$ rpki-client -vvvf rpki-repo.registro.br/repo/4GpvdAJ1QK9WdS5MwtWm9YjCKPmQmn5iyM7uzwDcnFuL/0/42CF8AF950150224F27B677F4A1AD4BA306A610F.mft File: 42CF8AF950150224F27B677F4A1AD4BA306A610F.mft (raw, json) Hash identifier: wUUt/95xx622yAPQW6Uc0kpxKQnkAPftRo/t7ernmEo= Subject key identifier: 71:2E:47:ED:18:9B:44:FA:7E:2E:A6:D6:7D:4D:87:CE:E3:03:29:61 Authority key identifier: 42:CF:8A:F9:50:15:02:24:F2:7B:67:7F:4A:1A:D4:BA:30:6A:61:0F Certificate issuer: /CN=42CF8AF950150224F27B677F4A1AD4BA306A610F Certificate serial: 0D6D3D34EDC6D49DFC3F1B8F25BFBEF81CEC3E23 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42CF8AF950150224F27B677F4A1AD4BA306A610F.cer Subject info access: rsync://rpki-repo.registro.br/repo/4GpvdAJ1QK9WdS5MwtWm9YjCKPmQmn5iyM7uzwDcnFuL/0/42CF8AF950150224F27B677F4A1AD4BA306A610F.mft Manifest number: 0101 Signing time: Wed 14 Oct 2026 13:36:04 +0000 Manifest this update: Wed 14 Oct 2026 13:31:04 +0000 Manifest next update: Thu 15 Oct 2026 17:12:04 +0000 Files and hashes: 1: 3230312e33332e38342e302f32332d3234203d3e20323734333431.roa (hash: 95qIQvYnJfjKbrID4RzZJKv3odmiEq00ghYPv5iZw7k=) 2: 42CF8AF950150224F27B677F4A1AD4BA306A610F.crl (hash: wTZbvPEjMXGows1CShZgaWTAQf4sSdRlHnNeErwyigs=) 3: 323830343a393638383a3a2f33322d3332203d3e20323734333431.roa (hash: UdS0smRxzRrN/o++xx+mb89JXMJY5LSywGnNxwY9uM4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4GpvdAJ1QK9WdS5MwtWm9YjCKPmQmn5iyM7uzwDcnFuL/0/42CF8AF950150224F27B677F4A1AD4BA306A610F.crl rsync://rpki-repo.registro.br/repo/4GpvdAJ1QK9WdS5MwtWm9YjCKPmQmn5iyM7uzwDcnFuL/0/42CF8AF950150224F27B677F4A1AD4BA306A610F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42CF8AF950150224F27B677F4A1AD4BA306A610F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 15 Oct 2026 17:12:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:6d:3d:34:ed:c6:d4:9d:fc:3f:1b:8f:25:bf:be:f8:1c:ec:3e:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42CF8AF950150224F27B677F4A1AD4BA306A610F Validity Not Before: Oct 14 13:31:04 2026 GMT Not After : Oct 15 17:12:04 2026 GMT Subject: CN=712E47ED189B44FA7E2EA6D67D4D87CEE3032961 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:27:f5:04:e5:70:a6:9f:7f:66:84:e4:4e:b9: 9e:9d:de:94:1d:b9:e7:ab:c3:a5:91:f6:62:5d:be: c1:eb:1f:8d:76:3f:46:c7:a6:c1:91:1d:b2:d5:76: f0:4d:2f:50:c2:2a:19:31:db:87:68:b1:65:60:74: 4f:fd:be:24:6b:46:93:c4:17:65:a7:67:50:46:35: f9:30:e3:10:24:7d:c6:96:6c:6b:34:2e:6c:82:e1: 87:2d:27:de:2e:8e:ad:2e:41:12:f9:08:f4:5a:b3: f6:6f:8e:6f:43:4b:cf:4b:ee:0b:08:80:a5:dd:0f: e6:cc:98:d0:c7:36:a3:e7:18:1f:e3:fd:8a:1a:5e: 6a:af:ca:80:00:00:a7:dd:1b:f2:8b:45:82:dd:8a: ae:b5:ed:d7:8e:49:66:0b:56:30:47:06:44:c0:05: 9a:3f:34:66:ec:40:7a:9d:94:52:6c:84:ae:8d:dc: 82:2c:7f:61:ff:73:fd:c6:3a:17:a6:fe:fb:01:63: 52:f2:1c:c2:f0:32:5b:44:76:f7:c1:3d:a8:5d:ce: 1c:3d:04:88:af:ae:43:0b:c7:8d:54:c2:44:b9:36: 1c:15:4a:f9:4d:e9:96:6f:17:56:31:5f:d6:63:d0: 28:af:64:23:38:69:2b:68:d6:81:3c:93:18:41:ac: 21:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:2E:47:ED:18:9B:44:FA:7E:2E:A6:D6:7D:4D:87:CE:E3:03:29:61 X509v3 