$ rpki-client -vvvf rpki-repo.registro.br/repo/C2QrZbQL8vmDvr2Gf1NNqSYDXJ8oAqCwgBa1231HneSM/1/D63086E42E9BABA028DCD8D65CFF50CEEFBD78DC.mft File: D63086E42E9BABA028DCD8D65CFF50CEEFBD78DC.mft (raw, json) Hash identifier: C2tMpG80uPEW0/hP9sDTH9y2MOMWJ2STv+HnCRZ7fsw= Subject key identifier: 1A:54:BE:1E:D0:84:08:FB:09:89:BE:A1:52:E6:07:FB:F5:41:73:C9 Authority key identifier: D6:30:86:E4:2E:9B:AB:A0:28:DC:D8:D6:5C:FF:50:CE:EF:BD:78:DC Certificate issuer: /CN=D63086E42E9BABA028DCD8D65CFF50CEEFBD78DC Certificate serial: 3A41D059AF8750A812C31B0DD9012D387B80C93E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D63086E42E9BABA028DCD8D65CFF50CEEFBD78DC.cer Subject info access: rsync://rpki-repo.registro.br/repo/C2QrZbQL8vmDvr2Gf1NNqSYDXJ8oAqCwgBa1231HneSM/1/D63086E42E9BABA028DCD8D65CFF50CEEFBD78DC.mft Manifest number: 04EB Signing time: Sun 01 Nov 2026 15:49:59 +0000 Manifest this update: Sun 01 Nov 2026 15:44:59 +0000 Manifest next update: Mon 02 Nov 2026 17:31:59 +0000 Files and hashes: 1: 3137372e37332e35362e302f32322d3234203d3e20323633303731.roa (hash: SB11YJro1VYlAtsbZg7Yk8rpXKBm+72LbqTCaElHrXU=) 2: 3139312e362e3134342e302f32312d3234203d3e20323633303731.roa (hash: uBsieGgScKV+0ry5XgLK2NJOfm5iiFTNuvtiCrEuBqM=) 3: 323830343a3934633a3a2f33322d3438203d3e20323633303731.roa (hash: CETOg7zgPFXb5dOFKEUhnHuT5wuVHt0Oa0s4xX3DnCA=) 4: D63086E42E9BABA028DCD8D65CFF50CEEFBD78DC.crl (hash: wgxU8HyGG/il/YoS+TtikgPcN6o3itZvWGdIAeTAV4E=) 5: 3138362e3233322e3138382e302f32322d3234203d3e20323633303731.roa (hash: U4Zeo8oJGacNYMBUz6XQM1taF/dNINSjzRmX56VV6DA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/C2QrZbQL8vmDvr2Gf1NNqSYDXJ8oAqCwgBa1231HneSM/1/D63086E42E9BABA028DCD8D65CFF50CEEFBD78DC.crl rsync://rpki-repo.registro.br/repo/C2QrZbQL8vmDvr2Gf1NNqSYDXJ8oAqCwgBa1231HneSM/1/D63086E42E9BABA028DCD8D65CFF50CEEFBD78DC.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D63086E42E9BABA028DCD8D65CFF50CEEFBD78DC.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 02 Nov 2026 17:31:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:41:d0:59:af:87:50:a8:12:c3:1b:0d:d9:01:2d:38:7b:80:c9:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D63086E42E9BABA028DCD8D65CFF50CEEFBD78DC Validity Not Before: Nov 1 15:44:59 2026 GMT Not After : Nov 2 17:31:59 2026 GMT Subject: CN=1A54BE1ED08408FB0989BEA152E607FBF54173C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:6b:f2:37:a6:cb:65:d7:ba:ab:06:52:94:59: d0:1e:e2:ca:27:4c:c8:77:e8:30:5d:4e:45:f8:b8: 64:c8:35:2e:e5:44:69:1d:36:34:ec:49:82:d8:dc: 70:bc:8e:57:91:d2:41:3d:76:e5:a5:dc:90:46:b0: 28:96:e2:23:9a:3a:9c:30:73:0f:33:5f:e3:52:ab: 9a:a0:88:bc:aa:36:57:3d:83:e9:8f:49:14:2d:ad: 1a:07:7a:95:15:37:34:82:e6:04:60:81:fe:c5:38: 7a:35:fc:9d:94:99:85:d6:88:52:53:e8:dd:04:eb: f1:91:7a:40:68:c2:5c:12:1d:76:fd:5f:ef:7d:56: d1:bf:cd:62:f1:21:c8:45:f7:57:a2:c8:d5:ae:e0: 11:84:2a:ee:7f:08:41:b6:1e:6b:08:8d:8f:bb:db: 0a:dd:3b:53:9c:b9:e9:a6:da:cf:33:1b:51:96:77: d4:86:34:21:54:0f:0b:d0:0e:15:d7:61:d9:13:77: 0e:43:6d:af:7c:de:f3:fe:6d:8a:a6:12:ca:e6:e7: 63:6b:5e:88:14:1e:f9:46:6f:a0:70:08:fb:5f:51: c7:42:75:31:ee:29:f3:01:8b:bd:83:2c:60:67:b4: c2:9e:27:8f:7a:6f:26:66:ed:36:37:ef:96:af:f2: c7:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:54:BE:1E:D0:84:08:FB:09:89:BE:A1:52:E6:07:FB:F5:41:73:C9 X509v3 Authority Key Identifier: keyid:D6:30:86:E4:2E:9B:AB:A0:28:DC:D8:D6:5C:FF:50:CE:EF:BD:78:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/C2QrZbQL8vmDvr2Gf1NNqSYDXJ8oAqCwgBa1231HneSM/1/D63086E42E9BABA028DCD8D65CFF50CEEFBD78DC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D63086E42E9BABA028DCD8D65CFF50CEEFBD78DC.