$ rpki-client -vvvf rpki-repo.registro.br/repo/8aiBaLPcPjrz9NHVhmEtyUa8MmznF41WFRxdWu4SYMYC/0/2BFE43B6FF62C8A8E2F366F5504AAC6D182D2B8B.mft File: 2BFE43B6FF62C8A8E2F366F5504AAC6D182D2B8B.mft (raw, json) Hash identifier: bF0vo0N4/6yq2JdWDKDe55dnGsztHPlUp3pxjLaDpqs= Subject key identifier: 1D:2F:6D:FD:B3:69:7F:56:E9:DA:DC:B3:28:10:8B:66:2A:49:D8:BA Authority key identifier: 2B:FE:43:B6:FF:62:C8:A8:E2:F3:66:F5:50:4A:AC:6D:18:2D:2B:8B Certificate issuer: /CN=2BFE43B6FF62C8A8E2F366F5504AAC6D182D2B8B Certificate serial: 742A79F24A1A9654666A2C5235FD9E4E6DF84F8A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BFE43B6FF62C8A8E2F366F5504AAC6D182D2B8B.cer Subject info access: rsync://rpki-repo.registro.br/repo/8aiBaLPcPjrz9NHVhmEtyUa8MmznF41WFRxdWu4SYMYC/0/2BFE43B6FF62C8A8E2F366F5504AAC6D182D2B8B.mft Manifest number: 0133 Signing time: Sun 01 Nov 2026 10:56:08 +0000 Manifest this update: Sun 01 Nov 2026 10:51:08 +0000 Manifest next update: Mon 02 Nov 2026 14:12:08 +0000 Files and hashes: 1: 2BFE43B6FF62C8A8E2F366F5504AAC6D182D2B8B.crl (hash: VojYiMeXldQZolPjgQQ4Wc870zK9eP4xPvusxTM6puQ=) 2: 3230302e3231392e3134392e302f32342d3332203d3e20323634393731.roa (hash: h3qrxvQHYvIHWATQtylOTBGiwfp1KYpMfgIxKyAHwOs=) 3: 323830313a38303a313932303a3a2f34382d313238203d3e20323634393731.roa (hash: XMt19OQs+KIsdrSVdkot4M0VNKvbfDuFMSNIOiKgGzw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8aiBaLPcPjrz9NHVhmEtyUa8MmznF41WFRxdWu4SYMYC/0/2BFE43B6FF62C8A8E2F366F5504AAC6D182D2B8B.crl rsync://rpki-repo.registro.br/repo/8aiBaLPcPjrz9NHVhmEtyUa8MmznF41WFRxdWu4SYMYC/0/2BFE43B6FF62C8A8E2F366F5504AAC6D182D2B8B.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BFE43B6FF62C8A8E2F366F5504AAC6D182D2B8B.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 02 Nov 2026 14:12:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:2a:79:f2:4a:1a:96:54:66:6a:2c:52:35:fd:9e:4e:6d:f8:4f:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2BFE43B6FF62C8A8E2F366F5504AAC6D182D2B8B Validity Not Before: Nov 1 10:51:08 2026 GMT Not After : Nov 2 14:12:08 2026 GMT Subject: CN=1D2F6DFDB3697F56E9DADCB328108B662A49D8BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:e8:6e:14:4e:f6:42:d5:75:3c:38:80:b5:f9: ed:63:c0:eb:a8:04:b4:45:ae:31:21:c1:ed:f6:c7: 60:a6:be:08:c9:1e:bb:73:cc:e3:d5:9c:28:07:3f: d2:2b:c5:cf:ed:9f:24:34:15:c6:04:ba:77:b4:41: 61:af:8f:89:0e:10:7d:62:8a:ac:e0:57:30:f7:9a: 00:ef:fb:f7:24:c0:25:11:75:04:f6:d4:2a:48:ac: 67:d5:0b:c3:1e:db:18:7b:4f:68:e0:3b:bf:86:33: 65:bd:91:63:8e:30:1d:fd:45:9d:77:52:a2:ff:92: 9e:dc:d1:e5:f7:b9:6e:8f:5d:c1:09:68:b7:3b:37: 35:fe:b3:cd:8b:b8:1f:03:da:6f:62:a9:87:fd:41: fa:75:f2:8b:89:00:e4:6b:0f:61:ab:3a:f9:d2:0d: 4b:3e:5c:69:94:ed:21:26:fe:14:ff:82:2e:47:7c: 50:8f:23:ff:5f:85:e8:68:8b:05:e9:a1:3c:43:44: e6:52:21:53:fa:7b:9f:0b:1a:3b:f0:fc:05:0b:ef: 19:45:6a:0d:53:11:cd:d3:dd:45:14:2f:4c:e7:57: 12:a8:e6:67:3e:1a:f7:02:58:0a:d2:12:17:cf:48: 48:d5:67:b1:6e:6b:50:15:6a:14:18:0e:86:19:2b: fa:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:2F:6D:FD:B3:69:7F:56:E9:DA:DC:B3:28:10:8B:66:2A:49:D8:BA X509v3 Authority Key Identifier: keyid:2B:FE:43:B6:FF:62:C8:A8:E2:F3:66:F5:50:4A:AC:6D:18:2D:2B:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8aiBaLPcPjrz9NHVhmEtyUa8MmznF41WFRxdWu4SYMYC/0/2BFE43B6FF62C8A8E2F366F5504AAC6D182D2B8B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BFE43B6FF62C8A8E2F366F5504AAC6D182D2B8B.