$ rpki-client -vvvf rpki-repo.registro.br/repo/3cKKr2oguViaXdXmpFVYAV6aPPKUCpzGKgqVifeVMX1V/0/1EF21D8E33DF0666DDDA890A2CE1AEC8ACEE8889.mft File: 1EF21D8E33DF0666DDDA890A2CE1AEC8ACEE8889.mft (raw, json) Hash identifier: VZppTI+xjdmiPvs1bzxYf1dimCjSZWk9Wwoz0L4FYog= Subject key identifier: 8B:1D:BA:00:38:90:31:C9:59:57:B8:6E:34:2D:E5:0A:85:3E:A4:C4 Authority key identifier: 1E:F2:1D:8E:33:DF:06:66:DD:DA:89:0A:2C:E1:AE:C8:AC:EE:88:89 Certificate issuer: /CN=1EF21D8E33DF0666DDDA890A2CE1AEC8ACEE8889 Certificate serial: 1A065C6D833E76828F5503BD4F037AE779BAD829 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1EF21D8E33DF0666DDDA890A2CE1AEC8ACEE8889.cer Subject info access: rsync://rpki-repo.registro.br/repo/3cKKr2oguViaXdXmpFVYAV6aPPKUCpzGKgqVifeVMX1V/0/1EF21D8E33DF0666DDDA890A2CE1AEC8ACEE8889.mft Manifest number: 0152 Signing time: Mon 12 Oct 2026 08:59:40 +0000 Manifest this update: Mon 12 Oct 2026 08:54:40 +0000 Manifest next update: Tue 13 Oct 2026 12:28:40 +0000 Files and hashes: 1: 1EF21D8E33DF0666DDDA890A2CE1AEC8ACEE8889.crl (hash: zd6+LEXAjUWLbnMY1B09lnvYq1xCsFoeFoLgDPauSFg=) 2: 323830343a346233383a3a2f33322d313238203d3e20323637323931.roa (hash: 4n9+0Z63anC+VM9VWNJX02OgNdWS2iW2pYD7o/HJaVw=) 3: 34352e3233332e33362e302f32322d3332203d3e20323637323931.roa (hash: KM+2VaoAciWWLq6WMSLxT0EyCBWagrzP3/WlqQVL/lU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3cKKr2oguViaXdXmpFVYAV6aPPKUCpzGKgqVifeVMX1V/0/1EF21D8E33DF0666DDDA890A2CE1AEC8ACEE8889.crl rsync://rpki-repo.registro.br/repo/3cKKr2oguViaXdXmpFVYAV6aPPKUCpzGKgqVifeVMX1V/0/1EF21D8E33DF0666DDDA890A2CE1AEC8ACEE8889.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1EF21D8E33DF0666DDDA890A2CE1AEC8ACEE8889.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 13 Oct 2026 12:28:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:06:5c:6d:83:3e:76:82:8f:55:03:bd:4f:03:7a:e7:79:ba:d8:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1EF21D8E33DF0666DDDA890A2CE1AEC8ACEE8889 Validity Not Before: Oct 12 08:54:40 2026 GMT Not After : Oct 13 12:28:40 2026 GMT Subject: CN=8B1DBA00389031C95957B86E342DE50A853EA4C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:e9:fa:77:84:1f:c2:83:38:e0:7e:cc:9c:17: 36:ff:13:13:8a:6b:f5:55:0c:dd:42:61:b7:ae:06: b4:34:89:f4:d0:c6:69:86:29:3d:9c:bf:4f:30:6c: 05:c3:f4:fd:69:79:24:c1:ff:0c:b9:48:39:74:42: 5c:96:ff:33:77:c0:75:79:fe:39:8b:d1:38:1f:7a: f0:ed:bf:09:10:34:d9:b8:b2:f7:3f:3f:f0:dd:98: 92:12:8e:cb:0f:e9:df:d4:d4:1b:39:05:a0:90:0f: 95:c7:9a:b9:31:a4:11:3e:7b:90:1b:d4:37:03:73: 9e:9b:39:a5:2b:69:d9:1d:47:04:e8:c5:23:af:93: 66:ff:da:90:a0:1e:e6:3f:fe:b2:d8:29:e1:08:ff: 8d:79:35:a7:e6:be:14:18:b6:2d:7f:1f:ca:dc:71: 43:21:18:46:f3:de:b0:e0:dc:d5:c5:b4:19:cf:b5: 39:69:d6:54:70:6e:df:8a:25:0c:ce:8d:8e:ec:9a: 30:11:2a:da:8a:bd:ed:09:07:62:cf:cb:42:ab:7a: eb:42:e0:23:f6:21:49:82:23:6c:82:b7:72:d5:65: 93:01:74:40:14:5c:7f:c1:a3:eb:50:1d:4c:14:a5: 62:d3:91:8a:04:c4:3a:3b:80:74:85:96:92:5f:4e: fe:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:1D:BA:00:38:90:31:C9:59:57:B8:6E:34:2D:E5:0A:85:3E:A4:C4 X509v3 Authority Key Identifier: keyid:1E:F2:1D:8E:33:DF:06:66:DD:DA:89:0A:2C:E1:AE:C8:AC:EE:88:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3cKKr2oguViaXdXmpFVYAV6aPPKUCpzGKgqVifeVMX1V/0/1EF21D8E33DF0666DDDA890A2CE1AEC8ACEE8889.