$ rpki-client -vvvf rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/4D9ABE490C47DCC663992BBA24BD5A0FB7C1009A.mft File: 4D9ABE490C47DCC663992BBA24BD5A0FB7C1009A.mft (raw, json) Hash identifier: FoxqnclFqiuN+v7WQT74pL/26dghjQ6F+BWfy6f+2eU= Subject key identifier: 1F:9D:F7:BC:52:FA:D6:1D:0D:DE:7E:4F:9F:0D:85:08:FB:4C:D7:00 Authority key identifier: 4D:9A:BE:49:0C:47:DC:C6:63:99:2B:BA:24:BD:5A:0F:B7:C1:00:9A Certificate issuer: /CN=4D9ABE490C47DCC663992BBA24BD5A0FB7C1009A Certificate serial: 19F47FE92639290F35050EE15B36DD97113B3520 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D9ABE490C47DCC663992BBA24BD5A0FB7C1009A.cer Subject info access: rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/4D9ABE490C47DCC663992BBA24BD5A0FB7C1009A.mft Manifest number: 021D Signing time: Wed 28 Oct 2026 08:30:45 +0000 Manifest this update: Wed 28 Oct 2026 08:25:45 +0000 Manifest next update: Thu 29 Oct 2026 09:45:45 +0000 Files and hashes: 1: 323830343a373138303a3a2f33322d3438203d3e20323730373933.roa (hash: /cnoHZgdUWTcaft/c1KLJ667UIUwF4Yh4h1C7lgkkhg=) 2: 3230312e3135392e3136302e302f32322d3234203d3e20323730373933.roa (hash: P7vGRRMCg+oPr+XYjl61Memq1sfL0vwdVUE94kTUuqM=) 3: 4D9ABE490C47DCC663992BBA24BD5A0FB7C1009A.crl (hash: 4oPQoICO4O9D6wyQ6WQQd5Ts743EipL4L6FvP6JSji8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/4D9ABE490C47DCC663992BBA24BD5A0FB7C1009A.crl rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/4D9ABE490C47DCC663992BBA24BD5A0FB7C1009A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D9ABE490C47DCC663992BBA24BD5A0FB7C1009A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 29 Oct 2026 09:45:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:f4:7f:e9:26:39:29:0f:35:05:0e:e1:5b:36:dd:97:11:3b:35:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4D9ABE490C47DCC663992BBA24BD5A0FB7C1009A Validity Not Before: Oct 28 08:25:45 2026 GMT Not After : Oct 29 09:45:45 2026 GMT Subject: CN=1F9DF7BC52FAD61D0DDE7E4F9F0D8508FB4CD700 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:17:ac:47:ad:ce:14:40:68:42:7e:9a:59:e3: fa:0a:52:cf:84:97:a0:6b:56:39:7b:47:bb:7f:83: 90:42:f8:bc:33:0d:7c:cd:82:06:fe:1e:79:c8:97: f4:6c:41:eb:f8:34:aa:26:85:dd:38:2b:9b:87:eb: ee:ca:7b:9e:91:26:35:07:13:55:0c:15:2d:29:fd: 15:a1:57:7d:70:d2:90:66:7c:9d:d4:30:58:d3:07: 94:c3:97:5e:ee:94:5c:9f:5d:cd:81:4f:bc:84:2f: dd:f6:1c:c0:7e:fa:97:3d:79:71:ea:af:e9:cd:02: a0:7e:57:68:7b:1e:18:e4:55:10:b6:23:ff:8a:9a: ec:b2:a9:8f:44:03:7f:84:ab:60:04:21:68:59:96: f2:b2:6d:93:59:6d:cb:35:84:1c:f5:8b:ba:76:fd: 8d:ef:cd:f9:4f:3f:b6:91:de:c1:80:00:65:72:83: a1:bf:c5:c2:a4:64:73:e4:8f:17:05:4b:8e:8b:ec: d7:e0:0c:36:04:de:ac:45:90:ff:f2:9c:fa:92:4a: af:da:30:cf:f5:f2:81:95:d8:73:4c:56:3a:5a:5e: 31:87:02:96:37:c6:f3:ce:16:da:d2:0d:cb:24:7d: e9:3f:a0:e0:f2:53:36:49:c5:26:c8:00:f4:af:0f: 76:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:9D:F7:BC:52:FA:D6:1D:0D:DE:7E:4F:9F:0D:85:08:FB:4C:D7:00 X509v3 Authority Key