$ rpki-client -vvvf rpki-repo.registro.br/repo/4vsZJk3w83JEjkXi9sDSiaf4RqosRAefiVGX4jUaokUE/1/D1E97CFA150C484A25446F0C7D6D28CA5BEE1BF1.mft File: D1E97CFA150C484A25446F0C7D6D28CA5BEE1BF1.mft (raw, json) Hash identifier: K0/GhgSx4ZQfXENdAfTEQBPKiKIut/RVeeqbg6MFoAM= Subject key identifier: C2:FF:C9:50:BB:A8:DB:A1:31:87:7C:FD:2D:53:1B:C8:BD:48:44:8E Authority key identifier: D1:E9:7C:FA:15:0C:48:4A:25:44:6F:0C:7D:6D:28:CA:5B:EE:1B:F1 Certificate issuer: /CN=D1E97CFA150C484A25446F0C7D6D28CA5BEE1BF1 Certificate serial: 3A3BAEE965E7F6C24BCC674C10702CEA3EE6C3F0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1E97CFA150C484A25446F0C7D6D28CA5BEE1BF1.cer Subject info access: rsync://rpki-repo.registro.br/repo/4vsZJk3w83JEjkXi9sDSiaf4RqosRAefiVGX4jUaokUE/1/D1E97CFA150C484A25446F0C7D6D28CA5BEE1BF1.mft Manifest number: 0112 Signing time: Sun 01 Nov 2026 15:08:36 +0000 Manifest this update: Sun 01 Nov 2026 15:03:36 +0000 Manifest next update: Mon 02 Nov 2026 16:23:36 +0000 Files and hashes: 1: 3230312e3133392e3231362e302f32312d3332203d3e203631393431.roa (hash: 3ukrwP4zlYAIXirJfZYknYu+7zCaGNB6IdiRhpQHh8g=) 2: 323830343a313839343a3a2f33322d3634203d3e203631393431.roa (hash: zeOVTcGD6Dv/zVZ4K7t3QHEmyuzJp4RDJel6RhNshE4=) 3: D1E97CFA150C484A25446F0C7D6D28CA5BEE1BF1.crl (hash: u5ixGY5AoKnJGvrvHWd9IfNeOdcms9njFOA19auHQcE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4vsZJk3w83JEjkXi9sDSiaf4RqosRAefiVGX4jUaokUE/1/D1E97CFA150C484A25446F0C7D6D28CA5BEE1BF1.crl rsync://rpki-repo.registro.br/repo/4vsZJk3w83JEjkXi9sDSiaf4RqosRAefiVGX4jUaokUE/1/D1E97CFA150C484A25446F0C7D6D28CA5BEE1BF1.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1E97CFA150C484A25446F0C7D6D28CA5BEE1BF1.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 02 Nov 2026 16:23:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:3b:ae:e9:65:e7:f6:c2:4b:cc:67:4c:10:70:2c:ea:3e:e6:c3:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1E97CFA150C484A25446F0C7D6D28CA5BEE1BF1 Validity Not Before: Nov 1 15:03:36 2026 GMT Not After : Nov 2 16:23:36 2026 GMT Subject: CN=C2FFC950BBA8DBA131877CFD2D531BC8BD48448E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:47:b0:1d:ca:b7:27:a7:7e:f6:06:a2:85:60: 62:7e:63:72:ed:1d:56:94:82:1c:4a:30:57:59:98: 18:34:fc:03:fb:dd:f8:a8:75:6a:42:8d:51:3e:e7: 61:54:ba:1c:b5:d8:dc:0d:3e:a2:87:e7:74:6c:c8: 74:1d:0e:64:7c:78:72:66:86:e1:30:d5:a5:b3:7f: 94:d8:dd:71:cb:f2:16:15:1d:27:b0:f7:95:d9:4f: a8:0e:0c:94:ef:8a:28:0e:7c:f0:1a:1e:39:d4:87: 12:4c:a1:49:4e:1c:24:9b:59:3f:33:a6:2d:fc:ff: cb:b0:82:a5:c1:b7:b7:57:e9:f5:5d:ae:74:be:80: ea:ea:38:2a:45:95:43:a2:de:b8:93:fc:fd:1e:a5: 8f:f6:74:37:a6:63:21:49:07:27:5a:28:12:e7:71: 34:ab:be:60:b3:dd:1c:62:30:d1:80:b2:06:92:1e: ab:18:8f:ee:6a:3e:ed:7c:eb:b7:dc:2b:58:6b:9c: ec:f3:86:f6:ac:3f:19:43:c7:16:cc:2b:55:cd:e2: a4:2b:9c:09:cc:ad:13:5f:a6:f1:c9:fb:b6:32:5a: 4a:89:86:89:7e:7c:79:03:f6:47:ba:67:b8:aa:79: be:f6:56:a5:9d:6b:3a:6c:a3:d7:47:55:94:16:bd: 31:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:FF:C9:50:BB:A8:DB:A1:31:87:7C:FD:2D:53:1B:C8:BD:48:44:8E X509v3 Authority Key Identifier: keyid:D1:E9:7C:FA:15:0C:48:4A:25:44:6F:0C:7D:6D:28:CA:5B:EE:1B:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4vsZJk3w83JEjkXi9sDSiaf4RqosRAefiVGX4jUaokUE/1/D1E97CFA150C484A25446F0C7D6D28CA5BEE1BF1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1E97CFA150C484A25446F0C7D6D28CA5BEE1BF1.