$ rpki-client -vvvf rpki-repo.registro.br/repo/3hJ4RCNPQvYnRTmSpDFzcf1PWaxQ9Y11okExr7dq5n5k/1/642D27C2B88FC1E644188313B8DE644A2705C863.mft File: 642D27C2B88FC1E644188313B8DE644A2705C863.mft (raw, json) Hash identifier: G85+qgwG5r6KujTJ21GSTm6YFx4ko2Qe1PoJuS7EZmE= Subject key identifier: 77:E3:D5:77:D8:44:DB:E4:D9:2A:59:B3:50:E1:62:EF:4B:72:08:E0 Authority key identifier: 64:2D:27:C2:B8:8F:C1:E6:44:18:83:13:B8:DE:64:4A:27:05:C8:63 Certificate issuer: /CN=642D27C2B88FC1E644188313B8DE644A2705C863 Certificate serial: 33FCC6A8926A65D685531F43D9D85AC2B9D83E35 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/642D27C2B88FC1E644188313B8DE644A2705C863.cer Subject info access: rsync://rpki-repo.registro.br/repo/3hJ4RCNPQvYnRTmSpDFzcf1PWaxQ9Y11okExr7dq5n5k/1/642D27C2B88FC1E644188313B8DE644A2705C863.mft Manifest number: 0152 Signing time: Sun 01 Nov 2026 04:13:12 +0000 Manifest this update: Sun 01 Nov 2026 04:08:12 +0000 Manifest next update: Mon 02 Nov 2026 04:18:12 +0000 Files and hashes: 1: 3138362e3232352e36342e302f32302d3332203d3e203533313732.roa (hash: qS9kJDeUw5UanuRqlP9zKk8HXYFcVwZQYsvELUztTRc=) 2: 323830343a323938303a3a2f33322d313238203d3e203533313732.roa (hash: Q5f+wn3UmWTKr7J+nd9Fbw7NPxhQ2437/LX0gYVuUrA=) 3: 642D27C2B88FC1E644188313B8DE644A2705C863.crl (hash: KtbLuQyJOEa7dykNQ8DuTpEu/gvapY5vb2RvpNGak1E=) 4: 3134332e3133372e382e302f32322d3332203d3e203533313732.roa (hash: x2R1iPQpdQ+4rglW6zjXq2cSE6ntOLMISvPkSabkcGw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3hJ4RCNPQvYnRTmSpDFzcf1PWaxQ9Y11okExr7dq5n5k/1/642D27C2B88FC1E644188313B8DE644A2705C863.crl rsync://rpki-repo.registro.br/repo/3hJ4RCNPQvYnRTmSpDFzcf1PWaxQ9Y11okExr7dq5n5k/1/642D27C2B88FC1E644188313B8DE644A2705C863.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/642D27C2B88FC1E644188313B8DE644A2705C863.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 02 Nov 2026 04:18:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:fc:c6:a8:92:6a:65:d6:85:53:1f:43:d9:d8:5a:c2:b9:d8:3e:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=642D27C2B88FC1E644188313B8DE644A2705C863 Validity Not Before: Nov 1 04:08:12 2026 GMT Not After : Nov 2 04:18:12 2026 GMT Subject: CN=77E3D577D844DBE4D92A59B350E162EF4B7208E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:30:52:07:33:75:05:5a:79:e5:20:81:97:99: 3e:2c:a5:0f:77:84:1e:0d:f2:34:c6:a2:40:9a:db: dc:4d:c0:58:b6:9a:54:1a:7f:1d:45:46:b5:e9:2e: 75:46:bd:a7:ca:03:7b:80:16:4a:25:70:88:c1:cb: d7:85:cb:e7:d4:00:68:53:56:36:42:af:c1:fa:26: 02:77:e7:b5:11:1f:2c:49:f4:9f:6e:44:0a:59:0d: d5:fc:2b:8a:e1:bb:18:aa:55:05:db:70:14:b8:6b: 07:8f:b2:45:b0:5d:5a:46:f9:94:f3:a2:bd:a4:f2: 15:a8:42:a0:41:6e:2b:32:7c:7b:66:35:0d:b2:8a: cf:a9:74:d5:0f:ab:26:b3:ee:62:11:a2:9f:f1:e7: 8f:36:8c:f0:bc:f2:d0:07:4c:43:3f:f7:4d:01:99: 51:90:bc:d8:76:01:b3:43:25:23:5c:8f:57:17:12: 30:a6:39:38:47:6f:1e:66:34:12:2c:5d:68:3c:02: f7:17:0e:c5:d2:d9:40:42:24:d2:5e:58:b2:b4:11: b0:e5:d9:84:2f:f7:53:40:a1:98:87:71:94:6b:6d: 6b:79:44:5a:47:e0:ba:71:ca:73:03:52:29:06:44: 58:9c:a1:fe:42:1a:a2:6f:65:cf:1c:ef:7e:9d:5f: 66:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:E3:D5:77:D8:44:DB:E4:D9:2A:59:B3:50:E1:62:EF:4B:72:08:E0 X509v3 Authority Key Identifier: keyid:64:2D:27:C2:B8:8F:C1:E6:44:18:83:13:B8:DE:64:4A:27:05:C8:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3hJ4RCNPQvYnRTmSpDFzcf1PWaxQ9Y11okExr7dq5n5k/1/642D27C2B88FC1E644188313B8DE644A2705C863.