$ rpki-client -vvvf rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.mft File: 3DAF1CA48633D42F38955C47C8BA0FADA73D7007.mft (raw, json) Hash identifier: sfIZmVxOhXMXluSxn5vKDHsXw5yZovTzrcVHZZ0dgQY= Subject key identifier: D9:79:4A:7F:1A:BB:B9:13:0D:FD:B5:EB:86:B6:5A:9A:01:55:D5:9D Authority key identifier: 3D:AF:1C:A4:86:33:D4:2F:38:95:5C:47:C8:BA:0F:AD:A7:3D:70:07 Certificate issuer: /CN=3DAF1CA48633D42F38955C47C8BA0FADA73D7007 Certificate serial: 6AE1673C1F45D0E54292CBE856448EF7DF60EC4D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.cer Subject info access: rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.mft Manifest number: 02CF Signing time: Thu 29 Oct 2026 07:43:21 +0000 Manifest this update: Thu 29 Oct 2026 07:38:21 +0000 Manifest next update: Fri 30 Oct 2026 08:08:21 +0000 Files and hashes: 1: 3137372e37332e33362e302f32322d3234203d3e203532363934.roa (hash: VzDT3Ig+WdpRMKuVqqnHyM1frY4tdWJNm+B5lQG6wG8=) 2: 3DAF1CA48633D42F38955C47C8BA0FADA73D7007.crl (hash: I2XlxT+XsleNW1e/SrYRdNjTb1aRQfSUY0lFNAI8s4Y=) 3: 3230302e362e3132382e302f32322d3234203d3e203532363934.roa (hash: SpyObaqp5R8n3wPuEtNLbXTSKIcrqP8+UHnVFMXcTcg=) 4: 323830343a6335383a3a2f33322d3438203d3e203532363934.roa (hash: kMY9usLpETr/QqdbrzfomafLS8P05TRSv/mCuBTIXDE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.crl rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 30 Oct 2026 08:08:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:e1:67:3c:1f:45:d0:e5:42:92:cb:e8:56:44:8e:f7:df:60:ec:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3DAF1CA48633D42F38955C47C8BA0FADA73D7007 Validity Not Before: Oct 29 07:38:21 2026 GMT Not After : Oct 30 08:08:21 2026 GMT Subject: CN=D9794A7F1ABBB9130DFDB5EB86B65A9A0155D59D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:53:0f:e6:9a:30:53:0e:fe:8f:b5:ea:fc:94: 34:7a:cd:95:cd:f8:07:03:3d:a8:f8:3d:d7:50:2b: cd:31:a7:ea:40:49:8a:d0:24:8b:c1:e1:f8:7c:3f: f1:8f:d5:da:4b:a2:2f:d1:72:b2:77:1d:29:01:10: b9:66:7f:af:a0:32:9f:86:08:79:ce:1d:7b:ea:c8: e4:c8:6e:36:cb:11:d0:6b:94:4a:88:90:d7:90:18: 85:d3:f6:b9:92:95:9c:e8:2e:92:d0:8b:45:ca:57: f7:4a:13:fd:62:8b:ba:8b:75:64:68:86:8d:5c:8c: af:5b:bc:e7:a2:c4:42:a5:6d:54:2f:b4:e3:a7:26: 6e:d9:a5:bd:91:1a:eb:f3:0a:e4:46:a8:45:d5:61: 0d:bb:19:45:fb:1f:cf:c6:1d:a1:e8:b5:84:d0:8e: d5:ee:48:4d:60:cc:f0:17:96:da:fd:11:a4:3b:09: ee:67:49:19:d5:60:b0:ac:a9:53:93:e9:86:17:16: 2f:6b:07:9f:af:c0:80:cc:69:29:01:33:95:96:f3: b2:be:4f:15:17:f8:a9:74:1e:bf:a9:ad:6d:b1:8c: 90:cb:0b:fd:6a:a0:7e:15:20:b5:e0:b9:62:20:ab: a0:3a:42:0c:70:32:ce:ee:5f:d9:66:b7:3f:73:cb: c1:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:79:4A:7F:1A:BB:B9:13:0D:FD:B5:EB:86:B6:5A:9A:01:55:D5:9D X509v3 