$ rpki-client -vvvf rpki-repo.registro.br/repo/2q9vUUfTxTTBoF4KsBqZaRoULPuK7o9T1VgsigwuLrVe/0/CC58DAF288CB59CD86B813345628DC535B34879B.mft File: CC58DAF288CB59CD86B813345628DC535B34879B.mft (raw, json) Hash identifier: HSDGkL+hSI3XyFvqi+D6oz9Nf5UUFzPN0cuVWqUdzrM= Subject key identifier: 43:7E:5E:7B:8E:BF:6F:58:60:EB:2A:FD:54:1A:A5:29:72:72:DF:99 Authority key identifier: CC:58:DA:F2:88:CB:59:CD:86:B8:13:34:56:28:DC:53:5B:34:87:9B Certificate issuer: /CN=CC58DAF288CB59CD86B813345628DC535B34879B Certificate serial: 200587DB36CF8DFA0F8BE6A3227CE7679A72C0FE Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC58DAF288CB59CD86B813345628DC535B34879B.cer Subject info access: rsync://rpki-repo.registro.br/repo/2q9vUUfTxTTBoF4KsBqZaRoULPuK7o9T1VgsigwuLrVe/0/CC58DAF288CB59CD86B813345628DC535B34879B.mft Manifest number: 0298 Signing time: Wed 04 Nov 2026 05:33:00 +0000 Manifest this update: Wed 04 Nov 2026 05:28:00 +0000 Manifest next update: Thu 05 Nov 2026 08:13:00 +0000 Files and hashes: 1: 323830343a376163303a3a2f33322d313238203d3e20323731333930.roa (hash: F9KLyQ/ToyryUB5M4TvuNaod0D89wVeJp0XyZYQ+mdE=) 2: CC58DAF288CB59CD86B813345628DC535B34879B.crl (hash: AHlpAw4+UPHRkbRfh4YVdqGbfUSGB7wWHYsoc3NJdq0=) 3: 3138312e3138392e3130342e302f32322d3332203d3e20323731333930.roa (hash: YKKENE+AjipB95/g9a6cKDxyEyzv3YDkGPlVjb7NSg8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2q9vUUfTxTTBoF4KsBqZaRoULPuK7o9T1VgsigwuLrVe/0/CC58DAF288CB59CD86B813345628DC535B34879B.crl rsync://rpki-repo.registro.br/repo/2q9vUUfTxTTBoF4KsBqZaRoULPuK7o9T1VgsigwuLrVe/0/CC58DAF288CB59CD86B813345628DC535B34879B.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC58DAF288CB59CD86B813345628DC535B34879B.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 05 Nov 2026 08:13:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:05:87:db:36:cf:8d:fa:0f:8b:e6:a3:22:7c:e7:67:9a:72:c0:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC58DAF288CB59CD86B813345628DC535B34879B Validity Not Before: Nov 4 05:28:00 2026 GMT Not After : Nov 5 08:13:00 2026 GMT Subject: CN=437E5E7B8EBF6F5860EB2AFD541AA5297272DF99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f0:36:12:8b:89:42:16:ef:06:ab:48:9c:1c: 88:ca:87:70:cc:9c:5c:47:91:03:58:7f:c2:0e:97: 71:c9:6c:ed:16:c3:88:1c:8c:e7:36:c0:98:30:76: 9b:8b:bc:ca:77:4f:65:59:ba:79:3a:dc:1c:01:30: ab:02:78:dc:57:65:1c:71:b2:2c:9f:67:21:a7:00: 79:13:8e:58:c6:ba:b2:e3:82:92:9a:e4:cd:f6:a8: 3c:de:26:10:a6:33:63:ee:3b:79:a5:96:a3:42:5c: b1:5d:75:b8:33:f0:5e:3a:d6:c4:e3:bf:7d:4a:73: 80:c2:a8:74:63:03:66:21:69:ea:41:b4:6b:cc:bb: 53:9e:cc:90:53:d7:3b:1a:cb:2f:93:62:a4:d4:62: 49:63:5b:c4:9e:2b:54:4a:4d:6b:32:03:4e:b0:4f: 6f:f8:66:a7:95:fe:13:9d:23:40:f2:d6:f6:c7:b3: b2:02:7c:01:81:25:3f:ef:29:19:d6:b4:98:93:43: 95:71:20:ed:c4:1f:6f:77:c8:b3:b5:01:69:75:1f: 7f:66:f3:45:be:f1:54:0d:6f:00:6e:da:57:de:c4: fe:97:ad:85:dd:f0:af:be:46:28:ba:ee:86:3f:c6: b7:19:24:96:5b:f1:d7:ba:0e:6b:17:98:1b:58:72: e1:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:7E:5E:7B:8E:BF:6F:58:60:EB:2A:FD:54:1A:A5:29:72:72:DF:99 X509v3 Authority Key Identifier: keyid:CC:58:DA:F2:88:CB:59:CD:86:B8:13:34:56:28:DC:53:5B:34:87:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2q9vUUfTxTTBoF4KsBqZaRoULPuK7o9T1VgsigwuLrVe/0/CC58DAF288CB59CD86B813345628DC535B34879B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC58DAF288CB59CD86B813345628DC535B34879B.