$ rpki-client -vvvf rpki-repo.registro.br/repo/FkFoYCfqQoYLMkobSFiRpuCtETV6pKdN3AqbBhZj3Q1k/0/B5568D235613C8FBA63E48026996810FAB5904D3.mft File: B5568D235613C8FBA63E48026996810FAB5904D3.mft (raw, json) Hash identifier: 9D3IuEINVRZYzxVk/FKO7EMwznhT1myTmpDwhSUoNww= Subject key identifier: AA:E1:E3:6F:D1:2C:D4:F2:C8:29:8D:68:DE:27:8A:CF:C1:C4:05:DB Authority key identifier: B5:56:8D:23:56:13:C8:FB:A6:3E:48:02:69:96:81:0F:AB:59:04:D3 Certificate issuer: /CN=B5568D235613C8FBA63E48026996810FAB5904D3 Certificate serial: 7F0EEF3F8CE607B4212248A66D391ECBEDA5BD9F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5568D235613C8FBA63E48026996810FAB5904D3.cer Subject info access: rsync://rpki-repo.registro.br/repo/FkFoYCfqQoYLMkobSFiRpuCtETV6pKdN3AqbBhZj3Q1k/0/B5568D235613C8FBA63E48026996810FAB5904D3.mft Manifest number: 0389 Signing time: Wed 28 Oct 2026 22:23:15 +0000 Manifest this update: Wed 28 Oct 2026 22:18:15 +0000 Manifest next update: Thu 29 Oct 2026 23:30:15 +0000 Files and hashes: 1: 323830343a323031303a3a2f33322d3438203d3e20323634343632.roa (hash: C9NHxwLGPuPWQzhVa+XDelctmuPZs8cMjQQEnd5B2aU=) 2: B5568D235613C8FBA63E48026996810FAB5904D3.crl (hash: EXK+5Qbda0PJmbhPUeLlR50aH62ty3B4OpPuDAQW0dw=) 3: 3133322e3235352e35322e302f32322d3234203d3e20323634343632.roa (hash: JO9+kZlnlCYl/EpIytg+8pvObI3DMXRWWHC9sp1hGtQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/FkFoYCfqQoYLMkobSFiRpuCtETV6pKdN3AqbBhZj3Q1k/0/B5568D235613C8FBA63E48026996810FAB5904D3.crl rsync://rpki-repo.registro.br/repo/FkFoYCfqQoYLMkobSFiRpuCtETV6pKdN3AqbBhZj3Q1k/0/B5568D235613C8FBA63E48026996810FAB5904D3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5568D235613C8FBA63E48026996810FAB5904D3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 29 Oct 2026 23:30:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:0e:ef:3f:8c:e6:07:b4:21:22:48:a6:6d:39:1e:cb:ed:a5:bd:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B5568D235613C8FBA63E48026996810FAB5904D3 Validity Not Before: Oct 28 22:18:15 2026 GMT Not After : Oct 29 23:30:15 2026 GMT Subject: CN=AAE1E36FD12CD4F2C8298D68DE278ACFC1C405DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:3b:32:a0:d4:c6:ef:eb:9f:8c:fc:2c:d1:b2: 6f:88:54:74:e9:46:2d:a8:7c:1d:03:72:ae:e2:31: f3:0b:a5:d4:ba:b4:fd:10:73:df:fc:f1:6f:5b:0b: 01:7c:b0:b7:f4:cb:9d:e6:be:47:d0:6d:09:a5:f2: 35:da:58:25:55:f3:7e:7d:0b:32:35:e5:b9:1d:7b: 68:40:57:dc:26:d5:28:fa:58:87:17:34:e0:d4:ff: a7:22:e7:ed:90:bf:0f:df:a6:4d:b9:ce:52:1a:cb: 7f:43:9f:6f:e1:25:b3:85:8f:79:25:da:9e:2b:e3: bb:a9:25:4d:ed:84:ea:4a:9a:72:5b:ca:4f:6a:c8: f1:1b:e2:29:34:10:1a:26:e5:8c:e8:d5:13:22:e6: 1a:f3:e7:b1:17:77:29:3f:ca:7c:05:04:2d:aa:0c: 0b:1f:f6:0e:27:22:f6:4d:45:98:92:8f:bf:6e:28: 52:f6:ac:68:92:bd:9e:91:ce:fc:51:16:43:c1:d7: 7d:30:43:1c:24:10:26:66:65:23:9a:e3:16:ea:72: 1b:67:bb:77:d8:ae:87:1d:c4:e2:b1:96:a1:02:4e: d9:c2:41:d8:97:40:27:94:fc:c0:b0:54:5f:c5:c1: 5c:df:2d:bf:69:d3:5d:10:84:58:ee:db:f7:f1:1c: 9c:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:E1:E3:6F:D1:2C:D4:F2:C8:29:8D:68:DE:27:8A:CF:C1:C4:05:DB X509v3 