$ rpki-client -vvvf rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/0/D0CF5320BD24F77F01CED59BA43B352C1FA19294.mft File: D0CF5320BD24F77F01CED59BA43B352C1FA19294.mft (raw, json) Hash identifier: UNfvfchk5jR3D16/tmKK+lZW9YuCiy2Dkg5wo+398DA= Subject key identifier: 7D:97:F8:7C:40:DE:AF:00:C2:F5:DF:00:13:B3:84:5F:FD:04:37:95 Authority key identifier: D0:CF:53:20:BD:24:F7:7F:01:CE:D5:9B:A4:3B:35:2C:1F:A1:92:94 Certificate issuer: /CN=D0CF5320BD24F77F01CED59BA43B352C1FA19294 Certificate serial: 3E0618D09747B679FDCC6D606C9EE4921BC161D7 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0CF5320BD24F77F01CED59BA43B352C1FA19294.cer Subject info access: rsync://rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/0/D0CF5320BD24F77F01CED59BA43B352C1FA19294.mft Manifest number: 0112 Signing time: Sun 01 Nov 2026 00:07:32 +0000 Manifest this update: Sun 01 Nov 2026 00:02:32 +0000 Manifest next update: Mon 02 Nov 2026 04:03:32 +0000 Files and hashes: 1: D0CF5320BD24F77F01CED59BA43B352C1FA19294.crl (hash: TP5KsUPmLi+Y20Z5LMKTw1Q7+uC2L+YvWEftsT8ZgIQ=) 2: 323830343a333635633a3a2f33322d313238203d3e20323636333433.roa (hash: CTc/I4oATaUgTnMimYPthSK6cv6XoInRJAu88IlIznw=) 3: 3137302e3233392e342e302f32322d3332203d3e20323636333433.roa (hash: Ew+XSXX5kjV3yvQliJbXhg9r/kN5uUZU+7rqkq7LYtw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/0/D0CF5320BD24F77F01CED59BA43B352C1FA19294.crl rsync://rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/0/D0CF5320BD24F77F01CED59BA43B352C1FA19294.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0CF5320BD24F77F01CED59BA43B352C1FA19294.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 02 Nov 2026 04:03:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:06:18:d0:97:47:b6:79:fd:cc:6d:60:6c:9e:e4:92:1b:c1:61:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0CF5320BD24F77F01CED59BA43B352C1FA19294 Validity Not Before: Nov 1 00:02:32 2026 GMT Not After : Nov 2 04:03:32 2026 GMT Subject: CN=7D97F87C40DEAF00C2F5DF0013B3845FFD043795 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:b8:0a:2f:e4:37:3f:6c:3b:5a:fc:6e:7e:28: 0e:76:9b:77:f0:38:1f:59:17:76:74:03:d1:7f:17: 89:54:5f:97:64:79:d4:e8:fe:cb:36:b4:4e:31:d1: 85:1d:20:f2:ad:53:29:25:61:99:cd:74:28:61:ad: fa:0c:2b:a6:d0:48:1c:16:c8:c7:8f:b3:fc:2c:7f: 02:66:4a:b3:72:a5:56:d8:fb:00:08:ae:82:a1:f1: 11:e2:b6:b9:c6:45:2e:2a:a1:a4:8c:01:c5:3d:fe: e8:4c:1a:ad:f2:d4:34:93:5c:7b:52:53:91:01:4f: 72:c4:41:2f:f7:c1:03:3f:ec:9e:0e:bb:e7:e6:24: c6:f7:e4:a7:b9:57:0b:c5:c6:dc:01:d4:b0:16:88: 4d:c6:ce:df:48:06:cb:25:1c:77:28:65:78:88:03: 88:a5:80:9d:e4:57:bc:8c:f8:14:36:3b:d8:f3:95: 4c:a2:9b:16:72:02:3e:42:0d:d4:4e:f9:67:ee:da: 4e:00:8d:c7:48:56:15:0e:77:86:33:bd:16:22:fa: 98:69:52:df:65:47:6b:92:00:be:12:aa:c1:e3:00: b1:04:cc:ae:64:fc:36:18:4d:38:c9:db:15:7a:3c: 36:42:b0:86:60:cb:d1:79:a2:fb:c5:85:ec:44:4e: 69:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:97:F8:7C:40:DE:AF:00:C2:F5:DF:00:13:B3:84:5F:FD:04:37:95 X509v3 Authority Key Identifier: keyid:D0:CF:53:20:BD:24:F7:7F:01:CE:D5:9B:A4:3B:35:2C:1F:A1:92:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/0/D0CF5320BD24F77F01CED59BA43B352C1FA19294.