$ rpki-client -vvvf rpki-repo.registro.br/repo/CY8UkggCCB2cbcPh6mqHZVWeY3WJYNVrqtUjgPBqAmYT/0/3B1E2FA9B5BA1A60F60180B1D564045ED67EB4A1.mft File: 3B1E2FA9B5BA1A60F60180B1D564045ED67EB4A1.mft (raw, json) Hash identifier: tJoaWA+i7S/NBAjD3mSgdITrgGcvKQ2QmG+yPHtviLo= Subject key identifier: 08:A5:B6:57:9B:A9:58:92:A7:17:97:C0:23:09:A7:D7:C1:F5:76:A0 Authority key identifier: 3B:1E:2F:A9:B5:BA:1A:60:F6:01:80:B1:D5:64:04:5E:D6:7E:B4:A1 Certificate issuer: /CN=3B1E2FA9B5BA1A60F60180B1D564045ED67EB4A1 Certificate serial: 7AD388474AC37B71073A2B08B666C84C8B47D397 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B1E2FA9B5BA1A60F60180B1D564045ED67EB4A1.cer Subject info access: rsync://rpki-repo.registro.br/repo/CY8UkggCCB2cbcPh6mqHZVWeY3WJYNVrqtUjgPBqAmYT/0/3B1E2FA9B5BA1A60F60180B1D564045ED67EB4A1.mft Manifest number: 19 Signing time: Sat 31 Oct 2026 17:29:30 +0000 Manifest this update: Sat 31 Oct 2026 17:24:30 +0000 Manifest next update: Sun 01 Nov 2026 19:20:30 +0000 Files and hashes: 1: 34352e37302e3136342e302f32322d3234203d3e20323637353738.roa (hash: c75uSCZ2MplcH9Xy/B1myzgzNIK7NBxI4OosUsuMbPk=) 2: 3B1E2FA9B5BA1A60F60180B1D564045ED67EB4A1.crl (hash: bzmBNSmcCjcNX4w3JSLh+2vL5L3kgjLxmfc58V5mN3Q=) 3: 323830343a343339383a3a2f33322d3438203d3e20323637353738.roa (hash: HlCsR77YgbJoDU+toq/zqs+Box4qCQ41RFogjmEMJC0=) 4: 3137302e38322e35322e302f32322d3234203d3e20323637353738.roa (hash: OEYzLHZqJfUyGjYcpr2UFfWcx8mZEBxlUBuL49jiUiE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CY8UkggCCB2cbcPh6mqHZVWeY3WJYNVrqtUjgPBqAmYT/0/3B1E2FA9B5BA1A60F60180B1D564045ED67EB4A1.crl rsync://rpki-repo.registro.br/repo/CY8UkggCCB2cbcPh6mqHZVWeY3WJYNVrqtUjgPBqAmYT/0/3B1E2FA9B5BA1A60F60180B1D564045ED67EB4A1.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B1E2FA9B5BA1A60F60180B1D564045ED67EB4A1.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 01 Nov 2026 19:20:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:d3:88:47:4a:c3:7b:71:07:3a:2b:08:b6:66:c8:4c:8b:47:d3:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B1E2FA9B5BA1A60F60180B1D564045ED67EB4A1 Validity Not Before: Oct 31 17:24:30 2026 GMT Not After : Nov 1 19:20:30 2026 GMT Subject: CN=08A5B6579BA95892A71797C02309A7D7C1F576A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e4:ff:6d:45:df:62:bc:96:ad:9f:c9:04:85: ab:1d:b6:54:1c:18:f8:a7:1d:56:dd:b2:c0:3d:0b: 7f:57:fb:bf:7d:0d:93:4f:63:b0:39:10:2b:e7:97: 16:29:c4:b1:20:dd:1a:aa:3d:cd:5f:b7:6d:2b:07: be:c7:5e:8e:6a:bb:9f:67:a4:55:f4:3d:7f:d8:d2: e2:08:61:20:7f:1c:d9:f4:3a:8d:f5:0a:72:66:7d: 3c:ba:2f:be:01:ea:e3:56:78:40:c2:58:85:2d:a3: 15:8f:29:6d:83:03:92:a1:51:bd:54:dc:8a:0f:85: db:81:d4:c7:e4:9c:37:f1:cc:0a:5e:4c:10:c0:09: 57:b9:40:eb:33:75:34:08:d6:25:4d:7e:f8:18:f3: 49:4c:52:19:92:0a:24:94:16:53:f0:c6:97:77:e9: 34:00:e0:53:e7:d9:6f:fd:da:08:1b:73:4d:f6:c7: 19:d5:71:0d:16:e2:bf:08:2c:07:2c:9b:4d:3a:2f: fa:c4:8b:f3:a2:4c:df:c5:7b:e7:e6:12:2c:de:55: 1c:5d:76:ca:c6:34:7f:1f:d0:a7:cd:e7:f3:98:e7: cd:41:fa:53:2f:ac:82:1e:d3:7f:a0:32:a8:18:0a: ed:14:6e:09:8a:7b:44:69:5e:85:50:f2:3c:25:f6: d4:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:A5:B6:57:9B:A9:58:92:A7:17:97:C0:23:09:A7:D7:C1:F5:76:A0 X509v3 Authority Key Identifier: keyid:3B:1E:2F:A9:B5:BA:1A:60:F6:01:80:B1:D5:64:04:5E:D6:7E:B4:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CY8UkggCCB2cbcPh6mqHZVWeY3WJYNVrqtUjgPBqAmYT/0/3B1E2FA9B5BA1A60F60180B1D564045ED67EB4A1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B1E2FA9B5BA1A60F60180B1D564045ED67EB4A1.