$ rpki-client -vvvf rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/70B9C65823B529121333565E1FBBC0AFCAA62A2F.mft File: 70B9C65823B529121333565E1FBBC0AFCAA62A2F.mft (raw, json) Hash identifier: +R16IqpeHtMYsdDdmWoz3s+sPeInEgeP8dq/8iJoR5s= Subject key identifier: 75:09:99:FC:25:5B:C8:00:80:32:F3:B9:18:D4:38:29:9D:12:CA:89 Authority key identifier: 70:B9:C6:58:23:B5:29:12:13:33:56:5E:1F:BB:C0:AF:CA:A6:2A:2F Certificate issuer: /CN=70B9C65823B529121333565E1FBBC0AFCAA62A2F Certificate serial: 4A7F978D04249E356BB924407F139BB6F41C3CD9 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70B9C65823B529121333565E1FBBC0AFCAA62A2F.cer Subject info access: rsync://rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/70B9C65823B529121333565E1FBBC0AFCAA62A2F.mft Manifest number: 021C Signing time: Tue 27 Oct 2026 06:16:46 +0000 Manifest this update: Tue 27 Oct 2026 06:11:46 +0000 Manifest next update: Wed 28 Oct 2026 08:25:46 +0000 Files and hashes: 1: 3138392e33362e3231362e302f32342d3234203d3e203238323936.roa (hash: WeU38Os0MtTK6z+8vzTuxPk/qpID6wI8V8Iz5uwouH8=) 2: 70B9C65823B529121333565E1FBBC0AFCAA62A2F.crl (hash: 0GhHDH6pbTwYe6U2SikZVNsU8EaYykLlyxs2Nnqw7lc=) 3: 3138392e33362e3232322e302f32342d3234203d3e20323634313030.roa (hash: zvT5KGyVtEEIoyifhcqhVuT8ELJHL2b8EwqGiAIWHbU=) 4: 3138392e33362e3232332e302f32342d3234203d3e203238323936.roa (hash: LrBp2ECcdjcBDX+BIz/Vea+Y6merN7CpoFAP5mTNy5o=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/70B9C65823B529121333565E1FBBC0AFCAA62A2F.crl rsync://rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/70B9C65823B529121333565E1FBBC0AFCAA62A2F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70B9C65823B529121333565E1FBBC0AFCAA62A2F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 28 Oct 2026 08:25:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:7f:97:8d:04:24:9e:35:6b:b9:24:40:7f:13:9b:b6:f4:1c:3c:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70B9C65823B529121333565E1FBBC0AFCAA62A2F Validity Not Before: Oct 27 06:11:46 2026 GMT Not After : Oct 28 08:25:46 2026 GMT Subject: CN=750999FC255BC8008032F3B918D438299D12CA89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:fc:f4:9c:ac:0e:44:90:b1:e8:13:85:1c:81: d4:50:14:e1:f1:1a:50:87:82:3b:64:62:61:83:98: ed:03:02:70:cd:ee:34:ad:c8:4f:1c:a8:37:bb:54: 3a:91:02:db:2b:15:57:0a:63:c4:b3:88:f5:58:31: 08:79:4f:2d:c1:29:d5:62:cf:7a:91:b8:dd:a8:ea: f8:91:b5:fc:81:54:65:90:86:0b:24:eb:0b:b7:92: 82:b2:e7:ec:2f:eb:97:7d:54:ff:dd:17:d8:c8:57: 02:f0:30:49:d0:0d:4d:09:54:e7:a1:5b:d6:c1:83: 75:0a:df:d2:15:3f:81:1b:e6:64:85:52:a1:8e:a5: 76:b9:1e:9a:e4:40:2a:d3:5b:2f:77:fd:e1:9b:76: e2:87:ab:73:ca:99:a0:6e:ea:0b:44:67:cd:54:7f: 7c:55:1e:2f:a5:9f:4d:86:39:2e:a0:f5:b4:7a:1e: f5:da:55:17:c6:95:b5:8a:5a:91:5d:97:06:e4:db: 7a:e9:3a:aa:f4:b8:47:12:87:72:f6:b1:cd:8f:dc: b8:94:83:b2:f5:32:aa:b1:68:8f:af:19:ef:c9:24: 14:d6:e4:ce:4f:a1:23:73:fb:ff:36:ee:6a:32:ac: 5b:98:80:1a:a3:87:2f:df:34:81:bc:a7:ab:e0:29: f3:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:09:99:FC:25:5B:C8:00:80:32:F3:B9:18:D4:38:29:9D:12:CA:89 