$ rpki-client -vvvf rpki-repo.registro.br/repo/DiedU9B7M6NxXr5xQhJdft17HNsjQS3dg6iUHrJZiVAv/0/FED6A961782D101F9B7A4CC4F0DD334716AEDD02.mft File: FED6A961782D101F9B7A4CC4F0DD334716AEDD02.mft (raw, json) Hash identifier: Dysi/GnEHeANUi5m4jNDKTJ7MCJQwSDVzETP0e3DqsY= Subject key identifier: 60:54:71:91:59:66:4E:B3:A5:85:2E:D2:EC:38:96:A5:71:5A:DF:D7 Authority key identifier: FE:D6:A9:61:78:2D:10:1F:9B:7A:4C:C4:F0:DD:33:47:16:AE:DD:02 Certificate issuer: /CN=FED6A961782D101F9B7A4CC4F0DD334716AEDD02 Certificate serial: 35126EA566D52A9D001B312C7583F8EA655DED28 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FED6A961782D101F9B7A4CC4F0DD334716AEDD02.cer Subject info access: rsync://rpki-repo.registro.br/repo/DiedU9B7M6NxXr5xQhJdft17HNsjQS3dg6iUHrJZiVAv/0/FED6A961782D101F9B7A4CC4F0DD334716AEDD02.mft Manifest number: A0 Signing time: Mon 02 Nov 2026 09:29:42 +0000 Manifest this update: Mon 02 Nov 2026 09:24:42 +0000 Manifest next update: Tue 03 Nov 2026 11:15:42 +0000 Files and hashes: 1: FED6A961782D101F9B7A4CC4F0DD334716AEDD02.crl (hash: CZy+I6Y5jn2nT348nYjIypvzkuxYBjgYx2jFANUuwt0=) 2: 3138372e3130392e38302e302f32302d3330203d3e203533313339.roa (hash: LpgsxtbPcwKmi56Cg4XsJhCYpU/f5rl4o501LSjO2O8=) 3: 3136382e3139372e3230342e302f32322d3234203d3e203533313339.roa (hash: /UajwF0hY5sc9QRqWjRWwDRDfV7szBc5VxagGNugeEo=) 4: 323830343a333164343a3a2f33322d313238203d3e203533313339.roa (hash: r7W9XBKOktnvuxWc2GxikG0xL1olYx6Tl9sxbDGvi4w=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DiedU9B7M6NxXr5xQhJdft17HNsjQS3dg6iUHrJZiVAv/0/FED6A961782D101F9B7A4CC4F0DD334716AEDD02.crl rsync://rpki-repo.registro.br/repo/DiedU9B7M6NxXr5xQhJdft17HNsjQS3dg6iUHrJZiVAv/0/FED6A961782D101F9B7A4CC4F0DD334716AEDD02.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FED6A961782D101F9B7A4CC4F0DD334716AEDD02.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 03 Nov 2026 11:15:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:12:6e:a5:66:d5:2a:9d:00:1b:31:2c:75:83:f8:ea:65:5d:ed:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FED6A961782D101F9B7A4CC4F0DD334716AEDD02 Validity Not Before: Nov 2 09:24:42 2026 GMT Not After : Nov 3 11:15:42 2026 GMT Subject: CN=6054719159664EB3A5852ED2EC3896A5715ADFD7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c9:d5:36:15:b2:92:c1:ac:53:81:c1:d6:6c: 84:81:4b:75:77:f8:d4:da:d2:97:22:d1:c4:61:7e: a3:73:6a:43:6b:7a:2f:98:85:ba:db:96:4e:a7:41: 93:29:25:46:dc:af:4e:9d:0d:b2:49:23:96:ca:aa: 2b:2f:ae:27:7a:0f:fe:b2:e6:2e:a9:0e:3e:70:c4: b2:a4:3d:98:e4:66:0c:a2:2a:9e:cd:52:90:b9:06: 74:33:d8:ab:d2:fe:3b:7a:50:44:50:79:21:e4:34: e6:d8:70:b0:51:e8:10:6e:d9:90:80:5e:67:aa:c5: cf:c6:0f:73:60:c6:ac:fa:7c:ce:41:93:f7:63:0d: 4e:82:b1:e1:aa:6b:1c:32:2c:27:f1:85:76:86:6e: 55:af:45:28:b6:3f:6f:97:7c:6f:7b:59:18:51:11: 23:9b:cd:ca:f3:5c:58:5b:25:b5:5e:5d:65:e4:2b: 38:64:8f:08:00:27:57:07:40:37:28:89:12:aa:0a: a3:88:8b:cd:3a:b0:e1:5d:d3:40:ed:6f:ef:e4:90: d9:07:5d:ac:a8:bf:b8:e9:fa:87:15:f8:18:2a:07: d4:e9:e2:94:f4:af:7b:88:92:23:6b:ce:9f:07:0a: 1b:8c:c3:70:27:bc:f5:71:98:b1:db:86:bc:a1:21: 35:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:54:71:91:59:66:4E:B3:A5:85:2E:D2:EC:38:96:A5:71:5A:DF:D7 X509v3 Authority Key Identifier: keyid:FE:D6:A9:61:78:2D:10:1F:9B:7A:4C:C4:F0:DD:33:47:16:AE:DD:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DiedU9B7M6NxXr5xQhJdft17HNsjQS3dg6iUHrJZiVAv/0/FED6A961782D101F9B7A4CC4F0DD334716AEDD02.