$ rpki-client -vvvf rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/0/D66BB8CE65AD4BF384941D4C6B525858D1272FE2.mft File: D66BB8CE65AD4BF384941D4C6B525858D1272FE2.mft (raw, json) Hash identifier: lc4PS4Lt0JabnAUF0jVomigIfIpNgzNSlmYPQJS8gy4= Subject key identifier: 74:0B:C8:4A:8F:B3:EC:41:76:8D:FA:18:E4:0D:5E:95:99:38:EB:76 Authority key identifier: D6:6B:B8:CE:65:AD:4B:F3:84:94:1D:4C:6B:52:58:58:D1:27:2F:E2 Certificate issuer: /CN=D66BB8CE65AD4BF384941D4C6B525858D1272FE2 Certificate serial: 4AA976A1C53DC6CBFEA0F1FA5D640179D567B38A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D66BB8CE65AD4BF384941D4C6B525858D1272FE2.cer Subject info access: rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/0/D66BB8CE65AD4BF384941D4C6B525858D1272FE2.mft Manifest number: 7F Signing time: Thu 29 Oct 2026 10:40:10 +0000 Manifest this update: Thu 29 Oct 2026 10:35:10 +0000 Manifest next update: Fri 30 Oct 2026 11:51:10 +0000 Files and hashes: 1: D66BB8CE65AD4BF384941D4C6B525858D1272FE2.crl (hash: 0eZ3cGAhXZSqTzd7GzcZg/8Ki45iI7SXYcyc5+buu9c=) 2: 34352e3233322e3231322e302f32322d3234203d3e203631363134.roa (hash: ceMoQRZPDcXDPodBBze2MMW8XyE0sAOnFLURfQk3+So=) 3: 3136382e3232372e3230382e302f32322d3234203d3e203631363134.roa (hash: y2YnGIAHhKYB4H1A2rpS7hGYzgKTdoPCtYTXg81+ImI=) 4: 323830343a346166633a3a2f33322d3438203d3e203631363134.roa (hash: Wr33nJVtlp/bOx5kpyjwz1oYBTkcrmJhGJBHcpNj/BI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/0/D66BB8CE65AD4BF384941D4C6B525858D1272FE2.crl rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/0/D66BB8CE65AD4BF384941D4C6B525858D1272FE2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D66BB8CE65AD4BF384941D4C6B525858D1272FE2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 30 Oct 2026 11:51:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:a9:76:a1:c5:3d:c6:cb:fe:a0:f1:fa:5d:64:01:79:d5:67:b3:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D66BB8CE65AD4BF384941D4C6B525858D1272FE2 Validity Not Before: Oct 29 10:35:10 2026 GMT Not After : Oct 30 11:51:10 2026 GMT Subject: CN=740BC84A8FB3EC41768DFA18E40D5E959938EB76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:98:61:1d:32:8d:54:07:fd:ec:a3:59:5c:b9: 4c:f2:d7:29:b4:c8:9f:1f:01:f1:1c:58:85:3f:7f: 71:ac:58:8b:57:23:77:d9:7c:34:40:8b:99:6f:38: e1:2b:88:92:77:87:80:c3:d0:5e:32:fd:4e:f1:d3: c9:fb:65:25:67:66:12:46:8e:e6:9b:2b:81:0c:c7: 24:66:63:aa:58:5b:b7:38:fc:56:57:a9:d2:6d:1a: 99:cd:1c:c1:cf:0b:b8:70:94:5e:26:1d:66:d2:5b: cf:e4:e9:97:36:0d:3a:ab:1d:23:b9:6e:11:52:37: 77:85:ea:19:49:9d:b1:66:f3:62:06:2a:5f:a3:0e: f5:00:70:76:c1:c2:5f:ae:ca:e2:30:46:d0:db:af: ae:90:00:8b:2d:1b:75:81:a5:36:b2:29:f7:52:a6: b3:52:03:0c:da:77:64:4a:db:4d:93:61:f1:7a:6d: 1e:f3:32:db:41:dd:96:68:07:18:66:e6:9a:4c:26: db:2d:47:ef:7f:d9:24:51:77:02:00:cd:68:de:45: ca:b0:82:aa:48:6c:47:48:b5:1b:63:b1:8e:57:ce: 50:06:67:6d:10:95:bd:cc:e8:a1:8c:7c:33:29:2c: de:18:c3:2c:48:3c:1f:8f:5f:36:6b:c3:33:24:df: 16:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:0B:C8:4A:8F:B3:EC:41:76:8D:FA:18:E4:0D:5E:95:99:38:EB:76 