$ rpki-client -vvvf rpki-repo.registro.br/repo/3As3Bd5oosFtNhQtDtxTwXztkwPAhcE1Jfq9rSB7buCh/0/9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.mft File: 9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.mft (raw, json) Hash identifier: +ufsicNUDm3Haa1nfJ+jOd23pX70m7G1H3MjV/mLuKo= Subject key identifier: 5C:8C:48:E8:76:A7:7D:A2:A6:EB:52:CD:AF:37:92:4D:A8:2F:D8:91 Authority key identifier: 9A:32:CD:91:FC:E9:CA:DB:F2:8B:ED:F4:C7:20:E6:7B:79:AF:B9:CC Certificate issuer: /CN=9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC Certificate serial: 2D7D012C1A92BBAE1355BFD0AF8DEFFA9F158076 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.cer Subject info access: rsync://rpki-repo.registro.br/repo/3As3Bd5oosFtNhQtDtxTwXztkwPAhcE1Jfq9rSB7buCh/0/9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.mft Manifest number: 0342 Signing time: Sat 17 Oct 2026 22:29:03 +0000 Manifest this update: Sat 17 Oct 2026 22:24:03 +0000 Manifest next update: Mon 19 Oct 2026 01:51:03 +0000 Files and hashes: 1: 3137302e3234362e3138342e302f32322d3234203d3e20323634383830.roa (hash: gA1Dil90AWhkBLUHBysYx0lSKlmDUCTEh/TrezFm39o=) 2: 323830343a326634303a3a2f33322d3438203d3e20323634383830.roa (hash: ORyxhMiPsLuMYUTUTFf1a5ZPgbN+I86oYsBHv0CQLjI=) 3: 9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.crl (hash: U+pB2w1mPxQTOUBQNsSdSjictDV6AryPlXlUlp1rWQ8=) 4: 3136382e3232372e35362e302f32322d3234203d3e20323634383830.roa (hash: 0m9ZlSbxJEGi/PdZZ6Ae2AeboQX1XOl8Wv8MqMH6T54=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3As3Bd5oosFtNhQtDtxTwXztkwPAhcE1Jfq9rSB7buCh/0/9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.crl rsync://rpki-repo.registro.br/repo/3As3Bd5oosFtNhQtDtxTwXztkwPAhcE1Jfq9rSB7buCh/0/9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 19 Oct 2026 01:51:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:7d:01:2c:1a:92:bb:ae:13:55:bf:d0:af:8d:ef:fa:9f:15:80:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC Validity Not Before: Oct 17 22:24:03 2026 GMT Not After : Oct 19 01:51:03 2026 GMT Subject: CN=5C8C48E876A77DA2A6EB52CDAF37924DA82FD891 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:27:4b:8f:09:d6:1b:77:2d:57:07:78:17:a6: 90:c5:57:c6:0f:8f:b8:6f:1d:6b:8a:b6:38:88:23: 16:c7:6d:36:c6:27:0d:18:e5:ab:f1:32:13:71:4b: ed:ba:3f:f1:85:16:6c:e5:c9:3f:60:f3:52:fc:23: 1c:26:6a:85:16:93:2d:c5:f1:8c:fa:07:d4:3d:00: 6a:d7:0e:f5:18:99:be:00:a0:c0:13:43:79:6e:7c: 31:d5:b4:c7:a5:61:5a:81:ac:dc:55:93:aa:d3:0d: 5e:c2:7a:fe:22:17:b2:c0:2a:40:c2:04:50:87:f7: 67:92:73:3a:6d:33:0e:e2:06:74:4d:fc:a5:94:42: 85:58:12:0c:71:44:bb:95:69:43:9f:6a:00:97:ae: 88:1c:cd:7d:50:db:83:64:dc:42:96:2b:7e:91:ba: cc:40:0b:2d:0f:40:11:b4:72:96:d2:ea:dc:c6:91: 4a:7a:b4:bf:5d:07:08:35:a5:0c:71:cd:04:22:1a: 33:fb:ae:24:51:bd:72:0d:03:c7:b6:f7:f6:dc:db: 0d:ff:65:f5:3b:ee:69:02:6c:75:45:2e:0c:60:45: d9:9c:01:bb:de:5c:0f:e4:ec:0d:1d:03:fc:0c:84: 14:22:a3:af:66:9c:57:b2:a1:a2:68:62:e5:8e:89: 45:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:8C:48:E8:76:A7:7D:A2:A6:EB:52:CD:AF:37:92:4D:A8:2F:D8:91 X509v3 Authority Key Identifier: keyid:9A:32:CD:91:FC:E9:CA:DB:F2:8B:ED:F4:C7:20:E6:7B:79:AF:B9:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3As3Bd5oosFtNhQtDtxTwXztkwPAhcE1Jfq9rSB7buCh/0/9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3As3Bd5oosFtNhQtDtxTwXztkwPAhcE1Jfq9rSB7buCh/0/9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:fe:9b:eb:64:ee:a3:b0:d4:0d:57:86:f5:94:7a:61:e5:bf: 7f:2d:59:d2:56:35:27:7a:30:c5:c7:4d:e7:fd:cb:f3:eb:22: 86:f9:da:5f:73:8a:ff:30:43:4e:83:df:9b:b4:6f:95:f3:b4: a3:a8:7c:f9:48:c4:b8:7a:6e:93:61:4f:3d:a3:aa:93:04:f3: 32:71:1d:cb:3a:5c:6d:49:aa:71:1a:8e:51:9e:67:40:b4:e2: 61:10:76:e5:45:21:47:ba:55:ae:19:43:81:57:78:7d:05:9b: ee:61:c6:c2:86:00:7f:cb:b8:e7:b9:48:af:1c:dd:49:ef:f9: ae:d3:bf:11:0c:26:7b:0a:f1:5a:1e:e8:a8:54:18:08:f5:de: 29:27:2d:c7:8d:ec:e4:48:82:41:a8:4a:73:c7:d1:31:10:c2: 23:20:65:69:d0:93:3c:ca:61:f5:02:fe:af:3f:0d:5d:e3:43: 8c:dd:fd:0d:b1:ef:d6:96:7c:53:9a:88:e6:e5:f5:dd:b4:c1: 02:5c:de:29:cb:b6:23:b2:2d:b5:f9:76:f6:61:32:af:00:32: 97:6b:49:1e:05:8a:a9:b6:2c:b1:23:78:e7:39:dd:36:c4:49: ac:c7:d2:c6:18:cc:76:71:8d:7d:de:fc:9f:23:7f:c6:90:c2: 09:09:69:1a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIULX0BLBqSu64TVb/Qr43v+p8VgHYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUEzMkNEOTFGQ0U5Q0FEQkYyOEJFREY0QzcyMEU2N0I3 OUFGQjlDQzAeFw0yNjEwMTcyMjI0MDNaFw0yNjEwMTkwMTUxMDNaMDMxMTAvBgNV BAMTKDVDOEM0OEU4NzZBNzdEQTJBNkVCNTJDREFGMzc5MjREQTgyRkQ4OTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCJ0uPCdYbdy1XB3gXppDFV8YP j7hvHWuKtjiIIxbHbTbGJw0Y5avxMhNxS+26P/GFFmzlyT9g81L8IxwmaoUWky3F 8Yz6B9Q9AGrXDvUYmb4AoMATQ3lufDHVtMelYVqBrNxVk6rTDV7Cev4iF7LAKkDC BFCH92eSczptMw7iBnRN/KWUQoVYEgxxRLuVaUOfagCXrogczX1Q24Nk3EKWK36R usxACy0PQBG0cpbS6tzGkUp6tL9dBwg1pQxxzQQiGjP7riRRvXINA8e29/bc2w3/ ZfU77mkCbHVFLgxgRdmcAbveXA/k7A0dA/wMhBQio69mnFeyoaJoYuWOiUVdAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUXIxI6HanfaKm61LNrzeSTagv2JEwHwYDVR0j BBgwFoAUmjLNkfzpytvyi+30xyDme3mvucwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM0FzM0JkNW9vc0Z0TmhRdER0eFR3WHp0a3dQQWhjRTFKZnE5clNCN2J1 Q2gvMC85QTMyQ0Q5MUZDRTlDQURCRjI4QkVERjRDNzIwRTY3Qjc5QUZCOUNDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlBMzJDRDkxRkNFOUNBREJG MjhCRURGNEM3MjBFNjdCNzlBRkI5Q0MuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M0FzM0JkNW9vc0Z0TmhRdER0eFR3WHp0a3dQQWhjRTFKZnE5clNCN2J1Q2gvMC85 QTMyQ0Q5MUZDRTlDQURCRjI4QkVERjRDNzIwRTY3Qjc5QUZCOUNDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcf6b62Tuo7DUDVeG9ZR6YeW/fy1Z0lY1J3owxcdN5/3L8+sihvnaX3OK/zBD ToPfm7RvlfO0o6h8+UjEuHpuk2FPPaOqkwTzMnEdyzpcbUmqcRqOUZ5nQLTiYRB2 5UUhR7pVrhlDgVd4fQWb7mHGwoYAf8u457lIrxzdSe/5rtO/EQwmewrxWh7oqFQY CPXeKSctx43s5EiCQahKc8fRMRDCIyBladCTPMph9QL+rz8NXeNDjN39DbHv1pZ8 U5qI5uX13bTBAlzeKcu2I7Ittfl29mEyrwAyl2tJHgWKqbYssSN45zndNsRJrMfS xhjMdnGNfd78nyN/xpDCCQlpGg== -----END CERTIFICATE-----Generated at Sun Oct 18 07:21:46 2026 by rpki-client