$ rpki-client -vvvf rpki-repo.registro.br/repo/7oA4nKxeQSE78NrU2WortHVExRAFyiQach8c3sePF9BV/0/90D9C25BF828A5A405B5D4CFA7D1C00B131229EA.mft File: 90D9C25BF828A5A405B5D4CFA7D1C00B131229EA.mft (raw, json) Hash identifier: CIb2K/G+/aLDt2j4NDNxvODebjtwRO+NLOE8dd/Ob2w= Subject key identifier: 14:DE:A6:A1:73:D0:93:22:2C:CE:6E:59:23:A0:49:10:7F:9E:CC:88 Authority key identifier: 90:D9:C2:5B:F8:28:A5:A4:05:B5:D4:CF:A7:D1:C0:0B:13:12:29:EA Certificate issuer: /CN=90D9C25BF828A5A405B5D4CFA7D1C00B131229EA Certificate serial: 25C25D584C7ECC4716E9947B4BB25EB662294FB8 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90D9C25BF828A5A405B5D4CFA7D1C00B131229EA.cer Subject info access: rsync://rpki-repo.registro.br/repo/7oA4nKxeQSE78NrU2WortHVExRAFyiQach8c3sePF9BV/0/90D9C25BF828A5A405B5D4CFA7D1C00B131229EA.mft Manifest number: 0124 Signing time: Fri 30 Oct 2026 14:19:25 +0000 Manifest this update: Fri 30 Oct 2026 14:14:25 +0000 Manifest next update: Sat 31 Oct 2026 15:41:25 +0000 Files and hashes: 1: 3137302e3235342e3230382e302f32322d3332203d3e20323635313136.roa (hash: 6oa7qa3UPnygXI9eGdPEnJgP3eGGEzRYgMnRVAA1S/w=) 2: 323830343a333331383a3a2f33322d313238203d3e20323635313136.roa (hash: 9Dr96I3JXCXhuHRIo+b5aN8lWn+a6JPsxm+ehENJ6ds=) 3: 90D9C25BF828A5A405B5D4CFA7D1C00B131229EA.crl (hash: gTuRoiPLhgYwDKinC7bOA3DNzD8emNA2eyNe9NJ8rgo=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7oA4nKxeQSE78NrU2WortHVExRAFyiQach8c3sePF9BV/0/90D9C25BF828A5A405B5D4CFA7D1C00B131229EA.crl rsync://rpki-repo.registro.br/repo/7oA4nKxeQSE78NrU2WortHVExRAFyiQach8c3sePF9BV/0/90D9C25BF828A5A405B5D4CFA7D1C00B131229EA.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90D9C25BF828A5A405B5D4CFA7D1C00B131229EA.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 31 Oct 2026 15:41:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:c2:5d:58:4c:7e:cc:47:16:e9:94:7b:4b:b2:5e:b6:62:29:4f:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90D9C25BF828A5A405B5D4CFA7D1C00B131229EA Validity Not Before: Oct 30 14:14:25 2026 GMT Not After : Oct 31 15:41:25 2026 GMT Subject: CN=14DEA6A173D093222CCE6E5923A049107F9ECC88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:66:7a:4a:fa:f3:25:08:5d:18:4f:c4:58:bd: 9d:ca:8b:5b:a2:92:a1:8e:b6:52:29:17:0e:1a:c2: d1:b3:80:c9:af:03:2b:ba:22:bd:a2:cf:33:5d:8e: 94:ad:b1:a5:34:1b:c6:e1:c8:87:16:22:2d:be:63: 79:37:6a:c2:4b:aa:2b:e0:52:a4:77:57:ee:c1:b7: 3c:b5:e3:e4:c0:4f:9d:a0:e0:46:f1:11:2c:f4:0e: b5:83:58:2b:a6:13:fd:3b:ca:e9:bd:6d:3a:77:e1: 69:44:ce:82:e5:7b:67:1c:bd:07:3f:da:ac:85:8a: 84:59:e8:3c:49:74:fb:0c:05:97:f8:90:32:61:bf: 86:b7:55:99:e5:d7:2b:ca:28:ec:d5:76:93:a7:c5: 7b:fc:0b:6e:c1:a8:a6:af:68:15:a8:2e:e2:7d:73: 20:b1:83:02:92:62:b7:38:aa:b1:94:b9:ae:e8:b8: 54:e2:6e:5b:f0:13:82:eb:cb:bd:0b:2f:0b:ef:3f: 9f:05:30:af:cd:96:bb:66:d4:af:a3:89:f2:0b:86: 81:60:11:ed:8a:1b:00:86:35:d4:ca:e6:e6:b3:66: 67:fa:7a:eb:85:a7:58:0d:af:7e:b8:a4:6c:ce:6c: 9c:61:6c:60:e8:58:c7:e6:08:72:54:b4:4a:d0:47: 55:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:DE:A6:A1:73:D0:93:22:2C:CE:6E:59:23:A0:49:10:7F:9E:CC:88 X509v3 Authority Key Identifier: keyid:90:D9:C2:5B:F8:28:A5:A4:05:B5:D4:CF:A7:D1:C0:0B:13:12:29:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7oA4nKxeQSE78NrU2WortHVExRAFyiQach8c3sePF9BV/0/90D9C25BF828A5A405B5D4CFA7D1C00B131229EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90D9C25BF828A5A405B5D4CFA7D1C00B131229EA.