$ rpki-client -vvvf rpki-repo.registro.br/repo/D22S2fFD3vBiGgDajdav7YNXyxUqjZgW3xexjkVpu2Nm/0/B53BC7F8E9156B14E11D55FD8D358D0A91FCE8E2.mft File: B53BC7F8E9156B14E11D55FD8D358D0A91FCE8E2.mft (raw, json) Hash identifier: n5nPY1tSuFZDuRMFH3L8Xr4zXekWPEJrfxAoooAL6pg= Subject key identifier: B9:EF:4E:CD:C9:E5:1F:DF:67:C0:09:EA:D2:88:1B:C7:F7:0B:83:E7 Authority key identifier: B5:3B:C7:F8:E9:15:6B:14:E1:1D:55:FD:8D:35:8D:0A:91:FC:E8:E2 Certificate issuer: /CN=B53BC7F8E9156B14E11D55FD8D358D0A91FCE8E2 Certificate serial: 638A8647E0967C6DFEFB5F9BA6765278E3AF19B6 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B53BC7F8E9156B14E11D55FD8D358D0A91FCE8E2.cer Subject info access: rsync://rpki-repo.registro.br/repo/D22S2fFD3vBiGgDajdav7YNXyxUqjZgW3xexjkVpu2Nm/0/B53BC7F8E9156B14E11D55FD8D358D0A91FCE8E2.mft Manifest number: 03C5 Signing time: Fri 30 Oct 2026 06:53:15 +0000 Manifest this update: Fri 30 Oct 2026 06:48:15 +0000 Manifest next update: Sat 31 Oct 2026 07:24:15 +0000 Files and hashes: 1: B53BC7F8E9156B14E11D55FD8D358D0A91FCE8E2.crl (hash: +ziroW2bpyrd41qbMWyXWaV26TF40b0BCHXPvp77gRY=) 2: 3133312e37322e33362e302f32322d3234203d3e20323730363932.roa (hash: A068GDKE7NVod9t4EYmwsBt9cHKNtqvvzMBnwWxyBC8=) 3: 323830343a366665383a3a2f33322d3438203d3e20323730363932.roa (hash: qgrl8LHw1FrnDiP6+tZLuMBv39jmO7L7Uk033mQk7bE=) 4: 3137372e3132382e35322e302f32322d3234203d3e20323730363932.roa (hash: FVIw43GJTCCNZDHsT7hG3NR44Cp6wSNNP5p34nwCLLI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/D22S2fFD3vBiGgDajdav7YNXyxUqjZgW3xexjkVpu2Nm/0/B53BC7F8E9156B14E11D55FD8D358D0A91FCE8E2.crl rsync://rpki-repo.registro.br/repo/D22S2fFD3vBiGgDajdav7YNXyxUqjZgW3xexjkVpu2Nm/0/B53BC7F8E9156B14E11D55FD8D358D0A91FCE8E2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B53BC7F8E9156B14E11D55FD8D358D0A91FCE8E2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 31 Oct 2026 07:24:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:8a:86:47:e0:96:7c:6d:fe:fb:5f:9b:a6:76:52:78:e3:af:19:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B53BC7F8E9156B14E11D55FD8D358D0A91FCE8E2 Validity Not Before: Oct 30 06:48:15 2026 GMT Not After : Oct 31 07:24:15 2026 GMT Subject: CN=B9EF4ECDC9E51FDF67C009EAD2881BC7F70B83E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:7e:ac:f0:e0:f6:6c:db:ff:f9:8d:b1:05:6d: 9f:fe:99:06:80:e2:0d:30:19:a7:49:78:b2:64:66: 46:12:d5:66:8f:b8:c0:8b:ca:d1:69:72:49:f8:79: d9:27:8c:f4:19:5e:dc:8a:fc:d4:3c:25:0b:05:79: 8a:72:c3:af:72:1e:54:36:04:5a:11:71:c7:b4:e6: eb:05:b3:12:5d:c2:c3:88:37:a0:5f:35:c1:6d:32: f4:fb:3f:63:75:d4:f2:52:77:5b:b7:63:88:4e:7a: 9b:95:11:58:af:dd:4b:28:a0:ae:5d:f1:99:21:f7: 51:0f:51:18:a1:35:a3:0c:db:41:d5:c8:be:c6:ba: 59:19:9f:66:70:dc:45:26:99:8e:5c:e9:1a:a0:46: 6c:17:71:15:5e:cc:e0:cc:dd:fd:0e:29:a0:d3:48: 50:f0:69:5a:14:73:af:0e:d7:11:5e:34:6f:8d:75: 66:f5:33:6f:2c:b4:78:33:09:64:fe:cc:3e:37:fb: ae:0b:bd:6a:f3:a2:93:18:18:6b:8f:67:93:70:5e: 03:18:a3:18:ac:2c:66:59:b4:ff:5a:44:6b:fd:91: a8:64:ec:83:62:92:d8:7f:7d:56:9d:8e:04:dc:a5: b6:53:71:63:2e:90:49:d8:f1:73:55:9e:da:4e:11: 8f:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:EF:4E:CD:C9:E5:1F:DF:67:C0:09:EA:D2:88:1B:C7:F7:0B:83:E7 