$ rpki-client -vvvf rpki-repo.registro.br/repo/5L33C9wACnTmqze7cHVok79UHX3NB55xUsXabjxqHsfb/0/9A59E428DA1E76D55074AE4987DC8EDF84F610B6.mft File: 9A59E428DA1E76D55074AE4987DC8EDF84F610B6.mft (raw, json) Hash identifier: w07H6LXhEV/+Od0PdAPfkEscSZpQYbMSQQbxjS4/pGA= Subject key identifier: 17:AC:0A:59:9C:4A:F0:D5:FD:17:7C:BC:7B:56:87:1A:AD:49:85:36 Authority key identifier: 9A:59:E4:28:DA:1E:76:D5:50:74:AE:49:87:DC:8E:DF:84:F6:10:B6 Certificate issuer: /CN=9A59E428DA1E76D55074AE4987DC8EDF84F610B6 Certificate serial: 788DFDE253D3A29992870C047E6E58AF802C7A55 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A59E428DA1E76D55074AE4987DC8EDF84F610B6.cer Subject info access: rsync://rpki-repo.registro.br/repo/5L33C9wACnTmqze7cHVok79UHX3NB55xUsXabjxqHsfb/0/9A59E428DA1E76D55074AE4987DC8EDF84F610B6.mft Manifest number: 017F Signing time: Sun 01 Nov 2026 11:47:51 +0000 Manifest this update: Sun 01 Nov 2026 11:42:51 +0000 Manifest next update: Mon 02 Nov 2026 13:28:51 +0000 Files and hashes: 1: 3133382e3132312e3230382e302f32322d3234203d3e20323635333135.roa (hash: ej1bquQYsS2bNscIvx/U/bIicK/70cAMW+ATxHQxljw=) 2: 323830343a326466383a3a2f33322d3438203d3e20323635333135.roa (hash: Ii24evX3krHRMKAE5J/HgutcQ94oYXsgcfCCpd4oVWY=) 3: 9A59E428DA1E76D55074AE4987DC8EDF84F610B6.crl (hash: anjP8AJNDQGhJexxE0oRVnrM9wCakstCXLT+FB9RbBY=) 4: 3136382e3132312e3137362e302f32322d3234203d3e20323635333135.roa (hash: OqIeDc+l9G4nk6Gswf30OejkNhYPr9wz9fk+SLUM1jQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5L33C9wACnTmqze7cHVok79UHX3NB55xUsXabjxqHsfb/0/9A59E428DA1E76D55074AE4987DC8EDF84F610B6.crl rsync://rpki-repo.registro.br/repo/5L33C9wACnTmqze7cHVok79UHX3NB55xUsXabjxqHsfb/0/9A59E428DA1E76D55074AE4987DC8EDF84F610B6.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A59E428DA1E76D55074AE4987DC8EDF84F610B6.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 02 Nov 2026 13:28:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:8d:fd:e2:53:d3:a2:99:92:87:0c:04:7e:6e:58:af:80:2c:7a:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A59E428DA1E76D55074AE4987DC8EDF84F610B6 Validity Not Before: Nov 1 11:42:51 2026 GMT Not After : Nov 2 13:28:51 2026 GMT Subject: CN=17AC0A599C4AF0D5FD177CBC7B56871AAD498536 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:3c:f9:9c:4d:23:bd:f2:2b:a7:27:39:a7:eb: 57:f0:71:f9:a8:67:94:62:0d:b8:3b:32:cc:1b:cf: 80:56:29:d4:24:1d:11:cd:91:af:64:ed:8a:35:9f: c2:c6:d1:51:a8:9d:46:03:8b:ff:79:eb:67:e7:fb: 43:cb:53:67:62:b5:4a:5e:b6:1c:bd:54:1c:0f:19: fc:b1:0e:96:f8:23:2b:45:72:54:a8:a5:e4:b7:b3: ab:97:97:a4:e0:e6:0d:92:ea:b3:19:6c:af:53:bf: 80:61:0f:a4:c4:d5:05:1e:b1:f7:6c:34:50:1b:79: 20:f5:fa:e6:4f:9d:87:41:a8:88:1e:20:96:2d:3e: 8e:bc:af:9a:95:19:c8:12:13:32:c6:42:9a:ba:a3: b4:07:09:fa:38:7a:31:f9:0c:64:27:c7:8f:ae:3f: 66:bb:2f:b8:68:a6:aa:a7:b4:5c:b6:ad:97:48:8e: f1:f0:8b:5a:04:63:72:a7:7f:96:71:f0:5b:89:cb: b8:74:3d:8f:f3:b9:b9:da:a2:2d:fc:09:28:94:4c: 3a:ab:0e:5a:da:27:93:de:0d:7b:7b:06:07:15:f2: 6c:be:ad:e4:2e:80:b1:24:88:c0:9d:d6:63:3d:48: db:48:72:f0:96:c6:8c:d9:e5:06:b3:ab:fe:bc:17: b8:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:AC:0A:59:9C:4A:F0:D5:FD:17:7C:BC:7B:56:87:1A:AD:49:85:36 X509v3 Authority Key Identifier: keyid:9A:59:E4:28:DA:1E:76:D5:50:74:AE:49:87:DC:8E:DF:84:F6:10:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5L33C9wACnTmqze7cHVok79UHX3NB55xUsXabjxqHsfb/0/9A59E428DA1E76D55074AE4987DC8EDF84F610B6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A59E428DA1E76D55074AE4987DC8EDF84F610B6.