Authority Key Identifier: keyid:3D:AF:1C:A4:86:33:D4:2F:38:95:5C:47:C8:BA:0F:AD:A7:3D:70:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:42:39:76:dd:81:f1:6c:5b:e5:95:8b:ec:7e:65:92:a1:3e: 70:aa:a7:28:02:33:a7:6a:fd:88:9f:57:df:4c:b9:de:c5:3b: 2d:97:53:fd:75:96:e8:b9:9b:67:2b:14:9f:7d:ec:b0:d7:7d: 10:ed:ae:fd:1f:ce:5a:13:50:4e:0e:68:c9:bf:59:62:ed:87: 24:ec:c5:12:c4:dc:da:f7:7f:b8:57:e8:09:b5:12:47:9d:78: a4:c8:a6:41:69:33:dc:ba:00:72:87:21:57:43:5a:34:9d:13: 49:42:fa:21:71:05:f8:d4:7c:5e:88:51:05:4e:b6:84:94:86: a2:0a:2b:66:d4:cc:0c:65:2c:62:9f:5a:c5:b0:96:d3:8a:a1: 98:bf:ef:13:63:35:ec:3c:38:72:2f:13:d3:71:6b:8e:48:e1: df:74:1d:4f:5e:a7:d8:66:71:8c:a4:15:f7:e3:3f:07:2b:ee: da:ea:3b:9a:a7:f4:e2:85:27:cb:c5:07:27:c2:63:6d:f4:cf: f2:c4:08:17:62:fe:8e:5e:88:e9:d1:0c:3f:c0:7a:9c:8a:9b: 8d:17:d0:22:be:7a:cc:b5:23:44:bb:36:a8:7f:a7:6b:7a:c7: 5c:f8:8e:82:4f:2b:a2:87:7b:f0:2e:ed:20:49:25:28:c3:0c: 4a:b6:31:4d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUauFnPB9F0OVCksvoVkSO999g7E0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0RBRjFDQTQ4NjMzRDQyRjM4OTU1QzQ3QzhCQTBGQURB NzNENzAwNzAeFw0yNjEwMjkwNzM4MjFaFw0yNjEwMzAwODA4MjFaMDMxMTAvBgNV BAMTKEQ5Nzk0QTdGMUFCQkI5MTMwREZEQjVFQjg2QjY1QTlBMDE1NUQ1OUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1Uw/mmjBTDv6Pter8lDR6zZXN +AcDPaj4PddQK80xp+pASYrQJIvB4fh8P/GP1dpLoi/RcrJ3HSkBELlmf6+gMp+G CHnOHXvqyOTIbjbLEdBrlEqIkNeQGIXT9rmSlZzoLpLQi0XKV/dKE/1ii7qLdWRo ho1cjK9bvOeixEKlbVQvtOOnJm7Zpb2RGuvzCuRGqEXVYQ27GUX7H8/GHaHotYTQ jtXuSE1gzPAXltr9EaQ7Ce5nSRnVYLCsqVOT6YYXFi9rB5+vwIDMaSkBM5WW87K+ TxUX+Kl0Hr+prW2xjJDLC/1qoH4VILXguWIgq6A6QgxwMs7uX9lmtz9zy8HjAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU2XlKfxq7uRMN/bXrhrZamgFV1Z0wHwYDVR0j BBgwFoAUPa8cpIYz1C84lVxHyLoPrac9cAcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRjk2OTVYRW5raFZ6ZXVkWGZrVTZGVlBiR0ZYNldVSzdlc05CemhIUkw3 cGQvMC8zREFGMUNBNDg2MzNENDJGMzg5NTVDNDdDOEJBMEZBREE3M0Q3MDA3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNEQUYxQ0E0ODYzM0Q0MkYz ODk1NUM0N0M4QkEwRkFEQTczRDcwMDcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Rjk2OTVYRW5raFZ6ZXVkWGZrVTZGVlBiR0ZYNldVSzdlc05CemhIUkw3cGQvMC8z REFGMUNBNDg2MzNENDJGMzg5NTVDNDdDOEJBMEZBREE3M0Q3MDA3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAS0I5dt2B8Wxb5ZWL7H5lkqE+cKqnKAIzp2r9iJ9X30y53sU7LZdT/XWW6Lmb ZysUn33ssNd9EO2u/R/OWhNQTg5oyb9ZYu2HJOzFEsTc2vd/uFfoCbUSR514pMim QWkz3LoAcochV0NaNJ0TSUL6IXEF+NR8XohRBU62hJSGogorZtTMDGUsYp9axbCW 04qhmL/vE2M17Dw4ci8T03Frjkjh33QdT16n2GZxjKQV9+M/Byvu2uo7mqf04oUn y8UHJ8JjbfTP8sQIF2L+jl6I6dEMP8B6nIqbjRfQIr56zLUjRLs2qH+na3rHXPiO gk8rood78C7tIEklKMMMSrYxTQ== -----END CERTIFICATE-----Generated at Thu Oct 29 19:42:36 2026 by rpki-client