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/C2QrZbQL8vmDvr2Gf1NNqSYDXJ8oAqCwgBa1231HneSM/1/D63086E42E9BABA028DCD8D65CFF50CEEFBD78DC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:8e:27:53:87:bf:72:0f:b0:3d:c1:09:50:91:b9:96:95:03: 80:ab:bc:39:40:0a:da:71:1c:dc:8a:d9:ab:fc:23:0e:e6:61: bd:93:04:12:20:cd:ed:1a:d8:13:f3:b3:1d:75:9f:df:96:e4: 98:54:60:30:bf:ab:7c:c9:f7:e4:4d:c5:6a:16:b7:40:ca:5c: 99:26:3c:3c:28:ad:71:81:50:20:f4:ef:19:d4:db:c3:5e:b1: 60:03:c7:00:50:07:ff:ab:8b:04:2c:8b:72:04:a2:4d:5d:f2: b1:da:a9:95:f3:42:4c:1e:c6:cd:58:87:51:e9:4b:eb:de:1f: 12:0b:3c:89:4f:fd:6d:28:d6:2e:94:45:e3:6c:a4:e0:fa:11: 18:98:fc:3d:98:c5:64:18:e6:01:92:37:d7:dd:f0:9d:eb:c9: e3:7d:38:b0:49:83:5c:3e:9e:40:40:1e:fb:93:c0:5e:4a:55: 7e:80:34:0e:3d:16:2a:04:51:7f:ef:ca:26:af:92:8f:68:21: 9f:c3:66:fe:0b:a2:fd:20:1d:13:d2:86:d6:8d:34:f0:d7:3b: eb:49:4e:67:68:ab:9e:f7:08:4d:1e:09:84:93:fb:e5:51:93: 39:20:3e:77:65:05:76:05:2f:a6:e3:ad:e6:6d:2e:3d:53:b0: 09:02:f4:72 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUOkHQWa+HUKgSwxsN2QEtOHuAyT4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDYzMDg2RTQyRTlCQUJBMDI4RENEOEQ2NUNGRjUwQ0VF RkJENzhEQzAeFw0yNjExMDExNTQ0NTlaFw0yNjExMDIxNzMxNTlaMDMxMTAvBgNV BAMTKDFBNTRCRTFFRDA4NDA4RkIwOTg5QkVBMTUyRTYwN0ZCRjU0MTczQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCza/I3pstl17qrBlKUWdAe4son TMh36DBdTkX4uGTINS7lRGkdNjTsSYLY3HC8jleR0kE9duWl3JBGsCiW4iOaOpww cw8zX+NSq5qgiLyqNlc9g+mPSRQtrRoHepUVNzSC5gRggf7FOHo1/J2UmYXWiFJT 6N0E6/GRekBowlwSHXb9X+99VtG/zWLxIchF91eiyNWu4BGEKu5/CEG2HmsIjY+7 2wrdO1Ocuemm2s8zG1GWd9SGNCFUDwvQDhXXYdkTdw5Dba983vP+bYqmEsrm52Nr XogUHvlGb6BwCPtfUcdCdTHuKfMBi72DLGBntMKeJ496byZm7TY375av8sdnAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUGlS+HtCECPsJib6hUuYH+/VBc8kwHwYDVR0j BBgwFoAU1jCG5C6bq6Ao3NjWXP9Qzu+9eNwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQzJRclpiUUw4dm1EdnIyR2YxTk5xU1lEWEo4b0FxQ3dnQmExMjMxSG5l U00vMS9ENjMwODZFNDJFOUJBQkEwMjhEQ0Q4RDY1Q0ZGNTBDRUVGQkQ3OERDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q2MzA4NkU0MkU5QkFCQTAy OERDRDhENjVDRkY1MENFRUZCRDc4REMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QzJRclpiUUw4dm1EdnIyR2YxTk5xU1lEWEo4b0FxQ3dnQmExMjMxSG5lU00vMS9E NjMwODZFNDJFOUJBQkEwMjhEQ0Q4RDY1Q0ZGNTBDRUVGQkQ3OERDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOo4nU4e/cg+wPcEJUJG5lpUDgKu8OUAK2nEc3IrZq/wjDuZhvZMEEiDN7RrY E/OzHXWf35bkmFRgML+rfMn35E3Faha3QMpcmSY8PCitcYFQIPTvGdTbw16xYAPH AFAH/6uLBCyLcgSiTV3ysdqplfNCTB7GzViHUelL694fEgs8iU/9bSjWLpRF42yk 4PoRGJj8PZjFZBjmAZI3193wnevJ4304sEmDXD6eQEAe+5PAXkpVfoA0Dj0WKgRR f+/KJq+Sj2ghn8Nm/gui/SAdE9KG1o008Nc760lOZ2irnvcITR4JhJP75VGTOSA+ d2UFdgUvpuOt5m0uPVOwCQL0cg== -----END CERTIFICATE-----Generated at Mon Nov 2 07:29:31 2026 by rpki-client