$ rpki-client -vvvf rpki-repo.registro.br/repo/2HQRm5ercFqsKsgrKbBhCYpRxGXfXyXHYoHuPVo8Jv1f/0/AAB909DC5AFC914A27617F95EB12119D1CC6D5BF.mft File: AAB909DC5AFC914A27617F95EB12119D1CC6D5BF.mft (raw, json) Hash identifier: wUVmdR2mCbPdZ1B7CQKDv4QL8WDbpd7eDPeXkDD4Ra0= Subject key identifier: 1F:D4:6F:93:1D:6D:47:B8:27:E4:BF:FB:D8:F2:0E:1F:9F:EF:A8:D0 Authority key identifier: AA:B9:09:DC:5A:FC:91:4A:27:61:7F:95:EB:12:11:9D:1C:C6:D5:BF Certificate issuer: /CN=AAB909DC5AFC914A27617F95EB12119D1CC6D5BF Certificate serial: 2A704B4A4A2DDB39804938A13F1FBBE1FE2C5778 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AAB909DC5AFC914A27617F95EB12119D1CC6D5BF.cer Subject info access: rsync://rpki-repo.registro.br/repo/2HQRm5ercFqsKsgrKbBhCYpRxGXfXyXHYoHuPVo8Jv1f/0/AAB909DC5AFC914A27617F95EB12119D1CC6D5BF.mft Manifest number: B9 Signing time: Tue 27 Oct 2026 05:20:59 +0000 Manifest this update: Tue 27 Oct 2026 05:15:59 +0000 Manifest next update: Wed 28 Oct 2026 09:10:59 +0000 Files and hashes: 1: 34352e3136372e3232342e302f32322d3232203d3e20323638313034.roa (hash: D9ISSWk4Wx43R1RRQi13la0mHAnxhb2oKukIZpUfYAA=) 2: 34352e3136372e3232352e302f32342d3234203d3e20323638313034.roa (hash: HsXwhWylk55JwVr6R3yX81LxKgiKcfK8eftxnRjxC5M=) 3: 34352e3136372e3232362e302f32342d3234203d3e20323638313034.roa (hash: G/QxWUWyKrHaWCk/OHQX6eh7UtkLx75trTLv4Mon0mE=) 4: 34352e3136372e3232342e302f32342d3234203d3e20323638313034.roa (hash: vdiHjaus3HNlUflj5YLdHmMORq3aOAVwrig94EoEf1U=) 5: AAB909DC5AFC914A27617F95EB12119D1CC6D5BF.crl (hash: wQX1fr/cfLmZVtK4d/K49M8Cbd5x5rvVZYdYOWECysE=) 6: 34352e3136372e3232372e302f32342d3234203d3e20323638313034.roa (hash: K9vg7LdI+cnwc7vLCOCmRsGtS1tvBvZvCi2AYVNI8ow=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2HQRm5ercFqsKsgrKbBhCYpRxGXfXyXHYoHuPVo8Jv1f/0/AAB909DC5AFC914A27617F95EB12119D1CC6D5BF.crl rsync://rpki-repo.registro.br/repo/2HQRm5ercFqsKsgrKbBhCYpRxGXfXyXHYoHuPVo8Jv1f/0/AAB909DC5AFC914A27617F95EB12119D1CC6D5BF.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AAB909DC5AFC914A27617F95EB12119D1CC6D5BF.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 28 Oct 2026 09:10:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:70:4b:4a:4a:2d:db:39:80:49:38:a1:3f:1f:bb:e1:fe:2c:57:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AAB909DC5AFC914A27617F95EB12119D1CC6D5BF Validity Not Before: Oct 27 05:15:59 2026 GMT Not After : Oct 28 09:10:59 2026 GMT Subject: CN=1FD46F931D6D47B827E4BFFBD8F20E1F9FEFA8D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:26:59:85:24:4d:41:f5:a5:e0:90:9f:e0:11: bd:6e:d4:67:03:44:19:44:40:58:83:54:69:75:4f: b9:2a:64:37:a3:0b:4e:bc:27:18:d5:ef:62:04:70: 0a:89:f1:8a:08:16:a7:22:cc:0e:78:17:93:bb:43: af:c5:ba:ca:09:55:57:a2:15:6d:fe:8c:46:e8:a0: 02:5c:27:15:f6:aa:9c:f3:85:d9:9e:43:f1:e6:3c: 24:31:2d:4a:b9:98:b1:a0:1a:dc:6e:9f:99:6a:4b: 34:49:7c:44:9e:8b:fc:39:1c:10:a4:d8:71:4f:00: d8:bb:67:b7:0a:72:be:d8:6e:28:3f:72:4c:a1:48: db:bd:03:7c:54:88:fb:4d:bc:6e:c9:1e:22:31:49: d1:1e:85:5b:9b:c5:ef:04:83:da:ad:a6:ab:f0:5d: c9:59:82:e9:d1:5d:8e:90:51:27:6c:01:f7:22:57: d9:5d:a0:7c:2f:0c:04:6f:3b:d1:3b:07:9f:cf:03: 49:19:4d:7a:da:6d:88:e6:c7:51:60:6f:e5:28:f6: 59:b2:6c:3d:d0:a9:15:cc:bc:85:b5:dd:d9:b7:08: 8c:1b:4c:ec:26:83:8c:0f:33:ab:ae:65:2f:00:ee: 