$ rpki-client -vvvf rpki-repo.registro.br/repo/5SZ8cpe6rRkTgBPN43JZ5wiBH6ARZEeHb5a9RRT6FJVb/0/E2820F5C1A318BD4BE17A39BE0F7E2671AF29CAE.mft File: E2820F5C1A318BD4BE17A39BE0F7E2671AF29CAE.mft (raw, json) Hash identifier: b9FeYpH6MS/dPmlABxvhNGOpCJDJ55irC4c8bDv/exM= Subject key identifier: FE:A5:DF:C3:04:D6:9F:BA:BC:70:C5:E9:6A:B2:03:C7:AF:BC:33:8D Authority key identifier: E2:82:0F:5C:1A:31:8B:D4:BE:17:A3:9B:E0:F7:E2:67:1A:F2:9C:AE Certificate issuer: /CN=E2820F5C1A318BD4BE17A39BE0F7E2671AF29CAE Certificate serial: 1C74E2B54425560234B308E41D08A1BEE981FCA5 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E2820F5C1A318BD4BE17A39BE0F7E2671AF29CAE.cer Subject info access: rsync://rpki-repo.registro.br/repo/5SZ8cpe6rRkTgBPN43JZ5wiBH6ARZEeHb5a9RRT6FJVb/0/E2820F5C1A318BD4BE17A39BE0F7E2671AF29CAE.mft Manifest number: 21 Signing time: Sun 11 Oct 2026 15:01:07 +0000 Manifest this update: Sun 11 Oct 2026 14:56:07 +0000 Manifest next update: Mon 12 Oct 2026 16:38:07 +0000 Files and hashes: 1: 323830343a393661383a3130303a3a2f34302d3430203d3e20323734333530.roa (hash: exLiZfFcsIsOd/G2xfMOlnlAEdyEaTm84KA3otsLdHE=) 2: 323830343a393661383a3a2f34302d3430203d3e20323734333530.roa (hash: rPgG7m6qVMN2Y6Qu7Tv3xfRXE3+DaTBh+zTOnvLc5DU=) 3: E2820F5C1A318BD4BE17A39BE0F7E2671AF29CAE.crl (hash: zcae80UgBMqBcYh7Ig8x2v+AroWd3V7EVX9HCQwpbIM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5SZ8cpe6rRkTgBPN43JZ5wiBH6ARZEeHb5a9RRT6FJVb/0/E2820F5C1A318BD4BE17A39BE0F7E2671AF29CAE.crl rsync://rpki-repo.registro.br/repo/5SZ8cpe6rRkTgBPN43JZ5wiBH6ARZEeHb5a9RRT6FJVb/0/E2820F5C1A318BD4BE17A39BE0F7E2671AF29CAE.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E2820F5C1A318BD4BE17A39BE0F7E2671AF29CAE.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 12 Oct 2026 16:38:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:74:e2:b5:44:25:56:02:34:b3:08:e4:1d:08:a1:be:e9:81:fc:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E2820F5C1A318BD4BE17A39BE0F7E2671AF29CAE Validity Not Before: Oct 11 14:56:07 2026 GMT Not After : Oct 12 16:38:07 2026 GMT Subject: CN=FEA5DFC304D69FBABC70C5E96AB203C7AFBC338D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:8d:a3:34:02:98:db:d6:ef:69:27:df:fe:01: 72:51:32:53:0e:df:12:24:05:b6:5e:de:84:67:1d: 13:35:ac:8e:10:54:10:4c:c2:29:2d:34:90:3b:9e: 48:77:eb:05:12:ce:57:6f:8e:7c:84:9e:89:bc:1e: 27:d8:56:da:38:71:80:0f:4a:d3:b6:97:7d:67:0a: 1a:29:b0:96:b5:6d:4b:d6:33:04:6c:98:91:22:70: 78:b0:de:9e:dd:1b:58:92:a5:3b:71:aa:28:0f:99: 3d:d2:00:95:5a:27:16:23:44:70:50:6a:d7:ad:f0: bc:94:98:a3:1d:36:ec:2f:2b:1a:9a:35:11:47:19: b8:15:8a:d8:f3:ea:94:12:c1:a7:41:f3:f5:d4:ee: 3c:e8:71:05:ee:48:b4:f4:d1:44:0a:b1:31:86:e0: f7:0e:3f:8e:23:fd:dd:bf:38:74:69:fd:ff:f6:15: dd:d7:bc:68:25:ae:c3:5e:69:e3:e6:0b:11:0f:28: 86:a1:74:fd:a8:36:84:90:34:32:8f:bc:66:7d:f3: a4:20:67:f5:74:42:e6:b8:90:f7:44:c0:31:f4:4e: 2e:88:09:ff:0b:aa:76:ed:35:3d:c6:49:ad:8d:da: f2:61:6e:91:50:d1:ba:d8:27:c7:09:3f:b6:84:ce: 22:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:A5:DF:C3:04:D6:9F:BA:BC:70:C5:E9:6A:B2:03:C7:AF:BC:33:8D X509v3 Authority Key Identifier: keyid:E2:82:0F:5C:1A:31:8B:D4:BE:17:A3:9B:E0:F7:E2:67:1A:F2:9C:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5SZ8cpe6rRkTgBPN43JZ5wiBH6ARZEeHb5a9RRT6FJVb/0/E2820F5C1A318BD4BE17A39BE0F7E2671AF29CAE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E2820F5C1A318BD4BE17A39BE0F7E2671AF29CAE.