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4vsZJk3w83JEjkXi9sDSiaf4RqosRAefiVGX4jUaokUE/1/D1E97CFA150C484A25446F0C7D6D28CA5BEE1BF1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:a9:12:50:d1:0c:98:c8:35:45:85:86:1e:66:ba:64:c3:cb: d9:a8:c7:5d:f2:09:85:63:a0:58:93:31:8b:7a:bb:cf:d2:d0: 81:3b:13:4c:62:f0:d9:ab:cc:65:28:8b:35:d4:f8:77:1e:f8: fd:a4:73:b5:8e:ac:58:fc:d3:0d:42:b4:ae:e2:a5:76:79:db: 6b:72:3a:e1:ad:41:a6:fb:0b:af:a0:ee:3e:60:90:98:eb:d9: 85:2a:ec:c2:af:f1:59:23:6c:ad:13:c5:90:8e:f5:e8:cc:77: ef:23:39:af:9b:48:a7:ec:31:73:1d:dc:b9:9a:bd:c9:02:b3: 5f:53:f4:7b:1c:41:b8:ca:a1:4e:9b:01:bd:44:ac:53:08:85: b7:bd:4f:11:f6:90:13:9c:b7:7a:74:5f:2b:da:e9:fe:2a:10: 72:18:b4:c8:01:bd:f4:a7:f9:1b:c3:aa:36:f0:47:59:4f:05: f4:0c:d2:b5:a0:c6:89:1f:bc:7c:b1:65:06:0c:1b:f1:2d:bd: 93:d3:f1:db:cb:f2:de:c7:1b:7f:e1:46:85:84:8d:57:ae:4a: e3:1f:fe:ca:84:f8:f7:27:90:07:7c:d6:f3:c4:28:87:84:9c: 9d:d3:57:48:b5:4f:9d:69:38:f6:46:5a:9d:25:8f:4e:0c:5e: 9f:b1:f7:3e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUOjuu6WXn9sJLzGdMEHAs6j7mw/AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDFFOTdDRkExNTBDNDg0QTI1NDQ2RjBDN0Q2RDI4Q0E1 QkVFMUJGMTAeFw0yNjExMDExNTAzMzZaFw0yNjExMDIxNjIzMzZaMDMxMTAvBgNV BAMTKEMyRkZDOTUwQkJBOERCQTEzMTg3N0NGRDJENTMxQkM4QkQ0ODQ0OEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBR7Adyrcnp372BqKFYGJ+Y3Lt HVaUghxKMFdZmBg0/AP73fiodWpCjVE+52FUuhy12NwNPqKH53RsyHQdDmR8eHJm huEw1aWzf5TY3XHL8hYVHSew95XZT6gODJTviigOfPAaHjnUhxJMoUlOHCSbWT8z pi38/8uwgqXBt7dX6fVdrnS+gOrqOCpFlUOi3riT/P0epY/2dDemYyFJBydaKBLn cTSrvmCz3RxiMNGAsgaSHqsYj+5qPu1867fcK1hrnOzzhvasPxlDxxbMK1XN4qQr nAnMrRNfpvHJ+7YyWkqJhol+fHkD9ke6Z7iqeb72VqWdazpso9dHVZQWvTFtAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUwv/JULuo26Exh3z9LVMbyL1IRI4wHwYDVR0j BBgwFoAU0el8+hUMSEolRG8MfW0oylvuG/EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNHZzWkprM3c4M0pFamtYaTlzRFNpYWY0UnFvc1JBZWZpVkdYNGpVYW9r VUUvMS9EMUU5N0NGQTE1MEM0ODRBMjU0NDZGMEM3RDZEMjhDQTVCRUUxQkYxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QxRTk3Q0ZBMTUwQzQ4NEEy NTQ0NkYwQzdENkQyOENBNUJFRTFCRjEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NHZzWkprM3c4M0pFamtYaTlzRFNpYWY0UnFvc1JBZWZpVkdYNGpVYW9rVUUvMS9E MUU5N0NGQTE1MEM0ODRBMjU0NDZGMEM3RDZEMjhDQTVCRUUxQkYxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiakSUNEMmMg1RYWGHma6ZMPL2ajHXfIJhWOgWJMxi3q7z9LQgTsTTGLw2avM ZSiLNdT4dx74/aRztY6sWPzTDUK0ruKldnnba3I64a1BpvsLr6DuPmCQmOvZhSrs wq/xWSNsrRPFkI716Mx37yM5r5tIp+wxcx3cuZq9yQKzX1P0exxBuMqhTpsBvUSs UwiFt71PEfaQE5y3enRfK9rp/ioQchi0yAG99Kf5G8OqNvBHWU8F9AzStaDGiR+8 fLFlBgwb8S29k9Px28vy3scbf+FGhYSNV65K4x/+yoT49yeQB3zW88Qoh4ScndNX SLVPnWk49kZanSWPTgxen7H3Pg== -----END CERTIFICATE-----Generated at Mon Nov 2 08:23:36 2026 by rpki-client