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8aiBaLPcPjrz9NHVhmEtyUa8MmznF41WFRxdWu4SYMYC/0/2BFE43B6FF62C8A8E2F366F5504AAC6D182D2B8B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:d3:d3:a1:6c:b9:96:4b:53:2d:50:0c:3d:7b:4d:b1:7e:86: 17:2e:59:31:cd:cc:39:0d:28:be:0d:d6:7c:2b:06:f3:61:a1: 1b:d2:64:13:5c:ba:df:eb:bd:1a:67:09:6c:19:d5:38:4f:26: f6:83:95:34:47:1e:7f:24:3f:da:01:ba:23:a4:18:08:82:38: 35:2b:13:29:7d:bf:c0:97:a1:71:57:df:61:0f:38:42:63:49: 9d:02:08:16:bf:ac:0a:ea:4a:16:50:7d:2d:70:88:26:84:8b: ac:6e:ff:8d:f5:85:d5:f1:82:e1:9a:db:74:ce:70:5c:25:75: 1e:7e:a4:f3:86:85:c7:f3:c7:c6:24:c5:75:64:52:a8:c3:8f: 37:58:17:e0:f4:4a:21:7f:6c:9f:34:95:b5:f9:60:9b:d8:e4: e7:34:61:57:f8:20:84:fa:8a:e8:a8:34:41:5e:c6:e9:2a:2f: 02:b8:9e:76:4a:eb:d0:4d:39:b5:35:62:00:73:62:15:77:f2: 90:3f:4d:f5:90:2f:f0:cb:28:78:2f:a8:f3:60:03:5c:e3:96: 17:43:4e:2d:0b:98:0f:7d:55:1d:a2:1a:b9:69:bc:22:3a:2c: a8:ba:a9:32:7c:a1:7b:c5:a6:c1:88:87:57:70:4e:f7:05:6d: dd:f4:96:d4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUdCp58koallRmaixSNf2eTm34T4owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkJGRTQzQjZGRjYyQzhBOEUyRjM2NkY1NTA0QUFDNkQx ODJEMkI4QjAeFw0yNjExMDExMDUxMDhaFw0yNjExMDIxNDEyMDhaMDMxMTAvBgNV BAMTKDFEMkY2REZEQjM2OTdGNTZFOURBRENCMzI4MTA4QjY2MkE0OUQ4QkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG6G4UTvZC1XU8OIC1+e1jwOuo BLRFrjEhwe32x2CmvgjJHrtzzOPVnCgHP9Irxc/tnyQ0FcYEune0QWGvj4kOEH1i iqzgVzD3mgDv+/ckwCURdQT21CpIrGfVC8Me2xh7T2jgO7+GM2W9kWOOMB39RZ13 UqL/kp7c0eX3uW6PXcEJaLc7NzX+s82LuB8D2m9iqYf9Qfp18ouJAORrD2GrOvnS DUs+XGmU7SEm/hT/gi5HfFCPI/9fhehoiwXpoTxDROZSIVP6e58LGjvw/AUL7xlF ag1TEc3T3UUUL0znVxKo5mc+GvcCWArSEhfPSEjVZ7Fua1AVahQYDoYZK/pTAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUHS9t/bNpf1bp2tyzKBCLZipJ2LowHwYDVR0j BBgwFoAUK/5Dtv9iyKji82b1UEqsbRgtK4swDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOGFpQmFMUGNQanJ6OU5IVmhtRXR5VWE4TW16bkY0MVdGUnhkV3U0U1lN WUMvMC8yQkZFNDNCNkZGNjJDOEE4RTJGMzY2RjU1MDRBQUM2RDE4MkQyQjhCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJCRkU0M0I2RkY2MkM4QThF MkYzNjZGNTUwNEFBQzZEMTgyRDJCOEIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OGFpQmFMUGNQanJ6OU5IVmhtRXR5VWE4TW16bkY0MVdGUnhkV3U0U1lNWUMvMC8y QkZFNDNCNkZGNjJDOEE4RTJGMzY2RjU1MDRBQUM2RDE4MkQyQjhCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFtPToWy5lktTLVAMPXtNsX6GFy5ZMc3MOQ0ovg3WfCsG82GhG9JkE1y63+u9 GmcJbBnVOE8m9oOVNEcefyQ/2gG6I6QYCII4NSsTKX2/wJehcVffYQ84QmNJnQII Fr+sCupKFlB9LXCIJoSLrG7/jfWF1fGC4ZrbdM5wXCV1Hn6k84aFx/PHxiTFdWRS qMOPN1gX4PRKIX9snzSVtflgm9jk5zRhV/gghPqK6Kg0QV7G6SovAriedkrr0E05 tTViAHNiFXfykD9N9ZAv8MsoeC+o82ADXOOWF0NOLQuYD31VHaIauWm8IjosqLqp Mnyhe8WmwYiHV3BO9wVt3fSW1A== -----END CERTIFICATE-----Generated at Sun Nov 1 14:41:19 2026 by rpki-client