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1EF21D8E33DF0666DDDA890A2CE1AEC8ACEE8889.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3cKKr2oguViaXdXmpFVYAV6aPPKUCpzGKgqVifeVMX1V/0/1EF21D8E33DF0666DDDA890A2CE1AEC8ACEE8889.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption dd:6a:92:e3:ed:f5:47:c5:b8:16:38:f8:b0:95:9e:71:fa:9a: 0c:0b:8a:c6:7b:07:1d:cc:c6:d7:94:8e:79:e4:cc:13:1c:6e: f8:6c:7c:b3:d8:d5:fe:48:96:4f:0f:50:1c:28:db:a5:9c:df: 78:39:a0:58:8e:7e:29:da:91:b9:51:43:94:1c:eb:11:a0:7d: 1b:b2:a5:86:2b:33:98:e5:7e:ce:68:bd:7e:40:73:ee:f0:e1: c4:b5:0a:12:db:7c:cd:46:41:c2:fc:d7:f6:c8:af:81:91:2f: 04:3a:41:f2:6d:2a:ca:48:82:ac:7a:e0:5e:41:a0:05:4c:de: f3:eb:0c:58:8e:d9:13:a1:f5:ff:45:71:1f:e8:8f:98:12:6d: e8:57:45:7e:d7:d2:69:f4:e8:24:95:e5:5c:b5:06:ff:6b:c0: 42:ba:18:89:9f:45:87:e3:70:6d:99:4e:37:df:fe:af:78:31: 72:6d:23:13:ba:41:bf:e3:e1:1a:9a:63:e1:fb:e1:ad:9c:bb: 28:ae:1d:d3:6a:9a:6f:c4:a4:9e:43:29:5f:09:a6:ac:86:e0: ae:42:23:47:3a:52:cf:a6:ff:61:81:7e:02:1d:85:58:29:ca: e8:c9:23:e9:1a:3c:66:d2:c0:41:b2:f3:bd:3c:49:bc:60:17: 75:83:f3:2e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUGgZcbYM+doKPVQO9TwN653m62CkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUVGMjFEOEUzM0RGMDY2NkREREE4OTBBMkNFMUFFQzhB Q0VFODg4OTAeFw0yNjEwMTIwODU0NDBaFw0yNjEwMTMxMjI4NDBaMDMxMTAvBgNV BAMTKDhCMURCQTAwMzg5MDMxQzk1OTU3Qjg2RTM0MkRFNTBBODUzRUE0QzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK6fp3hB/CgzjgfsycFzb/ExOK a/VVDN1CYbeuBrQ0ifTQxmmGKT2cv08wbAXD9P1peSTB/wy5SDl0QlyW/zN3wHV5 /jmL0TgfevDtvwkQNNm4svc/P/DdmJISjssP6d/U1Bs5BaCQD5XHmrkxpBE+e5Ab 1DcDc56bOaUradkdRwToxSOvk2b/2pCgHuY//rLYKeEI/415NafmvhQYti1/H8rc cUMhGEbz3rDg3NXFtBnPtTlp1lRwbt+KJQzOjY7smjARKtqKve0JB2LPy0KreutC 4CP2IUmCI2yCt3LVZZMBdEAUXH/Bo+tQHUwUpWLTkYoExDo7gHSFlpJfTv4nAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUix26ADiQMclZV7huNC3lCoU+pMQwHwYDVR0j BBgwFoAUHvIdjjPfBmbd2okKLOGuyKzuiIkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM2NLS3Iyb2d1VmlhWGRYbXBGVllBVjZhUFBLVUNwekdLZ3FWaWZlVk1Y MVYvMC8xRUYyMUQ4RTMzREYwNjY2REREQTg5MEEyQ0UxQUVDOEFDRUU4ODg5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFFRjIxRDhFMzNERjA2NjZE RERBODkwQTJDRTFBRUM4QUNFRTg4ODkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M2NLS3Iyb2d1VmlhWGRYbXBGVllBVjZhUFBLVUNwekdLZ3FWaWZlVk1YMVYvMC8x RUYyMUQ4RTMzREYwNjY2REREQTg5MEEyQ0UxQUVDOEFDRUU4ODg5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEA3WqS4+31R8W4Fjj4sJWecfqaDAuKxnsHHczG15SOeeTMExxu+Gx8s9jV/kiW Tw9QHCjbpZzfeDmgWI5+KdqRuVFDlBzrEaB9G7KlhiszmOV+zmi9fkBz7vDhxLUK Ett8zUZBwvzX9sivgZEvBDpB8m0qykiCrHrgXkGgBUze8+sMWI7ZE6H1/0VxH+iP mBJt6FdFftfSafToJJXlXLUG/2vAQroYiZ9Fh+NwbZlON9/+r3gxcm0jE7pBv+Ph Gppj4fvhrZy7KK4d02qab8SknkMpXwmmrIbgrkIjRzpSz6b/YYF+Ah2FWCnK6Mkj 6Ro8ZtLAQbLzvTxJvGAXdYPzLg== -----END CERTIFICATE-----Generated at Mon Oct 12 20:48:12 2026 by rpki-client