$ rpki-client -vvf rpki-repo.registro.br/repo/ZYxqFTkcT8nRDZLFC5CgH17aiLovCK894nWwBajfAHq/0/BD4A3E82CA76DAF419C441FB1A4AD463C98EB9D0.mft File: BD4A3E82CA76DAF419C441FB1A4AD463C98EB9D0.mft (raw, json) Hash identifier: 3mw4X+EELhUjLuj2x49vtGI/sG25XMQ0NsRA5+d08so= Subject key identifier: D1:A1:E5:D8:FC:D1:A1:47:2F:0A:25:D9:57:3D:4D:FF:17:E2:CF:F7 Authority key identifier: BD:4A:3E:82:CA:76:DA:F4:19:C4:41:FB:1A:4A:D4:63:C9:8E:B9:D0 Certificate issuer: /CN=BD4A3E82CA76DAF419C441FB1A4AD463C98EB9D0 Certificate serial: 565913F68574EA09CB1A1DC82699D61076CD0C48 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD4A3E82CA76DAF419C441FB1A4AD463C98EB9D0.cer Subject info access: rsync://rpki-repo.registro.br/repo/ZYxqFTkcT8nRDZLFC5CgH17aiLovCK894nWwBajfAHq/0/BD4A3E82CA76DAF419C441FB1A4AD463C98EB9D0.mft Manifest number: 23 Signing time: Tue 28 Jul 2026 11:10:27 +0000 Manifest this update: Tue 28 Jul 2026 11:05:27 +0000 Manifest next update: Wed 29 Jul 2026 15:01:27 +0000 Files and hashes: 1: BD4A3E82CA76DAF419C441FB1A4AD463C98EB9D0.crl (hash: tHcHEdEHm4wdSGi7xLiKqx4fM34wcYD7hZvoA9sEQgA=) 2: 323830343a386631633a3a2f33322d3332203d3e20323733343638.roa (hash: its9+DoXyZzDxwyx2TV5+54HkvXpS6wD80IDMoVCKqY=) 3: 3136382e302e332e302f32342d3234203d3e20323733343638.roa (hash: TfC81paY2myGU/uQi+X1MDGOPF0bBFR2oM8RSsnl8CU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/ZYxqFTkcT8nRDZLFC5CgH17aiLovCK894nWwBajfAHq/0/BD4A3E82CA76DAF419C441FB1A4AD463C98EB9D0.crl rsync://rpki-repo.registro.br/repo/ZYxqFTkcT8nRDZLFC5CgH17aiLovCK894nWwBajfAHq/0/BD4A3E82CA76DAF419C441FB1A4AD463C98EB9D0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD4A3E82CA76DAF419C441FB1A4AD463C98EB9D0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 29 Jul 2026 15:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:59:13:f6:85:74:ea:09:cb:1a:1d:c8:26:99:d6:10:76:cd:0c:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD4A3E82CA76DAF419C441FB1A4AD463C98EB9D0 Validity Not Before: Jul 28 11:05:27 2026 GMT Not After : Jul 29 15:01:27 2026 GMT Subject: CN=D1A1E5D8FCD1A1472F0A25D9573D4DFF17E2CFF7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:63:58:c8:76:1e:e6:1a:b1:20:43:11:c3:ae: 06:31:7a:60:5a:90:17:c4:80:ae:57:25:bd:f9:b9: a4:4c:df:b8:5f:41:1b:69:79:6b:c3:3e:e9:d8:27: a4:65:4d:ca:db:d1:d0:a5:55:26:16:42:57:02:7b: 95:05:7c:ce:a6:85:d7:dd:e0:0a:52:82:f9:cf:91: 6b:ec:d6:67:ba:48:7d:66:2d:bb:30:5f:80:fd:a2: af:72:c4:be:4d:df:9e:b5:9a:4a:23:36:7e:20:c5: dc:82:7a:a7:cb:d5:0c:58:1e:f9:d1:88:91:b5:01: d5:28:08:de:96:47:60:20:a1:3a:9d:3e:e2:fa:da: f2:43:eb:be:78:ac:4e:c8:87:ed:54:5f:8e:5f:82: 56:4a:03:49:c5:97:fa:b2:71:14:fe:6c:1d:72:12: 3b:14:6c:53:99:83:ee:b2:3d:9b:8b:e3:97:3d:04: 53:12:76:82:0a:22:11:4b:77:78:64:38:ee:af:eb: 2a:9b:8a:f6:cd:be:6c:a8:f3:93:c1:ed:f0:d4:41: 74:06:4c:7e:3a:36:3f:62:0b:60:7e:be:4a:ab:be: f7:76:71:cb:a7:06:4a:c1:24:7d:82:1b:9f:e8:fe: 28:5b:9e:07:9f:72:6d:3b:bf:dc:d7:3b:6f:40:3c: 34:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:A1:E5:D8:FC:D1:A1:47:2F:0A:25:D9:57:3D:4D:FF:17:E2:CF:F7 X509v3 