$ rpki-client -vvvf rpki-repo.registro.br/repo/33UqdDXd5QLhYbkMKSNzcNx4mxRK4yfRc1ooUPFaQBKa/0/C0499C5F887D9F85CE5DB1283DE9961D3CFC32D9.mft File: C0499C5F887D9F85CE5DB1283DE9961D3CFC32D9.mft (raw, json) Hash identifier: xmJgSEmQ9fJbQty5uk6xFCJDIOep127ldJOP4/L5c48= Subject key identifier: BB:F6:E6:5A:7A:26:B1:54:01:4B:77:6C:A5:A6:DA:9B:70:AB:BD:E2 Authority key identifier: C0:49:9C:5F:88:7D:9F:85:CE:5D:B1:28:3D:E9:96:1D:3C:FC:32:D9 Certificate issuer: /CN=C0499C5F887D9F85CE5DB1283DE9961D3CFC32D9 Certificate serial: 3A15343E58749B0D38EBACFFC2F6FCBF631955E1 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0499C5F887D9F85CE5DB1283DE9961D3CFC32D9.cer Subject info access: rsync://rpki-repo.registro.br/repo/33UqdDXd5QLhYbkMKSNzcNx4mxRK4yfRc1ooUPFaQBKa/0/C0499C5F887D9F85CE5DB1283DE9961D3CFC32D9.mft Manifest number: 71 Signing time: Mon 02 Nov 2026 07:46:07 +0000 Manifest this update: Mon 02 Nov 2026 07:41:07 +0000 Manifest next update: Tue 03 Nov 2026 11:22:07 +0000 Files and hashes: 1: C0499C5F887D9F85CE5DB1283DE9961D3CFC32D9.crl (hash: eFuGz8bxXWQXPEmiV9HtgMrwpPWxSOQkRZyd0CYX8SQ=) 2: 323830343a383162343a3a2f33322d3332203d3e20323732343731.roa (hash: vKmwE5QlCRotl9RLxAHQqFx/qhZXbPuX2IKkBgnt6OY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/33UqdDXd5QLhYbkMKSNzcNx4mxRK4yfRc1ooUPFaQBKa/0/C0499C5F887D9F85CE5DB1283DE9961D3CFC32D9.crl rsync://rpki-repo.registro.br/repo/33UqdDXd5QLhYbkMKSNzcNx4mxRK4yfRc1ooUPFaQBKa/0/C0499C5F887D9F85CE5DB1283DE9961D3CFC32D9.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0499C5F887D9F85CE5DB1283DE9961D3CFC32D9.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 03 Nov 2026 11:22:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:15:34:3e:58:74:9b:0d:38:eb:ac:ff:c2:f6:fc:bf:63:19:55:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C0499C5F887D9F85CE5DB1283DE9961D3CFC32D9 Validity Not Before: Nov 2 07:41:07 2026 GMT Not After : Nov 3 11:22:07 2026 GMT Subject: CN=BBF6E65A7A26B154014B776CA5A6DA9B70ABBDE2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:6c:68:15:5c:61:6b:ef:f2:1b:7a:05:97:58: 27:85:a2:3a:51:bf:d4:46:f3:66:50:aa:5f:e2:55: 2e:f4:c6:7d:99:b8:ce:32:63:3e:38:c9:98:83:be: f8:31:80:98:de:81:85:58:40:00:77:3f:ff:e5:92: c1:53:ae:a7:3f:ab:ad:10:be:55:75:f8:bb:92:18: 1c:65:54:04:f0:b6:8d:c9:85:7d:d5:5e:0d:5b:ad: d3:49:e5:b5:3f:bd:00:e1:02:cb:bd:b1:ff:27:be: b3:af:0d:ba:d3:f7:8a:80:fe:5c:38:2a:ae:b1:cb: 07:da:e7:d3:53:c1:e5:d2:f4:2d:49:70:17:d9:67: f8:73:a1:51:50:e9:d4:34:3e:1a:d5:06:e0:84:a5: e5:52:48:45:fd:e5:09:af:97:38:01:5d:09:cb:74: 48:d1:70:27:45:15:58:39:c1:f0:60:86:b8:49:76: d8:6a:d3:8f:37:9c:31:3c:1e:e1:11:8b:6f:94:e6: d8:07:7e:11:a1:65:4f:0c:73:4f:7b:8a:7a:fd:c4: 0a:69:cb:0d:7e:ab:da:d3:be:24:be:8e:65:bb:48: 11:64:60:a7:72:c9:e3:a5:f8:2e:8c:fd:ea:4c:5b: 3e:ce:96:fb:be:8e:f6:de:de:c3:bc:6e:bd:8c:05: ab:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:F6:E6:5A:7A:26:B1:54:01:4B:77:6C:A5:A6:DA:9B:70:AB:BD:E2 X509v3 Authority Key Identifier: keyid:C0:49:9C:5F:88:7D:9F:85:CE:5D:B1:28:3D:E9:96:1D:3C:FC:32:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/33UqdDXd5QLhYbkMKSNzcNx4mxRK4yfRc1ooUPFaQBKa/0/C0499C5F887D9F85CE5DB1283DE9961D3CFC32D9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0499C5F887D9F85CE5DB1283DE9961D3CFC32D9.