$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/62b3479e-d188-4fbf-a2b8-0558d7e495cd/nA747Uq1S7sGJBCcsAHC4_YV5QM.mft File: nA747Uq1S7sGJBCcsAHC4_YV5QM.mft (raw, json) Hash identifier: XEx1mA7bgFh1wwjuaM28yg7dOW95v0/KxE/V7mWa158= Subject key identifier: 6D:3E:AA:E4:7A:12:4A:97:A6:DD:D5:0D:EA:47:D5:15:70:18:E8:0B Authority key identifier: 58:4B:FB:8A:D2:60:37:15:03:B6:CD:8B:0E:F5:AE:A7:9C:9C:BB:15 Certificate issuer: /CN=584BFB8AD260371503B6CD8B0EF5AEA79C9CBB15 Certificate serial: 5B73F678FA41E063F3C6C77069F356AB98CE49AA Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/584BFB8AD260371503B6CD8B0EF5AEA79C9CBB15.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/62b3479e-d188-4fbf-a2b8-0558d7e495cd/nA747Uq1S7sGJBCcsAHC4_YV5QM.mft Manifest number: 24 Signing time: Wed 04 Nov 2026 18:36:26 +0000 Manifest this update: Wed 04 Nov 2026 18:36:26 +0000 Manifest next update: Sun 08 Nov 2026 18:36:26 +0000 Files and hashes: 1: b2b5c9d7-3953-4321-b384-57adf5534c6f.roa (hash: 3RVvcsuwaTnZ89zYH8W/OpNIfaLKYrWMbkS6qE9+g1Q=) 2: f5ae5cb2-5c9a-4f86-87ed-8e26b9978ab5.roa (hash: imMIXnv7iUJyEXYmebcBSMI5HpMhZXaSQX93MqdAaZs=) 3: nA747Uq1S7sGJBCcsAHC4_YV5QM.crl (hash: 4/DJA6Ef3hRMKi5Pi4qrjK+zvmvlnKKX6Tpm4KVOaLc=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/62b3479e-d188-4fbf-a2b8-0558d7e495cd/nA747Uq1S7sGJBCcsAHC4_YV5QM.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/62b3479e-d188-4fbf-a2b8-0558d7e495cd/nA747Uq1S7sGJBCcsAHC4_YV5QM.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/584BFB8AD260371503B6CD8B0EF5AEA79C9CBB15.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 06 Nov 2026 03:21:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:73:f6:78:fa:41:e0:63:f3:c6:c7:70:69:f3:56:ab:98:ce:49:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=584BFB8AD260371503B6CD8B0EF5AEA79C9CBB15 Validity Not Before: Nov 4 18:36:26 2026 GMT Not After : Nov 8 18:36:26 2026 GMT Subject: serialNumber=66548a30415b843869dc213f9fbdcd7a84410e4fce43779e1986bcd136a14b60, CN=cdb9583c-a9d1-49af-98d4-96e3eb7e1cc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:0f:68:ae:82:69:a3:10:3d:a6:08:1a:c5:dd: a1:2a:e5:81:64:7c:65:7e:e9:fe:d6:8b:2c:33:94: 34:91:45:0d:40:8e:70:30:05:2e:6d:5d:f8:1e:fe: e9:b1:e4:5f:6e:8d:42:0a:61:d2:7d:07:39:68:86: 6f:d5:e7:74:59:0b:34:b3:a3:7a:70:90:d1:ed:d2: 47:79:63:5b:40:46:13:50:bc:50:7e:14:b2:f5:aa: 44:1f:e0:9a:51:f1:8c:c1:05:12:74:f8:de:87:ef: ca:35:d1:96:98:88:cb:65:e0:aa:b4:23:de:17:4b: ab:c2:da:41:13:ec:14:9f:a5:ad:f5:b5:3a:0a:08: 77:3c:82:18:c2:39:cb:09:53:5c:52:c1:04:0c:c4: 1c:87:b3:30:63:1a:23:35:0e:16:dc:95:a0:a8:c6: a1:7c:f6:08:4e:5b:bb:b0:82:cc:d7:ac:7d:45:e4: 84:6f:09:87:89:64:84:ef:99:aa:fc:b8:40:77:b9: b8:85:e8:71:1c:b9:fe:15:49:4b:75:a9:c8:01:49: 5a:2b:dd:e5:73:af:2e:71:2f:76:4b:7d:55:79:9c: 77:49:eb:b7:7c:17:b8:4e:2b:d9:7c:f1:7c:20:ef: a2:a2:42:6f:30:9c:a1:02:bf:2f:6b:88:d4:75:72: 82:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:3E:AA:E4:7A:12:4A:97:A6:DD:D5:0D:EA:47:D5:15:70:18:E8:0B X509v3 Authority Key Identifier: keyid:58:4B:FB:8A:D2:60:37:15:03:B6:CD:8B:0E:F5:AE:A7:9C:9C:BB:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/584BFB8AD260371503B6CD8B0EF5AEA79C9CBB15.