$ rpki-client -vvvf rpki-repo.registro.br/repo/6HZBFkYJRjcHt8BaJwjWG9pwUTZDK5pGz4QJTqZFSZJi/0/B8D59F4B56BB54FC31CD9BF1C7FDDDA19D3B0369.mft File: B8D59F4B56BB54FC31CD9BF1C7FDDDA19D3B0369.mft (raw, json) Hash identifier: aGG2766HR8svTn+SkjJg9WtRMn9LrHROPSCjtqO5Q4s= Subject key identifier: 7E:A0:A9:CB:9C:F9:F5:99:72:F3:9F:36:16:5B:7C:70:41:5A:52:2D Authority key identifier: B8:D5:9F:4B:56:BB:54:FC:31:CD:9B:F1:C7:FD:DD:A1:9D:3B:03:69 Certificate issuer: /CN=B8D59F4B56BB54FC31CD9BF1C7FDDDA19D3B0369 Certificate serial: 7FF73919C0BCA854440A43971EBE94532D0D174B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8D59F4B56BB54FC31CD9BF1C7FDDDA19D3B0369.cer Subject info access: rsync://rpki-repo.registro.br/repo/6HZBFkYJRjcHt8BaJwjWG9pwUTZDK5pGz4QJTqZFSZJi/0/B8D59F4B56BB54FC31CD9BF1C7FDDDA19D3B0369.mft Manifest number: 0396 Signing time: Sun 01 Nov 2026 11:38:53 +0000 Manifest this update: Sun 01 Nov 2026 11:33:53 +0000 Manifest next update: Mon 02 Nov 2026 12:23:53 +0000 Files and hashes: 1: B8D59F4B56BB54FC31CD9BF1C7FDDDA19D3B0369.crl (hash: 0h94CCT2fIYfmmLadXXQ99a+E3Bydn7aqmDpNw/GY8c=) 2: 3133312e3139362e3133322e302f32322d3234203d3e20323635393238.roa (hash: yovZyHmUQoY2bHTva6g+6c+rWrodohZ/2jFVqGBxuPg=) 3: 3138372e3130392e3131382e302f32342d3234203d3e20323635393238.roa (hash: njjBw6JVVjsE1Es0o1x/6dz1044SKU3XFGfMqgq4zU8=) 4: 323830343a343030343a3a2f33322d3438203d3e20323635393238.roa (hash: h53OcAVjInZDe1oFrtX2yvVaWW8GorYefag6GtflxmQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/6HZBFkYJRjcHt8BaJwjWG9pwUTZDK5pGz4QJTqZFSZJi/0/B8D59F4B56BB54FC31CD9BF1C7FDDDA19D3B0369.crl rsync://rpki-repo.registro.br/repo/6HZBFkYJRjcHt8BaJwjWG9pwUTZDK5pGz4QJTqZFSZJi/0/B8D59F4B56BB54FC31CD9BF1C7FDDDA19D3B0369.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8D59F4B56BB54FC31CD9BF1C7FDDDA19D3B0369.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 02 Nov 2026 12:23:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:f7:39:19:c0:bc:a8:54:44:0a:43:97:1e:be:94:53:2d:0d:17:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8D59F4B56BB54FC31CD9BF1C7FDDDA19D3B0369 Validity Not Before: Nov 1 11:33:53 2026 GMT Not After : Nov 2 12:23:53 2026 GMT Subject: CN=7EA0A9CB9CF9F59972F39F36165B7C70415A522D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:a7:84:ed:e4:ce:e4:88:c9:d6:9a:8d:34:b3: 97:f3:f2:12:a4:1d:ae:3e:6f:14:3d:be:4f:4e:63: 9a:1c:46:5b:39:48:3e:f7:74:af:c5:1c:62:5a:d7: 3a:74:ff:9c:b2:bf:92:8d:a7:b5:1e:5a:75:3d:72: c0:50:9a:56:5e:82:d8:3d:8b:0a:ae:e9:b4:54:ea: 3d:51:d2:c0:c5:dd:1c:cd:1a:75:99:92:b2:26:bb: 2b:af:bf:9b:78:81:f5:2e:dc:65:b9:74:b6:a0:75: ea:0f:5a:08:c8:28:15:b7:3b:85:97:e7:89:71:92: e3:83:fb:d2:98:9d:68:19:72:2f:28:ae:54:0c:99: cf:28:54:a5:17:2e:80:30:d2:a3:65:70:9b:37:78: 9b:c0:bb:b7:6a:0c:45:1d:6a:e6:ad:32:38:0d:51: 2f:c6:91:2c:48:e1:64:00:92:dc:b2:75:5f:7e:af: 1b:fc:e1:6e:7b:6f:86:9b:82:5a:b2:1c:2b:01:19: f4:9b:31:25:71:26:0d:29:79:f3:a2:85:b8:ee:a5: 29:2c:9f:c7:d6:95:f9:1f:eb:e6:5d:28:a4:54:db: 78:00:50:c0:f7:a3:56:56:f5:76:5a:32:10:00:c3: a5:15:05:80:7b:32:ed:62:a0:50:4d:6f:dc:5a:60: 5c:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:A0:A9:CB:9C:F9:F5:99:72:F3:9F:36:16:5B:7C:70:41:5A:52:2D X509v3 Authority Key Identifier: keyid:B8:D5:9F:4B:56:BB:54:FC:31:CD:9B:F1:C7:FD:DD:A1:9D:3B:03:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/6HZBFkYJRjcHt8BaJwjWG9pwUTZDK5pGz4QJTqZFSZJi/0/B8D59F4B56BB54FC31CD9BF1C7FDDDA19D3B0369.