$ rpki-client -vvvf rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.mft File: 8BAE9C90EBC5082F802055EFAA6360C661BF85CE.mft (raw, json) Hash identifier: YJ31gWfUXgNoxU73khwID5JP5n9AzxeVDtVh5xv/dPM= Subject key identifier: F1:49:70:5C:C3:70:8C:DC:92:DE:5C:F0:4F:94:3F:65:0F:8A:4F:F3 Authority key identifier: 8B:AE:9C:90:EB:C5:08:2F:80:20:55:EF:AA:63:60:C6:61:BF:85:CE Certificate issuer: /CN=8BAE9C90EBC5082F802055EFAA6360C661BF85CE Certificate serial: 3C5F8DDBD35EEC11B8B8CE8C72681AAFA071148E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.cer Subject info access: rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.mft Manifest number: 04AF Signing time: Sun 01 Nov 2026 13:39:54 +0000 Manifest this update: Sun 01 Nov 2026 13:34:54 +0000 Manifest next update: Mon 02 Nov 2026 15:29:54 +0000 Files and hashes: 1: 3133382e3138352e3233362e302f32322d3234203d3e20323633393139.roa (hash: KYkcxrUCG5d2OgDxXVUc4Ip1FNkjOzjKHcyZw6KqQbM=) 2: 8BAE9C90EBC5082F802055EFAA6360C661BF85CE.crl (hash: akLJzVqXlCnhE3xdZX+ybY1vjtfE0bpO+X/anCaO21A=) 3: 3137302e302e3230382e302f32322d3234203d3e20323633393139.roa (hash: e4E3vMJmvzuFUBj3Gl3MPDMXsuyK/NWYw9KKWpE7NIU=) 4: 323830343a323762633a3a2f33322d3438203d3e20323633393139.roa (hash: w/YO1KIf4eo5zvFM926/mpG6uypq9a8w/nPaoqyoSig=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.crl rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 02 Nov 2026 15:29:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:5f:8d:db:d3:5e:ec:11:b8:b8:ce:8c:72:68:1a:af:a0:71:14:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BAE9C90EBC5082F802055EFAA6360C661BF85CE Validity Not Before: Nov 1 13:34:54 2026 GMT Not After : Nov 2 15:29:54 2026 GMT Subject: CN=F149705CC3708CDC92DE5CF04F943F650F8A4FF3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:4c:45:3a:54:5e:7f:af:68:1c:b5:bf:0e:fe: c6:c7:a3:16:c3:d0:4f:83:9c:f5:f9:65:ae:ac:01: 57:4b:22:9f:4a:b7:6b:41:6d:11:f7:49:58:65:2f: ee:1a:9b:5c:a2:0d:ef:67:01:d9:90:48:cb:90:a3: 54:ae:ab:d9:09:06:0c:59:9d:f0:65:e2:fb:37:f4: 36:fa:ac:d6:f0:41:d0:e8:cf:92:7e:04:1b:f2:d5: f0:3f:3f:b8:29:a7:a6:0f:f9:9f:38:23:ee:6b:74: ba:97:e6:47:f5:2a:4e:20:92:d9:ff:d1:e7:1b:44: a6:c4:5f:79:c4:8b:a2:7a:5a:58:da:7a:c4:25:2e: b8:1a:45:22:c4:6c:0f:45:29:22:bb:08:ec:32:b5: 14:6f:36:aa:e9:33:63:fc:b5:cf:ab:07:ed:8c:d5: 54:d2:b7:98:bb:0a:84:77:eb:de:52:1e:36:ec:13: 85:56:09:e3:01:54:04:81:54:6c:94:5f:83:a0:6d: 7f:dc:6b:b5:ce:84:22:68:3f:12:68:ba:7c:0a:3a: c4:db:ca:c5:89:a0:7a:29:5d:a1:9e:c6:1a:a5:95: a0:fb:03:d5:20:1c:49:43:a4:2e:3c:0a:9a:27:0b: 3c:23:90:5c:88:3d:35:6f:cb:8e:91:a6:c0:d9:75: c9:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:49:70:5C:C3:70:8C:DC:92:DE:5C:F0:4F:94:3F:65:0F:8A:4F:F3 