$ rpki-client -vvvf rpki-repo.registro.br/repo/XAuPdiukfVBYvN8ApfpCEKTwNwatELGc3BPYhuAS1NU/0/3E0B8EABE833BAEF9500DCA41B249BFBECF5DA97.mft File: 3E0B8EABE833BAEF9500DCA41B249BFBECF5DA97.mft (raw, json) Hash identifier: +TcPyLsuK7TU471S/IJWpKRqLaTKbo8IS8C61rnMdKw= Subject key identifier: 60:88:53:BC:2A:C0:B2:E1:83:ED:92:0D:E2:26:C0:0E:5E:7B:56:FE Authority key identifier: 3E:0B:8E:AB:E8:33:BA:EF:95:00:DC:A4:1B:24:9B:FB:EC:F5:DA:97 Certificate issuer: /CN=3E0B8EABE833BAEF9500DCA41B249BFBECF5DA97 Certificate serial: 75533CA5DE40934D8FECAD56E40B7BA4405BBDEC Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E0B8EABE833BAEF9500DCA41B249BFBECF5DA97.cer Subject info access: rsync://rpki-repo.registro.br/repo/XAuPdiukfVBYvN8ApfpCEKTwNwatELGc3BPYhuAS1NU/0/3E0B8EABE833BAEF9500DCA41B249BFBECF5DA97.mft Manifest number: 67 Signing time: Tue 27 Oct 2026 11:18:06 +0000 Manifest this update: Tue 27 Oct 2026 11:13:06 +0000 Manifest next update: Wed 28 Oct 2026 15:09:06 +0000 Files and hashes: 1: 323830343a373763633a3a2f34382d3438203d3e20323731323030.roa (hash: ujceckYtiM+rfwMcT0RLMM7ErqJtLBrQDfn5kQb+xE4=) 2: 3E0B8EABE833BAEF9500DCA41B249BFBECF5DA97.crl (hash: eEjK/yXTeZJmf61o3a0avHnjsy9p924jOMMsunjS9WM=) 3: 323830343a373763633a313a3a2f34382d3438203d3e20323731323030.roa (hash: icngFpLv/E1t640YX1D1jWo39mIj8Rlff3UglL/ipSo=) 4: 3230302e37312e38322e302f32342d3234203d3e20323731323030.roa (hash: B9u0ZAWjZeZDqxqfaH4pKUi7mdybudolNPJXOXZtQAo=) 5: 323830343a373763633a3a2f33322d3332203d3e20323731323030.roa (hash: jy6+ZMDEkumdht3Uwyc+QVU4MDrPMMtfJwYGF4t1blU=) 6: 3230302e37312e38332e302f32342d3234203d3e20323731323030.roa (hash: DhLZVHHQ98Na0VxpgnaeNPVQScSruL7QG9OTmUNP1K0=) 7: 3230302e37312e38322e302f32332d3233203d3e20323731323030.roa (hash: f56Q/Fieb9tfMWmyzIbiTvqj9p1hIf3Q6auf3VDNchE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/XAuPdiukfVBYvN8ApfpCEKTwNwatELGc3BPYhuAS1NU/0/3E0B8EABE833BAEF9500DCA41B249BFBECF5DA97.crl rsync://rpki-repo.registro.br/repo/XAuPdiukfVBYvN8ApfpCEKTwNwatELGc3BPYhuAS1NU/0/3E0B8EABE833BAEF9500DCA41B249BFBECF5DA97.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E0B8EABE833BAEF9500DCA41B249BFBECF5DA97.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 28 Oct 2026 15:09:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:53:3c:a5:de:40:93:4d:8f:ec:ad:56:e4:0b:7b:a4:40:5b:bd:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E0B8EABE833BAEF9500DCA41B249BFBECF5DA97 Validity Not Before: Oct 27 11:13:06 2026 GMT Not After : Oct 28 15:09:06 2026 GMT Subject: CN=608853BC2AC0B2E183ED920DE226C00E5E7B56FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:4c:1b:a4:1f:f8:6e:21:02:bd:fc:ad:82:78: 03:b5:98:ab:cc:2e:40:c1:e5:8d:b2:ea:45:3e:a5: af:a2:f7:3a:8d:3a:5d:d6:ac:45:4e:d7:53:8c:42: ef:dc:e1:e7:b4:20:c2:e2:61:4e:87:48:33:64:85: 33:d8:db:6b:92:96:e4:10:01:0e:52:23:60:e1:d7: 7b:79:39:a6:a7:e8:e6:40:14:6f:30:f8:3f:a1:9b: 11:5d:88:bd:48:c9:ec:bf:a7:70:c2:ac:2a:e3:fc: ff:d1:ec:6d:87:2c:06:55:92:df:c3:c5:bd:da:0a: c4:e8:74:2b:cc:55:8e:ec:59:3c:be:23:3a:9e:a6: f0:8f:1d:2f:ab:2e:25:d1:0f:46:d6:f0:ab:c9:51: 45:9a:e4:9e:f0:48:77:93:70:bc:97:26:3a:d2:ae: 7e:54:ba:13:dd:8f:66:fd:e6:f5:db:7f:5c:ff:cd: fb:17:3b:43:83:4a:8a:3e:e0:5b:e4:35:6c:9b:a8: 06:6c:61:41:1f:1d:48:2c:3b:11:1a:db:1a:3a:00: ef:f0:12:c4:1c:7e:67:6e:19:a9:e9:7b:c0:fe:37: d8:3a:fe:45:ef:8d:3b:5d:57:a9:93:6a:8b:e2:4b: c6:7d:de:9a:d7:96:f9:7c:80:c2:40:c4:da:53:2d: 78:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:88:53:BC:2A:C0:B2:E1:83:ED:92:0D:E2:26:C0:0E:5E:7B:56:FE X509v3 Authority Key Identifier: keyid:3E:0B:8E:AB:E8:33:BA:EF:95:00:DC:A4:1B:24:9B:FB:EC:F5:DA:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/XAuPdiukfVBYvN8ApfpCEKTwNwatELGc3BPYhuAS1NU/0/3E0B8EABE833BAEF9500DCA41B249BFBECF5DA97.