$ rpki-client -vvvf rpki-repo.registro.br/repo/3FhH3cqZa8sGcZA3mKXkg66JoahPm9VSXiEZ4riYZC14/1/D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05.mft File: D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05.mft (raw, json) Hash identifier: IgEpo9077ulynF+nBONFJsWx403h3RaoPzzVq235qL8= Subject key identifier: 1E:99:6A:D0:58:B8:76:B9:79:11:EC:28:8C:07:9F:DB:43:9A:02:E0 Authority key identifier: D8:D9:B8:E4:A8:35:A2:FE:0F:90:57:86:DE:D8:B5:30:F7:F0:AD:05 Certificate issuer: /CN=D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05 Certificate serial: 794D6AF6A8A0AA99971DF24C6A37A72EDA8456C7 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05.cer Subject info access: rsync://rpki-repo.registro.br/repo/3FhH3cqZa8sGcZA3mKXkg66JoahPm9VSXiEZ4riYZC14/1/D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05.mft Manifest number: 04E5 Signing time: Fri 30 Oct 2026 13:37:09 +0000 Manifest this update: Fri 30 Oct 2026 13:32:09 +0000 Manifest next update: Sat 31 Oct 2026 15:12:09 +0000 Files and hashes: 1: D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05.crl (hash: 303s5W7Xg24N46+CaDIpzbXcTjdSBweTCPRIisHEjhI=) 2: 3136382e3230352e3232342e302f32322d3234203d3e20323634383637.roa (hash: pmh4BRCTLaVheNeaFBQFQP/b/r3NgPTQ74DTv+RIp/c=) 3: 323830343a326630383a3a2f33322d3335203d3e20323634383637.roa (hash: Je45+iOjDmMU3Itr5TM40yGfNyfMpywBJO99d15F0+k=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3FhH3cqZa8sGcZA3mKXkg66JoahPm9VSXiEZ4riYZC14/1/D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05.crl rsync://rpki-repo.registro.br/repo/3FhH3cqZa8sGcZA3mKXkg66JoahPm9VSXiEZ4riYZC14/1/D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 31 Oct 2026 15:12:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:4d:6a:f6:a8:a0:aa:99:97:1d:f2:4c:6a:37:a7:2e:da:84:56:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05 Validity Not Before: Oct 30 13:32:09 2026 GMT Not After : Oct 31 15:12:09 2026 GMT Subject: CN=1E996AD058B876B97911EC288C079FDB439A02E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e9:f1:5d:85:fe:50:35:6f:21:5b:5b:d5:d3: 2c:fe:59:75:a0:de:ed:4d:14:2e:a3:7c:6b:f6:37: c1:38:5a:a7:61:24:f0:7b:47:1f:32:64:83:57:a0: f9:37:dc:8a:09:70:b5:1b:ee:b9:67:95:fe:c2:48: 5e:3d:bd:73:68:12:8f:24:3a:c0:dd:a3:02:c0:39: 3b:71:08:50:9c:73:4a:46:84:67:e6:10:e4:4c:e5: 5a:05:ae:97:49:0d:45:9f:f7:ff:e9:2a:5c:61:e9: 82:c6:68:4b:d6:b4:9a:56:cc:23:3a:8a:7d:2a:cb: 87:21:a9:69:f5:f3:54:d4:11:02:89:21:44:b3:b1: 9a:bb:56:06:32:d7:61:6c:b1:0b:59:86:38:e3:c1: dc:72:54:39:9e:9b:a2:8c:1d:54:7a:09:11:64:10: cf:0e:0e:32:d1:a8:06:a0:67:16:52:e7:4a:40:54: 69:2c:54:63:8e:34:25:08:e3:dd:15:03:17:d7:ce: 00:9f:19:d8:f6:aa:42:2e:3f:7b:7e:4f:e9:da:46: d2:de:39:5d:ce:d8:4c:1e:8c:c8:ea:f1:f5:72:1a: f2:db:22:91:29:c0:6e:b8:a5:d1:f0:15:6b:c3:50: 12:b1:df:ac:7a:61:61:37:d3:31:53:bf:46:ca:b3: 78:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:99:6A:D0:58:B8:76:B9:79:11:EC:28:8C:07:9F:DB:43:9A:02:E0 X509v3 Authority Key Identifier: keyid:D8:D9:B8:E4:A8:35:A2:FE:0F:90:57:86:DE:D8:B5:30:F7:F0:AD:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3FhH3cqZa8sGcZA3mKXkg66JoahPm9VSXiEZ4riYZC14/1/D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3FhH3cqZa8sGcZA3mKXkg66JoahPm9VSXiEZ4riYZC14/1/D8D9B8E4A835A2FE0F905786DED8B530F7F0AD05.