$ rpki-client -vvvf rpki-repo.registro.br/repo/CdpFoea8kQYZjJhRrvWk2857X8L8TcZrfZobHeYafZK3/0/296992941BF10D571CBDC8A16F88FF51FAD9B52C.mft File: 296992941BF10D571CBDC8A16F88FF51FAD9B52C.mft (raw, json) Hash identifier: 661eIjsKdDrJz2QLXZ70cNZPEAmUIeJ9oGk+6kC5swQ= Subject key identifier: 32:EC:67:C9:88:B6:F5:0A:E7:FF:17:B2:0D:8C:B3:6C:BD:2E:EC:3F Authority key identifier: 29:69:92:94:1B:F1:0D:57:1C:BD:C8:A1:6F:88:FF:51:FA:D9:B5:2C Certificate issuer: /CN=296992941BF10D571CBDC8A16F88FF51FAD9B52C Certificate serial: 284F50C6DFD290F946BA5159BCE5A4674E6C8DC3 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/296992941BF10D571CBDC8A16F88FF51FAD9B52C.cer Subject info access: rsync://rpki-repo.registro.br/repo/CdpFoea8kQYZjJhRrvWk2857X8L8TcZrfZobHeYafZK3/0/296992941BF10D571CBDC8A16F88FF51FAD9B52C.mft Manifest number: 0219 Signing time: Wed 28 Oct 2026 10:45:45 +0000 Manifest this update: Wed 28 Oct 2026 10:40:45 +0000 Manifest next update: Thu 29 Oct 2026 12:03:45 +0000 Files and hashes: 1: 296992941BF10D571CBDC8A16F88FF51FAD9B52C.crl (hash: C+2XIpHtWxnkMvk/3NUn9k5gmjsCo0hbsukgOn3c5HM=) 2: 34352e3136372e32382e302f32322d3232203d3e20323730393330.roa (hash: CZGjzT8OSn5qHgRjps8PBAIxc72mqjCxKAaPU9uasQg=) 3: 323830343a353633303a3a2f33322d3438203d3e20323637393832.roa (hash: CiGElvWJKORgy0KDRn6GovbU0n3Th4abQMP/FO/NRe8=) 4: 34352e3136372e32382e302f32322d3234203d3e20323637393832.roa (hash: 8/VmCFkP7rVtzUqkRvtGVgstGF/aytsFpQFdq0/6DbU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CdpFoea8kQYZjJhRrvWk2857X8L8TcZrfZobHeYafZK3/0/296992941BF10D571CBDC8A16F88FF51FAD9B52C.crl rsync://rpki-repo.registro.br/repo/CdpFoea8kQYZjJhRrvWk2857X8L8TcZrfZobHeYafZK3/0/296992941BF10D571CBDC8A16F88FF51FAD9B52C.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/296992941BF10D571CBDC8A16F88FF51FAD9B52C.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 29 Oct 2026 12:03:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:4f:50:c6:df:d2:90:f9:46:ba:51:59:bc:e5:a4:67:4e:6c:8d:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=296992941BF10D571CBDC8A16F88FF51FAD9B52C Validity Not Before: Oct 28 10:40:45 2026 GMT Not After : Oct 29 12:03:45 2026 GMT Subject: CN=32EC67C988B6F50AE7FF17B20D8CB36CBD2EEC3F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:c8:6c:94:2f:10:07:23:7a:47:6a:ed:a5:3b: b0:24:6b:bb:96:d9:3d:d6:50:67:75:e2:52:2e:92: 34:24:c3:e1:c6:08:d2:8a:34:f2:24:0e:3b:ef:f2: f3:6c:be:2f:c9:5a:06:a9:ab:8b:b3:d1:0c:4e:b7: 00:9f:88:4e:21:54:40:c2:c5:9f:b7:ac:a9:c1:dc: 48:fe:06:79:7a:26:56:6b:ad:f2:fa:5d:91:f3:79: 8d:70:f8:55:02:57:31:cd:11:65:92:ed:ac:b1:f8: 4a:e5:2a:28:0d:d8:0f:db:6c:1e:f4:4e:b4:a4:cf: 7e:a0:0f:4a:20:3a:16:d1:54:48:67:8f:ab:62:cc: 21:4e:1b:96:f8:16:6f:1d:8f:e1:47:d7:ff:7a:e6: 9b:f4:5c:67:64:60:00:29:06:26:2e:fe:6c:3e:25: a8:a6:f5:22:79:65:6b:bb:e2:ca:4e:8e:41:8c:02: 97:f3:3d:7e:79:bb:71:18:8c:e1:94:d1:b2:66:25: 3a:c5:3e:fa:76:49:e4:91:66:23:3a:c7:4e:15:61: 27:53:67:34:13:f2:f7:23:14:26:de:f2:e2:74:df: fc:df:00:6c:8d:ed:fc:08:65:a9:e6:e5:53:15:89: ec:87:bd:79:49:4c:60:72:8d:cc:b8:f3:72:ad:6a: 23:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:EC:67:C9:88:B6:F5:0A:E7:FF:17:B2:0D:8C:B3:6C:BD:2E:EC:3F X509v3 Authority Key Identifier: keyid:29:69:92:94:1B:F1:0D:57:1C:BD:C8:A1:6F:88:FF:51:FA:D9:B5:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CdpFoea8kQYZjJhRrvWk2857X8L8TcZrfZobHeYafZK3/0/296992941BF10D571CBDC8A16F88FF51FAD9B52C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/296992941BF10D571CBDC8A16F88FF51FAD9B52C.