$ rpki-client -vvvf rpki-repo.registro.br/repo/CKnPxhksQHRuqgsakFRxumt4XRcgo7gQVGdSz9hTFFoq/0/7162F9F3C7B8AF4AD2D8313E9D00B32AE35D3023.mft File: 7162F9F3C7B8AF4AD2D8313E9D00B32AE35D3023.mft (raw, json) Hash identifier: tBEe7zz2bKNFZcouognfkSCSanfVCR4zuZGdpWbQSiU= Subject key identifier: 25:9B:2A:59:1F:6A:6E:A9:A3:19:ED:19:6C:F7:40:51:26:96:20:B9 Authority key identifier: 71:62:F9:F3:C7:B8:AF:4A:D2:D8:31:3E:9D:00:B3:2A:E3:5D:30:23 Certificate issuer: /CN=7162F9F3C7B8AF4AD2D8313E9D00B32AE35D3023 Certificate serial: 1368838EFF41FEE0D49AE326783F4D740B50B208 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7162F9F3C7B8AF4AD2D8313E9D00B32AE35D3023.cer Subject info access: rsync://rpki-repo.registro.br/repo/CKnPxhksQHRuqgsakFRxumt4XRcgo7gQVGdSz9hTFFoq/0/7162F9F3C7B8AF4AD2D8313E9D00B32AE35D3023.mft Manifest number: 01D8 Signing time: Mon 19 Oct 2026 20:40:04 +0000 Manifest this update: Mon 19 Oct 2026 20:35:04 +0000 Manifest next update: Wed 21 Oct 2026 00:11:04 +0000 Files and hashes: 1: 323830343a343237343a3a2f33322d3438203d3e20323637353031.roa (hash: JonEeixrrNkoT8hiNE8ChTQb3onQf2933xYdQojMfGg=) 2: 7162F9F3C7B8AF4AD2D8313E9D00B32AE35D3023.crl (hash: WYxwkDhkz1sMj34fCLxf/dMmaIWc41iFDe1n585ZqiA=) 3: 3230312e3138322e36342e302f32322d3234203d3e20323637353031.roa (hash: 8jceehO/zwDRQ/Y8Ru3ImkdpY2oyFuSlEoH5dOzI6zQ=) 4: 34352e3138332e3133322e302f32322d3234203d3e20323637353031.roa (hash: Fn6zXj7Towa1szOrpzxECqY3Zs8ZuP/8bCIbMyYjByM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CKnPxhksQHRuqgsakFRxumt4XRcgo7gQVGdSz9hTFFoq/0/7162F9F3C7B8AF4AD2D8313E9D00B32AE35D3023.crl rsync://rpki-repo.registro.br/repo/CKnPxhksQHRuqgsakFRxumt4XRcgo7gQVGdSz9hTFFoq/0/7162F9F3C7B8AF4AD2D8313E9D00B32AE35D3023.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7162F9F3C7B8AF4AD2D8313E9D00B32AE35D3023.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 21 Oct 2026 00:11:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:68:83:8e:ff:41:fe:e0:d4:9a:e3:26:78:3f:4d:74:0b:50:b2:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7162F9F3C7B8AF4AD2D8313E9D00B32AE35D3023 Validity Not Before: Oct 19 20:35:04 2026 GMT Not After : Oct 21 00:11:04 2026 GMT Subject: CN=259B2A591F6A6EA9A319ED196CF74051269620B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:55:02:40:d0:aa:6b:73:43:33:f9:6b:9d:de: fd:36:38:12:a8:32:d1:fc:8f:50:ba:f5:8e:be:e9: 35:a8:6f:6e:da:49:b5:11:5a:a0:b2:25:73:90:ea: ff:be:22:f9:bc:dc:e9:62:6f:9c:55:97:e5:e8:2b: 6c:46:0d:9c:9a:19:ed:23:7b:6c:40:cb:90:78:62: 54:5c:71:77:0b:28:82:18:81:eb:33:2a:14:0b:9f: d0:48:0e:6a:bd:79:5b:05:36:49:19:f1:a5:18:36: 8a:d8:f8:f3:f9:44:a8:e5:5a:fa:71:8d:33:8f:1a: 5d:e5:73:54:36:37:a8:b3:c3:36:a6:bc:92:49:46: f3:75:c2:37:ee:36:a8:d3:df:55:85:fb:ed:16:e9: 18:6a:f8:09:d4:ff:77:c4:27:a4:d7:13:4d:59:b3: 7d:c1:91:29:3d:89:bc:70:38:37:d1:2a:ad:17:c0: 14:53:d3:c8:ad:a4:14:94:8c:4b:fb:ae:c4:07:3d: 96:20:1c:a8:32:9a:b4:66:c6:ee:67:af:f1:7e:1c: c4:9b:38:f8:60:7c:aa:c1:f2:30:d3:e4:4d:5d:c8: d3:aa:13:c9:03:00:3a:26:8c:0f:10:ac:d9:88:26: 16:a0:d9:e5:48:71:70:a2:34:48:5e:1d:73:8b:df: ea:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:9B:2A:59:1F:6A:6E:A9:A3:19:ED:19:6C:F7:40:51:26:96:20:B9 X509v3 Authority Key Identifier: keyid:71:62:F9:F3:C7:B8:AF:4A:D2:D8:31:3E:9D:00:B3:2A:E3:5D:30:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CKnPxhksQHRuqgsakFRxumt4XRcgo7gQVGdSz9hTFFoq/0/7162F9F3C7B8AF4AD2D8313E9D00B32AE35D3023.