oHzCH8SuiV3PcR5F2xjWmk= Subject key identifier: 78:32:47:9D:D6:65:7B:38:03:AD:9C:98:46:8B:DC:2B:8D:A0:D9:61 Authority key identifier: D2:99:1F:F0:EF:09:46:85:59:7E:A5:14:6C:47:30:F0:27:0A:92:01 Certificate issuer: /CN=D2991FF0EF094685597EA5146C4730F0270A9201 Certificate serial: 687B3CB4E68FC6FB1CA6C9719CBFD92FDBDE1817 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2991FF0EF094685597EA5146C4730F0270A9201.cer Subject info access: rsync://rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.mft Manifest number: 0387 Signing time: Sun 20 Sep 2026 06:53:50 +0000 Manifest this update: Sun 20 Sep 2026 06:48:50 +0000 Manifest next update: Mon 21 Sep 2026 06:58:50 +0000 Files and hashes: 1: 3137372e38342e32342e302f32322d3332203d3e20323632353737.roa (hash: +jEdDp9EA7lRTIzWzVNW9syn95exciZtXmWtHnuIP8k=) 2: D2991FF0EF094685597EA5146C4730F0270A9201.crl (hash: l9yXGrmfhQ5Zv621wfd8eeDSYJryFKWDvoeP59C/4Ts=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.crl rsync://rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2991FF0EF094685597EA5146C4730F0270A9201.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 21 Sep 2026 06:58:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:7b:3c:b4:e6:8f:c6:fb:1c:a6:c9:71:9c:bf:d9:2f:db:de:18:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2991FF0EF094685597EA5146C4730F0270A9201 Validity Not Before: Sep 20 06:48:50 2026 GMT Not After : Sep 21 06:58:50 2026 GMT Subject: CN=7832479DD6657B3803AD9C98468BDC2B8DA0D961 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:69:29:f2:43:7f:4d:8a:2c:b0:27:e6:5a:30: 1f:d0:c8:25:b1:ef:dd:aa:97:39:be:3a:95:0f:e5: b5:28:97:52:32:93:b2:98:1f:fb:66:11:70:d6:42: 4a:53:b2:f8:1f:a5:34:d1:70:fe:f9:be:84:de:e2: 50:0a:6e:28:ec:37:fa:be:ee:92:8c:42:4a:ca:c3: 9a:f7:20:60:7f:67:69:c4:0c:ec:a9:57:d5:7f:93: 81:94:d9:0f:56:62:14:88:43:48:a7:f0:ac:25:54: d0:b9:17:d6:8e:7c:45:23:b9:d8:b1:03:35:a9:75: c2:17:ff:69:59:c0:4e:fa:a0:63:36:42:c9:a8:d2: 35:ab:49:1b:cd:ae:40:de:0d:5b:07:6c:60:ee:32: e5:5d:82:a2:07:b4:36:49:5d:ea:e7:63:9e:3f:c5: d1:d7:e3:7a:e0:97:18:9e:98:49:3d:0f:b2:d0:3e: 84:51:3b:d9:57:f0:00:0f:0c:74:a8:0b:4f:46:78: ca:83:78:14:b3:17:5f:cd:de:f4:b4:87:6c:3b:e5: 2e:f0:35:48:a9:d2:fd:0e:4c:b2:eb:d7:d3:d9:80: 03:e4:72:ed:9e:2f:62:cf:f6:eb:31:ff:90:0a:ed: 29:ce:4f:47:17:f4:e9:b5:a8:b0:7f:16:f0:0b:c2: fc:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:32:47:9D:D6:65:7B:38:03:AD:9C:98:46:8B:DC:2B:8D:A0:D9:61 X509v3 Authority Key Identifier: keyid:D2:99:1F:F0:EF:09:46:85:59:7E:A5:14:6C:47:30:F0:27:0A:92:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2991FF0EF094685597EA5146C4730F0270A9201.