$ rpki-client -vvvf rpki-repo.registro.br/repo/A89bSVDwNxiePN6M8BSJDHMVH3UpgYjFxRnSFZiE4kBX/0/436AE81939B23C1281E48CA5B5E8E041EAD34FDF.mft File: 436AE81939B23C1281E48CA5B5E8E041EAD34FDF.mft (raw, json) Hash identifier: 2QQzQ+076myH2t7V6QAae1CaHbvqnsjFprgZjwGX4u0= Subject key identifier: 8C:71:FD:E2:29:6D:DC:6D:BE:FF:42:4F:22:C5:C8:5F:4F:70:51:9E Authority key identifier: 43:6A:E8:19:39:B2:3C:12:81:E4:8C:A5:B5:E8:E0:41:EA:D3:4F:DF Certificate issuer: /CN=436AE81939B23C1281E48CA5B5E8E041EAD34FDF Certificate serial: 75436C28E9BB38CAAD01C41BF6ABB3D5745807 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/436AE81939B23C1281E48CA5B5E8E041EAD34FDF.cer Subject info access: rsync://rpki-repo.registro.br/repo/A89bSVDwNxiePN6M8BSJDHMVH3UpgYjFxRnSFZiE4kBX/0/436AE81939B23C1281E48CA5B5E8E041EAD34FDF.mft Manifest number: 95 Signing time: Mon 02 Nov 2026 10:58:16 +0000 Manifest this update: Mon 02 Nov 2026 10:53:16 +0000 Manifest next update: Tue 03 Nov 2026 14:02:16 +0000 Files and hashes: 1: 436AE81939B23C1281E48CA5B5E8E041EAD34FDF.crl (hash: UFMmcu0f3+TDx9w/QU5B54Mv27e8CVRWc2MyxVhVMOo=) 2: 3136382e302e3139322e302f32322d3234203d3e20323733353137.roa (hash: Mho2+k2MDZvS4oT2qvXN4rJqRyEJh5QJ3BoFjPzErtQ=) 3: 323830343a386664633a3a2f33322d3335203d3e20323733353137.roa (hash: Ihg7pkHkq4wRJxaCLlclcPVa+ekiq7W7eTaWiLRiM+0=) 4: 34352e3136312e37322e302f32322d3234203d3e20323733353137.roa (hash: V3kMZOg1dVLLK4ABzdSCepzALXFNfgVTvdsCc4EP2i4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/A89bSVDwNxiePN6M8BSJDHMVH3UpgYjFxRnSFZiE4kBX/0/436AE81939B23C1281E48CA5B5E8E041EAD34FDF.crl rsync://rpki-repo.registro.br/repo/A89bSVDwNxiePN6M8BSJDHMVH3UpgYjFxRnSFZiE4kBX/0/436AE81939B23C1281E48CA5B5E8E041EAD34FDF.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/436AE81939B23C1281E48CA5B5E8E041EAD34FDF.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 03 Nov 2026 14:02:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:43:6c:28:e9:bb:38:ca:ad:01:c4:1b:f6:ab:b3:d5:74:58:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=436AE81939B23C1281E48CA5B5E8E041EAD34FDF Validity Not Before: Nov 2 10:53:16 2026 GMT Not After : Nov 3 14:02:16 2026 GMT Subject: CN=8C71FDE2296DDC6DBEFF424F22C5C85F4F70519E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:46:de:41:e5:4a:b2:74:e3:41:8c:a4:90:32: f2:81:f5:ed:da:0e:d3:e5:4e:f4:9f:40:5f:bf:e2: d5:aa:96:62:9f:0a:be:fc:a4:ca:a9:44:7c:47:44: 77:ab:23:5c:eb:d8:f3:46:fd:69:ac:3e:79:e7:90: bb:31:15:4c:e1:34:19:f3:19:31:08:ec:23:23:be: 1c:50:14:d3:7b:d0:ad:e1:5c:3f:b7:37:dc:4a:5d: 7e:c5:3a:a8:78:50:38:c7:f6:ab:8d:f9:02:cd:70: d4:b2:7b:29:86:83:52:c8:2f:f5:94:81:58:60:28: 68:75:46:fc:bc:95:10:24:3d:02:e1:7c:cf:34:35: 26:c3:ca:72:d3:52:36:1c:6a:a4:a6:87:24:5d:48: 52:2e:bd:4a:22:75:38:78:70:a8:be:9b:4e:0c:fd: 4e:8f:56:d1:b1:26:2d:82:f6:a5:ae:ed:de:e2:e4: 2e:30:4c:f0:59:cd:94:e7:d0:97:e2:a5:fc:48:3a: 2d:79:91:e3:de:ff:06:27:e2:b9:23:b8:0d:78:a4: aa:34:4c:8c:ae:8f:23:46:dd:68:ed:a4:c7:07:96: 7a:fa:ad:ef:ed:57:81:45:fa:84:cc:a1:f7:c9:3b: e2:c5:4f:e9:a6:1b:23:82:df:32:99:b9:a2:b5:0e: 86:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:71:FD:E2:29:6D:DC:6D:BE:FF:42:4F:22:C5:C8:5F:4F:70:51:9E X509v3 Authority Key Identifier: keyid:43:6A:E8:19:39:B2:3C:12:81:E4:8C:A5:B5:E8:E0:41:EA:D3:4F:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/A89bSVDwNxiePN6M8BSJDHMVH3UpgYjFxRnSFZiE4kBX/0/436AE81939B23C1281E48CA5B5E8E041EAD34FDF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/436AE81939B23C1281E48CA5B5E8E041EAD34FDF.