$ rpki-client -vvvf rpki-repo.registro.br/repo/zqkoh4kfNuLDrLzy7VW4R1yD7YhBoxc4ohnvfpBU7r8/0/2124AB708BBF6388EC80D06C3B8FB1FF02426295.mft File: 2124AB708BBF6388EC80D06C3B8FB1FF02426295.mft (raw, json) Hash identifier: 8jwPZ2TI7IWknwM+YhhS76f2h7nSQLYI6ALkkae1hgk= Subject key identifier: 08:27:69:63:FE:03:5B:11:29:91:05:3D:FA:8E:CD:70:3F:E5:19:78 Authority key identifier: 21:24:AB:70:8B:BF:63:88:EC:80:D0:6C:3B:8F:B1:FF:02:42:62:95 Certificate issuer: /CN=2124AB708BBF6388EC80D06C3B8FB1FF02426295 Certificate serial: 7149F71CD8A5715748A5A2122CBC5F0B670473E6 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2124AB708BBF6388EC80D06C3B8FB1FF02426295.cer Subject info access: rsync://rpki-repo.registro.br/repo/zqkoh4kfNuLDrLzy7VW4R1yD7YhBoxc4ohnvfpBU7r8/0/2124AB708BBF6388EC80D06C3B8FB1FF02426295.mft Manifest number: DC Signing time: Fri 30 Oct 2026 18:36:15 +0000 Manifest this update: Fri 30 Oct 2026 18:31:15 +0000 Manifest next update: Sat 31 Oct 2026 21:08:15 +0000 Files and hashes: 1: 2124AB708BBF6388EC80D06C3B8FB1FF02426295.crl (hash: tCuJBpdIlAJbjhKE37cX6GkRH21xQ470aa26Se7TdqE=) 2: 323830343a366238343a3a2f33322d313238203d3e20323730343035.roa (hash: 2ozPd5FcOpRP8Pf6OP7xrYk6TvnS6a/F3RrN6QnExKo=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/zqkoh4kfNuLDrLzy7VW4R1yD7YhBoxc4ohnvfpBU7r8/0/2124AB708BBF6388EC80D06C3B8FB1FF02426295.crl rsync://rpki-repo.registro.br/repo/zqkoh4kfNuLDrLzy7VW4R1yD7YhBoxc4ohnvfpBU7r8/0/2124AB708BBF6388EC80D06C3B8FB1FF02426295.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2124AB708BBF6388EC80D06C3B8FB1FF02426295.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 31 Oct 2026 21:08:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:49:f7:1c:d8:a5:71:57:48:a5:a2:12:2c:bc:5f:0b:67:04:73:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2124AB708BBF6388EC80D06C3B8FB1FF02426295 Validity Not Before: Oct 30 18:31:15 2026 GMT Not After : Oct 31 21:08:15 2026 GMT Subject: CN=08276963FE035B112991053DFA8ECD703FE51978 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:53:e0:75:5a:7c:50:c1:0a:80:98:22:2b:27: d3:6b:05:c8:44:57:37:09:6c:b3:49:21:c3:f0:79: 6a:7a:91:c8:f6:04:ba:2d:c1:b0:bb:7e:5c:78:d6: 09:6a:35:2a:65:02:b5:e8:e2:e5:1a:73:27:c2:1d: cd:50:01:c3:66:a1:71:3b:83:72:3f:74:1a:37:71: 60:00:45:34:fd:37:a0:e6:6f:01:e6:3b:4a:e7:6b: 28:7f:3b:9b:ee:b1:67:d3:d3:43:4a:b9:2c:bf:8f: 47:6d:78:e4:28:05:f0:0c:6c:be:17:69:92:33:a5: ed:b8:e1:91:be:52:1c:50:29:91:1d:a8:8f:5f:46: 57:2c:09:57:a3:ce:3d:82:e4:0e:a6:a8:56:de:8d: 18:f8:3a:61:e5:d8:1b:10:fb:9d:b1:2a:91:cd:b2: 94:a9:68:32:e1:a9:09:c5:b9:79:97:73:32:99:9c: 99:73:84:74:b7:7d:f4:ac:b7:79:dc:37:88:63:18: 23:ac:1f:87:a6:17:ea:5a:48:db:34:0c:78:14:3d: bd:b9:3b:77:8f:2d:68:46:55:47:57:b3:18:44:c9: fa:cd:2e:e0:2a:cf:5b:f6:8e:58:d6:a9:14:c0:82: a4:1d:9d:01:16:73:bb:34:38:f5:df:7b:8a:90:f3: 67:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:27:69:63:FE:03:5B:11:29:91:05:3D:FA:8E:CD:70:3F:E5:19:78 X509v3 Authority Key Identifier: keyid:21:24:AB:70:8B:BF:63:88:EC:80:D0:6C:3B:8F:B1:FF:02:42:62:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/zqkoh4kfNuLDrLzy7VW4R1yD7YhBoxc4ohnvfpBU7r8/0/2124AB708BBF6388EC80D06C3B8FB1FF02426295.