$ rpki-client -vvvf rpki-repo.registro.br/repo/BpjQzn4bNuBgo3eE9SkWBzednzdwKTmkETuaz2GDjks6/0/AAE5DEB28FB1B77C5621A48D330349DB07D1D3F8.mft File: AAE5DEB28FB1B77C5621A48D330349DB07D1D3F8.mft (raw, json) Hash identifier: dOUBHmSaBjIY5zgniPTQ0FexzrvijCRZGPI3Jpp3at0= Subject key identifier: EE:73:2D:F6:EB:69:76:37:C7:D0:EE:3D:0C:D2:5B:D4:2A:28:D6:BF Authority key identifier: AA:E5:DE:B2:8F:B1:B7:7C:56:21:A4:8D:33:03:49:DB:07:D1:D3:F8 Certificate issuer: /CN=AAE5DEB28FB1B77C5621A48D330349DB07D1D3F8 Certificate serial: 3F8F9D24B06DC8470911828C90925E9696642E1A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AAE5DEB28FB1B77C5621A48D330349DB07D1D3F8.cer Subject info access: rsync://rpki-repo.registro.br/repo/BpjQzn4bNuBgo3eE9SkWBzednzdwKTmkETuaz2GDjks6/0/AAE5DEB28FB1B77C5621A48D330349DB07D1D3F8.mft Manifest number: 020D Signing time: Sun 01 Nov 2026 12:20:46 +0000 Manifest this update: Sun 01 Nov 2026 12:15:46 +0000 Manifest next update: Mon 02 Nov 2026 15:14:46 +0000 Files and hashes: 1: 323830343a343737383a3a2f33322d3438203d3e20323637303536.roa (hash: UhVYsVh0UQJp3UVHCPuuZSR4dFaVj49upwmtiQ0GydY=) 2: 34352e3136302e3231352e302f32342d3234203d3e20323637303536.roa (hash: ByvyHfqGYTJf1bSYBbyXSJIAcofEpU2XhOSKWNyOW70=) 3: 34352e3232362e3230382e302f32322d3234203d3e20323637303536.roa (hash: zKJHXomjbG11hXTXWK+zI7c4ggaM8sH52gaDFlrNBY4=) 4: AAE5DEB28FB1B77C5621A48D330349DB07D1D3F8.crl (hash: qhUM4gaJCzf8CC7/2I3b1Kpe3hZUVIIkNUnTULfHY6M=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BpjQzn4bNuBgo3eE9SkWBzednzdwKTmkETuaz2GDjks6/0/AAE5DEB28FB1B77C5621A48D330349DB07D1D3F8.crl rsync://rpki-repo.registro.br/repo/BpjQzn4bNuBgo3eE9SkWBzednzdwKTmkETuaz2GDjks6/0/AAE5DEB28FB1B77C5621A48D330349DB07D1D3F8.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AAE5DEB28FB1B77C5621A48D330349DB07D1D3F8.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 02 Nov 2026 15:14:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:8f:9d:24:b0:6d:c8:47:09:11:82:8c:90:92:5e:96:96:64:2e:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AAE5DEB28FB1B77C5621A48D330349DB07D1D3F8 Validity Not Before: Nov 1 12:15:46 2026 GMT Not After : Nov 2 15:14:46 2026 GMT Subject: CN=EE732DF6EB697637C7D0EE3D0CD25BD42A28D6BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b0:37:5e:76:9b:54:9b:52:e5:75:c2:3e:1d: c3:7d:63:81:37:a0:6d:57:02:9c:05:82:24:e1:99: 70:16:63:19:fc:70:b7:ea:c0:17:12:5e:88:17:ec: 54:cf:f6:7e:dd:8f:09:2b:44:6d:e0:a2:99:0e:05: 2f:e5:87:31:92:02:d1:0d:60:35:51:73:61:63:fa: 66:f3:27:54:cf:4d:4c:88:16:bf:ba:3c:80:c5:72: ff:90:d8:2e:69:59:e7:d6:ea:7d:77:ee:fd:f0:4a: a3:b5:9a:72:cb:44:7d:de:fb:d1:da:b2:69:3e:19: 23:d7:96:7b:78:20:b4:6a:33:90:a1:c3:51:20:db: cf:6b:d0:10:e8:d2:ae:ea:35:8d:7f:0a:1a:20:98: e3:cc:e5:61:14:4e:a8:a3:d2:60:b3:8d:a1:21:d1: b3:fc:e5:dd:81:7d:af:bb:77:a6:c2:a7:69:12:70: 35:58:6f:5f:e4:99:7f:cf:1d:3f:d9:ce:9b:e9:d7: b0:f1:a7:6e:19:50:c1:4c:7a:1e:64:52:80:36:6a: 46:62:6b:65:69:e6:c1:e4:bb:2c:04:f4:a2:a4:4b: a6:d8:e3:e7:18:a7:66:91:62:6a:5d:14:11:f5:15: 71:41:6e:8e:2c:02:75:a2:99:10:65:eb:9c:af:3c: c3:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:73:2D:F6:EB:69:76:37:C7:D0:EE:3D:0C:D2:5B:D4:2A:28:D6:BF