$ rpki-client -vvvf rpki-repo.registro.br/repo/C7xaYxrCxmcwRXhsajgJDMPtmrwTdfDRmd7LAHymdMGt/0/84515A1EE549DECBCFF34DBB8783DF637AFB108E.mft File: 84515A1EE549DECBCFF34DBB8783DF637AFB108E.mft (raw, json) Hash identifier: LBgVWMMvRftGTPVfJJ6SxadnVDiVQiE9L/5jsUiVUDU= Subject key identifier: 0C:AA:72:9A:9E:41:DD:CF:91:0E:CB:2D:10:6F:36:79:DB:BE:4C:17 Authority key identifier: 84:51:5A:1E:E5:49:DE:CB:CF:F3:4D:BB:87:83:DF:63:7A:FB:10:8E Certificate issuer: /CN=84515A1EE549DECBCFF34DBB8783DF637AFB108E Certificate serial: 5E0DF178F8102BA2934D95965CC09E4446D15D3C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84515A1EE549DECBCFF34DBB8783DF637AFB108E.cer Subject info access: rsync://rpki-repo.registro.br/repo/C7xaYxrCxmcwRXhsajgJDMPtmrwTdfDRmd7LAHymdMGt/0/84515A1EE549DECBCFF34DBB8783DF637AFB108E.mft Manifest number: CF Signing time: Mon 21 Sep 2026 23:14:28 +0000 Manifest this update: Mon 21 Sep 2026 23:09:28 +0000 Manifest next update: Wed 23 Sep 2026 00:08:28 +0000 Files and hashes: 1: 3139302e38392e3232302e302f32322d3332203d3e20323637353032.roa (hash: dRA5u+N9RAqXrfRVnSNRBGHlpMD03Jb47V3JqpYYPNk=) 2: 3230312e3138322e36382e302f32322d3332203d3e20323637353032.roa (hash: EKjzZcdce5dmwCY7GFJp45qxoEgsp3XDUZEvDTzhq8g=) 3: 84515A1EE549DECBCFF34DBB8783DF637AFB108E.crl (hash: e873mxwOXFZJ6MfwNEx1lBwvO9uWCiJzNYOyvD0XcaI=) 4: 323830343a343237383a3a2f33322d313238203d3e20323637353032.roa (hash: 1FR/+F+ZMRtVf7m71NxHoArf80fjmjI6UDkT9kqK7VI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/C7xaYxrCxmcwRXhsajgJDMPtmrwTdfDRmd7LAHymdMGt/0/84515A1EE549DECBCFF34DBB8783DF637AFB108E.crl rsync://rpki-repo.registro.br/repo/C7xaYxrCxmcwRXhsajgJDMPtmrwTdfDRmd7LAHymdMGt/0/84515A1EE549DECBCFF34DBB8783DF637AFB108E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84515A1EE549DECBCFF34DBB8783DF637AFB108E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 23 Sep 2026 00:08:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:0d:f1:78:f8:10:2b:a2:93:4d:95:96:5c:c0:9e:44:46:d1:5d:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84515A1EE549DECBCFF34DBB8783DF637AFB108E Validity Not Before: Sep 21 23:09:28 2026 GMT Not After : Sep 23 00:08:28 2026 GMT Subject: CN=0CAA729A9E41DDCF910ECB2D106F3679DBBE4C17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ef:cf:76:d9:c8:64:e7:9b:48:00:12:03:cb: 3e:4e:5c:71:26:2e:60:96:fc:b1:6e:08:0b:e0:21: ec:58:f7:86:04:b9:f2:35:98:fe:4d:4c:e4:9c:6f: 80:17:b1:b0:2a:b1:57:c7:d3:ae:1b:d5:d8:e0:bb: c0:78:ee:0c:9a:73:78:67:cb:eb:8b:a5:8c:f2:a9: fb:94:c5:c9:42:93:5f:58:b6:88:9f:c2:3a:4c:94: 7a:da:c5:8e:24:86:60:0f:e7:49:5e:fa:e5:28:91: 95:e4:5c:d6:1f:7e:ce:d8:99:8f:d8:d7:54:91:67: 48:5d:11:b4:d1:a8:25:c1:9f:ce:29:c2:26:80:9a: 78:24:e4:b1:1e:ad:cd:71:0c:72:f2:74:2e:27:f0: e7:e5:46:4c:e4:d2:8d:b2:1d:56:92:f9:51:60:96: fc:da:56:18:83:02:be:6c:80:41:e4:3d:55:b7:e1: e9:3f:56:58:4e:c4:9d:66:77:c4:6f:15:e6:58:5b: 36:b9:26:bc:dd:23:72:ba:8b:9f:20:67:f0:09:37: 23:9e:f7:d4:8b:2d:58:f1:00:5e:b7:19:2a:95:21: 7e:a7:cc:c0:f5:9e:73:8a:93:b0:6e:5b:7f:f8:c0: 21:38:12:3a:b9:60:ad:48:08:85:79:85:93:53:29: 31:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:AA:72:9A:9E:41:DD:CF:91:0E:CB:2D:10:6F:36:79:DB:BE:4C:17 