$ rpki-client -vvvf rpki-repo.registro.br/repo/H5YWuNT1D2qDSD4A8MJzAbT7YtPiBh6Y1rbQPgAxtRHW/0/928F3E5FCF74B2479829DEF0B258A8F907E5008C.mft File: 928F3E5FCF74B2479829DEF0B258A8F907E5008C.mft (raw, json) Hash identifier: prFOluJRiJxg0DQm7UUDaOirKLyJabvWSed3Ftz2HWY= Subject key identifier: 95:A2:9C:DE:57:8F:88:DB:C7:B1:9B:10:05:39:0D:13:91:FF:88:FF Authority key identifier: 92:8F:3E:5F:CF:74:B2:47:98:29:DE:F0:B2:58:A8:F9:07:E5:00:8C Certificate issuer: /CN=928F3E5FCF74B2479829DEF0B258A8F907E5008C Certificate serial: 21C8B6A36DB72B2CFAFEDA01535122E3FAADD3F9 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/928F3E5FCF74B2479829DEF0B258A8F907E5008C.cer Subject info access: rsync://rpki-repo.registro.br/repo/H5YWuNT1D2qDSD4A8MJzAbT7YtPiBh6Y1rbQPgAxtRHW/0/928F3E5FCF74B2479829DEF0B258A8F907E5008C.mft Manifest number: 0207 Signing time: Mon 02 Nov 2026 09:34:35 +0000 Manifest this update: Mon 02 Nov 2026 09:29:35 +0000 Manifest next update: Tue 03 Nov 2026 12:48:35 +0000 Files and hashes: 1: 323830343a386466343a3a2f33322d3332203d3e20323733333932.roa (hash: YX28YtJfSWTUz65HmDEtAozQKT4L7hWWvNSJky08wbs=) 2: 34352e3136382e39342e302f32342d3234203d3e20323733333932.roa (hash: kgn8IJbonz1OynuApXsaZ9lWwb7G7pCYCrhGrzVkd2w=) 3: 928F3E5FCF74B2479829DEF0B258A8F907E5008C.crl (hash: RIK0698oC3pflqaAznxB63iGr+/wSpISVG6SmVdaGrA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/H5YWuNT1D2qDSD4A8MJzAbT7YtPiBh6Y1rbQPgAxtRHW/0/928F3E5FCF74B2479829DEF0B258A8F907E5008C.crl rsync://rpki-repo.registro.br/repo/H5YWuNT1D2qDSD4A8MJzAbT7YtPiBh6Y1rbQPgAxtRHW/0/928F3E5FCF74B2479829DEF0B258A8F907E5008C.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/928F3E5FCF74B2479829DEF0B258A8F907E5008C.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 03 Nov 2026 12:48:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:c8:b6:a3:6d:b7:2b:2c:fa:fe:da:01:53:51:22:e3:fa:ad:d3:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=928F3E5FCF74B2479829DEF0B258A8F907E5008C Validity Not Before: Nov 2 09:29:35 2026 GMT Not After : Nov 3 12:48:35 2026 GMT Subject: CN=95A29CDE578F88DBC7B19B1005390D1391FF88FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b2:3b:9c:9f:4b:5b:1f:04:88:70:56:10:09: 5d:c3:7f:24:85:92:b0:e9:16:c5:2d:99:03:e5:04: 37:65:2a:8a:64:a8:a0:ec:47:36:9b:02:fc:5f:f8: 49:48:61:a7:31:a0:7a:c1:33:5c:56:b4:52:cc:bd: ca:76:26:ba:96:6a:00:5b:b2:fc:6c:18:32:0a:d0: 1a:c0:1b:39:3a:5a:62:3a:95:0f:f6:c8:00:39:53: 56:95:3a:4a:8e:6e:41:f1:8e:d7:f6:d4:fd:3c:ef: ab:51:4c:46:88:03:5a:cd:5c:45:35:bc:2a:5e:5a: 1b:b0:e5:3a:46:dd:9a:b4:19:1c:87:ac:e6:eb:51: f7:ee:50:c5:8d:40:fd:ab:19:f2:02:15:66:29:8d: 2f:9c:a9:be:4b:a1:31:b9:84:07:2f:b7:87:ef:5a: f5:b6:84:77:18:54:63:e4:29:18:d5:78:27:73:0f: 2c:6b:5e:8d:95:eb:48:0e:3f:d3:8e:8a:39:c1:3a: 3c:ca:e9:a9:41:e2:58:f8:39:4a:d7:fe:2a:1a:b7: 43:1e:4f:77:a4:27:52:90:18:d7:43:a4:d6:bc:79: 7d:ac:de:dc:a7:f7:f1:4f:54:fd:e4:a3:b4:d0:f9: a3:b6:7e:3e:79:7a:ff:48:ef:14:13:65:c1:f9:37: de:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:A2:9C:DE:57:8F:88:DB:C7:B1:9B:10:05:39:0D:13:91:FF:88:FF X509v3 Authority Key Identifier: keyid:92:8F:3E:5F:CF:74:B2:47:98:29:DE:F0:B2:58:A8:F9:07:E5:00:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/H5YWuNT1D2qDSD4A8MJzAbT7YtPiBh6Y1rbQPgAxtRHW/0/928F3E5FCF74B2479829DEF0B258A8F907E5008C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/928F3E5FCF74B2479829DEF0B258A8F907E5008C.