$ rpki-client -vvvf rpki-repo.registro.br/repo/2DiJtM32q2SiSHn3hFbM3WWz64vaMAG6TakDUVomiQQV/0/3C68A97B2C4A0454F794DBCB7F71289DB171A7B6.mft File: 3C68A97B2C4A0454F794DBCB7F71289DB171A7B6.mft (raw, json) Hash identifier: BAx49AxmCtxXDYmAIQdp3FDDobo23SPF6cvWupVt4CM= Subject key identifier: 6E:FE:8E:36:D7:81:2E:A5:03:CF:5B:E7:8C:19:11:69:62:76:BB:B6 Authority key identifier: 3C:68:A9:7B:2C:4A:04:54:F7:94:DB:CB:7F:71:28:9D:B1:71:A7:B6 Certificate issuer: /CN=3C68A97B2C4A0454F794DBCB7F71289DB171A7B6 Certificate serial: 66AEDC80E6BBBC782497A3C3009370D4E67201B9 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C68A97B2C4A0454F794DBCB7F71289DB171A7B6.cer Subject info access: rsync://rpki-repo.registro.br/repo/2DiJtM32q2SiSHn3hFbM3WWz64vaMAG6TakDUVomiQQV/0/3C68A97B2C4A0454F794DBCB7F71289DB171A7B6.mft Manifest number: BD Signing time: Mon 02 Nov 2026 14:08:43 +0000 Manifest this update: Mon 02 Nov 2026 14:03:43 +0000 Manifest next update: Tue 03 Nov 2026 16:09:43 +0000 Files and hashes: 1: 3C68A97B2C4A0454F794DBCB7F71289DB171A7B6.crl (hash: ViC/AfjJy0MQGAQQDZHoBgdcsBeko+nDS4dullN4Bbg=) 2: 34352e3138322e37362e302f32322d3234203d3e20323639323334.roa (hash: y6WkApazOcWL7P7yXx57R2acGoFqorCQklwtt2CakBE=) 3: 323830343a363137303a3a2f33322d3334203d3e20323639323334.roa (hash: GDWiVyYfYIGnY9YXPjOtHtg7fsHIeEu+qkoct3a9MEM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2DiJtM32q2SiSHn3hFbM3WWz64vaMAG6TakDUVomiQQV/0/3C68A97B2C4A0454F794DBCB7F71289DB171A7B6.crl rsync://rpki-repo.registro.br/repo/2DiJtM32q2SiSHn3hFbM3WWz64vaMAG6TakDUVomiQQV/0/3C68A97B2C4A0454F794DBCB7F71289DB171A7B6.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C68A97B2C4A0454F794DBCB7F71289DB171A7B6.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 03 Nov 2026 16:09:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:ae:dc:80:e6:bb:bc:78:24:97:a3:c3:00:93:70:d4:e6:72:01:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C68A97B2C4A0454F794DBCB7F71289DB171A7B6 Validity Not Before: Nov 2 14:03:43 2026 GMT Not After : Nov 3 16:09:43 2026 GMT Subject: CN=6EFE8E36D7812EA503CF5BE78C1911696276BBB6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:08:1b:a2:7a:da:8a:ec:a6:ac:60:58:a9:d0: ca:3a:1f:ea:8a:ed:28:71:10:90:c7:40:78:76:69: 6e:5f:1f:82:14:93:91:26:a2:64:33:22:2d:78:d9: 02:11:0d:9a:59:1b:4f:af:e8:2f:69:b6:e5:0f:40: bc:f1:b0:18:90:5b:8a:c1:f1:8c:62:42:e2:2d:c6: 18:9c:9c:db:e5:65:bc:4a:2c:12:ef:b2:ca:78:92: 90:61:40:19:fd:ec:4c:85:0e:dc:8b:db:1b:e4:db: bb:a2:44:43:e0:8f:86:ab:78:fe:6d:92:00:84:b3: 80:67:84:22:cc:60:74:5e:ab:16:0b:2a:24:84:38: 54:4c:6e:47:27:6e:ac:10:94:1a:63:ee:64:4d:fd: 01:cc:64:59:91:f2:32:66:73:a4:6a:84:57:c2:23: 2f:0b:19:bd:ab:33:42:f7:9a:1f:91:9e:89:fe:a4: d7:88:67:42:30:41:00:e6:c0:d5:9a:94:02:32:fa: 99:ad:41:8e:ab:10:14:93:16:6b:16:02:ce:7e:66: 06:76:f4:1a:d1:ab:84:71:b0:6c:e1:66:6b:f5:ce: 79:c6:ae:f1:2a:7d:ea:45:ab:d2:91:b7:c4:83:60: 45:c7:d8:3a:2e:1b:82:07:a0:f9:5d:6e:5c:6b:37: d2:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:FE:8E:36:D7:81:2E:A5:03:CF:5B:E7:8C:19:11:69:62:76:BB:B6 X509v3 Authority Key Identifier: keyid:3C:68:A9:7B:2C:4A:04:54:F7:94:DB:CB:7F:71:28:9D:B1:71:A7:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2DiJtM32q2SiSHn3hFbM3WWz64vaMAG6TakDUVomiQQV/0/3C68A97B2C4A0454F794DBCB7F71289DB171A7B6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C68A97B2C4A0454F794DBCB7F71289DB171A7B6.