Authority Key Identifier: keyid:B5:56:8D:23:56:13:C8:FB:A6:3E:48:02:69:96:81:0F:AB:59:04:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/FkFoYCfqQoYLMkobSFiRpuCtETV6pKdN3AqbBhZj3Q1k/0/B5568D235613C8FBA63E48026996810FAB5904D3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5568D235613C8FBA63E48026996810FAB5904D3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/FkFoYCfqQoYLMkobSFiRpuCtETV6pKdN3AqbBhZj3Q1k/0/B5568D235613C8FBA63E48026996810FAB5904D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:5f:f9:be:99:41:f2:da:5e:44:d0:74:28:ee:d5:1f:3c:30: b3:73:7c:ef:a4:dc:03:70:f8:4c:09:8a:ab:c0:9c:fe:ea:2a: cc:03:e8:e8:2a:4b:86:ec:d8:e6:d7:be:3e:02:d5:0e:4d:d4: 3a:83:67:61:cb:f0:c1:20:0f:05:0a:7a:c1:d1:8b:22:5b:ed: a7:d5:8b:dc:cb:17:31:91:80:4e:a6:1f:ec:ae:46:60:fe:3b: bf:b6:d3:45:d0:16:2f:5b:d3:63:f0:b9:04:12:80:2e:87:b8: 22:69:5e:90:c4:8f:10:0d:bc:bb:ff:01:7c:29:b9:9d:db:a5: 5a:b6:ee:58:41:9a:9f:96:38:39:f6:65:c1:5c:a5:04:b5:7c: ef:65:cc:f1:f9:6a:38:b6:cf:f4:7c:76:fe:db:32:93:4e:9a: a1:df:01:b8:a3:18:4c:6a:f2:2f:d1:0a:78:4f:1a:70:9e:e7: be:67:9e:be:54:e1:32:aa:b3:7c:09:a5:75:ea:ac:5b:7e:29: 0f:04:66:88:76:5a:d2:fd:c7:1f:62:97:7d:22:20:6e:59:0c: ba:43:76:67:c7:37:85:2c:ed:b9:ad:fb:eb:dd:5e:12:98:77: bd:7e:8f:83:36:42:cd:a0:1d:e5:3a:53:af:69:77:a2:38:d8: 3f:0c:76:af -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUfw7vP4zmB7QhIkimbTkey+2lvZ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjU1NjhEMjM1NjEzQzhGQkE2M0U0ODAyNjk5NjgxMEZB QjU5MDREMzAeFw0yNjEwMjgyMjE4MTVaFw0yNjEwMjkyMzMwMTVaMDMxMTAvBgNV BAMTKEFBRTFFMzZGRDEyQ0Q0RjJDODI5OEQ2OERFMjc4QUNGQzFDNDA1REIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbOzKg1Mbv65+M/CzRsm+IVHTp Ri2ofB0Dcq7iMfMLpdS6tP0Qc9/88W9bCwF8sLf0y53mvkfQbQml8jXaWCVV8359 CzI15bkde2hAV9wm1Sj6WIcXNODU/6ci5+2Qvw/fpk25zlIay39Dn2/hJbOFj3kl 2p4r47upJU3thOpKmnJbyk9qyPEb4ik0EBom5Yzo1RMi5hrz57EXdyk/ynwFBC2q DAsf9g4nIvZNRZiSj79uKFL2rGiSvZ6RzvxRFkPB130wQxwkECZmZSOa4xbqchtn u3fYrocdxOKxlqECTtnCQdiXQCeU/MCwVF/FwVzfLb9p010QhFju2/fxHJzdAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUquHjb9Es1PLIKY1o3ieKz8HEBdswHwYDVR0j BBgwFoAUtVaNI1YTyPumPkgCaZaBD6tZBNMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRmtGb1lDZnFRb1lMTWtvYlNGaVJwdUN0RVRWNnBLZE4zQXFiQmhaajNR MWsvMC9CNTU2OEQyMzU2MTNDOEZCQTYzRTQ4MDI2OTk2ODEwRkFCNTkwNEQzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I1NTY4RDIzNTYxM0M4RkJB NjNFNDgwMjY5OTY4MTBGQUI1OTA0RDMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RmtGb1lDZnFRb1lMTWtvYlNGaVJwdUN0RVRWNnBLZE4zQXFiQmhaajNRMWsvMC9C NTU2OEQyMzU2MTNDOEZCQTYzRTQ4MDI2OTk2ODEwRkFCNTkwNEQzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAO1/5vplB8tpeRNB0KO7VHzwws3N876TcA3D4TAmKq8Cc/uoqzAPo6CpLhuzY 5te+PgLVDk3UOoNnYcvwwSAPBQp6wdGLIlvtp9WL3MsXMZGATqYf7K5GYP47v7bT RdAWL1vTY/C5BBKALoe4ImlekMSPEA28u/8BfCm5ndulWrbuWEGan5Y4OfZlwVyl BLV872XM8flqOLbP9Hx2/tsyk06aod8BuKMYTGryL9EKeE8acJ7nvmeevlThMqqz fAmldeqsW34pDwRmiHZa0v3HH2KXfSIgblkMukN2Z8c3hSztua37691eEph3vX6P gzZCzaAd5TpTr2l3ojjYPwx2rw== -----END CERTIFICATE-----Generated at Thu Oct 29 12:34:23 2026 by rpki-client