$ rpki-client -vvvf rpki-repo.registro.br/repo/5SZ8cpe6rRkTgBPN43JZ5wiBH6ARZEeHb5a9RRT6FJVb/0/E2820F5C1A318BD4BE17A39BE0F7E2671AF29CAE.mft File: E2820F5C1A318BD4BE17A39BE0F7E2671AF29CAE.mft (raw, json) Hash identifier: F0YtcK7V0rvslEu+tFRBUCGxZxaPzVAvWuCisCCwQQI= Subject key identifier: D2:11:6D:0C:CB:52:72:D9:45:DD:49:CD:7E:65:5C:8E:C4:44:15:D1 Authority key identifier: E2:82:0F:5C:1A:31:8B:D4:BE:17:A3:9B:E0:F7:E2:67:1A:F2:9C:AE Certificate issuer: /CN=E2820F5C1A318BD4BE17A39BE0F7E2671AF29CAE Certificate serial: 026BF2393CFB783C35CF0E0F7E2A469D23542973 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E2820F5C1A318BD4BE17A39BE0F7E2671AF29CAE.cer Subject info access: rsync://rpki-repo.registro.br/repo/5SZ8cpe6rRkTgBPN43JZ5wiBH6ARZEeHb5a9RRT6FJVb/0/E2820F5C1A318BD4BE17A39BE0F7E2671AF29CAE.mft Manifest number: 3D Signing time: Sun 01 Nov 2026 10:42:04 +0000 Manifest this update: Sun 01 Nov 2026 10:37:04 +0000 Manifest next update: Mon 02 Nov 2026 14:05:04 +0000 Files and hashes: 1: 323830343a393661383a3130303a3a2f34302d3430203d3e20323734333530.roa (hash: exLiZfFcsIsOd/G2xfMOlnlAEdyEaTm84KA3otsLdHE=) 2: 323830343a393661383a3a2f34302d3430203d3e20323734333530.roa (hash: rPgG7m6qVMN2Y6Qu7Tv3xfRXE3+DaTBh+zTOnvLc5DU=) 3: E2820F5C1A318BD4BE17A39BE0F7E2671AF29CAE.crl (hash: Pe77uHriUoF+Nysi0UujdoTEtBqavWcMHOkG3RM4uk8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5SZ8cpe6rRkTgBPN43JZ5wiBH6ARZEeHb5a9RRT6FJVb/0/E2820F5C1A318BD4BE17A39BE0F7E2671AF29CAE.crl rsync://rpki-repo.registro.br/repo/5SZ8cpe6rRkTgBPN43JZ5wiBH6ARZEeHb5a9RRT6FJVb/0/E2820F5C1A318BD4BE17A39BE0F7E2671AF29CAE.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E2820F5C1A318BD4BE17A39BE0F7E2671AF29CAE.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 02 Nov 2026 14:05:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:6b:f2:39:3c:fb:78:3c:35:cf:0e:0f:7e:2a:46:9d:23:54:29:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E2820F5C1A318BD4BE17A39BE0F7E2671AF29CAE Validity Not Before: Nov 1 10:37:04 2026 GMT Not After : Nov 2 14:05:04 2026 GMT Subject: CN=D2116D0CCB5272D945DD49CD7E655C8EC44415D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f6:2b:02:38:e9:c0:07:7a:14:42:fe:3f:45: 09:29:b9:40:cb:c1:68:e8:49:5e:76:c0:0c:85:f2: f7:67:00:c3:57:6a:a1:d7:45:74:6b:c1:ac:a1:fa: d6:2e:c7:9c:93:57:fd:4c:cf:79:12:1a:93:fe:ae: c7:b9:b9:33:e6:9a:88:14:f4:27:bd:f8:01:22:ea: 38:b7:f2:3b:bf:6c:92:a9:89:3d:49:0e:ec:9f:3a: 52:ab:d0:fb:5d:c0:b1:d9:36:d3:03:96:0a:10:39: 1b:ed:f2:d9:7c:ae:7f:03:e4:91:db:8f:25:74:c2: 46:39:c5:65:ab:51:16:47:f7:2b:91:46:7d:80:20: b8:57:3e:4f:5e:48:e4:f4:6e:f2:c6:ac:aa:a3:85: a5:5e:46:5a:8b:7f:90:0b:19:d0:ea:33:87:79:62: 00:76:a5:e2:4a:bf:95:e0:70:17:05:a4:5d:3f:0d: 77:22:e0:34:ca:11:2a:22:8e:05:12:1f:df:54:85: c7:b4:c8:dc:78:14:cc:7e:91:31:8c:1b:1a:c0:50: a4:3f:32:2d:58:41:57:3b:1f:38:4b:b4:a4:67:50: fa:07:14:81:9b:22:a2:87:4b:97:ef:aa:70:a4:f6: a8:25:10:3b:8e:2e:e7:87:cf:3f:e5:08:c4:72:6d: 67:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:11:6D:0C:CB:52:72:D9:45:DD:49:CD:7E:65:5C:8E:C4:44:15:D1 X509v3 Authority Key Identifier: keyid:E2:82:0F:5C:1A:31:8B:D4:BE:17:A3:9B:E0:F7:E2:67:1A:F2:9C:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5SZ8cpe6rRkTgBPN43JZ5wiBH6ARZEeHb5a9RRT6FJVb/0/E2820F5C1A318BD4BE17A39BE0F7E2671AF29CAE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E2820F5C1A318BD4BE17A39BE0F7E2671AF29CAE.