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2DiJtM32q2SiSHn3hFbM3WWz64vaMAG6TakDUVomiQQV/0/3C68A97B2C4A0454F794DBCB7F71289DB171A7B6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:d0:f1:7b:9e:70:e6:30:32:d0:66:6b:84:2b:8d:51:e1:93: 16:b4:8f:a3:29:13:0c:fe:6d:2d:22:3f:2d:e1:55:78:3c:30: 79:72:32:1b:94:b3:3e:65:ac:f6:a0:d9:15:52:48:2f:f6:8a: d7:68:0e:52:b5:cf:7a:75:7d:85:73:82:6d:68:12:c0:e6:0b: fb:1a:98:23:2b:a7:15:f2:24:70:16:14:23:01:88:ad:3b:ee: ba:ea:d8:31:16:3f:fc:88:67:c9:71:99:e1:8f:cf:2b:6a:ae: d6:7b:9a:5b:3f:ab:91:bf:a7:d0:f3:e4:e4:8e:93:04:65:0c: bd:7c:2e:5e:e5:49:b0:a0:50:62:80:fe:ea:96:3b:cc:48:5c: 06:1c:94:b8:1a:1b:fb:ac:2a:5e:ad:04:f8:e7:93:d5:f6:c5: 1d:5d:81:e5:a2:50:e3:1d:29:36:b1:c2:ef:23:0a:95:d7:a6: c4:67:53:3f:e0:1a:6a:8c:b0:27:58:6c:02:99:fa:61:64:3d: 11:a2:b0:4e:d9:e8:e0:27:ad:49:2a:89:36:28:27:7c:5b:5c: 8c:17:6a:46:ea:ba:f2:4b:29:0d:47:87:08:46:35:32:d4:36: c3:8f:b2:8f:2a:bb:09:d5:d1:da:b3:ed:d9:ba:9b:c5:76:e1: a1:2b:23:7c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUZq7cgOa7vHgkl6PDAJNw1OZyAbkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0M2OEE5N0IyQzRBMDQ1NEY3OTREQkNCN0Y3MTI4OURC MTcxQTdCNjAeFw0yNjExMDIxNDAzNDNaFw0yNjExMDMxNjA5NDNaMDMxMTAvBgNV BAMTKDZFRkU4RTM2RDc4MTJFQTUwM0NGNUJFNzhDMTkxMTY5NjI3NkJCQjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbCBuietqK7KasYFip0Mo6H+qK 7ShxEJDHQHh2aW5fH4IUk5EmomQzIi142QIRDZpZG0+v6C9ptuUPQLzxsBiQW4rB 8YxiQuItxhicnNvlZbxKLBLvssp4kpBhQBn97EyFDtyL2xvk27uiREPgj4areP5t kgCEs4BnhCLMYHReqxYLKiSEOFRMbkcnbqwQlBpj7mRN/QHMZFmR8jJmc6RqhFfC Iy8LGb2rM0L3mh+Rnon+pNeIZ0IwQQDmwNWalAIy+pmtQY6rEBSTFmsWAs5+ZgZ2 9BrRq4RxsGzhZmv1znnGrvEqfepFq9KRt8SDYEXH2DouG4IHoPldblxrN9L1AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUbv6ONteBLqUDz1vnjBkRaWJ2u7YwHwYDVR0j BBgwFoAUPGipeyxKBFT3lNvLf3EonbFxp7YwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMkRpSnRNMzJxMlNpU0huM2hGYk0zV1d6NjR2YU1BRzZUYWtEVVZvbWlR UVYvMC8zQzY4QTk3QjJDNEEwNDU0Rjc5NERCQ0I3RjcxMjg5REIxNzFBN0I2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNDNjhBOTdCMkM0QTA0NTRG Nzk0REJDQjdGNzEyODlEQjE3MUE3QjYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MkRpSnRNMzJxMlNpU0huM2hGYk0zV1d6NjR2YU1BRzZUYWtEVVZvbWlRUVYvMC8z QzY4QTk3QjJDNEEwNDU0Rjc5NERCQ0I3RjcxMjg5REIxNzFBN0I2Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEtDxe55w5jAy0GZrhCuNUeGTFrSPoykTDP5tLSI/LeFVeDwweXIyG5SzPmWs 9qDZFVJIL/aK12gOUrXPenV9hXOCbWgSwOYL+xqYIyunFfIkcBYUIwGIrTvuuurY MRY//IhnyXGZ4Y/PK2qu1nuaWz+rkb+n0PPk5I6TBGUMvXwuXuVJsKBQYoD+6pY7 zEhcBhyUuBob+6wqXq0E+OeT1fbFHV2B5aJQ4x0pNrHC7yMKldemxGdTP+Aaaoyw J1hsApn6YWQ9EaKwTtno4CetSSqJNignfFtcjBdqRuq68kspDUeHCEY1MtQ2w4+y jyq7CdXR2rPt2bqbxXbhoSsjfA== -----END CERTIFICATE-----Generated at Mon Nov 2 20:19:26 2026 by rpki-client