$ rpki-client -vvvf rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/1/A4C9B133126401D92DA5457C573EA0078BF42BA8.mft File: A4C9B133126401D92DA5457C573EA0078BF42BA8.mft (raw, json) Hash identifier: pTfXPN+tlnPRI/uEOlhugBnx20iyPyuMAljPrEx6QaM= Subject key identifier: 85:84:AE:9E:86:CF:79:F8:FC:13:39:ED:A3:30:22:A5:60:11:13:DC Authority key identifier: A4:C9:B1:33:12:64:01:D9:2D:A5:45:7C:57:3E:A0:07:8B:F4:2B:A8 Certificate issuer: /CN=A4C9B133126401D92DA5457C573EA0078BF42BA8 Certificate serial: 33CACDDA7534D44366D9F912E28433984D250F76 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4C9B133126401D92DA5457C573EA0078BF42BA8.cer Subject info access: rsync://rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/1/A4C9B133126401D92DA5457C573EA0078BF42BA8.mft Manifest number: 04F4 Signing time: Sat 31 Oct 2026 07:06:28 +0000 Manifest this update: Sat 31 Oct 2026 07:01:28 +0000 Manifest next update: Sun 01 Nov 2026 09:41:28 +0000 Files and hashes: 1: 3136382e3139342e31322e302f32322d3234203d3e20323635333737.roa (hash: V2l6zSpJS7pKeSL0qVkQMBRprNxxsQq75q1RS2INOr0=) 2: 323830343a333332343a3a2f33322d313238203d3e20323635333737.roa (hash: YWPvyv0MK7t4cNjrZOaeGWdwja2gl183zw9EnUIdOtc=) 3: A4C9B133126401D92DA5457C573EA0078BF42BA8.crl (hash: q5u5+ns8Rge+6zAbF2DOfC0uwWhlSaqdVpJ3XAfb+bI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/1/A4C9B133126401D92DA5457C573EA0078BF42BA8.crl rsync://rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/1/A4C9B133126401D92DA5457C573EA0078BF42BA8.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4C9B133126401D92DA5457C573EA0078BF42BA8.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 01 Nov 2026 09:41:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:ca:cd:da:75:34:d4:43:66:d9:f9:12:e2:84:33:98:4d:25:0f:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A4C9B133126401D92DA5457C573EA0078BF42BA8 Validity Not Before: Oct 31 07:01:28 2026 GMT Not After : Nov 1 09:41:28 2026 GMT Subject: CN=8584AE9E86CF79F8FC1339EDA33022A5601113DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:26:db:07:d3:da:41:35:ca:d5:ab:89:14:da: 14:82:6e:e4:11:a8:16:8a:b6:f6:39:ab:f0:e0:ca: 63:1f:10:33:1c:76:f2:cb:5e:8f:1f:6b:f6:3e:ac: 2b:d4:ef:eb:74:57:90:30:fd:cd:12:f3:dc:8c:b2: 14:e2:7c:e4:9c:e5:f1:23:66:b7:58:45:f3:73:9f: 74:34:e4:14:83:74:49:1b:fb:dd:98:f9:28:fd:67: 41:5a:c9:5a:a5:c1:0c:4f:d4:73:44:3f:a1:ec:c2: 38:3d:a7:11:b3:6c:99:7b:91:94:40:97:a0:ca:fd: 0d:ff:c5:35:60:5f:3b:6e:66:18:e2:cc:be:fe:6f: a8:58:6e:5a:98:0e:f0:c7:73:3c:6c:c9:46:8e:99: 9c:aa:1d:28:c3:35:28:03:2d:3c:c4:38:c3:81:95: c3:0e:94:b9:a4:f5:d0:1f:2e:70:bc:2c:ac:18:c8: 23:6b:ff:3a:e8:ea:51:4c:31:95:f1:39:2d:9a:0e: 20:ee:45:4e:38:bb:9e:e6:e2:36:68:41:bf:94:a7: 12:fe:7f:7f:56:dd:d1:4e:84:7c:c5:f4:83:5c:ed: ea:3b:aa:23:a8:4b:f6:8f:87:6f:b5:ea:2b:e6:e9: 18:df:1d:ac:da:6b:53:0f:04:73:ba:88:21:74:2e: c1:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:84:AE:9E:86:CF:79:F8:FC:13:39:ED:A3:30:22:A5:60:11:13:DC X509v3 Authority