$ rpki-client -vvf rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/0/2159A2A607956D399271CDC6A3AC1E80617FEEE1.mft File: 2159A2A607956D399271CDC6A3AC1E80617FEEE1.mft (raw, json) Hash identifier: AylQQIHdw+D1RSxyZ+DUwM9aTjI3i0KujnB30PxMuhw= Subject key identifier: 12:F8:D4:C2:B4:F0:50:F4:9D:1C:B5:BD:12:D8:6E:A1:7A:31:11:A4 Authority key identifier: 21:59:A2:A6:07:95:6D:39:92:71:CD:C6:A3:AC:1E:80:61:7F:EE:E1 Certificate issuer: /CN=2159A2A607956D399271CDC6A3AC1E80617FEEE1 Certificate serial: 7F40BF666C6AB08C1A84D66BEA1BA00498B5882B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2159A2A607956D399271CDC6A3AC1E80617FEEE1.cer Subject info access: rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/0/2159A2A607956D399271CDC6A3AC1E80617FEEE1.mft Manifest number: 2A Signing time: Sat 13 Jun 2026 20:34:41 +0000 Manifest this update: Sat 13 Jun 2026 20:29:41 +0000 Manifest next update: Sun 14 Jun 2026 22:11:41 +0000 Files and hashes: 1: 3137372e33382e3138342e302f32312d3234203d3e203532373538.roa (hash: 3GyCzw9okLmCV3Lo5NKPmIHHgFYBF0+I3/BzpS37XJo=) 2: 2159A2A607956D399271CDC6A3AC1E80617FEEE1.crl (hash: DNVXsV8id4GegJuXBOGtbpRNqElY2oAFXUwNITm2Xv8=) 3: 3230312e3133312e3234302e302f32312d3234203d3e203532373538.roa (hash: C3+R5TJjILqRWqKKZFKMcGNRlcVwLelyy+SPnF/wG10=) 4: 323830343a6233383a3a2f33322d3438203d3e203532373538.roa (hash: yFx3ehbs6kD1O83Pz1zQ+DNga8Y7rEsJ/HhUCporP4Y=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/0/2159A2A607956D399271CDC6A3AC1E80617FEEE1.crl rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/0/2159A2A607956D399271CDC6A3AC1E80617FEEE1.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2159A2A607956D399271CDC6A3AC1E80617FEEE1.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 14 Jun 2026 22:11:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:40:bf:66:6c:6a:b0:8c:1a:84:d6:6b:ea:1b:a0:04:98:b5:88:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2159A2A607956D399271CDC6A3AC1E80617FEEE1 Validity Not Before: Jun 13 20:29:41 2026 GMT Not After : Jun 14 22:11:41 2026 GMT Subject: CN=12F8D4C2B4F050F49D1CB5BD12D86EA17A3111A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:72:72:44:38:4d:fe:42:84:c0:2d:dd:af:98: e4:91:04:db:85:04:b4:7c:a7:5f:2e:2d:af:bc:d8: 0b:f4:1e:5b:d8:97:ee:b3:ed:2d:e6:84:cc:e0:bc: fb:83:c4:5c:9b:36:f3:ac:8e:8b:19:b7:4f:b3:3c: fd:70:b2:d8:19:5a:06:e1:ab:8c:9d:07:aa:de:36: 6d:46:ad:82:88:c4:d9:81:16:de:ae:f2:a1:61:ce: 25:d3:de:47:85:e7:8f:55:c0:71:ef:a1:d0:2e:92: 01:63:c0:bd:fa:c2:10:98:d1:48:20:55:6f:c6:3b: 0e:1c:1c:32:88:d8:8f:db:7f:ca:a6:a4:b5:5c:28: a0:12:e9:72:0c:c1:be:36:d4:b5:c8:42:ab:ed:f8: ec:e7:25:7b:64:fb:01:da:21:da:11:db:af:ba:ec: aa:96:1d:5e:76:27:fe:40:60:7b:6d:6e:9c:ff:76: f1:03:da:9a:48:7f:96:ae:3a:d7:e2:68:5e:89:b0: 4f:6c:fd:95:ec:a6:b4:26:c0:cc:f0:91:e4:a6:2e: 5b:16:e3:54:4e:ec:b3:6d:42:27:39:86:c6:16:57: 88:ac:d7:d5:67:ae:ae:9c:59:56:e1:ff:56:e4:27: ec:7b:b3:89:54:ce:c3:7a:65:38:50:ca:e4:23:0e: 1e:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:F8:D4:C2:B4:F0:50:F4:9D:1C:B5:BD:12:D8:6E:A1:7A:31:11:A4 X509v3 Authority Key Identifier: keyid:21:59:A2:A6:07:95:6D:39:92:71:CD:C6:A3:AC:1E:80:61:7F:EE:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/0/2159A2A607956D399271CDC6A3AC1E80617FEEE1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2159A2A607956D399271CDC6A3AC1E80617FEEE1.