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:ac:77:f2:71:ea:c5:94:ac:c6:4f:5f:81:62:d4:3e:fa:5c: 12:eb:7a:3c:a1:62:b4:9c:47:1e:24:06:0e:a5:ab:bb:4d:bb: be:44:f7:1c:69:f1:a9:28:4a:6d:73:31:29:38:19:aa:23:81: 32:40:6b:9a:bd:0b:24:1e:a7:32:9d:ed:df:24:fa:7c:53:a3: 09:16:ca:54:6c:1f:9b:db:e7:39:4c:b2:2e:48:6b:32:fe:8c: db:20:12:52:6f:3d:52:e8:8f:ad:6d:d2:ae:ee:e2:e9:58:8f: a8:6e:3e:26:71:ed:db:2e:e2:a2:94:2c:8c:d6:16:d9:84:e4: ae:01:25:5d:e4:17:4d:87:e4:51:d9:21:69:03:ee:b8:84:61: a6:f0:d6:c1:f1:ba:db:1b:21:d5:4b:d8:42:c1:ce:b6:d6:de: ea:90:37:c8:f1:59:43:8a:1f:ea:96:44:0c:e6:b6:f6:ae:6a: 9b:80:a2:cf:10:10:d1:ca:1b:10:80:94:af:9e:14:c9:ed:21: 4c:fd:aa:67:b3:27:26:7c:a8:b9:0e:7f:eb:21:e6:55:e9:ac: f5:7e:06:2a:12:53:08:46:34:7f:8c:5b:17:cc:40:74:ab:90: c9:bc:e9:b0:97:7e:57:e6:7e:97:ff:ab:bf:a1:1b:c3:2f:68: 2f:05:16:e5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUaHs8tOaPxvscpslxnL/ZL9veGBcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDI5OTFGRjBFRjA5NDY4NTU5N0VBNTE0NkM0NzMwRjAy NzBBOTIwMTAeFw0yNjA5MjAwNjQ4NTBaFw0yNjA5MjEwNjU4NTBaMDMxMTAvBgNV BAMTKDc4MzI0NzlERDY2NTdCMzgwM0FEOUM5ODQ2OEJEQzJCOERBMEQ5NjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWaSnyQ39NiiywJ+ZaMB/QyCWx 792qlzm+OpUP5bUol1Iyk7KYH/tmEXDWQkpTsvgfpTTRcP75voTe4lAKbijsN/q+ 7pKMQkrKw5r3IGB/Z2nEDOypV9V/k4GU2Q9WYhSIQ0in8KwlVNC5F9aOfEUjudix AzWpdcIX/2lZwE76oGM2Qsmo0jWrSRvNrkDeDVsHbGDuMuVdgqIHtDZJXernY54/ xdHX43rglxiemEk9D7LQPoRRO9lX8AAPDHSoC09GeMqDeBSzF1/N3vS0h2w75S7w NUip0v0OTLLr19PZgAPkcu2eL2LP9usx/5AK7SnOT0cX9Om1qLB/FvALwvxDAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUeDJHndZlezgDrZyYRovcK42g2WEwHwYDVR0j BBgwFoAU0pkf8O8JRoVZfqUUbEcw8CcKkgEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQkZRVWk1VlFaNDY3RlZvTWpIZU0ySktMU1JBQ0xIM1RraGVZOHhIUFRW RnovMC9EMjk5MUZGMEVGMDk0Njg1NTk3RUE1MTQ2QzQ3MzBGMDI3MEE5MjAxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QyOTkxRkYwRUYwOTQ2ODU1 OTdFQTUxNDZDNDczMEYwMjcwQTkyMDEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QkZRVWk1VlFaNDY3RlZvTWpIZU0ySktMU1JBQ0xIM1RraGVZOHhIUFRWRnovMC9E Mjk5MUZGMEVGMDk0Njg1NTk3RUE1MTQ2QzQ3MzBGMDI3MEE5MjAxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXKx38nHqxZSsxk9fgWLUPvpcEut6PKFitJxHHiQGDqWru027vkT3HGnxqShK bXMxKTgZqiOBMkBrmr0LJB6nMp3t3yT6fFOjCRbKVGwfm9vnOUyyLkhrMv6M2yAS Um89UuiPrW3Sru7i6ViPqG4+JnHt2y7iopQsjNYW2YTkrgElXeQXTYfkUdkhaQPu uIRhpvDWwfG62xsh1UvYQsHOttbe6pA3yPFZQ4of6pZEDOa29q5qm4CizxAQ0cob EICUr54Uye0hTP2qZ7MnJnyouQ5/6yHmVems9X4GKhJTCEY0f4xbF8xAdKuQybzp sJd+V+Z+l/+rv6Ebwy9oLwUW5Q== -----END CERTIFICATE-----Generated at Sun Sep 20 15:19:58 2026 by rpki-client