$ rpki-client -vvvf rpki-repo.registro.br/repo/DvGjRXrma7jNGajs6mACSb5kBfYs6kuGt5rTV3exjvH9/1/A28F0C1ED18F48A669C76BA34CD72F2A1456A418.mft File: A28F0C1ED18F48A669C76BA34CD72F2A1456A418.mft (raw, json) Hash identifier: bZ14TRk3Ie6XXpKCutF2KufnMcpcYpVZxDz3NKxpZeg= Subject key identifier: 01:52:9C:30:84:66:BE:5A:1D:65:AE:E0:E7:03:6E:05:4C:EE:28:02 Authority key identifier: A2:8F:0C:1E:D1:8F:48:A6:69:C7:6B:A3:4C:D7:2F:2A:14:56:A4:18 Certificate issuer: /CN=A28F0C1ED18F48A669C76BA34CD72F2A1456A418 Certificate serial: 49FBE9AEF1E2C1CC86DABD7589069AADF0F131BD Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A28F0C1ED18F48A669C76BA34CD72F2A1456A418.cer Subject info access: rsync://rpki-repo.registro.br/repo/DvGjRXrma7jNGajs6mACSb5kBfYs6kuGt5rTV3exjvH9/1/A28F0C1ED18F48A669C76BA34CD72F2A1456A418.mft Manifest number: 04B6 Signing time: Mon 02 Nov 2026 22:08:03 +0000 Manifest this update: Mon 02 Nov 2026 22:03:03 +0000 Manifest next update: Wed 04 Nov 2026 02:07:03 +0000 Files and hashes: 1: 323830343a333731303a3a2f33322d3438203d3e20323636333837.roa (hash: XihMFDg1VESURt9hMHhCGsyPXZqUYEY2j2HnOUa+XDc=) 2: 3137302e38312e32302e302f32322d3234203d3e20323636333837.roa (hash: VNHC1KL0HjwiEGHqTKvfpZs6OREXGwKJQB08bXD7ftc=) 3: 3139312e33372e3134302e302f32322d3234203d3e20323636333837.roa (hash: VBamg+bVxbfqduycSEtuwrholj8qEs11J+3z2DoaVrI=) 4: A28F0C1ED18F48A669C76BA34CD72F2A1456A418.crl (hash: prOpAUqvWCR7ttgcVYB/bPr3LY0XuVM5rf4DGmHVLZQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DvGjRXrma7jNGajs6mACSb5kBfYs6kuGt5rTV3exjvH9/1/A28F0C1ED18F48A669C76BA34CD72F2A1456A418.crl rsync://rpki-repo.registro.br/repo/DvGjRXrma7jNGajs6mACSb5kBfYs6kuGt5rTV3exjvH9/1/A28F0C1ED18F48A669C76BA34CD72F2A1456A418.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A28F0C1ED18F48A669C76BA34CD72F2A1456A418.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 04 Nov 2026 02:07:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:fb:e9:ae:f1:e2:c1:cc:86:da:bd:75:89:06:9a:ad:f0:f1:31:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A28F0C1ED18F48A669C76BA34CD72F2A1456A418 Validity Not Before: Nov 2 22:03:03 2026 GMT Not After : Nov 4 02:07:03 2026 GMT Subject: CN=01529C308466BE5A1D65AEE0E7036E054CEE2802 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a4:0c:06:7e:0b:be:ba:ec:34:00:69:cb:de: e6:d7:1a:13:9e:fd:02:0f:4e:cb:c4:be:91:c7:82: a3:2b:98:35:27:53:07:f4:36:57:73:05:48:14:dd: 85:2e:fd:1c:ad:23:73:f5:3f:06:9e:6e:aa:53:47: fc:c2:2b:2e:81:76:68:f7:29:49:2a:09:c6:cb:ad: c4:bd:55:51:0b:16:25:7e:52:09:3f:c8:24:1b:ef: d9:4a:e7:b9:f2:e2:a2:a9:d7:01:d6:0a:53:e6:fe: 39:65:20:23:59:c2:2a:4e:0a:39:58:65:1b:8d:d0: a4:ff:ac:c3:49:51:bb:3a:1d:28:03:0e:4e:81:17: 4d:6a:93:e9:39:61:49:66:fd:dc:81:51:cb:fe:e1: 85:45:bb:f0:cd:a2:f3:cb:65:37:7f:d3:51:d7:87: 3b:7b:7e:3c:6a:8e:f6:a7:de:d0:15:01:00:28:4c: 96:7f:e3:f3:a6:b8:21:7e:7b:f1:df:d5:db:e8:48: c6:b7:37:e9:fe:53:4b:a7:c0:e2:3c:d9:7d:e1:3f: c7:24:2e:c5:38:07:1a:1a:30:a9:19:5a:86:bd:33: 2d:b0:8a:8f:af:a5:ef:6f:88:db:03:96:be:6c:24: 2d:82:db:ea:2b:00:d1:59:49:f8:97:f4:81:c5:16: a2:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:52:9C:30:84:66:BE:5A:1D:65:AE:E0:E7:03:6E:05:4C:EE:28:02 X509v3 Authority Key Identifier: keyid:A2:8F:0C:1E:D1:8F:48:A6:69:C7:6B:A3:4C:D7:2F:2A:14:56:A4:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DvGjRXrma7jNGajs6mACSb5kBfYs6kuGt5rTV3exjvH9/1/A28F0C1ED18F48A669C76BA34CD72F2A1456A418.