$ rpki-client -vvvf rpki-repo.registro.br/repo/CBvBcK83jfKmteUZhJKqg7Ptkdx7XtNqFgDj4b4rgoix/1/A653D5055FC338B089E2C732382682788F082F11.mft File: A653D5055FC338B089E2C732382682788F082F11.mft (raw, json) Hash identifier: FpqYQr5Y4ohdixa244tOca55Z3f9xGDc6+fzG8R1MUM= Subject key identifier: C3:7F:38:48:A5:36:2D:F1:1B:F9:F4:94:47:29:9D:EB:52:CF:D0:FD Authority key identifier: A6:53:D5:05:5F:C3:38:B0:89:E2:C7:32:38:26:82:78:8F:08:2F:11 Certificate issuer: /CN=A653D5055FC338B089E2C732382682788F082F11 Certificate serial: 26C98AE1710192CEBC5EB2AC93993E6556215B72 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A653D5055FC338B089E2C732382682788F082F11.cer Subject info access: rsync://rpki-repo.registro.br/repo/CBvBcK83jfKmteUZhJKqg7Ptkdx7XtNqFgDj4b4rgoix/1/A653D5055FC338B089E2C732382682788F082F11.mft Manifest number: 04E4 Signing time: Sun 01 Nov 2026 23:39:57 +0000 Manifest this update: Sun 01 Nov 2026 23:34:57 +0000 Manifest next update: Tue 03 Nov 2026 00:12:57 +0000 Files and hashes: 1: 3137302e38312e34302e302f32322d3234203d3e20323636343030.roa (hash: SyGQEuGbpuMMAdPM+aDEtUpyIBx9bgPpackF0EiyYHY=) 2: 323830343a333734343a3a2f33322d313238203d3e20323636343030.roa (hash: lbYnRXKmnTUjhA+nAcmzKv46cEpdFXAE4Rl5JmwXVzE=) 3: 34352e3232342e3132382e302f32322d3234203d3e20323636343030.roa (hash: JZfHG4TWpEne2/1cim/ruMkXasZKNq75zP9QTA5/QY0=) 4: A653D5055FC338B089E2C732382682788F082F11.crl (hash: o+NkjtjJgYMfRulzBCHPWg44C3dCl7gR12neVylBfzA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CBvBcK83jfKmteUZhJKqg7Ptkdx7XtNqFgDj4b4rgoix/1/A653D5055FC338B089E2C732382682788F082F11.crl rsync://rpki-repo.registro.br/repo/CBvBcK83jfKmteUZhJKqg7Ptkdx7XtNqFgDj4b4rgoix/1/A653D5055FC338B089E2C732382682788F082F11.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A653D5055FC338B089E2C732382682788F082F11.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 03 Nov 2026 00:12:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:c9:8a:e1:71:01:92:ce:bc:5e:b2:ac:93:99:3e:65:56:21:5b:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A653D5055FC338B089E2C732382682788F082F11 Validity Not Before: Nov 1 23:34:57 2026 GMT Not After : Nov 3 00:12:57 2026 GMT Subject: CN=C37F3848A5362DF11BF9F49447299DEB52CFD0FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:a4:dd:bc:21:8b:31:51:0b:b0:ba:ed:ef:8b: 21:85:18:ed:91:3d:43:b0:21:3a:fc:b4:83:36:85: d3:5a:1b:d9:5d:de:17:08:41:c4:1f:05:d1:86:0f: 73:5e:c8:e5:70:3a:68:ea:c7:a8:97:cf:19:89:7d: e9:59:5b:0a:8a:7b:1a:bb:1d:4a:dd:2c:ce:b0:dc: 72:c5:8a:91:0b:9f:c3:e4:88:5c:45:40:6e:87:be: 8d:6b:d4:89:6d:a4:67:f1:d7:8f:99:21:d7:0f:d6: 26:4e:37:6a:47:b3:26:90:e9:b0:5a:48:67:ec:4c: 6e:a6:7c:4e:64:ea:bc:42:0e:cd:35:71:cc:fc:4e: 1f:60:e3:9f:9b:6b:ce:51:a7:cb:60:ee:53:7f:39: f0:1e:74:d0:0f:00:2f:8f:3a:da:41:c2:44:a2:48: 14:2a:09:36:f3:42:1a:d7:34:02:65:56:1b:8f:56: 3d:39:cb:52:d7:b2:ed:2d:ed:49:0d:79:6c:47:a1: 1b:40:8b:aa:fc:41:17:50:fc:74:20:fd:19:33:d8: 01:a5:a8:08:2f:1e:c2:37:28:ad:4e:1c:83:42:fa: e1:8d:fc:0c:00:12:17:d7:18:84:04:25:67:f8:71: 49:65:2a:3c:db:be:15:b2:0b:09:85:29:82:bb:a4: 73:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:7F:38:48:A5:36:2D:F1:1B:F9:F4:94:47:29:9D:EB:52:CF:D0:FD X509v3 Authority Key Identifier: keyid:A6:53:D5:05:5F:C3:38:B0:89:E2:C7:32:38:26:82:78:8F:08:2F:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CBvBcK83jfKmteUZhJKqg7Ptkdx7XtNqFgDj4b4rgoix/1/A653D5055FC338B089E2C732382682788F082F11.