X509v3 Authority Key Identifier: keyid:84:51:5A:1E:E5:49:DE:CB:CF:F3:4D:BB:87:83:DF:63:7A:FB:10:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/C7xaYxrCxmcwRXhsajgJDMPtmrwTdfDRmd7LAHymdMGt/0/84515A1EE549DECBCFF34DBB8783DF637AFB108E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84515A1EE549DECBCFF34DBB8783DF637AFB108E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/C7xaYxrCxmcwRXhsajgJDMPtmrwTdfDRmd7LAHymdMGt/0/84515A1EE549DECBCFF34DBB8783DF637AFB108E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:9c:fe:cf:b4:fd:49:4c:f3:7d:fb:a7:a7:e6:cc:28:cf:47: 3d:95:04:1d:9d:5d:ce:48:22:a8:c1:21:b2:73:4b:d8:67:e5: 0a:eb:fb:86:83:a2:74:0a:c6:25:96:73:01:50:40:05:c7:b8: ba:79:bb:1b:2d:3b:30:f6:38:f8:14:2b:85:13:34:90:9b:14: 73:24:34:43:94:6e:77:a4:2c:47:2b:f9:2c:1f:db:24:82:47: cb:e1:4d:9a:cc:31:94:5e:f8:9a:81:b5:02:02:62:52:82:61: e7:48:68:73:7a:64:41:a0:8d:a5:62:02:81:24:a5:80:f9:4c: ae:77:50:8c:fb:cf:35:b1:6d:2d:31:44:14:68:2c:df:c4:1d: 2b:6c:4d:ff:0b:83:82:93:9c:c1:8d:28:3f:aa:a0:2d:2c:db: 27:b2:70:6f:a9:57:6c:35:38:66:88:61:12:cd:ed:14:b3:50: f3:e8:fe:65:ee:2d:49:7a:08:64:d7:e7:d7:4b:52:fd:3c:e0: d6:f7:62:8f:97:52:3e:d9:d4:ff:25:39:27:21:db:90:30:ee: 14:4a:82:7a:3b:0e:3d:60:fd:ee:e5:1e:ae:d8:df:f8:f5:a8: 94:f2:0b:70:bd:a5:7e:ad:fb:ed:73:92:6c:d3:9e:dc:f9:8c: 2e:90:0e:65 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUXg3xePgQK6KTTZWWXMCeREbRXTwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ1MTVBMUVFNTQ5REVDQkNGRjM0REJCODc4M0RGNjM3 QUZCMTA4RTAeFw0yNjA5MjEyMzA5MjhaFw0yNjA5MjMwMDA4MjhaMDMxMTAvBgNV BAMTKDBDQUE3MjlBOUU0MUREQ0Y5MTBFQ0IyRDEwNkYzNjc5REJCRTRDMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC478922chk55tIABIDyz5OXHEm LmCW/LFuCAvgIexY94YEufI1mP5NTOScb4AXsbAqsVfH064b1djgu8B47gyac3hn y+uLpYzyqfuUxclCk19YtoifwjpMlHraxY4khmAP50le+uUokZXkXNYffs7YmY/Y 11SRZ0hdEbTRqCXBn84pwiaAmngk5LEerc1xDHLydC4n8OflRkzk0o2yHVaS+VFg lvzaVhiDAr5sgEHkPVW34ek/VlhOxJ1md8RvFeZYWza5JrzdI3K6i58gZ/AJNyOe 99SLLVjxAF63GSqVIX6nzMD1nnOKk7BuW3/4wCE4Ejq5YK1ICIV5hZNTKTGDAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUDKpymp5B3c+RDsstEG82edu+TBcwHwYDVR0j BBgwFoAUhFFaHuVJ3svP8027h4PfY3r7EI4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQzd4YVl4ckN4bWN3Ulhoc2FqZ0pETVB0bXJ3VGRmRFJtZDdMQUh5bWRN R3QvMC84NDUxNUExRUU1NDlERUNCQ0ZGMzREQkI4NzgzREY2MzdBRkIxMDhFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg0NTE1QTFFRTU0OURFQ0JD RkYzNERCQjg3ODNERjYzN0FGQjEwOEUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Qzd4YVl4ckN4bWN3Ulhoc2FqZ0pETVB0bXJ3VGRmRFJtZDdMQUh5bWRNR3QvMC84 NDUxNUExRUU1NDlERUNCQ0ZGMzREQkI4NzgzREY2MzdBRkIxMDhFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAC5z+z7T9SUzzffunp+bMKM9HPZUEHZ1dzkgiqMEhsnNL2GflCuv7hoOidArG JZZzAVBABce4unm7Gy07MPY4+BQrhRM0kJsUcyQ0Q5Rud6QsRyv5LB/bJIJHy+FN mswxlF74moG1AgJiUoJh50hoc3pkQaCNpWICgSSlgPlMrndQjPvPNbFtLTFEFGgs 38QdK2xN/wuDgpOcwY0oP6qgLSzbJ7Jwb6lXbDU4ZohhEs3tFLNQ8+j+Ze4tSXoI ZNfn10tS/Tzg1vdij5dSPtnU/yU5JyHbkDDuFEqCejsOPWD97uUertjf+PWolPIL cL2lfq377XOSbNOe3PmMLpAOZQ== -----END CERTIFICATE-----Generated at Tue Sep 22 06:18:40 2026 by rpki-client