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/A89bSVDwNxiePN6M8BSJDHMVH3UpgYjFxRnSFZiE4kBX/0/436AE81939B23C1281E48CA5B5E8E041EAD34FDF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:fe:62:c9:8c:76:0d:ef:0f:a6:3d:74:b8:7a:67:95:d1:be: 57:ee:90:70:c8:f7:56:d9:fb:00:9b:58:8d:b3:c2:20:f5:5b: 6e:2a:0d:7c:be:37:e6:20:cf:51:c9:8a:e5:c5:95:d4:8c:d1: 2c:7b:c9:1c:9d:d8:f6:ce:67:74:ec:4c:60:ac:c8:52:6c:09: 38:3d:a9:09:a7:9d:0e:7f:dd:15:c8:ae:2c:1b:70:2a:8b:db: 5c:0f:25:91:c5:c1:09:d6:0a:81:0d:16:3b:98:ea:09:09:e1: 71:cc:a4:8a:42:df:47:58:07:2c:f1:54:2a:2b:b6:44:e3:ae: 0c:40:4f:a9:51:2a:04:b3:c1:fa:8d:8f:96:71:db:3d:e8:28: 1c:1d:78:95:ba:4d:35:93:a1:f7:7b:8a:bb:68:18:4f:bc:5d: f4:8c:0e:7b:f7:85:b4:77:28:c8:10:50:a1:cc:ff:4b:f3:ab: 5b:e8:73:26:ae:d3:3c:f6:97:52:f7:a4:1e:1f:cd:8f:2e:99: 92:0f:f5:b7:a6:3c:47:37:7f:f0:82:1c:4e:2b:8d:b9:5a:7f: b2:8a:31:a9:5b:16:0b:2d:1c:fb:4a:95:fc:bc:21:01:a6:1e: e8:91:bd:47:75:06:92:97:00:cf:0d:99:48:8e:3c:7e:43:f1: f7:1f:a5:88 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgITdUNsKOm7OMqtAcQb9quz1XRYBzANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyg0MzZBRTgxOTM5QjIzQzEyODFFNDhDQTVCNUU4RTA0MUVB RDM0RkRGMB4XDTI2MTEwMjEwNTMxNloXDTI2MTEwMzE0MDIxNlowMzExMC8GA1UE AxMoOEM3MUZERTIyOTZEREM2REJFRkY0MjRGMjJDNUM4NUY0RjcwNTE5RTCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAO9G3kHlSrJ040GMpJAy8oH17doO 0+VO9J9AX7/i1aqWYp8KvvykyqlEfEdEd6sjXOvY80b9aaw+eeeQuzEVTOE0GfMZ MQjsIyO+HFAU03vQreFcP7c33EpdfsU6qHhQOMf2q435As1w1LJ7KYaDUsgv9ZSB WGAoaHVG/LyVECQ9AuF8zzQ1JsPKctNSNhxqpKaHJF1IUi69SiJ1OHhwqL6bTgz9 To9W0bEmLYL2pa7t3uLkLjBM8FnNlOfQl+Kl/Eg6LXmR497/BifiuSO4DXikqjRM jK6PI0bdaO2kxweWevqt7+1XgUX6hMyh98k74sVP6aYbI4LfMpm5orUOhg0CAwEA AaOCAlkwggJVMB0GA1UdDgQWBBSMcf3iKW3cbb7/Qk8ixchfT3BRnjAfBgNVHSME GDAWgBRDaugZObI8EoHkjKW16OBB6tNP3zAOBgNVHQ8BAf8EBAMCB4AwgZQGA1Ud HwSBjDCBiTCBhqCBg6CBgIZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9BODliU1ZEd054aWVQTjZNOEJTSkRITVZIM1VwZ1lqRnhSblNGWmlFNGtC WC8wLzQzNkFFODE5MzlCMjNDMTI4MUU0OENBNUI1RThFMDQxRUFEMzRGREYuY3Js MHgGCCsGAQUFBwEBBGwwajBoBggrBgEFBQcwAoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNDM2QUU4MTkzOUIyM0MxMjgx RTQ4Q0E1QjVFOEUwNDFFQUQzNEZERi5jZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGK BggrBgEFBQcwC4Z+cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9B ODliU1ZEd054aWVQTjZNOEJTSkRITVZIM1VwZ1lqRnhSblNGWmlFNGtCWC8wLzQz NkFFODE5MzlCMjNDMTI4MUU0OENBNUI1RThFMDQxRUFEMzRGREYubWZ0MBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAw BgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA7/mLJjHYN7w+mPXS4emeV0b5X7pBwyPdW2fsAm1iNs8Ig9VtuKg18vjfmIM9R yYrlxZXUjNEse8kcndj2zmd07ExgrMhSbAk4PakJp50Of90VyK4sG3Aqi9tcDyWR xcEJ1gqBDRY7mOoJCeFxzKSKQt9HWAcs8VQqK7ZE464MQE+pUSoEs8H6jY+Wcds9 6CgcHXiVuk01k6H3e4q7aBhPvF30jA5794W0dyjIEFChzP9L86tb6HMmrtM89pdS 96QeH82PLpmSD/W3pjxHN3/wghxOK425Wn+yijGpWxYLLRz7SpX8vCEBph7okb1H dQaSlwDPDZlIjjx+Q/H3H6WI -----END CERTIFICATE-----Generated at Mon Nov 2 21:04:17 2026 by rpki-client