$ rpki-client -vvvf rpki-repo.registro.br/repo/6trhLgajuvyuzNzevBo7Yfo1WumW6DJSWtarTxWQksHL/0/98F0C11185EDA57E4828F9C6391F20923CE4C20E.mft File: 98F0C11185EDA57E4828F9C6391F20923CE4C20E.mft (raw, json) Hash identifier: Cz5pIS2CUbigvAwoezA7jzpyUthkDS22nAc/THwM1pE= Subject key identifier: 91:B4:7D:4A:76:8F:F9:CF:2F:0B:FA:91:CF:A5:F1:C4:AA:4A:51:4B Authority key identifier: 98:F0:C1:11:85:ED:A5:7E:48:28:F9:C6:39:1F:20:92:3C:E4:C2:0E Certificate issuer: /CN=98F0C11185EDA57E4828F9C6391F20923CE4C20E Certificate serial: 3D23C4089CFBE5473DF557C522F09C415BCD583B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98F0C11185EDA57E4828F9C6391F20923CE4C20E.cer Subject info access: rsync://rpki-repo.registro.br/repo/6trhLgajuvyuzNzevBo7Yfo1WumW6DJSWtarTxWQksHL/0/98F0C11185EDA57E4828F9C6391F20923CE4C20E.mft Manifest number: 5E Signing time: Mon 26 Oct 2026 12:23:35 +0000 Manifest this update: Mon 26 Oct 2026 12:18:35 +0000 Manifest next update: Tue 27 Oct 2026 13:17:35 +0000 Files and hashes: 1: 323830343a386432383a3130303a3a2f34302d3430203d3e20323733333339.roa (hash: m2cg66vBK5n+Erl9p4dtjZAoSeRNhyFlKwABdQlPhAA=) 2: 323830343a386432383a3a2f33322d3332203d3e20323733333339.roa (hash: iWBETUnZK/yPJWFURTd3G6EsuN+3RFWnqpag0KcfthQ=) 3: 323830343a386432383a313a3a2f34382d3438203d3e20323733333339.roa (hash: fMVzVb/YQzgiiEV79Nd4IcdLP5PUH+Lv38RXnDeIGac=) 4: 98F0C11185EDA57E4828F9C6391F20923CE4C20E.crl (hash: YQgCnzW5OpzdXcIF5x5gZAm36RQJOkgbGA3faBr2hZI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/6trhLgajuvyuzNzevBo7Yfo1WumW6DJSWtarTxWQksHL/0/98F0C11185EDA57E4828F9C6391F20923CE4C20E.crl rsync://rpki-repo.registro.br/repo/6trhLgajuvyuzNzevBo7Yfo1WumW6DJSWtarTxWQksHL/0/98F0C11185EDA57E4828F9C6391F20923CE4C20E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98F0C11185EDA57E4828F9C6391F20923CE4C20E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 27 Oct 2026 13:17:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:23:c4:08:9c:fb:e5:47:3d:f5:57:c5:22:f0:9c:41:5b:cd:58:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98F0C11185EDA57E4828F9C6391F20923CE4C20E Validity Not Before: Oct 26 12:18:35 2026 GMT Not After : Oct 27 13:17:35 2026 GMT Subject: CN=91B47D4A768FF9CF2F0BFA91CFA5F1C4AA4A514B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:8d:97:09:00:cf:4d:8d:61:59:0b:cc:f1:ff: 80:74:77:86:85:0b:48:27:6b:63:2c:69:f0:ad:4d: 1d:4f:5f:25:7e:7b:4d:32:73:04:8b:2f:f4:97:fc: 9a:fe:02:4a:9e:bf:ed:32:fb:1c:7e:9f:12:bf:79: 12:3f:cf:82:a8:bf:b0:0c:8b:8e:dc:fb:95:8d:f8: ae:bb:20:8e:ae:91:1f:13:28:64:f1:df:33:74:92: 64:b2:06:34:56:49:4a:f2:68:62:f3:8d:a3:df:1a: 50:07:98:f4:4a:a3:9a:2d:0c:cc:92:8a:30:ba:2f: 60:3b:82:3f:13:a8:88:f3:c2:1d:6a:36:a3:aa:a6: 76:d7:58:e0:56:21:e9:27:21:91:91:8b:6c:6c:62: 5e:97:04:40:04:ef:10:ee:f3:1a:fa:1d:5f:43:2f: 62:f1:ce:bf:d3:c0:4f:9c:16:2b:8c:70:52:b8:75: 45:f9:7a:be:4e:ad:0a:a8:cd:d5:bf:1e:f1:30:e7: 68:4d:ff:18:06:4f:1f:df:7c:66:61:44:46:0f:f4: 05:75:85:c3:13:e3:32:fe:aa:92:9e:97:fc:2d:c5: e1:14:d3:b7:2e:68:a7:32:4d:ea:bb:c8:4e:4b:23: 38:e1:5c:90:07:cd:58:9b:21:0c:fc:a2:2d:cc:fd: 52:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:B4:7D:4A:76:8F:F9:CF:2F:0B:FA:91:CF:A5:F1:C4:AA:4A:51:4B