$ rpki-client -vvvf rpki-repo.registro.br/repo/EsQE87pvLo2B2YGPSYHzVkh6AjKta7r5ffABNY5FjFNQ/0/4B2D308A10AC4264B7DC7D903FFE478F2A400E1D.mft File: 4B2D308A10AC4264B7DC7D903FFE478F2A400E1D.mft (raw, json) Hash identifier: n1ZW6KPiY3j4LKceuBgHr4UBBoaQmbGppUdpZij3LTs= Subject key identifier: 3A:27:9F:70:C0:03:71:F7:69:AC:6D:17:1E:66:71:6C:CE:BF:65:42 Authority key identifier: 4B:2D:30:8A:10:AC:42:64:B7:DC:7D:90:3F:FE:47:8F:2A:40:0E:1D Certificate issuer: /CN=4B2D308A10AC4264B7DC7D903FFE478F2A400E1D Certificate serial: 1903C177E94AF193F4E7C225224346E1E8DF0771 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B2D308A10AC4264B7DC7D903FFE478F2A400E1D.cer Subject info access: rsync://rpki-repo.registro.br/repo/EsQE87pvLo2B2YGPSYHzVkh6AjKta7r5ffABNY5FjFNQ/0/4B2D308A10AC4264B7DC7D903FFE478F2A400E1D.mft Manifest number: 0272 Signing time: Tue 03 Nov 2026 04:39:52 +0000 Manifest this update: Tue 03 Nov 2026 04:34:52 +0000 Manifest next update: Wed 04 Nov 2026 06:26:52 +0000 Files and hashes: 1: 3133312e3232312e3133322e302f32322d3332203d3e20323634343239.roa (hash: UJpbZavO+3UVhq5rzxecMPJGN0KAB+fGSYh2ShPdJDQ=) 2: 3137302e3234352e3131362e302f32322d3332203d3e20323634343239.roa (hash: cvged9kMfaEsNVXduBs3F9lIcQwDhOajemR5rAzfXC8=) 3: 4B2D308A10AC4264B7DC7D903FFE478F2A400E1D.crl (hash: wfR5jlq1487AgtMSwJmCldRF1AbCAMmKRVWw5rnV0iY=) 4: 323830343a316537303a3a2f33322d313238203d3e20323634343239.roa (hash: jkEclec9jVVg9zCqbxy+A/J4rEXHCkx66gvNlg8hsR4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/EsQE87pvLo2B2YGPSYHzVkh6AjKta7r5ffABNY5FjFNQ/0/4B2D308A10AC4264B7DC7D903FFE478F2A400E1D.crl rsync://rpki-repo.registro.br/repo/EsQE87pvLo2B2YGPSYHzVkh6AjKta7r5ffABNY5FjFNQ/0/4B2D308A10AC4264B7DC7D903FFE478F2A400E1D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B2D308A10AC4264B7DC7D903FFE478F2A400E1D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 04 Nov 2026 06:26:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:03:c1:77:e9:4a:f1:93:f4:e7:c2:25:22:43:46:e1:e8:df:07:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4B2D308A10AC4264B7DC7D903FFE478F2A400E1D Validity Not Before: Nov 3 04:34:52 2026 GMT Not After : Nov 4 06:26:52 2026 GMT Subject: CN=3A279F70C00371F769AC6D171E66716CCEBF6542 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:28:09:92:76:3a:fb:26:7d:96:56:50:f9:2a: 02:06:7a:4f:f4:cc:69:b1:43:79:5e:fa:8a:73:3c: 79:b0:44:32:37:f5:5b:ed:fb:69:4d:c7:a3:6d:8a: 79:3f:4d:fa:5e:77:d5:1e:b8:e7:34:fa:8b:fc:44: f7:f9:19:0f:f8:7d:a5:f3:14:46:47:7c:c2:73:e9: 67:09:8f:72:b0:55:cb:c5:90:60:a0:ed:32:0b:64: 0b:a1:f6:b3:0e:88:48:58:b2:15:aa:66:c0:c6:b2: f6:61:84:c7:2c:4f:b7:f2:d9:4f:2e:aa:34:41:6a: 16:93:e5:28:7a:e4:c9:b9:90:19:da:71:99:6f:c1: 33:1f:e7:bf:5b:67:f8:1f:52:d5:e1:c3:11:60:69: ba:41:61:95:50:95:e6:74:0c:89:16:89:72:86:bc: 79:d2:6b:35:cc:ea:4b:a8:c3:79:98:7c:4c:7f:fd: 4f:75:a5:53:2a:98:36:1d:11:e2:d1:e6:86:a2:20: 6d:9e:36:c8:73:af:68:26:33:9e:ca:61:90:4d:f3: d1:35:39:3b:05:42:4b:00:b9:e7:de:eb:68:e8:49: 31:94:fc:11:f9:bc:34:1e:01:9e:3a:70:05:28:16: 7b:e8:8d:fe:68:10:e0:7b:73:88:87:43:57:ab:85: d6:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:27:9F:70:C0:03:71:F7:69:AC:6D:17:1E:66:71:6C:CE:BF:65:42 