$ rpki-client -vvvf rpki-repo.registro.br/repo/ZRi9J7cJMUBmsyBsaBLaRtRRSgFPZQ4fDwkkGekxqUC/0/7958C661EB8D493DABCAD14C921B052049BB4E87.mft File: 7958C661EB8D493DABCAD14C921B052049BB4E87.mft (raw, json) Hash identifier: QS9ziyF/BJjnBwbEcC8HgCumQk+jgPvVpF6Op+ocSrg= Subject key identifier: 28:25:6C:A9:15:B3:83:47:3E:85:22:11:9D:39:33:00:12:5C:B6:A9 Authority key identifier: 79:58:C6:61:EB:8D:49:3D:AB:CA:D1:4C:92:1B:05:20:49:BB:4E:87 Certificate issuer: /CN=7958C661EB8D493DABCAD14C921B052049BB4E87 Certificate serial: 35BF0BC52D41E83EF42ADB049E8DC055BAF9877D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7958C661EB8D493DABCAD14C921B052049BB4E87.cer Subject info access: rsync://rpki-repo.registro.br/repo/ZRi9J7cJMUBmsyBsaBLaRtRRSgFPZQ4fDwkkGekxqUC/0/7958C661EB8D493DABCAD14C921B052049BB4E87.mft Manifest number: 0131 Signing time: Sun 01 Nov 2026 19:01:08 +0000 Manifest this update: Sun 01 Nov 2026 18:56:08 +0000 Manifest next update: Mon 02 Nov 2026 19:02:08 +0000 Files and hashes: 1: 3136382e3233322e3135362e302f32322d3332203d3e20323633343530.roa (hash: 5fwxo/xLeZgxGg/to0pXx+X1QYz2KKyEzx6SM8UbjD0=) 2: 3137372e39312e3233322e302f32322d3332203d3e20323633343530.roa (hash: FDWZsrswWJMiRi/BlnaWSwQH1z378Oxjb/Q+RbLjMYM=) 3: 323830343a313230303a3a2f33322d313238203d3e20323633343530.roa (hash: 5liD75jr140pbUO+1Mv7V8ehHnjltZBcNMhknf2Zru8=) 4: 7958C661EB8D493DABCAD14C921B052049BB4E87.crl (hash: qNb5zf0rhuQ0wMdUyeEQOD55+iyr58JMriMG1x993r0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/ZRi9J7cJMUBmsyBsaBLaRtRRSgFPZQ4fDwkkGekxqUC/0/7958C661EB8D493DABCAD14C921B052049BB4E87.crl rsync://rpki-repo.registro.br/repo/ZRi9J7cJMUBmsyBsaBLaRtRRSgFPZQ4fDwkkGekxqUC/0/7958C661EB8D493DABCAD14C921B052049BB4E87.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7958C661EB8D493DABCAD14C921B052049BB4E87.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 02 Nov 2026 19:02:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:bf:0b:c5:2d:41:e8:3e:f4:2a:db:04:9e:8d:c0:55:ba:f9:87:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7958C661EB8D493DABCAD14C921B052049BB4E87 Validity Not Before: Nov 1 18:56:08 2026 GMT Not After : Nov 2 19:02:08 2026 GMT Subject: CN=28256CA915B383473E8522119D393300125CB6A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:4c:1e:57:81:4f:9c:3a:c3:61:65:ef:9d:b8: 75:71:d0:4a:95:f0:77:30:f8:b9:74:c2:3b:83:55: 05:9c:f8:1c:ed:03:6f:d1:e0:e9:3c:fc:49:fc:fe: 10:a6:12:5f:6e:2d:0e:46:30:cd:6d:e4:6b:02:c4: 02:e0:54:6a:9d:ef:4a:70:af:3a:37:b8:1b:af:94: 7b:cc:26:2c:31:f8:44:7d:86:0d:24:48:86:06:21: c1:e4:6f:21:91:f9:23:83:cf:9b:31:c2:24:e3:d6: f9:b3:95:a6:a1:65:66:b0:5e:2b:aa:b6:77:75:7e: a5:5e:9c:3c:ce:fc:52:66:91:03:9e:26:ce:54:de: d1:35:41:52:d4:ab:ef:ea:b8:c0:97:41:ed:9b:d8: 58:58:5f:a8:69:d7:ee:ec:eb:14:0c:ec:45:ee:cc: e5:61:45:74:b6:98:86:ce:b7:d3:a8:b0:10:fd:1b: 38:6b:78:64:42:dd:4d:8f:e3:aa:62:83:33:b2:f9: ac:d8:47:bf:d2:7c:7b:63:ee:ee:62:54:3e:2f:d6: 38:4e:ed:e9:df:56:49:54:4e:c8:ef:a9:8e:2b:de: 66:fd:d1:a2:a2:ed:13:79:06:e0:fb:48:23:3f:52: 4e:61:55:10:fd:e7:07:f5:e1:32:e5:10:28:dc:1e: 91:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:25:6C:A9:15:B3:83:47:3E:85:22:11:9D:39:33:00:12:5C:B6:A9 X509v3 Authority Key Identifier: keyid:79:58:C6:61:EB:8D:49:3D:AB:CA:D1:4C:92:1B:05:20:49:BB:4E:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/ZRi9J7cJMUBmsyBsaBLaRtRRSgFPZQ4fDwkkGekxqUC/0/7958C661EB8D493DABCAD14C921B052049BB4E87.