$ rpki-client -vvvf rpki-repo.registro.br/repo/2zVR29nhkFArjm3boG6xrJCVPQ36b5DaeVsyn44SZtAB/0/8F327FEFA4E8788FFCFDCD7C6D190640F8A62810.mft File: 8F327FEFA4E8788FFCFDCD7C6D190640F8A62810.mft (raw, json) Hash identifier: RWXcHO1zgAro5p2WNr0ncx3e9/tR6szqRngHVk7udYo= Subject key identifier: E9:7F:EA:9D:67:00:A5:67:34:B6:4F:FC:29:39:D9:50:C7:56:DC:45 Authority key identifier: 8F:32:7F:EF:A4:E8:78:8F:FC:FD:CD:7C:6D:19:06:40:F8:A6:28:10 Certificate issuer: /CN=8F327FEFA4E8788FFCFDCD7C6D190640F8A62810 Certificate serial: 79E890016DC689BA50FE2A24B7AFBD79142886E1 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F327FEFA4E8788FFCFDCD7C6D190640F8A62810.cer Subject info access: rsync://rpki-repo.registro.br/repo/2zVR29nhkFArjm3boG6xrJCVPQ36b5DaeVsyn44SZtAB/0/8F327FEFA4E8788FFCFDCD7C6D190640F8A62810.mft Manifest number: 0462 Signing time: Mon 02 Nov 2026 08:17:12 +0000 Manifest this update: Mon 02 Nov 2026 08:12:12 +0000 Manifest next update: Tue 03 Nov 2026 11:52:12 +0000 Files and hashes: 1: 323830343a313735633a3a2f33322d313238203d3e20323633313430.roa (hash: icxhP4I1kVpX57+tNmy6y1+JUD2KASJyOMbtS/fJCI8=) 2: 3139312e362e3134302e302f32322d3332203d3e20323633313430.roa (hash: MP20LMo9f8eFxUl1b36Am5pintrsHRYaUyM85DRnYkc=) 3: 8F327FEFA4E8788FFCFDCD7C6D190640F8A62810.crl (hash: Uy5zkpKaPEue3XrBqdaf7rpwPxNjhSqBVgVGHu5wg7Y=) 4: 3136382e3230352e3134342e302f32322d3332203d3e20323633313430.roa (hash: cWL7ywingfONXMLthhWJwyGTjAp9a1/h2kmDB+eXpAM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2zVR29nhkFArjm3boG6xrJCVPQ36b5DaeVsyn44SZtAB/0/8F327FEFA4E8788FFCFDCD7C6D190640F8A62810.crl rsync://rpki-repo.registro.br/repo/2zVR29nhkFArjm3boG6xrJCVPQ36b5DaeVsyn44SZtAB/0/8F327FEFA4E8788FFCFDCD7C6D190640F8A62810.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F327FEFA4E8788FFCFDCD7C6D190640F8A62810.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 03 Nov 2026 11:52:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:e8:90:01:6d:c6:89:ba:50:fe:2a:24:b7:af:bd:79:14:28:86:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F327FEFA4E8788FFCFDCD7C6D190640F8A62810 Validity Not Before: Nov 2 08:12:12 2026 GMT Not After : Nov 3 11:52:12 2026 GMT Subject: CN=E97FEA9D6700A56734B64FFC2939D950C756DC45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:99:47:f7:47:9b:b7:6c:1b:0f:35:1c:db:10: 0e:70:e4:78:61:64:7a:70:4a:d5:9b:6e:aa:5e:a4: 0c:fc:fc:45:e6:cd:71:b5:38:ae:6d:6f:2d:29:4b: 73:af:bb:f9:8b:a5:b4:59:c7:a3:67:a7:c8:40:24: 0d:57:e1:fa:e9:92:49:34:42:78:aa:01:06:a0:97: 25:c7:d1:c4:52:20:a1:9c:63:56:ee:4f:14:66:fb: 9f:8b:c1:94:28:20:42:27:6e:0c:92:82:cd:b6:83: b0:f9:7c:94:e3:0e:db:7b:19:f6:fe:0b:25:19:23: d0:0c:66:30:72:1b:1d:45:1f:cb:4c:f3:36:6b:1c: e2:1c:40:b6:e3:5c:d6:4b:b0:ee:e1:c2:21:f7:85: 72:ba:82:34:89:a2:71:0c:c3:5a:d6:48:70:5a:51: 93:4c:5d:87:2e:5c:ac:4a:e8:34:2b:d1:6b:bc:ac: ad:3d:1c:d3:c4:74:27:d4:08:42:18:f1:c6:f8:6d: 3a:54:bb:ae:1e:ed:cf:ab:70:e8:38:59:3a:ac:9a: ab:e4:74:39:98:ae:da:8e:28:e2:8f:da:16:35:1b: 42:c0:65:33:7d:bb:6e:e3:87:86:73:1c:fb:5e:61: 05:95:1b:cd:0a:be:4f:89:03:ce:14:92:49:4b:a6: e7:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:7F:EA:9D:67:00:A5:67:34:B6:4F:FC:29:39:D9:50:C7:56:DC:45 X509v3 Authority Key Identifier: keyid:8F:32:7F:EF:A4:E8:78:8F:FC:FD:CD:7C:6D:19:06:40:F8:A6:28:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2zVR29nhkFArjm3boG6xrJCVPQ36b5DaeVsyn44SZtAB/0/8F327FEFA4E8788FFCFDCD7C6D190640F8A62810.