$ rpki-client -vvvf rpki-repo.registro.br/repo/6bQjfCPwLofcPu5Vbx7KEdEsp1t5QJEurPcyPaiXgcuN/1/15E7264B71EE809227FFCDCE8569C4E79684DC0F.mft File: 15E7264B71EE809227FFCDCE8569C4E79684DC0F.mft (raw, json) Hash identifier: 03cPpORDJTdDicaCd17RonSsfqi8JKUOqGt8k8KjHPc= Subject key identifier: 19:8E:6A:E4:E5:E5:F7:6A:9C:8B:A9:A6:66:4D:86:63:EF:39:08:79 Authority key identifier: 15:E7:26:4B:71:EE:80:92:27:FF:CD:CE:85:69:C4:E7:96:84:DC:0F Certificate issuer: /CN=15E7264B71EE809227FFCDCE8569C4E79684DC0F Certificate serial: 5E18C65543EDF26D3E635C6873D242C1BA3F106F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15E7264B71EE809227FFCDCE8569C4E79684DC0F.cer Subject info access: rsync://rpki-repo.registro.br/repo/6bQjfCPwLofcPu5Vbx7KEdEsp1t5QJEurPcyPaiXgcuN/1/15E7264B71EE809227FFCDCE8569C4E79684DC0F.mft Manifest number: 20 Signing time: Sat 31 Oct 2026 13:44:42 +0000 Manifest this update: Sat 31 Oct 2026 13:39:41 +0000 Manifest next update: Sun 01 Nov 2026 15:22:41 +0000 Files and hashes: 1: 15E7264B71EE809227FFCDCE8569C4E79684DC0F.crl (hash: OmHK4Eo3RurX1s1RWVkZ147LM8g6k3a/VTjMfztEtEo=) 2: 3230302e3139362e3134302e302f32322d3232203d3e203532373930.roa (hash: cRlei2u5KV5haRL+zNCCwBqa3k9l8aQLlySCA9Nx2TM=) 3: 323830343a313864633a3a2f33322d3332203d3e203532373930.roa (hash: gfn8K0gjY6OBRqXQZt6GEOpi6RY4Tafd+Sobfs1b2sk=) 4: 3137372e33392e31322e302f32322d3232203d3e203532373930.roa (hash: GGZa2shUmsnLDxixMZqann5POm2fpWAGKkb0n6g3hy4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/6bQjfCPwLofcPu5Vbx7KEdEsp1t5QJEurPcyPaiXgcuN/1/15E7264B71EE809227FFCDCE8569C4E79684DC0F.crl rsync://rpki-repo.registro.br/repo/6bQjfCPwLofcPu5Vbx7KEdEsp1t5QJEurPcyPaiXgcuN/1/15E7264B71EE809227FFCDCE8569C4E79684DC0F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15E7264B71EE809227FFCDCE8569C4E79684DC0F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 01 Nov 2026 15:22:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:18:c6:55:43:ed:f2:6d:3e:63:5c:68:73:d2:42:c1:ba:3f:10:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15E7264B71EE809227FFCDCE8569C4E79684DC0F Validity Not Before: Oct 31 13:39:41 2026 GMT Not After : Nov 1 15:22:41 2026 GMT Subject: CN=198E6AE4E5E5F76A9C8BA9A6664D8663EF390879 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:6c:99:05:63:7d:48:05:a2:56:3a:02:ff:8a: 47:f5:f0:55:a3:ad:3f:eb:a8:7c:24:e3:1a:83:ed: 07:69:d4:dd:8d:3d:eb:ef:27:39:e3:63:f3:3a:1e: 88:da:2e:3e:42:2d:79:de:21:37:13:1a:82:5e:90: cd:9b:2f:7a:50:32:f3:ac:56:8e:d1:78:85:82:7d: 34:9b:d3:cd:86:0a:a7:0b:33:6e:26:b0:ee:9d:3b: ff:14:27:0b:44:5a:57:56:7b:0d:a6:22:f7:ba:ef: 6e:97:0e:06:13:f3:53:e9:51:20:f0:4b:8d:3e:0b: 8e:77:40:97:48:86:8e:04:e1:6b:95:10:d7:b9:29: 00:2e:dc:94:8a:08:7a:ba:58:3c:be:3f:c1:04:ca: 9f:71:b6:df:ed:f2:64:e2:18:aa:55:5f:13:94:79: 96:74:f5:12:7b:d8:8f:51:a4:8b:e6:11:d5:eb:53: 86:fb:51:7b:09:82:c3:29:f1:fa:4e:e5:a9:59:ca: 25:97:03:63:32:42:92:d8:b7:77:ea:b9:b9:6a:1e: 80:94:3d:3d:d2:bf:0d:6d:76:0f:98:bd:1a:40:51: ba:b8:92:57:13:29:9e:d1:a1:8f:e9:db:ba:33:dc: df:6c:6b:7f:c6:d2:c2:65:d1:23:d8:89:62:66:5b: 66:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:8E:6A:E4:E5:E5:F7:6A:9C:8B:A9:A6:66:4D:86:63:EF:39:08:79 