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5SZ8cpe6rRkTgBPN43JZ5wiBH6ARZEeHb5a9RRT6FJVb/0/E2820F5C1A318BD4BE17A39BE0F7E2671AF29CAE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d9:73:fc:9e:37:5d:50:ed:71:8a:ba:da:7f:ad:5d:f1:58:3e: 45:da:1e:d6:23:20:96:2d:0e:ed:17:27:4d:15:7d:e9:d0:2f: de:30:ea:e3:73:8e:ba:5c:c6:fa:eb:2b:98:1c:59:6a:25:f2: e3:e5:1c:27:fd:62:49:0c:4c:48:1b:fa:8e:f8:5f:b9:51:46: 11:14:2e:6c:09:ed:4b:3c:e5:df:40:3a:f1:04:b3:cd:29:0b: 86:8e:22:f5:2c:77:a1:b3:1d:a6:dc:7b:a4:91:46:71:0c:77: 80:da:3a:5d:96:45:93:ba:4a:2f:29:8f:85:11:0a:fb:3f:30: c1:8d:2c:14:72:45:3b:c9:44:11:ce:80:4d:3b:33:0b:14:eb: c8:9f:3a:06:d6:16:46:48:1f:c0:64:f2:18:1f:e4:e4:02:19: c7:27:f2:d5:fe:06:40:8b:70:56:ce:63:b8:de:33:7c:26:4d: 3e:be:29:f6:ef:ca:95:d6:04:bb:9f:77:d5:cd:3f:20:93:de: c1:09:9e:8e:3f:4e:ef:7e:97:d3:45:1f:e8:d1:75:c9:1c:92: 16:6f:d8:04:91:0a:a2:cf:33:d0:d5:f0:30:fe:43:7e:41:cb: 51:fd:1a:12:0f:a5:2b:36:e3:22:24:96:10:07:9b:8d:2a:7f: 27:97:4b:9e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUHHTitUQlVgI0swjkHQihvumB/KUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTI4MjBGNUMxQTMxOEJENEJFMTdBMzlCRTBGN0UyNjcx QUYyOUNBRTAeFw0yNjEwMTExNDU2MDdaFw0yNjEwMTIxNjM4MDdaMDMxMTAvBgNV BAMTKEZFQTVERkMzMDRENjlGQkFCQzcwQzVFOTZBQjIwM0M3QUZCQzMzOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvjaM0Apjb1u9pJ9/+AXJRMlMO 3xIkBbZe3oRnHRM1rI4QVBBMwiktNJA7nkh36wUSzldvjnyEnom8HifYVto4cYAP StO2l31nChopsJa1bUvWMwRsmJEicHiw3p7dG1iSpTtxqigPmT3SAJVaJxYjRHBQ atet8LyUmKMdNuwvKxqaNRFHGbgVitjz6pQSwadB8/XU7jzocQXuSLT00UQKsTGG 4PcOP44j/d2/OHRp/f/2Fd3XvGglrsNeaePmCxEPKIahdP2oNoSQNDKPvGZ986Qg Z/V0Qua4kPdEwDH0Ti6ICf8LqnbtNT3GSa2N2vJhbpFQ0brYJ8cJP7aEziIDAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU/qXfwwTWn7q8cMXparIDx6+8M40wHwYDVR0j BBgwFoAU4oIPXBoxi9S+F6Ob4PfiZxrynK4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNVNaOGNwZTZyUmtUZ0JQTjQzSlo1d2lCSDZBUlpFZUhiNWE5UlJUNkZK VmIvMC9FMjgyMEY1QzFBMzE4QkQ0QkUxN0EzOUJFMEY3RTI2NzFBRjI5Q0FFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0UyODIwRjVDMUEzMThCRDRC RTE3QTM5QkUwRjdFMjY3MUFGMjlDQUUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NVNaOGNwZTZyUmtUZ0JQTjQzSlo1d2lCSDZBUlpFZUhiNWE5UlJUNkZKVmIvMC9F MjgyMEY1QzFBMzE4QkQ0QkUxN0EzOUJFMEY3RTI2NzFBRjI5Q0FFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEA2XP8njddUO1xirraf61d8Vg+Rdoe1iMgli0O7RcnTRV96dAv3jDq43OOulzG +usrmBxZaiXy4+UcJ/1iSQxMSBv6jvhfuVFGERQubAntSzzl30A68QSzzSkLho4i 9Sx3obMdptx7pJFGcQx3gNo6XZZFk7pKLymPhREK+z8wwY0sFHJFO8lEEc6ATTsz CxTryJ86BtYWRkgfwGTyGB/k5AIZxyfy1f4GQItwVs5juN4zfCZNPr4p9u/KldYE u5931c0/IJPewQmejj9O736X00Uf6NF1yRySFm/YBJEKos8z0NXwMP5DfkHLUf0a Eg+lKzbjIiSWEAebjSp/J5dLng== -----END CERTIFICATE-----Generated at Sun Oct 11 17:59:21 2026 by rpki-client