X509v3 Authority Key Identifier: keyid:70:B9:C6:58:23:B5:29:12:13:33:56:5E:1F:BB:C0:AF:CA:A6:2A:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/70B9C65823B529121333565E1FBBC0AFCAA62A2F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70B9C65823B529121333565E1FBBC0AFCAA62A2F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/70B9C65823B529121333565E1FBBC0AFCAA62A2F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:c1:0e:de:c1:1b:2a:49:2a:4f:0c:b9:3a:11:d2:5c:f0:d0: 65:dc:a0:99:8b:56:d6:d8:0f:ab:76:7b:f0:2d:03:25:de:e9: 79:cd:25:0f:49:fb:df:90:db:11:59:82:3b:52:8f:0e:00:bc: b5:5c:28:c7:49:b0:60:a5:3e:e8:7d:3e:ad:5b:fb:1d:67:d3: c2:4f:e8:77:18:3a:97:53:73:f4:51:25:8a:47:cc:d0:b6:59: 50:29:68:9b:5c:a5:81:d0:43:3f:87:78:93:fe:db:11:d0:72: 13:69:d3:3b:3b:8f:6a:db:15:37:c3:cf:35:01:77:c6:62:0d: 88:ad:73:cd:51:cf:38:b2:68:5c:61:5a:18:22:7f:15:56:d4: ac:6c:26:b5:d4:a0:6f:31:e2:ba:d5:e3:f0:3d:11:77:b0:1f: a3:13:cf:ec:e2:be:27:4d:85:8f:40:02:a6:0b:0e:77:2d:8e: 45:96:cb:bc:43:bd:b1:1b:69:1f:f3:29:c2:66:26:21:55:5f: 3a:17:94:0a:c4:f2:8f:2d:5c:33:19:f4:cf:ba:cf:97:c3:ec: 60:ae:fb:88:27:d2:a3:1c:f2:94:9e:81:aa:f4:56:79:6a:5a: 54:02:66:cb:17:ec:18:dd:50:2a:aa:93:28:d4:1f:9a:74:3e: 8d:2e:34:d5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUSn+XjQQknjVruSRAfxObtvQcPNkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzBCOUM2NTgyM0I1MjkxMjEzMzM1NjVFMUZCQkMwQUZD QUE2MkEyRjAeFw0yNjEwMjcwNjExNDZaFw0yNjEwMjgwODI1NDZaMDMxMTAvBgNV BAMTKDc1MDk5OUZDMjU1QkM4MDA4MDMyRjNCOTE4RDQzODI5OUQxMkNBODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCW/PScrA5EkLHoE4UcgdRQFOHx GlCHgjtkYmGDmO0DAnDN7jStyE8cqDe7VDqRAtsrFVcKY8SziPVYMQh5Ty3BKdVi z3qRuN2o6viRtfyBVGWQhgsk6wu3koKy5+wv65d9VP/dF9jIVwLwMEnQDU0JVOeh W9bBg3UK39IVP4Eb5mSFUqGOpXa5HprkQCrTWy93/eGbduKHq3PKmaBu6gtEZ81U f3xVHi+ln02GOS6g9bR6HvXaVRfGlbWKWpFdlwbk23rpOqr0uEcSh3L2sc2P3LiU g7L1MqqxaI+vGe/JJBTW5M5PoSNz+/827moyrFuYgBqjhy/fNIG8p6vgKfO3AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUdQmZ/CVbyACAMvO5GNQ4KZ0SyokwHwYDVR0j BBgwFoAUcLnGWCO1KRITM1ZeH7vAr8qmKi8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQkxhS0ZwVWQ2Zm50NFBuNEFlZFpUUzg2U0pXcVZjSzFCenNUaEMyZFlo R2UvMC83MEI5QzY1ODIzQjUyOTEyMTMzMzU2NUUxRkJCQzBBRkNBQTYyQTJGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzcwQjlDNjU4MjNCNTI5MTIx MzMzNTY1RTFGQkJDMEFGQ0FBNjJBMkYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QkxhS0ZwVWQ2Zm50NFBuNEFlZFpUUzg2U0pXcVZjSzFCenNUaEMyZFloR2UvMC83 MEI5QzY1ODIzQjUyOTEyMTMzMzU2NUUxRkJCQzBBRkNBQTYyQTJGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFcEO3sEbKkkqTwy5OhHSXPDQZdygmYtW1tgPq3Z78C0DJd7pec0lD0n735Db EVmCO1KPDgC8tVwox0mwYKU+6H0+rVv7HWfTwk/odxg6l1Nz9FElikfM0LZZUClo m1ylgdBDP4d4k/7bEdByE2nTOzuPatsVN8PPNQF3xmINiK1zzVHPOLJoXGFaGCJ/ FVbUrGwmtdSgbzHiutXj8D0Rd7AfoxPP7OK+J02Fj0ACpgsOdy2ORZbLvEO9sRtp H/MpwmYmIVVfOheUCsTyjy1cMxn0z7rPl8PsYK77iCfSoxzylJ6BqvRWeWpaVAJm yxfsGN1QKqqTKNQfmnQ+jS401Q== -----END CERTIFICATE-----Generated at Tue Oct 27 18:45:17 2026 by rpki-client