$ rpki-client -vvvf rpki-repo.registro.br/repo/DibuFSdUvjJabtVDqcojWWQUCKXNRF6jnSfMMFqCGzLm/0/2AF88F2F55F2173D30891E36BC8717C5E2DCEA5F.mft File: 2AF88F2F55F2173D30891E36BC8717C5E2DCEA5F.mft (raw, json) Hash identifier: O1F+P26XRoA7CwPjfstK5hcL4xYE6HckmBui6j+8KNU= Subject key identifier: 24:33:C1:22:E1:03:0F:A8:99:AD:24:F5:E8:13:C9:EF:72:D9:EF:D3 Authority key identifier: 2A:F8:8F:2F:55:F2:17:3D:30:89:1E:36:BC:87:17:C5:E2:DC:EA:5F Certificate issuer: /CN=2AF88F2F55F2173D30891E36BC8717C5E2DCEA5F Certificate serial: 47EF8CFC77EE544B389395849DC8406BC358EBCB Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AF88F2F55F2173D30891E36BC8717C5E2DCEA5F.cer Subject info access: rsync://rpki-repo.registro.br/repo/DibuFSdUvjJabtVDqcojWWQUCKXNRF6jnSfMMFqCGzLm/0/2AF88F2F55F2173D30891E36BC8717C5E2DCEA5F.mft Manifest number: 10 Signing time: Sat 31 Oct 2026 15:38:44 +0000 Manifest this update: Sat 31 Oct 2026 15:33:44 +0000 Manifest next update: Sun 01 Nov 2026 16:16:44 +0000 Files and hashes: 1: 323830343a313863343a3a2f33322d3438203d3e203533303439.roa (hash: ZZuS3Uoej8wr/QKZnrMDE5NfDJ+LVjYod8YBTJxLPvY=) 2: 2AF88F2F55F2173D30891E36BC8717C5E2DCEA5F.crl (hash: VF41KemMwMsAbj6eOuCe6c94t7QTvxsRs5I/WAmNY+4=) 3: 3230302e3134322e3138342e302f32322d3234203d3e203533303439.roa (hash: efyCXmyBeCaBMMZb0bcuBEG4OMnCN1AJhWiCuaxDh5M=) 4: AS53049.asa (hash: Ce/BCrBWZISo0zR+jb+Qs7uCJ0+YEZApEdu+8udqlzM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DibuFSdUvjJabtVDqcojWWQUCKXNRF6jnSfMMFqCGzLm/0/2AF88F2F55F2173D30891E36BC8717C5E2DCEA5F.crl rsync://rpki-repo.registro.br/repo/DibuFSdUvjJabtVDqcojWWQUCKXNRF6jnSfMMFqCGzLm/0/2AF88F2F55F2173D30891E36BC8717C5E2DCEA5F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AF88F2F55F2173D30891E36BC8717C5E2DCEA5F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 01 Nov 2026 16:16:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:ef:8c:fc:77:ee:54:4b:38:93:95:84:9d:c8:40:6b:c3:58:eb:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2AF88F2F55F2173D30891E36BC8717C5E2DCEA5F Validity Not Before: Oct 31 15:33:44 2026 GMT Not After : Nov 1 16:16:44 2026 GMT Subject: CN=2433C122E1030FA899AD24F5E813C9EF72D9EFD3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:2e:f7:2f:a6:be:04:7d:b5:94:39:4b:ca:10: 4a:1d:32:18:2b:b2:ad:d7:b9:2f:02:2a:e1:2f:19: b3:73:64:26:51:fa:74:32:a8:5a:4e:7c:81:b9:03: fc:48:a3:8c:b0:ab:fe:41:5b:9e:8a:b0:df:96:e3: d0:79:d5:05:20:26:3a:00:3d:b1:b0:0c:0f:42:62: 01:8c:2f:47:3e:05:36:e5:eb:72:9c:ff:07:3c:26: 61:d5:ca:98:91:33:71:18:f8:39:53:4b:34:92:4b: 33:b3:19:62:bf:a9:3f:2b:6d:b4:78:cb:49:57:ce: bd:5b:3c:39:e8:bc:59:39:5b:dc:eb:c2:1e:d0:d5: 5d:65:39:c5:c4:a6:2d:5f:70:3a:9e:76:f4:05:23: 53:62:12:67:64:3b:8e:fc:8a:62:98:27:ee:b8:61: 1f:e2:88:10:c4:56:29:e9:9d:04:b7:1e:a8:37:06: 3f:78:44:d0:17:e3:9f:23:f5:f4:71:7d:00:45:1f: fd:d0:80:7b:55:51:9b:c6:57:21:02:aa:98:6a:3d: 9d:fc:f3:fd:e0:26:56:80:f2:80:45:18:5e:3b:ef: 1e:3c:7a:ef:07:ab:ad:ef:b9:fa:eb:07:ad:d6:20: c8:6b:78:8c:b8:6d:6f:ce:d3:c3:65:45:30:6f:9a: d2:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:33:C1:22:E1:03:0F:A8:99:AD:24:F5:E8:13:C9:EF:72:D9:EF:D3 