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CY8UkggCCB2cbcPh6mqHZVWeY3WJYNVrqtUjgPBqAmYT/0/3B1E2FA9B5BA1A60F60180B1D564045ED67EB4A1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d8:eb:52:40:98:81:dc:be:bc:de:66:5f:1d:6a:b8:21:1c:09: f2:4f:73:8f:4b:5d:90:fa:7b:0a:a5:78:56:8d:6e:0f:30:6f: c9:f9:91:52:4f:9d:9c:fe:f1:1d:29:43:37:93:64:97:d5:7c: 18:25:79:f4:15:15:fd:fa:6e:99:25:46:24:60:0a:19:d9:76: 3a:7c:83:61:53:cb:e9:0e:3a:0f:e2:c4:a4:b8:46:c5:97:f3: f1:74:1f:da:3d:c9:af:53:0c:4a:f1:a0:21:9d:7d:00:cc:da: c1:fc:ac:52:01:f3:61:c0:73:54:e9:91:86:6b:f5:a4:16:4b: 45:fe:1b:d9:97:da:c8:22:f9:a4:42:3a:a0:36:77:5f:23:95: 41:50:3c:71:ab:f5:2d:83:a4:cc:9b:29:73:cd:32:ec:cf:de: c3:f9:5f:68:f6:1d:ae:1e:3f:34:2f:9f:15:03:9b:41:90:6a: 6c:0e:de:9a:31:9d:04:ca:f8:19:59:d7:3d:b4:1c:a0:30:ff: 02:2c:9d:14:db:7f:de:c6:46:7f:f8:88:fb:8a:75:5b:9b:9c: 8b:99:f7:5b:57:75:0a:fd:e3:c3:63:7e:67:d6:26:35:ad:3d: 5b:c8:53:54:e4:25:d3:96:88:a4:c7:74:9a:84:45:15:a1:ed: f3:bb:31:47 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUetOIR0rDe3EHOisItmbITItH05cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0IxRTJGQTlCNUJBMUE2MEY2MDE4MEIxRDU2NDA0NUVE NjdFQjRBMTAeFw0yNjEwMzExNzI0MzBaFw0yNjExMDExOTIwMzBaMDMxMTAvBgNV BAMTKDA4QTVCNjU3OUJBOTU4OTJBNzE3OTdDMDIzMDlBN0Q3QzFGNTc2QTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC65P9tRd9ivJatn8kEhasdtlQc GPinHVbdssA9C39X+799DZNPY7A5ECvnlxYpxLEg3RqqPc1ft20rB77HXo5qu59n pFX0PX/Y0uIIYSB/HNn0Oo31CnJmfTy6L74B6uNWeEDCWIUtoxWPKW2DA5KhUb1U 3IoPhduB1MfknDfxzApeTBDACVe5QOszdTQI1iVNfvgY80lMUhmSCiSUFlPwxpd3 6TQA4FPn2W/92ggbc032xxnVcQ0W4r8ILAcsm006L/rEi/OiTN/Fe+fmEizeVRxd dsrGNH8f0KfN5/OY581B+lMvrIIe03+gMqgYCu0UbgmKe0RpXoVQ8jwl9tRjAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUCKW2V5upWJKnF5fAIwmn18H1dqAwHwYDVR0j BBgwFoAUOx4vqbW6GmD2AYCx1WQEXtZ+tKEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ1k4VWtnZ0NDQjJjYmNQaDZtcUhaVldlWTNXSllOVnJxdFVqZ1BCcUFt WVQvMC8zQjFFMkZBOUI1QkExQTYwRjYwMTgwQjFENTY0MDQ1RUQ2N0VCNEExLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNCMUUyRkE5QjVCQTFBNjBG NjAxODBCMUQ1NjQwNDVFRDY3RUI0QTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q1k4VWtnZ0NDQjJjYmNQaDZtcUhaVldlWTNXSllOVnJxdFVqZ1BCcUFtWVQvMC8z QjFFMkZBOUI1QkExQTYwRjYwMTgwQjFENTY0MDQ1RUQ2N0VCNEExLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEA2OtSQJiB3L683mZfHWq4IRwJ8k9zj0tdkPp7CqV4Vo1uDzBvyfmRUk+dnP7x HSlDN5Nkl9V8GCV59BUV/fpumSVGJGAKGdl2OnyDYVPL6Q46D+LEpLhGxZfz8XQf 2j3Jr1MMSvGgIZ19AMzawfysUgHzYcBzVOmRhmv1pBZLRf4b2ZfayCL5pEI6oDZ3 XyOVQVA8cav1LYOkzJspc80y7M/ew/lfaPYdrh4/NC+fFQObQZBqbA7emjGdBMr4 GVnXPbQcoDD/AiydFNt/3sZGf/iI+4p1W5uci5n3W1d1Cv3jw2N+Z9YmNa09W8hT VOQl05aIpMd0moRFFaHt87sxRw== -----END CERTIFICATE-----Generated at Sun Nov 1 08:25:16 2026 by rpki-client