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/0/2159A2A607956D399271CDC6A3AC1E80617FEEE1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:01:b6:5a:32:0f:6c:90:0a:f2:0d:21:c8:6a:71:76:fe:40: 37:34:e4:a1:ae:05:41:9e:cd:f0:b2:32:bf:91:29:7f:33:00: 9b:12:25:ca:a4:ac:3f:81:47:b3:5c:b4:4a:27:74:01:a7:e9: a2:a7:fd:f1:27:64:cc:d7:a3:32:d8:9a:ef:3a:d7:aa:9b:b1: 9b:84:6c:77:e0:c6:b5:48:ec:8a:fe:ea:c4:ed:fd:1b:53:af: 56:32:9b:92:5f:f5:73:cc:d4:a2:13:93:a7:6f:e4:11:f9:d0: 3a:f5:7b:94:33:07:10:19:d6:52:bc:66:57:42:1a:f2:aa:9d: 08:1d:be:6d:ad:88:6a:d1:c5:c7:31:cb:52:00:ca:23:6f:86: 46:9a:1f:a5:26:8d:5a:2a:14:92:21:6c:96:ec:37:e5:de:d4: f2:b5:2d:47:d0:8f:1e:0a:5c:36:ca:24:c1:9f:ec:7f:ff:f6: e0:bb:3e:2e:3b:a2:70:91:20:50:c7:e5:60:fa:89:cd:1f:bf: 5e:d6:c7:bf:50:f9:2d:a3:0b:29:4c:5d:2c:69:98:7f:49:74: 13:67:5f:3e:d3:48:6d:20:fd:e1:98:ec:a4:da:e5:30:0c:d4: 00:bf:79:7a:38:5b:69:58:d5:31:a1:c6:60:38:f9:e7:16:ca: 43:0e:64:02 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUf0C/ZmxqsIwahNZr6hugBJi1iCswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE1OUEyQTYwNzk1NkQzOTkyNzFDREM2QTNBQzFFODA2 MTdGRUVFMTAeFw0yNjA2MTMyMDI5NDFaFw0yNjA2MTQyMjExNDFaMDMxMTAvBgNV BAMTKDEyRjhENEMyQjRGMDUwRjQ5RDFDQjVCRDEyRDg2RUExN0EzMTExQTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDocnJEOE3+QoTALd2vmOSRBNuF BLR8p18uLa+82Av0HlvYl+6z7S3mhMzgvPuDxFybNvOsjosZt0+zPP1wstgZWgbh q4ydB6reNm1GrYKIxNmBFt6u8qFhziXT3keF549VwHHvodAukgFjwL36whCY0Ugg VW/GOw4cHDKI2I/bf8qmpLVcKKAS6XIMwb421LXIQqvt+OznJXtk+wHaIdoR26+6 7KqWHV52J/5AYHttbpz/dvED2ppIf5auOtfiaF6JsE9s/ZXsprQmwMzwkeSmLlsW 41RO7LNtQic5hsYWV4is19Vnrq6cWVbh/1bkJ+x7s4lUzsN6ZThQyuQjDh5lAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUEvjUwrTwUPSdHLW9EthuoXoxEaQwHwYDVR0j BBgwFoAUIVmipgeVbTmScc3Go6wegGF/7uEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR25yREU2MTdxa2ppN2o0ODVtdXR1OWRXNkFhd3BvVlN5UzNqYVR4YjR1 c2gvMC8yMTU5QTJBNjA3OTU2RDM5OTI3MUNEQzZBM0FDMUU4MDYxN0ZFRUUxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIxNTlBMkE2MDc5NTZEMzk5 MjcxQ0RDNkEzQUMxRTgwNjE3RkVFRTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R25yREU2MTdxa2ppN2o0ODVtdXR1OWRXNkFhd3BvVlN5UzNqYVR4YjR1c2gvMC8y MTU5QTJBNjA3OTU2RDM5OTI3MUNEQzZBM0FDMUU4MDYxN0ZFRUUxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOwG2WjIPbJAK8g0hyGpxdv5ANzTkoa4FQZ7N8LIyv5EpfzMAmxIlyqSsP4FH s1y0Sid0Aafpoqf98SdkzNejMtia7zrXqpuxm4Rsd+DGtUjsiv7qxO39G1OvVjKb kl/1c8zUohOTp2/kEfnQOvV7lDMHEBnWUrxmV0Ia8qqdCB2+ba2IatHFxzHLUgDK I2+GRpofpSaNWioUkiFsluw35d7U8rUtR9CPHgpcNsokwZ/sf//24Ls+LjuicJEg UMflYPqJzR+/XtbHv1D5LaMLKUxdLGmYf0l0E2dfPtNIbSD94ZjspNrlMAzUAL95 ejhbaVjVMaHGYDj55xbKQw5kAg== -----END CERTIFICATE-----Generated at Sun Jun 14 04:13:16 2026 by rpki-client