X509v3 Authority Key Identifier: keyid:2A:F8:8F:2F:55:F2:17:3D:30:89:1E:36:BC:87:17:C5:E2:DC:EA:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DibuFSdUvjJabtVDqcojWWQUCKXNRF6jnSfMMFqCGzLm/0/2AF88F2F55F2173D30891E36BC8717C5E2DCEA5F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AF88F2F55F2173D30891E36BC8717C5E2DCEA5F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DibuFSdUvjJabtVDqcojWWQUCKXNRF6jnSfMMFqCGzLm/0/2AF88F2F55F2173D30891E36BC8717C5E2DCEA5F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:8a:d0:fc:dc:24:05:ca:f1:79:20:ee:93:b2:05:ab:b0:b5: 0d:d0:ad:da:71:38:ed:bb:99:24:01:2d:47:a9:63:10:d5:c5: 44:27:07:fc:73:ce:04:40:e0:17:70:37:b8:9a:6a:db:f0:ed: 34:86:9e:46:d7:11:ef:05:39:f0:48:ef:0d:d8:2b:6f:1a:b0: 2e:b7:d7:39:d4:9b:72:f6:c8:08:5c:63:e6:bc:3d:24:e2:79: c3:cc:23:7c:fd:9e:90:8b:f5:4e:bd:05:90:da:20:ca:ed:69: 04:b9:48:86:df:6a:dc:6d:0e:85:c9:65:21:1d:3d:52:d4:13: 53:ff:31:d5:de:c9:e0:39:08:6c:04:ff:2c:6b:fa:a6:a0:ab: 23:8b:f0:e9:94:c7:66:eb:6c:1f:57:7e:ea:90:9e:32:bd:fb: 27:10:85:16:6e:2e:5f:f4:a3:52:dd:08:d9:54:82:c0:d0:18: fe:8f:a7:11:2c:c1:e1:86:f0:b7:0e:7c:51:a5:3d:a3:a5:5c: e2:ef:4e:c3:89:f5:e2:35:56:40:ec:00:1b:53:69:8d:95:0f: f6:e8:68:4c:94:7f:ad:be:99:a8:23:33:a3:e0:0c:0b:37:58: de:6d:33:6a:87:5b:ce:6f:7b:db:bf:45:dd:78:16:13:fb:58: f4:85:69:0f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUR++M/HfuVEs4k5WEnchAa8NY68swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFGODhGMkY1NUYyMTczRDMwODkxRTM2QkM4NzE3QzVF MkRDRUE1RjAeFw0yNjEwMzExNTMzNDRaFw0yNjExMDExNjE2NDRaMDMxMTAvBgNV BAMTKDI0MzNDMTIyRTEwMzBGQTg5OUFEMjRGNUU4MTNDOUVGNzJEOUVGRDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlLvcvpr4EfbWUOUvKEEodMhgr sq3XuS8CKuEvGbNzZCZR+nQyqFpOfIG5A/xIo4ywq/5BW56KsN+W49B51QUgJjoA PbGwDA9CYgGML0c+BTbl63Kc/wc8JmHVypiRM3EY+DlTSzSSSzOzGWK/qT8rbbR4 y0lXzr1bPDnovFk5W9zrwh7Q1V1lOcXEpi1fcDqedvQFI1NiEmdkO478imKYJ+64 YR/iiBDEVinpnQS3Hqg3Bj94RNAX458j9fRxfQBFH/3QgHtVUZvGVyECqphqPZ38 8/3gJlaA8oBFGF477x48eu8Hq63vufrrB63WIMhreIy4bW/O08NlRTBvmtKrAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUJDPBIuEDD6iZrST16BPJ73LZ79MwHwYDVR0j BBgwFoAUKviPL1XyFz0wiR42vIcXxeLc6l8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRGlidUZTZFV2akphYnRWRHFjb2pXV1FVQ0tYTlJGNmpuU2ZNTUZxQ0d6 TG0vMC8yQUY4OEYyRjU1RjIxNzNEMzA4OTFFMzZCQzg3MTdDNUUyRENFQTVGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJBRjg4RjJGNTVGMjE3M0Qz MDg5MUUzNkJDODcxN0M1RTJEQ0VBNUYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RGlidUZTZFV2akphYnRWRHFjb2pXV1FVQ0tYTlJGNmpuU2ZNTUZxQ0d6TG0vMC8y QUY4OEYyRjU1RjIxNzNEMzA4OTFFMzZCQzg3MTdDNUUyRENFQTVGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaorQ/NwkBcrxeSDuk7IFq7C1DdCt2nE47buZJAEtR6ljENXFRCcH/HPOBEDg F3A3uJpq2/DtNIaeRtcR7wU58EjvDdgrbxqwLrfXOdSbcvbICFxj5rw9JOJ5w8wj fP2ekIv1Tr0FkNogyu1pBLlIht9q3G0OhcllIR09UtQTU/8x1d7J4DkIbAT/LGv6 pqCrI4vw6ZTHZutsH1d+6pCeMr37JxCFFm4uX/SjUt0I2VSCwNAY/o+nESzB4Ybw tw58UaU9o6Vc4u9Ow4n14jVWQOwAG1NpjZUP9uhoTJR/rb6ZqCMzo+AMCzdY3m0z aodbzm97279F3XgWE/tY9IVpDw== -----END CERTIFICATE-----Generated at Sun Nov 1 08:33:35 2026 by rpki-client