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/642D27C2B88FC1E644188313B8DE644A2705C863.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3hJ4RCNPQvYnRTmSpDFzcf1PWaxQ9Y11okExr7dq5n5k/1/642D27C2B88FC1E644188313B8DE644A2705C863.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:d4:e2:87:4d:d7:32:6d:2a:20:9e:ab:9f:12:ec:fe:52:cc: f4:ba:59:91:c1:28:5c:84:47:2b:99:a6:55:e8:de:99:66:68: 7f:89:08:77:e7:8e:74:9f:68:57:e5:3b:96:87:b8:4c:5b:ec: ab:04:1b:f7:48:df:c9:b3:8e:93:8e:e6:ff:a9:84:e9:20:8a: 7b:1d:0e:8a:5c:cd:65:bf:e5:2b:3e:7e:88:a6:71:14:4b:81: c4:d3:a3:2e:c6:34:91:61:35:2b:ad:fb:31:8f:03:cf:74:fc: 8d:d6:7a:02:41:94:34:fc:d4:3f:25:40:f6:a8:92:a7:0e:b0: cf:5e:66:d6:e0:a8:3e:7e:d9:f9:f8:4c:f4:3a:a3:99:04:73: 70:7f:59:99:dc:2a:bf:4c:9e:eb:e2:d5:83:b8:40:66:20:82: 30:46:7f:c7:e1:d9:c5:ae:60:50:05:78:9b:38:a7:b2:1d:ba: 91:5e:28:3f:3f:c5:e9:2a:58:80:bf:88:2b:19:c6:a1:e7:a2: b5:3e:cd:09:df:17:be:48:86:92:14:60:4c:ba:ab:1e:36:3d: d7:74:c4:14:57:32:f7:31:38:f4:93:31:8a:5a:8a:2a:87:6d: 0b:cf:fc:bb:5e:96:3e:01:f5:2a:17:b3:bf:2c:f3:12:1b:e3: d4:ad:75:b0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUM/zGqJJqZdaFUx9D2dhawrnYPjUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjQyRDI3QzJCODhGQzFFNjQ0MTg4MzEzQjhERTY0NEEy NzA1Qzg2MzAeFw0yNjExMDEwNDA4MTJaFw0yNjExMDIwNDE4MTJaMDMxMTAvBgNV BAMTKDc3RTNENTc3RDg0NERCRTREOTJBNTlCMzUwRTE2MkVGNEI3MjA4RTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzMFIHM3UFWnnlIIGXmT4spQ93 hB4N8jTGokCa29xNwFi2mlQafx1FRrXpLnVGvafKA3uAFkolcIjBy9eFy+fUAGhT VjZCr8H6JgJ357URHyxJ9J9uRApZDdX8K4rhuxiqVQXbcBS4awePskWwXVpG+ZTz or2k8hWoQqBBbisyfHtmNQ2yis+pdNUPqyaz7mIRop/x5482jPC88tAHTEM/900B mVGQvNh2AbNDJSNcj1cXEjCmOThHbx5mNBIsXWg8AvcXDsXS2UBCJNJeWLK0EbDl 2YQv91NAoZiHcZRrbWt5RFpH4LpxynMDUikGRFicof5CGqJvZc8c736dX2a7AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUd+PVd9hE2+TZKlmzUOFi70tyCOAwHwYDVR0j BBgwFoAUZC0nwriPweZEGIMTuN5kSicFyGMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM2hKNFJDTlBRdlluUlRtU3BERnpjZjFQV2F4UTlZMTFva0V4cjdkcTVu NWsvMS82NDJEMjdDMkI4OEZDMUU2NDQxODgzMTNCOERFNjQ0QTI3MDVDODYzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY0MkQyN0MyQjg4RkMxRTY0 NDE4ODMxM0I4REU2NDRBMjcwNUM4NjMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M2hKNFJDTlBRdlluUlRtU3BERnpjZjFQV2F4UTlZMTFva0V4cjdkcTVuNWsvMS82 NDJEMjdDMkI4OEZDMUU2NDQxODgzMTNCOERFNjQ0QTI3MDVDODYzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJtTih03XMm0qIJ6rnxLs/lLM9LpZkcEoXIRHK5mmVejemWZof4kId+eOdJ9o V+U7loe4TFvsqwQb90jfybOOk47m/6mE6SCKex0OilzNZb/lKz5+iKZxFEuBxNOj LsY0kWE1K637MY8Dz3T8jdZ6AkGUNPzUPyVA9qiSpw6wz15m1uCoPn7Z+fhM9Dqj mQRzcH9Zmdwqv0ye6+LVg7hAZiCCMEZ/x+HZxa5gUAV4mzinsh26kV4oPz/F6SpY gL+IKxnGoeeitT7NCd8XvkiGkhRgTLqrHjY913TEFFcy9zE49JMxilqKKodtC8/8 u16WPgH1KhezvyzzEhvj1K11sA== -----END CERTIFICATE-----Generated at Sun Nov 1 11:09:23 2026 by rpki-client