X509v3 Authority Key Identifier: keyid:4B:2D:30:8A:10:AC:42:64:B7:DC:7D:90:3F:FE:47:8F:2A:40:0E:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/EsQE87pvLo2B2YGPSYHzVkh6AjKta7r5ffABNY5FjFNQ/0/4B2D308A10AC4264B7DC7D903FFE478F2A400E1D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B2D308A10AC4264B7DC7D903FFE478F2A400E1D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/EsQE87pvLo2B2YGPSYHzVkh6AjKta7r5ffABNY5FjFNQ/0/4B2D308A10AC4264B7DC7D903FFE478F2A400E1D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:7b:a9:ee:ac:b3:5b:c9:53:4c:1d:81:aa:40:8e:36:e2:c1: 31:59:67:4b:3a:44:ab:49:15:f5:f9:ba:05:cf:46:71:a6:6b: fd:77:61:06:1d:e5:ae:5b:82:42:db:bf:a4:23:2c:34:b8:a7: 2b:8c:a7:f0:8d:58:22:b1:ff:c4:79:19:c1:d4:2d:00:ad:9a: 33:36:c6:e4:b7:0a:60:51:06:d2:44:9d:cc:dc:81:45:6f:76: 5f:7f:f7:a4:39:38:f3:f6:95:4d:d1:97:8e:9f:80:05:97:80: 4e:78:1f:4b:9e:78:a8:54:eb:94:63:68:e8:a4:30:50:cd:1b: 18:ca:f5:7f:1b:b8:66:19:f2:dd:2e:87:f3:03:52:f1:5d:04: 60:3f:87:b0:d6:d4:e7:ae:c0:18:d1:ca:95:a6:a6:d4:19:99: 66:3f:e3:90:02:74:d3:c5:15:e4:b0:31:b3:30:42:cf:df:0d: 97:21:52:b0:8d:11:2b:03:ff:6a:8f:60:8a:86:e5:9f:b3:f7: fc:a9:6d:f9:6d:65:57:b2:e9:26:ad:be:d8:96:52:85:72:7e: b2:1c:2a:f8:6d:73:d7:5f:3c:84:4e:a9:0e:dd:83:0d:fa:05: 49:23:ce:19:82:0c:24:4d:9e:23:d7:51:85:33:f9:3e:15:e3: 68:52:ed:a4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUGQPBd+lK8ZP058IlIkNG4ejfB3EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEIyRDMwOEExMEFDNDI2NEI3REM3RDkwM0ZGRTQ3OEYy QTQwMEUxRDAeFw0yNjExMDMwNDM0NTJaFw0yNjExMDQwNjI2NTJaMDMxMTAvBgNV BAMTKDNBMjc5RjcwQzAwMzcxRjc2OUFDNkQxNzFFNjY3MTZDQ0VCRjY1NDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVKAmSdjr7Jn2WVlD5KgIGek/0 zGmxQ3le+opzPHmwRDI39Vvt+2lNx6Ntink/Tfped9UeuOc0+ov8RPf5GQ/4faXz FEZHfMJz6WcJj3KwVcvFkGCg7TILZAuh9rMOiEhYshWqZsDGsvZhhMcsT7fy2U8u qjRBahaT5Sh65Mm5kBnacZlvwTMf579bZ/gfUtXhwxFgabpBYZVQleZ0DIkWiXKG vHnSazXM6kuow3mYfEx//U91pVMqmDYdEeLR5oaiIG2eNshzr2gmM57KYZBN89E1 OTsFQksAuefe62joSTGU/BH5vDQeAZ46cAUoFnvojf5oEOB7c4iHQ1erhdabAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUOiefcMADcfdprG0XHmZxbM6/ZUIwHwYDVR0j BBgwFoAUSy0wihCsQmS33H2QP/5HjypADh0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRXNRRTg3cHZMbzJCMllHUFNZSHpWa2g2QWpLdGE3cjVmZkFCTlk1RmpG TlEvMC80QjJEMzA4QTEwQUM0MjY0QjdEQzdEOTAzRkZFNDc4RjJBNDAwRTFELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRCMkQzMDhBMTBBQzQyNjRC N0RDN0Q5MDNGRkU0NzhGMkE0MDBFMUQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RXNRRTg3cHZMbzJCMllHUFNZSHpWa2g2QWpLdGE3cjVmZkFCTlk1RmpGTlEvMC80 QjJEMzA4QTEwQUM0MjY0QjdEQzdEOTAzRkZFNDc4RjJBNDAwRTFELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAD3up7qyzW8lTTB2BqkCONuLBMVlnSzpEq0kV9fm6Bc9GcaZr/XdhBh3lrluC Qtu/pCMsNLinK4yn8I1YIrH/xHkZwdQtAK2aMzbG5LcKYFEG0kSdzNyBRW92X3/3 pDk48/aVTdGXjp+ABZeATngfS554qFTrlGNo6KQwUM0bGMr1fxu4Zhny3S6H8wNS 8V0EYD+HsNbU567AGNHKlaam1BmZZj/jkAJ008UV5LAxszBCz98NlyFSsI0RKwP/ ao9giobln7P3/Klt+W1lV7LpJq2+2JZShXJ+shwq+G1z1188hE6pDt2DDfoFSSPO GYIMJE2eI9dRhTP5PhXjaFLtpA== -----END CERTIFICATE-----Generated at Tue Nov 3 21:14:51 2026 by rpki-client