$ rpki-client -vvvf rpki-repo.registro.br/repo/2Bm8TTRLLH25rfW8wmNLaZ4gaiGaPvPP6pBZFwY3dKr4/0/998CB9C05876E4AB1B563A405ABAC799C99CBD48.mft File: 998CB9C05876E4AB1B563A405ABAC799C99CBD48.mft (raw, json) Hash identifier: OIrJY3she2Y+61JbPSiVnGdRpkYR/3MmHF24uQTYE5k= Subject key identifier: 94:E8:08:53:37:1F:1B:91:D2:2F:8E:D1:4D:30:E6:07:E7:27:DC:52 Authority key identifier: 99:8C:B9:C0:58:76:E4:AB:1B:56:3A:40:5A:BA:C7:99:C9:9C:BD:48 Certificate issuer: /CN=998CB9C05876E4AB1B563A405ABAC799C99CBD48 Certificate serial: 5A61F2DF1876DCFA113C7D1D9ACE378E73E99691 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/998CB9C05876E4AB1B563A405ABAC799C99CBD48.cer Subject info access: rsync://rpki-repo.registro.br/repo/2Bm8TTRLLH25rfW8wmNLaZ4gaiGaPvPP6pBZFwY3dKr4/0/998CB9C05876E4AB1B563A405ABAC799C99CBD48.mft Manifest number: 2F Signing time: Sat 10 Oct 2026 19:03:22 +0000 Manifest this update: Sat 10 Oct 2026 18:58:22 +0000 Manifest next update: Sun 11 Oct 2026 22:38:22 +0000 Files and hashes: 1: 998CB9C05876E4AB1B563A405ABAC799C99CBD48.crl (hash: DdPxgLOvVCxxg2KohrVtgL5ImuWihqKws94uwDxErgM=) 2: 34352e342e3134342e302f32322d3332203d3e20323636303439.roa (hash: 91+SoAjbl3HXMZUiRz05iupGzbnGJbxfGkje75maFmU=) 3: 323830343a333963343a3a2f33322d313238203d3e20323636303439.roa (hash: bZ55Jnl3ZA1rxkSNTYCeZ2GogCgElj5ai+M7XMMkdsw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2Bm8TTRLLH25rfW8wmNLaZ4gaiGaPvPP6pBZFwY3dKr4/0/998CB9C05876E4AB1B563A405ABAC799C99CBD48.crl rsync://rpki-repo.registro.br/repo/2Bm8TTRLLH25rfW8wmNLaZ4gaiGaPvPP6pBZFwY3dKr4/0/998CB9C05876E4AB1B563A405ABAC799C99CBD48.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/998CB9C05876E4AB1B563A405ABAC799C99CBD48.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 11 Oct 2026 22:38:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:61:f2:df:18:76:dc:fa:11:3c:7d:1d:9a:ce:37:8e:73:e9:96:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=998CB9C05876E4AB1B563A405ABAC799C99CBD48 Validity Not Before: Oct 10 18:58:22 2026 GMT Not After : Oct 11 22:38:22 2026 GMT Subject: CN=94E80853371F1B91D22F8ED14D30E607E727DC52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:ab:14:55:64:0c:74:6a:a7:88:cf:cd:ba:3d: 92:a8:f0:5c:92:0d:d1:7a:97:65:2a:26:f5:19:c8: d8:7b:8f:0d:53:e5:39:45:6b:61:f4:14:0c:c5:75: d1:fa:49:fe:1d:ab:f4:4d:77:8c:16:81:c4:41:b2: 06:28:a8:c6:eb:4c:43:05:3c:87:cc:ea:09:c7:e0: d3:61:4e:65:9e:65:02:8c:a5:92:6b:aa:74:21:72: 98:be:3e:57:d2:36:2d:38:da:fe:f2:1c:80:6f:7b: 99:5e:24:ba:9e:ea:b6:2c:84:dd:ab:c7:f7:34:3a: 9b:6b:0d:a4:a7:93:2b:8d:e0:1c:8a:1c:b7:bb:7c: dd:54:b5:0b:4d:04:5d:d2:0d:80:9f:2b:a5:a1:4f: c8:30:2d:7f:24:57:c9:4c:5f:47:b1:ee:29:a8:60: ee:57:3e:3c:97:9b:32:dc:c3:c9:f8:50:41:7a:2b: c9:ba:d1:f7:e9:8a:03:3a:80:ea:f5:cd:a6:52:a3: b0:f4:8b:cb:b9:9f:67:99:ed:04:d7:94:4f:d2:4a: 77:4d:d9:66:c5:1f:ed:a4:64:d5:60:9c:70:46:18: 11:de:b4:d1:33:b3:a0:dd:1c:c9:12:1e:6a:53:73: 4a:8c:0b:90:a2:88:c3:c3:08:c7:4a:40:a0:8b:0c: 5a:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:E8:08:53:37:1F:1B:91:D2:2F:8E:D1:4D:30:E6:07:E7:27:DC:52 X509v3 Authority Key Identifier: keyid:99:8C:B9:C0:58:76:E4:AB:1B:56:3A:40:5A:BA:C7:99:C9:9C:BD:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2Bm8TTRLLH25rfW8wmNLaZ4gaiGaPvPP6pBZFwY3dKr4/0/998CB9C05876E4AB1B563A405ABAC799C99CBD48.