$ rpki-client -vvvf rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/1/2AADFACED9C75E320914697A02E254A3D463839A.mft File: 2AADFACED9C75E320914697A02E254A3D463839A.mft (raw, json) Hash identifier: A0vzxEaS02qU0h5a8FOqHL6KECXIuhaAqj4K+y9QzaY= Subject key identifier: 22:AF:B2:18:C3:6B:82:2E:AD:90:A1:17:5E:F0:56:05:9F:D2:68:C0 Authority key identifier: 2A:AD:FA:CE:D9:C7:5E:32:09:14:69:7A:02:E2:54:A3:D4:63:83:9A Certificate issuer: /CN=2AADFACED9C75E320914697A02E254A3D463839A Certificate serial: 5E6E46F6EF10F0861EA5E85D496951369D066B91 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AADFACED9C75E320914697A02E254A3D463839A.cer Subject info access: rsync://rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/1/2AADFACED9C75E320914697A02E254A3D463839A.mft Manifest number: 04E0 Signing time: Wed 04 Nov 2026 18:28:40 +0000 Manifest this update: Wed 04 Nov 2026 18:23:40 +0000 Manifest next update: Thu 05 Nov 2026 21:40:40 +0000 Files and hashes: 1: 323830343a316465383a3a2f33322d3434203d3e203533313230.roa (hash: Nr+GaVgOM2KaxkMsqzw8YASCuxHUI3aExeAauUF/zmg=) 2: 2AADFACED9C75E320914697A02E254A3D463839A.crl (hash: bmF0jtjQm5jcf18xIsNpAP190R+UJL7GeIQ+rsKNh+M=) 3: 3134312e3139332e3135312e302f32342d3234203d3e203533313230.roa (hash: yzKUpRe3y8LUWcm83z69Jaw9iWkJf+qC/m+2IVHZxlc=) 4: 3138372e3131312e31362e302f32302d3234203d3e203533313230.roa (hash: Wl3NM8LcidtB9ABien1wpKt4MxmMwZ7mN01Y9qxRLP8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/1/2AADFACED9C75E320914697A02E254A3D463839A.crl rsync://rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/1/2AADFACED9C75E320914697A02E254A3D463839A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AADFACED9C75E320914697A02E254A3D463839A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 05 Nov 2026 21:40:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:6e:46:f6:ef:10:f0:86:1e:a5:e8:5d:49:69:51:36:9d:06:6b:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2AADFACED9C75E320914697A02E254A3D463839A Validity Not Before: Nov 4 18:23:40 2026 GMT Not After : Nov 5 21:40:40 2026 GMT Subject: CN=22AFB218C36B822EAD90A1175EF056059FD268C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:39:a1:30:46:38:cb:e5:51:15:73:c2:39:3a: 8a:6b:e1:73:a8:de:75:68:eb:d9:db:6c:22:79:3e: 44:12:29:a5:92:6f:13:a9:69:aa:cc:f2:1c:41:91: cf:7c:7d:6e:aa:d8:e9:55:5a:8b:71:86:6c:a5:2f: c8:4e:df:c3:d0:a0:11:b1:2d:7e:76:3f:c3:27:e6: 86:64:9f:13:70:f5:60:6a:9a:b1:1b:c2:83:c4:34: ff:95:08:8e:67:38:d8:63:6a:4a:07:a7:91:56:1a: e2:97:da:1e:fc:6c:44:c1:38:90:d1:3a:d5:4a:4c: ab:13:f1:63:2f:97:22:cb:b4:6b:3c:59:1d:64:73: 9e:ac:3e:20:26:83:67:3d:41:6d:58:63:62:98:64: 20:a7:c7:c1:49:d6:9b:d0:48:f2:58:2b:f1:cb:e7: d3:56:15:e8:ad:29:03:74:8c:f1:1b:06:12:c6:cd: b1:4f:4b:ce:bc:f5:69:dd:4c:20:80:bb:f7:5d:af: 5b:fb:e8:30:f2:5b:e9:15:02:07:5b:d5:be:71:30: 01:5f:b2:fb:f1:60:87:50:7e:24:d7:41:66:f9:f4: f3:a7:2b:0f:9f:21:b6:64:cf:5f:e7:51:90:8e:25: 08:82:2e:12:03:f9:05:23:5f:ac:d9:45:32:6b:53: 1a:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:AF:B2:18:C3:6B:82:2E:AD:90:A1:17:5E:F0:56:05:9F:D2:68:C0 