$ rpki-client -vvvf rpki-repo.registro.br/repo/4bNVhjyvsE6TAzkxTZWGGj6R1bbvyY1cJq3Typ8R859Q/1/295B9D364BD76A81DD34AA5D5C965BB1FC27A520.mft File: 295B9D364BD76A81DD34AA5D5C965BB1FC27A520.mft (raw, json) Hash identifier: D7BYDywKaTNWDC4CQiQQD9X8jAvyeChRI4s1mALabso= Subject key identifier: 8B:EB:EA:19:03:96:ED:F0:CA:F1:76:1C:15:D5:FE:31:37:89:CA:6D Authority key identifier: 29:5B:9D:36:4B:D7:6A:81:DD:34:AA:5D:5C:96:5B:B1:FC:27:A5:20 Certificate issuer: /CN=295B9D364BD76A81DD34AA5D5C965BB1FC27A520 Certificate serial: 37BD1B2DB97BCE161E1266A91949F00AA6104B38 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/295B9D364BD76A81DD34AA5D5C965BB1FC27A520.cer Subject info access: rsync://rpki-repo.registro.br/repo/4bNVhjyvsE6TAzkxTZWGGj6R1bbvyY1cJq3Typ8R859Q/1/295B9D364BD76A81DD34AA5D5C965BB1FC27A520.mft Manifest number: 0474 Signing time: Sun 01 Nov 2026 10:27:17 +0000 Manifest this update: Sun 01 Nov 2026 10:22:15 +0000 Manifest next update: Mon 02 Nov 2026 13:17:15 +0000 Files and hashes: 1: 323830343a356665383a3a2f33322d313238203d3e20323639313331.roa (hash: mMedel6rBF9qXPa+cR65v7KZB3eekORLIPOsGhYiHa8=) 2: 34352e3138302e35362e302f32322d3332203d3e20323639313331.roa (hash: ml1PgEl1uyA5wlPRryO9VgZNbFnY5kGR+gZ0jYqB0QI=) 3: 295B9D364BD76A81DD34AA5D5C965BB1FC27A520.crl (hash: SS3VlRwpESE5+hNhvxvOBQFm+ziFX4smRilAB8pdNQU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4bNVhjyvsE6TAzkxTZWGGj6R1bbvyY1cJq3Typ8R859Q/1/295B9D364BD76A81DD34AA5D5C965BB1FC27A520.crl rsync://rpki-repo.registro.br/repo/4bNVhjyvsE6TAzkxTZWGGj6R1bbvyY1cJq3Typ8R859Q/1/295B9D364BD76A81DD34AA5D5C965BB1FC27A520.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/295B9D364BD76A81DD34AA5D5C965BB1FC27A520.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 02 Nov 2026 13:17:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:bd:1b:2d:b9:7b:ce:16:1e:12:66:a9:19:49:f0:0a:a6:10:4b:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=295B9D364BD76A81DD34AA5D5C965BB1FC27A520 Validity Not Before: Nov 1 10:22:15 2026 GMT Not After : Nov 2 13:17:15 2026 GMT Subject: CN=8BEBEA190396EDF0CAF1761C15D5FE313789CA6D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c8:74:0e:5b:b1:ad:a3:51:18:b2:74:5a:49: c4:8b:12:6a:a2:c7:36:f6:e3:7e:d0:82:df:65:91: 1e:f7:c9:08:bf:d3:e2:3c:7c:99:3f:b0:c8:5b:1a: 67:74:d4:d2:c1:2d:77:44:98:9a:90:3c:44:86:d7: 21:8b:11:a4:33:07:e6:b6:a9:00:59:43:d6:87:55: a0:b6:fe:80:98:81:5d:66:78:3a:72:98:ca:6f:bd: cd:3e:3b:01:9e:e4:39:dc:fc:65:98:48:84:1e:c4: fd:61:de:e7:21:f3:d9:db:56:5d:99:6a:4f:bf:5e: 48:ea:5c:91:1c:d6:49:a3:64:a3:1d:0a:be:c3:7f: 97:7d:db:df:6c:d1:d5:9e:76:40:89:a5:a1:ed:a3: aa:bb:0c:65:55:83:00:04:0a:88:17:95:f1:7a:b0: 4a:cb:33:2c:50:f9:86:d7:55:74:75:9d:f3:be:a7: f5:89:fa:71:88:c9:d0:fc:41:20:d7:1b:be:d3:40: b3:15:76:04:8f:b7:5c:86:4c:9f:ae:3a:a8:b2:2c: 8b:54:0f:1b:67:81:22:68:de:c5:ec:42:e7:b8:47: 89:e8:dc:67:be:03:25:bc:13:b5:c4:a5:90:b8:b6: 9f:31:5c:60:2e:5c:3d:ae:ee:3f:b8:fa:2e:31:ad: 56:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:EB:EA:19:03:96:ED:F0:CA:F1:76:1C:15:D5:FE:31:37:89:CA:6D X509v3 Authority Key Identifier: keyid:29:5B:9D:36:4B:D7:6A:81:DD:34:AA:5D:5C:96:5B:B1:FC:27:A5:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4bNVhjyvsE6TAzkxTZWGGj6R1bbvyY1cJq3Typ8R859Q/1/295B9D364BD76A81DD34AA5D5C965BB1FC27A520.