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/33UqdDXd5QLhYbkMKSNzcNx4mxRK4yfRc1ooUPFaQBKa/0/C0499C5F887D9F85CE5DB1283DE9961D3CFC32D9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:bc:37:ec:09:22:c4:4c:68:b0:42:83:96:0e:0d:5e:a8:4c: 8a:ce:02:e8:d1:23:b7:ed:05:b0:ac:6a:a5:fa:e3:f9:2e:62: 90:0f:85:ab:3d:a8:0f:c8:63:1f:10:03:14:5f:eb:2d:f8:12: 4b:70:0b:a2:24:bc:0a:2e:50:45:bf:f8:c9:4e:11:e8:f7:a4: ca:c8:02:d0:e9:0e:5a:90:81:e1:c7:5f:17:06:fb:13:24:5f: 11:7e:ef:41:7b:e9:d1:3d:32:5e:62:a7:6f:c2:2e:5f:66:ca: 2b:cc:08:2e:cd:00:c2:2d:c0:88:15:03:87:0a:3d:08:e6:da: 3a:8e:48:aa:bf:0b:d4:53:a5:f3:44:bb:16:da:83:ca:9f:bc: 24:57:a6:fb:96:91:28:79:5b:43:83:35:b8:36:70:d6:34:c1: 8a:3a:14:96:50:e9:c7:c9:23:12:7b:d7:92:5d:66:16:4e:31: fd:ba:10:84:d5:b9:84:be:ad:f4:77:28:ca:b9:71:18:cc:c9: 31:3e:f2:46:18:d0:a2:1f:43:d1:50:5e:34:c0:3a:f9:c5:c0: 41:43:c9:8a:e9:06:2b:3c:2c:67:d2:a3:34:f1:1f:52:19:48: 12:d9:ec:d7:0f:5e:2e:a3:c0:16:3b:ca:94:cd:89:33:bf:bf: c3:d3:0a:20 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUOhU0Plh0mw0466z/wvb8v2MZVeEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzA0OTlDNUY4ODdEOUY4NUNFNURCMTI4M0RFOTk2MUQz Q0ZDMzJEOTAeFw0yNjExMDIwNzQxMDdaFw0yNjExMDMxMTIyMDdaMDMxMTAvBgNV BAMTKEJCRjZFNjVBN0EyNkIxNTQwMTRCNzc2Q0E1QTZEQTlCNzBBQkJERTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4bGgVXGFr7/IbegWXWCeFojpR v9RG82ZQql/iVS70xn2ZuM4yYz44yZiDvvgxgJjegYVYQAB3P//lksFTrqc/q60Q vlV1+LuSGBxlVATwto3JhX3VXg1brdNJ5bU/vQDhAsu9sf8nvrOvDbrT94qA/lw4 Kq6xywfa59NTweXS9C1JcBfZZ/hzoVFQ6dQ0PhrVBuCEpeVSSEX95QmvlzgBXQnL dEjRcCdFFVg5wfBghrhJdthq0483nDE8HuERi2+U5tgHfhGhZU8Mc097inr9xApp yw1+q9rTviS+jmW7SBFkYKdyyeOl+C6M/epMWz7Olvu+jvbe3sO8br2MBasFAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUu/bmWnomsVQBS3dspabam3CrveIwHwYDVR0j BBgwFoAUwEmcX4h9n4XOXbEoPemWHTz8MtkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMzNVcWREWGQ1UUxoWWJrTUtTTnpjTng0bXhSSzR5ZlJjMW9vVVBGYVFC S2EvMC9DMDQ5OUM1Rjg4N0Q5Rjg1Q0U1REIxMjgzREU5OTYxRDNDRkMzMkQ5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MwNDk5QzVGODg3RDlGODVD RTVEQjEyODNERTk5NjFEM0NGQzMyRDkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MzNVcWREWGQ1UUxoWWJrTUtTTnpjTng0bXhSSzR5ZlJjMW9vVVBGYVFCS2EvMC9D MDQ5OUM1Rjg4N0Q5Rjg1Q0U1REIxMjgzREU5OTYxRDNDRkMzMkQ5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJbw37AkixExosEKDlg4NXqhMis4C6NEjt+0FsKxqpfrj+S5ikA+Fqz2oD8hj HxADFF/rLfgSS3ALoiS8Ci5QRb/4yU4R6PekysgC0OkOWpCB4cdfFwb7EyRfEX7v QXvp0T0yXmKnb8IuX2bKK8wILs0Awi3AiBUDhwo9CObaOo5Iqr8L1FOl80S7FtqD yp+8JFem+5aRKHlbQ4M1uDZw1jTBijoUllDpx8kjEnvXkl1mFk4x/boQhNW5hL6t 9HcoyrlxGMzJMT7yRhjQoh9D0VBeNMA6+cXAQUPJiukGKzwsZ9KjNPEfUhlIEtns 1w9eLqPAFjvKlM2JM7+/w9MKIA== -----END CERTIFICATE-----Generated at Mon Nov 2 22:31:16 2026 by rpki-client