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8D59F4B56BB54FC31CD9BF1C7FDDDA19D3B0369.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/6HZBFkYJRjcHt8BaJwjWG9pwUTZDK5pGz4QJTqZFSZJi/0/B8D59F4B56BB54FC31CD9BF1C7FDDDA19D3B0369.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:e2:08:12:07:10:6c:02:76:51:96:81:cc:13:21:32:d2:b3: 6b:8f:29:4a:72:af:81:25:1d:d3:a3:82:1a:a5:32:82:c7:49: 66:09:4e:15:78:ca:09:d3:d8:cd:ec:77:0a:84:70:5c:a3:37: 68:9d:33:11:7f:b5:3e:3f:9b:38:f7:5a:9b:95:7f:23:1c:48: 8f:fb:c7:36:10:b7:df:24:86:ba:82:c7:fc:03:8c:fe:e2:b4: 8e:8b:52:70:6e:db:e6:55:a2:0c:f1:82:bb:44:7e:00:d5:14: a7:c0:83:02:7a:a3:d2:79:10:a5:fb:66:d5:e4:67:77:33:ba: 2a:ff:cf:08:d9:11:c3:83:5e:72:c7:4f:70:5e:44:c2:6e:17: 67:a5:1f:04:5e:c7:78:30:eb:8a:25:b5:18:2b:74:49:d1:fb: 87:5e:99:72:29:bd:47:58:8d:f4:15:5f:03:91:ba:a3:e7:24: b1:63:81:1e:d3:07:70:98:ca:de:f9:0e:5e:14:dc:67:dd:53: 18:31:91:74:d6:d0:0a:55:ef:54:24:91:e9:08:ee:08:76:ff: f4:22:ff:4c:a0:7b:30:b9:1b:41:63:d0:66:d0:55:02:b9:3f: b5:78:e4:52:2f:cf:14:86:5c:dc:8c:30:90:ab:c9:30:df:d8: 95:40:2b:0f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUf/c5GcC8qFRECkOXHr6UUy0NF0swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhENTlGNEI1NkJCNTRGQzMxQ0Q5QkYxQzdGREREQTE5 RDNCMDM2OTAeFw0yNjExMDExMTMzNTNaFw0yNjExMDIxMjIzNTNaMDMxMTAvBgNV BAMTKDdFQTBBOUNCOUNGOUY1OTk3MkYzOUYzNjE2NUI3QzcwNDE1QTUyMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZp4Tt5M7kiMnWmo00s5fz8hKk Ha4+bxQ9vk9OY5ocRls5SD73dK/FHGJa1zp0/5yyv5KNp7UeWnU9csBQmlZegtg9 iwqu6bRU6j1R0sDF3RzNGnWZkrImuyuvv5t4gfUu3GW5dLagdeoPWgjIKBW3O4WX 54lxkuOD+9KYnWgZci8orlQMmc8oVKUXLoAw0qNlcJs3eJvAu7dqDEUdauatMjgN US/GkSxI4WQAktyydV9+rxv84W57b4abglqyHCsBGfSbMSVxJg0pefOihbjupSks n8fWlfkf6+ZdKKRU23gAUMD3o1ZW9XZaMhAAw6UVBYB7Mu1ioFBNb9xaYFy/AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUfqCpy5z59Zly8582Flt8cEFaUi0wHwYDVR0j BBgwFoAUuNWfS1a7VPwxzZvxx/3doZ07A2kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNkhaQkZrWUpSamNIdDhCYUp3aldHOXB3VVRaREs1cEd6NFFKVHFaRlNa SmkvMC9COEQ1OUY0QjU2QkI1NEZDMzFDRDlCRjFDN0ZERERBMTlEM0IwMzY5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I4RDU5RjRCNTZCQjU0RkMz MUNEOUJGMUM3RkREREExOUQzQjAzNjkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NkhaQkZrWUpSamNIdDhCYUp3aldHOXB3VVRaREs1cEd6NFFKVHFaRlNaSmkvMC9C OEQ1OUY0QjU2QkI1NEZDMzFDRDlCRjFDN0ZERERBMTlEM0IwMzY5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkeIIEgcQbAJ2UZaBzBMhMtKza48pSnKvgSUd06OCGqUygsdJZglOFXjKCdPY zex3CoRwXKM3aJ0zEX+1Pj+bOPdam5V/IxxIj/vHNhC33ySGuoLH/AOM/uK0jotS cG7b5lWiDPGCu0R+ANUUp8CDAnqj0nkQpftm1eRndzO6Kv/PCNkRw4NecsdPcF5E wm4XZ6UfBF7HeDDriiW1GCt0SdH7h16Zcim9R1iN9BVfA5G6o+cksWOBHtMHcJjK 3vkOXhTcZ91TGDGRdNbQClXvVCSR6QjuCHb/9CL/TKB7MLkbQWPQZtBVArk/tXjk Ui/PFIZc3IwwkKvJMN/YlUArDw== -----END CERTIFICATE-----Generated at Sun Nov 1 20:02:08 2026 by rpki-client