$ rpki-client -vvvf rpki-repo.registro.br/repo/D63PA1hfJWr4RTdQnMTHXwmNSSs1ECUhUvPjxPNDXTwT/0/CE3C207E6CECB94C8BBCB66C2C5B31B29FA220B7.mft File: CE3C207E6CECB94C8BBCB66C2C5B31B29FA220B7.mft (raw, json) Hash identifier: tPywsCku0ruU0zEP83FqNd2XDtXI4hE/zZXO4Fc3GJQ= Subject key identifier: 2D:CB:8E:E4:8E:75:70:72:20:54:46:36:A0:37:9A:18:E9:0E:82:C7 Authority key identifier: CE:3C:20:7E:6C:EC:B9:4C:8B:BC:B6:6C:2C:5B:31:B2:9F:A2:20:B7 Certificate issuer: /CN=CE3C207E6CECB94C8BBCB66C2C5B31B29FA220B7 Certificate serial: 1F9296CD37D710E5084A0CE99C5A561B442A3E55 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE3C207E6CECB94C8BBCB66C2C5B31B29FA220B7.cer Subject info access: rsync://rpki-repo.registro.br/repo/D63PA1hfJWr4RTdQnMTHXwmNSSs1ECUhUvPjxPNDXTwT/0/CE3C207E6CECB94C8BBCB66C2C5B31B29FA220B7.mft Manifest number: 0165 Signing time: Sun 01 Nov 2026 03:18:57 +0000 Manifest this update: Sun 01 Nov 2026 03:13:57 +0000 Manifest next update: Mon 02 Nov 2026 06:38:57 +0000 Files and hashes: 1: 3230302e3139322e3135322e302f32322d3234203d3e203631363133.roa (hash: u/gXstXvaoXswmUY2weSiF3XDVA5+Rjw0+u0Ea1eciY=) 2: CE3C207E6CECB94C8BBCB66C2C5B31B29FA220B7.crl (hash: EZisSJp4Fpa8RFjpdNIdqdFNgdGAcpYL/xdlrQtL6M0=) 3: 323830343a353936343a3a2f33322d3336203d3e203631363133.roa (hash: sHP2ygrqTYTY15dtbi0gTVuddZSIHRSH0IyS1EMxOo4=) 4: 34352e3137312e36302e302f32322d3234203d3e203631363133.roa (hash: rqFpRbi2nHQnPx4E/BliB9kjTJF3Fdr2CbPUaChmPDo=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/D63PA1hfJWr4RTdQnMTHXwmNSSs1ECUhUvPjxPNDXTwT/0/CE3C207E6CECB94C8BBCB66C2C5B31B29FA220B7.crl rsync://rpki-repo.registro.br/repo/D63PA1hfJWr4RTdQnMTHXwmNSSs1ECUhUvPjxPNDXTwT/0/CE3C207E6CECB94C8BBCB66C2C5B31B29FA220B7.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE3C207E6CECB94C8BBCB66C2C5B31B29FA220B7.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 02 Nov 2026 06:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:92:96:cd:37:d7:10:e5:08:4a:0c:e9:9c:5a:56:1b:44:2a:3e:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE3C207E6CECB94C8BBCB66C2C5B31B29FA220B7 Validity Not Before: Nov 1 03:13:57 2026 GMT Not After : Nov 2 06:38:57 2026 GMT Subject: CN=2DCB8EE48E75707220544636A0379A18E90E82C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:cf:f4:d8:b1:ea:c4:79:07:4c:a5:3f:7a:4d: 5e:71:8a:d7:e2:70:70:75:c5:10:d5:1b:b2:8e:62: 26:3d:a8:a1:9b:58:09:d9:f7:c8:27:16:90:fb:a3: 0d:3f:4b:e1:f1:7e:77:94:ae:ec:c6:ce:0c:9f:8b: 11:d6:2e:0c:9e:17:12:31:7b:68:f3:04:dc:2d:de: 8e:34:91:98:51:5e:e1:cb:14:90:1e:90:f3:69:c8: f5:88:31:1d:6c:af:45:81:45:62:16:f7:12:76:b1: f8:15:9c:20:28:6e:80:bd:ba:0f:16:52:cb:8b:db: e1:a0:c5:3f:c1:fb:42:3c:15:c1:c0:2e:d1:fa:ee: 24:12:34:6a:66:99:c0:04:1e:65:39:b5:c3:12:ca: 21:02:96:80:fd:02:73:99:ab:a8:a5:61:23:7a:0d: 3a:21:04:fc:32:e9:96:e5:11:84:47:30:1d:24:f4: fc:6e:af:3b:14:58:f6:9a:8a:b2:78:18:21:74:64: 2f:8d:64:2a:f7:71:ba:20:15:88:87:f6:fb:ed:39: 08:c3:df:ca:a0:be:7e:1f:4e:e7:62:56:d4:81:ac: f7:f9:ae:e1:96:b0:59:c2:ad:7e:e5:0c:71:01:ee: fa:00:a9:ed:94:38:d1:fb:2c:04:d6:b1:5c:46:5c: 3a:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:CB:8E:E4:8E:75:70:72:20:54:46:36:A0:37:9A:18:E9:0E:82:C7 X509v3 Authority Key Identifier: keyid:CE:3C:20:7E:6C:EC:B9:4C:8B:BC:B6:6C:2C:5B:31:B2:9F:A2:20:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/D63PA1hfJWr4RTdQnMTHXwmNSSs1ECUhUvPjxPNDXTwT/0/CE3C207E6CECB94C8BBCB66C2C5B31B29FA220B7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE3C207E6CECB94C8BBCB66C2C5B31B29FA220B7.