$ rpki-client -vvvf rpki-repo.registro.br/repo/Gm9nqW21EVsfybUHSobWpLLCEG1K4PKSzJwQF3pdrut7/0/2BA7E3F6A06E73CE8FAE470EEFDC07F81AC04CDD.mft File: 2BA7E3F6A06E73CE8FAE470EEFDC07F81AC04CDD.mft (raw, json) Hash identifier: hOH9uaGXD51jlkXpuViz6dBsgInKaYMtnwD3mSXelqc= Subject key identifier: 22:84:28:A1:9A:4C:A8:F4:08:05:BA:5E:FA:AE:4F:8E:EF:3C:31:39 Authority key identifier: 2B:A7:E3:F6:A0:6E:73:CE:8F:AE:47:0E:EF:DC:07:F8:1A:C0:4C:DD Certificate issuer: /CN=2BA7E3F6A06E73CE8FAE470EEFDC07F81AC04CDD Certificate serial: 68B592249153DBDEF6C9A6EED4717686BD1A769F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BA7E3F6A06E73CE8FAE470EEFDC07F81AC04CDD.cer Subject info access: rsync://rpki-repo.registro.br/repo/Gm9nqW21EVsfybUHSobWpLLCEG1K4PKSzJwQF3pdrut7/0/2BA7E3F6A06E73CE8FAE470EEFDC07F81AC04CDD.mft Manifest number: 0172 Signing time: Sat 31 Oct 2026 21:18:16 +0000 Manifest this update: Sat 31 Oct 2026 21:13:16 +0000 Manifest next update: Sun 01 Nov 2026 22:02:16 +0000 Files and hashes: 1: 2BA7E3F6A06E73CE8FAE470EEFDC07F81AC04CDD.crl (hash: c7q9BoNXc7Y43D7BZPPGOfiZwIPRNIPLI0KniXXLzpM=) 2: 323830343a333230303a3a2f33322d3438203d3e20323635303530.roa (hash: JNkuPVkslJhEy5vxVPsp0mnwk/L8rP8+/jTHXEJg2FI=) 3: 3137302e3135302e3232302e302f32322d3234203d3e20323635303530.roa (hash: mO6UbLwv9B7xL5T6Fb4Y4qhDxrjBJyZngbWHDuA7/WE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Gm9nqW21EVsfybUHSobWpLLCEG1K4PKSzJwQF3pdrut7/0/2BA7E3F6A06E73CE8FAE470EEFDC07F81AC04CDD.crl rsync://rpki-repo.registro.br/repo/Gm9nqW21EVsfybUHSobWpLLCEG1K4PKSzJwQF3pdrut7/0/2BA7E3F6A06E73CE8FAE470EEFDC07F81AC04CDD.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BA7E3F6A06E73CE8FAE470EEFDC07F81AC04CDD.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 01 Nov 2026 22:02:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:b5:92:24:91:53:db:de:f6:c9:a6:ee:d4:71:76:86:bd:1a:76:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2BA7E3F6A06E73CE8FAE470EEFDC07F81AC04CDD Validity Not Before: Oct 31 21:13:16 2026 GMT Not After : Nov 1 22:02:16 2026 GMT Subject: CN=228428A19A4CA8F40805BA5EFAAE4F8EEF3C3139 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:18:9f:7e:a4:04:5e:a6:ed:3c:4e:7b:79:6c: ef:61:d5:f5:bd:e3:1f:92:bc:cb:ad:ad:31:04:32: dc:a0:96:28:36:34:aa:5a:81:20:ac:e6:23:cc:98: 81:29:bc:49:54:24:1d:59:e1:68:e4:cd:3e:20:ff: 63:0a:09:28:43:27:a1:3e:8e:c2:99:6c:09:b2:c8: c6:e9:de:63:0c:07:8e:30:d6:92:12:e1:1b:eb:35: 30:2f:3f:77:e2:8a:d5:78:59:c9:85:3e:a0:d4:7b: 02:8e:b7:72:09:16:9e:48:0e:7a:ba:df:aa:a7:ec: e9:72:29:1f:f5:65:ac:25:1a:d6:33:f4:26:a3:98: 9a:08:ea:66:ef:85:f8:bf:b9:e5:e0:fd:56:90:59: 64:b2:23:4f:48:3f:15:92:55:f4:80:04:67:06:47: df:28:2c:f7:a7:2f:23:b2:96:97:65:d3:27:9c:21: 09:0c:18:0a:ca:81:a5:16:f0:26:7c:5d:bb:5d:dd: 7d:fb:f9:d5:dc:a3:2a:a0:e9:8d:38:54:f3:07:86: e6:b6:c2:35:d9:3c:91:16:58:a3:af:5a:19:a4:d4: 3a:ad:83:b3:f9:1c:72:6f:94:8f:c5:fa:dd:78:e1: 44:8b:cd:84:82:0a:25:41:1a:17:c1:97:60:92:2c: 82:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:84:28:A1:9A:4C:A8:F4:08:05:BA:5E:FA:AE:4F:8E:EF:3C:31:39 X509v3 Authority Key Identifier: keyid:2B:A7:E3:F6:A0:6E:73:CE:8F:AE:47:0E:EF:DC:07:F8:1A:C0:4C:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Gm9nqW21EVsfybUHSobWpLLCEG1K4PKSzJwQF3pdrut7/0/2BA7E3F6A06E73CE8FAE470EEFDC07F81AC04CDD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BA7E3F6A06E73CE8FAE470EEFDC07F81AC04CDD.