Key Identifier: keyid:A4:C9:B1:33:12:64:01:D9:2D:A5:45:7C:57:3E:A0:07:8B:F4:2B:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/1/A4C9B133126401D92DA5457C573EA0078BF42BA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4C9B133126401D92DA5457C573EA0078BF42BA8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/1/A4C9B133126401D92DA5457C573EA0078BF42BA8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c9:56:9c:ef:d6:db:66:cf:0a:72:63:4f:56:76:e3:5e:e8:9f: 16:69:1c:7d:23:00:0a:a0:da:4f:72:92:94:ca:10:82:e4:96: 67:2f:c5:65:6d:d6:d6:82:2d:5d:64:01:ec:66:e3:d4:eb:9d: 36:2a:79:26:ac:29:d4:45:45:32:01:86:83:0b:eb:46:a5:b3: 7c:79:c9:d0:ea:4b:d6:79:c7:5e:ac:79:b4:50:c1:b8:a4:30: 9a:02:8e:35:ee:e4:39:98:45:12:d3:1b:b0:7d:d7:1c:0e:71: 00:3f:41:3a:d0:b6:3b:49:51:31:0f:38:f0:cc:55:33:ba:fc: 33:f8:89:23:87:d2:7f:be:0c:9d:30:36:d8:a4:ac:18:e5:fe: 20:20:d2:a6:56:16:1a:dc:16:1f:e0:dd:7e:a0:89:68:2e:84: 49:d2:37:3b:d2:2d:1d:90:41:4a:e2:41:39:00:bb:78:5d:00: 45:cc:12:8f:bb:2f:54:07:88:3a:22:15:95:b9:f2:75:94:7e: 16:6b:ce:04:b5:31:46:48:9f:4b:32:30:82:86:55:43:9a:2f: 21:0f:fd:62:e1:2c:1f:e2:98:18:0b:fd:e3:6f:e5:da:1e:7e: 0a:f8:08:04:67:50:11:83:5d:80:35:b1:fc:e8:67:5d:2d:57: 88:50:49:97 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUM8rN2nU01ENm2fkS4oQzmE0lD3YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTRDOUIxMzMxMjY0MDFEOTJEQTU0NTdDNTczRUEwMDc4 QkY0MkJBODAeFw0yNjEwMzEwNzAxMjhaFw0yNjExMDEwOTQxMjhaMDMxMTAvBgNV BAMTKDg1ODRBRTlFODZDRjc5RjhGQzEzMzlFREEzMzAyMkE1NjAxMTEzREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1JtsH09pBNcrVq4kU2hSCbuQR qBaKtvY5q/DgymMfEDMcdvLLXo8fa/Y+rCvU7+t0V5Aw/c0S89yMshTifOSc5fEj ZrdYRfNzn3Q05BSDdEkb+92Y+Sj9Z0FayVqlwQxP1HNEP6Hswjg9pxGzbJl7kZRA l6DK/Q3/xTVgXztuZhjizL7+b6hYblqYDvDHczxsyUaOmZyqHSjDNSgDLTzEOMOB lcMOlLmk9dAfLnC8LKwYyCNr/zro6lFMMZXxOS2aDiDuRU44u57m4jZoQb+UpxL+ f39W3dFOhHzF9INc7eo7qiOoS/aPh2+16ivm6RjfHazaa1MPBHO6iCF0LsEBAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUhYSunobPefj8EzntozAipWARE9wwHwYDVR0j BBgwFoAUpMmxMxJkAdktpUV8Vz6gB4v0K6gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSGU3YlBacWVhcjhVa0VxM29kZjlTRVpTWXZiUTl1UDQ0NHFoczVxWmJK R1EvMS9BNEM5QjEzMzEyNjQwMUQ5MkRBNTQ1N0M1NzNFQTAwNzhCRjQyQkE4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E0QzlCMTMzMTI2NDAxRDky REE1NDU3QzU3M0VBMDA3OEJGNDJCQTguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SGU3YlBacWVhcjhVa0VxM29kZjlTRVpTWXZiUTl1UDQ0NHFoczVxWmJKR1EvMS9B NEM5QjEzMzEyNjQwMUQ5MkRBNTQ1N0M1NzNFQTAwNzhCRjQyQkE4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAyVac79bbZs8KcmNPVnbjXuifFmkcfSMACqDaT3KSlMoQguSWZy/FZW3W1oIt XWQB7Gbj1OudNip5Jqwp1EVFMgGGgwvrRqWzfHnJ0OpL1nnHXqx5tFDBuKQwmgKO Ne7kOZhFEtMbsH3XHA5xAD9BOtC2O0lRMQ848MxVM7r8M/iJI4fSf74MnTA22KSs GOX+ICDSplYWGtwWH+DdfqCJaC6ESdI3O9ItHZBBSuJBOQC7eF0ARcwSj7svVAeI OiIVlbnydZR+FmvOBLUxRkifSzIwgoZVQ5ovIQ/9YuEsH+KYGAv942/l2h5+CvgI BGdQEYNdgDWx/OhnXS1XiFBJlw== -----END CERTIFICATE-----Generated at Sat Oct 31 23:58:19 2026 by rpki-client