X509v3 Authority Key Identifier: keyid:98:F0:C1:11:85:ED:A5:7E:48:28:F9:C6:39:1F:20:92:3C:E4:C2:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/6trhLgajuvyuzNzevBo7Yfo1WumW6DJSWtarTxWQksHL/0/98F0C11185EDA57E4828F9C6391F20923CE4C20E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98F0C11185EDA57E4828F9C6391F20923CE4C20E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/6trhLgajuvyuzNzevBo7Yfo1WumW6DJSWtarTxWQksHL/0/98F0C11185EDA57E4828F9C6391F20923CE4C20E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:eb:bb:75:ed:d3:c1:70:13:37:fb:8b:70:67:ac:00:11:85: a6:7e:33:b7:89:ef:d3:bd:d6:59:48:16:83:dc:03:59:70:9c: 7d:e6:ed:c8:d3:a8:4d:34:85:88:70:d0:f4:24:ad:23:3c:3d: 7d:81:66:5a:a3:68:6e:55:bb:68:4a:0b:cf:a4:fb:05:31:a4: e4:31:8a:5a:2d:b7:c6:9d:25:37:cc:5c:d7:e6:c4:69:c8:0f: 86:52:f6:c1:e7:86:4c:fe:79:6e:8e:33:42:cc:60:0f:7f:52: 54:bc:e3:5a:d9:0c:ba:39:18:bf:71:9f:d5:1b:05:dc:70:8a: 99:d7:cd:37:63:dd:d3:6c:4c:47:aa:74:e9:3b:13:c1:6e:05: 1c:95:d3:97:f6:81:ed:bb:95:0b:0d:54:3f:67:e7:fd:45:d7: b4:a8:f7:76:25:c9:02:f2:62:81:cd:14:3c:30:3e:fd:e0:14: 9d:71:74:41:db:68:90:4d:2e:1a:ed:13:11:61:3f:fc:96:17: 4f:4f:d9:50:7a:8f:73:c6:0c:ba:e2:24:db:2d:22:c2:10:ea: 8c:6a:e0:a7:87:aa:50:4a:ab:bc:de:47:fe:50:93:86:44:96: 7d:9a:4c:9a:b2:f5:91:5f:e9:75:2a:6c:2d:4a:c9:5b:81:d3: 81:9f:56:74 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUPSPECJz75Uc99VfFIvCcQVvNWDswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOThGMEMxMTE4NUVEQTU3RTQ4MjhGOUM2MzkxRjIwOTIz Q0U0QzIwRTAeFw0yNjEwMjYxMjE4MzVaFw0yNjEwMjcxMzE3MzVaMDMxMTAvBgNV BAMTKDkxQjQ3RDRBNzY4RkY5Q0YyRjBCRkE5MUNGQTVGMUM0QUE0QTUxNEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5jZcJAM9NjWFZC8zx/4B0d4aF C0gna2MsafCtTR1PXyV+e00ycwSLL/SX/Jr+Akqev+0y+xx+nxK/eRI/z4Kov7AM i47c+5WN+K67II6ukR8TKGTx3zN0kmSyBjRWSUryaGLzjaPfGlAHmPRKo5otDMyS ijC6L2A7gj8TqIjzwh1qNqOqpnbXWOBWIeknIZGRi2xsYl6XBEAE7xDu8xr6HV9D L2Lxzr/TwE+cFiuMcFK4dUX5er5OrQqozdW/HvEw52hN/xgGTx/ffGZhREYP9AV1 hcMT4zL+qpKel/wtxeEU07cuaKcyTeq7yE5LIzjhXJAHzVibIQz8oi3M/VLpAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUkbR9SnaP+c8vC/qRz6XxxKpKUUswHwYDVR0j BBgwFoAUmPDBEYXtpX5IKPnGOR8gkjzkwg4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNnRyaExnYWp1dnl1ek56ZXZCbzdZZm8xV3VtVzZESlNXdGFyVHhXUWtz SEwvMC85OEYwQzExMTg1RURBNTdFNDgyOEY5QzYzOTFGMjA5MjNDRTRDMjBFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk4RjBDMTExODVFREE1N0U0 ODI4RjlDNjM5MUYyMDkyM0NFNEMyMEUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NnRyaExnYWp1dnl1ek56ZXZCbzdZZm8xV3VtVzZESlNXdGFyVHhXUWtzSEwvMC85 OEYwQzExMTg1RURBNTdFNDgyOEY5QzYzOTFGMjA5MjNDRTRDMjBFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAO+u7de3TwXATN/uLcGesABGFpn4zt4nv073WWUgWg9wDWXCcfebtyNOoTTSF iHDQ9CStIzw9fYFmWqNoblW7aEoLz6T7BTGk5DGKWi23xp0lN8xc1+bEacgPhlL2 weeGTP55bo4zQsxgD39SVLzjWtkMujkYv3Gf1RsF3HCKmdfNN2Pd02xMR6p06TsT wW4FHJXTl/aB7buVCw1UP2fn/UXXtKj3diXJAvJigc0UPDA+/eAUnXF0QdtokE0u Gu0TEWE//JYXT0/ZUHqPc8YMuuIk2y0iwhDqjGrgp4eqUEqrvN5H/lCThkSWfZpM mrL1kV/pdSpsLUrJW4HTgZ9WdA== -----END CERTIFICATE-----Generated at Tue Oct 27 00:30:56 2026 by rpki-client