Authority Key Identifier: keyid:42:CF:8A:F9:50:15:02:24:F2:7B:67:7F:4A:1A:D4:BA:30:6A:61:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4GpvdAJ1QK9WdS5MwtWm9YjCKPmQmn5iyM7uzwDcnFuL/0/42CF8AF950150224F27B677F4A1AD4BA306A610F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42CF8AF950150224F27B677F4A1AD4BA306A610F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GpvdAJ1QK9WdS5MwtWm9YjCKPmQmn5iyM7uzwDcnFuL/0/42CF8AF950150224F27B677F4A1AD4BA306A610F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:84:7e:27:eb:aa:bc:06:42:b4:e6:80:f7:1f:cc:d4:97:19: f1:7d:69:f2:69:73:b2:a2:64:6e:c4:a8:85:ce:cd:dd:96:65: f3:00:15:65:f7:05:e4:b0:ae:b7:5f:59:27:6d:11:28:3e:87: 44:7b:a5:42:a8:f1:be:b2:7e:f1:c2:2c:f3:d2:2f:95:bd:c8: 2e:cc:78:d8:d6:18:8e:47:be:61:8b:48:e7:4b:c6:1f:1f:20: d5:cc:91:53:0c:09:6a:9d:22:f2:bc:9b:f6:a8:d0:3f:f7:f4: 8c:94:f9:88:41:35:53:17:75:c9:d4:1c:b9:d8:73:01:5b:e1: 3f:51:c1:ac:76:43:b2:97:d3:2c:75:a4:9a:00:1e:f6:30:d3: e0:52:a1:00:3e:29:65:b9:44:ce:24:f6:54:bf:fd:c2:73:19: 69:b6:4e:1c:28:e5:cd:99:21:91:bf:0d:7a:e4:92:9f:83:16: 85:eb:7e:8d:56:33:5e:de:dd:8f:42:13:22:4e:40:54:a7:2b: 2c:16:12:d8:cd:87:fb:bd:78:41:1e:6c:dc:c6:10:fd:f6:04: 81:12:41:cf:be:e9:14:81:94:fd:34:9e:a1:cf:e2:11:e7:e4: fe:0a:b9:b4:1c:1e:cc:35:36:f9:e8:1f:0a:93:aa:03:bb:a3: 14:8e:37:ee -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUDW09NO3G1J38PxuPJb+++BzsPiMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDJDRjhBRjk1MDE1MDIyNEYyN0I2NzdGNEExQUQ0QkEz MDZBNjEwRjAeFw0yNjEwMTQxMzMxMDRaFw0yNjEwMTUxNzEyMDRaMDMxMTAvBgNV BAMTKDcxMkU0N0VEMTg5QjQ0RkE3RTJFQTZENjdENEQ4N0NFRTMwMzI5NjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6J/UE5XCmn39mhOROuZ6d3pQd ueerw6WR9mJdvsHrH412P0bHpsGRHbLVdvBNL1DCKhkx24dosWVgdE/9viRrRpPE F2WnZ1BGNfkw4xAkfcaWbGs0LmyC4YctJ94ujq0uQRL5CPRas/Zvjm9DS89L7gsI gKXdD+bMmNDHNqPnGB/j/YoaXmqvyoAAAKfdG/KLRYLdiq617deOSWYLVjBHBkTA BZo/NGbsQHqdlFJshK6N3IIsf2H/c/3GOhem/vsBY1LyHMLwMltEdvfBPahdzhw9 BIivrkMLx41UwkS5NhwVSvlN6ZZvF1YxX9Zj0CivZCM4aSto1oE8kxhBrCHhAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUcS5H7RibRPp+LqbWfU2HzuMDKWEwHwYDVR0j BBgwFoAUQs+K+VAVAiTye2d/ShrUujBqYQ8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNEdwdmRBSjFRSzlXZFM1TXd0V205WWpDS1BtUW1uNWl5TTd1endEY25G dUwvMC80MkNGOEFGOTUwMTUwMjI0RjI3QjY3N0Y0QTFBRDRCQTMwNkE2MTBGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQyQ0Y4QUY5NTAxNTAyMjRG MjdCNjc3RjRBMUFENEJBMzA2QTYxMEYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NEdwdmRBSjFRSzlXZFM1TXd0V205WWpDS1BtUW1uNWl5TTd1endEY25GdUwvMC80 MkNGOEFGOTUwMTUwMjI0RjI3QjY3N0Y0QTFBRDRCQTMwNkE2MTBGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFoR+J+uqvAZCtOaA9x/M1JcZ8X1p8mlzsqJkbsSohc7N3ZZl8wAVZfcF5LCu t19ZJ20RKD6HRHulQqjxvrJ+8cIs89Ivlb3ILsx42NYYjke+YYtI50vGHx8g1cyR UwwJap0i8ryb9qjQP/f0jJT5iEE1Uxd1ydQcudhzAVvhP1HBrHZDspfTLHWkmgAe 9jDT4FKhAD4pZblEziT2VL/9wnMZabZOHCjlzZkhkb8NeuSSn4MWhet+jVYzXt7d j0ITIk5AVKcrLBYS2M2H+714QR5s3MYQ/fYEgRJBz77pFIGU/TSeoc/iEefk/gq5 tBwezDU2+egfCpOqA7ujFI437g== -----END CERTIFICATE-----Generated at Thu Oct 15 02:33:28 2026 by rpki-client