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2q9vUUfTxTTBoF4KsBqZaRoULPuK7o9T1VgsigwuLrVe/0/CC58DAF288CB59CD86B813345628DC535B34879B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:3a:1f:05:8d:f9:9f:57:ba:b8:39:ce:f9:75:3a:70:eb:c1: af:65:97:6b:e2:2f:cf:d7:73:bb:a8:ba:87:67:cc:44:8e:31: b7:0d:4e:56:41:35:ce:f7:ed:c4:3a:93:a6:4f:e7:d5:00:58: d1:b9:e9:23:63:d4:42:45:fc:7f:50:4f:b7:de:6d:54:ed:f2: da:6c:a1:14:30:96:34:28:24:9b:26:8f:8a:53:b7:37:01:b4: 94:2d:15:16:ec:32:75:a4:54:c3:0e:05:a7:b5:28:71:0c:5c: ad:87:0b:52:c9:37:89:25:75:84:b1:3e:03:b0:45:c6:51:0e: 68:5f:95:fc:6c:d7:a7:59:fa:76:c8:ec:9a:b9:4b:80:2f:de: fb:3e:62:76:6b:ea:43:fb:af:9d:1c:a4:66:5d:6d:57:b5:53: e8:98:47:d1:68:64:ee:b1:29:28:c4:f5:6c:08:20:fa:18:71: cf:21:b8:9f:8f:77:33:8f:9c:9f:60:62:5e:75:fe:4e:95:c9: c1:2e:c7:c3:02:cb:00:ea:7b:a8:ac:03:b7:81:b9:a9:f9:9e: 22:f6:9a:88:d7:df:8b:ce:2f:42:97:cc:53:b6:4a:8b:20:97: 4d:5d:41:02:7f:e7:7e:cf:69:7c:29:d8:d9:e5:b6:b7:6e:4e: ac:a8:21:4a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUIAWH2zbPjfoPi+ajInznZ5pywP4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0M1OERBRjI4OENCNTlDRDg2QjgxMzM0NTYyOERDNTM1 QjM0ODc5QjAeFw0yNjExMDQwNTI4MDBaFw0yNjExMDUwODEzMDBaMDMxMTAvBgNV BAMTKDQzN0U1RTdCOEVCRjZGNTg2MEVCMkFGRDU0MUFBNTI5NzI3MkRGOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr8DYSi4lCFu8Gq0icHIjKh3DM nFxHkQNYf8IOl3HJbO0Ww4gcjOc2wJgwdpuLvMp3T2VZunk63BwBMKsCeNxXZRxx siyfZyGnAHkTjljGurLjgpKa5M32qDzeJhCmM2PuO3mllqNCXLFddbgz8F461sTj v31Kc4DCqHRjA2YhaepBtGvMu1OezJBT1zsayy+TYqTUYkljW8SeK1RKTWsyA06w T2/4ZqeV/hOdI0Dy1vbHs7ICfAGBJT/vKRnWtJiTQ5VxIO3EH293yLO1AWl1H39m 80W+8VQNbwBu2lfexP6XrYXd8K++Rii67oY/xrcZJJZb8de6DmsXmBtYcuHzAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUQ35ee46/b1hg6yr9VBqlKXJy35kwHwYDVR0j BBgwFoAUzFja8ojLWc2GuBM0VijcU1s0h5swDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMnE5dlVVZlR4VFRCb0Y0S3NCcVphUm9VTFB1SzdvOVQxVmdzaWd3dUxy VmUvMC9DQzU4REFGMjg4Q0I1OUNEODZCODEzMzQ1NjI4REM1MzVCMzQ4NzlCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NDNThEQUYyODhDQjU5Q0Q4 NkI4MTMzNDU2MjhEQzUzNUIzNDg3OUIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MnE5dlVVZlR4VFRCb0Y0S3NCcVphUm9VTFB1SzdvOVQxVmdzaWd3dUxyVmUvMC9D QzU4REFGMjg4Q0I1OUNEODZCODEzMzQ1NjI4REM1MzVCMzQ4NzlCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEANzofBY35n1e6uDnO+XU6cOvBr2WXa+Ivz9dzu6i6h2fMRI4xtw1OVkE1zvft xDqTpk/n1QBY0bnpI2PUQkX8f1BPt95tVO3y2myhFDCWNCgkmyaPilO3NwG0lC0V FuwydaRUww4Fp7UocQxcrYcLUsk3iSV1hLE+A7BFxlEOaF+V/GzXp1n6dsjsmrlL gC/e+z5idmvqQ/uvnRykZl1tV7VT6JhH0Whk7rEpKMT1bAgg+hhxzyG4n493M4+c n2BiXnX+TpXJwS7HwwLLAOp7qKwDt4G5qfmeIvaaiNffi84vQpfMU7ZKiyCXTV1B An/nfs9pfCnY2eW2t25OrKghSg== -----END CERTIFICATE-----Generated at Wed Nov 4 11:13:22 2026 by rpki-client