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5YWuNT1D2qDSD4A8MJzAbT7YtPiBh6Y1rbQPgAxtRHW/0/928F3E5FCF74B2479829DEF0B258A8F907E5008C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:45:63:21:69:7e:fd:82:41:1a:07:ac:38:3c:e3:cb:59:d6: 16:23:d1:31:29:e8:05:69:ee:fb:63:f2:fe:05:5a:88:5a:c2: 54:2e:b0:7d:40:da:fa:37:3b:61:51:6c:a8:ca:98:e0:c3:87: aa:11:5a:cd:a4:ef:51:9d:15:e0:06:e9:cc:db:6e:78:f8:16: e3:c3:85:4e:89:9c:f2:35:78:2d:a9:e8:ad:42:72:c9:97:06: 98:e5:18:c7:54:5d:cc:4d:b5:e5:6b:62:5c:a7:7b:00:3a:2d: 6f:a2:a1:63:12:1c:73:81:65:94:eb:21:50:0c:f2:a5:19:ea: 8b:7a:bc:b2:1e:27:33:d1:9f:3d:e9:db:79:2b:fa:f8:6c:ac: 3a:68:fc:88:bc:24:4c:b8:b0:b0:e6:34:ea:3c:e8:cf:a8:c6: 28:cb:7e:7e:c2:99:7b:5d:97:5b:69:b8:79:41:23:6e:8c:c4: c9:3c:40:ac:79:fa:b6:4c:00:1d:2a:d7:74:37:67:38:a0:d1: 35:e3:b7:9f:89:6b:13:5d:4d:a6:97:1e:5a:0a:f7:16:25:39: 82:30:da:ed:bc:61:75:55:c6:b8:83:20:39:37:e6:53:e0:50: f9:a5:13:6d:0b:0f:b0:96:38:24:a1:e0:26:52:f3:96:db:0b: f0:67:80:8c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUIci2o223Kyz6/toBU1Ei4/qt0/kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTI4RjNFNUZDRjc0QjI0Nzk4MjlERUYwQjI1OEE4Rjkw N0U1MDA4QzAeFw0yNjExMDIwOTI5MzVaFw0yNjExMDMxMjQ4MzVaMDMxMTAvBgNV BAMTKDk1QTI5Q0RFNTc4Rjg4REJDN0IxOUIxMDA1MzkwRDEzOTFGRjg4RkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxsjucn0tbHwSIcFYQCV3DfySF krDpFsUtmQPlBDdlKopkqKDsRzabAvxf+ElIYacxoHrBM1xWtFLMvcp2JrqWagBb svxsGDIK0BrAGzk6WmI6lQ/2yAA5U1aVOkqObkHxjtf21P0876tRTEaIA1rNXEU1 vCpeWhuw5TpG3Zq0GRyHrObrUffuUMWNQP2rGfICFWYpjS+cqb5LoTG5hAcvt4fv WvW2hHcYVGPkKRjVeCdzDyxrXo2V60gOP9OOijnBOjzK6alB4lj4OUrX/ioat0Me T3ekJ1KQGNdDpNa8eX2s3tyn9/FPVP3ko7TQ+aO2fj55ev9I7xQTZcH5N96ZAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUlaKc3lePiNvHsZsQBTkNE5H/iP8wHwYDVR0j BBgwFoAUko8+X890skeYKd7wslio+QflAIwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSDVZV3VOVDFEMnFEU0Q0QThNSnpBYlQ3WXRQaUJoNlkxcmJRUGdBeHRS SFcvMC85MjhGM0U1RkNGNzRCMjQ3OTgyOURFRjBCMjU4QThGOTA3RTUwMDhDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkyOEYzRTVGQ0Y3NEIyNDc5 ODI5REVGMEIyNThBOEY5MDdFNTAwOEMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SDVZV3VOVDFEMnFEU0Q0QThNSnpBYlQ3WXRQaUJoNlkxcmJRUGdBeHRSSFcvMC85 MjhGM0U1RkNGNzRCMjQ3OTgyOURFRjBCMjU4QThGOTA3RTUwMDhDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAh0VjIWl+/YJBGgesODzjy1nWFiPRMSnoBWnu+2Py/gVaiFrCVC6wfUDa+jc7 YVFsqMqY4MOHqhFazaTvUZ0V4AbpzNtuePgW48OFTomc8jV4LanorUJyyZcGmOUY x1RdzE215WtiXKd7ADotb6KhYxIcc4FllOshUAzypRnqi3q8sh4nM9GfPenbeSv6 +GysOmj8iLwkTLiwsOY06jzoz6jGKMt+fsKZe12XW2m4eUEjbozEyTxArHn6tkwA HSrXdDdnOKDRNeO3n4lrE11NppceWgr3FiU5gjDa7bxhdVXGuIMgOTfmU+BQ+aUT bQsPsJY4JKHgJlLzltsL8GeAjA== -----END CERTIFICATE-----Generated at Mon Nov 2 19:33:33 2026 by rpki-client