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7oA4nKxeQSE78NrU2WortHVExRAFyiQach8c3sePF9BV/0/90D9C25BF828A5A405B5D4CFA7D1C00B131229EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:00:76:1d:1c:c3:3d:26:61:5c:67:ec:cf:a1:88:2f:9a:c5: 5c:db:ce:ba:dd:49:c0:77:a7:96:54:f4:27:ad:12:26:cc:75: d9:00:a4:76:45:3b:b9:8c:7a:08:28:93:ca:e8:b3:81:0b:a7: 62:8a:a8:c7:84:03:d4:1f:da:c7:53:b2:1f:6c:00:95:53:77: 74:d4:25:d4:3e:b8:fc:26:e1:ff:20:58:5f:65:6d:d9:29:d2: 2d:4a:fc:c7:95:78:32:81:b7:db:30:ef:db:1f:56:9f:a4:d9: 85:8e:53:4f:ea:8b:71:b0:71:d2:18:8f:83:62:aa:1b:9c:40: 15:60:eb:10:0f:62:0b:5a:94:4d:24:28:c8:07:27:8b:1f:d8: 44:28:d6:b3:28:11:cc:cc:28:bf:e4:95:d4:fa:48:5a:43:8c: b6:3d:e8:cf:9a:31:b7:d7:ec:b9:b5:6b:d0:51:c4:f1:f1:fd: 39:09:10:a1:94:41:94:0f:db:21:8a:0c:c1:09:97:5e:fd:3c: 62:bb:1f:bd:06:51:eb:77:dd:59:73:5b:07:e2:7a:0a:69:fe: 6d:55:d8:ec:e9:85:61:73:82:8a:46:0f:03:c2:59:e8:7f:bc: 10:7f:fb:e0:e3:7e:33:6f:46:f6:0e:78:b3:5d:54:6b:0e:a6: d9:80:03:34 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUJcJdWEx+zEcW6ZR7S7JetmIpT7gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTBEOUMyNUJGODI4QTVBNDA1QjVENENGQTdEMUMwMEIx MzEyMjlFQTAeFw0yNjEwMzAxNDE0MjVaFw0yNjEwMzExNTQxMjVaMDMxMTAvBgNV BAMTKDE0REVBNkExNzNEMDkzMjIyQ0NFNkU1OTIzQTA0OTEwN0Y5RUNDODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwZnpK+vMlCF0YT8RYvZ3Ki1ui kqGOtlIpFw4awtGzgMmvAyu6Ir2izzNdjpStsaU0G8bhyIcWIi2+Y3k3asJLqivg UqR3V+7Btzy14+TAT52g4EbxESz0DrWDWCumE/07yum9bTp34WlEzoLle2ccvQc/ 2qyFioRZ6DxJdPsMBZf4kDJhv4a3VZnl1yvKKOzVdpOnxXv8C27BqKavaBWoLuJ9 cyCxgwKSYrc4qrGUua7ouFTiblvwE4Lry70LLwvvP58FMK/Nlrtm1K+jifILhoFg Ee2KGwCGNdTK5uazZmf6euuFp1gNr364pGzObJxhbGDoWMfmCHJUtErQR1VhAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUFN6moXPQkyIszm5ZI6BJEH+ezIgwHwYDVR0j BBgwFoAUkNnCW/gopaQFtdTPp9HACxMSKeowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN29BNG5LeGVRU0U3OE5yVTJXb3J0SFZFeFJBRnlpUWFjaDhjM3NlUEY5 QlYvMC85MEQ5QzI1QkY4MjhBNUE0MDVCNUQ0Q0ZBN0QxQzAwQjEzMTIyOUVBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkwRDlDMjVCRjgyOEE1QTQw NUI1RDRDRkE3RDFDMDBCMTMxMjI5RUEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v N29BNG5LeGVRU0U3OE5yVTJXb3J0SFZFeFJBRnlpUWFjaDhjM3NlUEY5QlYvMC85 MEQ5QzI1QkY4MjhBNUE0MDVCNUQ0Q0ZBN0QxQzAwQjEzMTIyOUVBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEABAB2HRzDPSZhXGfsz6GIL5rFXNvOut1JwHenllT0J60SJsx12QCkdkU7uYx6 CCiTyuizgQunYoqox4QD1B/ax1OyH2wAlVN3dNQl1D64/Cbh/yBYX2Vt2SnSLUr8 x5V4MoG32zDv2x9Wn6TZhY5TT+qLcbBx0hiPg2KqG5xAFWDrEA9iC1qUTSQoyAcn ix/YRCjWsygRzMwov+SV1PpIWkOMtj3oz5oxt9fsubVr0FHE8fH9OQkQoZRBlA/b IYoMwQmXXv08YrsfvQZR63fdWXNbB+J6Cmn+bVXY7OmFYXOCikYPA8JZ6H+8EH/7 4ON+M29G9g54s11Uaw6m2YADNA== -----END CERTIFICATE-----Generated at Fri Oct 30 19:24:16 2026 by rpki-client