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/D63PA1hfJWr4RTdQnMTHXwmNSSs1ECUhUvPjxPNDXTwT/0/CE3C207E6CECB94C8BBCB66C2C5B31B29FA220B7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:96:bf:f2:b5:85:3d:40:af:15:ca:cc:0c:18:72:7d:ce:6c: 7a:b7:c8:22:7e:93:cd:b6:49:52:22:57:57:56:6b:96:58:e1: a6:b4:98:b7:e4:86:85:57:d7:a8:76:a5:b1:55:2c:06:eb:44: 8c:9d:bb:eb:09:81:4d:15:44:08:84:7f:16:83:3f:e4:77:e9: 09:6e:27:be:99:d1:66:95:9f:8c:ab:2c:8a:4a:4c:9b:7e:ed: 54:00:01:22:1d:dc:e4:ba:3a:1f:95:43:a0:57:c9:1d:53:38: b4:54:d9:48:cd:49:ac:63:41:a8:02:c1:f7:d7:4f:ef:b4:cb: cc:ec:55:a7:cb:3d:61:48:1d:88:28:3b:7b:79:16:1a:6c:fc: 6d:c7:82:0e:fc:56:de:12:6a:7d:0a:cd:d9:f3:f9:85:ad:cd: 59:63:1e:83:31:8c:e6:df:a5:fc:3c:84:4c:c2:ac:58:8d:b8: b0:71:2d:fb:f7:67:96:ec:b0:61:61:86:ea:08:e9:f5:fa:24: d3:73:32:ad:18:bc:7e:51:e1:a2:09:7b:07:94:89:98:ee:a2: 3d:56:76:38:18:01:5c:1d:7c:83:e4:29:df:45:d6:6e:01:3b: bd:b9:e4:3a:0c:75:7b:39:bc:4d:cc:97:bc:0a:23:84:17:bb: cf:e4:40:e9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUH5KWzTfXEOUISgzpnFpWG0QqPlUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0UzQzIwN0U2Q0VDQjk0QzhCQkNCNjZDMkM1QjMxQjI5 RkEyMjBCNzAeFw0yNjExMDEwMzEzNTdaFw0yNjExMDIwNjM4NTdaMDMxMTAvBgNV BAMTKDJEQ0I4RUU0OEU3NTcwNzIyMDU0NDYzNkEwMzc5QTE4RTkwRTgyQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXz/TYserEeQdMpT96TV5xitfi cHB1xRDVG7KOYiY9qKGbWAnZ98gnFpD7ow0/S+HxfneUruzGzgyfixHWLgyeFxIx e2jzBNwt3o40kZhRXuHLFJAekPNpyPWIMR1sr0WBRWIW9xJ2sfgVnCAoboC9ug8W UsuL2+GgxT/B+0I8FcHALtH67iQSNGpmmcAEHmU5tcMSyiECloD9AnOZq6ilYSN6 DTohBPwy6ZblEYRHMB0k9PxurzsUWPaairJ4GCF0ZC+NZCr3cbogFYiH9vvtOQjD 38qgvn4fTudiVtSBrPf5ruGWsFnCrX7lDHEB7voAqe2UONH7LATWsVxGXDpzAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQULcuO5I51cHIgVEY2oDeaGOkOgscwHwYDVR0j BBgwFoAUzjwgfmzsuUyLvLZsLFsxsp+iILcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRDYzUEExaGZKV3I0UlRkUW5NVEhYd21OU1NzMUVDVWhVdlBqeFBORFhU d1QvMC9DRTNDMjA3RTZDRUNCOTRDOEJCQ0I2NkMyQzVCMzFCMjlGQTIyMEI3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NFM0MyMDdFNkNFQ0I5NEM4 QkJDQjY2QzJDNUIzMUIyOUZBMjIwQjcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RDYzUEExaGZKV3I0UlRkUW5NVEhYd21OU1NzMUVDVWhVdlBqeFBORFhUd1QvMC9D RTNDMjA3RTZDRUNCOTRDOEJCQ0I2NkMyQzVCMzFCMjlGQTIyMEI3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAc5a/8rWFPUCvFcrMDBhyfc5serfIIn6TzbZJUiJXV1ZrlljhprSYt+SGhVfX qHalsVUsButEjJ276wmBTRVECIR/FoM/5HfpCW4nvpnRZpWfjKssikpMm37tVAAB Ih3c5Lo6H5VDoFfJHVM4tFTZSM1JrGNBqALB99dP77TLzOxVp8s9YUgdiCg7e3kW Gmz8bceCDvxW3hJqfQrN2fP5ha3NWWMegzGM5t+l/DyETMKsWI24sHEt+/dnluyw YWGG6gjp9fok03MyrRi8flHhogl7B5SJmO6iPVZ2OBgBXB18g+Qp30XWbgE7vbnk Ogx1ezm8TcyXvAojhBe7z+RA6Q== -----END CERTIFICATE-----Generated at Sun Nov 1 14:42:49 2026 by rpki-client