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F327FEFA4E8788FFCFDCD7C6D190640F8A62810.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2zVR29nhkFArjm3boG6xrJCVPQ36b5DaeVsyn44SZtAB/0/8F327FEFA4E8788FFCFDCD7C6D190640F8A62810.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:d2:7d:bd:39:34:70:9d:52:09:62:38:3a:9f:7b:2b:21:95: e7:7a:bc:25:f5:0f:89:ba:0c:34:95:59:da:4a:20:33:0a:0a: af:c0:2b:b3:29:a7:dc:4f:55:71:81:96:a5:7f:5e:a5:9a:5a: 5d:4b:12:2e:56:37:53:3b:91:7c:76:db:03:e0:8e:78:b6:77: 27:08:a8:16:e6:c3:43:1c:7c:26:74:3b:b7:dd:db:57:12:c5: 3a:0b:9e:14:ea:0f:6b:3b:61:80:28:a8:43:37:f9:4d:1f:be: d4:fc:67:63:1f:00:89:0f:0b:1f:f1:a9:bf:05:a4:0d:13:92: ec:b8:7b:3e:ac:42:f1:29:bd:af:57:3e:c8:4c:38:4c:b8:ac: 84:be:6a:05:9b:50:cf:eb:40:b5:8a:37:f9:f8:ec:05:92:39: 43:aa:33:25:f3:d6:d8:39:aa:67:30:24:7a:d1:07:65:f5:7d: dc:36:b7:72:e1:69:36:f0:40:25:0d:38:de:80:4e:a8:be:00: 2b:a5:30:ab:02:95:e6:1b:08:a7:bd:5f:1d:ad:43:b8:6d:79: bc:e4:90:5a:4d:67:37:10:23:45:f5:22:dd:d8:c5:54:1a:f9: be:dc:b2:03:f2:da:8c:98:cf:fb:67:d9:c4:a9:56:c1:3f:a2: d5:8c:a4:3b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUeeiQAW3GibpQ/iokt6+9eRQohuEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEYzMjdGRUZBNEU4Nzg4RkZDRkRDRDdDNkQxOTA2NDBG OEE2MjgxMDAeFw0yNjExMDIwODEyMTJaFw0yNjExMDMxMTUyMTJaMDMxMTAvBgNV BAMTKEU5N0ZFQTlENjcwMEE1NjczNEI2NEZGQzI5MzlEOTUwQzc1NkRDNDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsmUf3R5u3bBsPNRzbEA5w5Hhh ZHpwStWbbqpepAz8/EXmzXG1OK5tby0pS3Ovu/mLpbRZx6Nnp8hAJA1X4frpkkk0 QniqAQaglyXH0cRSIKGcY1buTxRm+5+LwZQoIEInbgySgs22g7D5fJTjDtt7Gfb+ CyUZI9AMZjByGx1FH8tM8zZrHOIcQLbjXNZLsO7hwiH3hXK6gjSJonEMw1rWSHBa UZNMXYcuXKxK6DQr0Wu8rK09HNPEdCfUCEIY8cb4bTpUu64e7c+rcOg4WTqsmqvk dDmYrtqOKOKP2hY1G0LAZTN9u27jh4ZzHPteYQWVG80Kvk+JA84UkklLpufVAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU6X/qnWcApWc0tk/8KTnZUMdW3EUwHwYDVR0j BBgwFoAUjzJ/76ToeI/8/c18bRkGQPimKBAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMnpWUjI5bmhrRkFyam0zYm9HNnhySkNWUFEzNmI1RGFlVnN5bjQ0U1p0 QUIvMC84RjMyN0ZFRkE0RTg3ODhGRkNGRENEN0M2RDE5MDY0MEY4QTYyODEwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhGMzI3RkVGQTRFODc4OEZG Q0ZEQ0Q3QzZEMTkwNjQwRjhBNjI4MTAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MnpWUjI5bmhrRkFyam0zYm9HNnhySkNWUFEzNmI1RGFlVnN5bjQ0U1p0QUIvMC84 RjMyN0ZFRkE0RTg3ODhGRkNGRENEN0M2RDE5MDY0MEY4QTYyODEwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAB9J9vTk0cJ1SCWI4Op97KyGV53q8JfUPiboMNJVZ2kogMwoKr8Arsymn3E9V cYGWpX9epZpaXUsSLlY3UzuRfHbbA+COeLZ3JwioFubDQxx8JnQ7t93bVxLFOgue FOoPazthgCioQzf5TR++1PxnYx8AiQ8LH/GpvwWkDROS7Lh7PqxC8Sm9r1c+yEw4 TLishL5qBZtQz+tAtYo3+fjsBZI5Q6ozJfPW2DmqZzAketEHZfV93Da3cuFpNvBA JQ043oBOqL4AK6UwqwKV5hsIp71fHa1DuG15vOSQWk1nNxAjRfUi3djFVBr5vtyy A/LajJjP+2fZxKlWwT+i1YykOw== -----END CERTIFICATE-----Generated at Mon Nov 2 21:58:35 2026 by rpki-client