$ rpki-client -vvvf rpki-repo.registro.br/repo/ZRi9J7cJMUBmsyBsaBLaRtRRSgFPZQ4fDwkkGekxqUC/0/7958C661EB8D493DABCAD14C921B052049BB4E87.mft File: 7958C661EB8D493DABCAD14C921B052049BB4E87.mft (raw, json) Hash identifier: 91IUQVaEIqaXBTBLPK6JMlkAHWNVfDpWSVzBPnfr5jY= Subject key identifier: 6A:C4:8A:50:BD:3D:BD:03:D9:B3:80:56:81:92:39:6E:2E:4E:E8:63 Authority key identifier: 79:58:C6:61:EB:8D:49:3D:AB:CA:D1:4C:92:1B:05:20:49:BB:4E:87 Certificate issuer: /CN=7958C661EB8D493DABCAD14C921B052049BB4E87 Certificate serial: 1D55579A14E1903C1B66C33A42D7283DDD472822 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7958C661EB8D493DABCAD14C921B052049BB4E87.cer Subject info access: rsync://rpki-repo.registro.br/repo/ZRi9J7cJMUBmsyBsaBLaRtRRSgFPZQ4fDwkkGekxqUC/0/7958C661EB8D493DABCAD14C921B052049BB4E87.mft Manifest number: 0134 Signing time: Tue 03 Nov 2026 23:56:19 +0000 Manifest this update: Tue 03 Nov 2026 23:51:19 +0000 Manifest next update: Thu 05 Nov 2026 01:33:19 +0000 Files and hashes: 1: 323830343a313230303a3a2f33322d313238203d3e20323633343530.roa (hash: 5liD75jr140pbUO+1Mv7V8ehHnjltZBcNMhknf2Zru8=) 2: 3137372e39312e3233322e302f32322d3332203d3e20323633343530.roa (hash: FDWZsrswWJMiRi/BlnaWSwQH1z378Oxjb/Q+RbLjMYM=) 3: 7958C661EB8D493DABCAD14C921B052049BB4E87.crl (hash: 5z7b5owlNAw8D+GKPCG33dGZkDfwaRBX4H/xukj+qW4=) 4: 3136382e3233322e3135362e302f32322d3332203d3e20323633343530.roa (hash: 5fwxo/xLeZgxGg/to0pXx+X1QYz2KKyEzx6SM8UbjD0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/ZRi9J7cJMUBmsyBsaBLaRtRRSgFPZQ4fDwkkGekxqUC/0/7958C661EB8D493DABCAD14C921B052049BB4E87.crl rsync://rpki-repo.registro.br/repo/ZRi9J7cJMUBmsyBsaBLaRtRRSgFPZQ4fDwkkGekxqUC/0/7958C661EB8D493DABCAD14C921B052049BB4E87.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7958C661EB8D493DABCAD14C921B052049BB4E87.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 05 Nov 2026 01:33:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:55:57:9a:14:e1:90:3c:1b:66:c3:3a:42:d7:28:3d:dd:47:28:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7958C661EB8D493DABCAD14C921B052049BB4E87 Validity Not Before: Nov 3 23:51:19 2026 GMT Not After : Nov 5 01:33:19 2026 GMT Subject: CN=6AC48A50BD3DBD03D9B380568192396E2E4EE863 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:a4:e0:53:a5:7c:f5:76:15:be:34:c0:7b:48: 6f:77:81:4d:d7:24:58:40:01:7f:03:6d:0d:31:66: 11:88:d3:79:1f:35:ef:46:0c:cf:ab:da:22:a0:d0: 52:c3:a7:67:97:f8:81:44:36:46:51:0b:82:d3:2b: c2:e2:29:12:19:98:d0:d9:36:fb:ef:70:d8:20:a3: fe:f5:dc:b1:4a:8d:af:0a:cc:c7:cd:95:6f:85:6c: 98:a8:1a:58:30:a3:f8:17:32:f5:03:c3:e8:38:22: 1d:80:64:34:91:3b:44:e6:18:82:31:9e:67:50:5e: 44:92:cf:73:4e:0f:dd:b1:fb:0a:a6:13:91:88:11: 65:65:43:7d:d4:7c:14:94:32:74:5b:99:ce:6d:42: 69:a0:ce:77:c0:9d:98:39:99:41:a8:a1:b3:db:80: 89:7f:fd:21:bd:88:b0:84:2e:7b:87:d3:a2:b0:ec: 0b:30:4c:77:08:8d:1a:68:c5:d2:1a:b0:6a:30:75: 07:f1:c7:09:4b:ed:7c:de:ec:e0:90:ab:52:14:40: 99:4d:48:5a:db:e2:55:c3:31:ed:16:8c:ab:ef:75: 51:6a:50:f3:c5:5f:0f:17:96:bc:f2:67:d2:7e:f9: b5:82:4d:75:55:54:46:96:ab:3e:7f:13:b4:94:d0: 76:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:C4:8A:50:BD:3D:BD:03:D9:B3:80:56:81:92:39:6E:2E:4E:E8:63 X509v3 Authority Key Identifier: keyid:79:58:C6:61:EB:8D:49:3D:AB:CA:D1:4C:92:1B:05:20:49:BB:4E:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/ZRi9J7cJMUBmsyBsaBLaRtRRSgFPZQ4fDwkkGekxqUC/0/7958C661EB8D493DABCAD14C921B052049BB4E87.