Identifier: keyid:4D:9A:BE:49:0C:47:DC:C6:63:99:2B:BA:24:BD:5A:0F:B7:C1:00:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/4D9ABE490C47DCC663992BBA24BD5A0FB7C1009A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D9ABE490C47DCC663992BBA24BD5A0FB7C1009A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/4D9ABE490C47DCC663992BBA24BD5A0FB7C1009A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:8c:79:d4:22:49:f0:78:e1:ac:bb:0e:cd:18:22:cf:3d:ea: 8f:4b:39:c9:43:5b:f2:59:59:2a:67:d1:80:3e:cb:c7:74:ce: 29:b0:90:90:26:89:4b:99:6e:09:56:ae:f6:1b:b3:83:67:be: a9:8e:d1:32:62:d7:32:08:78:a0:88:49:89:e1:ed:bf:c6:5c: 36:df:be:09:7a:82:6b:d8:03:f2:1a:62:f8:f9:ba:68:7d:4b: 4d:88:0d:53:f5:a5:8e:3e:06:1c:a9:f6:74:a8:4e:db:cc:0f: 37:f9:1d:8b:61:94:04:16:ad:e9:29:fb:ca:c8:39:4f:84:55: ea:be:3d:28:32:05:fe:f0:25:73:49:11:24:e3:f7:20:bd:bb: 4a:1a:18:b9:24:16:57:e1:2b:33:2a:1b:1b:fd:d8:9d:29:da: ef:2b:9f:79:4f:40:f1:6f:82:a4:46:c5:ff:8d:11:33:d0:59: d2:3d:cc:b7:c5:b4:2c:8b:ee:ed:99:bb:01:d9:51:dc:d6:d5: f6:81:be:76:d2:cd:63:85:5d:9a:f2:bc:36:0d:ad:4b:7e:4e: cd:5c:0c:a2:9d:99:5a:66:f3:a5:d9:57:c3:57:bd:d4:5c:4f: 89:04:75:fb:af:df:bd:48:bc:ed:26:ea:ea:a1:41:27:04:c1: 2a:3f:2c:a3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUGfR/6SY5KQ81BQ7hWzbdlxE7NSAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEQ5QUJFNDkwQzQ3RENDNjYzOTkyQkJBMjRCRDVBMEZC N0MxMDA5QTAeFw0yNjEwMjgwODI1NDVaFw0yNjEwMjkwOTQ1NDVaMDMxMTAvBgNV BAMTKDFGOURGN0JDNTJGQUQ2MUQwRERFN0U0RjlGMEQ4NTA4RkI0Q0Q3MDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD4F6xHrc4UQGhCfppZ4/oKUs+E l6BrVjl7R7t/g5BC+LwzDXzNggb+HnnIl/RsQev4NKomhd04K5uH6+7Ke56RJjUH E1UMFS0p/RWhV31w0pBmfJ3UMFjTB5TDl17ulFyfXc2BT7yEL932HMB++pc9eXHq r+nNAqB+V2h7HhjkVRC2I/+KmuyyqY9EA3+Eq2AEIWhZlvKybZNZbcs1hBz1i7p2 /Y3vzflPP7aR3sGAAGVyg6G/xcKkZHPkjxcFS46L7NfgDDYE3qxFkP/ynPqSSq/a MM/18oGV2HNMVjpaXjGHApY3xvPOFtrSDcskfek/oODyUzZJxSbIAPSvD3bLAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUH533vFL61h0N3n5Pnw2FCPtM1wAwHwYDVR0j BBgwFoAUTZq+SQxH3MZjmSu6JL1aD7fBAJowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQUF0M29hYmVpUHZUQW42U2dUd3NRS1REcmtMMWJNaDM3dlJQb2pYOEV1 bzMvMC80RDlBQkU0OTBDNDdEQ0M2NjM5OTJCQkEyNEJENUEwRkI3QzEwMDlBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzREOUFCRTQ5MEM0N0RDQzY2 Mzk5MkJCQTI0QkQ1QTBGQjdDMTAwOUEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QUF0M29hYmVpUHZUQW42U2dUd3NRS1REcmtMMWJNaDM3dlJQb2pYOEV1bzMvMC80 RDlBQkU0OTBDNDdEQ0M2NjM5OTJCQkEyNEJENUEwRkI3QzEwMDlBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlYx51CJJ8HjhrLsOzRgizz3qj0s5yUNb8llZKmfRgD7Lx3TOKbCQkCaJS5lu CVau9huzg2e+qY7RMmLXMgh4oIhJieHtv8ZcNt++CXqCa9gD8hpi+Pm6aH1LTYgN U/Wljj4GHKn2dKhO28wPN/kdi2GUBBat6Sn7ysg5T4RV6r49KDIF/vAlc0kRJOP3 IL27ShoYuSQWV+ErMyobG/3YnSna7yufeU9A8W+CpEbF/40RM9BZ0j3Mt8W0LIvu 7Zm7AdlR3NbV9oG+dtLNY4VdmvK8Ng2tS35OzVwMop2ZWmbzpdlXw1e91FxPiQR1 +6/fvUi87Sbq6qFBJwTBKj8sow== -----END CERTIFICATE-----Generated at Wed Oct 28 19:37:36 2026 by rpki-client