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2124AB708BBF6388EC80D06C3B8FB1FF02426295.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/zqkoh4kfNuLDrLzy7VW4R1yD7YhBoxc4ohnvfpBU7r8/0/2124AB708BBF6388EC80D06C3B8FB1FF02426295.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:43:08:0a:22:70:b9:58:20:c6:e2:84:47:ae:6d:a5:8a:a6: 47:14:5d:ff:0b:55:1e:aa:68:b7:3d:57:f3:85:bf:46:eb:7e: f8:36:d9:29:26:a7:62:79:9d:3d:62:85:23:25:9d:66:ab:7c: df:6e:74:ec:7e:0d:28:4a:6b:db:20:43:9e:15:e1:9f:28:30: 27:a1:e8:8d:63:02:97:26:85:2a:78:1c:d8:53:12:97:ed:3a: b7:68:ab:9d:fd:1c:00:68:68:6a:29:ea:50:fe:c7:dc:e3:ad: e2:4f:3d:92:73:1e:bf:d8:2f:34:ba:ad:d2:8a:32:66:74:47: 44:03:ab:e3:3a:71:3a:9a:df:dd:89:d1:fe:f4:cc:05:1f:00: 6e:cb:95:0c:e3:ef:e1:41:68:e9:09:72:fa:bf:c3:b5:95:de: 09:16:d8:a1:16:eb:48:3b:f3:a9:33:5d:6b:58:46:63:41:2f: 56:c6:34:e0:f0:60:d2:4b:82:87:6a:2e:1c:d0:15:fd:ca:54: a5:d4:8e:6a:c5:d3:21:9d:64:18:b8:a8:6b:8d:24:9e:e8:90: 70:7d:2d:1f:61:82:40:11:36:9d:3a:4b:47:b1:a4:88:83:db: 21:65:51:0f:92:88:55:9b:05:bc:5d:5b:a9:02:ad:6b:ff:09: 39:f3:1f:d7 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUcUn3HNilcVdIpaISLLxfC2cEc+YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjEyNEFCNzA4QkJGNjM4OEVDODBEMDZDM0I4RkIxRkYw MjQyNjI5NTAeFw0yNjEwMzAxODMxMTVaFw0yNjEwMzEyMTA4MTVaMDMxMTAvBgNV BAMTKDA4Mjc2OTYzRkUwMzVCMTEyOTkxMDUzREZBOEVDRDcwM0ZFNTE5NzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoU+B1WnxQwQqAmCIrJ9NrBchE VzcJbLNJIcPweWp6kcj2BLotwbC7flx41glqNSplArXo4uUacyfCHc1QAcNmoXE7 g3I/dBo3cWAARTT9N6DmbwHmO0rnayh/O5vusWfT00NKuSy/j0dteOQoBfAMbL4X aZIzpe244ZG+UhxQKZEdqI9fRlcsCVejzj2C5A6mqFbejRj4OmHl2BsQ+52xKpHN spSpaDLhqQnFuXmXczKZnJlzhHS3ffSst3ncN4hjGCOsH4emF+paSNs0DHgUPb25 O3ePLWhGVUdXsxhEyfrNLuAqz1v2jljWqRTAgqQdnQEWc7s0OPXfe4qQ82d1AgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUCCdpY/4DWxEpkQU9+o7NcD/lGXgwHwYDVR0j BBgwFoAUISSrcIu/Y4jsgNBsO4+x/wJCYpUwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby96cWtvaDRrZk51TERyTHp5N1ZXNFIxeUQ3WWhCb3hjNG9obnZmcEJVN3I4 LzAvMjEyNEFCNzA4QkJGNjM4OEVDODBEMDZDM0I4RkIxRkYwMjQyNjI5NS5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8yMTI0QUI3MDhCQkY2Mzg4RUM4 MEQwNkMzQjhGQjFGRjAyNDI2Mjk1LmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL3px a29oNGtmTnVMRHJMenk3Vlc0UjF5RDdZaEJveGM0b2hudmZwQlU3cjgvMC8yMTI0 QUI3MDhCQkY2Mzg4RUM4MEQwNkMzQjhGQjFGRjAyNDI2Mjk1Lm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA ekMICiJwuVggxuKER65tpYqmRxRd/wtVHqpotz1X84W/Rut++DbZKSanYnmdPWKF IyWdZqt832507H4NKEpr2yBDnhXhnygwJ6HojWMClyaFKngc2FMSl+06t2irnf0c AGhoainqUP7H3OOt4k89knMev9gvNLqt0ooyZnRHRAOr4zpxOprf3YnR/vTMBR8A bsuVDOPv4UFo6Qly+r/DtZXeCRbYoRbrSDvzqTNda1hGY0EvVsY04PBg0kuCh2ou HNAV/cpUpdSOasXTIZ1kGLioa40knuiQcH0tH2GCQBE2nTpLR7GkiIPbIWVRD5KI VZsFvF1bqQKta/8JOfMf1w== -----END CERTIFICATE-----Generated at Sat Oct 31 09:49:45 2026 by rpki-client