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/295B9D364BD76A81DD34AA5D5C965BB1FC27A520.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4bNVhjyvsE6TAzkxTZWGGj6R1bbvyY1cJq3Typ8R859Q/1/295B9D364BD76A81DD34AA5D5C965BB1FC27A520.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:93:40:63:f3:78:dd:ab:16:b8:a0:12:a6:68:b2:80:25:40: c4:8d:58:c0:b0:a0:b0:3c:6b:af:9d:38:23:ac:04:7c:6d:fb: 1d:82:e9:d8:d7:89:bb:e1:45:a0:b3:29:b2:de:73:21:51:59: 06:4c:10:4b:29:a4:dd:7f:45:65:d5:7c:45:fd:c7:c9:fb:02: 40:e2:be:48:10:07:e0:1e:53:88:41:46:00:be:62:5d:03:25: 64:b1:48:05:e7:83:99:ae:eb:a3:e0:35:22:0f:22:34:87:fe: bf:10:e5:e2:8f:6b:d8:4b:6f:c0:03:3e:65:df:b9:ed:de:b0: c1:c7:2d:ad:9a:62:04:28:d1:b0:e0:d7:e9:36:6e:75:fe:e2: 8a:85:c5:df:e6:e9:ea:97:10:ef:3b:5d:47:6d:60:81:6c:2f: 99:63:75:9c:ad:87:9c:f5:7a:50:85:fc:a7:46:9d:31:fb:f3: 35:ba:7d:84:48:db:4b:ef:4d:29:21:cd:07:4f:b4:54:d1:72: ac:4e:ad:35:3c:8e:8e:18:5f:13:ca:5e:3b:e9:dd:d3:a3:00: 50:a6:cd:2b:e1:a3:b2:ce:71:f2:af:d6:d7:0b:f6:e6:b7:9e: 37:ac:f2:cc:e8:6c:7f:1d:31:9f:99:47:88:2b:24:f8:10:ab: 3c:d7:c3:92 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUN70bLbl7zhYeEmapGUnwCqYQSzgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk1QjlEMzY0QkQ3NkE4MUREMzRBQTVENUM5NjVCQjFG QzI3QTUyMDAeFw0yNjExMDExMDIyMTVaFw0yNjExMDIxMzE3MTVaMDMxMTAvBgNV BAMTKDhCRUJFQTE5MDM5NkVERjBDQUYxNzYxQzE1RDVGRTMxMzc4OUNBNkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCyHQOW7Gto1EYsnRaScSLEmqi xzb2437Qgt9lkR73yQi/0+I8fJk/sMhbGmd01NLBLXdEmJqQPESG1yGLEaQzB+a2 qQBZQ9aHVaC2/oCYgV1meDpymMpvvc0+OwGe5Dnc/GWYSIQexP1h3uch89nbVl2Z ak+/XkjqXJEc1kmjZKMdCr7Df5d9299s0dWedkCJpaHto6q7DGVVgwAECogXlfF6 sErLMyxQ+YbXVXR1nfO+p/WJ+nGIydD8QSDXG77TQLMVdgSPt1yGTJ+uOqiyLItU DxtngSJo3sXsQue4R4no3Ge+AyW8E7XEpZC4tp8xXGAuXD2u7j+4+i4xrVYPAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUi+vqGQOW7fDK8XYcFdX+MTeJym0wHwYDVR0j BBgwFoAUKVudNkvXaoHdNKpdXJZbsfwnpSAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNGJOVmhqeXZzRTZUQXpreFRaV0dHajZSMWJidnlZMWNKcTNUeXA4Ujg1 OVEvMS8yOTVCOUQzNjRCRDc2QTgxREQzNEFBNUQ1Qzk2NUJCMUZDMjdBNTIwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI5NUI5RDM2NEJENzZBODFE RDM0QUE1RDVDOTY1QkIxRkMyN0E1MjAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NGJOVmhqeXZzRTZUQXpreFRaV0dHajZSMWJidnlZMWNKcTNUeXA4Ujg1OVEvMS8y OTVCOUQzNjRCRDc2QTgxREQzNEFBNUQ1Qzk2NUJCMUZDMjdBNTIwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAK5NAY/N43asWuKASpmiygCVAxI1YwLCgsDxrr504I6wEfG37HYLp2NeJu+FF oLMpst5zIVFZBkwQSymk3X9FZdV8Rf3HyfsCQOK+SBAH4B5TiEFGAL5iXQMlZLFI BeeDma7ro+A1Ig8iNIf+vxDl4o9r2EtvwAM+Zd+57d6wwcctrZpiBCjRsODX6TZu df7iioXF3+bp6pcQ7ztdR21ggWwvmWN1nK2HnPV6UIX8p0adMfvzNbp9hEjbS+9N KSHNB0+0VNFyrE6tNTyOjhhfE8peO+nd06MAUKbNK+Gjss5x8q/W1wv25reeN6zy zOhsfx0xn5lHiCsk+BCrPNfDkg== -----END CERTIFICATE-----Generated at Mon Nov 2 02:34:01 2026 by rpki-client