X509v3 Authority Key Identifier: keyid:B5:3B:C7:F8:E9:15:6B:14:E1:1D:55:FD:8D:35:8D:0A:91:FC:E8:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/D22S2fFD3vBiGgDajdav7YNXyxUqjZgW3xexjkVpu2Nm/0/B53BC7F8E9156B14E11D55FD8D358D0A91FCE8E2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B53BC7F8E9156B14E11D55FD8D358D0A91FCE8E2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/D22S2fFD3vBiGgDajdav7YNXyxUqjZgW3xexjkVpu2Nm/0/B53BC7F8E9156B14E11D55FD8D358D0A91FCE8E2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:98:aa:be:63:86:61:69:6a:e4:69:48:4a:48:58:0e:6b:d9: ad:37:55:96:22:63:cd:2a:0e:a8:4f:e6:75:1b:41:88:53:ab: 80:83:58:ea:74:1f:0c:4c:ad:b5:56:70:79:21:70:30:75:80: 34:c3:4b:21:3e:f9:44:50:93:5f:a4:35:ab:4f:98:5e:9e:4c: 57:89:00:36:00:60:67:c8:8d:2a:4d:e5:e4:58:ec:d7:51:c5: 4a:0b:b8:02:83:f3:e4:3f:94:54:dc:6f:7c:5d:51:5b:06:10: de:de:c4:a5:04:a6:8c:83:3b:54:a9:91:40:bd:bf:6a:87:8f: c0:45:23:4d:4d:64:e6:8d:32:60:fe:66:5f:97:67:e5:58:d3: 33:11:6c:04:e5:c3:60:cc:2b:b7:19:19:01:52:90:3e:a4:2d: 56:5a:a9:e3:0b:88:6f:56:34:10:88:d1:23:e7:ff:5f:d4:62: 63:d9:03:69:26:16:82:40:c4:f7:08:7c:47:11:6c:9a:51:8f: 5e:7f:95:e4:0d:65:8f:c7:c3:af:7c:cf:67:2d:55:be:b5:04: f4:24:86:a4:f7:7b:ed:bd:07:0c:78:4b:95:ff:e8:61:b5:41: ef:eb:f4:16:ca:e9:74:f4:56:16:f4:e8:93:5f:b6:0c:b1:c4: cd:46:6f:ba -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUY4qGR+CWfG3++1+bpnZSeOOvGbYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjUzQkM3RjhFOTE1NkIxNEUxMUQ1NUZEOEQzNThEMEE5 MUZDRThFMjAeFw0yNjEwMzAwNjQ4MTVaFw0yNjEwMzEwNzI0MTVaMDMxMTAvBgNV BAMTKEI5RUY0RUNEQzlFNTFGREY2N0MwMDlFQUQyODgxQkM3RjcwQjgzRTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChfqzw4PZs2//5jbEFbZ/+mQaA 4g0wGadJeLJkZkYS1WaPuMCLytFpckn4edknjPQZXtyK/NQ8JQsFeYpyw69yHlQ2 BFoRcce05usFsxJdwsOIN6BfNcFtMvT7P2N11PJSd1u3Y4hOepuVEViv3UsooK5d 8Zkh91EPURihNaMM20HVyL7GulkZn2Zw3EUmmY5c6RqgRmwXcRVezODM3f0OKaDT SFDwaVoUc68O1xFeNG+NdWb1M28stHgzCWT+zD43+64LvWrzopMYGGuPZ5NwXgMY oxisLGZZtP9aRGv9kahk7INikth/fVadjgTcpbZTcWMukEnY8XNVntpOEY+7AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUue9OzcnlH99nwAnq0ogbx/cLg+cwHwYDVR0j BBgwFoAUtTvH+OkVaxThHVX9jTWNCpH86OIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRDIyUzJmRkQzdkJpR2dEYWpkYXY3WU5YeXhVcWpaZ1czeGV4amtWcHUy Tm0vMC9CNTNCQzdGOEU5MTU2QjE0RTExRDU1RkQ4RDM1OEQwQTkxRkNFOEUyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I1M0JDN0Y4RTkxNTZCMTRF MTFENTVGRDhEMzU4RDBBOTFGQ0U4RTIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RDIyUzJmRkQzdkJpR2dEYWpkYXY3WU5YeXhVcWpaZ1czeGV4amtWcHUyTm0vMC9C NTNCQzdGOEU5MTU2QjE0RTExRDU1RkQ4RDM1OEQwQTkxRkNFOEUyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtJiqvmOGYWlq5GlISkhYDmvZrTdVliJjzSoOqE/mdRtBiFOrgINY6nQfDEyt tVZweSFwMHWANMNLIT75RFCTX6Q1q0+YXp5MV4kANgBgZ8iNKk3l5Fjs11HFSgu4 AoPz5D+UVNxvfF1RWwYQ3t7EpQSmjIM7VKmRQL2/aoePwEUjTU1k5o0yYP5mX5dn 5VjTMxFsBOXDYMwrtxkZAVKQPqQtVlqp4wuIb1Y0EIjRI+f/X9RiY9kDaSYWgkDE 9wh8RxFsmlGPXn+V5A1lj8fDr3zPZy1VvrUE9CSGpPd77b0HDHhLlf/oYbVB7+v0 FsrpdPRWFvTok1+2DLHEzUZvug== -----END CERTIFICATE-----Generated at Fri Oct 30 14:29:21 2026 by rpki-client