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CdpFoea8kQYZjJhRrvWk2857X8L8TcZrfZobHeYafZK3/0/296992941BF10D571CBDC8A16F88FF51FAD9B52C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:71:84:7c:d2:4a:10:e8:b2:f3:de:59:75:8b:a8:03:11:0f: be:5e:59:e0:5a:54:6e:8c:16:57:88:05:21:76:c9:ed:06:9b: 49:74:f7:57:e7:b6:98:51:c0:57:f1:33:32:1b:09:a2:d6:7e: 8a:94:c5:67:28:2d:04:37:29:6d:11:fb:35:7b:9f:e8:17:4d: 90:d6:89:c6:57:fd:25:66:dd:2a:27:36:be:83:c3:ee:e5:92: eb:53:57:32:19:0a:73:3d:ae:db:f7:a2:91:05:59:0a:0c:da: db:31:c2:49:41:84:02:3e:e4:90:89:8d:22:3c:fd:ae:15:6f: cd:75:27:0f:0b:5c:ac:cb:18:8f:4c:d9:90:d5:7d:b9:cb:2a: 57:8a:c7:d3:4c:c9:cf:84:43:b0:d5:3f:3f:3b:d4:3a:a5:38: da:2d:5f:ec:fc:12:44:d4:86:b2:da:e0:1d:cf:39:1d:3a:01: 81:56:18:5b:5f:75:25:c6:a5:c0:32:d0:f0:f9:49:49:d0:1d: 8a:4b:50:c4:6f:51:ec:49:a0:fe:19:4e:54:d6:71:98:1a:e7: 24:7e:a2:26:c9:fc:97:74:27:f0:7a:5d:11:09:3e:4d:49:e9: 11:e7:2e:d7:aa:ad:34:cd:4c:ff:db:ed:0c:a9:a7:aa:a7:ea: 8e:71:6f:dc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUKE9Qxt/SkPlGulFZvOWkZ05sjcMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk2OTkyOTQxQkYxMEQ1NzFDQkRDOEExNkY4OEZGNTFG QUQ5QjUyQzAeFw0yNjEwMjgxMDQwNDVaFw0yNjEwMjkxMjAzNDVaMDMxMTAvBgNV BAMTKDMyRUM2N0M5ODhCNkY1MEFFN0ZGMTdCMjBEOENCMzZDQkQyRUVDM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVyGyULxAHI3pHau2lO7Aka7uW 2T3WUGd14lIukjQkw+HGCNKKNPIkDjvv8vNsvi/JWgapq4uz0QxOtwCfiE4hVEDC xZ+3rKnB3Ej+Bnl6JlZrrfL6XZHzeY1w+FUCVzHNEWWS7ayx+ErlKigN2A/bbB70 TrSkz36gD0ogOhbRVEhnj6tizCFOG5b4Fm8dj+FH1/965pv0XGdkYAApBiYu/mw+ Jaim9SJ5ZWu74spOjkGMApfzPX55u3EYjOGU0bJmJTrFPvp2SeSRZiM6x04VYSdT ZzQT8vcjFCbe8uJ03/zfAGyN7fwIZanm5VMVieyHvXlJTGByjcy483KtaiONAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUMuxnyYi29Qrn/xeyDYyzbL0u7D8wHwYDVR0j BBgwFoAUKWmSlBvxDVccvcihb4j/UfrZtSwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ2RwRm9lYThrUVlaakpoUnJ2V2syODU3WDhMOFRjWnJmWm9iSGVZYWZa SzMvMC8yOTY5OTI5NDFCRjEwRDU3MUNCREM4QTE2Rjg4RkY1MUZBRDlCNTJDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI5Njk5Mjk0MUJGMTBENTcx Q0JEQzhBMTZGODhGRjUxRkFEOUI1MkMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q2RwRm9lYThrUVlaakpoUnJ2V2syODU3WDhMOFRjWnJmWm9iSGVZYWZaSzMvMC8y OTY5OTI5NDFCRjEwRDU3MUNCREM4QTE2Rjg4RkY1MUZBRDlCNTJDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMHGEfNJKEOiy895ZdYuoAxEPvl5Z4FpUbowWV4gFIXbJ7QabSXT3V+e2mFHA V/EzMhsJotZ+ipTFZygtBDcpbRH7NXuf6BdNkNaJxlf9JWbdKic2voPD7uWS61NX MhkKcz2u2/eikQVZCgza2zHCSUGEAj7kkImNIjz9rhVvzXUnDwtcrMsYj0zZkNV9 ucsqV4rH00zJz4RDsNU/PzvUOqU42i1f7PwSRNSGstrgHc85HToBgVYYW191Jcal wDLQ8PlJSdAdiktQxG9R7Emg/hlOVNZxmBrnJH6iJsn8l3Qn8HpdEQk+TUnpEecu 16qtNM1M/9vtDKmnqqfqjnFv3A== -----END CERTIFICATE-----Generated at Wed Oct 28 18:20:22 2026 by rpki-client