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/998CB9C05876E4AB1B563A405ABAC799C99CBD48.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2Bm8TTRLLH25rfW8wmNLaZ4gaiGaPvPP6pBZFwY3dKr4/0/998CB9C05876E4AB1B563A405ABAC799C99CBD48.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:80:3a:95:55:3a:90:b1:78:b3:f1:c1:c8:05:83:4f:d5:ee: 44:d2:a6:42:51:d1:bd:c9:ee:e5:6e:d0:44:e4:62:7c:2a:a5: 77:38:ee:24:a4:78:1b:2c:a0:d3:f2:63:4e:23:3b:db:8b:7e: 71:11:7a:db:e0:8e:8d:c3:b8:60:6b:c3:97:11:3d:4c:4c:b0: a2:d9:3d:b6:ac:0c:fa:df:4b:1a:55:e6:27:91:f6:10:e4:0c: 47:16:3b:e9:b3:10:22:d3:b7:8d:79:76:6d:ce:c1:61:75:51: c2:23:de:28:7e:19:b6:ca:29:20:52:52:1b:6f:58:7a:6a:35: ab:84:e4:00:ab:c3:da:88:ef:05:2c:09:68:cd:68:be:49:ef: 24:e7:63:a2:ac:a5:fc:87:42:b7:50:40:3a:a7:dc:20:09:bf: ac:36:44:38:82:0b:51:04:e8:b6:72:1c:25:3c:de:52:e6:a4: ec:c9:43:d0:d9:f5:69:13:f8:10:88:30:95:b2:ff:72:46:82: c7:79:86:5f:17:f8:a8:ff:3b:83:f4:48:13:e4:08:4b:45:c1: eb:08:9e:b5:5f:9a:cf:8f:d5:84:65:57:e4:33:d1:28:cc:0a: bc:29:dc:af:99:9b:6a:6e:73:d2:ca:9d:7b:60:2d:d9:35:81: 29:24:38:23 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUWmHy3xh23PoRPH0dms43jnPplpEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTk4Q0I5QzA1ODc2RTRBQjFCNTYzQTQwNUFCQUM3OTlD OTlDQkQ0ODAeFw0yNjEwMTAxODU4MjJaFw0yNjEwMTEyMjM4MjJaMDMxMTAvBgNV BAMTKDk0RTgwODUzMzcxRjFCOTFEMjJGOEVEMTREMzBFNjA3RTcyN0RDNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeqxRVZAx0aqeIz826PZKo8FyS DdF6l2UqJvUZyNh7jw1T5TlFa2H0FAzFddH6Sf4dq/RNd4wWgcRBsgYoqMbrTEMF PIfM6gnH4NNhTmWeZQKMpZJrqnQhcpi+PlfSNi042v7yHIBve5leJLqe6rYshN2r x/c0OptrDaSnkyuN4ByKHLe7fN1UtQtNBF3SDYCfK6WhT8gwLX8kV8lMX0ex7imo YO5XPjyXmzLcw8n4UEF6K8m60ffpigM6gOr1zaZSo7D0i8u5n2eZ7QTXlE/SSndN 2WbFH+2kZNVgnHBGGBHetNEzs6DdHMkSHmpTc0qMC5CiiMPDCMdKQKCLDFrdAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUlOgIUzcfG5HSL47RTTDmB+cn3FIwHwYDVR0j BBgwFoAUmYy5wFh25KsbVjpAWrrHmcmcvUgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMkJtOFRUUkxMSDI1cmZXOHdtTkxhWjRnYWlHYVB2UFA2cEJaRndZM2RL cjQvMC85OThDQjlDMDU4NzZFNEFCMUI1NjNBNDA1QUJBQzc5OUM5OUNCRDQ4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk5OENCOUMwNTg3NkU0QUIx QjU2M0E0MDVBQkFDNzk5Qzk5Q0JENDguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MkJtOFRUUkxMSDI1cmZXOHdtTkxhWjRnYWlHYVB2UFA2cEJaRndZM2RLcjQvMC85 OThDQjlDMDU4NzZFNEFCMUI1NjNBNDA1QUJBQzc5OUM5OUNCRDQ4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAroA6lVU6kLF4s/HByAWDT9XuRNKmQlHRvcnu5W7QRORifCqldzjuJKR4Gyyg 0/JjTiM724t+cRF62+COjcO4YGvDlxE9TEywotk9tqwM+t9LGlXmJ5H2EOQMRxY7 6bMQItO3jXl2bc7BYXVRwiPeKH4ZtsopIFJSG29Yemo1q4TkAKvD2ojvBSwJaM1o vknvJOdjoqyl/IdCt1BAOqfcIAm/rDZEOIILUQTotnIcJTzeUuak7MlD0Nn1aRP4 EIgwlbL/ckaCx3mGXxf4qP87g/RIE+QIS0XB6wietV+az4/VhGVX5DPRKMwKvCnc r5mbam5z0sqde2At2TWBKSQ4Iw== -----END CERTIFICATE-----Generated at Sun Oct 11 08:40:28 2026 by rpki-client