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7958C661EB8D493DABCAD14C921B052049BB4E87.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/ZRi9J7cJMUBmsyBsaBLaRtRRSgFPZQ4fDwkkGekxqUC/0/7958C661EB8D493DABCAD14C921B052049BB4E87.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:32:28:98:c1:ed:23:28:55:6a:0b:2d:f0:10:38:10:55:e9: af:3c:24:83:02:b9:6a:06:9c:14:70:a5:a1:59:d7:45:81:f1: 1d:3b:da:58:2d:e3:96:e0:60:b6:51:42:df:fa:46:5a:95:9a: 8c:fb:0d:44:70:22:10:f2:e2:29:9c:52:35:a1:d9:01:32:e6: 69:e7:e9:ee:11:31:1e:8a:ef:03:05:08:a9:20:3f:ef:41:36: 3e:76:8b:ef:da:4c:3a:66:26:ab:9d:73:30:48:d8:6a:8c:59: 98:20:5e:0f:07:4e:7a:75:85:46:03:be:19:9c:67:32:98:ab: f4:be:07:16:86:4a:4f:65:ff:62:43:ae:f4:06:70:6a:9b:1a: c2:a2:a5:2f:8b:ea:91:cc:55:4f:8d:7b:ca:83:5e:e8:09:76: c5:12:33:73:1b:a7:06:7f:cc:68:d5:71:d4:f2:d1:2c:04:63: 60:59:d5:cd:11:05:48:f1:c8:08:f3:74:97:0f:da:46:1e:86: e6:cf:3c:80:81:ee:f1:2a:aa:91:9e:f2:46:e6:b5:1d:3c:c1: 41:ba:8b:2d:fc:d8:45:fd:64:96:db:7f:34:1b:53:62:a8:08: 5a:a8:b1:cb:0e:ad:d0:26:1f:c0:e9:c9:5f:15:26:52:7a:1a: 81:4b:93:c6 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUNb8LxS1B6D70KtsEno3AVbr5h30wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzk1OEM2NjFFQjhENDkzREFCQ0FEMTRDOTIxQjA1MjA0 OUJCNEU4NzAeFw0yNjExMDExODU2MDhaFw0yNjExMDIxOTAyMDhaMDMxMTAvBgNV BAMTKDI4MjU2Q0E5MTVCMzgzNDczRTg1MjIxMTlEMzkzMzAwMTI1Q0I2QTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQTB5XgU+cOsNhZe+duHVx0EqV 8Hcw+Ll0wjuDVQWc+BztA2/R4Ok8/En8/hCmEl9uLQ5GMM1t5GsCxALgVGqd70pw rzo3uBuvlHvMJiwx+ER9hg0kSIYGIcHkbyGR+SODz5sxwiTj1vmzlaahZWawXiuq tnd1fqVenDzO/FJmkQOeJs5U3tE1QVLUq+/quMCXQe2b2FhYX6hp1+7s6xQM7EXu zOVhRXS2mIbOt9OosBD9GzhreGRC3U2P46pigzOy+azYR7/SfHtj7u5iVD4v1jhO 7enfVklUTsjvqY4r3mb90aKi7RN5BuD7SCM/Uk5hVRD95wf14TLlECjcHpFPAgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUKCVsqRWzg0c+hSIRnTkzABJctqkwHwYDVR0j BBgwFoAUeVjGYeuNST2rytFMkhsFIEm7TocwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9aUmk5SjdjSk1VQm1zeUJzYUJMYVJ0UlJTZ0ZQWlE0ZkR3a2tHZWt4cVVD LzAvNzk1OEM2NjFFQjhENDkzREFCQ0FEMTRDOTIxQjA1MjA0OUJCNEU4Ny5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS83OTU4QzY2MUVCOEQ0OTNEQUJD QUQxNEM5MjFCMDUyMDQ5QkI0RTg3LmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL1pS aTlKN2NKTVVCbXN5QnNhQkxhUnRSUlNnRlBaUTRmRHdra0dla3hxVUMvMC83OTU4 QzY2MUVCOEQ0OTNEQUJDQUQxNEM5MjFCMDUyMDQ5QkI0RTg3Lm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA vjIomMHtIyhVagst8BA4EFXprzwkgwK5agacFHCloVnXRYHxHTvaWC3jluBgtlFC 3/pGWpWajPsNRHAiEPLiKZxSNaHZATLmaefp7hExHorvAwUIqSA/70E2PnaL79pM OmYmq51zMEjYaoxZmCBeDwdOenWFRgO+GZxnMpir9L4HFoZKT2X/YkOu9AZwapsa wqKlL4vqkcxVT417yoNe6Al2xRIzcxunBn/MaNVx1PLRLARjYFnVzREFSPHICPN0 lw/aRh6G5s88gIHu8SqqkZ7yRua1HTzBQbqLLfzYRf1kltt/NBtTYqgIWqixyw6t 0CYfwOnJXxUmUnoagUuTxg== -----END CERTIFICATE-----Generated at Mon Nov 2 09:35:35 2026 by rpki-client