1c:9f:71:d1:b6:2b:65:c6:76:a4:1f:b9:8e:f2:2d: f1:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:D4:6F:93:1D:6D:47:B8:27:E4:BF:FB:D8:F2:0E:1F:9F:EF:A8:D0 X509v3 Authority Key Identifier: keyid:AA:B9:09:DC:5A:FC:91:4A:27:61:7F:95:EB:12:11:9D:1C:C6:D5:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2HQRm5ercFqsKsgrKbBhCYpRxGXfXyXHYoHuPVo8Jv1f/0/AAB909DC5AFC914A27617F95EB12119D1CC6D5BF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AAB909DC5AFC914A27617F95EB12119D1CC6D5BF.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2HQRm5ercFqsKsgrKbBhCYpRxGXfXyXHYoHuPVo8Jv1f/0/AAB909DC5AFC914A27617F95EB12119D1CC6D5BF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:3f:70:61:b0:cb:f1:f9:65:78:8d:1f:36:9d:7c:e7:5c:5f: 6e:0f:8c:f4:a2:70:a6:63:6b:7c:22:f8:8a:fe:c2:01:a6:80: 04:43:c0:d8:f6:8b:a1:60:4d:c1:d3:bd:91:20:1b:41:16:d7: ee:2f:df:12:40:5e:15:30:47:81:43:2b:2b:b0:7d:1b:9c:e2: 0a:6d:aa:b8:db:9a:03:eb:be:55:a6:da:bc:46:bd:17:f5:1b: be:9c:dc:97:de:06:99:b6:aa:53:8c:13:8c:2d:d5:be:74:08: ad:73:17:27:4c:d4:d3:ff:ad:1e:50:59:fa:c2:cd:20:71:5a: f0:83:29:e8:c3:0e:7f:d5:30:3c:5a:cf:27:99:d1:98:fd:a0: 68:47:78:41:4b:72:b6:b7:64:b7:1d:e7:08:be:61:71:a8:f4: ba:5d:7e:d2:0a:3a:1e:04:15:93:c0:63:33:3c:ef:6d:1a:e1: 33:f7:02:8a:28:d0:33:ad:54:b1:79:aa:84:38:da:e3:e4:33: c5:99:58:2a:78:0c:7a:b0:65:90:c0:e2:ec:eb:52:39:d5:b6: f9:4b:e2:e4:72:7b:9c:50:f6:e5:fc:04:23:e3:cf:b3:5a:ca: 36:33:3e:8c:3f:2e:ae:36:c2:5a:45:bd:39:c4:b1:60:8f:4c: 3d:5b:94:6d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUKnBLSkot2zmASTihPx+74f4sV3gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUFCOTA5REM1QUZDOTE0QTI3NjE3Rjk1RUIxMjExOUQx Q0M2RDVCRjAeFw0yNjEwMjcwNTE1NTlaFw0yNjEwMjgwOTEwNTlaMDMxMTAvBgNV BAMTKDFGRDQ2RjkzMUQ2RDQ3QjgyN0U0QkZGQkQ4RjIwRTFGOUZFRkE4RDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZJlmFJE1B9aXgkJ/gEb1u1GcD RBlEQFiDVGl1T7kqZDejC068JxjV72IEcAqJ8YoIFqcizA54F5O7Q6/FusoJVVei FW3+jEbooAJcJxX2qpzzhdmeQ/HmPCQxLUq5mLGgGtxun5lqSzRJfESei/w5HBCk 2HFPANi7Z7cKcr7Ybig/ckyhSNu9A3xUiPtNvG7JHiIxSdEehVubxe8Eg9qtpqvw XclZgunRXY6QUSdsAfciV9ldoHwvDARvO9E7B5/PA0kZTXrabYjmx1Fgb+Uo9lmy bD3QqRXMvIW13dm3CIwbTOwmg4wPM6uuZS8A7hyfcdG2K2XGdqQfuY7yLfHZAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUH9Rvkx1tR7gn5L/72PIOH5/vqNAwHwYDVR0j BBgwFoAUqrkJ3Fr8kUonYX+V6xIRnRzG1b8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMkhRUm01ZXJjRnFzS3NncktiQmhDWXBSeEdYZlh5WEhZb0h1UFZvOEp2 MWYvMC9BQUI5MDlEQzVBRkM5MTRBMjc2MTdGOTVFQjEyMTE5RDFDQzZENUJGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FBQjkwOURDNUFGQzkxNEEy NzYxN0Y5NUVCMTIxMTlEMUNDNkQ1QkYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MkhRUm01ZXJjRnFzS3NncktiQmhDWXBSeEdYZlh5WEhZb0h1UFZvOEp2MWYvMC9B QUI5MDlEQzVBRkM5MTRBMjc2MTdGOTVFQjEyMTE5RDFDQzZENUJGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdj9wYbDL8flleI0fNp1851xfbg+M9KJwpmNrfCL4iv7CAaaABEPA2PaLoWBN wdO9kSAbQRbX7i/fEkBeFTBHgUMrK7B9G5ziCm2quNuaA+u+VabavEa9F/Ubvpzc l94GmbaqU4wTjC3VvnQIrXMXJ0zU0/+tHlBZ+sLNIHFa8IMp6MMOf9UwPFrPJ5nR mP2gaEd4QUtytrdktx3nCL5hcaj0ul1+0go6HgQVk8BjMzzvbRrhM/cCiijQM61U sXmqhDja4+QzxZlYKngMerBlkMDi7OtSOdW2+Uvi5HJ7nFD25fwEI+PPs1rKNjM+ jD8urjbCWkW9OcSxYI9MPVuUbQ== -----END CERTIFICATE-----Generated at Tue Oct 27 18:46:53 2026 by rpki-client