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E0B8EABE833BAEF9500DCA41B249BFBECF5DA97.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/XAuPdiukfVBYvN8ApfpCEKTwNwatELGc3BPYhuAS1NU/0/3E0B8EABE833BAEF9500DCA41B249BFBECF5DA97.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:7f:2f:e1:38:39:d3:70:51:c0:16:37:5c:11:0f:81:c8:6e: be:e8:c0:6a:a4:c6:41:56:a9:f1:82:30:09:9b:3c:10:6b:3b: 6d:1b:61:a8:73:a6:0d:07:b4:f4:d6:02:d2:ad:56:b6:31:0f: 23:4b:c1:64:a7:97:e0:09:69:4c:85:cd:13:ab:df:31:04:7a: 62:e8:87:1b:ce:1e:8c:08:c2:eb:0e:91:b1:6c:f8:1a:86:66: db:39:80:11:ba:ed:43:d9:a5:65:15:2c:7f:ff:95:89:5b:c3: 7b:bf:5d:cd:e0:a4:d3:50:89:b9:1c:ff:24:8e:dd:51:87:66: d2:4c:82:97:41:63:cc:a7:e1:3f:e0:2a:17:49:a4:22:e3:c4: 2d:10:94:ba:70:8d:1b:2d:47:15:b7:5d:f8:b7:42:f0:07:10: ed:51:cd:5f:a5:7f:fb:71:4a:91:e8:31:28:6d:e3:e9:7d:6b: b1:87:6b:d3:3e:16:a7:68:38:8e:dd:71:2c:9f:23:74:15:d8: bf:86:38:90:a2:e3:c2:b5:a1:14:55:50:38:f7:8c:77:50:71: 0e:2b:47:cf:f9:13:47:ab:2b:d4:d1:37:83:14:77:85:c8:1d: 56:a6:83:02:4b:b2:87:90:03:d5:8d:2d:7b:db:10:55:0f:be: b7:5d:c2:fd -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUdVM8pd5Ak02P7K1W5At7pEBbvewwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0UwQjhFQUJFODMzQkFFRjk1MDBEQ0E0MUIyNDlCRkJF Q0Y1REE5NzAeFw0yNjEwMjcxMTEzMDZaFw0yNjEwMjgxNTA5MDZaMDMxMTAvBgNV BAMTKDYwODg1M0JDMkFDMEIyRTE4M0VEOTIwREUyMjZDMDBFNUU3QjU2RkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUTBukH/huIQK9/K2CeAO1mKvM LkDB5Y2y6kU+pa+i9zqNOl3WrEVO11OMQu/c4ee0IMLiYU6HSDNkhTPY22uSluQQ AQ5SI2Dh13t5Oaan6OZAFG8w+D+hmxFdiL1Iyey/p3DCrCrj/P/R7G2HLAZVkt/D xb3aCsTodCvMVY7sWTy+IzqepvCPHS+rLiXRD0bW8KvJUUWa5J7wSHeTcLyXJjrS rn5UuhPdj2b95vXbf1z/zfsXO0ODSoo+4FvkNWybqAZsYUEfHUgsOxEa2xo6AO/w EsQcfmduGanpe8D+N9g6/kXvjTtdV6mTaoviS8Z93prXlvl8gMJAxNpTLXifAgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUYIhTvCrAsuGD7ZIN4ibADl57Vv4wHwYDVR0j BBgwFoAUPguOq+gzuu+VANykGySb++z12pcwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9YQXVQZGl1a2ZWQll2TjhBcGZwQ0VLVHdOd2F0RUxHYzNCUFlodUFTMU5V LzAvM0UwQjhFQUJFODMzQkFFRjk1MDBEQ0E0MUIyNDlCRkJFQ0Y1REE5Ny5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8zRTBCOEVBQkU4MzNCQUVGOTUw MERDQTQxQjI0OUJGQkVDRjVEQTk3LmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL1hB dVBkaXVrZlZCWXZOOEFwZnBDRUtUd053YXRFTEdjM0JQWWh1QVMxTlUvMC8zRTBC OEVBQkU4MzNCQUVGOTUwMERDQTQxQjI0OUJGQkVDRjVEQTk3Lm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA J38v4Tg503BRwBY3XBEPgchuvujAaqTGQVap8YIwCZs8EGs7bRthqHOmDQe09NYC 0q1WtjEPI0vBZKeX4AlpTIXNE6vfMQR6YuiHG84ejAjC6w6RsWz4GoZm2zmAEbrt Q9mlZRUsf/+ViVvDe79dzeCk01CJuRz/JI7dUYdm0kyCl0FjzKfhP+AqF0mkIuPE LRCUunCNGy1HFbdd+LdC8AcQ7VHNX6V/+3FKkegxKG3j6X1rsYdr0z4Wp2g4jt1x LJ8jdBXYv4Y4kKLjwrWhFFVQOPeMd1BxDitHz/kTR6sr1NE3gxR3hcgdVqaDAkuy h5AD1Y0te9sQVQ++t13C/Q== -----END CERTIFICATE-----Generated at Tue Oct 27 23:32:56 2026 by rpki-client