$ rpki-client -vvvf rpki-repo.registro.br/repo/3db7SahZtRVC8PuMcgyzbAmeUfVwyRcsxWmHCGFvpcyF/0/2987D670913962CF69181F73C94FE8C279E038DA.mft File: 2987D670913962CF69181F73C94FE8C279E038DA.mft (raw, json) Hash identifier: /MqBYbZCpzzMYBpIEozXNecmlG0dgjSy9oegX/Qk8Wo= Subject key identifier: 4A:D0:C3:36:1D:AB:B3:11:10:1A:6C:7F:BC:A2:BB:A8:5A:24:66:48 Authority key identifier: 29:87:D6:70:91:39:62:CF:69:18:1F:73:C9:4F:E8:C2:79:E0:38:DA Certificate issuer: /CN=2987D670913962CF69181F73C94FE8C279E038DA Certificate serial: 5ED36B759CD2B36ABE13BF8F79FC7CB5F3588FA5 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2987D670913962CF69181F73C94FE8C279E038DA.cer Subject info access: rsync://rpki-repo.registro.br/repo/3db7SahZtRVC8PuMcgyzbAmeUfVwyRcsxWmHCGFvpcyF/0/2987D670913962CF69181F73C94FE8C279E038DA.mft Manifest number: 0201 Signing time: Sat 31 Oct 2026 12:17:15 +0000 Manifest this update: Sat 31 Oct 2026 12:12:15 +0000 Manifest next update: Sun 01 Nov 2026 13:27:15 +0000 Files and hashes: 1: 3133382e3230342e3230302e302f32322d3234203d3e20323633393035.roa (hash: itgpW/Tz3MyYimFZTBkCkQoksbrq5AILn9H7GyYSyKo=) 2: 3137302e38302e36382e302f32322d3234203d3e20323633393035.roa (hash: gfJ5tPr3iaYZ6IYFuX9TCE3oFySAFdtfqert8d/2ypA=) 3: 2987D670913962CF69181F73C94FE8C279E038DA.crl (hash: RLHOCXYL20qfUeOEx5yd5avdYJLiD52+UtQjkNJUnGE=) 4: 323830343a323738303a3a2f33322d3334203d3e20323633393035.roa (hash: +TKraSEXN5zrmYqlxFdsNV92k09V2SCOI88LtlLNwq0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3db7SahZtRVC8PuMcgyzbAmeUfVwyRcsxWmHCGFvpcyF/0/2987D670913962CF69181F73C94FE8C279E038DA.crl rsync://rpki-repo.registro.br/repo/3db7SahZtRVC8PuMcgyzbAmeUfVwyRcsxWmHCGFvpcyF/0/2987D670913962CF69181F73C94FE8C279E038DA.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2987D670913962CF69181F73C94FE8C279E038DA.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 01 Nov 2026 13:27:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:d3:6b:75:9c:d2:b3:6a:be:13:bf:8f:79:fc:7c:b5:f3:58:8f:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2987D670913962CF69181F73C94FE8C279E038DA Validity Not Before: Oct 31 12:12:15 2026 GMT Not After : Nov 1 13:27:15 2026 GMT Subject: CN=4AD0C3361DABB311101A6C7FBCA2BBA85A246648 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:0d:32:46:6a:c0:4a:a0:01:a9:26:d9:98:e2: 50:27:98:0a:08:8d:38:63:fd:a2:d7:5c:08:a4:09: 97:4d:53:1b:e6:ab:fc:59:ef:a0:b7:58:f1:db:da: 07:45:07:7c:7c:d7:42:59:d2:1d:db:48:8d:99:69: d7:67:5f:d6:39:46:f0:f1:51:e2:98:85:a9:8c:f8: 99:2f:46:8f:cf:7a:59:67:06:3c:f2:1b:8a:db:1c: 8e:5f:b9:b1:1f:bd:e2:6b:b4:81:fa:af:8d:db:78: 7b:ad:1a:34:07:40:56:95:37:03:33:ca:a2:16:9b: 97:ec:85:01:99:d4:cd:82:a8:22:99:95:c8:f4:db: e6:13:03:ab:52:40:f7:2a:51:96:63:58:02:ac:e3: 86:d0:cf:c6:7c:11:33:55:51:a8:88:2c:c0:63:b5: 18:bc:9b:e1:7a:16:b8:45:7c:36:67:9b:3e:fd:2f: 7e:e3:fc:5b:ad:52:28:ec:53:60:2a:df:40:04:6d: 59:f1:43:ab:34:c6:13:73:cc:de:fe:23:1b:ff:16: 1f:df:7d:37:8b:58:2f:0f:52:15:3b:5f:1e:b4:dd: 93:1f:17:92:ad:e3:94:a3:0e:ae:2f:f0:57:24:42: 45:28:17:6e:27:e9:be:63:ec:d0:ba:c5:d6:89:c8: af:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:D0:C3:36:1D:AB:B3:11:10:1A:6C:7F:BC:A2:BB:A8:5A:24:66:48 X509v3 Authority Key Identifier: keyid:29:87:D6:70:91:39:62:CF:69:18:1F:73:C9:4F:E8:C2:79:E0:38:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3db7SahZtRVC8PuMcgyzbAmeUfVwyRcsxWmHCGFvpcyF/0/2987D670913962CF69181F73C94FE8C279E038DA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2987D670913962CF69181F73C94FE8C279E038DA.