X509v3 Authority Key Identifier: keyid:15:E7:26:4B:71:EE:80:92:27:FF:CD:CE:85:69:C4:E7:96:84:DC:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/6bQjfCPwLofcPu5Vbx7KEdEsp1t5QJEurPcyPaiXgcuN/1/15E7264B71EE809227FFCDCE8569C4E79684DC0F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15E7264B71EE809227FFCDCE8569C4E79684DC0F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/6bQjfCPwLofcPu5Vbx7KEdEsp1t5QJEurPcyPaiXgcuN/1/15E7264B71EE809227FFCDCE8569C4E79684DC0F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption db:09:c7:fd:1a:aa:99:f7:11:ef:aa:ee:8a:a7:bf:f8:bd:5b: 78:e9:b4:50:f1:5f:df:9e:38:7f:38:66:61:33:69:a3:17:2c: 6a:af:98:c0:31:7e:07:3d:0b:f2:7b:c4:7b:59:76:49:75:02: 5f:6e:e2:0c:40:e4:60:0a:8f:6b:4d:5a:0e:65:3d:a9:dc:33: 7f:46:65:4f:1f:a5:70:81:ef:78:df:26:68:b6:11:df:26:74: 9f:68:e6:f8:11:14:6b:a3:f5:bb:6e:33:26:86:0b:c3:86:5e: 00:17:38:49:b7:76:1b:36:7a:61:d3:73:d1:1d:44:da:83:05: a5:78:5b:57:aa:82:21:91:be:89:12:c8:23:93:dd:e7:a9:23: 09:e6:54:22:4c:db:f7:5d:94:95:c4:c8:01:d4:7b:38:5b:74: 66:e4:18:f8:91:5d:a8:5a:6a:fb:6f:dc:7b:8f:30:ac:a7:51: 3d:ac:e0:fb:b1:77:89:8d:b0:96:34:46:8f:2e:88:e7:d8:41: da:88:d7:dd:7f:48:43:a5:be:ad:f5:c6:ff:c9:06:2e:1c:78: 2e:a7:e2:88:2e:e0:c8:f7:24:54:e2:ce:8c:4b:12:fb:f5:86: 12:f8:cd:83:b8:5f:15:8c:63:46:33:39:06:d3:53:cf:1c:ff: 0e:4f:ad:79 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUXhjGVUPt8m0+Y1xoc9JCwbo/EG8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTVFNzI2NEI3MUVFODA5MjI3RkZDRENFODU2OUM0RTc5 Njg0REMwRjAeFw0yNjEwMzExMzM5NDFaFw0yNjExMDExNTIyNDFaMDMxMTAvBgNV BAMTKDE5OEU2QUU0RTVFNUY3NkE5QzhCQTlBNjY2NEQ4NjYzRUYzOTA4NzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0bJkFY31IBaJWOgL/ikf18FWj rT/rqHwk4xqD7Qdp1N2NPevvJznjY/M6HojaLj5CLXneITcTGoJekM2bL3pQMvOs Vo7ReIWCfTSb082GCqcLM24msO6dO/8UJwtEWldWew2mIve6726XDgYT81PpUSDw S40+C453QJdIho4E4WuVENe5KQAu3JSKCHq6WDy+P8EEyp9xtt/t8mTiGKpVXxOU eZZ09RJ72I9RpIvmEdXrU4b7UXsJgsMp8fpO5alZyiWXA2MyQpLYt3fqublqHoCU PT3Svw1tdg+YvRpAUbq4klcTKZ7RoY/p27oz3N9sa3/G0sJl0SPYiWJmW2ZxAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUGY5q5OXl92qci6mmZk2GY+85CHkwHwYDVR0j BBgwFoAUFecmS3HugJIn/83OhWnE55aE3A8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNmJRamZDUHdMb2ZjUHU1VmJ4N0tFZEVzcDF0NVFKRXVyUGN5UGFpWGdj dU4vMS8xNUU3MjY0QjcxRUU4MDkyMjdGRkNEQ0U4NTY5QzRFNzk2ODREQzBGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE1RTcyNjRCNzFFRTgwOTIy N0ZGQ0RDRTg1NjlDNEU3OTY4NERDMEYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NmJRamZDUHdMb2ZjUHU1VmJ4N0tFZEVzcDF0NVFKRXVyUGN5UGFpWGdjdU4vMS8x NUU3MjY0QjcxRUU4MDkyMjdGRkNEQ0U4NTY5QzRFNzk2ODREQzBGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEA2wnH/RqqmfcR76ruiqe/+L1beOm0UPFf3544fzhmYTNpoxcsaq+YwDF+Bz0L 8nvEe1l2SXUCX27iDEDkYAqPa01aDmU9qdwzf0ZlTx+lcIHveN8maLYR3yZ0n2jm +BEUa6P1u24zJoYLw4ZeABc4Sbd2GzZ6YdNz0R1E2oMFpXhbV6qCIZG+iRLII5Pd 56kjCeZUIkzb912UlcTIAdR7OFt0ZuQY+JFdqFpq+2/ce48wrKdRPazg+7F3iY2w ljRGjy6I59hB2ojX3X9IQ6W+rfXG/8kGLhx4LqfiiC7gyPckVOLOjEsS+/WGEvjN g7hfFYxjRjM5BtNTzxz/Dk+teQ== -----END CERTIFICATE-----Generated at Sun Nov 1 07:13:49 2026 by rpki-client