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:ae:63:73:cf:7b:d7:98:01:34:0f:b1:07:fe:6a:4b:85:b4: 47:50:59:fc:8f:ec:10:76:c0:eb:d1:3e:c3:06:ed:41:35:8f: b1:ca:1d:20:5a:64:57:15:9e:05:b6:c1:3f:93:08:5f:2b:35: c3:a1:8c:47:65:22:5f:63:78:f2:61:5f:ce:7c:a5:53:34:99: 47:eb:f6:bc:41:c7:ce:25:c9:7d:c6:2b:a7:a3:55:04:cc:b9: ae:9a:a9:00:3f:5e:66:50:e3:d0:20:92:a9:f8:1f:0e:ac:41: 5a:43:41:89:a8:92:22:5b:06:bc:d7:97:11:e7:5e:e1:0e:63: bb:22:39:c0:3b:c8:df:07:f3:ee:b4:af:1e:be:f3:dc:01:21: bb:a4:d6:03:fc:d4:6c:25:f7:1e:4d:71:f7:8a:75:b9:d2:cf: 98:f4:b8:ff:c3:cc:b7:51:e2:d6:1c:b8:64:cc:00:dc:d1:16: 46:de:20:da:35:c8:1e:34:b2:b9:a3:19:0e:1f:40:d4:ca:8f: 4f:93:72:34:b4:71:3f:ab:28:aa:ac:d1:5b:64:e4:bd:b8:b3: d6:ff:6c:94:ef:42:1d:6d:9f:11:36:e5:76:96:90:07:c8:11: 04:94:d7:d9:b6:3e:ef:56:ad:2b:1b:64:ec:3f:b6:48:86:e8: ab:25:c9:f6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUeU1q9qigqpmXHfJMajenLtqEVscwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDhEOUI4RTRBODM1QTJGRTBGOTA1Nzg2REVEOEI1MzBG N0YwQUQwNTAeFw0yNjEwMzAxMzMyMDlaFw0yNjEwMzExNTEyMDlaMDMxMTAvBgNV BAMTKDFFOTk2QUQwNThCODc2Qjk3OTExRUMyODhDMDc5RkRCNDM5QTAyRTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF6fFdhf5QNW8hW1vV0yz+WXWg 3u1NFC6jfGv2N8E4WqdhJPB7Rx8yZINXoPk33IoJcLUb7rlnlf7CSF49vXNoEo8k OsDdowLAOTtxCFCcc0pGhGfmEORM5VoFrpdJDUWf9//pKlxh6YLGaEvWtJpWzCM6 in0qy4chqWn181TUEQKJIUSzsZq7VgYy12FssQtZhjjjwdxyVDmem6KMHVR6CRFk EM8ODjLRqAagZxZS50pAVGksVGOONCUI490VAxfXzgCfGdj2qkIuP3t+T+naRtLe OV3O2EwejMjq8fVyGvLbIpEpwG64pdHwFWvDUBKx36x6YWE30zFTv0bKs3gvAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUHplq0Fi4drl5EewojAef20OaAuAwHwYDVR0j BBgwFoAU2Nm45Kg1ov4PkFeG3ti1MPfwrQUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM0ZoSDNjcVphOHNHY1pBM21LWGtnNjZKb2FoUG05VlNYaUVaNHJpWVpD MTQvMS9EOEQ5QjhFNEE4MzVBMkZFMEY5MDU3ODZERUQ4QjUzMEY3RjBBRDA1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q4RDlCOEU0QTgzNUEyRkUw RjkwNTc4NkRFRDhCNTMwRjdGMEFEMDUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M0ZoSDNjcVphOHNHY1pBM21LWGtnNjZKb2FoUG05VlNYaUVaNHJpWVpDMTQvMS9E OEQ5QjhFNEE4MzVBMkZFMEY5MDU3ODZERUQ4QjUzMEY3RjBBRDA1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAda5jc89715gBNA+xB/5qS4W0R1BZ/I/sEHbA69E+wwbtQTWPscodIFpkVxWe BbbBP5MIXys1w6GMR2UiX2N48mFfznylUzSZR+v2vEHHziXJfcYrp6NVBMy5rpqp AD9eZlDj0CCSqfgfDqxBWkNBiaiSIlsGvNeXEede4Q5juyI5wDvI3wfz7rSvHr7z 3AEhu6TWA/zUbCX3Hk1x94p1udLPmPS4/8PMt1Hi1hy4ZMwA3NEWRt4g2jXIHjSy uaMZDh9A1MqPT5NyNLRxP6soqqzRW2Tkvbiz1v9slO9CHW2fETbldpaQB8gRBJTX 2bY+71atKxtk7D+2SIboqyXJ9g== -----END CERTIFICATE-----Generated at Sat Oct 31 08:32:53 2026 by rpki-client