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A28F0C1ED18F48A669C76BA34CD72F2A1456A418.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DvGjRXrma7jNGajs6mACSb5kBfYs6kuGt5rTV3exjvH9/1/A28F0C1ED18F48A669C76BA34CD72F2A1456A418.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:41:4c:da:14:fa:d4:86:83:88:b1:15:02:da:f9:8f:63:cc: 7e:d5:4c:5a:ba:dd:2a:8f:2b:2a:18:e5:76:ac:c6:2d:b2:a5: 76:aa:88:e0:79:4a:05:88:58:8d:26:42:38:40:69:35:82:b5: 82:0a:68:e2:81:86:34:25:18:fb:38:bc:4f:34:7c:b2:19:6c: 6c:cb:15:89:67:70:f2:45:c7:56:d6:a1:f4:42:b7:be:8e:95: 2a:0b:4e:3c:98:48:f7:41:8f:c4:c8:4e:cc:74:57:fe:11:44: 87:ec:e3:f3:96:c6:ee:5c:84:79:69:b5:09:28:9a:d0:35:41: 5b:8e:4c:2a:b7:13:0c:e0:7b:19:e4:40:1c:be:64:df:ff:4e: 72:b3:6a:79:d1:8b:a0:53:b7:d7:e6:99:13:5f:b6:b4:ca:6b: a8:cd:a6:1b:a1:58:60:76:f2:45:b3:6c:19:8e:9c:29:e2:72: 22:75:69:92:8f:33:2e:0d:5e:19:fa:c1:eb:da:99:c9:88:c1: f4:3c:e8:a1:d0:c1:c0:c2:1a:fe:2b:c3:fb:46:c3:5c:2c:3d: d8:44:1a:79:65:3e:de:b1:4b:eb:10:6b:e2:3f:d9:3f:7e:5a: ff:0a:b2:6b:d6:88:81:14:60:40:55:f2:d6:c7:2b:86:29:d2: 45:d6:ca:2d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUSfvprvHiwcyG2r11iQaarfDxMb0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTI4RjBDMUVEMThGNDhBNjY5Qzc2QkEzNENENzJGMkEx NDU2QTQxODAeFw0yNjExMDIyMjAzMDNaFw0yNjExMDQwMjA3MDNaMDMxMTAvBgNV BAMTKDAxNTI5QzMwODQ2NkJFNUExRDY1QUVFMEU3MDM2RTA1NENFRTI4MDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/pAwGfgu+uuw0AGnL3ubXGhOe /QIPTsvEvpHHgqMrmDUnUwf0NldzBUgU3YUu/RytI3P1PwaebqpTR/zCKy6Bdmj3 KUkqCcbLrcS9VVELFiV+Ugk/yCQb79lK57ny4qKp1wHWClPm/jllICNZwipOCjlY ZRuN0KT/rMNJUbs6HSgDDk6BF01qk+k5YUlm/dyBUcv+4YVFu/DNovPLZTd/01HX hzt7fjxqjvan3tAVAQAoTJZ/4/OmuCF+e/Hf1dvoSMa3N+n+U0unwOI82X3hP8ck LsU4BxoaMKkZWoa9My2wio+vpe9viNsDlr5sJC2C2+orANFZSfiX9IHFFqIBAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUAVKcMIRmvlodZa7g5wNuBUzuKAIwHwYDVR0j BBgwFoAUoo8MHtGPSKZpx2ujTNcvKhRWpBgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRHZHalJYcm1hN2pOR2FqczZtQUNTYjVrQmZZczZrdUd0NXJUVjNleGp2 SDkvMS9BMjhGMEMxRUQxOEY0OEE2NjlDNzZCQTM0Q0Q3MkYyQTE0NTZBNDE4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0EyOEYwQzFFRDE4RjQ4QTY2 OUM3NkJBMzRDRDcyRjJBMTQ1NkE0MTguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RHZHalJYcm1hN2pOR2FqczZtQUNTYjVrQmZZczZrdUd0NXJUVjNleGp2SDkvMS9B MjhGMEMxRUQxOEY0OEE2NjlDNzZCQTM0Q0Q3MkYyQTE0NTZBNDE4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZ0FM2hT61IaDiLEVAtr5j2PMftVMWrrdKo8rKhjldqzGLbKldqqI4HlKBYhY jSZCOEBpNYK1ggpo4oGGNCUY+zi8TzR8shlsbMsViWdw8kXHVtah9EK3vo6VKgtO PJhI90GPxMhOzHRX/hFEh+zj85bG7lyEeWm1CSia0DVBW45MKrcTDOB7GeRAHL5k 3/9OcrNqedGLoFO31+aZE1+2tMprqM2mG6FYYHbyRbNsGY6cKeJyInVpko8zLg1e GfrB69qZyYjB9DzoodDBwMIa/ivD+0bDXCw92EQaeWU+3rFL6xBr4j/ZP35a/wqy a9aIgRRgQFXy1scrhinSRdbKLQ== -----END CERTIFICATE-----Generated at Tue Nov 3 07:28:09 2026 by rpki-client