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7162F9F3C7B8AF4AD2D8313E9D00B32AE35D3023.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CKnPxhksQHRuqgsakFRxumt4XRcgo7gQVGdSz9hTFFoq/0/7162F9F3C7B8AF4AD2D8313E9D00B32AE35D3023.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:b7:32:fb:ec:1c:91:78:b6:db:dd:3b:89:24:c0:78:39:44: 16:3c:e3:2f:35:6c:06:33:95:99:69:3c:39:74:93:c6:bc:3c: c5:1f:01:93:5c:90:14:c2:88:f7:95:17:6a:2b:a7:9b:06:4e: d8:cb:d6:b7:b2:a0:90:fe:1c:9d:03:e6:35:93:78:88:f6:6c: ee:fd:a2:10:1b:0e:2d:61:16:81:b8:c4:1c:3e:e6:84:39:04: c6:3d:1c:94:e6:aa:f3:e7:a9:ce:6f:0c:4f:2a:24:55:e2:8b: 96:ac:20:d9:1e:6b:63:84:2a:0f:d1:c0:ef:ce:67:ca:43:c9: ed:15:28:90:96:27:bb:ca:dd:2d:1f:36:6c:37:44:c9:09:94: 7b:41:be:a2:ce:f4:4c:ec:44:77:0a:c6:33:33:83:6c:c7:8e: 8e:f7:29:73:bf:20:e7:6d:62:e1:b7:ac:6b:c3:56:44:30:2a: 3a:18:8c:90:a2:05:f7:60:49:e8:b1:b7:45:45:9d:e1:44:2f: c3:a6:f8:4e:90:9c:6d:59:9b:18:85:ed:b1:30:19:60:9a:97: f5:6a:af:37:53:38:19:d2:62:89:97:d6:06:c2:ca:69:85:72: cd:18:4d:59:fd:03:10:91:5e:ec:e3:c9:49:f8:fd:e8:af:7b: fb:e3:ff:55 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUE2iDjv9B/uDUmuMmeD9NdAtQsggwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzE2MkY5RjNDN0I4QUY0QUQyRDgzMTNFOUQwMEIzMkFF MzVEMzAyMzAeFw0yNjEwMTkyMDM1MDRaFw0yNjEwMjEwMDExMDRaMDMxMTAvBgNV BAMTKDI1OUIyQTU5MUY2QTZFQTlBMzE5RUQxOTZDRjc0MDUxMjY5NjIwQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4VQJA0Kprc0Mz+Wud3v02OBKo MtH8j1C69Y6+6TWob27aSbURWqCyJXOQ6v++Ivm83Olib5xVl+XoK2xGDZyaGe0j e2xAy5B4YlRccXcLKIIYgeszKhQLn9BIDmq9eVsFNkkZ8aUYNorY+PP5RKjlWvpx jTOPGl3lc1Q2N6izwzamvJJJRvN1wjfuNqjT31WF++0W6Rhq+AnU/3fEJ6TXE01Z s33BkSk9ibxwODfRKq0XwBRT08itpBSUjEv7rsQHPZYgHKgymrRmxu5nr/F+HMSb OPhgfKrB8jDT5E1dyNOqE8kDADomjA8QrNmIJhag2eVIcXCiNEheHXOL3+rtAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUJZsqWR9qbqmjGe0ZbPdAUSaWILkwHwYDVR0j BBgwFoAUcWL588e4r0rS2DE+nQCzKuNdMCMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ0tuUHhoa3NRSFJ1cWdzYWtGUnh1bXQ0WFJjZ283Z1FWR2RTejloVEZG b3EvMC83MTYyRjlGM0M3QjhBRjRBRDJEODMxM0U5RDAwQjMyQUUzNUQzMDIzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzcxNjJGOUYzQzdCOEFGNEFE MkQ4MzEzRTlEMDBCMzJBRTM1RDMwMjMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q0tuUHhoa3NRSFJ1cWdzYWtGUnh1bXQ0WFJjZ283Z1FWR2RTejloVEZGb3EvMC83 MTYyRjlGM0M3QjhBRjRBRDJEODMxM0U5RDAwQjMyQUUzNUQzMDIzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAm7cy++wckXi22907iSTAeDlEFjzjLzVsBjOVmWk8OXSTxrw8xR8Bk1yQFMKI 95UXaiunmwZO2MvWt7KgkP4cnQPmNZN4iPZs7v2iEBsOLWEWgbjEHD7mhDkExj0c lOaq8+epzm8MTyokVeKLlqwg2R5rY4QqD9HA785nykPJ7RUokJYnu8rdLR82bDdE yQmUe0G+os70TOxEdwrGMzODbMeOjvcpc78g521i4besa8NWRDAqOhiMkKIF92BJ 6LG3RUWd4UQvw6b4TpCcbVmbGIXtsTAZYJqX9WqvN1M4GdJiiZfWBsLKaYVyzRhN Wf0DEJFe7OPJSfj96K97++P/VQ== -----END CERTIFICATE-----Generated at Tue Oct 20 08:33:25 2026 by rpki-client