Authority Key Identifier: keyid:BD:4A:3E:82:CA:76:DA:F4:19:C4:41:FB:1A:4A:D4:63:C9:8E:B9:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/ZYxqFTkcT8nRDZLFC5CgH17aiLovCK894nWwBajfAHq/0/BD4A3E82CA76DAF419C441FB1A4AD463C98EB9D0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD4A3E82CA76DAF419C441FB1A4AD463C98EB9D0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/ZYxqFTkcT8nRDZLFC5CgH17aiLovCK894nWwBajfAHq/0/BD4A3E82CA76DAF419C441FB1A4AD463C98EB9D0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cc:6b:fb:33:ac:4a:e7:88:f4:9b:f7:ca:97:fb:e9:71:fb:c6: 3f:68:5e:63:3a:88:30:58:22:11:4a:52:4b:a4:43:6f:ec:72: 83:33:0d:38:f2:3e:cf:7a:04:ee:e4:01:2f:8c:de:54:c9:62: b7:d6:cc:e4:bd:58:05:55:ab:15:84:73:d5:3a:50:c2:cd:4f: 5b:39:f9:14:a6:15:8d:a9:ab:19:ae:e5:ed:94:a6:d3:26:00: 6a:9f:5c:0a:41:f3:f1:21:da:dc:d5:4f:b3:12:bd:61:d3:7b: 8a:f8:1e:67:8a:9c:00:bd:4b:ed:88:a6:cb:73:89:54:d5:f8: df:7e:d4:74:d5:38:b0:48:b5:7a:6f:31:36:b6:86:6b:77:84: 53:18:70:d3:38:c8:15:d8:ec:68:b5:ee:95:a4:c8:55:19:7a: 35:a7:d7:76:43:03:11:f2:b8:d6:a6:64:b9:d5:a1:10:7a:b4: 19:e5:e3:18:9b:dc:31:4a:a7:0a:22:cf:01:ea:e2:bc:07:ff: b8:67:d6:37:c9:e2:d6:74:1d:2c:4b:1c:f8:0a:ee:65:95:37: f1:86:57:8c:74:e1:a7:ff:ab:ef:27:bf:4c:6f:07:98:90:41: df:31:5e:bc:e0:b6:0f:06:c8:36:20:3a:2c:49:51:a9:2d:df: d6:19:14:66 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUVlkT9oV06gnLGh3IJpnWEHbNDEgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQ0QTNFODJDQTc2REFGNDE5QzQ0MUZCMUE0QUQ0NjND OThFQjlEMDAeFw0yNjA3MjgxMTA1MjdaFw0yNjA3MjkxNTAxMjdaMDMxMTAvBgNV BAMTKEQxQTFFNUQ4RkNEMUExNDcyRjBBMjVEOTU3M0Q0REZGMTdFMkNGRjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoY1jIdh7mGrEgQxHDrgYxemBa kBfEgK5XJb35uaRM37hfQRtpeWvDPunYJ6RlTcrb0dClVSYWQlcCe5UFfM6mhdfd 4ApSgvnPkWvs1me6SH1mLbswX4D9oq9yxL5N3561mkojNn4gxdyCeqfL1QxYHvnR iJG1AdUoCN6WR2AgoTqdPuL62vJD6754rE7Ih+1UX45fglZKA0nFl/qycRT+bB1y EjsUbFOZg+6yPZuL45c9BFMSdoIKIhFLd3hkOO6v6yqbivbNvmyo85PB7fDUQXQG TH46Nj9iC2B+vkqrvvd2ccunBkrBJH2CG5/o/ihbngefcm07v9zXO29APDRfAgMB AAGjggJWMIICUjAdBgNVHQ4EFgQU0aHl2PzRoUcvCiXZVz1N/xfiz/cwHwYDVR0j BBgwFoAUvUo+gsp22vQZxEH7GkrUY8mOudAwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9aWXhxRlRrY1Q4blJEWkxGQzVDZ0gxN2FpTG92Q0s4OTRuV3dCYWpmQUhx LzAvQkQ0QTNFODJDQTc2REFGNDE5QzQ0MUZCMUE0QUQ0NjNDOThFQjlEMC5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9CRDRBM0U4MkNBNzZEQUY0MTlD NDQxRkIxQTRBRDQ2M0M5OEVCOUQwLmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL1pZ eHFGVGtjVDhuUkRaTEZDNUNnSDE3YWlMb3ZDSzg5NG5Xd0JhamZBSHEvMC9CRDRB M0U4MkNBNzZEQUY0MTlDNDQxRkIxQTRBRDQ2M0M5OEVCOUQwLm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA zGv7M6xK54j0m/fKl/vpcfvGP2heYzqIMFgiEUpSS6RDb+xygzMNOPI+z3oE7uQB L4zeVMlit9bM5L1YBVWrFYRz1TpQws1PWzn5FKYVjamrGa7l7ZSm0yYAap9cCkHz 8SHa3NVPsxK9YdN7ivgeZ4qcAL1L7Yimy3OJVNX4337UdNU4sEi1em8xNraGa3eE Uxhw0zjIFdjsaLXulaTIVRl6NafXdkMDEfK41qZkudWhEHq0GeXjGJvcMUqnCiLP AerivAf/uGfWN8ni1nQdLEsc+AruZZU38YZXjHThp/+r7ye/TG8HmJBB3zFevOC2 DwbINiA6LElRqS3f1hkUZg== -----END CERTIFICATE-----Generated at Tue Jul 28 19:43:16 2026 by rpki-client