X509v3 Authority Key Identifier: keyid:D6:6B:B8:CE:65:AD:4B:F3:84:94:1D:4C:6B:52:58:58:D1:27:2F:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/0/D66BB8CE65AD4BF384941D4C6B525858D1272FE2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D66BB8CE65AD4BF384941D4C6B525858D1272FE2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/0/D66BB8CE65AD4BF384941D4C6B525858D1272FE2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:0d:71:f6:a2:bc:df:79:0d:f9:0a:1a:90:cf:fe:cb:2e:b5: 1a:0d:ae:c2:06:7a:3a:a2:bd:74:ac:37:2c:06:ee:f2:bf:e9: 22:19:d2:73:ee:9b:65:5d:ab:ca:bc:1b:bf:84:87:83:d3:ab: ca:49:52:1f:f1:80:3d:00:bb:c6:6b:27:32:4f:29:01:6f:5c: 79:e2:24:fc:9f:9f:61:ad:fe:a8:26:7e:16:11:eb:0f:64:9e: f7:e7:4b:63:e9:f3:f7:5c:f1:0e:6a:11:bc:0f:42:27:d4:cb: 1a:3f:f5:60:de:c2:ff:2c:65:47:bd:35:67:64:39:e1:42:e6: 6e:b1:be:46:3e:37:65:1f:72:4b:75:28:30:69:78:b2:6f:7f: 23:81:fd:ee:32:b1:9c:70:57:f5:36:2f:2e:5b:25:8f:42:11: b5:8d:ac:ea:54:41:1c:ce:79:0d:4a:60:99:54:22:06:37:3a: b6:d6:09:5a:53:51:ee:54:56:ea:22:d9:17:7a:96:1c:82:99: 24:6b:64:bd:b0:24:11:c5:94:db:7b:4f:1e:1f:1b:c2:fc:50: 48:d5:2c:8c:59:a5:e6:5d:01:53:de:07:5b:a7:a5:b3:30:75: e0:45:0d:80:b8:db:85:91:e8:4e:b7:1b:58:ba:e2:66:50:02: 26:4c:58:dc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUSql2ocU9xsv+oPH6XWQBedVns4owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDY2QkI4Q0U2NUFENEJGMzg0OTQxRDRDNkI1MjU4NThE MTI3MkZFMjAeFw0yNjEwMjkxMDM1MTBaFw0yNjEwMzAxMTUxMTBaMDMxMTAvBgNV BAMTKDc0MEJDODRBOEZCM0VDNDE3NjhERkExOEU0MEQ1RTk1OTkzOEVCNzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQmGEdMo1UB/3so1lcuUzy1ym0 yJ8fAfEcWIU/f3GsWItXI3fZfDRAi5lvOOEriJJ3h4DD0F4y/U7x08n7ZSVnZhJG juabK4EMxyRmY6pYW7c4/FZXqdJtGpnNHMHPC7hwlF4mHWbSW8/k6Zc2DTqrHSO5 bhFSN3eF6hlJnbFm82IGKl+jDvUAcHbBwl+uyuIwRtDbr66QAIstG3WBpTayKfdS prNSAwzad2RK202TYfF6bR7zMttB3ZZoBxhm5ppMJtstR+9/2SRRdwIAzWjeRcqw gqpIbEdItRtjsY5XzlAGZ20Qlb3M6KGMfDMpLN4YwyxIPB+PXzZrwzMk3xY1AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUdAvISo+z7EF2jfoY5A1elZk463YwHwYDVR0j BBgwFoAU1mu4zmWtS/OElB1Ma1JYWNEnL+IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMm5oOWFkMmM2dlNqYVA1alR3VEhRekNFdkt2b1djeDFKejNpa0hTU2dh eUYvMC9ENjZCQjhDRTY1QUQ0QkYzODQ5NDFENEM2QjUyNTg1OEQxMjcyRkUyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q2NkJCOENFNjVBRDRCRjM4 NDk0MUQ0QzZCNTI1ODU4RDEyNzJGRTIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Mm5oOWFkMmM2dlNqYVA1alR3VEhRekNFdkt2b1djeDFKejNpa0hTU2dheUYvMC9E NjZCQjhDRTY1QUQ0QkYzODQ5NDFENEM2QjUyNTg1OEQxMjcyRkUyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEARg1x9qK833kN+QoakM/+yy61Gg2uwgZ6OqK9dKw3LAbu8r/pIhnSc+6bZV2r yrwbv4SHg9OryklSH/GAPQC7xmsnMk8pAW9ceeIk/J+fYa3+qCZ+FhHrD2Se9+dL Y+nz91zxDmoRvA9CJ9TLGj/1YN7C/yxlR701Z2Q54ULmbrG+Rj43ZR9yS3UoMGl4 sm9/I4H97jKxnHBX9TYvLlslj0IRtY2s6lRBHM55DUpgmVQiBjc6ttYJWlNR7lRW 6iLZF3qWHIKZJGtkvbAkEcWU23tPHh8bwvxQSNUsjFml5l0BU94HW6elszB14EUN gLjbhZHoTrcbWLriZlACJkxY3A== -----END CERTIFICATE-----Generated at Thu Oct 29 22:45:47 2026 by rpki-client