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gm9nqW21EVsfybUHSobWpLLCEG1K4PKSzJwQF3pdrut7/0/2BA7E3F6A06E73CE8FAE470EEFDC07F81AC04CDD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:45:db:03:30:97:15:af:67:78:6e:c4:14:37:fe:5f:6d:9b: 5e:33:1d:6c:75:8f:81:0c:65:24:fa:e6:eb:85:18:cb:a1:11: 2d:ec:3a:c6:54:7a:26:a3:26:f0:97:e7:08:c9:6b:7d:95:42: 76:99:77:47:b0:8d:ec:0c:a3:b0:1e:29:50:7f:13:0f:d6:48: 46:19:ae:1b:d9:f6:73:20:ad:7b:5d:ba:8d:88:a7:19:68:34: a0:fd:c9:c3:9d:87:bc:0d:cf:6d:9c:20:64:04:8c:99:5c:2e: 85:bd:db:2d:11:b9:54:f0:72:89:77:e6:a2:c5:c4:21:4d:7a: 67:72:a4:be:32:5a:8b:2d:48:80:e8:19:81:32:a8:62:a8:e4: 67:8b:1b:dc:af:2f:7a:f4:7a:82:25:83:13:8b:69:97:e8:5d: c7:d7:0a:43:24:af:31:06:18:11:c2:8f:29:3f:de:2d:f6:3d: 2f:cd:f7:c3:d2:3a:9a:58:7d:1a:7e:8e:9b:a7:74:78:47:ea: 76:26:59:5c:b1:32:9f:ef:22:54:d6:18:ba:b0:7f:42:6f:df: 03:13:85:6d:2a:5b:56:05:67:69:81:de:d6:51:20:c1:58:76: 0a:d5:6e:80:7d:3a:93:df:64:94:3d:c3:88:8d:73:2d:6c:d1: aa:81:6b:59 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUaLWSJJFT2972yabu1HF2hr0adp8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkJBN0UzRjZBMDZFNzNDRThGQUU0NzBFRUZEQzA3Rjgx QUMwNENERDAeFw0yNjEwMzEyMTEzMTZaFw0yNjExMDEyMjAyMTZaMDMxMTAvBgNV BAMTKDIyODQyOEExOUE0Q0E4RjQwODA1QkE1RUZBQUU0RjhFRUYzQzMxMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/GJ9+pARepu08Tnt5bO9h1fW9 4x+SvMutrTEEMtyglig2NKpagSCs5iPMmIEpvElUJB1Z4WjkzT4g/2MKCShDJ6E+ jsKZbAmyyMbp3mMMB44w1pIS4RvrNTAvP3fiitV4WcmFPqDUewKOt3IJFp5IDnq6 36qn7OlyKR/1ZawlGtYz9CajmJoI6mbvhfi/ueXg/VaQWWSyI09IPxWSVfSABGcG R98oLPenLyOylpdl0yecIQkMGArKgaUW8CZ8Xbtd3X37+dXcoyqg6Y04VPMHhua2 wjXZPJEWWKOvWhmk1Dqtg7P5HHJvlI/F+t144USLzYSCCiVBGhfBl2CSLIIDAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUIoQooZpMqPQIBbpe+q5Pju88MTkwHwYDVR0j BBgwFoAUK6fj9qBuc86PrkcO79wH+BrATN0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR205bnFXMjFFVnNmeWJVSFNvYldwTExDRUcxSzRQS1N6SndRRjNwZHJ1 dDcvMC8yQkE3RTNGNkEwNkU3M0NFOEZBRTQ3MEVFRkRDMDdGODFBQzA0Q0RELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJCQTdFM0Y2QTA2RTczQ0U4 RkFFNDcwRUVGREMwN0Y4MUFDMDRDREQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R205bnFXMjFFVnNmeWJVSFNvYldwTExDRUcxSzRQS1N6SndRRjNwZHJ1dDcvMC8y QkE3RTNGNkEwNkU3M0NFOEZBRTQ3MEVFRkRDMDdGODFBQzA0Q0RELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAw0XbAzCXFa9neG7EFDf+X22bXjMdbHWPgQxlJPrm64UYy6ERLew6xlR6JqMm 8JfnCMlrfZVCdpl3R7CN7AyjsB4pUH8TD9ZIRhmuG9n2cyCte126jYinGWg0oP3J w52HvA3PbZwgZASMmVwuhb3bLRG5VPByiXfmosXEIU16Z3KkvjJaiy1IgOgZgTKo YqjkZ4sb3K8vevR6giWDE4tpl+hdx9cKQySvMQYYEcKPKT/eLfY9L833w9I6mlh9 Gn6Om6d0eEfqdiZZXLEyn+8iVNYYurB/Qm/fAxOFbSpbVgVnaYHe1lEgwVh2CtVu gH06k99klD3DiI1zLWzRqoFrWQ== -----END CERTIFICATE-----Generated at Sun Nov 1 14:41:24 2026 by rpki-client