X509v3 Authority Key Identifier: keyid:2A:AD:FA:CE:D9:C7:5E:32:09:14:69:7A:02:E2:54:A3:D4:63:83:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/1/2AADFACED9C75E320914697A02E254A3D463839A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AADFACED9C75E320914697A02E254A3D463839A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/1/2AADFACED9C75E320914697A02E254A3D463839A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:e6:46:6c:cd:c0:c4:31:b3:8e:05:99:4c:b1:62:27:50:26: ac:b2:d5:de:b7:21:86:63:d7:11:c7:15:46:b8:81:a0:7a:e3: 79:7c:e6:08:f6:2d:5b:03:c5:cb:0f:ee:33:aa:57:ad:1e:68: 49:e4:b4:be:76:7b:68:98:9e:d7:f5:f5:91:75:58:94:e3:36: f6:f5:5f:1f:40:57:d6:92:e9:1a:cb:cd:a0:4f:2b:8d:f1:26: bb:47:5c:fa:0f:6d:f4:0c:24:57:f3:b3:ed:85:05:2a:83:2a: 7b:84:52:78:11:83:08:7e:a1:f1:f6:1b:45:f7:59:e7:ea:d2: d3:27:9d:03:c7:bd:12:3e:85:dd:8a:b0:ef:80:84:d2:17:cc: fd:97:23:9c:42:42:07:17:bb:6c:47:f1:6f:cf:df:db:5c:52: 8b:ea:3d:87:b7:da:45:be:ce:8d:a0:0e:ca:34:a1:06:ea:f8: c5:1c:63:77:fd:28:41:69:b0:bb:82:0d:e4:93:e3:a4:34:d7: f5:a9:5a:f5:78:ad:ce:d8:3e:42:92:ce:9e:47:13:5c:e0:3e: 89:64:a0:bc:b6:a6:d5:49:a2:2e:a9:75:be:d9:62:41:9a:d9: 0a:53:05:c3:9a:90:49:92:4a:54:90:83:7e:3b:46:f7:ca:50: 26:89:f2:0b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUXm5G9u8Q8IYepehdSWlRNp0Ga5EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFBREZBQ0VEOUM3NUUzMjA5MTQ2OTdBMDJFMjU0QTNE NDYzODM5QTAeFw0yNjExMDQxODIzNDBaFw0yNjExMDUyMTQwNDBaMDMxMTAvBgNV BAMTKDIyQUZCMjE4QzM2QjgyMkVBRDkwQTExNzVFRjA1NjA1OUZEMjY4QzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvOaEwRjjL5VEVc8I5Oopr4XOo 3nVo69nbbCJ5PkQSKaWSbxOpaarM8hxBkc98fW6q2OlVWotxhmylL8hO38PQoBGx LX52P8Mn5oZknxNw9WBqmrEbwoPENP+VCI5nONhjakoHp5FWGuKX2h78bETBOJDR OtVKTKsT8WMvlyLLtGs8WR1kc56sPiAmg2c9QW1YY2KYZCCnx8FJ1pvQSPJYK/HL 59NWFeitKQN0jPEbBhLGzbFPS8689WndTCCAu/ddr1v76DDyW+kVAgdb1b5xMAFf svvxYIdQfiTXQWb59POnKw+fIbZkz1/nUZCOJQiCLhID+QUjX6zZRTJrUxrRAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUIq+yGMNrgi6tkKEXXvBWBZ/SaMAwHwYDVR0j BBgwFoAUKq36ztnHXjIJFGl6AuJUo9Rjg5owDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSHVyY0FKek1GTEY4ZTRncEg2SmVqUkRxM2p2UEpqYmttMW05bVJCU0Ru eW8vMS8yQUFERkFDRUQ5Qzc1RTMyMDkxNDY5N0EwMkUyNTRBM0Q0NjM4MzlBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJBQURGQUNFRDlDNzVFMzIw OTE0Njk3QTAyRTI1NEEzRDQ2MzgzOUEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SHVyY0FKek1GTEY4ZTRncEg2SmVqUkRxM2p2UEpqYmttMW05bVJCU0RueW8vMS8y QUFERkFDRUQ5Qzc1RTMyMDkxNDY5N0EwMkUyNTRBM0Q0NjM4MzlBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIuZGbM3AxDGzjgWZTLFiJ1AmrLLV3rchhmPXEccVRriBoHrjeXzmCPYtWwPF yw/uM6pXrR5oSeS0vnZ7aJie1/X1kXVYlOM29vVfH0BX1pLpGsvNoE8rjfEmu0dc +g9t9AwkV/Oz7YUFKoMqe4RSeBGDCH6h8fYbRfdZ5+rS0yedA8e9Ej6F3Yqw74CE 0hfM/ZcjnEJCBxe7bEfxb8/f21xSi+o9h7faRb7OjaAOyjShBur4xRxjd/0oQWmw u4IN5JPjpDTX9ala9Xitztg+QpLOnkcTXOA+iWSgvLam1UmiLql1vtliQZrZClMF w5qQSZJKVJCDfjtG98pQJonyCw== -----END CERTIFICATE-----Generated at Thu Nov 5 08:19:12 2026 by rpki-client