$ rpki-client -vvvf rpki-repo.registro.br/repo/SohvjFHKXppkNQk7QbqyejN5fPkZ2cGrP49r6uAQvcs/0/4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355.mft File: 4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355.mft (raw, json) Hash identifier: 8Tcu9nLo92S34uMyyd5z2PbLLNgQY9YkaQMt0BKXGCw= Subject key identifier: 85:56:AB:FE:5C:F2:48:C4:D9:E8:FA:9A:7A:76:DF:25:6C:8A:06:DA Authority key identifier: 4B:80:B2:0B:D7:40:DF:8A:FC:F0:F8:C5:A6:FE:B8:B9:E5:30:63:55 Certificate issuer: /CN=4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355 Certificate serial: 7820D80BE1AA204C499BD608F2E5296245C99B97 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355.cer Subject info access: rsync://rpki-repo.registro.br/repo/SohvjFHKXppkNQk7QbqyejN5fPkZ2cGrP49r6uAQvcs/0/4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355.mft Manifest number: 0364 Signing time: Sat 31 Oct 2026 00:24:21 +0000 Manifest this update: Sat 31 Oct 2026 00:19:21 +0000 Manifest next update: Sun 01 Nov 2026 00:28:21 +0000 Files and hashes: 1: 3133382e3138352e3137322e302f32322d3234203d3e203631383632.roa (hash: cKvg8yrZZKi+ggPtkL5V5SGtMmkJkC8tKoYg3IexQrg=) 2: 3230312e3135302e3132302e302f32322d3234203d3e203631383632.roa (hash: qiIda+t4xOiFoeZalH1Neo+rgjYTYSXkUJWodvETyrw=) 3: 323830343a316137633a3a2f33322d3334203d3e203631383632.roa (hash: aGhB8GwGGOw4fjLbwd2dHG8lWAcKkK2gTduDVziPQPU=) 4: 4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355.crl (hash: 57D/CP6x6z2BdZWgFE9meEBnUvCHxbj5Kfez2dMJjGc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/SohvjFHKXppkNQk7QbqyejN5fPkZ2cGrP49r6uAQvcs/0/4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355.crl rsync://rpki-repo.registro.br/repo/SohvjFHKXppkNQk7QbqyejN5fPkZ2cGrP49r6uAQvcs/0/4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 01 Nov 2026 00:28:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:20:d8:0b:e1:aa:20:4c:49:9b:d6:08:f2:e5:29:62:45:c9:9b:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355 Validity Not Before: Oct 31 00:19:21 2026 GMT Not After : Nov 1 00:28:21 2026 GMT Subject: CN=8556ABFE5CF248C4D9E8FA9A7A76DF256C8A06DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:97:6a:e1:ae:a9:96:ce:03:4d:90:fb:e7:03: 99:30:ba:1b:d2:53:50:73:cc:eb:e1:c2:58:f5:80: ee:c0:ac:32:07:b6:47:75:d4:e7:58:b2:1c:a4:af: 71:eb:ee:a5:50:fd:0a:6c:57:15:ea:f4:c3:16:87: 34:b6:13:d5:42:ac:4c:65:5e:02:7e:90:60:31:48: e8:c6:8d:c5:43:ab:9e:b0:74:cb:26:31:e8:2f:f3: 87:69:41:fc:7e:0f:b1:2b:74:79:81:76:d5:4c:50: 75:7f:18:b3:a6:ab:bc:48:a1:19:e9:3a:22:bf:a4: 79:68:32:21:9c:1c:bc:e7:c0:d7:70:ee:af:46:fd: f1:67:8c:63:36:89:55:37:b2:29:ce:b5:3d:11:8c: 82:f9:36:da:1a:d8:40:b2:cf:7e:fd:ba:61:49:74: 9e:df:f7:69:60:1a:e6:e4:ab:e5:91:ab:52:3f:30: 5c:82:57:55:f1:49:f4:2b:ac:fb:74:17:09:bc:2d: e5:dc:ac:15:dc:f6:5d:e5:22:80:ea:0d:84:ab:93: e7:ae:00:30:ca:59:18:ba:9e:40:7f:a6:0a:95:42: bf:ed:2c:de:98:49:9e:99:15:cf:74:ee:00:47:76: 7f:d8:09:bc:7d:ec:ef:83:25:78:0d:75:09:7b:e3: be:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:56:AB:FE:5C:F2:48:C4:D9:E8:FA:9A:7A:76:DF:25:6C:8A:06:DA X509v3 Authority Key Identifier: keyid:4B:80:B2:0B:D7:40:DF:8A:FC:F0:F8:C5:A6:FE:B8:B9:E5:30:63:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/SohvjFHKXppkNQk7QbqyejN5fPkZ2cGrP49r6uAQvcs/0/4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/SohvjFHKXppkNQk7QbqyejN5fPkZ2cGrP49r6uAQvcs/0/4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:df:53:ca:05:45:d2:ac:78:d8:3e:cd:70:e8:33:49:34:e4: a1:9e:55:4c:4c:c8:61:60:7b:97:26:72:c1:4f:a2:1d:f3:96: 19:40:b9:9b:0d:af:59:31:62:c6:8c:42:6a:2f:d7:cc:33:83: 1a:83:90:50:65:a3:08:af:4b:16:d9:98:77:7a:3d:2c:93:dc: 03:0c:41:9e:c6:86:b3:f0:5b:c8:16:2f:b9:20:d2:97:8d:da: a5:af:8a:d7:ea:ff:dd:76:ab:0c:45:45:33:05:83:30:b1:df: c2:1d:3d:47:02:f2:2b:0a:de:90:82:f7:db:88:b2:0d:86:db: c8:3d:e8:dc:ea:6b:07:32:da:ed:78:eb:68:ae:e3:3f:60:a1: c5:59:f3:6b:29:54:75:f9:19:2b:dd:68:c5:ef:ca:e5:b3:82: 04:85:dd:1b:54:40:05:cd:27:03:3f:d6:c1:6d:0b:57:ed:d8: 16:ad:0e:af:4b:37:6f:e6:3d:c7:bf:ec:4f:26:46:bc:c5:e5: 29:ab:73:fc:fa:95:4a:2e:bb:20:6a:48:5d:7f:62:de:0f:91: e2:50:eb:aa:eb:36:6d:30:a4:bd:50:69:bc:a1:a4:78:6e:b8: 18:7f:9d:53:1f:2c:5b:d9:2e:f9:72:d2:a8:ae:6f:ee:4a:6d: 99:88:51:62 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUeCDYC+GqIExJm9YI8uUpYkXJm5cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEI4MEIyMEJENzQwREY4QUZDRjBGOEM1QTZGRUI4QjlF NTMwNjM1NTAeFw0yNjEwMzEwMDE5MjFaFw0yNjExMDEwMDI4MjFaMDMxMTAvBgNV BAMTKDg1NTZBQkZFNUNGMjQ4QzREOUU4RkE5QTdBNzZERjI1NkM4QTA2REEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4l2rhrqmWzgNNkPvnA5kwuhvS U1BzzOvhwlj1gO7ArDIHtkd11OdYshykr3Hr7qVQ/QpsVxXq9MMWhzS2E9VCrExl XgJ+kGAxSOjGjcVDq56wdMsmMegv84dpQfx+D7ErdHmBdtVMUHV/GLOmq7xIoRnp OiK/pHloMiGcHLznwNdw7q9G/fFnjGM2iVU3sinOtT0RjIL5Ntoa2ECyz379umFJ dJ7f92lgGubkq+WRq1I/MFyCV1XxSfQrrPt0Fwm8LeXcrBXc9l3lIoDqDYSrk+eu ADDKWRi6nkB/pgqVQr/tLN6YSZ6ZFc907gBHdn/YCbx97O+DJXgNdQl7477HAgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUhVar/lzySMTZ6PqaenbfJWyKBtowHwYDVR0j BBgwFoAUS4CyC9dA34r88PjFpv64ueUwY1UwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9Tb2h2akZIS1hwcGtOUWs3UWJxeWVqTjVmUGtaMmNHclA0OXI2dUFRdmNz LzAvNEI4MEIyMEJENzQwREY4QUZDRjBGOEM1QTZGRUI4QjlFNTMwNjM1NS5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS80QjgwQjIwQkQ3NDBERjhBRkNG MEY4QzVBNkZFQjhCOUU1MzA2MzU1LmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL1Nv aHZqRkhLWHBwa05RazdRYnF5ZWpONWZQa1oyY0dyUDQ5cjZ1QVF2Y3MvMC80Qjgw QjIwQkQ3NDBERjhBRkNGMEY4QzVBNkZFQjhCOUU1MzA2MzU1Lm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA HN9TygVF0qx42D7NcOgzSTTkoZ5VTEzIYWB7lyZywU+iHfOWGUC5mw2vWTFixoxC ai/XzDODGoOQUGWjCK9LFtmYd3o9LJPcAwxBnsaGs/BbyBYvuSDSl43apa+K1+r/ 3XarDEVFMwWDMLHfwh09RwLyKwrekIL324iyDYbbyD3o3OprBzLa7XjraK7jP2Ch xVnzaylUdfkZK91oxe/K5bOCBIXdG1RABc0nAz/WwW0LV+3YFq0Or0s3b+Y9x7/s TyZGvMXlKatz/PqVSi67IGpIXX9i3g+R4lDrqus2bTCkvVBpvKGkeG64GH+dUx8s W9ku+XLSqK5v7kptmYhRYg== -----END CERTIFICATE-----Generated at Sat Oct 31 17:16:08 2026 by rpki-client