$ rpki-client -vvvf rpki-repo.registro.br/repo/5apg5NGAXyqVGhE12Z92Aj1AMon2nus1Hku69a9GNLbL/0/2D1AC01C4B7BCEED5054EF21F8FACC30C80FE98E.mft File: 2D1AC01C4B7BCEED5054EF21F8FACC30C80FE98E.mft (raw, json) Hash identifier: +lnmGCSWz6165uGWGmaOKX8XCTKxmjFKpcVadcNOa2c= Subject key identifier: C7:AE:78:E4:9E:6A:91:13:E3:6B:2D:13:6A:54:71:35:76:0B:C1:02 Authority key identifier: 2D:1A:C0:1C:4B:7B:CE:ED:50:54:EF:21:F8:FA:CC:30:C8:0F:E9:8E Certificate issuer: /CN=2D1AC01C4B7BCEED5054EF21F8FACC30C80FE98E Certificate serial: 19429110814AD067122D6A6F39BCDBA0ECD7BF99 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D1AC01C4B7BCEED5054EF21F8FACC30C80FE98E.cer Subject info access: rsync://rpki-repo.registro.br/repo/5apg5NGAXyqVGhE12Z92Aj1AMon2nus1Hku69a9GNLbL/0/2D1AC01C4B7BCEED5054EF21F8FACC30C80FE98E.mft Manifest number: 1F Signing time: Tue 06 Oct 2026 06:26:16 +0000 Manifest this update: Tue 06 Oct 2026 06:21:16 +0000 Manifest next update: Wed 07 Oct 2026 08:03:16 +0000 Files and hashes: 1: 323830343a336330633a3a2f33322d3332203d3e20323636313837.roa (hash: uxgpx/cTEzjaxvYdPn/p3a4ISiXNx75wRFyo4YCac4s=) 2: 3136302e32302e38392e302f32342d3234203d3e20323636313837.roa (hash: dNlm2b7zELdMfkJUpnTSSYJaeUllxlXxulhHQRjRSUI=) 3: 3136302e32302e39312e302f32342d3234203d3e20323636313837.roa (hash: 9wdPYP7ciCNpiOBQAWXdUiXtk243EGPORGWL4duqp+o=) 4: 3136302e32302e38382e302f32342d3234203d3e20323636313837.roa (hash: JR2Td+PL4lTGBVbyvARmTMXzkfoQuCOM+0PSYvZScSo=) 5: 2D1AC01C4B7BCEED5054EF21F8FACC30C80FE98E.crl (hash: PBjTJzFh65jwYCoYyEKzVDBkNXq+XhVUabl94cgyLDI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5apg5NGAXyqVGhE12Z92Aj1AMon2nus1Hku69a9GNLbL/0/2D1AC01C4B7BCEED5054EF21F8FACC30C80FE98E.crl rsync://rpki-repo.registro.br/repo/5apg5NGAXyqVGhE12Z92Aj1AMon2nus1Hku69a9GNLbL/0/2D1AC01C4B7BCEED5054EF21F8FACC30C80FE98E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D1AC01C4B7BCEED5054EF21F8FACC30C80FE98E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 07 Oct 2026 08:03:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:42:91:10:81:4a:d0:67:12:2d:6a:6f:39:bc:db:a0:ec:d7:bf:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D1AC01C4B7BCEED5054EF21F8FACC30C80FE98E Validity Not Before: Oct 6 06:21:16 2026 GMT Not After : Oct 7 08:03:16 2026 GMT Subject: CN=C7AE78E49E6A9113E36B2D136A547135760BC102 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a5:fd:62:5c:b0:65:dd:d2:a0:67:35:d9:7b: 7d:66:a3:2f:09:31:bb:84:4e:50:f6:3b:39:bc:ba: c9:74:77:67:b7:b4:c6:aa:81:d9:16:07:6d:dc:a4: 89:37:e1:01:95:e3:64:5e:ea:c5:02:7d:e5:a5:01: 79:ce:81:d6:8f:ef:83:88:8a:a4:93:3e:83:f7:aa: cf:48:41:75:78:ac:bf:a3:16:3c:af:1c:d5:1f:14: fe:03:09:4d:12:ca:31:4a:6f:a2:1a:ee:ad:31:70: 39:8a:e8:24:74:c6:6f:52:83:1e:94:dd:22:6a:bd: ad:1e:24:e6:0b:5c:6d:de:2d:52:c2:97:1e:66:53: 9d:04:a5:dc:66:ef:4e:a8:f2:67:a7:f8:82:57:b7: cb:f8:8a:a5:11:40:1c:42:0f:05:8e:d8:9a:e6:b5: ae:e8:14:13:b0:55:2d:94:23:1c:14:52:af:52:b7: b8:ab:22:40:b3:3c:75:72:0b:14:d4:da:70:4c:85: 85:7b:79:52:3f:c7:68:c3:d7:1d:47:be:0b:7c:b5: 8f:c7:71:21:07:e0:e7:92:09:c0:f2:45:c4:41:5b: 8f:cd:32:e6:fe:28:6e:59:08:6b:e8:46:ab:21:7c: b9:d5:a8:24:d3:ec:f1:a5:57:13:e7:98:36:92:fa: 97:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:AE:78:E4:9E:6A:91:13:E3:6B:2D:13:6A:54:71:35:76:0B:C1:02 X509v3 Authority Key Identifier: keyid:2D:1A:C0:1C:4B:7B:CE:ED:50:54:EF:21:F8:FA:CC:30:C8:0F:E9:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5apg5NGAXyqVGhE12Z92Aj1AMon2nus1Hku69a9GNLbL/0/2D1AC01C4B7BCEED5054EF21F8FACC30C80FE98E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D1AC01C4B7BCEED5054EF21F8FACC30C80FE98E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5apg5NGAXyqVGhE12Z92Aj1AMon2nus1Hku69a9GNLbL/0/2D1AC01C4B7BCEED5054EF21F8FACC30C80FE98E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:f5:fa:95:08:cf:00:5c:a1:b1:da:6c:eb:58:1a:6b:7f:bf: 3a:d6:a9:52:a1:b9:45:56:17:3a:3a:a8:36:23:de:af:88:3a: 36:55:dc:02:09:3e:51:25:f1:85:a6:ac:59:58:85:24:bd:16: 0d:a6:e5:d0:31:3c:23:3e:7e:3a:bf:f9:e2:23:be:0d:4f:a9: 6a:ca:f6:80:38:62:8c:78:26:24:d7:b3:96:68:0b:e9:61:e1: 42:ab:36:83:73:a7:3b:2f:da:e5:26:9e:2a:a2:01:1e:b9:3e: b6:5b:f3:6c:ba:01:ad:05:bb:f5:0f:9e:21:77:d1:e7:a4:17: 4d:d5:e2:8d:56:c5:28:18:55:b9:26:e6:9a:e3:51:35:93:9c: 04:21:76:9d:eb:f0:7a:ca:1f:58:88:77:3d:70:ab:48:70:52: 87:4f:db:f1:0d:a6:4d:ac:f0:91:ce:24:f1:e0:b8:54:d4:44: b2:09:ad:a6:5a:47:41:0e:f1:44:06:cf:ec:17:27:2d:b5:d5: 1b:0f:f9:43:ba:d1:17:68:77:cf:31:d5:35:88:c5:6b:e3:22: 40:81:53:25:44:14:d1:3f:74:4b:f1:53:bc:58:14:f9:1f:c0: fb:2d:a0:e0:b4:3c:5a:a4:dd:43:10:db:0c:b3:b7:86:5d:b4: a0:2d:6e:42 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUGUKREIFK0GcSLWpvObzboOzXv5kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQxQUMwMUM0QjdCQ0VFRDUwNTRFRjIxRjhGQUNDMzBD ODBGRTk4RTAeFw0yNjEwMDYwNjIxMTZaFw0yNjEwMDcwODAzMTZaMDMxMTAvBgNV BAMTKEM3QUU3OEU0OUU2QTkxMTNFMzZCMkQxMzZBNTQ3MTM1NzYwQkMxMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCupf1iXLBl3dKgZzXZe31moy8J MbuETlD2Ozm8usl0d2e3tMaqgdkWB23cpIk34QGV42Re6sUCfeWlAXnOgdaP74OI iqSTPoP3qs9IQXV4rL+jFjyvHNUfFP4DCU0SyjFKb6Ia7q0xcDmK6CR0xm9Sgx6U 3SJqva0eJOYLXG3eLVLClx5mU50Epdxm706o8men+IJXt8v4iqURQBxCDwWO2Jrm ta7oFBOwVS2UIxwUUq9St7irIkCzPHVyCxTU2nBMhYV7eVI/x2jD1x1Hvgt8tY/H cSEH4OeSCcDyRcRBW4/NMub+KG5ZCGvoRqshfLnVqCTT7PGlVxPnmDaS+pfrAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUx6545J5qkRPjay0TalRxNXYLwQIwHwYDVR0j BBgwFoAULRrAHEt7zu1QVO8h+PrMMMgP6Y4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNWFwZzVOR0FYeXFWR2hFMTJaOTJBajFBTW9uMm51czFIa3U2OWE5R05M YkwvMC8yRDFBQzAxQzRCN0JDRUVENTA1NEVGMjFGOEZBQ0MzMEM4MEZFOThFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJEMUFDMDFDNEI3QkNFRUQ1 MDU0RUYyMUY4RkFDQzMwQzgwRkU5OEUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NWFwZzVOR0FYeXFWR2hFMTJaOTJBajFBTW9uMm51czFIa3U2OWE5R05MYkwvMC8y RDFBQzAxQzRCN0JDRUVENTA1NEVGMjFGOEZBQ0MzMEM4MEZFOThFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiPX6lQjPAFyhsdps61gaa3+/OtapUqG5RVYXOjqoNiPer4g6NlXcAgk+USXx haasWViFJL0WDabl0DE8Iz5+Or/54iO+DU+pasr2gDhijHgmJNezlmgL6WHhQqs2 g3OnOy/a5SaeKqIBHrk+tlvzbLoBrQW79Q+eIXfR56QXTdXijVbFKBhVuSbmmuNR NZOcBCF2nevwesofWIh3PXCrSHBSh0/b8Q2mTazwkc4k8eC4VNREsgmtplpHQQ7x RAbP7BcnLbXVGw/5Q7rRF2h3zzHVNYjFa+MiQIFTJUQU0T90S/FTvFgU+R/A+y2g 4LQ8WqTdQxDbDLO3hl20oC1uQg== -----END CERTIFICATE-----Generated at Tue Oct 6 21:27:12 2026 by rpki-client