$ rpki-client -vvvf rpki-repo.registro.br/repo/4pvH4MHZJZas4zHEgK2hMoy5gE5iQjdPTDp4EF96vecg/0/AA72ED85A93B5AABE6C7DF844AD99D16A90E14C8.mft File: AA72ED85A93B5AABE6C7DF844AD99D16A90E14C8.mft (raw, json) Hash identifier: qObNVbiKj/MD6RfGGbzbqXgdA1fvnlsEsIftJ86b+OA= Subject key identifier: EF:7B:B9:0E:BE:0F:82:39:18:92:51:27:A6:26:DE:F2:50:FF:4A:50 Authority key identifier: AA:72:ED:85:A9:3B:5A:AB:E6:C7:DF:84:4A:D9:9D:16:A9:0E:14:C8 Certificate issuer: /CN=AA72ED85A93B5AABE6C7DF844AD99D16A90E14C8 Certificate serial: 65DF81F2238CB8C8D8EFCDCE3F8598A0EBE7AF8B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA72ED85A93B5AABE6C7DF844AD99D16A90E14C8.cer Subject info access: rsync://rpki-repo.registro.br/repo/4pvH4MHZJZas4zHEgK2hMoy5gE5iQjdPTDp4EF96vecg/0/AA72ED85A93B5AABE6C7DF844AD99D16A90E14C8.mft Manifest number: 022C Signing time: Wed 28 Oct 2026 06:15:17 +0000 Manifest this update: Wed 28 Oct 2026 06:10:17 +0000 Manifest next update: Thu 29 Oct 2026 07:49:17 +0000 Files and hashes: 1: 323830343a393539303a3a2f33322d3332203d3e20323734353330.roa (hash: dukg77/FZGwEGEYzh9ImGeDqTDpgZcuaelaD+6R0DVc=) 2: AA72ED85A93B5AABE6C7DF844AD99D16A90E14C8.crl (hash: CI6K1FaIPqjbSFizAH7mkY+DwQZuXaVh7bUsGRx7h8U=) 3: 323830343a393539303a3a2f33322d3332203d3e20323632323837.roa (hash: 6HFrEHL1v0fcx8BKWlRjusTJxpwbjwBan9WOc7FmBjo=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4pvH4MHZJZas4zHEgK2hMoy5gE5iQjdPTDp4EF96vecg/0/AA72ED85A93B5AABE6C7DF844AD99D16A90E14C8.crl rsync://rpki-repo.registro.br/repo/4pvH4MHZJZas4zHEgK2hMoy5gE5iQjdPTDp4EF96vecg/0/AA72ED85A93B5AABE6C7DF844AD99D16A90E14C8.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA72ED85A93B5AABE6C7DF844AD99D16A90E14C8.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 29 Oct 2026 07:49:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:df:81:f2:23:8c:b8:c8:d8:ef:cd:ce:3f:85:98:a0:eb:e7:af:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA72ED85A93B5AABE6C7DF844AD99D16A90E14C8 Validity Not Before: Oct 28 06:10:17 2026 GMT Not After : Oct 29 07:49:17 2026 GMT Subject: CN=EF7BB90EBE0F823918925127A626DEF250FF4A50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:8b:9d:ad:b0:de:62:47:5e:64:4f:f3:2f:7b: 25:e2:5c:79:31:f8:d5:75:92:65:ed:a7:c3:0b:fa: 51:5a:22:80:f9:73:b6:1c:31:aa:10:a3:4e:30:ef: 6b:7d:f9:72:89:83:41:e6:0a:bc:60:94:82:d5:9e: a6:43:86:01:fd:1a:ae:dd:7f:10:de:25:89:e8:6d: 52:ab:fb:6b:46:6b:2e:bc:1f:56:5a:8b:dd:c5:ae: 0e:72:cd:f4:41:75:b5:ea:7b:51:1e:43:4e:f6:79: aa:e0:d2:26:10:a0:1c:90:69:c1:c0:5f:c0:02:b1: 67:59:96:d2:1c:99:6e:d6:1d:bd:7c:8d:42:45:62: 8f:33:2c:5f:ae:86:02:ca:15:cc:85:31:ea:a0:21: 9a:2b:6b:38:b4:43:77:51:e7:6c:52:d4:b5:c6:3e: 6b:42:8f:6b:50:30:01:2a:83:e8:e6:5c:8e:e5:8b: d4:04:0a:fe:6b:a5:03:d5:66:4c:00:19:2e:f3:27: 8e:68:5b:cf:30:89:33:8f:0c:11:f4:c7:16:1c:4e: 81:c9:1c:bd:b0:bf:29:a5:a5:23:1a:a5:47:09:16: 95:04:4a:61:dd:57:80:87:72:17:d7:62:36:f5:00: aa:87:4f:ea:58:7a:b9:1c:a7:55:9d:f0:c9:06:1b: 94:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:7B:B9:0E:BE:0F:82:39:18:92:51:27:A6:26:DE:F2:50:FF:4A:50 X509v3 