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FED6A961782D101F9B7A4CC4F0DD334716AEDD02.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DiedU9B7M6NxXr5xQhJdft17HNsjQS3dg6iUHrJZiVAv/0/FED6A961782D101F9B7A4CC4F0DD334716AEDD02.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:aa:43:53:4f:58:13:17:b2:a5:6b:ff:de:86:83:e9:94:ae: 33:cd:45:07:5b:80:00:92:b1:9d:46:ef:e0:d7:53:ea:51:b5: 8d:02:fd:a0:c1:c2:85:09:34:20:46:7f:9c:c6:dc:85:dc:ed: fc:88:a9:bf:10:10:da:dd:25:67:e9:e2:53:25:29:93:db:5d: 9f:06:2c:e8:a9:7b:93:04:b7:57:58:4c:13:0a:b7:cd:96:fa: 73:39:9d:a1:ff:4f:7f:eb:87:12:9f:c9:6e:79:3a:3c:2f:9e: 36:5a:70:13:23:c1:e3:79:e4:6b:9f:67:d0:70:ed:22:72:e9: c2:41:23:e6:d4:73:d5:54:2c:80:74:98:74:a3:ac:49:aa:61: 68:51:a7:67:ca:23:f5:c1:6a:80:21:47:96:e2:15:8e:58:ba: b7:d7:c8:84:ba:3d:22:00:d7:5d:20:e4:5b:30:f2:1a:be:ff: 7c:cb:9b:f3:fa:8e:38:0f:49:49:ae:8b:53:52:4e:a0:b2:62: 19:f4:de:76:46:a6:52:57:20:01:9f:57:8b:91:a7:e6:93:1d: e1:70:70:dc:9d:8d:fc:9d:56:dc:a6:9e:6c:5e:3e:5d:bf:8d: 44:b6:4e:6d:f0:d5:6a:a4:8e:05:86:a1:f4:be:7a:3c:92:d1: c0:81:93:a0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUNRJupWbVKp0AGzEsdYP46mVd7SgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkVENkE5NjE3ODJEMTAxRjlCN0E0Q0M0RjBERDMzNDcx NkFFREQwMjAeFw0yNjExMDIwOTI0NDJaFw0yNjExMDMxMTE1NDJaMDMxMTAvBgNV BAMTKDYwNTQ3MTkxNTk2NjRFQjNBNTg1MkVEMkVDMzg5NkE1NzE1QURGRDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtydU2FbKSwaxTgcHWbISBS3V3 +NTa0pci0cRhfqNzakNrei+Yhbrblk6nQZMpJUbcr06dDbJJI5bKqisvrid6D/6y 5i6pDj5wxLKkPZjkZgyiKp7NUpC5BnQz2KvS/jt6UERQeSHkNObYcLBR6BBu2ZCA Xmeqxc/GD3Ngxqz6fM5Bk/djDU6CseGqaxwyLCfxhXaGblWvRSi2P2+XfG97WRhR ESObzcrzXFhbJbVeXWXkKzhkjwgAJ1cHQDcoiRKqCqOIi806sOFd00Dtb+/kkNkH Xayov7jp+ocV+BgqB9Tp4pT0r3uIkiNrzp8HChuMw3AnvPVxmLHbhryhITXfAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUYFRxkVlmTrOlhS7S7DiWpXFa39cwHwYDVR0j BBgwFoAU/tapYXgtEB+bekzE8N0zRxau3QIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRGllZFU5QjdNNk54WHI1eFFoSmRmdDE3SE5zalFTM2RnNmlVSHJKWmlW QXYvMC9GRUQ2QTk2MTc4MkQxMDFGOUI3QTRDQzRGMEREMzM0NzE2QUVERDAyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZFRDZBOTYxNzgyRDEwMUY5 QjdBNENDNEYwREQzMzQ3MTZBRUREMDIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RGllZFU5QjdNNk54WHI1eFFoSmRmdDE3SE5zalFTM2RnNmlVSHJKWmlWQXYvMC9G RUQ2QTk2MTc4MkQxMDFGOUI3QTRDQzRGMEREMzM0NzE2QUVERDAyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEADKpDU09YExeypWv/3oaD6ZSuM81FB1uAAJKxnUbv4NdT6lG1jQL9oMHChQk0 IEZ/nMbchdzt/IipvxAQ2t0lZ+niUyUpk9tdnwYs6Kl7kwS3V1hMEwq3zZb6czmd of9Pf+uHEp/Jbnk6PC+eNlpwEyPB43nka59n0HDtInLpwkEj5tRz1VQsgHSYdKOs SaphaFGnZ8oj9cFqgCFHluIVjli6t9fIhLo9IgDXXSDkWzDyGr7/fMub8/qOOA9J Sa6LU1JOoLJiGfTedkamUlcgAZ9Xi5Gn5pMd4XBw3J2N/J1W3KaebF4+Xb+NRLZO bfDVaqSOBYah9L56PJLRwIGToA== -----END CERTIFICATE-----Generated at Mon Nov 2 22:33:54 2026 by rpki-client