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0CF5320BD24F77F01CED59BA43B352C1FA19294.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/0/D0CF5320BD24F77F01CED59BA43B352C1FA19294.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:0a:d5:b3:34:b0:63:98:2a:c3:03:49:4d:12:b3:64:47:2b: 16:47:93:51:09:c6:0b:0f:43:46:59:09:c6:30:c5:04:98:d3: a5:06:c4:48:a3:77:fc:02:4d:a7:4d:70:89:8c:30:95:46:87: 21:29:b1:f4:3f:24:28:35:ed:10:26:08:4f:55:aa:c1:02:11: 40:ff:56:33:fe:1d:ea:4e:14:8b:4f:19:f8:34:28:f6:19:03: 66:a5:e1:28:ca:94:34:4f:e8:66:3a:de:e2:37:e1:69:91:71: c5:c5:6e:9c:fd:a5:0a:80:39:7f:a9:cb:95:45:64:39:3b:ef: 51:bc:eb:53:69:fd:86:54:24:8a:d9:c1:7f:41:8d:17:a5:55: 69:4d:a6:cd:de:de:9f:8b:dd:39:ff:f5:10:86:e9:67:12:83: ca:96:9c:81:2c:31:c9:20:15:aa:a9:60:65:24:9b:04:15:05: bd:7b:49:cc:86:b0:4b:1b:62:b9:23:f5:72:73:1c:26:ae:fa: 95:15:81:c9:9a:3c:4a:fc:4a:5f:98:4d:c4:11:37:26:cd:15: a5:53:b5:40:8a:d9:10:f6:8d:ed:4c:0f:1e:93:15:63:cc:73: aa:a4:aa:56:0f:dd:8b:2f:7d:b1:1d:e5:4f:e2:70:0c:89:ab: 0f:e9:6d:fc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUPgYY0JdHtnn9zG1gbJ7kkhvBYdcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDBDRjUzMjBCRDI0Rjc3RjAxQ0VENTlCQTQzQjM1MkMx RkExOTI5NDAeFw0yNjExMDEwMDAyMzJaFw0yNjExMDIwNDAzMzJaMDMxMTAvBgNV BAMTKDdEOTdGODdDNDBERUFGMDBDMkY1REYwMDEzQjM4NDVGRkQwNDM3OTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsuAov5Dc/bDta/G5+KA52m3fw OB9ZF3Z0A9F/F4lUX5dkedTo/ss2tE4x0YUdIPKtUyklYZnNdChhrfoMK6bQSBwW yMePs/wsfwJmSrNypVbY+wAIroKh8RHitrnGRS4qoaSMAcU9/uhMGq3y1DSTXHtS U5EBT3LEQS/3wQM/7J4Ou+fmJMb35Ke5VwvFxtwB1LAWiE3Gzt9IBsslHHcoZXiI A4ilgJ3kV7yM+BQ2O9jzlUyimxZyAj5CDdRO+Wfu2k4AjcdIVhUOd4YzvRYi+php Ut9lR2uSAL4SqsHjALEEzK5k/DYYTTjJ2xV6PDZCsIZgy9F5ovvFhexETmndAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUfZf4fEDerwDC9d8AE7OEX/0EN5UwHwYDVR0j BBgwFoAU0M9TIL0k938BztWbpDs1LB+hkpQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRUtNTjZWbUNuSjNhbWQ4cndSVzlmR1paZ0JLOWRCbXFiemRCd21tZ3Bl U2UvMC9EMENGNTMyMEJEMjRGNzdGMDFDRUQ1OUJBNDNCMzUyQzFGQTE5Mjk0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QwQ0Y1MzIwQkQyNEY3N0Yw MUNFRDU5QkE0M0IzNTJDMUZBMTkyOTQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RUtNTjZWbUNuSjNhbWQ4cndSVzlmR1paZ0JLOWRCbXFiemRCd21tZ3BlU2UvMC9E MENGNTMyMEJEMjRGNzdGMDFDRUQ1OUJBNDNCMzUyQzFGQTE5Mjk0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAxQrVszSwY5gqwwNJTRKzZEcrFkeTUQnGCw9DRlkJxjDFBJjTpQbESKN3/AJN p01wiYwwlUaHISmx9D8kKDXtECYIT1WqwQIRQP9WM/4d6k4Ui08Z+DQo9hkDZqXh KMqUNE/oZjre4jfhaZFxxcVunP2lCoA5f6nLlUVkOTvvUbzrU2n9hlQkitnBf0GN F6VVaU2mzd7en4vdOf/1EIbpZxKDypacgSwxySAVqqlgZSSbBBUFvXtJzIawSxti uSP1cnMcJq76lRWByZo8SvxKX5hNxBE3Js0VpVO1QIrZEPaN7UwPHpMVY8xzqqSq Vg/diy99sR3lT+JwDImrD+lt/A== -----END CERTIFICATE-----Generated at Sun Nov 1 08:37:55 2026 by rpki-client