$ rpki-client -vvvf rpki-repo.registro.br/repo/BABffbARumjT1SE3C8skjSJRfJPUwQxBAmYpR4Fd1NPW/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.mft File: 3625A5E1658EE4B3793ABAC01924A33E57C3FC21.mft (raw, json) Hash identifier: ryARskbCAKbBRjzjVBi5fwEk2RvG9QUnYtLeprHD/RA= Subject key identifier: A6:D5:88:32:10:E5:AF:17:69:3B:47:9D:9D:B0:A5:AB:93:A1:28:A2 Authority key identifier: 36:25:A5:E1:65:8E:E4:B3:79:3A:BA:C0:19:24:A3:3E:57:C3:FC:21 Certificate issuer: /CN=3625A5E1658EE4B3793ABAC01924A33E57C3FC21 Certificate serial: 65CFEB146D2CA499B7A9D53B66A08FED5D2C5F83 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.cer Subject info access: rsync://rpki-repo.registro.br/repo/BABffbARumjT1SE3C8skjSJRfJPUwQxBAmYpR4Fd1NPW/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.mft Manifest number: 04CC Signing time: Tue 13 Oct 2026 11:59:42 +0000 Manifest this update: Tue 13 Oct 2026 11:54:42 +0000 Manifest next update: Wed 14 Oct 2026 14:05:42 +0000 Files and hashes: 1: 323830343a386563383a3a2f33322d3438203d3e203631363136.roa (hash: p/gO23KP2b0O7OP3/L8MC9xUQzxxXrB/1E15wkUFWFU=) 2: 3625A5E1658EE4B3793ABAC01924A33E57C3FC21.crl (hash: T1BndKlPVQEMVinaOzq6dczPf+SfwZK/VNT9LDwxd2k=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BABffbARumjT1SE3C8skjSJRfJPUwQxBAmYpR4Fd1NPW/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.crl rsync://rpki-repo.registro.br/repo/BABffbARumjT1SE3C8skjSJRfJPUwQxBAmYpR4Fd1NPW/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 14 Oct 2026 14:05:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:cf:eb:14:6d:2c:a4:99:b7:a9:d5:3b:66:a0:8f:ed:5d:2c:5f:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3625A5E1658EE4B3793ABAC01924A33E57C3FC21 Validity Not Before: Oct 13 11:54:42 2026 GMT Not After : Oct 14 14:05:42 2026 GMT Subject: CN=A6D5883210E5AF17693B479D9DB0A5AB93A128A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:24:22:35:bd:ae:57:b1:87:d1:c1:d6:50:de: a0:29:7c:c2:1b:45:4d:b4:ab:86:41:c4:e0:fa:e9: fe:b1:66:66:0c:6b:b2:27:76:9f:ee:44:5c:bb:b8: 6d:a6:e2:01:5b:3a:4d:c4:69:1b:c6:17:ff:8c:9f: 09:3d:0c:db:30:cb:df:aa:06:01:45:37:14:e7:75: 01:bf:4b:c2:3c:35:7f:74:67:99:00:93:73:fc:f0: 81:10:3a:13:1b:7e:4e:f6:80:e7:21:b8:fe:90:e2: cc:19:5b:6f:8d:cd:ab:a0:ec:28:18:0f:d2:a9:b1: 30:b9:e4:65:d4:07:62:8a:3d:a7:d4:40:24:1a:f6: 7f:33:2c:04:19:0f:83:ca:cf:6c:36:39:19:56:43: a5:99:ac:81:c4:a7:32:1a:dd:b6:30:1b:ea:6c:67: 1c:d0:81:2e:75:f0:c1:9b:bf:91:70:36:fd:94:9e: 76:ae:24:fc:b6:fe:94:79:8f:e6:21:00:a2:12:53: 26:67:2f:63:b2:78:3a:26:1a:b1:d6:12:24:5e:79: 9b:7f:b7:cb:f3:50:80:6c:ae:4a:7f:d7:da:e9:1d: 7c:e1:66:ea:c3:40:55:b1:06:10:c5:85:7a:4b:93: 1c:cd:2f:04:b2:14:c3:c4:6c:82:b0:2b:d3:4a:82: 02:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:D5:88:32:10:E5:AF:17:69:3B:47:9D:9D:B0:A5:AB:93:A1:28:A2 X509v3 Authority Key Identifier: keyid:36:25:A5:E1:65:8E:E4:B3:79:3A:BA:C0:19:24:A3:3E:57:C3:FC:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BABffbARumjT1SE3C8skjSJRfJPUwQxBAmYpR4Fd1NPW/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BABffbARumjT1SE3C8skjSJRfJPUwQxBAmYpR4Fd1NPW/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:a6:ec:aa:d1:72:25:9b:90:2e:e9:98:af:1a:c4:ae:f7:60: b8:67:b6:01:78:15:d6:0e:d2:e6:1a:04:9a:ae:99:53:39:07: 1a:5e:10:57:bc:04:e8:a2:52:51:47:f7:d9:3b:ad:57:a4:33: 00:d7:a4:b1:43:f4:ad:35:72:fd:be:40:51:5f:34:a0:45:fb: 94:79:ea:df:b4:80:ed:4d:6f:d6:93:77:67:35:24:f8:b9:78: 69:7d:4e:b7:ba:2f:85:82:bb:9b:3c:41:23:5e:21:14:30:01: 46:65:01:2c:75:33:91:70:9f:b2:f1:75:91:62:9e:ff:e7:bf: 37:8f:0b:94:a7:e3:9f:48:c1:dc:29:f6:ab:e3:11:39:c6:bc: ed:37:2c:c6:16:9f:b8:5c:b8:17:eb:b6:1c:36:1e:30:4a:97: c7:4d:5e:90:28:99:b2:d4:fe:54:9c:be:c1:17:c2:da:e4:3c: c8:6b:c4:24:63:de:ac:a7:a5:fa:3d:78:c9:7e:b9:e0:b4:cc: 7c:05:c7:37:ea:e7:7c:34:69:6a:27:4c:7c:38:a9:47:03:cf: af:74:7d:88:fb:57:7e:25:6a:fe:8d:43:e0:7e:aa:40:7f:95: b7:f8:6a:47:6e:56:31:ed:dc:ff:a0:dd:a1:20:bb:a0:41:df: 7a:6e:51:14 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUZc/rFG0spJm3qdU7ZqCP7V0sX4MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzYyNUE1RTE2NThFRTRCMzc5M0FCQUMwMTkyNEEzM0U1 N0MzRkMyMTAeFw0yNjEwMTMxMTU0NDJaFw0yNjEwMTQxNDA1NDJaMDMxMTAvBgNV BAMTKEE2RDU4ODMyMTBFNUFGMTc2OTNCNDc5RDlEQjBBNUFCOTNBMTI4QTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfJCI1va5XsYfRwdZQ3qApfMIb RU20q4ZBxOD66f6xZmYMa7Indp/uRFy7uG2m4gFbOk3EaRvGF/+Mnwk9DNswy9+q BgFFNxTndQG/S8I8NX90Z5kAk3P88IEQOhMbfk72gOchuP6Q4swZW2+Nzaug7CgY D9KpsTC55GXUB2KKPafUQCQa9n8zLAQZD4PKz2w2ORlWQ6WZrIHEpzIa3bYwG+ps ZxzQgS518MGbv5FwNv2UnnauJPy2/pR5j+YhAKISUyZnL2OyeDomGrHWEiReeZt/ t8vzUIBsrkp/19rpHXzhZurDQFWxBhDFhXpLkxzNLwSyFMPEbIKwK9NKggKHAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUptWIMhDlrxdpO0ednbClq5OhKKIwHwYDVR0j BBgwFoAUNiWl4WWO5LN5OrrAGSSjPlfD/CEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQkFCZmZiQVJ1bWpUMVNFM0M4c2tqU0pSZkpQVXdReEJBbVlwUjRGZDFO UFcvMS8zNjI1QTVFMTY1OEVFNEIzNzkzQUJBQzAxOTI0QTMzRTU3QzNGQzIxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM2MjVBNUUxNjU4RUU0QjM3 OTNBQkFDMDE5MjRBMzNFNTdDM0ZDMjEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QkFCZmZiQVJ1bWpUMVNFM0M4c2tqU0pSZkpQVXdReEJBbVlwUjRGZDFOUFcvMS8z NjI1QTVFMTY1OEVFNEIzNzkzQUJBQzAxOTI0QTMzRTU3QzNGQzIxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhKbsqtFyJZuQLumYrxrErvdguGe2AXgV1g7S5hoEmq6ZUzkHGl4QV7wE6KJS UUf32TutV6QzANeksUP0rTVy/b5AUV80oEX7lHnq37SA7U1v1pN3ZzUk+Ll4aX1O t7ovhYK7mzxBI14hFDABRmUBLHUzkXCfsvF1kWKe/+e/N48LlKfjn0jB3Cn2q+MR Oca87TcsxhafuFy4F+u2HDYeMEqXx01ekCiZstT+VJy+wRfC2uQ8yGvEJGPerKel +j14yX654LTMfAXHN+rnfDRpaidMfDipRwPPr3R9iPtXfiVq/o1D4H6qQH+Vt/hq R25WMe3c/6DdoSC7oEHfem5RFA== -----END CERTIFICATE-----Generated at Tue Oct 13 23:59:23 2026 by rpki-client