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/62b3479e-d188-4fbf-a2b8-0558d7e495cd/nA747Uq1S7sGJBCcsAHC4_YV5QM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/62b3479e-d188-4fbf-a2b8-0558d7e495cd/nA747Uq1S7sGJBCcsAHC4_YV5QM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:36:fe:d7:5b:b4:0f:c0:40:48:6f:12:79:e0:0c:0a:12:9b: 59:4c:fe:10:c1:a3:98:a5:ad:cd:da:74:a4:89:30:ef:64:8f: c1:3c:22:46:52:c2:32:66:a3:e5:54:be:7a:83:eb:6d:a9:56: 0e:24:ed:a2:ef:28:4c:e4:f7:bc:ae:fa:78:bc:a7:9e:80:99: 28:3b:6d:f3:3b:e9:bb:33:49:97:a2:f1:9e:92:93:cc:bd:9b: 6a:8e:8d:7e:77:e0:a0:fd:72:92:57:2a:23:fe:62:09:c5:c2: d0:eb:fd:b2:13:89:0b:78:64:2b:07:0f:48:15:fb:07:52:5b: 45:6a:46:ea:1c:f4:22:4e:7e:b0:1d:df:fb:29:66:db:03:06: 4d:cf:dd:e4:db:88:37:cb:71:07:34:dd:0f:b8:d8:93:d3:8c: 6b:36:46:71:6c:ab:d3:46:71:4f:16:67:09:a8:31:16:35:a8: 4a:48:75:2a:a1:28:d6:fa:78:8d:87:c1:30:91:6c:8d:ea:c1: 40:56:e4:c8:b6:5e:5b:86:34:8c:fb:df:bf:5f:10:2e:89:00: 7f:ff:2f:78:e8:65:05:87:44:de:86:32:0f:7c:4f:dc:1a:51: 3d:26:c4:0d:95:cd:ea:3f:1c:2c:8b:62:45:76:72:97:98:0d: 79:79:d8:28 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgIUW3P2ePpB4GPzxsdwafNWq5jOSaowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTg0QkZCOEFEMjYwMzcxNTAzQjZDRDhCMEVGNUFFQTc5 QzlDQkIxNTAeFw0yNjExMDQxODM2MjZaFw0yNjExMDgxODM2MjZaMHoxSTBHBgNV BAUTQDY2NTQ4YTMwNDE1Yjg0Mzg2OWRjMjEzZjlmYmRjZDdhODQ0MTBlNGZjZTQz Nzc5ZTE5ODZiY2QxMzZhMTRiNjAxLTArBgNVBAMTJGNkYjk1ODNjLWE5ZDEtNDlh Zi05OGQ0LTk2ZTNlYjdlMWNjMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKwPaK6CaaMQPaYIGsXdoSrlgWR8ZX7p/taLLDOUNJFFDUCOcDAFLm1d+B7+ 6bHkX26NQgph0n0HOWiGb9XndFkLNLOjenCQ0e3SR3ljW0BGE1C8UH4UsvWqRB/g mlHxjMEFEnT43ofvyjXRlpiIy2XgqrQj3hdLq8LaQRPsFJ+lrfW1OgoIdzyCGMI5 ywlTXFLBBAzEHIezMGMaIzUOFtyVoKjGoXz2CE5bu7CCzNesfUXkhG8Jh4lkhO+Z qvy4QHe5uIXocRy5/hVJS3WpyAFJWivd5XOvLnEvdkt9VXmcd0nrt3wXuE4r2Xzx fCDvoqJCbzCcoQK/L2uI1HVyggUCAwEAAaOCAkUwggJBMB0GA1UdDgQWBBRtPqrk ehJKl6bd1Q3qR9UVcBjoCzAfBgNVHSMEGDAWgBRYS/uK0mA3FQO2zYsO9a6nnJy7 FTAOBgNVHQ8BAf8EBAMCB4AweAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxy c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS81 ODRCRkI4QUQyNjAzNzE1MDNCNkNEOEIwRUY1QUVBNzlDOUNCQjE1LmNlcjCBlQYI KwYBBQUHAQsEgYgwgYUwgYIGCCsGAQUFBzALhnZyc3luYzovL3Jwa2ktcnN5bmMu dXMtZWFzdC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzYyYjM0NzllLWQxODgtNGZi Zi1hMmI4LTA1NThkN2U0OTVjZC9uQTc0N1VxMVM3c0dKQkNjc0FIQzRfWVY1UU0u bWZ0MIGIBgNVHR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVh c3QtMi5hbWF6b25hd3MuY29tL3ZvbHVtZS82MmIzNDc5ZS1kMTg4LTRmYmYtYTJi OC0wNTU4ZDdlNDk1Y2QvbkE3NDdVcTFTN3NHSkJDY3NBSEM0X1lWNVFNLmNybDAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIA AQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsF AAOCAQEAaDb+11u0D8BASG8SeeAMChKbWUz+EMGjmKWtzdp0pIkw72SPwTwiRlLC Mmaj5VS+eoPrbalWDiTtou8oTOT3vK76eLynnoCZKDtt8zvpuzNJl6LxnpKTzL2b ao6NfnfgoP1yklcqI/5iCcXC0Ov9shOJC3hkKwcPSBX7B1JbRWpG6hz0Ik5+sB3f +ylm2wMGTc/d5NuIN8txBzTdD7jYk9OMazZGcWyr00ZxTxZnCagxFjWoSkh1KqEo 1vp4jYfBMJFsjerBQFbkyLZeW4Y0jPvfv18QLokAf/8veOhlBYdE3oYyD3xP3BpR PSbEDZXN6j8cLItiRXZyl5gNeXnYKA== -----END CERTIFICATE-----Generated at Thu Nov 5 04:21:34 2026 by rpki-client