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5SZ8cpe6rRkTgBPN43JZ5wiBH6ARZEeHb5a9RRT6FJVb/0/E2820F5C1A318BD4BE17A39BE0F7E2671AF29CAE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d4:58:59:eb:5c:06:a0:da:cb:6f:f6:ca:2e:e6:0a:cb:d3:06: b1:ab:7c:4a:a2:7c:7e:f2:1d:c1:f6:2d:c2:1d:aa:e1:a8:12: 89:a9:08:4f:8d:09:6e:d7:1d:94:9f:d3:bf:3f:9c:6a:ae:28: c5:5b:4e:df:f7:de:c8:d5:94:62:ff:72:9c:63:00:11:2b:e8: 4d:b2:8d:8a:0b:bb:58:06:71:bb:fc:7c:14:f4:db:fc:b1:9a: b4:15:3b:16:82:ae:d2:83:53:ad:23:d9:7a:56:1a:e2:6c:bb: 08:08:bc:a7:bd:fe:97:c1:81:92:4d:f6:f0:72:e1:66:c4:3a: 98:8d:28:2b:46:41:42:88:0f:e3:bd:fe:25:e2:a1:6b:46:81: 10:27:ca:52:af:77:f2:4b:ae:09:48:24:c0:6c:0d:d9:ec:d2: 87:50:71:7f:76:5c:98:5a:ab:f5:78:b7:d7:ed:84:3c:43:44: da:0d:32:f3:4a:45:c3:b3:2e:85:fc:d5:40:3c:5b:fb:15:af: 17:ec:33:87:b7:00:b8:6b:a8:44:3f:ab:47:22:d0:ee:92:b4: fc:a7:ab:60:a6:7e:3a:90:80:c5:d9:37:55:6a:c4:27:96:e6: c6:b8:4d:dc:15:55:95:2a:bf:26:d5:e0:dd:e9:ff:b0:ea:9f: 4f:55:57:5e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUAmvyOTz7eDw1zw4PfipGnSNUKXMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTI4MjBGNUMxQTMxOEJENEJFMTdBMzlCRTBGN0UyNjcx QUYyOUNBRTAeFw0yNjExMDExMDM3MDRaFw0yNjExMDIxNDA1MDRaMDMxMTAvBgNV BAMTKEQyMTE2RDBDQ0I1MjcyRDk0NURENDlDRDdFNjU1QzhFQzQ0NDE1RDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC49isCOOnAB3oUQv4/RQkpuUDL wWjoSV52wAyF8vdnAMNXaqHXRXRrwayh+tYux5yTV/1Mz3kSGpP+rse5uTPmmogU 9Ce9+AEi6ji38ju/bJKpiT1JDuyfOlKr0PtdwLHZNtMDlgoQORvt8tl8rn8D5JHb jyV0wkY5xWWrURZH9yuRRn2AILhXPk9eSOT0bvLGrKqjhaVeRlqLf5ALGdDqM4d5 YgB2peJKv5XgcBcFpF0/DXci4DTKESoijgUSH99Uhce0yNx4FMx+kTGMGxrAUKQ/ Mi1YQVc7HzhLtKRnUPoHFIGbIqKHS5fvqnCk9qglEDuOLueHzz/lCMRybWcbAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU0hFtDMtSctlF3UnNfmVcjsREFdEwHwYDVR0j BBgwFoAU4oIPXBoxi9S+F6Ob4PfiZxrynK4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNVNaOGNwZTZyUmtUZ0JQTjQzSlo1d2lCSDZBUlpFZUhiNWE5UlJUNkZK VmIvMC9FMjgyMEY1QzFBMzE4QkQ0QkUxN0EzOUJFMEY3RTI2NzFBRjI5Q0FFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0UyODIwRjVDMUEzMThCRDRC RTE3QTM5QkUwRjdFMjY3MUFGMjlDQUUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NVNaOGNwZTZyUmtUZ0JQTjQzSlo1d2lCSDZBUlpFZUhiNWE5UlJUNkZKVmIvMC9F MjgyMEY1QzFBMzE4QkQ0QkUxN0EzOUJFMEY3RTI2NzFBRjI5Q0FFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEA1FhZ61wGoNrLb/bKLuYKy9MGsat8SqJ8fvIdwfYtwh2q4agSiakIT40Jbtcd lJ/Tvz+caq4oxVtO3/feyNWUYv9ynGMAESvoTbKNigu7WAZxu/x8FPTb/LGatBU7 FoKu0oNTrSPZelYa4my7CAi8p73+l8GBkk328HLhZsQ6mI0oK0ZBQogP473+JeKh a0aBECfKUq938kuuCUgkwGwN2ezSh1Bxf3ZcmFqr9Xi31+2EPENE2g0y80pFw7Mu hfzVQDxb+xWvF+wzh7cAuGuoRD+rRyLQ7pK0/KerYKZ+OpCAxdk3VWrEJ5bmxrhN 3BVVlSq/JtXg3en/sOqfT1VXXg== -----END CERTIFICATE-----Generated at Mon Nov 2 08:26:44 2026 by rpki-client