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7958C661EB8D493DABCAD14C921B052049BB4E87.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/ZRi9J7cJMUBmsyBsaBLaRtRRSgFPZQ4fDwkkGekxqUC/0/7958C661EB8D493DABCAD14C921B052049BB4E87.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:d2:b2:ad:b1:fa:41:79:3c:c9:20:07:03:f1:81:b0:82:4e: 9e:2a:00:13:67:4d:7b:e4:d3:00:f4:b3:9d:24:d0:c1:de:0b: 60:51:18:a8:3f:46:7c:7e:12:fe:7c:69:56:6f:4e:a5:22:0d: df:c3:bb:a8:db:28:eb:d3:ec:18:bc:2a:5b:b4:80:1f:aa:df: 14:5a:45:00:ed:92:88:ef:1b:d9:f3:b5:ee:e4:14:7e:cd:dc: 31:f7:18:02:25:fb:e1:f0:42:c5:7e:48:3d:27:23:a7:10:b8: b4:9f:dd:23:60:6f:b7:3f:20:e6:83:f8:66:42:ed:8e:a9:a7: 96:4b:fa:5e:04:e4:01:9c:00:4a:e6:e6:3c:44:3c:2b:57:7c: c1:17:bb:ba:e0:d7:81:9a:88:ad:5e:27:f5:6a:36:d8:57:d2: 3e:d5:dd:d5:05:ba:50:92:7e:86:76:a8:06:89:1e:bb:c5:b7: 5a:5f:6e:03:4b:7b:38:76:ba:97:f3:60:e7:15:17:17:10:d8: c3:53:9d:45:7d:fe:d7:03:20:3a:19:73:9c:58:14:14:43:22: 3d:dd:d9:7f:f1:2d:cf:58:42:54:c2:2f:3b:f2:27:05:e4:88: 89:09:bb:de:4f:2e:36:78:0e:1b:25:c3:29:ac:ff:2f:f9:1b: 76:45:2b:1a -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUHVVXmhThkDwbZsM6QtcoPd1HKCIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzk1OEM2NjFFQjhENDkzREFCQ0FEMTRDOTIxQjA1MjA0 OUJCNEU4NzAeFw0yNjExMDMyMzUxMTlaFw0yNjExMDUwMTMzMTlaMDMxMTAvBgNV BAMTKDZBQzQ4QTUwQkQzREJEMDNEOUIzODA1NjgxOTIzOTZFMkU0RUU4NjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWpOBTpXz1dhW+NMB7SG93gU3X JFhAAX8DbQ0xZhGI03kfNe9GDM+r2iKg0FLDp2eX+IFENkZRC4LTK8LiKRIZmNDZ NvvvcNggo/713LFKja8KzMfNlW+FbJioGlgwo/gXMvUDw+g4Ih2AZDSRO0TmGIIx nmdQXkSSz3NOD92x+wqmE5GIEWVlQ33UfBSUMnRbmc5tQmmgznfAnZg5mUGoobPb gIl//SG9iLCELnuH06Kw7AswTHcIjRpoxdIasGowdQfxxwlL7Xze7OCQq1IUQJlN SFrb4lXDMe0WjKvvdVFqUPPFXw8XlrzyZ9J++bWCTXVVVEaWqz5/E7SU0HafAgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUasSKUL09vQPZs4BWgZI5bi5O6GMwHwYDVR0j BBgwFoAUeVjGYeuNST2rytFMkhsFIEm7TocwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9aUmk5SjdjSk1VQm1zeUJzYUJMYVJ0UlJTZ0ZQWlE0ZkR3a2tHZWt4cVVD LzAvNzk1OEM2NjFFQjhENDkzREFCQ0FEMTRDOTIxQjA1MjA0OUJCNEU4Ny5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS83OTU4QzY2MUVCOEQ0OTNEQUJD QUQxNEM5MjFCMDUyMDQ5QkI0RTg3LmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL1pS aTlKN2NKTVVCbXN5QnNhQkxhUnRSUlNnRlBaUTRmRHdra0dla3hxVUMvMC83OTU4 QzY2MUVCOEQ0OTNEQUJDQUQxNEM5MjFCMDUyMDQ5QkI0RTg3Lm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA K9KyrbH6QXk8ySAHA/GBsIJOnioAE2dNe+TTAPSznSTQwd4LYFEYqD9GfH4S/nxp Vm9OpSIN38O7qNso69PsGLwqW7SAH6rfFFpFAO2SiO8b2fO17uQUfs3cMfcYAiX7 4fBCxX5IPScjpxC4tJ/dI2Bvtz8g5oP4ZkLtjqmnlkv6XgTkAZwASubmPEQ8K1d8 wRe7uuDXgZqIrV4n9Wo22FfSPtXd1QW6UJJ+hnaoBokeu8W3Wl9uA0t7OHa6l/Ng 5xUXFxDYw1OdRX3+1wMgOhlznFgUFEMiPd3Zf/Etz1hCVMIvO/InBeSIiQm73k8u NngOGyXDKaz/L/kbdkUrGg== -----END CERTIFICATE-----Generated at Wed Nov 4 06:33:28 2026 by rpki-client