Authority Key Identifier: keyid:AA:72:ED:85:A9:3B:5A:AB:E6:C7:DF:84:4A:D9:9D:16:A9:0E:14:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4pvH4MHZJZas4zHEgK2hMoy5gE5iQjdPTDp4EF96vecg/0/AA72ED85A93B5AABE6C7DF844AD99D16A90E14C8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA72ED85A93B5AABE6C7DF844AD99D16A90E14C8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4pvH4MHZJZas4zHEgK2hMoy5gE5iQjdPTDp4EF96vecg/0/AA72ED85A93B5AABE6C7DF844AD99D16A90E14C8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:4c:d7:6e:8a:a9:ca:2e:72:5d:83:f6:1b:04:80:94:16:9e: b6:77:ad:da:d8:eb:01:48:f6:68:48:f7:aa:bf:5f:4c:c0:a0: 6c:bb:9c:2d:e3:01:92:1c:ca:26:56:2a:63:78:20:2a:6e:82: 05:aa:b7:69:80:1b:d4:d0:de:f1:2a:8c:6d:a9:0f:3c:ef:fc: a2:d9:8f:3c:dd:3b:3d:d2:c5:d9:eb:ca:d6:28:2a:64:da:62: 3f:b3:5d:61:c6:2e:a7:49:86:99:89:88:fa:56:bb:09:a1:e8: a0:76:32:4f:9c:b3:ce:20:52:72:d1:e0:e9:65:0d:2a:ba:12: 42:86:86:d6:4e:f2:f0:52:d1:09:fd:dd:63:2f:07:50:fe:5e: a7:d0:da:12:c7:dd:de:76:76:9a:f8:4d:5e:39:61:e7:fa:2d: 75:f9:10:ea:d0:ec:62:1b:85:aa:81:11:12:d2:82:ba:98:27: 63:d9:d3:6a:7e:e4:13:82:c0:f2:e5:b2:b8:4a:c8:a1:c1:8e: 11:fa:c1:69:26:9d:4a:96:29:84:10:ab:36:30:dc:bf:94:07: 93:fb:a0:24:9f:c7:f4:b5:05:94:46:e5:bb:90:85:c1:7e:24: db:79:b5:80:0b:5c:f5:5f:16:27:1b:4e:48:16:6e:1d:4f:92: a4:51:7b:4f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUZd+B8iOMuMjY783OP4WYoOvnr4swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUE3MkVEODVBOTNCNUFBQkU2QzdERjg0NEFEOTlEMTZB OTBFMTRDODAeFw0yNjEwMjgwNjEwMTdaFw0yNjEwMjkwNzQ5MTdaMDMxMTAvBgNV BAMTKEVGN0JCOTBFQkUwRjgyMzkxODkyNTEyN0E2MjZERUYyNTBGRjRBNTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzi52tsN5iR15kT/MveyXiXHkx +NV1kmXtp8ML+lFaIoD5c7YcMaoQo04w72t9+XKJg0HmCrxglILVnqZDhgH9Gq7d fxDeJYnobVKr+2tGay68H1Zai93Frg5yzfRBdbXqe1EeQ072earg0iYQoByQacHA X8ACsWdZltIcmW7WHb18jUJFYo8zLF+uhgLKFcyFMeqgIZorazi0Q3dR52xS1LXG PmtCj2tQMAEqg+jmXI7li9QECv5rpQPVZkwAGS7zJ45oW88wiTOPDBH0xxYcToHJ HL2wvymlpSMapUcJFpUESmHdV4CHchfXYjb1AKqHT+pYerkcp1Wd8MkGG5SpAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU73u5Dr4PgjkYklEnpibe8lD/SlAwHwYDVR0j BBgwFoAUqnLthak7Wqvmx9+EStmdFqkOFMgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNHB2SDRNSFpKWmFzNHpIRWdLMmhNb3k1Z0U1aVFqZFBURHA0RUY5NnZl Y2cvMC9BQTcyRUQ4NUE5M0I1QUFCRTZDN0RGODQ0QUQ5OUQxNkE5MEUxNEM4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FBNzJFRDg1QTkzQjVBQUJF NkM3REY4NDRBRDk5RDE2QTkwRTE0QzguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NHB2SDRNSFpKWmFzNHpIRWdLMmhNb3k1Z0U1aVFqZFBURHA0RUY5NnZlY2cvMC9B QTcyRUQ4NUE5M0I1QUFCRTZDN0RGODQ0QUQ5OUQxNkE5MEUxNEM4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqEzXboqpyi5yXYP2GwSAlBaetnet2tjrAUj2aEj3qr9fTMCgbLucLeMBkhzK JlYqY3ggKm6CBaq3aYAb1NDe8SqMbakPPO/8otmPPN07PdLF2evK1igqZNpiP7Nd YcYup0mGmYmI+la7CaHooHYyT5yzziBSctHg6WUNKroSQoaG1k7y8FLRCf3dYy8H UP5ep9DaEsfd3nZ2mvhNXjlh5/otdfkQ6tDsYhuFqoEREtKCupgnY9nTan7kE4LA 8uWyuErIocGOEfrBaSadSpYphBCrNjDcv5QHk/ugJJ/H9LUFlEblu5CFwX4k23m1 gAtc9V8WJxtOSBZuHU+SpFF7Tw== -----END CERTIFICATE-----Generated at Wed Oct 28 18:17:42 2026 by rpki-client