$ rpki-client -vvvf rpki-repo.registro.br/repo/99HyrensjeLRR6R38hLj5MQMs2KvYvNCWFXxi9VX5xmS/0/952E367CCE60CE462735A409663E7DE3B0470E97.mft File: 952E367CCE60CE462735A409663E7DE3B0470E97.mft (raw, json) Hash identifier: fvrxcc1Xwp3cX483UzMlACy8SS55587zhMzY1Pepi5E= Subject key identifier: 7D:3A:98:A0:1A:0F:3C:FA:23:0B:61:66:4A:42:E9:BF:A8:DD:CE:56 Authority key identifier: 95:2E:36:7C:CE:60:CE:46:27:35:A4:09:66:3E:7D:E3:B0:47:0E:97 Certificate issuer: /CN=952E367CCE60CE462735A409663E7DE3B0470E97 Certificate serial: 6A099C0BB7AD33CAE945C7650EB463BE43E11084 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/952E367CCE60CE462735A409663E7DE3B0470E97.cer Subject info access: rsync://rpki-repo.registro.br/repo/99HyrensjeLRR6R38hLj5MQMs2KvYvNCWFXxi9VX5xmS/0/952E367CCE60CE462735A409663E7DE3B0470E97.mft Manifest number: 0105 Signing time: Fri 30 Oct 2026 18:34:25 +0000 Manifest this update: Fri 30 Oct 2026 18:29:25 +0000 Manifest next update: Sat 31 Oct 2026 21:20:25 +0000 Files and hashes: 1: 952E367CCE60CE462735A409663E7DE3B0470E97.crl (hash: f4sMpxC0CRFGpOno4jvzFjtvKAPd3Km6sDHXpplR8pw=) 2: 323830343a333966383a3a2f33322d313238203d3e20323636303632.roa (hash: takW0mXB06WO9vEwuFO68z+5UDiAGVideGG60HppjIA=) 3: 34352e362e3132382e302f32322d3332203d3e20323636303632.roa (hash: +QkLsURiy3BTvubhLZKKzhgordViFOx6F12ZuwuFJjg=) 4: 34352e342e3133322e302f32322d3332203d3e20323636303632.roa (hash: xQA94nCA0Qi8N28ZaHpj6C3/5aZy8e1p2I3wfeGE+ic=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/99HyrensjeLRR6R38hLj5MQMs2KvYvNCWFXxi9VX5xmS/0/952E367CCE60CE462735A409663E7DE3B0470E97.crl rsync://rpki-repo.registro.br/repo/99HyrensjeLRR6R38hLj5MQMs2KvYvNCWFXxi9VX5xmS/0/952E367CCE60CE462735A409663E7DE3B0470E97.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/952E367CCE60CE462735A409663E7DE3B0470E97.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 31 Oct 2026 21:20:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:09:9c:0b:b7:ad:33:ca:e9:45:c7:65:0e:b4:63:be:43:e1:10:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=952E367CCE60CE462735A409663E7DE3B0470E97 Validity Not Before: Oct 30 18:29:25 2026 GMT Not After : Oct 31 21:20:25 2026 GMT Subject: CN=7D3A98A01A0F3CFA230B61664A42E9BFA8DDCE56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:2a:d3:0b:1f:60:1f:a3:9f:4e:78:11:1d:8a: 2c:29:6c:ea:85:f0:5c:8e:80:6d:6a:f1:56:75:7a: 12:33:5c:93:28:ed:6e:3b:29:35:2c:5c:f8:12:70: c1:2e:11:53:f8:3e:8c:04:38:ef:92:2c:da:fe:95: ee:e4:86:c4:c8:a7:b2:11:a9:ee:4e:61:ea:2e:af: 7f:74:de:7e:f4:99:24:32:44:e6:43:d4:02:ed:41: 4e:3e:32:ca:86:ff:55:04:63:db:93:93:b9:f9:f7: 09:ac:f8:b4:f5:73:a2:64:39:ae:75:84:dd:a0:5b: 1f:85:40:52:f8:f4:20:70:df:71:ce:a8:80:9a:67: 79:ed:d5:fe:ba:a7:79:45:0e:36:b0:e1:a8:d5:8c: be:1f:bc:96:f4:02:cd:93:ed:a9:21:04:b3:56:b0: 17:28:4d:0c:1d:e3:18:68:13:b8:bc:5e:9c:61:b9: fc:f1:ac:1a:50:19:00:5e:72:a6:23:4f:72:41:15: 52:c0:be:f2:c2:9a:7c:1e:53:5e:82:17:69:f6:1e: 43:94:68:44:5d:aa:3f:d4:12:79:ad:26:11:2a:40: 5b:49:5e:ec:e4:e4:f3:bf:2d:ae:eb:81:5e:b0:b6: 5d:e2:36:7e:29:2d:ea:80:a0:e5:9b:49:59:f6:10: 54:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:3A:98:A0:1A:0F:3C:FA:23:0B:61:66:4A:42:E9:BF:A8:DD:CE:56 X509v3 Authority Key Identifier: keyid:95:2E:36:7C:CE:60:CE:46:27:35:A4:09:66:3E:7D:E3:B0:47:0E:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/99HyrensjeLRR6R38hLj5MQMs2KvYvNCWFXxi9VX5xmS/0/952E367CCE60CE462735A409663E7DE3B0470E97.