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5L33C9wACnTmqze7cHVok79UHX3NB55xUsXabjxqHsfb/0/9A59E428DA1E76D55074AE4987DC8EDF84F610B6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:5f:40:d4:93:95:1b:0a:dc:af:0f:0e:dc:b7:09:4c:b7:a1: ae:ae:97:64:13:bd:8b:39:02:d0:97:95:3a:68:5e:52:4b:25: 0c:43:88:2d:89:6a:72:b9:0f:de:bd:79:cf:93:74:d4:31:54: 30:bb:b4:6b:f8:c3:a2:71:a0:db:50:fb:b7:79:4a:7d:c5:c6: 4a:a3:e7:8a:4b:43:2e:36:bd:c6:67:36:4a:57:92:ae:6d:67: fb:ee:0e:60:07:25:86:07:2d:6b:99:6a:6d:71:85:cf:63:72: 9a:0c:69:b9:b1:03:ab:96:d9:db:11:43:84:a1:86:8b:6c:ad: af:0f:00:91:35:25:9a:db:3c:ba:9a:5d:fa:7f:5f:db:a6:4b: 04:d0:43:d6:0a:1e:ea:b0:d1:2c:a0:a5:cd:1c:bc:e3:e9:a8: d5:5b:44:f4:f8:25:4b:bb:4a:e7:2e:7e:9b:db:b5:2f:ba:ef: 9b:fd:6f:ed:ac:1c:60:5c:1a:bc:1f:0b:3e:7f:82:f9:9c:45: b1:42:3a:30:cd:6a:d6:d3:71:91:81:63:96:d7:1a:64:70:ea: b7:38:a0:ac:3a:cf:bb:41:4b:5d:2e:16:a7:96:10:75:12:3b: 21:81:c1:7b:0f:d4:6b:e7:4c:5f:bb:b1:34:44:f0:f2:63:8b: d7:6a:7a:9a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUeI394lPTopmShwwEfm5Yr4AselUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE1OUU0MjhEQTFFNzZENTUwNzRBRTQ5ODdEQzhFREY4 NEY2MTBCNjAeFw0yNjExMDExMTQyNTFaFw0yNjExMDIxMzI4NTFaMDMxMTAvBgNV BAMTKDE3QUMwQTU5OUM0QUYwRDVGRDE3N0NCQzdCNTY4NzFBQUQ0OTg1MzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsPPmcTSO98iunJzmn61fwcfmo Z5RiDbg7Mswbz4BWKdQkHRHNka9k7Yo1n8LG0VGonUYDi/9562fn+0PLU2ditUpe thy9VBwPGfyxDpb4IytFclSopeS3s6uXl6Tg5g2S6rMZbK9Tv4BhD6TE1QUesfds NFAbeSD1+uZPnYdBqIgeIJYtPo68r5qVGcgSEzLGQpq6o7QHCfo4ejH5DGQnx4+u P2a7L7hopqqntFy2rZdIjvHwi1oEY3Knf5Zx8FuJy7h0PY/zubnaoi38CSiUTDqr DlraJ5PeDXt7BgcV8my+reQugLEkiMCd1mM9SNtIcvCWxozZ5Qazq/68F7hPAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUF6wKWZxK8NX9F3y8e1aHGq1JhTYwHwYDVR0j BBgwFoAUmlnkKNoedtVQdK5Jh9yO34T2ELYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNUwzM0M5d0FDblRtcXplN2NIVm9rNzlVSFgzTkI1NXhVc1hhYmp4cUhz ZmIvMC85QTU5RTQyOERBMUU3NkQ1NTA3NEFFNDk4N0RDOEVERjg0RjYxMEI2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlBNTlFNDI4REExRTc2RDU1 MDc0QUU0OTg3REM4RURGODRGNjEwQjYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NUwzM0M5d0FDblRtcXplN2NIVm9rNzlVSFgzTkI1NXhVc1hhYmp4cUhzZmIvMC85 QTU5RTQyOERBMUU3NkQ1NTA3NEFFNDk4N0RDOEVERjg0RjYxMEI2Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZF9A1JOVGwrcrw8O3LcJTLehrq6XZBO9izkC0JeVOmheUkslDEOILYlqcrkP 3r15z5N01DFUMLu0a/jDonGg21D7t3lKfcXGSqPniktDLja9xmc2SleSrm1n++4O YAclhgcta5lqbXGFz2NymgxpubEDq5bZ2xFDhKGGi2ytrw8AkTUlmts8uppd+n9f 26ZLBNBD1goe6rDRLKClzRy84+mo1VtE9PglS7tK5y5+m9u1L7rvm/1v7awcYFwa vB8LPn+C+ZxFsUI6MM1q1tNxkYFjltcaZHDqtzigrDrPu0FLXS4Wp5YQdRI7IYHB ew/Ua+dMX7uxNETw8mOL12p6mg== -----END CERTIFICATE-----Generated at Sun Nov 1 19:29:15 2026 by rpki-client