X509v3 Authority Key Identifier: keyid:AA:E5:DE:B2:8F:B1:B7:7C:56:21:A4:8D:33:03:49:DB:07:D1:D3:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BpjQzn4bNuBgo3eE9SkWBzednzdwKTmkETuaz2GDjks6/0/AAE5DEB28FB1B77C5621A48D330349DB07D1D3F8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AAE5DEB28FB1B77C5621A48D330349DB07D1D3F8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BpjQzn4bNuBgo3eE9SkWBzednzdwKTmkETuaz2GDjks6/0/AAE5DEB28FB1B77C5621A48D330349DB07D1D3F8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:20:84:c8:43:52:08:8d:60:41:74:22:78:7c:39:ba:6e:3a: bb:ae:05:d2:b1:7d:f3:48:ca:9e:dc:8c:0e:a0:34:a7:38:48: fc:82:3b:14:f7:ed:03:7f:0b:65:09:d1:bd:80:c5:11:11:70: 9c:d9:d7:6c:94:79:a8:b0:82:7f:d4:94:22:7a:17:77:e9:21: 33:70:b7:9b:a9:f3:65:90:77:2c:04:9d:1b:ff:64:f7:60:1c: 0c:ab:4d:a3:b1:eb:c1:c5:a6:9d:cd:2a:44:ce:2b:8e:cf:52: 6d:c7:ac:9b:21:f6:0d:34:11:be:7f:67:78:4f:bc:f3:01:f7: 91:ff:aa:5d:7c:00:06:4a:0e:37:5c:ea:67:5f:9e:41:bf:38: d6:53:10:c9:d6:5c:d6:1c:52:67:b6:c3:cd:6b:ab:a6:59:0b: e7:4d:92:4f:fa:02:83:ed:80:af:2e:be:7e:b3:4e:95:df:39: 2e:aa:bc:09:ad:a6:8c:e6:5f:f1:3f:f9:28:fe:27:1f:15:1f: 22:f1:8a:e7:59:bd:00:a3:80:ae:10:4d:ee:92:c1:69:45:0b: b4:91:0d:69:52:5c:0e:af:72:8a:ec:24:2f:a4:d0:78:50:f8: fa:7a:de:83:70:79:1a:a8:28:9b:7d:55:e5:7a:31:53:1a:ae: eb:23:39:fa -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUP4+dJLBtyEcJEYKMkJJelpZkLhowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUFFNURFQjI4RkIxQjc3QzU2MjFBNDhEMzMwMzQ5REIw N0QxRDNGODAeFw0yNjExMDExMjE1NDZaFw0yNjExMDIxNTE0NDZaMDMxMTAvBgNV BAMTKEVFNzMyREY2RUI2OTc2MzdDN0QwRUUzRDBDRDI1QkQ0MkEyOEQ2QkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCsDdedptUm1LldcI+HcN9Y4E3 oG1XApwFgiThmXAWYxn8cLfqwBcSXogX7FTP9n7djwkrRG3gopkOBS/lhzGSAtEN YDVRc2Fj+mbzJ1TPTUyIFr+6PIDFcv+Q2C5pWefW6n137v3wSqO1mnLLRH3e+9Ha smk+GSPXlnt4ILRqM5Chw1Eg289r0BDo0q7qNY1/ChogmOPM5WEUTqij0mCzjaEh 0bP85d2Bfa+7d6bCp2kScDVYb1/kmX/PHT/Zzpvp17Dxp24ZUMFMeh5kUoA2akZi a2Vp5sHkuywE9KKkS6bY4+cYp2aRYmpdFBH1FXFBbo4sAnWimRBl65yvPMPBAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU7nMt9utpdjfH0O49DNJb1Coo1r8wHwYDVR0j BBgwFoAUquXeso+xt3xWIaSNMwNJ2wfR0/gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQnBqUXpuNGJOdUJnbzNlRTlTa1dCemVkbnpkd0tUbWtFVHVhejJHRGpr czYvMC9BQUU1REVCMjhGQjFCNzdDNTYyMUE0OEQzMzAzNDlEQjA3RDFEM0Y4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FBRTVERUIyOEZCMUI3N0M1 NjIxQTQ4RDMzMDM0OURCMDdEMUQzRjguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QnBqUXpuNGJOdUJnbzNlRTlTa1dCemVkbnpkd0tUbWtFVHVhejJHRGprczYvMC9B QUU1REVCMjhGQjFCNzdDNTYyMUE0OEQzMzAzNDlEQjA3RDFEM0Y4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEARSCEyENSCI1gQXQieHw5um46u64F0rF980jKntyMDqA0pzhI/II7FPftA38L ZQnRvYDFERFwnNnXbJR5qLCCf9SUInoXd+khM3C3m6nzZZB3LASdG/9k92AcDKtN o7HrwcWmnc0qRM4rjs9SbcesmyH2DTQRvn9neE+88wH3kf+qXXwABkoON1zqZ1+e Qb841lMQydZc1hxSZ7bDzWurplkL502ST/oCg+2Ary6+frNOld85Lqq8Ca2mjOZf 8T/5KP4nHxUfIvGK51m9AKOArhBN7pLBaUULtJENaVJcDq9yiuwkL6TQeFD4+nre g3B5Gqgom31V5XoxUxqu6yM5+g== -----END CERTIFICATE-----Generated at Mon Nov 2 00:50:24 2026 by rpki-client