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/952E367CCE60CE462735A409663E7DE3B0470E97.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/99HyrensjeLRR6R38hLj5MQMs2KvYvNCWFXxi9VX5xmS/0/952E367CCE60CE462735A409663E7DE3B0470E97.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:4e:af:46:44:37:68:8d:50:8c:a3:33:17:a9:2b:94:2c:9c: a8:3e:ac:89:2b:b4:37:24:f7:12:12:c9:cc:92:5e:28:72:07: 73:14:3b:ff:ef:17:5d:53:c7:c5:f8:1d:56:80:14:d0:68:51: 30:dc:2d:ab:48:a7:04:ca:cb:f4:6b:dc:13:e4:b0:68:90:c9: d7:57:7d:98:f7:76:19:18:5b:e1:56:5b:f5:dc:50:3a:3b:6c: b6:a1:5e:a5:98:cb:ba:5b:c6:c0:c9:4d:3a:a6:b9:33:5c:77: 5a:c6:b7:f2:71:16:f0:3c:07:14:57:4e:26:5f:05:bf:fa:05: 28:d9:9c:5e:91:6d:4a:e6:f7:2b:cc:c4:a6:f8:32:1d:a4:0c: c6:b8:b5:d9:00:6e:11:ce:56:7b:97:03:2c:10:d7:da:69:82: bb:60:18:b9:ba:73:fc:37:50:19:e3:94:01:0d:de:8e:c6:37: 97:ff:f0:11:08:15:3f:6b:ad:e8:7b:d4:71:4e:37:87:53:4f: dd:bd:7d:be:91:4b:d9:fe:01:30:09:aa:57:c9:10:1d:cf:a1: 9a:e0:62:9b:80:9a:1b:03:29:a4:bf:22:05:5a:f3:97:d1:b1: 32:1c:7a:27:f5:ad:21:26:45:6f:63:22:ac:23:fb:79:93:cd: cc:27:a3:b3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUagmcC7etM8rpRcdlDrRjvkPhEIQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTUyRTM2N0NDRTYwQ0U0NjI3MzVBNDA5NjYzRTdERTNC MDQ3MEU5NzAeFw0yNjEwMzAxODI5MjVaFw0yNjEwMzEyMTIwMjVaMDMxMTAvBgNV BAMTKDdEM0E5OEEwMUEwRjNDRkEyMzBCNjE2NjRBNDJFOUJGQThERENFNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwKtMLH2Afo59OeBEdiiwpbOqF 8FyOgG1q8VZ1ehIzXJMo7W47KTUsXPgScMEuEVP4PowEOO+SLNr+le7khsTIp7IR qe5OYeour3903n70mSQyROZD1ALtQU4+MsqG/1UEY9uTk7n59wms+LT1c6JkOa51 hN2gWx+FQFL49CBw33HOqICaZ3nt1f66p3lFDjaw4ajVjL4fvJb0As2T7akhBLNW sBcoTQwd4xhoE7i8XpxhufzxrBpQGQBecqYjT3JBFVLAvvLCmnweU16CF2n2HkOU aERdqj/UEnmtJhEqQFtJXuzk5PO/La7rgV6wtl3iNn4pLeqAoOWbSVn2EFRbAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUfTqYoBoPPPojC2FmSkLpv6jdzlYwHwYDVR0j BBgwFoAUlS42fM5gzkYnNaQJZj5947BHDpcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOTlIeXJlbnNqZUxSUjZSMzhoTGo1TVFNczJLdll2TkNXRlh4aTlWWDV4 bVMvMC85NTJFMzY3Q0NFNjBDRTQ2MjczNUE0MDk2NjNFN0RFM0IwNDcwRTk3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk1MkUzNjdDQ0U2MENFNDYy NzM1QTQwOTY2M0U3REUzQjA0NzBFOTcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OTlIeXJlbnNqZUxSUjZSMzhoTGo1TVFNczJLdll2TkNXRlh4aTlWWDV4bVMvMC85 NTJFMzY3Q0NFNjBDRTQ2MjczNUE0MDk2NjNFN0RFM0IwNDcwRTk3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgE6vRkQ3aI1QjKMzF6krlCycqD6siSu0NyT3EhLJzJJeKHIHcxQ7/+8XXVPH xfgdVoAU0GhRMNwtq0inBMrL9GvcE+SwaJDJ11d9mPd2GRhb4VZb9dxQOjtstqFe pZjLulvGwMlNOqa5M1x3Wsa38nEW8DwHFFdOJl8Fv/oFKNmcXpFtSub3K8zEpvgy HaQMxri12QBuEc5We5cDLBDX2mmCu2AYubpz/DdQGeOUAQ3ejsY3l//wEQgVP2ut 6HvUcU43h1NP3b19vpFL2f4BMAmqV8kQHc+hmuBim4CaGwMppL8iBVrzl9GxMhx6 J/WtISZFb2MirCP7eZPNzCejsw== -----END CERTIFICATE-----Generated at Sat Oct 31 06:22:56 2026 by rpki-client