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3db7SahZtRVC8PuMcgyzbAmeUfVwyRcsxWmHCGFvpcyF/0/2987D670913962CF69181F73C94FE8C279E038DA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:6a:68:53:5f:4c:11:b6:30:b3:0a:63:0b:80:d9:78:9a:49: 48:3b:e4:6f:37:dc:78:eb:17:6c:40:30:2e:98:c4:2d:de:31: 92:d1:97:80:38:83:63:ab:90:45:f7:83:ca:69:4c:90:26:23: 2a:1e:2b:0a:c5:63:a9:f0:40:fb:a4:65:e8:93:36:ef:71:48: 4b:15:65:95:db:97:2b:68:cd:b6:90:c1:db:17:92:f6:70:6d: e6:6f:3c:ce:95:dc:1e:a9:f6:9f:15:13:d6:c0:e0:a1:57:c3: c5:f7:34:b3:7b:f7:97:cc:94:f5:95:4c:2c:8d:d6:83:ea:f4: 0e:2a:ed:6d:7d:01:56:f1:0c:21:a7:d9:c9:fe:f7:a8:72:38: a1:24:eb:ae:ab:38:30:7c:6f:dd:cd:ee:6f:cb:a6:23:54:13: 1a:51:33:1e:48:3f:99:64:63:25:a7:23:04:8c:a0:bf:0c:7a: 9c:62:dd:2f:4c:44:aa:53:6c:d7:e1:98:b9:dd:2e:33:4e:14: 7f:22:08:8d:bc:15:f9:b6:45:b1:6e:6a:9d:d7:77:49:a8:c1: 8b:2a:90:54:0c:fe:8b:78:77:8c:4c:2a:bc:5f:b2:92:78:ab: 5c:8b:6d:f7:ad:a4:e4:5f:29:db:9e:4c:c2:22:95:68:4b:fa: 79:1c:90:73 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUXtNrdZzSs2q+E7+Pefx8tfNYj6UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk4N0Q2NzA5MTM5NjJDRjY5MTgxRjczQzk0RkU4QzI3 OUUwMzhEQTAeFw0yNjEwMzExMjEyMTVaFw0yNjExMDExMzI3MTVaMDMxMTAvBgNV BAMTKDRBRDBDMzM2MURBQkIzMTExMDFBNkM3RkJDQTJCQkE4NUEyNDY2NDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnDTJGasBKoAGpJtmY4lAnmAoI jThj/aLXXAikCZdNUxvmq/xZ76C3WPHb2gdFB3x810JZ0h3bSI2ZaddnX9Y5RvDx UeKYhamM+JkvRo/PellnBjzyG4rbHI5fubEfveJrtIH6r43beHutGjQHQFaVNwMz yqIWm5fshQGZ1M2CqCKZlcj02+YTA6tSQPcqUZZjWAKs44bQz8Z8ETNVUaiILMBj tRi8m+F6FrhFfDZnmz79L37j/FutUijsU2Aq30AEbVnxQ6s0xhNzzN7+Ixv/Fh/f fTeLWC8PUhU7Xx603ZMfF5Kt45SjDq4v8FckQkUoF24n6b5j7NC6xdaJyK+tAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUStDDNh2rsxEQGmx/vKK7qFokZkgwHwYDVR0j BBgwFoAUKYfWcJE5Ys9pGB9zyU/ownngONowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM2RiN1NhaFp0UlZDOFB1TWNneXpiQW1lVWZWd3lSY3N4V21IQ0dGdnBj eUYvMC8yOTg3RDY3MDkxMzk2MkNGNjkxODFGNzNDOTRGRThDMjc5RTAzOERBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI5ODdENjcwOTEzOTYyQ0Y2 OTE4MUY3M0M5NEZFOEMyNzlFMDM4REEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M2RiN1NhaFp0UlZDOFB1TWNneXpiQW1lVWZWd3lSY3N4V21IQ0dGdnBjeUYvMC8y OTg3RDY3MDkxMzk2MkNGNjkxODFGNzNDOTRGRThDMjc5RTAzOERBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPGpoU19MEbYwswpjC4DZeJpJSDvkbzfceOsXbEAwLpjELd4xktGXgDiDY6uQ RfeDymlMkCYjKh4rCsVjqfBA+6Rl6JM273FISxVllduXK2jNtpDB2xeS9nBt5m88 zpXcHqn2nxUT1sDgoVfDxfc0s3v3l8yU9ZVMLI3Wg+r0DirtbX0BVvEMIafZyf73 qHI4oSTrrqs4MHxv3c3ub8umI1QTGlEzHkg/mWRjJacjBIygvwx6nGLdL0xEqlNs 1+GYud0uM04UfyIIjbwV+bZFsW5qndd3SajBiyqQVAz+i3h3jEwqvF+yknirXItt 962k5F8p255MwiKVaEv6eRyQcw== -----END CERTIFICATE-----Generated at Sat Oct 31 23:47:39 2026 by rpki-client