X509v3 Authority Key Identifier: keyid:8B:AE:9C:90:EB:C5:08:2F:80:20:55:EF:AA:63:60:C6:61:BF:85:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:38:fe:ea:b1:34:d9:8f:47:ae:08:b9:6e:d8:31:d9:56:7e: d4:27:46:e0:a9:80:2b:60:94:66:e4:fa:59:d4:a4:1b:65:29: 12:c0:36:3f:6b:fd:ee:00:7c:4f:1f:a3:b2:b7:a9:47:64:f8: 28:ab:11:65:09:b8:f1:84:c3:9d:ac:38:ea:76:f5:f8:fb:36: a4:73:53:74:67:c8:4a:d1:ef:16:b5:98:14:78:60:1d:81:b4: 73:a2:e5:61:0a:4b:22:5b:2c:18:64:71:5c:19:2b:b0:27:44: 27:55:a5:73:ca:f2:c9:c8:84:f2:a1:9a:a1:dd:e6:d8:45:29: 21:c0:64:d1:07:e0:0e:a8:79:55:7a:07:2b:12:c3:16:66:b9: ba:60:e3:b3:ee:b1:62:ab:7d:05:25:e5:f3:fe:f3:a7:a1:8a: b1:50:50:b1:05:ff:69:35:60:de:64:9b:19:72:ae:21:dd:21: fa:51:c6:4d:32:a0:61:f4:81:bb:6c:f6:f1:87:71:e4:1c:17: 05:c8:70:e2:08:a4:1f:01:80:ea:d9:68:b6:c6:9c:12:d0:6b: e9:45:7d:bc:d9:26:a0:22:1b:b0:1e:ff:75:8b:58:54:c5:40: bb:ca:b8:55:56:c2:47:47:4b:1a:89:ab:cd:27:24:39:96:16: 81:3c:99:e7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUPF+N29Ne7BG4uM6Mcmgar6BxFI4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJBRTlDOTBFQkM1MDgyRjgwMjA1NUVGQUE2MzYwQzY2 MUJGODVDRTAeFw0yNjExMDExMzM0NTRaFw0yNjExMDIxNTI5NTRaMDMxMTAvBgNV BAMTKEYxNDk3MDVDQzM3MDhDREM5MkRFNUNGMDRGOTQzRjY1MEY4QTRGRjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChTEU6VF5/r2gctb8O/sbHoxbD 0E+DnPX5Za6sAVdLIp9Kt2tBbRH3SVhlL+4am1yiDe9nAdmQSMuQo1Suq9kJBgxZ nfBl4vs39Db6rNbwQdDoz5J+BBvy1fA/P7gpp6YP+Z84I+5rdLqX5kf1Kk4gktn/ 0ecbRKbEX3nEi6J6WljaesQlLrgaRSLEbA9FKSK7COwytRRvNqrpM2P8tc+rB+2M 1VTSt5i7CoR3695SHjbsE4VWCeMBVASBVGyUX4OgbX/ca7XOhCJoPxJounwKOsTb ysWJoHopXaGexhqllaD7A9UgHElDpC48CponCzwjkFyIPTVvy46RpsDZdcn7AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU8UlwXMNwjNyS3lzwT5Q/ZQ+KT/MwHwYDVR0j BBgwFoAUi66ckOvFCC+AIFXvqmNgxmG/hc4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNGNHMm9iRVVZZk1LaFdBWDQ1N25GZ3pvVFhZU3RpTEs0RGFFMzRWRFNL ODUvMS84QkFFOUM5MEVCQzUwODJGODAyMDU1RUZBQTYzNjBDNjYxQkY4NUNFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhCQUU5QzkwRUJDNTA4MkY4 MDIwNTVFRkFBNjM2MEM2NjFCRjg1Q0UuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NGNHMm9iRVVZZk1LaFdBWDQ1N25GZ3pvVFhZU3RpTEs0RGFFMzRWRFNLODUvMS84 QkFFOUM5MEVCQzUwODJGODAyMDU1RUZBQTYzNjBDNjYxQkY4NUNFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkTj+6rE02Y9Hrgi5btgx2VZ+1CdG4KmAK2CUZuT6WdSkG2UpEsA2P2v97gB8 Tx+jsrepR2T4KKsRZQm48YTDnaw46nb1+Ps2pHNTdGfIStHvFrWYFHhgHYG0c6Ll YQpLIlssGGRxXBkrsCdEJ1Wlc8ryyciE8qGaod3m2EUpIcBk0QfgDqh5VXoHKxLD Fma5umDjs+6xYqt9BSXl8/7zp6GKsVBQsQX/aTVg3mSbGXKuId0h+lHGTTKgYfSB u2z28Ydx5BwXBchw4gikHwGA6tlotsacEtBr6UV9vNkmoCIbsB7/dYtYVMVAu8q4 VVbCR0dLGomrzSckOZYWgTyZ5w== -----END CERTIFICATE-----Generated at Mon Nov 2 00:42:17 2026 by rpki-client