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A653D5055FC338B089E2C732382682788F082F11.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CBvBcK83jfKmteUZhJKqg7Ptkdx7XtNqFgDj4b4rgoix/1/A653D5055FC338B089E2C732382682788F082F11.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:93:45:e4:0b:e0:a5:b7:cb:c1:3c:83:d3:e0:af:5e:71:0b: 7a:80:1b:40:be:3f:72:14:39:fa:bd:e5:fe:49:aa:a5:30:a8: 5b:27:b0:21:33:3a:14:ec:86:f3:e8:44:4f:fa:2f:41:68:be: a3:94:b9:cb:7c:42:44:41:03:48:5d:d8:c9:ee:96:60:d8:66: 3f:98:d3:6d:a8:10:90:1e:c3:10:3b:9a:46:db:f2:26:00:8a: 52:87:a2:99:9d:66:7e:0b:f8:df:c9:df:fd:ce:c1:c5:51:95: d7:3f:9a:cb:7f:f8:20:50:e5:73:9e:ed:17:47:9f:dc:43:34: f6:ef:5e:8b:8f:01:ad:7e:9a:09:7b:85:c7:51:b0:33:8b:ef: 8e:8a:b4:be:3f:e7:8a:f1:12:10:79:e9:be:20:e3:1a:48:93: 98:3a:76:0f:b0:db:a0:7d:0b:65:02:05:a1:b3:f3:51:85:ae: 71:14:b7:56:02:80:63:75:21:97:31:76:45:85:e0:15:76:12: 25:d8:7a:48:38:79:1d:d6:74:57:62:17:f5:cd:1c:00:ee:8a: 11:21:66:ec:b6:d0:29:73:8d:6f:c4:bc:2b:52:47:04:45:ab: 00:23:81:0e:db:d0:19:a2:09:4a:47:a8:cc:78:5e:5a:41:0f: 91:d9:eb:ab -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUJsmK4XEBks68XrKsk5k+ZVYhW3IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTY1M0Q1MDU1RkMzMzhCMDg5RTJDNzMyMzgyNjgyNzg4 RjA4MkYxMTAeFw0yNjExMDEyMzM0NTdaFw0yNjExMDMwMDEyNTdaMDMxMTAvBgNV BAMTKEMzN0YzODQ4QTUzNjJERjExQkY5RjQ5NDQ3Mjk5REVCNTJDRkQwRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDopN28IYsxUQuwuu3viyGFGO2R PUOwITr8tIM2hdNaG9ld3hcIQcQfBdGGD3NeyOVwOmjqx6iXzxmJfelZWwqKexq7 HUrdLM6w3HLFipELn8PkiFxFQG6Hvo1r1IltpGfx14+ZIdcP1iZON2pHsyaQ6bBa SGfsTG6mfE5k6rxCDs01ccz8Th9g45+ba85Rp8tg7lN/OfAedNAPAC+POtpBwkSi SBQqCTbzQhrXNAJlVhuPVj05y1LXsu0t7UkNeWxHoRtAi6r8QRdQ/HQg/Rkz2AGl qAgvHsI3KK1OHINC+uGN/AwAEhfXGIQEJWf4cUllKjzbvhWyCwmFKYK7pHPpAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUw384SKU2LfEb+fSURymd61LP0P0wHwYDVR0j BBgwFoAUplPVBV/DOLCJ4scyOCaCeI8ILxEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ0J2QmNLODNqZkttdGVVWmhKS3FnN1B0a2R4N1h0TnFGZ0RqNGI0cmdv aXgvMS9BNjUzRDUwNTVGQzMzOEIwODlFMkM3MzIzODI2ODI3ODhGMDgyRjExLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E2NTNENTA1NUZDMzM4QjA4 OUUyQzczMjM4MjY4Mjc4OEYwODJGMTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q0J2QmNLODNqZkttdGVVWmhKS3FnN1B0a2R4N1h0TnFGZ0RqNGI0cmdvaXgvMS9B NjUzRDUwNTVGQzMzOEIwODlFMkM3MzIzODI2ODI3ODhGMDgyRjExLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlJNF5AvgpbfLwTyD0+CvXnELeoAbQL4/chQ5+r3l/kmqpTCoWyewITM6FOyG 8+hET/ovQWi+o5S5y3xCREEDSF3Yye6WYNhmP5jTbagQkB7DEDuaRtvyJgCKUoei mZ1mfgv438nf/c7BxVGV1z+ay3/4IFDlc57tF0ef3EM09u9ei48BrX6aCXuFx1Gw M4vvjoq0vj/nivESEHnpviDjGkiTmDp2D7DboH0LZQIFobPzUYWucRS3VgKAY3Uh lzF2RYXgFXYSJdh6SDh5HdZ0V2IX9c0cAO6KESFm7LbQKXONb8S8K1JHBEWrACOB DtvQGaIJSkeozHheWkEPkdnrqw== -----END CERTIFICATE-----Generated at Mon Nov 2 06:46:25 2026 by rpki-client